Movatterモバイル変換


[0]ホーム

URL:


CN108282472B - WIFI authentication method, device, server and storage medium - Google Patents

WIFI authentication method, device, server and storage medium
Download PDF

Info

Publication number
CN108282472B
CN108282472BCN201810039329.7ACN201810039329ACN108282472BCN 108282472 BCN108282472 BCN 108282472BCN 201810039329 ACN201810039329 ACN 201810039329ACN 108282472 BCN108282472 BCN 108282472B
Authority
CN
China
Prior art keywords
authentication
page
client
user
push
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Active
Application number
CN201810039329.7A
Other languages
Chinese (zh)
Other versions
CN108282472A (en
Inventor
谈剑锋
王欣
杨德光
姜立稳
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Shenzhen Huahui Xingchen Digital Technology Co.,Ltd.
Original Assignee
Shanghai Peoplenet Security Technology Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Shanghai Peoplenet Security Technology Co LtdfiledCriticalShanghai Peoplenet Security Technology Co Ltd
Priority to CN201810039329.7ApriorityCriticalpatent/CN108282472B/en
Publication of CN108282472ApublicationCriticalpatent/CN108282472A/en
Application grantedgrantedCritical
Publication of CN108282472BpublicationCriticalpatent/CN108282472B/en
Activelegal-statusCriticalCurrent
Anticipated expirationlegal-statusCritical

Links

Images

Classifications

Landscapes

Abstract

Translated fromChinese

本发明实施例公开了一种WIFI认证方法、装置、服务器及存储介质,该方法包括:响应于客户端的认证请求,向S盾服务器请求认证因素;将获取到的由所述认证因素生成的认证页面发送至所述客户端,以便用户通过所述客户端上显示的所述认证页面进行认证。本发明实施例将S盾与认证方式相结合,增强了WIFI认证的安全性和便捷性,全面的为用户提供安全易用的身份认证保护方案。

Figure 201810039329

The embodiment of the present invention discloses a WIFI authentication method, device, server and storage medium. The method includes: in response to an authentication request from a client, requesting an authentication factor from an S-shield server; The page is sent to the client so that the user can authenticate through the authentication page displayed on the client. The embodiment of the present invention combines the S shield with the authentication method, enhances the security and convenience of WIFI authentication, and comprehensively provides a user with a safe and easy-to-use identity authentication protection scheme.

Figure 201810039329

Description

Translated fromChinese
一种WIFI认证方法、装置、服务器及存储介质A WIFI authentication method, device, server and storage medium

技术领域technical field

本发明实施例涉及互联网技术领域,尤其涉及一种WIFI认证方法、装置、服务器及存储介质。Embodiments of the present invention relate to the field of Internet technologies, and in particular, to a WIFI authentication method, device, server, and storage medium.

背景技术Background technique

随着科学技术的发展,人们的生活越来越离不开网络,在一些公共场所,为了避免浪费流量,需要连接该场所内WIFI。相应的,连接上对应的WIFI的认证方式有账号密码、短信认证以及微信认证等,这些认证方式主要适用于一些商场、咖啡厅、火车站以及机场等公共场合。With the development of science and technology, people's lives are more and more inseparable from the Internet. In some public places, in order to avoid wasting traffic, it is necessary to connect to WIFI in the place. Correspondingly, the authentication methods for connecting to the corresponding WIFI include account password, SMS authentication and WeChat authentication, etc. These authentication methods are mainly suitable for some public places such as shopping malls, coffee shops, railway stations and airports.

但是,对于一些安全性较高的场所,上述认证方式已不再适用。However, for some places with high security, the above authentication methods are no longer applicable.

发明内容SUMMARY OF THE INVENTION

本发明实施例提供一种WIFI身份认证方法、装置、服务器及存储介质,以解决现有技术的认证方式不适用安全性较高场所的问题。Embodiments of the present invention provide a WIFI identity authentication method, device, server and storage medium, so as to solve the problem that the authentication method in the prior art is not suitable for places with high security.

第一方面,本发明实施例提供了一种WIFI认证方法,该方法包括:In a first aspect, an embodiment of the present invention provides a WIFI authentication method, which includes:

响应于客户端的认证请求,向S盾服务器请求认证因素;In response to the client's authentication request, request authentication factors from the S-shield server;

将获取到的由所述认证因素生成的认证页面发送至所述客户端,以便用户通过所述客户端上显示的所述认证页面进行认证。The obtained authentication page generated by the authentication factor is sent to the client, so that the user performs authentication through the authentication page displayed on the client.

第二方面,本发明实施例还提供了一种WIFI认证装置,该装置包括,In a second aspect, an embodiment of the present invention further provides a WIFI authentication device, the device includes:

认证模块,用于响应于客户端的认证请求,向S盾模块请求认证因素;The authentication module is used to request authentication factors from the S shield module in response to the authentication request of the client;

发送模块,用于将获取到的由所述认证因素生成的认证页面发送至所述客户端,以便用户通过所述客户端上显示的所述认证页面进行认证。A sending module, configured to send the obtained authentication page generated by the authentication factor to the client, so that the user can authenticate through the authentication page displayed on the client.

第三方面,本发明实施例还提供了一种认证服务器,包括:In a third aspect, an embodiment of the present invention further provides an authentication server, including:

一个或多个处理器;one or more processors;

存储装置,用于存储一个或多个程序,storage means for storing one or more programs,

当所述一个或多个程序被所述一个或多个处理器执行,使得所述一个或多个处理器实现如本发明任意实施例所述的WIFI身份认证方法。When the one or more programs are executed by the one or more processors, the one or more processors implement the WIFI identity authentication method according to any embodiment of the present invention.

第四方面,本发明实施例还提供了一种计算机可读存储介质,其上存储有计算机程序,该程序被处理器执行时实现如本发明任意实施例所述的WIFI身份认证方法。In a fourth aspect, an embodiment of the present invention further provides a computer-readable storage medium on which a computer program is stored, and when the program is executed by a processor, implements the WIFI identity authentication method described in any embodiment of the present invention.

