CN112423302B - Wireless network access method, terminal and wireless access equipment - Google Patents

Abstract

The invention discloses a wireless network access method, a terminal and wireless access equipment, wherein the method comprises the following steps: sending a query request to the wireless access equipment; receiving access information sent by wireless access equipment and determining an access permission state; broadcasting an access request message and transaction information in the blockchain network in response to the access grant status being unlicensed; and responding to the received access permission information sent by the wireless access equipment, and accessing the wireless access equipment according to the access permission information. The wireless access device independently distributes access permission information to the terminals, different terminals can have different access permission information, each terminal uses own access permission information instead of using a shared key to access the wireless access device, and the access permission information is not easy to attack and steal, so that the terminals can be ensured to automatically and safely access the wireless access device, and user experience is improved.

Description

Wireless network access method, terminal and wireless access equipment

Technical field

The present invention relates to the field of wireless network technology, and specifically relates to a wireless network access method, terminal and wireless access equipment.

Background technique

With the development of network technology, WiFi (Wireless Fidelity, wireless network) has been exposed to have major security vulnerabilities. The vulnerability is called "KRACK" (Key Reinstallation Attack) and covers a very wide range, affecting almost all computers, mobile phones, routers and other WiFi devices. This vulnerability can be used to monitor data transmitted through devices connected to the WiFi network. Communication, thereby stealing user privacy and hijacking client devices to phishing hotspots to achieve traffic hijacking, tampering, etc.

The KRACK vulnerability is based on the WPA2 (Wi-Fi Protected Access 2, WiFi Protected Access Version 2) confidentiality agreement. The attacker will reuse the key provided when the client device joins the WiFi network and crack the access point by reusing the key. Information exchanged with client devices, which may lead to the leakage of user privacy such as credit card passwords, chat records and other information. The key is that access to networks, especially public WiFi, is currently via shared keys, allowing wireless eavesdroppers to decrypt wireless signals.

Contents of the invention

To this end, the present invention provides a wireless network access method, terminal and wireless access equipment to solve the security problems caused by accessing public WiFi through shared keys in the prior art.

In order to achieve the above object, a first aspect of the present invention provides a wireless network access method, the method includes:

Send a query request to the wireless access device;

Receive access information sent by the wireless access device and determine the access permission status;

In response to the access permission status being unlicensed, broadcast the access request message and transaction information in the blockchain network;

In response to receiving the access permission information sent by the wireless access device, access the wireless access device according to the access permission information.

In some embodiments, after determining the access permission status, the method further includes:

In response to the access permission status being permission, obtain the access permission information from the blockchain network;

Access the wireless access device according to the access permission information.

In some embodiments, determining the access permission status includes:

Query the access permission status in the blockchain network; or receive the access permission status sent by the wireless access device.

In order to achieve the above object, a second aspect of the present invention provides a wireless network access method, the method includes:

In response to receiving the query request sent by the terminal, sending access information to the terminal;

In response to receiving the access request message and transaction information broadcast by the terminal in the blockchain network, and determining that the terminal is allowed to access, send access permission information to the terminal according to the transaction information, so that The terminal accesses the wireless access device according to the access permission information.

In some embodiments, the method further includes:

In response to receiving the access request message and transaction information broadcast by the terminal in the blockchain network, and determining that the terminal is allowed to access, broadcast access permission information in the blockchain network according to the transaction information.

In some embodiments, the method further includes:

In response to receiving the query request sent by the terminal, query the access permission status in the blockchain network, and send the access permission status to the terminal.

In order to achieve the above object, a third aspect of the present invention provides a terminal, which includes:

A sending module used to send query requests to wireless access devices;

A receiving module, configured to receive access information sent by the wireless access device; and used to receive access permission information sent by the wireless access device;

A processing module used to determine the access permission status;

A broadcast module, configured to broadcast the access request message and transaction information in the blockchain network in response to the access permission status being unlicensed;

An access module, configured to respond to the receiving module receiving the access permission information sent by the wireless access device, and access the wireless access device according to the access permission information.

