CN110958308B - A method for network distribution, IoT device, and access device - Google Patents
A method for network distribution, IoT device, and access device Download PDFInfo
- Publication number
- CN110958308B CN110958308B CN201911156791.6A CN201911156791A CN110958308B CN 110958308 B CN110958308 B CN 110958308B CN 201911156791 A CN201911156791 A CN 201911156791A CN 110958308 B CN110958308 B CN 110958308B
- Authority
- CN
- China
- Prior art keywords
- network
- internet
- temporary
- distribution
- equipment
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Active
Links
Images
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L67/00—Network arrangements or protocols for supporting network services or applications
- H04L67/01—Protocols
- H04L67/12—Protocols specially adapted for proprietary or special-purpose networking environments, e.g. medical networks, sensor networks, networks in vehicles or remote metering networks
- H04L67/125—Protocols specially adapted for proprietary or special-purpose networking environments, e.g. medical networks, sensor networks, networks in vehicles or remote metering networks involving control of end-device applications over a network
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L41/00—Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
- H04L41/08—Configuration management of networks or network elements
- H04L41/0803—Configuration setting
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L67/00—Network arrangements or protocols for supporting network services or applications
- H04L67/01—Protocols
- H04L67/02—Protocols based on web technology, e.g. hypertext transfer protocol [HTTP]
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
- H04L9/08—Key distribution or management, e.g. generation, sharing or updating, of cryptographic keys or passwords
- H04L9/0816—Key establishment, i.e. cryptographic processes or cryptographic protocols whereby a shared secret becomes available to two or more parties, for subsequent use
- H04L9/0819—Key transport or distribution, i.e. key establishment techniques where one party creates or otherwise obtains a secret value, and securely transfers it to the other(s)
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04W—WIRELESS COMMUNICATION NETWORKS
- H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
- H04W12/04—Key management, e.g. using generic bootstrapping architecture [GBA]
- H04W12/043—Key management, e.g. using generic bootstrapping architecture [GBA] using a trusted network node as an anchor
- H04W12/0431—Key distribution or pre-distribution; Key agreement
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04W—WIRELESS COMMUNICATION NETWORKS
- H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
- H04W12/08—Access security
- H04W12/084—Access security using delegated authorisation, e.g. open authorisation [OAuth] protocol
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04W—WIRELESS COMMUNICATION NETWORKS
- H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
- H04W12/80—Arrangements enabling lawful interception [LI]
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04W—WIRELESS COMMUNICATION NETWORKS
- H04W76/00—Connection management
- H04W76/10—Connection setup
- H04W76/14—Direct-mode setup
Landscapes
- Engineering & Computer Science (AREA)
- Computer Networks & Wireless Communication (AREA)
- Signal Processing (AREA)
- Computer Security & Cryptography (AREA)
- Technology Law (AREA)
- Health & Medical Sciences (AREA)
- Computing Systems (AREA)
- General Health & Medical Sciences (AREA)
- Medical Informatics (AREA)
- Mobile Radio Communication Systems (AREA)
Abstract
Description
技术领域technical field
本申请涉及设备配网技术领域,例如涉及一种用于配网的方法和物联设备、接入设备。The present application relates to the technical field of device distribution network, for example, to a method for network distribution, an IoT device, and an access device.
背景技术Background technique
目前,随着物联网的展,越来越多的智能家电、家居设备走进千家万户,家电厂商大都通过网关直接广播配网信息方式或已配网设备广播配网信息方式实现物联设备的配网。网关直接广播配网信息方式与路由器的WPS (WiFi Protected Setup)方式接近,区别在于Pin(Pin Input Configuration)码是空或固定的;已配网设备广播配网信息方式是先按照正常方式配网一台物联设备,然后由此物联设备广播配网信息。At present, with the development of the Internet of Things, more and more smart home appliances and home equipment have entered thousands of households. Most of the home appliance manufacturers directly broadcast the distribution network information through the gateway or the distributed network equipment broadcasts the distribution network information to realize the Internet of Things equipment. distribution network. The way the gateway directly broadcasts the network distribution information is similar to the WPS (WiFi Protected Setup) method of the router, the difference is that the Pin (Pin Input Configuration) code is empty or fixed; An IoT device, and then this IoT device broadcasts the distribution network information.
在实现本公开实施例的过程中,发现相关技术中至少存在如下问题:In the process of implementing the embodiments of the present disclosure, it is found that at least the following problems exist in the related art:
配网安全系数低:用户自己的设备可以接收配网信息,其他用户的设备同样可以接收;设备的配网过程繁琐;人工录入信息容易出错,且耗费大量人力物力,更带来了极差的用户配网体验。Low security factor of distribution network: users’ own equipment can receive distribution network information, and other users’ equipment can also receive it; the process of equipment distribution network is cumbersome; manual input of information is prone to errors, and consumes a lot of manpower and material resources, which brings extremely poor User distribution network experience.
发明内容SUMMARY OF THE INVENTION
为了对披露的实施例的一些方面有基本的理解,下面给出了简单的概括。概括不是泛泛评述,也不是要确定关键/重要组成元素或描绘这些实施例的保护范围,而是作为后面的详细说明的序言。In order to provide a basic understanding of some aspects of the disclosed embodiments, a brief summary is given below. This summary is not intended to be a general commentary, nor to identify key/critical elements or delineate the scope of protection of these embodiments, but rather to serve as a prelude to the detailed description that follows.
本公开实施例提供了一种用于配网的方法和物联设备、接入设备,以解决物联设备配网流程复杂的技术问题。The embodiments of the present disclosure provide a method for network distribution, an IoT device, and an access device, so as to solve the technical problem of complex network distribution process of the IoT device.
在一些实施例中,所述配网的方法,用于物联设备,包括:In some embodiments, the method for distributing a network, for an IoT device, includes:
与接入设备进行正向临时配网,并与所述接入设备交换密钥;Perform forward temporary network configuration with the access device, and exchange keys with the access device;
在所述接入设备断开正向临时配网后,与所述接入设备进行反向临时配网;After the access device disconnects the forward temporary network configuration, perform reverse temporary network configuration with the access device;
获得用户授权后,接收所述接入设备发送的配网信息,并通过所述密钥对配网信息进行解密,与所述接入设备进行正式配网。After obtaining user authorization, the network configuration information sent by the access device is received, and the network configuration information is decrypted by the key, and the network configuration is formally performed with the access device.