本发明实施例中S盾作为一种多因素身份认证软件,将S盾和认证方式相结合,增强了WIFI认证的安全性和便捷性,解决了现有技术中的认证方式只适用于一些安全性要求不高的公共场所的问题,实现了在安全性要求较高的场所上网也能进行安全认证的技术效果。As a multi-factor identity authentication software in the embodiment of the present invention, the S-shield is combined with the authentication method, which enhances the security and convenience of WIFI authentication, and solves the problem that the authentication method in the prior art is only suitable for some security It solves the problem of public places with low sexual requirements, and realizes the technical effect that security authentication can be performed even in places with high security requirements.

附图说明Description of drawings

图1是本发明实施例一提供的一种WIFI身份认证方法的流程图;FIG. 1 is a flowchart of a WIFI identity authentication method provided in Embodiment 1 of the present invention;

图2是本发明实施例二提供的一种WIFI身份认证装置的结构示意图;2 is a schematic structural diagram of a WIFI identity authentication device according to Embodiment 2 of the present invention;

图3是本发明实施例三中的一种认证服务器结构示意图。FIG. 3 is a schematic structural diagram of an authentication server in Embodiment 3 of the present invention.

具体实施方式Detailed ways

下面结合附图和实施例对本发明作进一步的详细说明。可以理解的是,此处所描述的具体实施例仅仅用于解释本发明,而非对本发明的限定。另外还需要说明的是,为了便于描述,附图中仅示出了与本发明相关的部分而非全部结构。The present invention will be further described in detail below in conjunction with the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are only used to explain the present invention, but not to limit the present invention. In addition, it should be noted that, for the convenience of description, the drawings only show some but not all structures related to the present invention.

实施例一Example 1

图1为本发明实施例一提供的一种WIFI身份认证方法的流程图,本实施例可适用于连接WIFI时进行身份认证的情况,该方法可以由一种WIFI身份认证装置来执行,该装置例如可以配置在服务器中。该方法具体包括如下步骤:FIG. 1 is a flowchart of a WIFI identity authentication method according to Embodiment 1 of the present invention. This embodiment can be applied to the situation where identity authentication is performed when connecting to WIFI. The method can be executed by a WIFI identity authentication device. For example, it can be configured in the server. The method specifically includes the following steps:

步骤110、响应于客户端的认证请求,向S盾服务器请求认证因素。Step 110: In response to the authentication request of the client, request an authentication factor from the S-shield server.

需要说明的是,先是由客户端向网关发送上网请求,网关接收该上网请求并将该请求重定向到认证服务器。此时认证服务器响应于客户端的认证请求,并向S盾服务器发送请求认证因素。其中认证因素是指当服务器生成认证页面时,需要的有相应的认证参数,而该认证参数是由S盾服务器生成的,因此只有向S盾服务器请求认证参数后,才能生成相应的认证页面。It should be noted that the client first sends an Internet access request to the gateway, and the gateway receives the Internet access request and redirects the request to the authentication server. At this time, the authentication server responds to the authentication request of the client and sends the request authentication factor to the S shield server. The authentication factor means that when the server generates an authentication page, the corresponding authentication parameters are required, and the authentication parameters are generated by the S shield server. Therefore, the corresponding authentication page can only be generated after requesting the authentication parameters from the S shield server.

步骤120、将获取到的由所述认证因素生成的认证页面发送至所述客户端,以便用户通过所述客户端上显示的所述认证页面进行认证。Step 120: Send the obtained authentication page generated by the authentication factor to the client, so that the user can authenticate through the authentication page displayed on the client.

需要说明的是,认证服务器将获取到的由认证因素生成的认证页面发送至客户端,其中,该认证页面呈现在客户端界面有两种情景,对应两种实施方式,分别为二维码认证以及推送页面认证。It should be noted that the authentication server sends the obtained authentication page generated by the authentication factor to the client, wherein, the authentication page is presented on the client interface in two scenarios, corresponding to two implementations, one is two-dimensional code authentication. And push page authentication.

其中,所述认证页面包括二维码;相应的,所述将获取到的由所述认证因素生成的认证页面发送至所述客户端,以便用户通过所述客户端上显示的所述认证页面进行认证,包括:将获取到的所述二维码发送至所述客户端,以便用户在所述客户端上利用S盾扫描所述二维码;通过所述S盾服务器获取用户扫描所述二维码的扫描结果,并根据所述扫描结果将认证成功页面发送至所述客户端。具体是此种实施方式主要针对PC端用户,当认证服务器响应于客户端的认证请求之后,向S盾服务器请求认证因素是获取二维码的消息,认证服务器得到与该信息相对应的认证页面为二维码。具体的,在此种实施方式由于获取的认证页面是二维码信息认证服务器将获取到的包含所述二维码信息的认证页面发送至所述客户端,用户利用移动终端下载的应用程序S盾扫描呈现在客户端上的二维码,S盾服务器获取到二维码扫描结果并将该结果发送至认证服务器,若扫描结果正确,用户根据客户端呈现出的界面,点击登录,即可完成身份认证,同时认证服务器将认证成功页面发送至客户端Wherein, the authentication page includes a two-dimensional code; correspondingly, the obtained authentication page generated by the authentication factor is sent to the client, so that the user can pass the authentication page displayed on the client Performing authentication, including: sending the acquired two-dimensional code to the client, so that the user scans the two-dimensional code with the S-shield on the client; obtaining the user to scan the two-dimensional code through the S-shield server The scanning result of the two-dimensional code, and the authentication success page is sent to the client according to the scanning result. Specifically, this implementation is mainly aimed at PC users. After the authentication server responds to the authentication request of the client, it requests the S shield server for the message that the authentication factor is to obtain the QR code, and the authentication server obtains the authentication page corresponding to the information as QR code. Specifically, in this embodiment, since the obtained authentication page is a two-dimensional code information authentication server sends the obtained authentication page containing the two-dimensional code information to the client, the user uses the application S downloaded by the mobile terminal. The shield scans the QR code displayed on the client, and the S shield server obtains the scan result of the QR code and sends the result to the authentication server. If the scan result is correct, the user can click to log in according to the interface presented by the client. The authentication is completed, and the authentication server sends the authentication success page to the client.

