CN114567462A - Network access authentication method including software compatibility check and system thereof - Google Patents

Abstract

The present invention relates to a network access authentication method including software compatibility check and a system thereof. The method includes the following software compatibility check steps: S1. A slave terminal establishes a connection with an aggregation node, and sends a software version number of the slave terminal to the aggregation node to request software Compatibility check; S2, the sink node performs software compatibility check; S3, the sink node allows the subordinate terminals that pass the software compatibility check to access the network and perform subsequent business operations; or S4, the sink node rejects the slave terminals that fail the software compatibility check to access the network and Prompt to upgrade the software to the current software version number of the sink node. The beneficial effect is to prevent software incompatible equipment from being connected to the system and ensure the stable operation of the system.

Description

A network access authentication method and system including software compatibility check

【Technical field】

The invention relates to the technical field of computer networks, in particular to a network access authentication method including software compatibility check and a system thereof.

【Background technique】

The general network access authentication local area network system includes two roles: the aggregation node and several subordinate terminals; the subordinate terminals need to go to the aggregation node for network access legality authentication to prevent illegal terminals from accessing the system, which will affect the security and stability of the system. In the current network access authentication application scenario, the main participants have two roles of slave terminal and aggregation node. The slave terminals actively connect to the sink node through wireless communication, and one sink node can accommodate multiple slave terminals. However, the slave terminals connected to the system at the same time may have multiple similar product models, and the number of products of each model varies, and the products are loaded with different versions of software released at different times.

In the existing network access authentication system, the MAC, ID and other legality verification checks are generally performed only when the slave terminal establishes a connection with the aggregation node, so as to prevent illegal devices from accessing the system. However, the matching and compatibility checking rules for software versions are relatively few. Existing solutions for compatibility generally determine compatibility by checking the version number of software communication protocols, and improve software’s compatibility with historical software versions and subsequent software versions in software development and design. Software version compatibility.

It is a necessary operation to improve the compatibility in software development and design, but in actual production and deployment, due to various reasons, these methods cannot adapt to and avoid all compatibility problems.

The software communication protocol version number is compatible, which can only ensure normal communication, but cannot guarantee that the other functions of the two versions of the sink node and the slave terminal are compatible. Therefore, the aforementioned checking of the software communication protocol version number to determine the compatibility has limitations.

Improve the compatibility of the software to the previous historical software version and the subsequent software version, but there are also thresholds and restrictions for improving the compatibility. It is impossible to be compatible upwards or downwards without limitation and scope. When it involves relatively large demand changes, the software functions are relatively poor. Major changes, or because of multiple inventory turnovers, the software versions of slave terminals and aggregation nodes are quite different during field deployment. Under this circumstance, the existing solution of "improving the compatibility of software with historical software versions and subsequent software versions in software development and design" cannot avoid the huge challenge to system stability caused by the version compatibility problem.

However, the software compatibility problem is common in the actual deployment process when the requirements change greatly or the product life cycle is relatively long. In addition, the software compatibility problem is also hidden. Once the compatibility problem occurs, it will cause great damage to the system. adverse effects and damage.

Aiming at the technical problem of software version compatibility, the present invention improves the network access authentication technology including the slave terminal and the convergence node.

[Content of the Invention]

The purpose of the present invention is to provide a network access authentication method that avoids software incompatible equipment from accessing the system and ensures stable operation of the system.

In order to achieve the above object, the technical solution adopted by the present invention is a network access authentication method including software compatibility check, which runs on a network access authentication system including software compatibility check, and the network access authentication system includes an aggregation node and an access point. into the local area network composed of several subordinate terminals of the aggregation node; including the following software compatibility check steps:

S1. The slave terminal establishes a connection with the sink node, and sends the software version number of the slave terminal to the sink node to request software compatibility check;

S2, the aggregation node performs software compatibility check;

S3. The aggregation node allows the subordinate terminals that have passed the software compatibility check to access the network and perform subsequent business operations;

Or S4, the sink node rejects the slave terminal that fails the software compatibility check to access the network and prompts to upgrade the software to the current software version number of the sink node.

Preferably, the above-mentioned network access authentication method including software compatibility check further includes a general network access authentication step: when the slave terminal establishes a connection with the aggregation node, MAC and ID validity check is performed.

Preferably, in the above-mentioned network access authentication method including software compatibility check, step S2 allows and supports the software compatibility check exemption function for facilitating external third parties to access the slave terminal, software testing and debugging processes.

