Summary of the invention
Main purpose of the present invention is to provide a kind of network login authentication method and system based on graphic code, in reducing network login authentication cost, improves fail safe and the convenience of network login authentication.
The present invention proposes a kind of network login authentication method based on graphic code, comprising:
While receiving the network request packet of first terminal transmission, determine the authority of customer access network;
If the uncommitted accesses network of user, obtains identification information and the network connection information of first terminal;
Generate graph of a correspondence code according to the identification information getting and network connection information, and send to described first terminal to show the graphic code of generation;
While receiving the authentication data packet of the graphic code transmission of the second terminal based on described first terminal demonstration, forward the network request packet receiving, and authorize described first terminal accesses network.
Preferably, described in while receiving the authentication data packet that graphic code that the second terminal shows based on described first terminal sends, the step that forwards the network request packet receiving comprises:
The authentication data packet receiving is decoded, obtain the identification information of described the second terminal;
Determine according to the identification information of described the second terminal whether the second terminal has authorization privilege;
If determine, described the second terminal has authorization privilege, forwards the network request packet receiving, and authorizes described first terminal accesses network.
Preferably, described in while receiving the network request packet that first terminal sends, determine the step of authority of customer access network after the method also comprising:
If user is authorized to accesses network, forward the network request packet receiving.
Preferably, after the identification information that described basis gets and network connection information generate the step of graph of a correspondence code, the method comprises:
The graphic code of generation is sent to predetermined the second terminal;
While receiving the authentication data packet that the second terminal sends based on described graphic code, forward the network request packet receiving, and authorize described first terminal accesses network.
The present invention also proposes a kind of network login authentication method based on graphic code, comprising:
While receiving the network request packet of first terminal transmission, WAP (wireless access point) is determined the authority of customer access network;
If the uncommitted accesses network of user, WAP (wireless access point) is obtained identification information and the network connection information of first terminal, and the identification information getting and network connection information are sent to WAP (wireless access point) controller;
WAP (wireless access point) controller generates graph of a correspondence code based on receiving identification information and network connection information, and sends to first terminal to show the graphic code of generation;
In the time receiving the authentication data packet of the graphic code transmission of the second terminal based on described first terminal demonstration, described WAP (wireless access point) controller sends data retransmission instruction to WAP (wireless access point), and authorizes the instruction of described first terminal accesses network;
WAP (wireless access point), in the time receiving data retransmission instruction, forwards the network request packet receiving, and authorizes described first terminal accesses network.
The present invention also proposes a kind of network login authentication system based on graphic code, comprising:
The first determination module, when receiving the network request packet that first terminal sends, determines the authority of customer access network;
The first acquisition module, if for the uncommitted accesses network of user, obtains identification information and the network connection information of first terminal;
The first generation module, for generating graph of a correspondence code according to the identification information getting and network connection information;
The first sending and receiving module, for sending to described first terminal to show the graphic code of generation, and while receiving the authentication data packet that graphic code that the second terminal shows based on described first terminal sends, forwards the network request packet receiving;
The first authorization module, in the time receiving the authentication data packet of the graphic code transmission of the second terminal based on described first terminal demonstration, authorizes described first terminal accesses network.
Preferably, described the first acquisition module also uses the authentication data packet to receiving to decode, and obtains the identification information of described the second terminal; Described the first determination module is also used according to the identification information of described the second terminal and is determined whether the second terminal has authorization privilege; If described the first sending and receiving module also, for determining described the second terminal with no authorized authority, forwards the network request packet receiving; If described the first authorization module also, for determining that described the second terminal has authorization privilege, is authorized described first terminal accesses network.
Preferably, if described the first sending and receiving module is also for the authorized accesses network of user, forward the network request packet receiving.
Preferably, described the first sending and receiving module is also for sending to predetermined the second terminal by the graph of a correspondence code of generation; And while receiving the authentication data packet that the second terminal sends based on described graphic code, forward the network request packet receiving; Described the first authorization module also, in the time receiving the authentication data packet of the graphic code transmission of the second terminal based on described first terminal demonstration, is authorized described first terminal accesses network.
The present invention also proposes a kind of network login authentication system based on graphic code, comprises WAP (wireless access point) controller and WAP (wireless access point), wherein:
Described WAP (wireless access point) comprises:
The second determination module, when receiving the network request packet that first terminal sends, determines the authority of customer access network;
The second acquisition module, if for the uncommitted accesses network of user, obtains identification information and the network connection information of first terminal;
The second sending and receiving module, for sending to WAP (wireless access point) controller by the identification information getting and network connection information;
WAP (wireless access point) controller comprises:
The second generation module, for generating graph of a correspondence code based on receiving identification information and network connection information;
The 3rd sending and receiving module, for sending to first terminal to show the graphic code of generation, and in the time receiving the authentication data packet of the graphic code transmission of the second terminal based on described first terminal demonstration, send data retransmission instruction and first terminal access to netwoks authorized order to WAP (wireless access point);
Described the second sending and receiving module, also, in the time receiving the data retransmission instruction of described the 3rd sending and receiving module transmission, forwards the network request packet receiving.