其中,所述认证页面包括推送页面;相应的,所述将获取到的由所述认证因素生成的认证页面发送至所述客户端,以便用户通过所述客户端上显示的所述认证页面进行认证,包括:将获取到的所述推送页面发送至所述客户端,所述推送页面用于用户填写认证信息;通过所述S盾服务器获取用户在所述推送页面填写认证信息的推送结果,并根据所述推送结果将认证成功页面发送至所述客户端。具体是,此种方式主要是针对移动终端用户,当认证服务器响应于客户端的认证请求之后,向S盾服务器发送的请求认证因素是推送消息,并返回推送消息,认证服务器得到与该消息相对应的认证页面为推送页面,推送页面用于用户填写认证信息,示例性的,如手机号。首先移动终端需下载S盾应用程序,认证服务器向S盾服务器调用推送页面后,S盾服务器向S盾推送消息。认证服务器接收通过S盾服务器获取的用户在推送页面填写的认证信息的推送结果,并根据该推送结果将认证成功页面发送至客户端,用户点击登录,即可完成身份认证,成功上网。若是移动终端没有该S盾,也会出现对应的页面,但是没有推送结果,不会弹出对应的认证成功页面,即不能上网。Wherein, the authentication page includes a push page; correspondingly, the obtained authentication page generated by the authentication factor is sent to the client, so that the user can perform the authentication through the authentication page displayed on the client The authentication includes: sending the obtained push page to the client, where the push page is used for the user to fill in the authentication information; obtaining the push result of the user filling in the authentication information on the push page through the S shield server, and send the authentication success page to the client according to the push result. Specifically, this method is mainly aimed at mobile terminal users. After the authentication server responds to the authentication request of the client, the request authentication factor sent to the S shield server is a push message, and the push message is returned, and the authentication server obtains the corresponding message. The authentication page is a push page, and the push page is used for the user to fill in the authentication information, for example, a mobile phone number. First, the mobile terminal needs to download the S-shield application. After the authentication server calls the push page to the S-shield server, the S-shield server pushes messages to the S-shield. The authentication server receives the push result of the authentication information filled in by the user on the push page obtained from the S-shield server, and sends the authentication success page to the client according to the push result. The user clicks to log in to complete the identity authentication and successfully access the Internet. If the mobile terminal does not have the S-shield, the corresponding page will also appear, but if there is no push result, the corresponding authentication success page will not pop up, that is, the Internet cannot be accessed.

需要说明的是,S盾是具备安全、便捷的多因素身份认证软件认证,同时S盾的自测功能能够有效的保护应用程序运行环境安全,配合后端风控系统,用户应用管理系统以及认证系统可广泛应用于云端应用保护、本地应用保护、企业网络防护、个人计算机和服务器接入认证等诸多场景。全面的为用户提供安全易用的身份认证保护方案。因此将S盾与认证方式相结合,增强了WIFI认证的安全性和便捷性,可以针对WIFI安全性要求较高的场合,示例性的,如企业。It should be noted that S-Shield is a secure and convenient multi-factor authentication software authentication. At the same time, the self-test function of S-Shield can effectively protect the security of the application running environment, and cooperate with the back-end risk control system, user application management system and authentication. The system can be widely used in cloud application protection, local application protection, enterprise network protection, personal computer and server access authentication and many other scenarios. Comprehensively provide users with a secure and easy-to-use identity authentication protection scheme. Therefore, the combination of the S-shield and the authentication method enhances the security and convenience of WIFI authentication, and can be used for occasions with high WIFI security requirements, such as enterprises.

本发明实施例中S盾作为一种多因素身份认证软件,将S盾和认证方式相结合,增强了WIFI认证的安全性和便捷性,解决了现有技术中的认证方式只适用于一些安全性要求不高的公共场所的问题,实现了在安全性要求较高的场所上网也能进行安全认证的技术效果。As a multi-factor identity authentication software in the embodiment of the present invention, the S-shield is combined with the authentication method, which enhances the security and convenience of WIFI authentication, and solves the problem that the authentication method in the prior art is only suitable for some security It solves the problem of public places with low sexual requirements, and realizes the technical effect that security authentication can be performed even in places with high security requirements.

进一步的,在认证成功之后,所述方法还包括,接收来自网关的令牌的验证信息;若所述验证信息中的令牌与预设令牌一致,则验证成功,并向网关返回验证结果。Further, after the authentication is successful, the method further includes: receiving the verification information of the token from the gateway; if the token in the verification information is consistent with the preset token, the verification is successful, and the verification result is returned to the gateway .

在上述WIFI认证成功后,为了保证用户上网稳定性以及避免不必要的网络分流,就需要在一定的时间内对用户上网情况进行验证。其中,令牌(token,主要在计算机身份认证中为令牌的意思)包含时间信息之类的标识,因此本发明实施中通过令牌来验证用户的上网情况。具体的,由于令牌是服务器自动生成的,因此可按自己定义的任意规则发送至网关,并且记录该令牌对应信息作为预设令牌。同时,网关也会提前设定每次向认证服务器发送令牌的间隔,示例性的,每一分钟发一次。因此网关按照预设的时间间隔带着对应的令牌去验证,并将该用户使用的流量信息发送给认证服务器。After the above WIFI authentication is successful, in order to ensure the stability of the user's Internet access and avoid unnecessary network traffic, it is necessary to verify the user's Internet access within a certain period of time. Among them, a token (token, which mainly means a token in computer identity authentication) includes an identifier such as time information. Therefore, in the implementation of the present invention, the user's surfing situation is verified by the token. Specifically, since the token is automatically generated by the server, it can be sent to the gateway according to any rules defined by itself, and the corresponding information of the token is recorded as a preset token. At the same time, the gateway also pre-sets the interval for sending the token to the authentication server each time, exemplarily, once every minute. Therefore, the gateway carries the corresponding token for verification according to the preset time interval, and sends the traffic information used by the user to the authentication server.

认证服务器根据自己定义的规则将认证服务器发送给网关的令牌信息和网关返回至认证服务器的令牌信息进行比对,若信息相同,返回认证成功页面,若信息不同,则认证失败,说明用户已不在网络覆盖区域,避免了网络分流情况。The authentication server compares the token information sent by the authentication server to the gateway with the token information returned by the gateway to the authentication server according to the rules defined by itself. If the information is the same, the authentication success page is returned. If the information is different, the authentication fails, indicating that the user It is no longer in the network coverage area, avoiding network shunting.