在一些实施例中,所述配网的方法,用于接入设备,包括:In some embodiments, the method for network distribution, for access equipment, includes:
与所述物联设备进行正向临时配网,并与所述物联设备交换密钥;Perform forward temporary network distribution with the IoT device, and exchange keys with the IoT device;
断开与所述物联设备的正向临时配网;Disconnect the forward temporary distribution network with the IoT device;
与所述物联设备进行反向临时配网;Perform reverse temporary network distribution with the IoT device;
所述物联设备获得用户授权后,通过所述密钥对配网信息进行加密并将其发送给所述物联设备,与所述物联设备进行正式配网。After the IoT device is authorized by the user, the network configuration information is encrypted by the key and sent to the IoT device for formal network configuration with the IoT device.
在一些实施例中,所述物联设备包括第一处理器和存储有程序指令的第一存储器,所述第一处理器被配置为在执行所述程序指令时,执行上述的用于物联设备的配网的方法。In some embodiments, the IoT device includes a first processor and a first memory storing program instructions, and the first processor is configured to, when executing the program instructions, execute the above-described method for IoT The method of network distribution of equipment.
在一些实施例中,所述接入设备包括第二处理器和存储有程序指令的第二存储器,所述第二处理器被配置为在执行所述程序指令时,执行上述的用于接入设备的配网的方法。In some embodiments, the access device includes a second processor and a second memory storing program instructions, the second processor is configured to, when executing the program instructions, execute the above-described method for accessing The method of network distribution of equipment.
本公开实施例提供的一种用于配网的方法和接入设备、物联设备,可以实现以下技术效果:通过物联设备与接入设备之间建立的临时配网,提供接入设备与物联设备一对一的通信;在物联设备获得用户的授权后,可实现自动与接入设备的正式配网,从而解决物联设备配网复杂的问题,实现免输入正式配网信息。The method for network distribution, the access device, and the IoT device provided by the embodiments of the present disclosure can achieve the following technical effects: through the temporary distribution network established between the IoT device and the access device, the access device and the access device are provided with One-to-one communication between IoT devices; after the IoT device is authorized by the user, it can automatically realize the formal distribution network with the access device, thus solving the complex problem of IoT device distribution network and realizing the need to avoid input of formal distribution network information.
以上的总体描述和下文中的描述仅是示例性和解释性的,不用于限制本申请。The foregoing general description and the following description are exemplary and explanatory only and are not intended to limit the application.
附图说明Description of drawings
一个或多个实施例通过与之对应的附图进行示例性说明,这些示例性说明和附图并不构成对实施例的限定,附图中具有相同参考数字标号的元件示为类似的元件,附图不构成比例限制,并且其中:One or more embodiments are exemplified by the accompanying drawings, which are not intended to limit the embodiments, and elements with the same reference numerals in the drawings are shown as similar elements, The drawings do not constitute a limitation of scale, and in which:
图1是本公开实施例提供的一种用于配网的方法,用于物联设备的配网方法流程图;FIG. 1 is a flow chart of a method for network distribution provided by an embodiment of the present disclosure, and a method for network distribution of IoT devices;
图2是本公开实施例提供的一种用于配网的方法,用于接入设备的配网方法流程图;Fig. 2 is a method for network distribution provided by an embodiment of the present disclosure, a flow chart of the method for network distribution of an access device;
图3是本公开实施例提供的一种WiFi设备的临时配网流程图;3 is a flow chart of a temporary network distribution of a WiFi device provided by an embodiment of the present disclosure;
图4是本公开实施例提供的一种WiFi设备用户端授权流程图;4 is a flowchart of a WiFi device client authorization provided by an embodiment of the present disclosure;
图5是本公开实施例提供的一种WiFi设备正式配网流程图;FIG. 5 is a flow chart of formal network distribution of a WiFi device provided by an embodiment of the present disclosure;
图6本公开实施例提供的一种物联设备示意图;FIG. 6 is a schematic diagram of an IoT device provided by an embodiment of the present disclosure;
图7本公开实施例提供的一种接入设备示意图。FIG. 7 is a schematic diagram of an access device provided by an embodiment of the present disclosure.
具体实施方式Detailed ways
为了能够更加详尽地了解本公开实施例的特点与技术内容,下面结合附图对本公开实施例的实现进行详细阐述,所附附图仅供参考说明之用,并非用来限定本公开实施例。在以下的技术描述中,为方便解释起见,通过多个细节以提供对所披露实施例的充分理解。然而,在没有这些细节的情况下,一个或多个实施例仍然可以实施。在其它情况下,为简化附图,熟知的结构和装置可以简化展示。In order to understand the features and technical contents of the embodiments of the present disclosure in more detail, the implementation of the embodiments of the present disclosure will be described in detail below with reference to the accompanying drawings, which are for reference only and are not intended to limit the embodiments of the present disclosure. In the following technical description, for the convenience of explanation, numerous details are provided to provide a thorough understanding of the disclosed embodiments. However, one or more embodiments may be practiced without these details. In other instances, well-known structures and devices may be shown simplified in order to simplify the drawings.
本公开实施例提供了一种用于配网的方法,用于物联设备,如图1所示为用于物联设备的配网方法流程图,包括:An embodiment of the present disclosure provides a method for network distribution, which is used for IoT devices. FIG. 1 is a flowchart of a network distribution method for IoT devices, including:
步骤S101.与接入设备进行正向临时配网,并与接入设备交换密钥;Step S101. Perform forward temporary network configuration with the access device, and exchange keys with the access device;
步骤S102.在接入设备断开正向临时配网后,与接入设备进行反向临时配网;Step S102. After the access device disconnects the forward temporary network configuration, perform reverse temporary network configuration with the access device;
步骤S103.获得用户授权后,接收接入设备发送的配网信息,并通过密钥对配网信息进行解密,与接入设备进行正式配网。Step S103. After obtaining the user authorization, receive the network configuration information sent by the access device, decrypt the network configuration information through the key, and perform formal network configuration with the access device.