In some embodiments, the terminal further includes an acquisition module configured to acquire access permission information from the blockchain network in response to the access permission status being permitted.

In some embodiments, the processing module is configured to query the blockchain network to obtain the access permission status; or to receive the access permission status sent by the wireless access device.

In order to achieve the above object, a fourth aspect of the present invention provides a wireless access device, the wireless access device includes:

A receiving module, configured to receive query requests sent by the terminal; and to receive access request messages and transaction information broadcast by the terminal in the blockchain network;

A processing module, used to determine whether to allow access to the terminal;

A sending module, configured to send access information to the terminal in response to the receiving module receiving a query request sent by the terminal; and in response to the receiving module receiving a query broadcast by the terminal in the blockchain network. access request message and transaction information, and the processing module determines that the terminal is allowed to access, and sends access permission information to the terminal according to the transaction information, so that the terminal accesses the terminal according to the access permission information. Enter this wireless access device.

The wireless network access method provided by the embodiment of the present invention sends a query request to the wireless access device, receives the access information sent by the wireless access device, and determines the access permission status. In response to the access permission status being unlicensed, The access request message and transaction information are broadcast in the blockchain network, and in response to receiving the access permission information sent by the wireless access device, the wireless access device is accessed according to the access permission information. The wireless access device issues access permission information to terminals individually. Different terminals can have different access permission information. Each terminal uses its own access permission information instead of using a shared key to access the wireless access device. Access permission information is not easily stolen by attacks, thereby ensuring that terminals automatically and securely access wireless access devices and improving user experience.

Description of the drawings

The drawings are used to provide a further understanding of the present invention and constitute a part of the specification. They are used to explain the present invention together with the following specific embodiments, but do not constitute a limitation of the present invention.

Figure 1 is a schematic flow chart 1 when the wireless network access method provided by Embodiment 1 of the present invention is applied to a terminal;

Figure 2 is a schematic flow chart 2 when the wireless network access method provided by Embodiment 2 of the present invention is applied to a terminal;

Figure 3 is a schematic flowchart when the wireless network access method provided by Embodiment 3 of the present invention is applied to wireless access equipment;

Figure 4 is a schematic structural diagram of a terminal provided in Embodiment 4 of the present invention;

Figure 5 is a schematic structural diagram of a wireless access device provided in Embodiment 5 of the present invention.

Detailed ways

In order to enable those skilled in the art to better understand the technical solutions of the present invention, the present invention will be described in further detail below in conjunction with the accompanying drawings and specific embodiments.

It can be understood that the specific embodiments and drawings described here are only used to explain the present invention, but not to limit the present invention.

It can be understood that, without conflict, the embodiments and features in the embodiments of the present invention can be combined with each other.

It can be understood that, for convenience of description, only the parts related to the present invention are shown in the drawings of the present invention, and the parts irrelevant to the present invention are not shown in the drawings.

It can be understood that each unit and module involved in the embodiments of the present invention may correspond to only one entity structure, or may be composed of multiple entity structures, or multiple units and modules may be integrated into one entity structure.

It can be understood that, provided there is no conflict, the functions and steps marked in the flowcharts and block diagrams of the present invention may occur in a sequence different from that marked in the drawings.

It can be understood that the flowcharts and block diagrams of the present invention illustrate the architecture, functions, and operations of the systems, devices, equipment, and methods that may be implemented according to various embodiments of the present invention. Each box in the flow chart or block diagram may represent a unit, module, program segment, or code, which contains executable instructions for realizing the specified function. Furthermore, each block or combination of blocks in the block diagrams and flowchart illustrations may be implemented by a hardware-based system that performs the specified functions, or by a combination of hardware and computer instructions.

It can be understood that the units and modules involved in the embodiments of the present invention can be implemented in software or hardware. For example, the units and modules can be located in a processor.