Described WAP (wireless access point) also, in the time receiving described first terminal access to netwoks authorized order, is authorized described first terminal accesses network.
The network login authentication method and system based on graphic code that the present invention proposes, in the time that first terminal need to pass through the wireless network accesses network of access, identification information based on first terminal and network connection information generate graph of a correspondence code, and send to first terminal to show the graphic code of generation, and in the time receiving the authentication data packet of the graphic code transmission of the second terminal based on described first terminal demonstration, forward the network request packet receiving; The second terminal only need scan the graphic code generating on first terminal can complete the network authentication to first terminal, and it is more convenient to make the control of first terminal, avoids revealing user's personal information simultaneously, safe and certification cost is low.
Embodiment
Be described further with regard to technical scheme of the present invention below in conjunction with drawings and the specific embodiments.Should be appreciated that specific embodiment described herein, only in order to explain the present invention, is not intended to limit the present invention.
With reference to Fig. 1, Fig. 1 is the schematic flow sheet that the present invention is based on network login authentication method first embodiment of graphic code.
The present embodiment proposes a kind of network login authentication method based on graphic code, comprising:
Step S10, while receiving the network request packet of first terminal transmission, determines the authority of customer access network;
The present embodiment describes taking executive agent as WAP (wireless access point) controller, when WAP (wireless access point) receives the network request packet of first terminal transmission, this network request packet is sent to radio network controller, radio network controller is in the time receiving network request packet, can obtain the first terminal mark (as the physical address of first terminal) in network request packet, determine whether the mark getting is the mark of having authorized.In the present embodiment, can preserve the terminal iidentification (as the physical address of terminal) of having authorized, getting according to network request packet after first terminal mark, the first terminal mark getting is mated with the terminal iidentification of authorizing, in the time that the terminal iidentification that has mandate is marking matched with the first terminal getting, confirm the authorized accesses network of first terminal, now can forward the network receiving and count request according to bag.
Step S20, if the uncommitted accesses network of user is obtained identification information and the network connection information of first terminal;
Step S30, generates graph of a correspondence code according to the identification information getting and network connection information;
In the present embodiment, the identification information of first terminal can be the information that physical address of first terminal etc. can show the identity of first terminal, the network connection information of first terminal can be the IP address of first terminal, and the service set of the WAP (wireless access point) of first terminal access, graphic code can be the figure that one dimension code, Quick Response Code etc. can represent by figure word numerical information, and this graphic code is preferably Quick Response Code.
Quick Response Code is the chequered with black and white graphic recording data symbol information distributing in plane (on two-dimensional directional) according to certain rules with certain specific geometric figure, on coding, utilize " 0 ", the concept of " 1 " bit stream of formation and computer-internal logical foundations, identify word numerical information by several geometries corresponding with binary system, automatically read to know by image input device or photoelectric scanning device and automatically process to realize information.Be that Quick Response Code is at graphic code, according to the coding rule of Quick Response Code, identification information and network connection information be converted to Quick Response Code.
Step S40, sends to described first terminal to show the graphic code of generation;
Step S50, while receiving the authentication data packet of the graphic code transmission of the second terminal based on described first terminal demonstration, forwards the network request packet receiving, and authorizes described first terminal accesses network.
Identifier is in the time carrying out the certification of access to netwoks to first terminal, can pass through the Quick Response Code of the demonstration screen display of the first-class image-scanning device scanning of the shooting first terminal in the second terminal, after the second terminal scanning Quick Response Code, the second terminal generates authentication data packet, and the authentication data packet of generation is sent to WAP (wireless access point) controller; WAP (wireless access point) controller, in the time receiving authentication data packet, forwards the network request packet receiving.In the present embodiment, the authentication data packet that the second terminal sends can comprise the information of the second terminal, or the information of the second terminal, the identification information of first terminal and the network connection information of first terminal.
WAP (wireless access point) controller, in the time authorizing first terminal accesses network, can be preserved the identity identification information of first terminal and add to authorize identifying.
In other variant embodiment, after step S10, if the uncommitted accesses network of user, can determine the network access authentication type that WAP (wireless access point) controller is current, if when current network access authentication type is graphic code checking, can obtains identification information and the network connection information of first terminal and generate graph of a correspondence code according to the identification information getting and network connection information; If when the current network access authentication type of WAP (wireless access point) controller is short-message verification, send note to short message server and send request, in the time receiving note and send request, send checking note to first terminal for short message server; If when the current network access authentication type of WAP (wireless access point) controller is username and password checking, send the inputting interface of username and password to first terminal, and the username and password based on this inputting interface input is verified to user.