在一些实施例中,进入软接入点SoftAP模式后与所述接入设备进行正向临时配网。In some embodiments, forward temporary network configuration is performed with the access device after entering the SoftAP mode of the soft access point.
在一些实施例中,在所述接入设备断开正向临时配网后,还包括:退出SoftAP模式。In some embodiments, after the access device disconnects the forward temporary network configuration, the method further includes: exiting the SoftAP mode.
在一些实施例中,与接入设备进行正向临时配网,包括:发射无线信号;在接收到所述接入设备发出的临时配网请求后进行正向临时配网。In some embodiments, performing forward temporary network configuration with an access device includes: transmitting a wireless signal; and performing forward temporary network configuration after receiving a temporary network configuration request sent by the access device.
在一些实施例中,与所述接入设备进行反向临时配网,包括:发送临时配网请求给所述接入设备建立反向临时配网。In some embodiments, performing reverse temporary network configuration with the access device includes: sending a temporary network configuration request to the access device to establish reverse temporary network configuration.
本公开实施例提供了一种用于配网的方法,用于接入设备,如图2所示为用于接入设备的配网方法流程图,包括:An embodiment of the present disclosure provides a method for network distribution, which is used for an access device. FIG. 2 is a flowchart of a network distribution method for an access device, including:
步骤S201.与所述物联设备进行正向临时配网,并与所述物联设备交换密钥;Step S201. Perform forward temporary network distribution with the IoT device, and exchange keys with the IoT device;
步骤S202.断开与所述物联设备的正向临时配网;Step S202. Disconnect the forward temporary distribution network with the IoT device;
步骤S203.与所述物联设备进行反向临时配网;Step S203. Perform reverse temporary network distribution with the IoT device;
步骤S204.所述物联设备获得用户授权后,通过所述密钥对配网信息进行加密并将其发送给所述物联设备,与所述物联设备进行正式配网。Step S204. After the IoT device obtains the authorization from the user, the network configuration information is encrypted by the key and sent to the IoT device for formal network configuration with the IoT device.
在一些实施例中,用于接入设备的配网的方法,还包括:接收对物联设备的授权信息。In some embodiments, the method for accessing a device's network configuration further includes: receiving authorization information for the IoT device.
在一些实施例中,接收对物联设备的授权信息,包括:接收授权页面显示请求;在处于广播状态下,拦截授权页面显示请求;否则,触发用户端显示授权页面;接收用户端发出的对物联设备的授权信息。In some embodiments, receiving authorization information for the IoT device includes: receiving an authorization page display request; in a broadcast state, intercepting the authorization page display request; otherwise, triggering the client to display the authorization page; Authorization information for IoT devices.
在一些实施例中,与接入设备进行正向临时配网,包括:检测到所述物联设备发出的无线信号;发送临时配网请求给所述物联设备进行正向临时配网。In some embodiments, performing forward temporary network configuration with an access device includes: detecting a wireless signal sent by the IoT device; and sending a temporary network configuration request to the IoT device for forward temporary network configuration.
在一些实施例中,与所述接入设备进行反向临时配网,包括:在接收到所述物联设备发出的临时配网请求后进行反向临时配网。In some embodiments, performing reverse temporary network configuration with the access device includes: performing reverse temporary network configuration after receiving a temporary network configuration request sent by the IoT device.
用于接入设备的配网的方法,还包括:对临时配网时间进行计时,当计时到达设定阈值时,退出临时配网。The method for network distribution of access equipment further includes: timing the temporary distribution network time, and exiting the temporary distribution network when the timer reaches a set threshold.
在一些实施例中,用于接入设备的配网的方法,还包括:当有物联设备接入时,对临时配网时间重新计时。In some embodiments, the method for network configuration of an access device further includes: when an IoT device is connected, re-timing the temporary network configuration time.
根据上述实施例中用于配网的方法可知,本公开实施例提供配网的方法能够通过物联设备与接入设备之间建立的临时配网,提供接入设备与物联设备一对一的通信;在物联设备获得用户的授权后,可实现自动与接入设备的正式配网,从而解决物联设备配网复杂的问题,实现免输入正式配网信息。According to the method for network distribution in the above embodiments, the method for network distribution provided by the embodiments of the present disclosure can provide a one-to-one connection between the access device and the IoT device through the temporary distribution network established between the IoT device and the access device. After the IoT device is authorized by the user, it can realize the formal network distribution automatically with the access device, so as to solve the complex problem of the IoT device distribution network and realize the free input of formal network distribution information.
