WO2019011328A1

Movatterモバイル変換

Info

Publication number: WO2019011328A1
Application number: PCT/CN2018/095625
Authority: WO
Inventors: 高夕玲
Original assignee: ZTE Corp
Current assignee: ZTE Corp
Priority date: 2017-07-14
Filing date: 2018-07-13
Publication date: 2019-01-17
Anticipated expiration: 2020-01-14
Also published as: CN109429228A

Abstract

Translated fromChinese

本公开实施例公开了一种无线接入方法和装置，该方法包括：通过安全传输通道获取接入无线接入点所需的接入信息；以及根据所述接入信息接入所述无线接入点。An embodiment of the present disclosure discloses a wireless access method and apparatus, including: acquiring access information required for accessing a wireless access point through a secure transmission channel; and accessing the wireless connection according to the access information Entry point.

Description

Translated fromChinese

无线接入方法和装置Wireless access method and device

技术领域Technical field

本公开涉及(但不限于)无线通信领域。The present disclosure relates to, but is not limited to, the field of wireless communications.

背景技术Background technique

随着无线通信技术的发展，通过将待接入设备接入无线接入点(Acess Point，AP)来实现待接入设备与无线网络的互联，已经成为一种最常用的无线接入手段。With the development of the wireless communication technology, the access device and the wireless network are interconnected by accessing the device to be accessed (Acess Point, AP), which has become the most commonly used wireless access means.

目前用户对于无线接入具有两个基本诉求：无线接入的安全性和用户操作的便捷性。然而，这两个基本诉求往往是相互矛盾的，一方面，通过现有的无线接入方法虽然可以保障无线接入的安全性，但是影响用户进行无线接入操作的便捷性。另一方面，当待接入设备接入无线接入点后，待接入设备会将服务集标识(Service Set Identifier，SSID)和安全密钥存储在本地，这存在SSID和安全密钥被盗取的风险，影响安全性。At present, users have two basic demands for wireless access: the security of wireless access and the convenience of user operation. However, these two basic demands are often contradictory. On the one hand, although the existing wireless access method can guarantee the security of wireless access, it affects the convenience of the user to perform wireless access operations. On the other hand, when the device to be accessed accesses the wireless access point, the device to be accessed stores the Service Set Identifier (SSID) and the security key locally, and the SSID and the security key are stolen. Take risks and affect safety.

发明内容Summary of the invention

根据本公开实施例，提供了一种无线接入方法，所述方法包括：通过安全传输通道获取接入无线接入点所需的接入信息；以及根据所述接入信息接入所述无线接入点。According to an embodiment of the present disclosure, there is provided a wireless access method, the method comprising: acquiring access information required to access a wireless access point through a secure transmission channel; and accessing the wireless according to the access information Access Point.

根据本公开实施例，还提供了一种无线接入方法，所述方法包括：通过安全传输通道向待接入设备发送接入无线接入点所需的接入信息，以使所述待接入设备根据所述接入信息接入无线接入点。According to an embodiment of the present disclosure, a wireless access method is further provided, the method includes: transmitting, by using a secure transmission channel, access information required for accessing a wireless access point to a device to be accessed, so that the to-be-connected The ingress device accesses the wireless access point according to the access information.

根据本公开实施例，还提供了一种无线接入装置，包括：获取模块，其设置为通过安全传输通道获取接入无线接入点所需的接入信息；以及接入模块，其设置为根据所述接入信息接入所述无线接入点。According to an embodiment of the present disclosure, there is also provided a wireless access apparatus, comprising: an acquisition module configured to acquire access information required to access a wireless access point through a secure transmission channel; and an access module configured to Accessing the wireless access point according to the access information.