In other variant embodiment, after first terminal accesses network described in the mandate of WAP (wireless access point) controller, if WAP (wireless access point) does not receive the network packet that first terminal sends within the default time interval, now can cancel the mandate to first terminal accesses network, to improve security performance; In the time of first terminal accesses network next time, again first terminal accesses network is authorized to judgement.
The network login authentication method based on graphic code that the present embodiment proposes, in the time that first terminal need to pass through the wireless network accesses network of access, identification information based on first terminal and network connection information generate graph of a correspondence code, and send to first terminal to show the graphic code of generation, and in the time receiving the authentication data packet of the graphic code transmission of the second terminal based on described first terminal demonstration, forward the network request packet receiving; The second terminal only need scan the graphic code generating on first terminal can complete the network authentication to first terminal, and it is more convenient to make the control of first terminal, avoids revealing user's personal information simultaneously, safe and certification cost is low.
With reference to Fig. 2, Fig. 2 is the idiographic flow schematic diagram of step S50 in Fig. 1.
In network login authentication method the first embodiment that the present invention is based on graphic code, step S50 comprises:
Step S51, decodes to the authentication data packet receiving, and obtains the identification information of described the second terminal;
Step S52, determines according to the identification information of described the second terminal whether the second terminal has authorization privilege;
Step S53, if determine, described the second terminal has authorization privilege, forwards the network request packet receiving, and authorizes described first terminal accesses network.
In the present embodiment, the authorized terminal identity identification information (as the physical address of terminal) that can authenticate first terminal accesses network can prestore, WAP (wireless access point) controller is in the time receiving the authentication data packet of the second terminal transmission, obtain the identification information of described the second terminal, the the second terminal identity identification information getting is mated with the terminal identity identification information prestoring, if coupling, illustrates that this second terminal can authenticate and authorize the access to netwoks of first terminal; If do not mate authorization failure, can be to the prompting of the second terminal and first terminal transmission access to netwoks failure.In other embodiments, in the time that the second terminal identity identification information getting does not mate with the identification information of the terminal that can authorize the access to netwoks of first terminal prestoring, can push user name and interface for password input to first terminal, verify with user name and password that user is inputted based on this inputting interface, while being proved to be successful, the network request packet that forwarding receives, and authorize described first terminal accesses network, also can authenticate first terminal by alternate manner.
With reference to Fig. 3, Fig. 3 is the schematic flow sheet that the present invention is based on network login authentication method second embodiment of graphic code.
Based on the first network login authentication method the second embodiment that has implemented to propose the present invention is based on graphic code, after step S10, the method comprises in the present embodiment:
Step S60, if the authorized accesses network of first terminal forwards the network request packet receiving.
In the present embodiment, in WAP (wireless access point) controller, preserve the identity identification information of the terminal of authorized accesses network, in the time receiving network access request packet, network request packet is resolved to obtain to the identity identification information of first terminal, in the time that the identity identification information of first terminal mates with the identity identification information of the authorization terminal prestoring, determine that first terminal is authorized to accesses network, forward the network request packet receiving.
With reference to Fig. 4, Fig. 4 is the schematic flow sheet that the present invention is based on network login authentication method the 3rd embodiment of graphic code.
Propose the present invention is based on network login authentication method the 3rd embodiment of graphic code based on the first and second embodiment, after step S30, also comprise in the present embodiment:
Step S70, sends to predetermined the second terminal by the graphic code of generation;
Step S80, while receiving the authentication data packet that the second terminal sends based on described graphic code, forwards the network request packet receiving, and authorizes described first terminal accesses network.
In the present embodiment, WAP (wireless access point) controller also can send to graphic code predetermined the second terminal after generating graphic code, WAP (wireless access point) controller can be by multimedia message, the modes such as mail push the graphic code generating to the second terminal, the second terminal is receiving the laggard line scanning of graphic code, and scanning the successfully rear authentication data packet that generates, and authentication data packet is sent to WAP (wireless access point) controller, WAP (wireless access point) controller is in the time receiving the authentication data packet of the second terminal transmission, the network request packet that forwarding receives, and authorize described first terminal accesses network.
In other variant embodiment based on the present embodiment, can predetermined second terminal be set for each WAP (wireless access point) or several WAP (wireless access point), in the time receiving the network request packet of first terminal transmission, and when the uncommitted accesses network of first terminal, can determine the WAP (wireless access point) of first terminal access, and according to the mapping relations of WAP (wireless access point) and the second terminal, obtain corresponding the second terminal of definite WAP (wireless access point), obtain identity identification information and the network access information of first terminal according to network request packet, and generate graphic code according to identity identification information and network access information, graphic code is sent to the second terminal getting, improve the efficiency of purview certification.
With reference to Fig. 5, Fig. 5 is the schematic flow sheet that the present invention is based on network login authentication method the 4th embodiment of graphic code.