在一些实施例中,用于配网的接入设备为连接物联设备的热点(AP, AccessPoint)设备,用于配网的物联设备为包含有无线保真(WiFi, Wireless Fidelity)模块的WiFi设备;为了AP设备可同时作为客户端连接到WiFi设备的软件接入点(SoftAP,SoftwareAccess Point),AP设备支持站点(STA,Station)/AP混杂模式。如图3所示,为WiFi设备的临时配网流程图,包括:In some embodiments, the access device used for network distribution is a hotspot (AP, AccessPoint) device connected to the IoT device, and the IoT device used for network distribution is a wireless fidelity (WiFi, Wireless Fidelity) module. WiFi device; In order for the AP device to be connected to the software access point (SoftAP, Software Access Point) of the WiFi device as a client at the same time, the AP device supports the station (STA, Station)/AP hybrid mode. As shown in Figure 3, it is a flow chart of temporary network distribution for WiFi devices, including:
步骤S301.AP设备进入STA/AP混杂模式,扫描WiFi设备AP;Step S301. The AP device enters the STA/AP promiscuous mode and scans the WiFi device AP;
步骤S302.用户操作WiFi设备进入配网状态;Step S302. The user operates the WiFi device to enter the network configuration state;
步骤S303.WiFi设备进入SoftAp模式,发射无线信号;Step S303. The WiFi device enters the SoftAp mode and transmits wireless signals;
步骤S304.AP设备发现WiFi设备SoftAp,即发现WiFi设备无线信号;Step S304. The AP device discovers the WiFi device SoftAp, that is, discovers the wireless signal of the WiFi device;
步骤S305.AP设备连接WiFi设备AP网络,即AP设备与WiFi设备进行正向临时配网;Step S305. The AP device is connected to the WiFi device AP network, that is, the AP device and the WiFi device perform forward temporary network configuration;
步骤S306.AP设备与WiFi设备正向临时配网成功后,传递AP设备的密钥KEY给WiFi设备;Step S306. After the AP device and the WiFi device are successfully provisioned in the forward direction, pass the key KEY of the AP device to the WiFi device;
步骤S307.WiFi设备接收AP设备的密钥并传递WiFi设备的密钥KEY 给AP设备;Step S307. The WiFi device receives the key of the AP device and transmits the key of the WiFi device to the AP device;
步骤S308.AP设备接收WiFi设备的密钥,发送带密文的临时配网的服务集标识(SSID,Service Set Identifier)及密码给WiFi设备;Step S308. The AP device receives the key of the WiFi device, and sends the temporary network configuration service set identifier (SSID, Service Set Identifier) and password with ciphertext to the WiFi device;
步骤S309.AP设备断开与WiFi设备的正向临时配网(即AP连接);Step S309. The AP device disconnects the forward temporary distribution network with the WiFi device (that is, the AP connection);
步骤S310.WiFi设备与接入设备进行反向临时配网,即WiFi设备连接 AP;Step S310. The WiFi device and the access device perform reverse temporary network configuration, that is, the WiFi device is connected to the AP;
步骤S311.WiFi设备退出临时配网状态。Step S311. The WiFi device exits the temporary network configuration state.
用于配网的接入设备,对配网时间进行计时:当计时到达设定设定阈值时,退出配网模式。设定第一阈 值为K,单位为秒,AP设备在进入配网状后,计时器T开始计时,当计时大于K时退出配网状态;在计时过程中,每当有新的临时配网WiFi设备接入AP设备时,重置计时器T,重新计时。当有用户打开设置页面后,计时器T暂停计时,直至全部页面关闭。The access device used for the distribution network times the distribution network time: when the timer reaches the set threshold, it exits the distribution network mode. Set the first threshold as K, in seconds. After the AP device enters the distribution network, the timer T starts to count, and when the timer exceeds K, it exits the distribution network state; during the timing process, whenever there is a new temporary distribution network When the WiFi device is connected to the AP device, reset the timer T and re-time. When a user opens the setting page, the timer T pauses until all pages are closed.
通过WiFi设备与AP设备之间建立的临时配网,提供WiFi设备与AP 设备之间的一对一通信,临时配网建立后,双方互相交换密钥,用作正式配网时报文加密使用。临时配网是WiFi设备与AP设备建立连接,此时WiFi 设备虽然是连接在AP设备上,但其只能与AP设备本体通信,无法给其他终端(无论是内网还是外网)收发任何数据。Through the temporary distribution network established between the WiFi device and the AP device, one-to-one communication between the WiFi device and the AP device is provided. After the temporary distribution network is established, the two parties exchange keys with each other, which is used to encrypt messages during the official network distribution. Temporary network configuration is the establishment of a connection between the WiFi device and the AP device. At this time, although the WiFi device is connected to the AP device, it can only communicate with the AP device itself, and cannot send and receive any data to other terminals (whether it is an internal network or an external network). .
如图4所示,为WiFi设备用户授权流程图,包括:As shown in Figure 4, the authorization flow chart for WiFi device users includes:
步骤S401.用户打开浏览器访问任意网站;Step S401. The user opens a browser to visit any website;
步骤S402.通过浏览器发送超文本传输协议(HTTP,HyperText TransferProtocol)请求给AP设备;Step S402. send a hypertext transfer protocol (HTTP, HyperText TransferProtocol) request to the AP device through the browser;
步骤S403.若AP设备在广播状态,AP设备则拦截HTTP请求;Step S403. If the AP device is in a broadcast state, the AP device intercepts the HTTP request;
步骤S404.AP设备返回WiFi设备授权页面给浏览器;Step S404. The AP device returns the WiFi device authorization page to the browser;
步骤S405.浏览器显示授权页面;Step S405. The browser displays the authorization page;
步骤S406.用户点选授权按钮;Step S406. The user clicks the authorization button;
步骤S407.浏览器发送授权信息给AP设备。Step S407. The browser sends authorization information to the AP device.
在WiFi设备与AP设备建立临时配网后,用户可以获知这个AP设备有哪些候选WiFi设备,并设置哪些设备可以与AP设备建立正式连接,从而完成候选设备的入网授权。即:WiFi设备与AP设备建立临时配网后,用户端获取已与AP设备建立临时配网的WiFi设备的信息,并根据需求自主选择所需的WiFi设备与AP设备建立正式连接;用户端获取WiFi设备的信息的接口为HTTP页面的方式。采用HTTP页面的方式通用性强,用户通过手机、个人计算机(PC,personal computer)操作起来都方面,没有学习成本,厂家无需投入太多开发成本。After the WiFi device and the AP device establish a temporary network configuration, the user can know which candidate WiFi devices this AP device has, and set which devices can establish a formal connection with the AP device, so as to complete the network access authorization of the candidate device. That is: after the WiFi device and the AP device establish a temporary network configuration, the client obtains the information of the WiFi device that has established a temporary network configuration with the AP device, and independently selects the required WiFi device according to the needs to establish a formal connection with the AP device; the client obtains The interface of WiFi device information is in the form of HTTP page. The method of using HTTP pages is highly versatile, and users can operate it through mobile phones and personal computers (PC, personal computer), without learning costs, and manufacturers do not need to invest too much development costs.
可选的,用户端获取WiFi设备的信息的接口为自定义通信协议,并以应用程序(APP,Application)作为用户入口。Optionally, the interface through which the user terminal obtains the information of the WiFi device is a custom communication protocol, and an application (APP, Application) is used as the user entrance.