本发明实施例中S盾作为一种多因素身份认证软件,将S盾和认证方式相结合,增强了WIFI认证的安全性和便捷性,解决了现有技术中的认证方式只适用于一些安全性要求不高的公共场所的问题,实现了在安全性要求较高的场所上网也能进行安全认证的技术效果,进一步的,在WIFI认证成功之后,网关还会带着令牌去验证上网信息,这种方式能够在确保用户上网质量的同时也能够避免不必要的网络分流。As a multi-factor identity authentication software in the embodiment of the present invention, the S-shield is combined with the authentication method, which enhances the security and convenience of WIFI authentication, and solves the problem that the authentication method in the prior art is only suitable for some security To solve the problem of public places with low sexual requirements, the technical effect of security authentication can also be performed in places with high security requirements. Further, after the WIFI authentication is successful, the gateway will also take the token to verify the Internet information. In this way, unnecessary network traffic can be avoided while ensuring the quality of the user's Internet access.

实施例二Embodiment 2

图2为本发明实施例二提供的一种WIFI认证装置的结构示意图,该装置包括:认证模块210、发送模块220。FIG. 2 is a schematic structural diagram of a WIFI authentication device according to Embodiment 2 of the present invention. The device includes anauthentication module 210 and a sendingmodule 220 .

其中,认证模块210,用于响应于客户端的认证请求,向S盾模块请求认证因素;发送模块220,用于将获取到的由所述认证因素生成的认证页面发送至所述客户端,以便用户通过所述客户端上显示的所述认证页面进行认证。Theauthentication module 210 is used to request authentication factors from the S shield module in response to the authentication request of the client; the sendingmodule 220 is used to send the obtained authentication page generated by the authentication factors to the client, so that The user is authenticated through the authentication page displayed on the client.

进一步的,所述认证页面包括二维码;相应的,所述发送模块220包括:Further, the authentication page includes a two-dimensional code; correspondingly, the sendingmodule 220 includes:

二维码发送单元,用于将获取到的所述二维码发送至所述客户端,以便用户在所述客户端上利用S盾扫描所述二维码;第一认证成功页面发送单元,用于通过所述S盾模块获取用户扫描所述二维码的扫描结果,并根据所述扫描结果将所述认证成功页面发送至所述客户端。A two-dimensional code sending unit, configured to send the acquired two-dimensional code to the client, so that the user can scan the two-dimensional code on the client with the S shield; the first authentication success page sending unit, It is used to obtain the scanning result of the user scanning the two-dimensional code through the S-shield module, and send the authentication success page to the client according to the scanning result.

进一步的,所述认证页面包括推送页面;相应的,所述发送模块220包括:Further, the authentication page includes a push page; correspondingly, the sendingmodule 220 includes:

推送页面发送单元,用于将获取到的所述推送页面发送至所述客户端,所述推送页面用于用户填写认证信息;第二认证成功页面发送单元,用于通过所述S盾模块获取用户在所述推送页面填写认证信息的推送结果,并根据所述推送结果将认证成功页面发送至所述客户端。a push page sending unit, configured to send the obtained push page to the client, where the push page is used for the user to fill in authentication information; a second authentication success page sending unit, used to obtain through the S shield module The user fills in the push result of the authentication information on the push page, and sends the authentication success page to the client according to the push result.

进一步的,所述装置还包括:令牌验证模块230,用于接收来自网关的令牌的验证信息,若所述验证信息中的令牌与预设令牌一致,则验证成功,并向所述网关返回验证结果。Further, the device further includes: a token verification module 230, configured to receive the verification information of the token from the gateway, if the token in the verification information is consistent with the preset token, the verification is successful, and the verification is successful and sent to all The gateway returns the verification result.

本发明实施例中S盾作为一种多因素身份认证软件,将S盾和认证方式相结合,增强了WIFI认证的安全性和便捷性,解决了现有技术中的认证方式只适用于一些安全性要求不高的公共场所的问题,实现了在安全性要求较高的场所上网也能进行安全认证的技术效果,进一步的在WIFI认证成功之后,网关还会带着令牌去验证上网信息,这种方式能够在确保用户上网质量的同时能够避免不必要的网络分流。As a multi-factor identity authentication software in the embodiment of the present invention, the S-shield is combined with the authentication method, which enhances the security and convenience of WIFI authentication, and solves the problem that the authentication method in the prior art is only suitable for some security To solve the problem of public places with low sexual requirements, the technical effect of security authentication can be achieved even in places with high security requirements. After the WIFI authentication is successful, the gateway will also take the token to verify the Internet information. In this way, unnecessary network traffic can be avoided while ensuring the quality of the user's Internet access.

上述装置可执行本发明任意实施例所提供的WIFI认证方法,具备执行WIFI认证方法相应的功能模块和有益效果。The above device can execute the WIFI authentication method provided by any embodiment of the present invention, and has functional modules and beneficial effects corresponding to executing the WIFI authentication method.

值得注意的是,上述装置所包括的各个单元和模块只是按照功能逻辑进行划分的,但并不局限于上述的划分,只要能够实现相应的功能即可;另外,各功能单元的具体名称也只是为了便于相互区分,并不用于限制本发明的保护范围。It is worth noting that the units and modules included in the above device are only divided according to functional logic, but are not limited to the above division, as long as the corresponding functions can be realized; in addition, the specific names of the functional units are only For the convenience of distinguishing from each other, it is not intended to limit the protection scope of the present invention.

实施例三Embodiment 3

图3为本发明实施例三提供的一种认证服务器的结构示意图。图3示出了适于用来实现本发明实施方式的示例性认证服务器30的框图。图3显示的认证服务器30仅仅是一个示例,不应对本发明实施例的功能和使用范围带来任何限制。FIG. 3 is a schematic structural diagram of an authentication server according to Embodiment 3 of the present invention. Figure 3 shows a block diagram of anexemplary authentication server 30 suitable for use in implementing embodiments of the present invention. Theauthentication server 30 shown in FIG. 3 is only an example, and should not impose any limitations on the functions and scope of use of the embodiments of the present invention.

如图3所示,认证服务器30以通用计算设备的形式表现。认证服务器30的组件可以包括但不限于:一个或者多个处理器或者处理单元301,系统存储器302,连接不同系统组件(包括系统存储器302和处理单元301)的总线303。As shown in FIG. 3, theauthentication server 30 takes the form of a general-purpose computing device. The components of theauthentication server 30 may include, but are not limited to, one or more processors orprocessing units 301, asystem memory 302, and abus 303 connecting different system components (including thesystem memory 302 and the processing unit 301).