The present embodiment proposes a kind of network login authentication method based on graphic code, comprising:
Step S90, while receiving the network request packet of first terminal transmission, WAP (wireless access point) is determined the authority of customer access network;
When WAP (wireless access point) receives the network request packet of first terminal transmission, can obtain the first terminal mark (as the physical address of first terminal) in network request packet, determine whether the mark getting is the mark of having authorized.In the present embodiment, can preserve the terminal iidentification (as the physical address of terminal) of having authorized, getting according to network request packet after first terminal mark, the first terminal mark getting is mated with the terminal iidentification of authorizing, in the time that the terminal iidentification that has mandate is marking matched with the first terminal getting, confirm the authorized accesses network of first terminal, now can forward the network receiving and count request according to bag.
Step S100, if the uncommitted accesses network of user, WAP (wireless access point) is obtained identification information and the network connection information of first terminal, and the identification information getting and network connection information are sent to WAP (wireless access point) controller;
In the present embodiment, the identification information of first terminal can be the information that physical address of first terminal etc. can show the identity of first terminal, the network connection information of first terminal can be the IP address of first terminal, and the service set of the WAP (wireless access point) of first terminal access, graphic code can be the figure that one dimension code, Quick Response Code etc. can represent by figure word numerical information, and this graphic code is preferably Quick Response Code.
If first terminal is authorized to accesses network, forward the network request packet receiving
Step S110, WAP (wireless access point) controller generates graph of a correspondence code based on receiving identification information and network connection information, and sends to first terminal to show the graphic code of generation;
Step S120, in the time receiving the authentication data packet of the graphic code transmission of the second terminal based on described first terminal demonstration, described WAP (wireless access point) controller sends data retransmission instruction to WAP (wireless access point), and authorizes the instruction of described first terminal accesses network;
Step S130, WAP (wireless access point), in the time receiving data retransmission instruction, forwards the network request packet receiving, and authorizes described first terminal accesses network.
Identifier is in the time carrying out the certification of access to netwoks to first terminal, can pass through the Quick Response Code of the demonstration screen display of the first-class image-scanning device scanning of the shooting first terminal in the second terminal, after the second terminal scanning Quick Response Code, the second terminal generates authentication data packet, and the authentication data packet of generation is sent to WAP (wireless access point) controller; WAP (wireless access point) controller, in the time receiving authentication data packet, sends data retransmission instruction to WAP (wireless access point).In the present embodiment, the authentication data packet that the second terminal sends can comprise the information of the second terminal, or the information of the second terminal, the identification information of first terminal and the network connection information of first terminal.
WAP (wireless access point), in the time authorizing first terminal accesses network, can be preserved the identity identification information of first terminal and add to authorize identifying.
In other variant embodiment, after step S90, if the uncommitted accesses network of user, can determine the network access authentication type that WAP (wireless access point) controller is current, if when current network access authentication type is graphic code checking, can obtains identification information and the network connection information of first terminal and generate graph of a correspondence code according to the identification information getting and network connection information; If when the current network access authentication type of WAP (wireless access point) is short-message verification, send note to short message server and send request, in the time receiving note and send request, send checking note to first terminal for short message server; If when the current network access authentication type of WAP (wireless access point) is username and password checking, send the inputting interface of username and password to first terminal, and the username and password based on this inputting interface input is verified to user.
In other variant embodiment, after first terminal accesses network described in WAP (wireless access point) mandate, if WAP (wireless access point) does not receive the network packet that first terminal sends within the default time interval, now can cancel the mandate to first terminal accesses network, to improve security performance; In the time of first terminal accesses network next time, again first terminal accesses network is authorized to judgement.
The network login authentication method based on graphic code that the present embodiment proposes, in the time that first terminal need to pass through the wireless network accesses network of access, identification information based on first terminal and network connection information generate graph of a correspondence code, and send to first terminal to show the graphic code of generation, and in the time receiving the authentication data packet of the graphic code transmission of the second terminal based on described first terminal demonstration, forward the network request packet receiving; The second terminal only need scan the graphic code generating on first terminal can complete the network authentication to first terminal, and it is more convenient to make the control of first terminal, reveals user's personal information simultaneously, safe and certification cost is low.
In network login authentication method the 4th embodiment that the present invention is based on graphic code, step S120 comprises the following steps: WAP (wireless access point) controller is decoded to the authentication data packet receiving, and obtains the identification information of described the second terminal; WAP (wireless access point) controller determines according to the identification information of described the second terminal whether the second terminal has authorization privilege; If determine, described the second terminal has authorization privilege, and WAP (wireless access point) controller sends data retransmission instruction to WAP (wireless access point), and authorizes the instruction of described first terminal accesses network.