Blockchain is a decentralized database that contains a continuously growing and neatly arranged list of records called blocks. Each block contains a timestamp and a link to the previous block: Blockchains are designed so that data cannot be tampered with, and once recorded, the data in a block is irreversible. Blockchain is a new application model of computer technology such as distributed data storage, point-to-point transmission, consensus mechanism, and encryption algorithm. The so-called consensus mechanism is a mathematical algorithm that establishes trust and obtains rights and interests between different nodes in the blockchain system. Blockchain is an important concept of Bitcoin. The "2014-2016 Global Bitcoin Development Research Report" released by Huobi.com, Tsinghua University PBC School of Finance Internet Finance Laboratory and Sina Technology mentioned that blockchain is Bitcoin. The underlying technology and infrastructure of Bitcoin is essentially a decentralized database and serves as the underlying technology of Bitcoin. The blockchain is a series of data blocks generated using cryptographic methods. Each data block contains information about a Bitcoin network transaction and is used to verify the validity of the information (anti-counterfeiting) and generate the next block. In a narrow sense, blockchain is a chained data structure that combines data blocks in a sequential manner in chronological order, and is a cryptographically guaranteed distributed ledger that cannot be tampered with or forged. Broadly speaking, blockchain technology uses block chain data structures to verify and store data, uses distributed node consensus algorithms to generate and update data, uses cryptography to ensure the security of data transmission and access, and uses automated scripts to Code consists of smart contracts to program and manipulate data with a new distributed infrastructure and computing. The design of blockchain is a protection measure, such as (applied to) highly fault-tolerant distributed computing systems. Blockchain makes hybrid consistency possible. Blockchain is suitable for recording events, titles, medical records and other activities that need to include data, identity management, transaction process management and provenance management. Blockchain has huge potential for financial disintermediation and has a huge impact on leading global trade. The concept of blockchain was first proposed by Satoshi Nakamoto in 2008. In the following years, Bitcoin became the core component of electronic currency: as a public ledger of all transactions, through the use of peer-to-peer networks and distributed time Stamp servers, blockchain databases capable of autonomous management, and the blockchain invented for Bitcoin made Bitcoin the first digital currency to solve the problem of repeated consumption. Bitcoin's design has become a source of inspiration for other applications.

The wireless network access method provided by the embodiment of the present invention can be applied to a blockchain network including terminals and wireless access devices.

As shown in Figure 1, an embodiment of the present invention provides a wireless network access method. When applied to a terminal, the method may include the following steps:

Step 11: Send a query request to the wireless access device.

After moving to the physical radius covered by the wireless access device (ie, WiFi access point), the terminal can start the blockchain client APP (Application, application program) to execute the wireless network access method provided by the embodiment of the present invention. Specifically, the terminal can search for WiFi signals, select one WiFi signal from the multiple WiFi signals obtained by searching, and send a query request to the wireless access device to which the WiFi signal belongs.

Step 12: Receive the access information sent by the wireless access device and determine the access permission status.

The access information may include access rules and tariff standards. The access information is sent by the wireless access device after receiving the query request sent by the terminal.

While receiving the access information, the terminal can also determine the access permission status, that is, whether the wireless access device has allowed the terminal to access.

Step 13: In response to the access permission status being unpermitted, broadcast the access request message and transaction information in the blockchain network.

When it is determined that the wireless access device does not allow the terminal to access, it can be explained that the wireless access device has not issued access permission information to the terminal before. At this time, the terminal can use the private key signed broadcast message to send the access request message. and transaction information is broadcast to the blockchain network. The transaction information is determined by the end user based on the tariff standard sent by the wireless access device.

It should be noted that the terminal also needs to implement specific fee payment with the wireless access device through a non-blockchain network.

Step 14: In response to receiving the access permission information sent by the wireless access device, access the wireless access device according to the access permission information.