可选地,用户通过手机、个人计算机(PC,personal computer)。Optionally, the user uses a mobile phone or a personal computer (PC, personal computer).
如图5所示,为WiFi设备正式配网的流程图,包括:As shown in Figure 5, the flow chart of the official network configuration for WiFi devices, including:
步骤S501.浏览器发送授权信息给AP设备;Step S501. The browser sends authorization information to the AP device;
步骤S502.AP设备接收用户端发送的授权信息,并发送正式配网信息给WiFi设备,正式配网信息为带密文的正式配网信息;Step S502. The AP device receives the authorization information sent by the client, and sends the official network configuration information to the WiFi device, where the official network configuration information is the official network configuration information with ciphertext;
步骤S503.WiFi设备接收AP设备发送的带密文的正式配网信息,并发送带密文的确认字符(ACK,Acknowledge character)给AP设备;Step S503. The WiFi device receives the official network distribution information with ciphertext sent by the AP device, and sends an acknowledgment character (ACK, Acknowledge character) with the ciphertext to the AP device;
步骤S504.执行正式配网,配网完成;Step S504. Execute the formal distribution network, and the distribution network is completed;
步骤S505.AP设备接收WiFi设备发送的带密文的确认字符,并返回授权成功信息给浏览器;Step S505. The AP device receives the confirmation character with ciphertext sent by the WiFi device, and returns the authorization success information to the browser;
步骤S506.浏览器显示授权成功页面信息。Step S506. The browser displays the authorization success page information.
对于加密环节,WiFi设备与AP设备是明文相互传递的密钥key,加密key可视为双方的公钥,加密手段采取对称加密的方式,加密算法采用互联网常用的安全套接层(SSL,Secure Sockets Layer)加密算法。For the encryption link, the WiFi device and the AP device are the key keys that are transmitted to each other in plain text. The encryption key can be regarded as the public key of both parties. The encryption method adopts the symmetric encryption method. Layer) encryption algorithm.
可选的,加密方法采用非对称安全套接层(SSL,Secure Sockets Layer)加密方式。Optionally, the encryption method adopts an asymmetric Secure Sockets Layer (SSL, Secure Sockets Layer) encryption method.
可选的,HTTP页面包含手动退出配网模式的入口,可选的,手动退出配网模式的入口设置为按钮。Optionally, the HTTP page includes an entry for manually exiting the network configuration mode, and optionally, the entry for manually exiting the network configuration mode is set as a button.
本公开实施例中,通过临时配网的方式,建立WiFi设备与AP设备的初步通信机制,采用AP设备接入到WiFi设备的SoftAP到普通AP设备临时配网再到正式配网的方式,两者的传输方式由临时的明文广播转换到密文直连的方式,即保证建立通信的便利性,也兼顾配网的安全性;采取HTTP 拦截的方式,只要AP设备处在配网模式,所有经过AP设备的HTTP请求都会拦截,并在浏览器上显示WiFi设备配网的授权页面;临时配网的收尾环节,双方交换密钥KEY,实现后续的正式配网信息的加密;AP设备的配网模式会在一定时间内退出。In the embodiment of the present disclosure, a preliminary communication mechanism between the WiFi device and the AP device is established by means of temporary network distribution, and the AP device is connected to the SoftAP of the WiFi device, and the ordinary AP device is temporarily assigned to the network, and then to the formal network. The transmission mode is changed from temporary plaintext broadcast to ciphertext direct connection, which ensures the convenience of establishing communication and also takes into account the security of the distribution network; HTTP interception is adopted, as long as the AP device is in the distribution network mode, all The HTTP request through the AP device will be intercepted, and the authorization page of the WiFi device network configuration will be displayed on the browser; at the end of the temporary network configuration, the two parties exchange the KEY to realize the encryption of the subsequent official network configuration information; the configuration of the AP device The network mode will exit within a certain period of time.
本公开实施例提供了一种物联设备,其结构如图6所示,该设备包括第一处理器(processor)100和存储有程序指令的第一存储器(memory) 101,还可以包括第一通信接口(Communication Interface)102和第一总线103。其中,第一处理器100、第一通信接口102、第一存储器101可以通过第一总线103完成相互间的通信。第一通信接口102可以用于信息传输。第一处理器100可以调用第一存储器101中的逻辑指令,第一处理器被配置为在执行程序指令时,执行上述实施例的用于物联设备的配网方法。An embodiment of the present disclosure provides an IoT device, the structure of which is shown in FIG. 6 , the device includes a first processor (processor) 100 and a first memory (memory) 101 storing program instructions, and may also include a first A communication interface (Communication Interface) 102 and a
本公开实施例提供了一种接入设备,其结构如图7所示,该设备包括第二处理器(processor)200和存储有程序指令的第二存储器(memory) 201,还可以包括第二通信接口(Communication Interface)202和第二总线203。其中,第二处理器200、第二通信接口202、第二存储器201可以通过第二总线203完成相互间的通信。第二通信接口202可以用于信息传输。第二处理器200可以调用第二存储器201中的逻辑指令,第二处理器被配置为在执行程序指令时,执行上述实施例用于接入设备的配网方法。An embodiment of the present disclosure provides an access device, whose structure is shown in FIG. 7 , the device includes a second processor (processor) 200 and a second memory (memory) 201 storing program instructions, and may also include a second processor (processor) 200 and a second memory (memory) 201 storing program instructions. A communication interface (Communication Interface) 202 and a
此外,上述的第一存储器101和第二存储器201中的逻辑指令可以通过软件功能单元的形式实现并作为独立的产品销售或使用时,可以分别存储在计算机可读取存储介质中。In addition, the above-mentioned logic instructions in the
第一存储器101和第二存储器201作为一种计算机可读存储介质,可用于存储软件程序、计算机可执行程序,如本公开实施例中的方法对应的程序指令/模块。第一存储器101通过运行存储在第一存储器101中的软件程序、指令以及模块,从而执行功能应用以及数据处理,即实现上述方法实施例中的用于物联设备的配网方法;第二存储器201通过运行存储在第二存储器201中的软件程序、指令以及模块,从而执行功能应用以及数据处理,即实现上述方法实施例中的用于接入设备的配网方法。As a computer-readable storage medium, the
第一存储器101可包括第一存储程序区和第一存储数据区,其中,第一存储程序区可存储第一操作系统、至少一个功能所需的第一应用程序;第一存储数据区可存储根据移动终端的使用所创建的第一数据等。第二存储器201可包括第二存储程序区和第二存储数据区,其中,第二存储程序区可存储第二操作系统、至少一个功能所需的第二应用程序;第二存储数据区可存储根据移动终端的使用所创建的第二数据等。The
此外,第一存储器101、第二存储器201可以包括高速随机存取存储器,还可以包括非易失性存储器。In addition, the
根据上述实施例中的物联设备与接入设备可知,通过物联设备与接入设备之间建立的临时配网,提供接入设备与物联设备一对一的通信;在物联设备获得用户的授权后,可实现自动与接入设备的正式配网,从而解决物联设备配网复杂的问题,实现免输入正式配网信息。According to the IoT device and the access device in the above embodiment, the temporary distribution network established between the IoT device and the access device provides one-to-one communication between the access device and the IoT device; After the user's authorization, the formal network distribution can be realized automatically with the access device, so as to solve the complex problem of the Internet of Things device distribution network, and realize the need to avoid entering the formal distribution network information.