根据本公开实施例，还提供了一种无线接入装置，包括：传输模块，其设置为通过安全传输通道向待接入设备发送接入无线接入点所需的接入信息，以使所述待接入设备根据所述接入信息接入无线接入点。According to an embodiment of the present disclosure, a wireless access apparatus is further provided, including: a transmission module, configured to send, by using a secure transmission channel, access information required for accessing a wireless access point to a device to be accessed, so as to enable The access device is configured to access the wireless access point according to the access information.

根据本公开实施例，还提供了一种无线设备，包括存储器和处理器，其中，存储器和处理器耦合，所述处理器在运行存储在所述存储器上的计算机程序时，执行根据本公开的无线接入方法。According to an embodiment of the present disclosure, there is also provided a wireless device comprising a memory and a processor, wherein the memory is coupled to a processor, the processor executing a computer program stored on the memory, executing a computer program according to the present disclosure Wireless access method.

根据本公开实施例，还提供了一种无线接入点，包括存储器和处理器，其中，存储器和处理器耦合，所述处理器在运行存储在所述存储器上的计算机程序时，执行根据本公开的无线接入方法。According to an embodiment of the present disclosure, there is also provided a wireless access point comprising a memory and a processor, wherein the memory is coupled to a processor, the processor executing the computer program stored on the memory, according to the present invention Public wireless access method.

根据本公开实施例，还提供一种计算机可读存储介质，其上存储有计算机程序，所述计算机程序被一个或者多个处理器执行时，所述一个或者多个处理器执行根据本公开的无线接入方法。According to an embodiment of the present disclosure, there is also provided a computer readable storage medium having stored thereon a computer program executed by one or more processors, the one or more processors executing according to the present disclosure Wireless access method.

附图说明DRAWINGS

附图用来提供对本公开技术方案的进一步理解，并且构成说明书的一部分，与本申请的实施例一起用于解释本公开的技术方案，并不构成对本公开技术方案的限制。在附图中：The drawings are used to provide a further understanding of the technical solutions of the present disclosure, and constitute a part of the specification, and the embodiments of the present application are used to explain the technical solutions of the present disclosure, and do not constitute a limitation of the technical solutions of the present disclosure. In the drawing:

图1为根据本公开实施例的无线接入方法的流程示意图；1 is a schematic flow chart of a wireless access method according to an embodiment of the present disclosure;

图2为根据本公开另一实施例的无线接入方法的流程示意图；2 is a schematic flowchart of a wireless access method according to another embodiment of the present disclosure;

图3为根据本公开另一实施例的无线接入方法的流程示意图；FIG. 3 is a schematic flowchart of a wireless access method according to another embodiment of the present disclosure; FIG.

图4示出了根据本公开实施例的无线接入系统的结构框图；FIG. 4 is a block diagram showing the structure of a wireless access system according to an embodiment of the present disclosure;

图5示出了根据本公开实施例的主机端的结构示意图；FIG. 5 is a schematic structural diagram of a host end according to an embodiment of the present disclosure;

图6示出了根据本公开实施例的设备端的结构示意图；FIG. 6 is a schematic structural diagram of a device end according to an embodiment of the present disclosure;

图7示出了根据本公开实施例的基于SSID和安全密钥方式进行无线接入的方法的流程图；FIG. 7 illustrates a flowchart of a method of wireless access based on an SSID and a security key mode, according to an embodiment of the present disclosure;

图8为根据本公开实施例的无线接入装置的结构示意图；以及FIG. 8 is a schematic structural diagram of a wireless access device according to an embodiment of the present disclosure;

图9为根据本公开另一实施例的无线接入装置的结构示意图。FIG. 9 is a schematic structural diagram of a wireless access device according to another embodiment of the present disclosure.

具体实施方式Detailed ways

为使本公开的技术方案和特征更加清楚明白，下文中将结合附图对本公开的实施例进行详细说明。需要说明的是，在不冲突的情况下，本申请中的实施例及实施例中的特征可以相互任意组合。In order to make the technical solutions and features of the present disclosure more apparent, the embodiments of the present disclosure will be described in detail below with reference to the accompanying drawings. It should be noted that, in the case of no conflict, the features in the embodiments and the embodiments in the present application may be arbitrarily combined with each other.