Preferably, in the above-mentioned network access authentication method including software compatibility check, in step S2, the aggregation node performs software compatibility check through a preset software version compatibility whitelist, and the software version compatibility whitelist is in the form of a tree diagram structure , indicating that the current software version number of the aggregation node is compatible with the software version number of each model slave terminal.

Preferably, in the above-mentioned network access authentication method including software compatibility check, the running network access authentication system including software compatibility check further includes an upper-layer cloud service or a local server, and several local area networks access the upper-layer cloud service or The local server; also includes the steps for updating the software version compatibility whitelist of the sink node:

S01. The special software version release system is exported or the system version administrator releases the software version compatibility whitelist uniformly, and outputs the new software version compatibility whitelist file to the upper cloud service or local server;

S02. The sink node regularly synchronizes the software version compatibility whitelist file to the upper-layer cloud service or local server, or the upper-layer cloud service or local server imports the software version compatibility whitelist file to the sink node through a custom protocol, or manually updates the sink node software Version compatibility whitelist file;

S03 , the aggregation node detects and finds that the software version compatibility whitelist file is updated, resets the network access state of the slave terminal, and performs steps S1 to S4 again on the local area network to check the software compatibility.

Preferably, the above-mentioned software version compatibility whitelist file is a standard xml format file generated according to an agreed format.

Preferably, in the above-mentioned network access authentication method including software compatibility check, in step S02, the aggregation node synchronizes the software version compatibility whitelist file to the upper-layer cloud service or the local server once a day.

Another object of the present invention is to provide a network access authentication system that avoids software incompatible devices from accessing the system and ensures stable operation of the system.

In order to achieve the above-mentioned still another object, the technical solution adopted by the present invention is a network access authentication system including software compatibility check, including a local area network composed of an aggregation node and several subordinate terminals accessing the aggregation node; the network access authentication system A network access authentication method including software compatibility check for the above-mentioned network access authentication method that does not require the intervention of the upper-layer cloud service or the local server.

Preferably, the above-mentioned network access authentication system including software compatibility check also includes an upper-layer cloud service or a local server, and several local area networks access the upper-layer cloud service or local server; the network access authentication system is used to perform the above-mentioned requirements. A network access authentication method involving software compatibility check involving the above-mentioned upper-layer cloud service or local server.

The network access authentication method including software compatibility check and the system thereof of the present invention have the following beneficial effects: in the network access authentication strategy, software compatibility and matching authentication between the slave terminal and the convergence node is added, so as to prevent software function upgrades or other reasons. Cause the software of the slave terminal and the aggregation node to be incompatible and incompatible, thereby affecting the stability and security of the system; 1. It can meet the software compatibility check in more complex situations and ensure the stable operation of the system; 2. It has strong adaptability and can cover products Compatibility check of the entire life cycle from R&D, testing, production, and deployment; 3. Modular design, decoupling and cooperating with each other to ensure the effective and normal operation of the function, and facilitate subsequent function upgrades and expansions.

[Description of drawings]

FIG. 1 is a schematic diagram of the system architecture of network access authentication including software compatibility check.

Fig. 2 is a software compatibility check flow chart of a network access authentication method including software compatibility check.

FIG. 3 is a diagram of interaction steps of a network access authentication method including software compatibility check.

【Detailed ways】

The present invention will be further described below in conjunction with the embodiments and with reference to the accompanying drawings.

In the present invention, a server is a computer or device that provides and manages network resources on a network, and a terminal may refer to various types of devices, including (but not limited to) wireless phones, cellular phones, laptop computers, multimedia wireless Devices, wireless communication personal computer (PC) cards, personal digital assistants (PDA), external or internal modems, etc. A client device, ie, a terminal, can be any data device that communicates with a server via a wireless channel and/or via a wired channel (eg, fiber optic or coaxial cable). A terminal may have various names such as mobile station, mobile device, mobile unit, mobile phone, remote station, remote terminal, remote unit, user device, user equipment, handheld device, and the like. Different terminals can be incorporated into one system. Terminals may be mobile or stationary, and may be dispersed throughout a communication network.

Example

This embodiment implements a network access authentication method including software compatibility check and a system thereof.

In this embodiment, a network access authentication method including software compatibility check and a system thereof are added to the network access authentication strategy by adding software compatibility and matching authentication between the subordinate terminal and the aggregation node, providing a mandatory compatibility with system access devices. It can prevent the devices with compatibility problems from connecting to the system, so as to prevent the incompatibility of the software of the subordinate terminal and the aggregation node due to software function upgrade or other reasons, which will affect the stability and security of the system.