本公开实施例提供了一种计算机可读存储介质,存储有计算机可执行指令,计算机可执行指令设置为执行上述用于配网的方法。An embodiment of the present disclosure provides a computer-readable storage medium storing computer-executable instructions, where the computer-executable instructions are configured to execute the foregoing method for network distribution.
本公开实施例提供了一种计算机程序产品,计算机程序产品包括存储在计算机可读存储介质上的计算机程序,计算机程序包括程序指令,当程序指令被计算机执行时,使计算机执行上述用于配网的方法。An embodiment of the present disclosure provides a computer program product, the computer program product includes a computer program stored on a computer-readable storage medium, the computer program includes program instructions, and when the program instructions are executed by a computer, the computer is made to execute the above-mentioned application for network distribution. Methods.
上述的计算机可读存储介质可以是暂态计算机可读存储介质,也可以是非暂态计算机可读存储介质。The above-mentioned computer-readable storage medium may be a transient computer-readable storage medium, and may also be a non-transitory computer-readable storage medium.
本公开实施例的技术方案可以以软件产品的形式体现出来,该计算机软件产品存储在一个存储介质中,包括一个或多个指令用以使得一台计算机设备(可以是个人计算机,服务器,或者网络设备等)执行本公开实施例的方法的全部或部分步骤。而前述的存储介质可以是非暂态存储介质,包括:U盘、移动硬盘、只读存储器(ROM,Read-Only Memory)、随机存取存储器(RAM,Random Access Memory)、磁碟或者光盘等多种可以存储程序代码的介质,也可以是暂态存储介质。The technical solutions of the embodiments of the present disclosure may be embodied in the form of software products, and the computer software products are stored in a storage medium and include one or more instructions to enable a computer device (which may be a personal computer, a server, or a network equipment, etc.) to execute all or part of the steps of the methods of the embodiments of the present disclosure. The aforementioned storage medium may be a non-transitory storage medium, including: U disk, removable hard disk, Read-Only Memory (ROM, Read-Only Memory), Random Access Memory (RAM, Random Access Memory), magnetic disk or optical disk, etc. A medium that can store program codes, and can also be a transient storage medium.
以上描述和附图充分地示出了本公开的实施例,以使本领域的技术人员能够实践它们。其他实施例可以包括结构的、逻辑的、电气的、过程的以及其他的改变。实施例仅代表可能的变化。除非明确要求,否则单独的部件和功能是可选的,并且操作的顺序可以变化。一些实施例的部分和特征可以被包括在或替换其他实施例的部分和特征。本公开实施例的范围包括权利要求书的整个范围,以及权利要求书的所有可获得的等同物。当用于本申请中时,虽然术语“第一”、“第二”等可能会在本申请中使用以描述各元件,但这些元件不应受到这些术语的限制。这些术语仅用于将一个元件与另一个元件区别开。比如,在不改变描述的含义的情况下,第一元件可以叫做第二元件,并且同样第,第二元件可以叫做第一元件,只要所有出现的“第一元件”一致重命名并且所有出现的“第二元件”一致重命名即可。第一元件和第二元件都是元件,但可以不是相同的元件。而且,本申请中使用的用词仅用于描述实施例并且不用于限制权利要求。如在实施例以及权利要求的描述中使用的,除非上下文清楚地表明,否则单数形式的“一个”(a)、“一个”(an)和“所述”(the)旨在同样包括复数形式。类似地,如在本申请中所使用的术语“和/或”是指包含一个或一个以上相关联的列出的任何以及所有可能的组合。另外,当用于本申请中时,术语“包括”(comprise)及其变型“包括”(comprises)和/或包括(comprising)等指陈述的特征、整体、步骤、操作、元素,和/或组件的存在,但不排除一个或一个以上其它特征、整体、步骤、操作、元素、组件和/或这些的分组的存在或添加。在没有更多限制的情况下,由语句“包括一个…”限定的要素,并不排除在包括要素的过程、方法或者设备中还存在另外的相同要素。本文中,每个实施例重点说明的可以是与其他实施例的不同之处,各个实施例之间相同相似部分可以互相参见。对于实施例公开的方法、产品等而言,如果其与实施例公开的方法部分相对应,那么相关之处可以参见方法部分的描述。The foregoing description and drawings sufficiently illustrate the embodiments of the present disclosure to enable those skilled in the art to practice them. Other embodiments may include structural, logical, electrical, process, and other changes. The examples represent only possible variations. Unless expressly required, individual components and functions are optional and the order of operations may vary. Portions and features of some embodiments may be included in or substituted for those of other embodiments. The scope of the disclosed embodiments includes the full scope of the claims, along with all available equivalents of the claims. When used in this application, although the terms "first," "second," etc. may be used in this application to describe various elements, these elements should not be limited by these terms. These terms are only used to distinguish one element from another. For example, without changing the meaning of the description, a first element could be termed a second element, and similarly, a second element could be termed a first element, so long as all occurrences of "the first element" were consistently renamed and all occurrences of "the first element" were named consistently The "second element" can be renamed consistently. The first element and the second element are both elements, but may not be the same element. Also, the terms used in this application are used to describe the embodiments only and not to limit the claims. As used in the description of the embodiments and the claims, the singular forms "a" (a), "an" (an) and "the" (the) are intended to include the plural forms as well, unless the context clearly dictates otherwise. . Similarly, the term "and/or" as used in this application is meant to include any and all possible combinations of one or more of the associated listings. Additionally, when used in this application, the term "comprise" and its variations "comprises" and/or including and/or the like refer to stated features, integers, steps, operations, elements, and/or The presence of a component does not preclude the presence or addition of one or more other features, integers, steps, operations, elements, components and/or groupings of these. Without further limitation, an element qualified by the phrase "comprising a..." does not preclude the presence of additional identical elements in the process, method, or device that includes the element. Herein, each embodiment may focus on the differences from other embodiments, and the same and similar parts between the various embodiments may refer to each other. For the methods, products, etc. disclosed in the embodiments, if they correspond to the method section disclosed in the embodiments, reference may be made to the description of the method section for relevant parts.