The access permission information may include a permission time period and an access key. The access permission information is encrypted and sent by the wireless access device after receiving the access request message and transaction information broadcast by the terminal using the terminal's public key.

After receiving the access permission information sent by the wireless access device, the terminal can decrypt the access permission information to obtain the permission time period and access key, and use the access key to access the wireless access device according to the permission time period.

It can be seen from the above steps 11-14 that the wireless network access method provided by the embodiment of the present invention sends a query request to the wireless access device, receives the access information sent by the wireless access device, determines the access permission status, and responds When the access permission status is unlicensed, the access request message and transaction information are broadcast in the blockchain network, and in response to receiving the access permission information sent by the wireless access device, access the wireless access device according to the access permission information. . The wireless access device issues access permission information to terminals individually. Different terminals can have different access permission information. Each terminal uses its own access permission information instead of using a shared key to access the wireless access device. Access permission information is not easily stolen by attacks, thereby ensuring that terminals automatically and securely access wireless access devices and improving user experience.

As shown in Figure 2, in some embodiments, after determining the access permission status (ie step 12), the method may further include the following steps:

Step 15: In response to the access permission status being permission, obtain the access permission information from the blockchain network.

While sending access permission information to the terminal, the wireless access device can also use the terminal's public key to encrypt the access permission information and then broadcast the encrypted access permission information to the blockchain network using a broadcast message signed by the private key. middle. Therefore, when it is determined that the wireless access device has permitted the terminal to access, it can be explained that the wireless access device has previously issued access permission information to the terminal. At this time, the terminal can directly obtain the access permission information from the blockchain network. .

Step 16: Access the wireless access device according to the access permission information.

After the terminal obtains the access permission information from the blockchain network, it can use the public key of the wireless access device to verify the signature of the access permission information. After successful verification, it can use the private key of the terminal to decrypt the access permission information to obtain License time period and access key, use the access key to access the wireless access device according to the license time period.

In some embodiments, determining the access permission status (ie step 12) may include: querying the blockchain network to obtain the access permission status; or receiving the access permission status sent by the wireless access device.

While receiving the access information, the terminal can also query the blockchain network whether the wireless access device allows the terminal to access. Alternatively, while sending access information to the terminal, the wireless access device can also query in the blockchain network whether the terminal is allowed to access, and send the access permission status obtained by the query to the terminal.

As shown in Figure 3, an embodiment of the present invention provides a wireless network access method. When applied to a wireless access device, the method may include the following steps:

Step 21: In response to receiving the query request sent by the terminal, send access information to the terminal.

The access information may include access rules and tariff standards.

Step 22: In response to receiving the access request message and transaction information broadcast by the terminal in the blockchain network, and determining that the terminal is allowed to access, send access permission information to the terminal according to the transaction information, so that the terminal can access the terminal according to the access permission. Information access wireless access equipment.

After receiving the access request message broadcast by the terminal, the wireless access device can review whether the terminal is allowed to access. After determining that the terminal is allowed to access, the wireless access device can issue access permission information to the terminal. Specifically, the wireless access device can determine the permission time period based on the transaction information broadcast by the terminal, generate a random access key, and encrypt the access permission information including the permission time period and access key using the terminal's public key. sent to the terminal.

It can be seen from the above steps 21-22 that the wireless network access method provided by the embodiment of the present invention sends access information to the terminal in response to receiving a query request sent by the terminal, and responds to receiving that the terminal is in the blockchain network. Broadcast access request message and transaction information, and determine the permitted terminal access, and send access permission information to the terminal according to the transaction information, so that the terminal accesses the wireless access device according to the access permission information, and the wireless access device separately The terminal issues access permission information. Different terminals can have different access permission information. Each terminal uses its own access permission information instead of using a shared key to access the wireless access device. This access permission information is not easily attacked. stealing, thereby ensuring that terminals automatically and securely access wireless access devices and improving user experience.