总线303表示几类总线结构中的一种或多种,包括存储器总线或者存储器控制器,外围总线,图形加速端口,处理器或者使用多种总线结构中的任意总线结构的局域总线。举例来说,这些体系结构包括但不限于工业标准体系结构(ISA)总线,微通道体系结构(MAC)总线,增强型ISA总线、视频电子标准协会(VESA)局域总线以及外围组件互连(PCI)总线。Bus 303 represents one or more of several types of bus structures, including a memory bus or memory controller, a peripheral bus, a graphics acceleration port, a processor, or a local bus using any of a variety of bus structures. By way of example, these architectures include, but are not limited to, Industry Standard Architecture (ISA) bus, Micro Channel Architecture (MAC) bus, Enhanced ISA bus, Video Electronics Standards Association (VESA) local bus, and Peripheral Component Interconnect ( PCI) bus.

认证服务器30典型地包括多种计算机系统可读介质。这些介质可以是任何能够被认证服务器30访问的可用介质,包括易失性和非易失性介质,可移动的和不可移动的介质。Authentication server 30 typically includes a variety of computer system readable media. These media can be any available media that can be accessed by theauthentication server 30, including volatile and non-volatile media, removable and non-removable media.

系统存储器302可以包括易失性存储器形式的计算机系统可读介质,例如随机存取存储器(RAM)304和/或高速缓存存储器305。认证服务器30可以进一步包括其它可移动/不可移动的、易失性/非易失性计算机系统存储介质。仅作为举例,存储系统306可以用于读写不可移动的、非易失性磁介质(图3未显示,通常称为“硬盘驱动器”)。尽管图3中未示出,可以提供用于对可移动非易失性磁盘(例如“软盘”)读写的磁盘驱动器,以及对可移动非易失性光盘(例如CD-ROM,DVD-ROM或者其它光介质)读写的光盘驱动器。在这些情况下,每个驱动器可以通过一个或者多个数据介质接口与总线303相连。存储器302可以包括至少一个程序产品,该程序产品具有一组(例如至少一个)程序模块,这些程序模块被配置以执行本发明各实施例的功能。System memory 302 may include computer system readable media in the form of volatile memory, such as random access memory (RAM) 304 and/orcache memory 305 .Authentication server 30 may further include other removable/non-removable, volatile/non-volatile computer system storage media. For example only,storage system 306 may be used to read and write to non-removable, non-volatile magnetic media (not shown in FIG. 3, commonly referred to as a "hard drive"). Although not shown in Figure 3, a disk drive may be provided for reading and writing to removable non-volatile magnetic disks (eg "floppy disks"), as well as removable non-volatile optical disks (eg CD-ROM, DVD-ROM) or other optical media) to read and write optical drives. In these cases, each drive may be connected tobus 303 through one or more data media interfaces.Memory 302 may include at least one program product having a set (eg, at least one) of program modules configured to perform the functions of various embodiments of the present invention.

具有一组(至少一个)程序模块307的程序/实用工具308,可以存储在例如存储器302中,这样的程序模块307包括但不限于操作系统、一个或者多个应用程序、其它程序模块以及程序数据,这些示例中的每一个或某种组合中可能包括网络环境的实现。程序模块307通常执行本发明所描述的实施例中的功能和/或方法。A program/utility 308 having a set (at least one) ofprogram modules 307, which may be stored, for example, inmemory 302,such program modules 307 including, but not limited to, an operating system, one or more application programs, other program modules, and program data , each or some combination of these examples may include an implementation of a network environment.Program modules 307 generally perform the functions and/or methods of the described embodiments of the present invention.

认证服务器30也可以与一个或多个外部设备309(例如键盘、指向设备、显示器310等)通信,还可与一个或者多个使得用户能与该认证服务器30交互的设备通信,和/或与使得该认证服务器30能与一个或多个其它计算设备进行通信的任何设备(例如网卡,调制解调器等等)通信。这种通信可以通过输入/输出(I/O)接口311进行。并且,认证服务器30还可以通过网络适配器312与一个或者多个网络(例如局域网(LAN),广域网(WAN)和/或公共网络,例如因特网)通信。如图所示,网络适配器312通过总线303与认证服务器30的其它模块通信。应当明白,尽管图3中未示出,可以结合认证服务器30使用其它硬件和/或软件模块,包括但不限于:微代码、设备驱动器、冗余处理单元、外部磁盘驱动阵列、RAID系统、磁带驱动器以及数据备份存储系统等。Authentication server 30 may also communicate with one or more external devices 309 (eg, keyboards, pointing devices,display 310, etc.), may also communicate with one or more devices that enable a user to interact withauthentication server 30, and/or communicate with Any device (eg, network card, modem, etc.) that enables theauthentication server 30 to communicate with one or more other computing devices. Such communication may take place through input/output (I/O)interface 311 . Also, theauthentication server 30 may communicate with one or more networks (eg, a local area network (LAN), a wide area network (WAN), and/or a public network such as the Internet) through anetwork adapter 312 . As shown,network adapter 312 communicates with other modules ofauthentication server 30 viabus 303 . It should be understood that, although not shown in FIG. 3, other hardware and/or software modules may be used in conjunction withauthentication server 30, including but not limited to: microcode, device drivers, redundant processing units, external disk drive arrays, RAID systems, tapes drives and data backup storage systems, etc.

处理单元301通过运行存储在系统存储器302中的程序,从而执行各种功能应用以及数据处理,例如实现本发明实施例所提供的一种WIFI认证方法。Theprocessing unit 301 executes various functional applications and data processing by running a program stored in thesystem memory 302, for example, to implement a WIFI authentication method provided by the embodiment of the present invention.

实施例四Embodiment 4

本实施例提供一种计算机可读存储介质,其上存储有计算机程序,该程序被处理器执行时实现如本发明任意实施例所述的一种WIFI认证方法。This embodiment provides a computer-readable storage medium on which a computer program is stored, and when the program is executed by a processor, implements a WIFI authentication method according to any embodiment of the present invention.