本领域技术人员可以意识到,结合本文中所公开的实施例描述的各示例的单元及算法步骤,能够以电子硬件、或者计算机软件和电子硬件的结合来实现。这些功能究竟以硬件还是软件方式来执行,可以取决于技术方案的特定应用和设计约束条件。技术人员可以对每个特定的应用来使用不同方法以实现所描述的功能,但是这种实现不应认为超出本公开实施例的范围。技术人员可以清楚地了解到,为描述的方便和简洁,上述描述的系统、装置和单元的具体工作过程,可以参考前述方法实施例中的对应过程,在此不再赘述。Those skilled in the art can realize that the units and algorithm steps of each example described in conjunction with the embodiments disclosed herein can be implemented by electronic hardware, or a combination of computer software and electronic hardware. Whether these functions are performed in hardware or software may depend on the specific application and design constraints of the technical solution. Skilled artisans may use different methods for implementing the described functionality for each particular application, but such implementations should not be considered beyond the scope of the disclosed embodiments. A skilled person can clearly understand that, for the convenience and brevity of description, for the specific working process of the above-described systems, devices and units, reference may be made to the corresponding processes in the foregoing method embodiments, which will not be repeated here.
本文所披露的实施例中,所揭露的方法、产品(包括但不限于装置、设备等),可以通过其它的方式实现。例如,以上所描述的装置实施例仅仅是示意性的,例如,单元的划分,可以仅仅为一种逻辑功能划分,实际实现时可以有另外的划分方式,例如多个单元或组件可以结合或者可以集成到另一个系统,或一些特征可以忽略,或不执行。另外,所显示或讨论的相互之间的耦合或直接耦合或通信连接可以是通过一些接口,装置或单元的间接耦合或通信连接,可以是电性,机械或其它的形式。作为分离部件说明的单元可以是或者也可以不是物理上分开的,作为单元显示的部件可以是或者也可以不是物理单元,即可以位于一个地方,或者也可以分布到多个网络单元上。可以根据实际的需要选择其中的部分或者全部单元来实现本实施例。另外,在本公开实施例中的各功能单元可以集成在一个处理单元中,也可以是各个单元单独物理存在,也可以两个或两个以上单元集成在一个单元中。In the embodiments disclosed herein, the disclosed methods and products (including but not limited to apparatuses, devices, etc.) may be implemented in other ways. For example, the apparatus embodiments described above are only illustrative. For example, the division of units may only be a logical function division. In actual implementation, there may be other division methods. For example, multiple units or components may be combined or may be Integration into another system, or some features can be ignored, or not implemented. In addition, the shown or discussed mutual coupling or direct coupling or communication connection may be through some interfaces, indirect coupling or communication connection of devices or units, and may be in electrical, mechanical or other forms. Units described as separate components may or may not be physically separated, and components shown as units may or may not be physical units, that is, may be located in one place, or may be distributed to multiple network units. This embodiment may be implemented by selecting some or all of the units according to actual needs. In addition, each functional unit in the embodiment of the present disclosure may be integrated into one processing unit, or each unit may exist physically alone, or two or more units may be integrated into one unit.
附图中的流程图和框图显示了根据本公开实施例的系统、方法和计算机程序产品的可能实现的体系架构、功能和操作。在这点上,流程图或框图中的每个方框可以代表一个模块、程序段或代码的一部分,模块、程序段或代码的一部分包含一个或多个用于实现规定的逻辑功能的可执行指令。在有些作为替换的实现中,方框中所标注的功能也可以以不同于附图中所标注的顺序发生。例如,两个连续的方框实际上可以基本并行地执行,它们有时也可以按相反的顺序执行,这可以依所涉及的功能而定。在附图中的流程图和框图所对应的描述中,不同的方框所对应的操作或步骤也可以以不同于描述中所披露的顺序发生,有时不同的操作或步骤之间不存在特定的顺序。例如,两个连续的操作或步骤实际上可以基本并行地执行,它们有时也可以按相反的顺序执行,这可以依所涉及的功能而定。框图和/或流程图中的每个方框、以及框图和/或流程图中的方框的组合,可以用执行规定的功能或动作的专用的基于硬件的系统来实现,或者可以用专用硬件与计算机指令的组合来实现。The flowchart and block diagrams in the Figures illustrate the architecture, functionality, and operation of possible implementations of systems, methods and computer program products according to embodiments of the present disclosure. In this regard, each block in the flowchart or block diagrams may represent a module, segment, or portion of code, which comprises one or more executables for implementing the specified logical function(s) instruction. In some alternative implementations, the functions noted in the blocks may occur out of the order noted in the figures. For example, two blocks in succession may, in fact, be executed substantially concurrently, or the blocks may sometimes be executed in the reverse order, depending upon the functionality involved. In the descriptions corresponding to the flowcharts and block diagrams in the accompanying drawings, operations or steps corresponding to different blocks may also occur in different sequences than those disclosed in the description, and sometimes there is no specific relationship between different operations or steps. order. For example, two consecutive operations or steps may, in fact, be performed substantially concurrently, or they may sometimes be performed in the reverse order, depending upon the functionality involved. Each block of the block diagrams and/or flowchart illustrations, and combinations of blocks in the block diagrams and/or flowchart illustrations, can be implemented in special purpose hardware-based systems that perform the specified functions or actions, or special purpose hardware implemented in combination with computer instructions.