In the present embodiment, can be at the WAP (wireless access point) controller authorized terminal identity identification information (as the physical address of terminal) that can authenticate first terminal accesses network that prestores, WAP (wireless access point) controller is in the time receiving the authentication data packet of the second terminal transmission, obtain the identification information of described the second terminal, the the second terminal identity identification information getting is mated with the terminal identity identification information prestoring, if coupling, illustrates that this second terminal can authenticate and authorize the access to netwoks of first terminal; If do not mate authorization failure, can be to the prompting of the second terminal and first terminal transmission access to netwoks failure.In other embodiments, in the time that the second terminal identity identification information getting does not mate with the identification information of the terminal that can authorize the access to netwoks of first terminal prestoring, can push user name and interface for password input to first terminal, verify with user name and password that user is inputted based on this inputting interface, while being proved to be successful, the network request packet that forwarding receives, and authorize described first terminal accesses network, also can authenticate first terminal by alternate manner.
In network login authentication method the 4th embodiment that the present invention is based on graphic code, WAP (wireless access point) controller is based on after receiving identification information and network connection information generation graph of a correspondence code, further comprising the steps of: the graph of a correspondence code of generation is sent to predetermined the second terminal; While receiving the authentication data packet that the second terminal sends based on the described graphic code that receives, forward the network request packet receiving, and authorize described first terminal accesses network.
In the present embodiment, WAP (wireless access point) controller also can send to the graphic code of this generation predetermined the second terminal after generating graph of a correspondence code, WAP (wireless access point) controller can be by multimedia message, the modes such as mail push the graphic code generating to the second terminal, the second terminal is receiving the laggard line scanning of graphic code, and scanning the successfully rear authentication data packet that generates, and authentication data packet is sent to WAP (wireless access point) controller, WAP (wireless access point) controller is in the time receiving the authentication data packet of the second terminal transmission, the network request packet that forwarding receives, and authorize described first terminal accesses network.
In other variant embodiment based on the present embodiment, can predetermined second terminal be set for each WAP (wireless access point) or several WAP (wireless access point), in the time receiving the network request packet of first terminal transmission, and when the uncommitted accesses network of first terminal, can determine the WAP (wireless access point) of first terminal access, and according to the mapping relations of WAP (wireless access point) and the second terminal, obtain corresponding the second terminal of definite WAP (wireless access point), obtain identity identification information and the network access information of first terminal according to network request packet, and generate graph of a correspondence code according to identity identification information and network access information, graphic code is sent to the second terminal getting, improve the efficiency of purview certification.
With reference to Fig. 6, Fig. 6 is the high-level schematic functional block diagram that the present invention is based on network login authentication system first embodiment of graphic code.
The network login authentication system based on graphic code that this enforcement proposes comprises:
The first determination module 10, when receiving the network request packet that first terminal sends, determines the authority of customer access network;
The present embodiment describes taking executive agent as WAP (wireless access point) controller, when WAP (wireless access point) receives the network request packet of first terminal transmission, this network request packet is sent to radio network controller, radio network controller is in the time receiving network request packet, can obtain the first terminal mark (as the physical address of first terminal) in network request packet, determine whether the mark getting is the mark of having authorized.In the present embodiment, can preserve the terminal iidentification (as the physical address of terminal) of having authorized, getting according to network request packet after first terminal mark, the first terminal mark getting is mated with the terminal iidentification of authorizing, in the time that the terminal iidentification that has mandate is marking matched with the first terminal getting, confirm the authorized accesses network of first terminal, now can forward the network receiving and count request according to bag.
The first acquisition module 20, if for the uncommitted accesses network of user, obtains identification information and the network connection information of first terminal;
The first generation module 30, for generating graph of a correspondence code according to the identification information getting and network connection information;
In the present embodiment, the identification information of first terminal can be the information that physical address of first terminal etc. can show the identity of first terminal, the network connection information of first terminal can be the IP address of first terminal, and the service set of the WAP (wireless access point) of first terminal access, graphic code can be the figure that one dimension code, Quick Response Code etc. can represent by figure word numerical information, and this graphic code is preferably Quick Response Code.
Quick Response Code is the chequered with black and white graphic recording data symbol information distributing in plane (on two-dimensional directional) according to certain rules with certain specific geometric figure, on coding, utilize " 0 ", the concept of " 1 " bit stream of formation and computer-internal logical foundations, identify word numerical information by several geometries corresponding with binary system, automatically read to know by image input device or photoelectric scanning device and automatically process to realize information.Be that Quick Response Code is at graphic code, according to the coding rule of Quick Response Code, identification information and network connection information be converted to Quick Response Code.
The first sending and receiving module 40, for sending to described first terminal to show the graphic code of generation, and while receiving the authentication data packet that graphic code that the second terminal shows based on described first terminal sends, forwards the network request packet receiving;
The first authorization module 50, in the time receiving the authentication data packet of the graphic code transmission of the second terminal based on described first terminal demonstration, authorizes described first terminal accesses network.