In some embodiments, the method may further include: in response to receiving the access request message and transaction information broadcast by the terminal in the blockchain network, and determining that the terminal is allowed to access, in the blockchain network according to the transaction information. Broadcast access permission information.

After receiving the access request message broadcast by the terminal, the wireless access device can review whether the terminal is allowed to access. After determining that the terminal is allowed to access, it can also use a private key signed broadcast message to encrypt the terminal's public key. Access permission information is broadcast to the blockchain network.

In some embodiments, the method may further include: in response to receiving a query request sent by the terminal, querying the blockchain network to obtain the access permission status, and sending the access permission status to the terminal.

After receiving the query request sent by the terminal, the wireless access device can also query in the blockchain network whether the terminal has been permitted to access, and send the access permission status obtained by the query to the terminal.

Based on the same technical concept, as shown in Figure 4, an embodiment of the present invention also provides a terminal, which may include:

The sending module 101 is used to send a query request to the wireless access device.

The receiving module 102 is configured to receive access information sent by the wireless access device; and used to receive access permission information sent by the wireless access device.

The processing module 103 is used to determine the access permission status.

The broadcast module 104 is configured to broadcast the access request message and transaction information in the blockchain network in response to the access permission status being unpermitted.

The access module 105 is configured to respond to the receiving module receiving the access permission information sent by the wireless access device, and access the wireless access device according to the access permission information.

In some embodiments, the terminal may further include an acquisition module, and the acquisition module is configured to acquire access permission information from the blockchain network in response to the access permission status being permitted.

In some embodiments, the processing module 103 is configured to query the blockchain network to obtain the access permission status; or, receive the access permission status sent by the wireless access device.

Based on the same technical concept, as shown in Figure 5, an embodiment of the present invention also provides a wireless access device. The wireless access device may include:

The receiving module 201 is used to receive the query request sent by the terminal; and to receive the access request message and transaction information broadcast by the terminal in the blockchain network.

The processing module 202 is used to determine whether to allow terminal access.

The sending module 203 is configured to send access information to the terminal in response to the receiving module receiving the query request sent by the terminal; and to respond to the receiving module receiving the access request message and transaction information broadcast by the terminal in the blockchain network. , and the processing module determines that the terminal is allowed to access, and sends the access permission information to the terminal according to the transaction information, so that the terminal accesses the wireless access device according to the access permission information.

In some embodiments, the wireless access device may further include a broadcast module. The broadcast module is configured to respond to the receiving module receiving the access request message and transaction information broadcast by the terminal in the blockchain network, and the processing module determines Permit terminal access and broadcast access permission information in the blockchain network based on transaction information.

In some embodiments, the wireless access device may also include a query module. The query module is configured to query the blockchain network to obtain the access permission status in response to the receiving module receiving the query request sent by the terminal;

The sending module 203 is also used to send the access permission status to the terminal.

It can be understood that the above embodiments are only exemplary embodiments adopted to illustrate the principles of the present invention, but the present invention is not limited thereto. For those of ordinary skill in the art, various modifications and improvements can be made without departing from the spirit and essence of the present invention, and these modifications and improvements are also regarded as the protection scope of the present invention.

Claims (7)