在附图的流程图示出的步骤可以在诸如一组计算机可执行指令的计算机系统中执行。此外，虽然在流程图中示出了逻辑顺序，但是在某些情况下，可以以不同于此处的顺序执行所示出或描述的步骤。The steps illustrated in the flowchart of the figures may be executed in a computer system such as a set of computer executable instructions. Moreover, although logical sequences are shown in the flowcharts, in some cases the steps shown or described may be performed in a different order than the ones described herein.

用户对于无线接入具有安全性和便捷性两个方面的基本需求。然而，这两个在某些情况下是相互矛盾的。一方面，通过现有的无线接入方法虽然可以保障无线接入的安全性，但是，对于不熟悉无线接入操作流程的用户来说，操作流程较为繁琐，不能快速便捷地将待接入设备接入无线接入点，影响用户进行无线接入操作的便捷性。另一方面，当待接入设备接入无线接入点后，待接入设备会将SSID和、安全密钥存储在本地，这样虽然便于用户的待接入设备进行无线接入，但是存在SSID和安全密钥被盗取的风险，影响安全性。Users have basic requirements for security and convenience in wireless access. However, these two are contradictory in some cases. On the one hand, the existing wireless access method can ensure the security of the wireless access. However, for users who are not familiar with the wireless access operation process, the operation process is cumbersome, and the device to be accessed cannot be quickly and conveniently. Access to the wireless access point affects the convenience of the user to perform wireless access operations. On the other hand, when the device to be accessed accesses the wireless access point, the device to be accessed stores the SSID and the security key locally, so that although the device to be accessed by the user is convenient for wireless access, the SSID exists. And the risk of security keys being stolen, affecting security.

以连接无线保真(Wireless Fidelity，WiFi)网络为例，若通过SSID和安全密钥方式进行无线接入，用户首先需要获知无线接入点的SSID以及安全密钥，然后需要在待接入设备上找到连接WiFi的界面，打开WiFi开关并选取对应的SSID，最后输入相应的安全密钥进行接入。同样，若通过WiFi保护设置(WiFi Protected Setup，WPS)的方式进行无线接入，用户首先需要知晓WPS的概念，然后需要在待接入设备上找到连接WPS的界面并打开WPS连接，最后，在规定时间内在无线接入点的多个按键中找到WPS按钮并触发WPS动作。由此可见，现有的无线接入操作流程不利于用户便捷地接入无线接入点。For example, if a wireless Fidelity (WiFi) network is connected, if the SSID and the security key are used for wireless access, the user first needs to know the SSID and security key of the wireless access point, and then needs to be in the device to be accessed. Find the interface to connect to WiFi, open the WiFi switch and select the corresponding SSID, and finally enter the corresponding security key to access. Similarly, if wireless access is performed by means of WiFi Protected Setup (WPS), the user first needs to know the concept of WPS, and then needs to find the interface connecting WPS and open the WPS connection on the device to be accessed. Finally, The WPS button is found in a plurality of buttons of the wireless access point and the WPS action is triggered within a specified time. It can be seen that the existing wireless access operation procedure is not conducive to the user's convenient access to the wireless access point.

图1为根据本公开实施例的无线接入方法的流程示意图，该无线接入方法可应用于待接入设备。FIG. 1 is a schematic flowchart of a radio access method according to an embodiment of the present disclosure, where the radio access method is applicable to a device to be accessed.

如图1所示，根据本公开实施例的无线接入方法可以包括步骤S101至S102。As shown in FIG. 1, a wireless access method according to an embodiment of the present disclosure may include steps S101 to S102.

在步骤S101，通过安全传输通道获取接入无线接入点所需的接入信息。In step S101, access information required for accessing the wireless access point is obtained through the secure transmission channel.