Identifier is in the time carrying out the certification of access to netwoks to first terminal, can pass through the Quick Response Code of the demonstration screen display of the first-class image-scanning device scanning of the shooting first terminal in the second terminal, after the second terminal scanning Quick Response Code, the second terminal generates authentication data packet, and the authentication data packet of generation is sent to WAP (wireless access point) controller; WAP (wireless access point) controller, in the time receiving authentication data packet, forwards the network request packet receiving.In the present embodiment, the authentication data packet that the second terminal sends can comprise the information of the second terminal, or the information of the second terminal, the identification information of first terminal and the network connection information of first terminal.
WAP (wireless access point) controller, in the time authorizing first terminal accesses network, can be preserved the identity identification information of first terminal and add to authorize identifying.
In other variant embodiment, in the time that the first determination module 10 receives the network request packet of first terminal transmission, after determining the authority of customer access network, if the uncommitted accesses network of user, can determine the network access authentication type that WAP (wireless access point) controller is current, if when current network access authentication type is graphic code checking, can obtains identification information and the network connection information of first terminal and generate graph of a correspondence code according to the identification information getting and network connection information; If when the current network access authentication type of WAP (wireless access point) controller is short-message verification, send note to short message server and send request, in the time receiving note and send request, send checking note to first terminal for short message server; If when the current network access authentication type of WAP (wireless access point) controller is username and password checking, send the inputting interface of username and password to first terminal, and the username and password based on this inputting interface input is verified to user.
In other variant embodiment, after first terminal accesses network described in the mandate of WAP (wireless access point) controller, if WAP (wireless access point) does not receive the network packet that first terminal sends within the default time interval, now can cancel the mandate to first terminal accesses network, to improve security performance; In the time of first terminal accesses network next time, again first terminal accesses network is authorized to judgement.
The network login authentication system based on graphic code that the present embodiment proposes, in the time that first terminal need to pass through the wireless network accesses network of access, identification information based on first terminal and network connection information generate graph of a correspondence code, and send to first terminal to show the graphic code of generation, and in the time receiving the authentication data packet of the graphic code transmission of the second terminal based on described first terminal demonstration, forward the network request packet receiving; The second terminal only need scan the graphic code generating on first terminal can complete the network authentication to first terminal, and it is more convenient to make the control of first terminal, avoids revealing user's personal information simultaneously, safe and certification cost is low.
In network login authentication system the first embodiment that the present invention is based on graphic code, described the first acquisition module 20 also uses the authentication data packet to receiving to decode, and obtains the identification information of described the second terminal; Described the first determination module 10 is also used according to the identification information of described the second terminal and is determined whether the second terminal has authorization privilege; If described the first sending and receiving module 40 also, for determining described the second terminal with no authorized authority, forwards the network request packet receiving; If described the first authorization module 50 also, for determining that described the second terminal has authorization privilege, is authorized described first terminal accesses network.
In the present embodiment, can prestore first terminal accesses network is authenticated to the terminal identity identification information (as the physical address of terminal) that has authorization privilege, WAP (wireless access point) controller is in the time receiving the authentication data packet of the second terminal transmission, obtain the identification information of described the second terminal, the the second terminal identity identification information getting is mated with the terminal identity identification information prestoring, if coupling, illustrates that this second terminal can authenticate and authorize the access to netwoks of first terminal; If do not mate authorization failure, can be to the prompting of the second terminal and first terminal transmission access to netwoks failure.In other embodiments, in the time that the second terminal identity identification information getting does not mate with the identification information of the terminal that can authorize the access to netwoks of first terminal prestoring, can push user name and interface for password input to first terminal, verify with user name and password that user is inputted based on this inputting interface, while being proved to be successful, the network request packet that forwarding receives, and authorize described first terminal accesses network, also can authenticate first terminal by alternate manner.
In network login authentication system the first embodiment that the present invention is based on graphic code, if described the first sending and receiving module 40 is also for the authorized accesses network of user, forward the network request packet receiving.
In the present embodiment, in WAP (wireless access point) controller, preserve the identity identification information of the terminal of authorized accesses network, in the time receiving network access request packet, network request packet is resolved to obtain to the identity identification information of first terminal, in the time that the identity identification information of first terminal mates with the identity identification information of the authorization terminal prestoring, determine that first terminal is authorized to accesses network, forward the network request packet receiving.
In network login authentication system the first embodiment that the present invention is based on graphic code, described the first sending and receiving module 40 is also for sending to the graphic code of generation predetermined the second terminal; And while receiving the authentication data packet that the second terminal sends based on described graphic code, forward the network request packet receiving; Described the first authorization module 50 also, in the time receiving the authentication data packet of the graphic code transmission of the second terminal based on described first terminal demonstration, is authorized described first terminal accesses network.