1. A wireless network access method, characterized in that, applied to a terminal, the method includes: Send a query request to the wireless access device; Receive the access information sent by the wireless access device, and determine the access permission status. The access information includes access rules and tariff standards; the determining the access permission status includes: querying in the blockchain network to obtain Access permission status; or, receive the access permission status sent by the wireless access device after querying in the blockchain network whether the terminal is allowed to access; In response to the access permission status being unlicensed, broadcast the access request message and transaction information in the blockchain network; In response to receiving the access permission information sent by the wireless access device, access the wireless access device according to the access permission information; wherein the access permission information is the response of the wireless access device to After receiving the access request message and the transaction information, and determining that the terminal is allowed to access, send access permission information to the terminal according to the transaction information; The access permission information includes a permission time period and an access key. The permission time period is determined by the wireless access device based on the transaction information broadcast by the terminal. The access key is a random access key. Key; each terminal uses its own access permission information instead of using a shared key to access the wireless access device. 2. The method according to claim 1, characterized in that after determining the access permission status, the method further includes: In response to the access permission status being permission, obtain the access permission information from the blockchain network; Access the wireless access device according to the access permission information. 3. A wireless network access method, characterized in that it is applied to wireless access equipment, and the method includes: In response to receiving the query request sent by the terminal, send access information to the terminal, where the access information includes access rules and tariff standards; In response to receiving the query request sent by the terminal, query the access permission status in the blockchain network, and send the access permission status to the terminal; In response to receiving the access request message and transaction information broadcast by the terminal in the blockchain network, and determining that the terminal is allowed to access, send access permission information to the terminal according to the transaction information, so that The terminal accesses the wireless access device according to the access permission information; wherein, in response to the access permission status being unlicensed, the terminal broadcasts the access request message and the Describe transaction information; The access permission information includes a permission time period and an access key. The permission time period is determined by the wireless access device based on the transaction information broadcast by the terminal. The access key is a random access key. Key; each terminal uses its own access permission information instead of using a shared key to access the wireless access device. 4. The method according to claim 3, characterized in that the method further includes: In response to receiving the access request message and transaction information broadcast by the terminal in the blockchain network, and determining that the terminal is allowed to access, broadcast access permission information in the blockchain network according to the transaction information. 5. A terminal, characterized in that the terminal includes: A sending module, used to send query requests to wireless access devices; A receiving module, configured to receive access information sent by the wireless access device; and to receive access permission information sent by the wireless access device; the access permission information includes a permission time period and an access key. , the permission period is determined by the wireless access device based on the transaction information broadcast by the terminal, and the access key is a random access key; each terminal uses its own access permission information instead of Use the shared key to access the wireless access device, the access information includes access rules and tariff standards, and the access permission information is the wireless access device's response to receiving the access request message and the transaction information. , and after determining that the terminal is allowed to access, send the access permission information to the terminal according to the transaction information; The processing module is used to determine the access permission status. The processing module is specifically used to: query in the blockchain network to obtain the access permission status; or, receive the wireless access device to query in the blockchain network whether the terminal is allowed to access. Access permission status sent after entry; A broadcast module, configured to broadcast the access request message and transaction information in the blockchain network in response to the access permission status being unlicensed; An access module, configured to respond to the receiving module receiving the access permission information sent by the wireless access device, and access the wireless access device according to the access permission information. 6. The terminal according to claim 5, characterized in that the terminal further includes an acquisition module, the acquisition module is configured to, in response to the access permission status being permitted, obtain the access from the blockchain network. Enter permission information. 7. A wireless access device, characterized in that the wireless access device includes: A receiving module, configured to receive query requests sent by the terminal, and also used to receive query requests sent by the terminal; and used to receive access request messages and transaction information broadcast by the terminal in the blockchain network; A processing module, used to determine whether to allow access to the terminal; A sending module, configured to send access information to the terminal in response to the receiving module receiving a query request sent by the terminal, where the access information includes access rules and tariff standards; also configured to respond to receiving the Query request sent by the terminal, query the access permission status in the blockchain network, and send the access permission status to the terminal; and be used to respond to the receiving module receiving the terminal in the block access request message and transaction information broadcast in the chain network, and the processing module determines that the terminal is allowed to access, and sends access permission information to the terminal according to the transaction information, so that the terminal can The access permission information is accessed to the wireless access device; wherein, in response to the access permission status being unlicensed, the terminal broadcasts the access request message and the transaction information in the blockchain network; The access permission information includes a permission time period and an access key. The permission time period is determined by the wireless access device based on the transaction information broadcast by the terminal. The access key is a random access key. Key; each terminal uses its own access permission information instead of using a shared key to access the wireless access device.