在步骤S102，根据所述接入信息接入所述无线接入点。In step S102, the wireless access point is accessed according to the access information.

待接入无线接入点的设备(即，待接入设备)通过安全传输通道获取接入无线接入点所需的接入信息，并根据所述接入信息接入所述无线接入点。这样，用户无须熟悉无线接入操作的流程，就可以快速便捷地接入无线接入点，提高了用户进行无线接入操作的便捷性。另一方面，待接入设备可以通过无线通道获取接入信息，保证了信息传输的安全性。此外，待接入设备无须将接入信息存储在本地，而直接从安全通道获取接入信息，避免了接入信息被盗取的风险，提高了无线接入的安全性。The device to be accessed by the wireless access point (ie, the device to be accessed) obtains access information required for accessing the wireless access point through the secure transmission channel, and accesses the wireless access point according to the access information. . In this way, the user does not need to be familiar with the flow of the wireless access operation, and can quickly and conveniently access the wireless access point, thereby improving the convenience of the user to perform wireless access operations. On the other hand, the device to be accessed can obtain access information through the wireless channel, ensuring the security of information transmission. In addition, the access device does not need to store the access information locally, but directly obtains the access information from the secure channel, thereby avoiding the risk of the access information being stolen and improving the security of the wireless access.

根据本公开实施例，在步骤S101之前，所述方法还可以包括：与所述无线接入点建立传输数据的安全传输通道。According to an embodiment of the present disclosure, before step S101, the method may further include: establishing a secure transmission channel for transmitting data with the wireless access point.

根据本公开实施例，可以通过数据连接线的方式与所述无线接入点建立物理通道，并且在所述物理通道上建立传输数据的安全传输通道。According to an embodiment of the present disclosure, a physical channel may be established with the wireless access point by means of a data connection line, and a secure transmission channel for transmitting data may be established on the physical channel.

这里，物理通道可以为通过近距离的有线连接方式建立起来的物理通道。通用串行总线(Universal Serial Bus，USB)是一种使用场景非常普遍的数据传输方式，具有近距离、面对面操作的特点，可以保证足够的安全性。根据本公开实施例，可以通过USB数据线连接无线接入点和待接入设备，相应地，物理通道可以为USB物理通道。然而，本公开不限于此，也可以通过其他有线通信方式(例如光纤、非对称数字用户线路(Asymmetrical Digital Subscriber Loop，ADSL)、以太网等)来建立无线接入点和待接入设备之间相应的物理通道。本公开实施例对于物理通道的具体实现方式不作限定。Here, the physical channel can be a physical channel established by a close-range wired connection. Universal Serial Bus (USB) is a very common data transmission method used in the scene. It has the characteristics of close-range and face-to-face operation, which can ensure sufficient security. According to an embodiment of the present disclosure, the wireless access point and the device to be accessed may be connected through a USB data line, and accordingly, the physical channel may be a USB physical channel. However, the disclosure is not limited thereto, and may be established between other wireless access points and devices to be accessed by other wired communication methods, such as optical fibers, Asymmetrical Digital Subscriber Loop (ADSL), Ethernet, and the like. The corresponding physical channel. The specific implementation manner of the physical channel is not limited in the embodiment of the present disclosure.

根据本公开实施例，步骤S101可以包括：向所述无线接入点发送获取接入无线接入点所需的接入信息的请求信息；以及接收所述无线接入点根据所述请求信息发送的所述接入信息。According to an embodiment of the present disclosure, step S101 may include: transmitting, to the wireless access point, request information for acquiring access information required to access a wireless access point; and receiving the wireless access point to send according to the request information. The access information.

根据本公开实施例，在步骤S102之后，所述方法还可以包括：关闭所述安全传输通道，即，断开与所述无线接入点的物理连接。According to an embodiment of the present disclosure, after step S102, the method may further include: closing the secure transmission channel, that is, disconnecting the physical connection with the wireless access point.