In the present embodiment, WAP (wireless access point) controller also can send to graphic code predetermined the second terminal after generating graph of a correspondence code, WAP (wireless access point) controller can be by multimedia message, the modes such as mail push the graphic code generating to the second terminal, the second terminal is receiving the laggard line scanning of graphic code, and scanning the successfully rear authentication data packet that generates, and authentication data packet is sent to WAP (wireless access point) controller, WAP (wireless access point) controller is in the time receiving the authentication data packet that the second terminal sends based on described graphic code, the network request packet that forwarding receives, and authorize described first terminal accesses network.
In other variant embodiment based on the present embodiment, can predetermined second terminal be set for each WAP (wireless access point) or several WAP (wireless access point), in the time receiving the network request packet of first terminal transmission, and when the uncommitted accesses network of first terminal, can determine the WAP (wireless access point) of first terminal access, and according to the mapping relations of WAP (wireless access point) and the second terminal, obtain corresponding the second terminal of definite WAP (wireless access point), obtain identity identification information and the network access information of first terminal according to network request packet, and generate graph of a correspondence code according to identity identification information and network access information, graphic code is sent to the second terminal getting, improve the efficiency of purview certification.
With reference to Fig. 7, Fig. 7 is the high-level schematic functional block diagram that the present invention is based on network login authentication system second embodiment of graphic code.
The present embodiment proposes a kind of network login authentication system based on graphic code, comprises WAP (wireless access point) controller 60 and WAP (wireless access point) 70, wherein:
Described WAP (wireless access point) 60 comprises:
The second determination module 61, when receiving the network request packet that first terminal sends, determines the authority of customer access network;
The second acquisition module 62, if for the uncommitted accesses network of user, obtains identification information and the network connection information of first terminal;
The second sending and receiving module 63, for sending to WAP (wireless access point) controller by the identification information getting and network connection information;
WAP (wireless access point) controller 70 comprises:
The second generation module 71, for generating graph of a correspondence code based on receiving identification information and network connection information;
The 3rd sending and receiving module 72, for sending to first terminal to show the graphic code of generation, and in the time receiving the authentication data packet of the graphic code transmission of the second terminal based on described first terminal demonstration, send data retransmission instruction and first terminal access to netwoks authorized order to WAP (wireless access point);
Described the second sending and receiving module 73, also, in the time receiving the data retransmission instruction that described the 3rd sending and receiving module 72 sends, forwards the network request packet receiving.
Described WAP (wireless access point) also comprises the second authorization module 64, in the time receiving described first terminal access to netwoks authorized order, authorizes described first terminal accesses network.
When WAP (wireless access point) receives the network request packet of first terminal transmission, can obtain the first terminal mark (as the physical address of first terminal) in network request packet, determine whether the mark getting is the mark of having authorized.In the present embodiment, can preserve the terminal iidentification (as the physical address of terminal) of having authorized, getting according to network request packet after first terminal mark, the first terminal mark getting is mated with the terminal iidentification of authorizing, in the time that the terminal iidentification that has mandate is marking matched with the first terminal getting, confirm the authorized accesses network of first terminal, now can forward the network receiving and count request according to bag.
In the present embodiment, the identification information of first terminal can be the information that physical address of first terminal etc. can show the identity of first terminal, the network connection information of first terminal can be the IP address of first terminal, and the service set of the WAP (wireless access point) of first terminal access, graphic code can be the figure that one dimension code, Quick Response Code etc. can represent by figure word numerical information, and this graphic code is preferably Quick Response Code.
Quick Response Code is the chequered with black and white graphic recording data symbol information distributing in plane (on two-dimensional directional) according to certain rules with certain specific geometric figure, on coding, utilize " 0 ", the concept of " 1 " bit stream of formation and computer-internal logical foundations, identify word numerical information by several geometries corresponding with binary system, automatically read to know by image input device or photoelectric scanning device and automatically process to realize information.Be that Quick Response Code is at graphic code, according to the coding rule of Quick Response Code, identification information and network connection information be converted to Quick Response Code.
If first terminal is authorized to accesses network, forward the network request packet receiving
Identifier is in the time carrying out the certification of access to netwoks to first terminal, can pass through the Quick Response Code of the demonstration screen display of the first-class image-scanning device scanning of the shooting first terminal in the second terminal, after the second terminal scanning Quick Response Code, the second terminal generates authentication data packet, and the authentication data packet of generation is sent to WAP (wireless access point) controller; WAP (wireless access point) controller, in the time receiving authentication data packet, sends data retransmission instruction to WAP (wireless access point).In the present embodiment, the authentication data packet that the second terminal sends can comprise the information of the second terminal, or the information of the second terminal, the identification information of first terminal and the network connection information of first terminal.WAP (wireless access point), in the time authorizing first terminal accesses network, can be preserved the identity identification information of first terminal and add to authorize identifying.