本发明实施例的计算机存储介质,可以采用一个或多个计算机可读的介质的任意组合。计算机可读介质可以是计算机可读信号介质或者计算机可读存储介质。计算机可读存储介质例如可以是——但不限于——电、磁、光、电磁、红外线、或半导体的系统、装置或器件,或者任意以上的组合。计算机可读存储介质的更具体的例子(非穷举的列表)包括:具有一个或多个导线的电连接、便携式计算机磁盘、硬盘、随机存取存储器(RAM)、只读存储器(ROM)、可擦式可编程只读存储器(EPROM或闪存)、光纤、便携式紧凑磁盘只读存储器(CD-ROM)、光存储器件、磁存储器件、或者上述的任意合适的组合。在本文件中,计算机可读存储介质可以是任何包含或存储程序的有形介质,该程序可以被指令执行系统、装置或者器件使用或者与其结合使用。The computer storage medium in the embodiments of the present invention may adopt any combination of one or more computer-readable mediums. The computer-readable medium may be a computer-readable signal medium or a computer-readable storage medium. The computer-readable storage medium can be, for example, but not limited to, an electrical, magnetic, optical, electromagnetic, infrared, or semiconductor system, apparatus or device, or a combination of any of the above. More specific examples (a non-exhaustive list) of computer readable storage media include: electrical connections having one or more wires, portable computer disks, hard disks, random access memory (RAM), read only memory (ROM), Erasable programmable read only memory (EPROM or flash memory), optical fiber, portable compact disk read only memory (CD-ROM), optical storage devices, magnetic storage devices, or any suitable combination of the above. In this document, a computer-readable storage medium can be any tangible medium that contains or stores a program that can be used by or in conjunction with an instruction execution system, apparatus, or device.

计算机可读的信号介质可以包括在基带中或者作为载波一部分传播的数据信号,其中承载了计算机可读的程序代码。这种传播的数据信号可以采用多种形式,包括但不限于电磁信号、光信号或上述的任意合适的组合。计算机可读的信号介质还可以是计算机可读存储介质以外的任何计算机可读介质,该计算机可读介质可以发送、传播或者传输用于由指令执行系统、装置或者器件使用或者与其结合使用的程序。A computer-readable signal medium may include a propagated data signal in baseband or as part of a carrier wave, with computer-readable program code embodied thereon. Such propagated data signals may take a variety of forms, including but not limited to electromagnetic signals, optical signals, or any suitable combination of the foregoing. A computer-readable signal medium can also be any computer-readable medium other than a computer-readable storage medium that can transmit, propagate, or transport the program for use by or in connection with the instruction execution system, apparatus, or device .

计算机可读介质上包含的程序代码可以用任何适当的介质传输,包括——但不限于无线、电线、光缆、RF等等,或者上述的任意合适的组合。Program code embodied on a computer readable medium may be transmitted using any suitable medium, including - but not limited to wireless, wireline, optical fiber cable, RF, etc., or any suitable combination of the foregoing.

可以以一种或多种程序设计语言或其组合来编写用于执行本发明操作的计算机程序代码,所述程序设计语言包括面向对象的程序设计语言—诸如Java、Smalltalk、C++,还包括常规的过程式程序设计语言——诸如“C”语言或类似的程序设计语言。程序代码可以完全地在用户计算机上执行、部分地在用户计算机上执行、作为一个独立的软件包执行、部分在用户计算机上部分在远程计算机上执行、或者完全在远程计算机或服务器上执行。在涉及远程计算机的情形中,远程计算机可以通过任意种类的网络——包括局域网(LAN)或广域网(WAN)—连接到用户计算机,或者,可以连接到外部计算机(例如利用因特网服务提供商来通过因特网连接)。Computer program code for carrying out operations of the present invention may be written in one or more programming languages, including object-oriented programming languages—such as Java, Smalltalk, C++, but also conventional Procedural programming language - such as the "C" language or similar programming language. The program code may execute entirely on the user's computer, partly on the user's computer, as a stand-alone software package, partly on the user's computer and partly on a remote computer, or entirely on the remote computer or server. In the case of a remote computer, the remote computer may be connected to the user's computer through any kind of network, including a local area network (LAN) or a wide area network (WAN), or may be connected to an external computer (eg, using an Internet service provider through Internet connection).

注意,上述仅为本发明的较佳实施例及所运用技术原理。本领域技术人员会理解,本发明不限于这里所述的特定实施例,对本领域技术人员来说能够进行各种明显的变化、重新调整和替代而不会脱离本发明的保护范围。因此,虽然通过以上实施例对本发明进行了较为详细的说明,但是本发明不仅仅限于以上实施例,在不脱离本发明构思的情况下,还可以包括更多其他等效实施例,而本发明的范围由所附的权利要求范围决定。Note that the above are only preferred embodiments of the present invention and applied technical principles. Those skilled in the art will understand that the present invention is not limited to the specific embodiments described herein, and various obvious changes, readjustments and substitutions can be made by those skilled in the art without departing from the protection scope of the present invention. Therefore, although the present invention has been described in detail through the above embodiments, the present invention is not limited to the above embodiments, and can also include more other equivalent embodiments without departing from the concept of the present invention. The scope is determined by the scope of the appended claims.

Claims (6)