根据本公开实施例，接入无线接入点所需的接入信息可以包括：所述无线接入点的标识信息和安全密钥。此外，所述接入信息还可以包括加密方式等。标识信息可以为无线接入点的SSID，也可以为其他标识信息，本公开对此不做限定。According to an embodiment of the present disclosure, the access information required to access the wireless access point may include: identification information of the wireless access point and a security key. In addition, the access information may further include an encryption method or the like. The identifier information may be an SSID of the wireless access point, or may be other identifier information, which is not limited in this disclosure.

图2为根据本公开另一实施例的种无线接入方法的流程示意图，该方法可以应用于无线接入点。FIG. 2 is a schematic flowchart of a wireless access method according to another embodiment of the present disclosure, and the method may be applied to a wireless access point.

如图2所示，根据本公开实施例的种无线接入方法可以包括步骤S201。As shown in FIG. 2, a wireless access method according to an embodiment of the present disclosure may include step S201.

在步骤S201，通过安全传输通道向待接入设备发送接入无线接入点所需的接入信息，以使所述待接入设备根据所述接入信息接入无线接入点。In step S201, the access information required to access the wireless access point is sent to the device to be accessed through the secure transmission channel, so that the device to be accessed accesses the wireless access point according to the access information.

无线接入点通过安全传输通道向待接入设备发送接入无线接入点所需的接入信息，以使所述待接入设备根据所述接入信息接入该无线接入点。这样，用户无须熟悉无线接入操作的流程，就可以快速便捷地接入无线接入点，提高了用户进行无线接入操作的便捷性。另一方面，待接入设备可以通过无线通道获取接入信息，保证了信息传输的安全性。此外，待接入设备无须将接入信息存储在本地，而直接从安全通道获取接入信息，避免了接入信息被盗取的风险，提高了无线接入的安全性。The wireless access point sends the access information required for accessing the wireless access point to the device to be accessed through the secure transmission channel, so that the device to be accessed accesses the wireless access point according to the access information. In this way, the user does not need to be familiar with the flow of the wireless access operation, and can quickly and conveniently access the wireless access point, thereby improving the convenience of the user to perform wireless access operations. On the other hand, the device to be accessed can obtain access information through the wireless channel, ensuring the security of information transmission. In addition, the access device does not need to store the access information locally, but directly obtains the access information from the secure channel, thereby avoiding the risk of the access information being stolen and improving the security of the wireless access.

根据本公开实施例，在步骤S201之前，所述方法还可以包括：与所述待接入设备建立传输数据的安全传输通道。According to an embodiment of the present disclosure, before the step S201, the method may further include: establishing a secure transmission channel for transmitting data with the device to be accessed.

如上所述，可以通过数据连接线的方式与所述待接入设备建立物理通道，并且在所述物理通道上建立传输数据的安全传输通道。As described above, a physical channel can be established with the device to be accessed by means of a data connection line, and a secure transmission channel for transmitting data can be established on the physical channel.

根据本公开实施例，步骤S201可以包括：接收所述待接入设备发送的获取接入无线接入点所需的接入信息的请求信息；以及根据所述请求信息向所述待接入设备发送所述接入信息。According to an embodiment of the present disclosure, the step S201 may include: receiving, by the device to be accessed, request information for acquiring access information required for accessing a wireless access point; and transmitting, according to the request information, the device to be accessed Sending the access information.

待接入设备可以为各类移动终端，包括(但不限于)智能手机、平板电脑、智能手环等，无线接入点可以为路由设备等，本公开对此不做限定。The device to be accessed may be a variety of mobile terminals, including but not limited to a smart phone, a tablet, a smart wristband, etc., and the wireless access point may be a routing device, etc., which is not limited in this disclosure.

图3为根据本公开另一实施例的无线接入方法的流程示意图。FIG. 3 is a schematic flowchart of a wireless access method according to another embodiment of the present disclosure.