In other variant embodiment, if the uncommitted accesses network of user, can determine the network access authentication type that WAP (wireless access point) controller is current, if when current network access authentication type is graphic code checking, can obtains identification information and the network connection information of first terminal and generate graph of a correspondence code according to the identification information getting and network connection information; If when the current network access authentication type of WAP (wireless access point) is short-message verification, send note to short message server and send request, in the time receiving note and send request, send checking note to first terminal for short message server; If when the current network access authentication type of WAP (wireless access point) is username and password checking, send the inputting interface of username and password to first terminal, and the username and password based on this inputting interface input is verified to user.
In other variant embodiment, after first terminal accesses network described in WAP (wireless access point) mandate, if WAP (wireless access point) does not receive the network packet that first terminal sends within the default time interval, now can cancel the mandate to first terminal accesses network, to improve security performance; In the time of first terminal accesses network next time, again first terminal accesses network is authorized to judgement.
The network login authentication system based on graphic code that the present embodiment proposes, in the time that first terminal need to pass through the wireless network accesses network of access, identification information based on first terminal and network connection information generate graph of a correspondence code, and send to first terminal to show the graphic code of generation, and in the time receiving the authentication data packet of the graphic code transmission of the second terminal based on described first terminal demonstration, forward the network request packet receiving; The second terminal only need scan the graphic code generating on first terminal can complete the network authentication to first terminal, and it is more convenient to make the control of first terminal, reveals user's personal information simultaneously, safe and certification cost is low.
In network login authentication system the second embodiment that the present invention is based on graphic code, WAP (wireless access point) controller 70 is decoded to the authentication data packet receiving, and obtains the identification information of described the second terminal; WAP (wireless access point) controller 70 determines according to the identification information of described the second terminal whether the second terminal has authorization privilege; If determine, described the second terminal has authorization privilege, and the 3rd sending and receiving module 72 sends data retransmission instruction to WAP (wireless access point), and authorizes the instruction of described first terminal accesses network.
In the present embodiment, can be at the WAP (wireless access point) controller terminal identity identification information (as the physical address of terminal) that first terminal accesses network is authorized that prestores, WAP (wireless access point) controller is in the time receiving the authentication data packet of the second terminal transmission, obtain the identification information of described the second terminal, the the second terminal identity identification information getting is mated with the terminal identity identification information prestoring, if coupling, illustrates that this second terminal can authenticate and authorize the access to netwoks of first terminal; If do not mate authorization failure, can be to the prompting of the second terminal and first terminal transmission access to netwoks failure.In other embodiments, in the time that the second terminal identity identification information getting does not mate with the identification information of the terminal that can authorize the access to netwoks of first terminal prestoring, can push user name and interface for password input to first terminal, verify with user name and password that user is inputted based on this inputting interface, while being proved to be successful, the network request packet that forwarding receives, and authorize described first terminal accesses network, also can authenticate first terminal by alternate manner.
In network login authentication system the second embodiment that the present invention is based on graphic code, the second generation module 71 is based on after receiving identification information and network connection information generation graphic code, and the graphic code of generation is sent to predetermined the second terminal by the 3rd sending and receiving module 72; When the 3rd sending and receiving module 72 receives the authentication data packet that the second terminal sends based on the described graphic code that receives, send data retransmission instruction to WAP (wireless access point), and authorize the instruction of described first terminal accesses network.
In the present embodiment, WAP (wireless access point) controller also can send to graphic code predetermined the second terminal after generating graphic code, WAP (wireless access point) controller can be by multimedia message, the modes such as mail push the graphic code generating to the second terminal, the second terminal is receiving the laggard line scanning of graphic code, and scanning the successfully rear authentication data packet that generates, and authentication data packet is sent to WAP (wireless access point) controller, WAP (wireless access point) controller is in the time receiving the authentication data packet that the second terminal sends based on the described graphic code that receives, the network request packet that forwarding receives, and authorize described first terminal accesses network.
In other variant embodiment based on the present embodiment, can predetermined second terminal be set for each WAP (wireless access point) or several WAP (wireless access point), in the time receiving the network request packet of first terminal transmission, and when the uncommitted accesses network of first terminal, can determine the WAP (wireless access point) of first terminal access, and according to the mapping relations of WAP (wireless access point) and the second terminal, obtain corresponding the second terminal of definite WAP (wireless access point), obtain identity identification information and the network access information of first terminal according to network request packet, and generate graphic code according to identity identification information and network access information, graphic code is sent to the second terminal getting, improve the efficiency of purview certification.
The foregoing is only the preferred embodiments of the present invention; not thereby limit the scope of the claims of the present invention; every equivalent structure transformation that utilizes specification of the present invention and accompanying drawing content to do; or be directly or indirectly used in other relevant technical fields, be all in like manner included in scope of patent protection of the present invention.