The network access authentication method and system including software compatibility check in this embodiment are supplements and enhancements of conventional access validity check. The main content is that after the slave terminal establishes a connection with the sink node, the software version number of the slave terminal is sent to the sink node. A software compatibility check is requested, and the sink node returns the check result to the slave terminal. Only after passing the software compatibility check, the sink node allows the slave terminal to access the network and perform subsequent related operations. If the compatibility check fails, it will be denied access to the network and the user will be prompted to upgrade the software.

In this embodiment, a network access authentication method including software compatibility check and its system slave terminal serve as the initiator of the compatibility check, the sink node serves as the check confirmer, and all network access slave terminals need to perform software compatibility check. The software version number is a unique identifier generated when the software is compiled, and can be used as a basis for software compatibility checking.

In this embodiment, a network access authentication method including software compatibility check and a system pre-set software version compatibility whitelist of the aggregation node, that is, the aggregation node presets the software version list of each type of slave terminal supported by different software versions. The overall content of the whitelist is in the form of a tree diagram, and the software version (number) record of each compatible model of slave terminals can be queried according to the current version number of the sink node.

In this embodiment, a network access authentication method including software compatibility check and a system thereof allow and support the external update function of the software version compatibility whitelist considering the convenience of actual deployment.

In this embodiment, a network access authentication method including software compatibility check and a system thereof allow and support the compatibility check exemption function in consideration of external third-party access to the slave terminal and convenience of software testing and debugging processes.

In this embodiment, a network access authentication method including software compatibility check and management and release of a whitelist of system software version compatibility are derived from a special version management system, and can also be released uniformly by a version administrator to ensure its uniqueness, Accuracy and authority.

A network access authentication system including software compatibility check in this embodiment includes three roles: a sink node, a slave terminal, and a server; in this system, a sink node and multiple slave terminals connected under it form a local area network, and Similar local area networks are connected to upper-layer cloud services or local servers to form the entire system network.

In the network access authentication system including software compatibility check in this embodiment, each aggregation node in the local area network and its subordinate subordinate terminals must independently perform software compatibility check. To ensure the stability of each local area network, so as to achieve the stability of the entire system.

FIG. 1 is a schematic diagram of the architecture of a network access authentication system including software compatibility check. As shown in FIG. 1 , in a network access authentication system including software compatibility check in this embodiment, a certain aggregation node simultaneously accesses three types of eight slave terminals in total. The software version of each slave terminal may be different. In order to ensure the stable operation of the entire system, after these slave terminals are properly verified and connected to the aggregation node, the network access software compatibility check is performed. Only the slave terminals that pass the check can complete the network access verification, allowing them to conduct subsequent business interactions.

Fig. 2 is a software compatibility check flow chart of a network access authentication method including software compatibility check. As shown in FIG. 2 , a complete software compatibility check scheme including software compatibility check for a network access authentication method in this embodiment is mainly completed by the cooperation of three functional components: software version release update, update whitelist and network access check.

FIG. 3 is a diagram of interaction steps of a network access authentication method including software compatibility check. As shown in FIG. 3 , a network access authentication method including software compatibility check in this embodiment, when the aggregation node or the slave terminal updates the software version, a new whitelist file will be output; and the aggregation node will periodically (once a day) Synchronize the whitelist on the server. When the whitelist is found to be updated, the network access status of the slave terminal will be reset. At this time, the slave terminal needs to perform network access detection and software compatibility check again, that is, repeat the business process shown in FIG. 3 .

The software version compatibility whitelist is published by the version administrator or exported by the version publishing system. It is an xml file generated according to the agreed format; its content is the version of the slave terminal of each model that is compatible with the software version number of the aggregation node as the root node. list. When the software version of a product is compiled and released, its software version number has unique identification; it can be understood that the version number represents the function of the software, so it is credible to use the software version number as the credential for software compatibility check .

The software version compatibility whitelist is a standard xml format file. The specific content is as follows:

scm-version: The version number of the whitelist file, which is the basis for the aggregation node to synchronize the whitelist;

scm-info name: the software version number of the sink node. The sink node queries the current compatible slave terminal version information in this file according to its current version number;

sub-versions name: slave terminal model, and the compatibility information of different models of slave terminals is listed separately;

sub: slave terminal version number;

exempt-info: exempted product information, such products can be exempted from compatibility check permissions, mainly used in the development and debugging stage.

In this embodiment, a network access authentication method including software compatibility check and a system software version compatibility whitelist can change the format or content definition, and only need to cooperate to realize the version information list recording function as a whole.

In this embodiment, a network access authentication method including software compatibility check and the output of a whitelist of system software version compatibility can be manually output, or software version compatibility exported by various software version release and management systems. whitelist.