WiFi网络因其便捷性和免费属性，已经成为整个通信通道的最后10米的首选方式。在图3所示的实施例中，以待接入设备为WiFi客户端并且无线接入点为WiFi接入点为例进行说明。如图3所示，根据本公开另一实施例的无线接入方法可以包括步骤S301至S306。The WiFi network has become the preferred method for the last 10 meters of the entire communication channel due to its convenience and free attributes. In the embodiment shown in FIG. 3, the description is made by taking the device to be accessed as a WiFi client and the wireless access point as a WiFi access point. As shown in FIG. 3, the wireless access method according to another embodiment of the present disclosure may include steps S301 to S306.

在步骤S301，通过USB数据线建立WiFi接入点与WiFi客户端之间的USB物理通道。In step S301, a USB physical channel between the WiFi access point and the WiFi client is established through the USB data line.

根据本公开实施例，步骤S301可以包括：利用USB数据线连接WiFi接入点与WiFi客户端；以及设置USB数据线两侧的WiFi接入点与WiFi客户端的工作模式。According to an embodiment of the present disclosure, step S301 may include: connecting a WiFi access point and a WiFi client by using a USB data line; and setting a working mode of the WiFi access point and the WiFi client on both sides of the USB data line.

WiFi接入点(例如，路由设备)作为主机端，可以工作在主机模式下，WiFi客户端(例如，移动终端)作为设备端，可以工作在设备模式下。图4示出了根据本公开实施例的无线接入系统的结构框图。如图4所述，无线接入系统可以包括主机端和设备端，其中，主机端与设备端可以通过例如USB数据线连接。A WiFi access point (for example, a routing device) functions as a host and can operate in a host mode, and a WiFi client (for example, a mobile terminal) functions as a device and can operate in a device mode. FIG. 4 shows a structural block diagram of a wireless access system according to an embodiment of the present disclosure. As shown in FIG. 4, the wireless access system may include a host end and a device end, wherein the host end and the device end may be connected by, for example, a USB data line.

图5和图6分别示出了为根据本公开实施例的主机端和设备端的结构示意图。5 and 6 respectively show structural diagrams of a host side and a device side according to an embodiment of the present disclosure.

如图5所示，主机端可以包括USB协议层、远程网络驱动接口规范(Remote Network Driver Interface Specification，RNDIS)/以太网控制模型(Ethernet Networking Control Model，ECM)协议层、超文本传输协议(Hyper Text Transport Protocol，HTTP)协议层、全球广域网服务(World Wide Web Server，WEB Server)层和WiFi应用管理层，因此，从上到下实现了主机端的WiFi相关的接口通道。如图6所示，设备端可以包括USB协议层、RNDIS/ECM协议层、HTTP协议层、WEB客户端层和一键式接入应用程序层，因此，从上到下实现了设备端的Wi-Fi相关的接口通道。As shown in FIG. 5, the host side may include a USB protocol layer, a Remote Network Driver Interface Specification (RNDIS)/Ethernet Networking Control Model (ECM) protocol layer, and a hypertext transfer protocol (Hyper). The Text Transport Protocol (HTTP) protocol layer, the World Wide Web Server (WEB Server) layer, and the WiFi application management layer, therefore, implement the WiFi-related interface channel of the host side from top to bottom. As shown in FIG. 6, the device side may include a USB protocol layer, an RNDIS/ECM protocol layer, an HTTP protocol layer, a WEB client layer, and a one-click access application layer. Therefore, the device-side Wi- is implemented from top to bottom. Fi related interface channel.