Translated fromChinese
1.一种WIFI认证方法,应用于认证服务器,其特征在于,包括:1. A WIFI authentication method, applied to an authentication server, is characterized in that, comprising:响应于客户端的认证请求,向S盾服务器请求认证因素;In response to the client's authentication request, request authentication factors from the S-shield server;将获取到的由所述认证因素生成的认证页面发送至所述客户端,以便用户通过所述客户端上显示的所述认证页面进行认证;sending the obtained authentication page generated by the authentication factor to the client, so that the user can authenticate through the authentication page displayed on the client;所述认证页面包括二维码或推送页面;The authentication page includes a two-dimensional code or a push page;所述认证页面包括二维码时,所述将获取到的由所述认证因素生成的认证页面发送至所述客户端,以便用户通过所述客户端上显示的所述认证页面进行认证,包括:When the authentication page includes a two-dimensional code, the obtained authentication page generated by the authentication factor is sent to the client, so that the user can authenticate through the authentication page displayed on the client, including :将获取到的所述二维码发送至所述客户端,以便用户利用移动终端的S盾扫描呈现在客户端上的二维码;其中,所述客户端为PC端;Send the acquired two-dimensional code to the client, so that the user scans the two-dimensional code presented on the client by using the S shield of the mobile terminal; wherein, the client is a PC;所述的S盾为多因素身份认证软件;The S shield is multi-factor authentication software;通过所述S盾服务器获取用户扫描所述二维码的扫描结果,并根据所述扫描结果将认证成功页面发送至所述客户端;Obtain the scan result of the user scanning the QR code through the S shield server, and send the authentication success page to the client according to the scan result;所述认证页面包括推送页面时,所述将获取到的由所述认证因素生成的认证页面发送至所述客户端,以便用户通过所述客户端上显示的所述认证页面进行认证,包括:When the authentication page includes a push page, sending the obtained authentication page generated by the authentication factor to the client, so that the user can authenticate through the authentication page displayed on the client, including:将获取到的所述推送页面发送至所述客户端,所述推送页面用于用户填写认证信息;其中,所述客户端为移动终端;sending the obtained push page to the client, where the push page is used for the user to fill in authentication information; wherein the client is a mobile terminal;通过所述S盾服务器获取用户在所述推送页面填写认证信息的推送结果,并根据所述推送结果将认证成功页面发送至所述客户端。Obtain the push result of the user filling in the authentication information on the push page through the S shield server, and send the authentication success page to the client according to the push result.2.根据权利要求1所述的方法,其特征在于,在认证成功之后,所述方法还包括:2. The method according to claim 1, wherein after the authentication is successful, the method further comprises:接收来自网关的令牌验证信息;Receive token verification information from the gateway;若所述验证信息中的令牌与预设令牌一致,则验证成功,并向所述网关返回验证结果。If the token in the verification information is consistent with the preset token, the verification is successful, and the verification result is returned to the gateway.3.一种WIFI认证装置,应用于认证服务器,其特征在于,包括:3. A WIFI authentication device, applied to an authentication server, characterized in that it comprises:认证模块,用于响应于客户端的认证请求,向S盾模块请求认证因素;The authentication module is used to request authentication factors from the S shield module in response to the authentication request of the client;发送模块,用于将获取到的由所述认证因素生成的认证页面发送至所述客户端,以便用户通过所述客户端上显示的所述认证页面进行认证;a sending module, configured to send the obtained authentication page generated by the authentication factor to the client, so that the user can authenticate through the authentication page displayed on the client;所述认证页面包括二维码或推送页面;The authentication page includes a two-dimensional code or a push page;所述认证页面包括二维码时,相应的,所述发送模块包括:When the authentication page includes a two-dimensional code, correspondingly, the sending module includes:二维码发送单元,用于将获取到的所述二维码发送至所述客户端,以便用户利用移动终端的S盾扫描呈现在客户端上的二维码;其中,所述客户端为PC端;A two-dimensional code sending unit, configured to send the acquired two-dimensional code to the client, so that the user can scan the two-dimensional code presented on the client by using the S shield of the mobile terminal; wherein, the client is PC side;所述的S盾为多因素身份认证软件;The S shield is multi-factor authentication software;第一认证成功页面发送单元,用于通过所述S盾模块获取用户扫描所述二维码的扫描结果,并根据所述扫描结果将认证成功页面发送至所述客户端;a first authentication success page sending unit, configured to obtain the scan result of the user scanning the two-dimensional code through the S shield module, and send the authentication success page to the client according to the scan result;当所述认证页面包括推送页面时,相应的,所述发送模块包括:When the authentication page includes a push page, correspondingly, the sending module includes:推送页面发送单元,用于将获取到的所述推送页面发送至所述客户端,所述推送页面用于用户填写认证信息;其中,所述客户端为移动终端;a push page sending unit, configured to send the obtained push page to the client, where the push page is used for the user to fill in authentication information; wherein the client is a mobile terminal;第二认证成功页面发送单元,用于通过所述S盾模块获取用户在所述推送页面填写认证信息的推送结果,并根据所述推送结果将认证成功页面发送至客户端。The second authentication success page sending unit is configured to obtain the push result of the user filling in the authentication information on the push page through the S shield module, and send the authentication success page to the client according to the push result.4.根据权利要求3所述的装置,其特征在于,所述装置还包括:4. The apparatus according to claim 3, wherein the apparatus further comprises:令牌验证模块,用于接收来自网关的令牌的验证信息,若所述验证信息中的令牌与预设令牌一致,则验证成功,并向网关返回验证结果。The token verification module is used for receiving verification information of the token from the gateway. If the token in the verification information is consistent with the preset token, the verification is successful, and the verification result is returned to the gateway.5.一种认证服务器,其特征在于,所述认证服务器包括:5. An authentication server, characterized in that the authentication server comprises:一个或多个处理器;one or more processors;存储装置,用于存储一个或多个程序,storage means for storing one or more programs,当所述一个或多个程序被所述一个或多个处理器执行,使得所述一个或多个处理器实现如权利要求1-2中任一所述的WIFI认证方法。When the one or more programs are executed by the one or more processors, the one or more processors implement the WIFI authentication method according to any one of claims 1-2.6.一种计算机可读存储介质,其上存储有计算机程序,其特征在于,该程序被处理器执行时实现如权利要求1-2中任一所述的WIFI认证方法。6. A computer-readable storage medium on which a computer program is stored, characterized in that, when the program is executed by a processor, the WIFI authentication method according to any one of claims 1-2 is implemented.
CN201810039329.7A2018-01-162018-01-16WIFI authentication method, device, server and storage mediumActiveCN108282472B (en)

Priority Applications (1)

Application NumberPriority DateFiling DateTitle
CN201810039329.7ACN108282472B (en)2018-01-162018-01-16WIFI authentication method, device, server and storage medium

Applications Claiming Priority (1)

Application NumberPriority DateFiling DateTitle
CN201810039329.7ACN108282472B (en)2018-01-162018-01-16WIFI authentication method, device, server and storage medium

Publications (2)

Publication NumberPublication Date
CN108282472A CN108282472A (en)2018-07-13
CN108282472Btrue CN108282472B (en)2020-11-17

Family

ID=62803752

Family Applications (1)

Application NumberTitlePriority DateFiling Date
CN201810039329.7AActiveCN108282472B (en)2018-01-162018-01-16WIFI authentication method, device, server and storage medium

Country Status (1)