In this embodiment, a network access authentication method including software compatibility check and a system software version compatibility whitelist update mechanism can be actively updated by the sink node to the local or cloud server, or imported manually or by a custom protocol.

A network access authentication method including software compatibility check and system software version compatibility check in this embodiment can also be applied to compatibility in other similar local area networks or similar TOP structures, security check protection, and foolproof functions.

A network access authentication method and system including software compatibility check in this embodiment: 1, it can satisfy the software compatibility check in a relatively complex situation, and ensure the stable operation of the system; 2, it has strong adaptability, and can cover product development, testing, Production and deployment of compatibility checks throughout the entire life cycle; 3. Modular design, decoupling and cooperating with each other to ensure the effective and normal operation of the function, and facilitate subsequent function upgrades and expansions.

Those of ordinary skill in the art can understand that all or part of the processes in the methods of the above embodiments can be completed by instructing the relevant hardware through a computer program, and the program can be stored in a computer-readable storage medium, and the program can be executed when the program is executed. , may include the flow of the above-mentioned method embodiments. The storage medium may be a magnetic disk, an optical disk, a read-only memory (Read-Only Memory, ROM), or a random access memory (Random Access Memory, RAM) or the like.

The above are only the preferred embodiments of the present invention. It should be pointed out that for those skilled in the art, without departing from the principles of the present invention, several improvements and supplements can be made, and these improvements and supplements should also be considered as It is the protection scope of the present invention.

Claims (9)

1. A network access authentication method including software compatibility check is characterized in that: the access authentication system comprises a convergent node and a local area network consisting of a plurality of slave terminals accessed to the convergent node; the method comprises the following software compatibility checking steps:

s1, the slave terminal establishes connection with the sink node, and sends the slave terminal software version number to the sink node to request software compatibility check;

s2, the sink node checks the software compatibility;

s3, the sink node allows the slave terminal passing the software compatibility check to access the network and perform subsequent service operation;

or S4, the convergent node refuses the slave terminal which fails in the software compatibility check to access the network and prompts the upgrade software to the current software version number of the convergent node.

2. The network access authentication method comprising software compatibility check according to claim 1, further comprising a general network access authentication step of: and when the slave terminal establishes connection with the sink node, checking the validity of the MAC and the ID.

3. The network entry authentication method comprising software compatibility checking according to claim 1, wherein: step S2 allows and supports a software compatibility check exemption function for facilitating external third party access to the slave terminal, software testing and debugging process.

4. A network entry authentication method comprising software compatibility checking according to claim 1, characterized in that: and step S2, the sink node checks the software compatibility through a preset software version compatibility white list, wherein the software version compatibility white list is in a tree diagram structure form and marks the version numbers of the slave terminal software of each model supported by the current software version number of the sink node in a compatible manner.

5. The network entry authentication method comprising software compatibility checking according to claim 4, wherein: the operating network access authentication system comprising software compatibility check also comprises an upper cloud service or a local server, and a plurality of local area networks are accessed to the upper cloud service or the local server; the method also comprises a step of updating the white list of the convergent node software version compatibility:

s01, exporting a software version compatibility white list by a special software version release system or uniformly releasing a software version compatibility white list by a system version administrator, and outputting a new software version compatibility white list file to an upper cloud service or a local server;

s02, the sink node synchronizes the software version compatibility white list file to the upper layer cloud service or the local server regularly, or the upper layer cloud service or the local server introduces the software version compatibility white list file to the sink node through a custom protocol, or the sink node software version compatibility white list file is updated manually;

and S03, detecting and discovering the white list file update of the software version compatibility by the sink node, resetting the network access state of the slave terminal, and executing the step S1 to the step S4 by the local area network for software compatibility check again.

6. The method of claim 5, wherein the method comprises a software compatibility check, and further comprises: the software version compatibility white list file is a standard xml format file generated according to an agreed format.

7. The method of claim 5, wherein the method comprises a software compatibility check, and further comprises: step S02 the sink node synchronizes the software version compatibility white list file to the upper cloud service or the local server once a day.

8. A network entry authentication system including a software compatibility check, characterized by: the local area network comprises a convergent node and a plurality of slave terminals accessed to the convergent node; the network access authentication system is used for executing the network access authentication method comprising the software compatibility check of any claim from 1 to 4.

9. A network entry authentication system including a software compatibility check according to claim 8, wherein: the system also comprises an upper cloud service or a local server, and a plurality of local area networks are accessed to the upper cloud service or the local server; the network access authentication system is used for executing the network access authentication method comprising the software compatibility check of any claim from 5 to 7.

Images