Claims (12)
Priority Applications (1)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
CN201911156791.6A CN110958308B (en) | 2019-11-22 | 2019-11-22 | A method for network distribution, IoT device, and access device |
Applications Claiming Priority (1)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
CN201911156791.6A CN110958308B (en) | 2019-11-22 | 2019-11-22 | A method for network distribution, IoT device, and access device |
Publications (2)
Publication Number | Publication Date |
---|---|
CN110958308A CN110958308A (en) | 2020-04-03 |
CN110958308B true CN110958308B (en) | 2022-08-02 |
Family
ID=69978136
Family Applications (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
CN201911156791.6A Active CN110958308B (en) | 2019-11-22 | 2019-11-22 | A method for network distribution, IoT device, and access device |
Country Status (1)
Country | Link |
---|---|
CN (1) | CN110958308B (en) |
Families Citing this family (3)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
CN113872779A (en) * | 2020-06-30 | 2021-12-31 | 广东美的制冷设备有限公司 | Household appliance and network distribution method, system, device and storage medium thereof |
CN114338356B (en) * | 2020-09-29 | 2023-07-28 | 华为技术有限公司 | Network repairing method, electronic equipment and mobile equipment |
CN112512064B (en) * | 2020-12-02 | 2024-02-13 | 普联技术有限公司 | Wireless distribution network method, wireless gateway and equipment to be accessed |
Citations (3)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
CN107645725A (en) * | 2017-09-21 | 2018-01-30 | 广东美的制冷设备有限公司 | Network collocating method and system, routing device and log equipment |
CN109245885A (en) * | 2018-11-02 | 2019-01-18 | 美的集团股份有限公司 | Cryptographic key negotiation method, equipment, storage medium and system |
CN109890029A (en) * | 2019-01-29 | 2019-06-14 | 珠海迈科智能科技股份有限公司 | A kind of intelligent wireless device matches network method automatically |
Family Cites Families (1)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US8856290B2 (en) * | 2011-10-24 | 2014-10-07 | General Instrument Corporation | Method and apparatus for exchanging configuration information in a wireless local area network |
-
2019
- 2019-11-22 CN CN201911156791.6A patent/CN110958308B/en active Active
Patent Citations (3)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
CN107645725A (en) * | 2017-09-21 | 2018-01-30 | 广东美的制冷设备有限公司 | Network collocating method and system, routing device and log equipment |
CN109245885A (en) * | 2018-11-02 | 2019-01-18 | 美的集团股份有限公司 | Cryptographic key negotiation method, equipment, storage medium and system |
CN109890029A (en) * | 2019-01-29 | 2019-06-14 | 珠海迈科智能科技股份有限公司 | A kind of intelligent wireless device matches network method automatically |
Also Published As
Publication number | Publication date |
---|---|
CN110958308A (en) | 2020-04-03 |
Similar Documents
Publication | Publication Date | Title |
---|---|---|
AU2017423732B2 (en) | Network security management method, and apparatus | |
US20230033598A1 (en) | Network key processing method and system and related device | |
KR100520116B1 (en) | A method for discributing the key to mutual nodes to code a key on mobile ad-hoc network and network device using thereof | |
JP5792263B2 (en) | Video display terminal, video transmission terminal, video communication system, video display method, video transmission method, and program | |
CN100411374C (en) | Wireless communication system, communication device, communication controlling method, and communication control program | |
WO2017041675A1 (en) | Method for sending and acquiring wifi networking information and corresponding apparatus | |
CN106455001A (en) | Method and device for configuring WIFI module | |
CN103945369A (en) | Internet access configuration method for WIFI device by checking length of WIFI data packets | |
EP3817502A2 (en) | Methods and apparatuses for handling a ue that is in the idle state | |
CN110958308B (en) | A method for network distribution, IoT device, and access device | |
CN103581901A (en) | Method and device for processing Wi-Fi wireless network access configuration information | |
CN106302391A (en) | A kind of enciphered data transmission method and proxy server | |
WO2016008344A1 (en) | Wireless connection establishing methods and wireless connection establishing apparatuses | |
US20180262352A1 (en) | Secure Authentication of Remote Equipment | |
WO2017133021A1 (en) | Security processing method and relevant device | |
CN109361655A (en) | A security protection method and device | |
WO2015164999A1 (en) | Virtual card downloading method, terminal and intermediate device | |
CN113923655B (en) | Data decryption receiving method and device based on adjacent nodes | |
CN112566113A (en) | Key generation and terminal network distribution method, device and equipment | |
WO2018166338A1 (en) | Key update method and apparatus | |
CN108156604B (en) | Group calling encryption transmission method and device of cluster system, cluster terminal and system | |
CN113301563A (en) | Network configuration method, device, equipment and storage medium | |
CN108882233B (en) | An IMSI encryption method, core network and user terminal | |
WO2012026932A1 (en) | Method and apparatus for over-the-air configuration of a wireless device | |
CN110890982B (en) | Method for distribution network, access equipment and Internet of things equipment |
Legal Events
Date | Code | Title | Description |
---|---|---|---|
PB01 | Publication | ||
PB01 | Publication | ||
SE01 | Entry into force of request for substantive examination | ||
SE01 | Entry into force of request for substantive examination | ||
GR01 | Patent grant | ||
GR01 | Patent grant |