CountryLink
CN (1)CN108282472B (en)

Families Citing this family (2)

* Cited by examiner, † Cited by third party
Publication numberPriority datePublication dateAssigneeTitle
CN109428893A (en)*2018-12-252019-03-05武汉思普崚技术有限公司A kind of identity identifying method, apparatus and system
CN111414604B (en)*2019-01-082023-10-03阿里巴巴集团控股有限公司Authentication method, device, system and storage medium

Citations (6)

* Cited by examiner, † Cited by third party
Publication numberPriority datePublication dateAssigneeTitle
CN103401884A (en)*2013-08-162013-11-20深信服网络科技(深圳)有限公司Authentication method and system for public wireless environment Internet access based on micro message
CN103945380A (en)*2014-04-102014-07-23深圳市信锐网科技术有限公司Method and system for network login authentication based on graphic code
CN104168564A (en)*2014-07-022014-11-26北京交通大学Authentication method and device based on GPRS network and integrated identification network
WO2014189262A1 (en)*2013-05-242014-11-27Strix Inc.User terminal authentication method of access point apparatus
CN104254073A (en)*2014-09-032014-12-31深信服网络科技(深圳)有限公司Method and device for authentication of access terminal
CN107529164A (en)*2017-09-072017-12-29上海斐讯数据通信技术有限公司A kind of portal certifications, wireless network access method and system

Family Cites Families (5)

* Cited by examiner, † Cited by third party
Publication numberPriority datePublication dateAssigneeTitle
CN101437048B (en)*2008-11-112013-04-17中国移动通信集团北京有限公司Method and system for pushing personalized page
CN102932793A (en)*2012-11-152013-02-13北京易和迅科技有限公司Wireless network authentication method and system based on two-dimension code
CN103428203B (en)*2013-07-242016-06-29福建星网锐捷网络有限公司Access control method and equipment
CN103747000B (en)*2014-01-132017-08-25深信服科技股份有限公司Access the authentication method and device of wireless network
CN107277812A (en)*2017-07-112017-10-20上海斐讯数据通信技术有限公司A kind of wireless network authentication method and system based on Quick Response Code

Patent Citations (6)

* Cited by examiner, † Cited by third party
Publication numberPriority datePublication dateAssigneeTitle
WO2014189262A1 (en)*2013-05-242014-11-27Strix Inc.User terminal authentication method of access point apparatus
CN103401884A (en)*2013-08-162013-11-20深信服网络科技(深圳)有限公司Authentication method and system for public wireless environment Internet access based on micro message
CN103945380A (en)*2014-04-102014-07-23深圳市信锐网科技术有限公司Method and system for network login authentication based on graphic code
CN104168564A (en)*2014-07-022014-11-26北京交通大学Authentication method and device based on GPRS network and integrated identification network
CN104254073A (en)*2014-09-032014-12-31深信服网络科技(深圳)有限公司Method and device for authentication of access terminal
CN107529164A (en)*2017-09-072017-12-29上海斐讯数据通信技术有限公司A kind of portal certifications, wireless network access method and system

Also Published As

Publication numberPublication date
CN108282472A (en)2018-07-13

Similar Documents

PublicationPublication DateTitle
US12355741B2 (en)Controlling access to resources on a network
US10958671B2 (en)Securing services in a networked computing environment
US9769266B2 (en)Controlling access to resources on a network
CN110995689A (en)Method and device for user identity authentication
CN113542201B (en)Access control method and equipment for Internet service
JPWO2012081404A1 (en) Authentication system, authentication server, service providing server, authentication method, and program
CN112491778A (en)Authentication method, device, system and medium
CN109359449B (en)Authentication method, device, server and storage medium based on micro service
WO2019141192A1 (en)Wi-fi connection method, computer device and storage medium
CN107181802B (en) Intelligent hardware control method and device, server, storage medium
WO2023241060A1 (en)Data access method and apparatus
KR20120096741A (en)Virtual device cloud network system and method for providing applications on heterogeneous device platform
CN105554136B (en) Backup data restoration method, device and system
CN108833590B (en)Voice recognition service proxy server and proxy method
CN108282472B (en)WIFI authentication method, device, server and storage medium
WO2017211201A1 (en)Data transmission method, data transmitter, data receiver, and system
CN110781481A (en)Single sign-on method, client, server, and storage medium
TW201335777A (en)Distributed data storing and accessing system and method
US12413575B2 (en)Authenticating and authorizing api calls with multiple factors
CN107888478B (en) Voice information forwarding method, device and storage medium during instant messaging
CN110933014B (en)Cloud service access method, device and computer-readable storage medium
CA2850114C (en)Techniques for accessing logical networks via a programmatic service call
CN112492058A (en)Method, system, electronic device and medium for distributing real source IPv6 address
CN110769027A (en) Service request processing method, device, computer equipment and storage medium
US20230088489A1 (en)Secure remote support of systems deployed in a private network

Legal Events

DateCodeTitleDescription
PB01Publication
PB01Publication
SE01Entry into force of request for substantive examination
SE01Entry into force of request for substantive examination
GR01Patent grant
GR01Patent grant
TR01Transfer of patent right

Effective date of registration:20241018

Address after:Room 503, Building 3, No. 6 Xicheng Xi'an North Road, Xinluo District, Longyan City, Fujian Province 364031

Patentee after:Xie Xinyong

Country or region after:China

Address before:Room 211, building 4, No. 1411, Yecheng Road, Jiading Industrial Zone, Jiading District, Shanghai, 201821

Patentee before:SHANGHAI PEOPLENET SECURITY TECHNOLOGY Co.,Ltd.

Country or region before:China

TR01Transfer of patent right
TR01Transfer of patent right

Effective date of registration:20241024

Address after:1001 Changhong Technology Building, No.18 Keji South 12th Road, High tech Zone Community, Yuehai Street, Nanshan District, Shenzhen City, Guangdong Province 518063

Patentee after:Shenzhen Huahui Xingchen Digital Technology Co.,Ltd.

Country or region after:China

Address before:Room 503, Building 3, No. 6 Xicheng Xi'an North Road, Xinluo District, Longyan City, Fujian Province 364031

Patentee before:Xie Xinyong

Country or region before:China

TR01Transfer of patent right

[8]ページ先頭

©2009-2025 Movatter.jp