这里需要说明的是，上述工作模式设置方式只是一种示例，根据需求，在某些情况下，可以通过USB OTG(USB On-The-Go)功能使USB数据线的两侧的WiFi接入点与WiFi客户端均工作在设备模式，即，在没有主机端的情况下，实现USB数据线两侧设备之间的数据传输。此外，还可以通过一些逻辑开关配置USB数据线两侧的WiFi接入点与WiFi客户端的工作模式，这里不再赘述。It should be noted that the above working mode setting mode is only an example. According to the requirement, in some cases, the WiFi access point on both sides of the USB data line can be made by the USB OTG (USB On-The-Go) function. Both the WiFi client and the WiFi client work in device mode, that is, data transmission between devices on both sides of the USB data line without the host. In addition, the working mode of the WiFi access point and the WiFi client on both sides of the USB data line can be configured through some logic switches, and details are not described herein.

在设置好USB数据线两侧的WiFi接入点与WiFi客户端的工作模式之后，就建立了WiFi接入点与WiFi客户端之间的USB物理通道(也称为可信通道)。After setting the working mode of the WiFi access point and the WiFi client on both sides of the USB data line, a USB physical channel (also called a trusted channel) between the WiFi access point and the WiFi client is established.

在步骤S302，建立WiFi接入点与WiFi客户端之间的安全传输通道。In step S302, a secure transmission channel between the WiFi access point and the WiFi client is established.

在通信场景下，设备模式可以体现为兼容性更高、速率更高的RNDIS/ECM模式。在RNDIS/ECM模式下，可以得到一个主机端分配的IP地址，并基于传输控制协议/因特网互联协议(Transmission Control Protocol/Internet Protocol，TCP/IP)和主机端进行交互。In the communication scenario, the device mode can be embodied as a more compatible and higher rate RNDIS/ECM mode. In the RNDIS/ECM mode, an IP address assigned by the host is obtained, and the interaction is performed based on the Transmission Control Protocol/Internet Protocol (TCP/IP) and the host.

根据本公开实施例，WiFi客户端(例如移动终端)可以包括安卓(Android)终端和iOS终端，支持ECM端口的上报，并且可以工作在ECM模式下。WiFi接入点(例如路由设备)也支持ECM驱动。同时WiFi接入点可以支持多WiFi客户端接入，并且具备与网络通道相关的动态主机配置协议(Dynamic Host Configuration Protocol，DHCP)等服务。这样，在步骤S301的基础上，在USB物理通道上可以建立WiFi接入点与WiFi客户端之间用于传输数据的安全传输通道(也称为网络通道或数据通道)。According to an embodiment of the present disclosure, a WiFi client (eg, a mobile terminal) may include an Android (Android) terminal and an iOS terminal, support reporting of an ECM port, and may operate in an ECM mode. WiFi access points (such as routing devices) also support ECM drivers. At the same time, the WiFi access point can support multi-WiFi client access, and has a dynamic host configuration protocol (Dynamic Host Configuration Protocol (DHCP)) and other services related to the network channel. In this way, on the basis of step S301, a secure transmission channel (also referred to as a network channel or a data channel) for transmitting data between the WiFi access point and the WiFi client can be established on the USB physical channel.

在判断S303，判断WiFi接入点的服务是否就绪，如果就绪，则执行步骤S304；否则，返回执行步骤S302。In decision S303, it is determined whether the service of the WiFi access point is ready. If it is ready, step S304 is performed; otherwise, step S302 is returned.

WiFi接入点的服务可以为HTTP服务，当然，WiFi接入点的服务也可以为其他服务，本公开对此不做限定。The service of the WiFi access point may be an HTTP service. Of course, the service of the WiFi access point may also be other services, which is not limited in this disclosure.

在步骤S304，WiFi客户端请求从WiFi接入点获取接入WiFi接入点所需的接入信息。WiFi客户端可以向WiFi接入点发送获取接入无线接入点所需的接入信息的请求信息。In step S304, the WiFi client requests to obtain the access information required to access the WiFi access point from the WiFi access point. The WiFi client can send request information for obtaining access information required to access the wireless access point to the WiFi access point.

接入信息可以包括WiFi接入点的唯一标识信息(例如，SSID)，此外，接入信息还可以包括安全密钥、加密方式等。The access information may include unique identification information (eg, SSID) of the WiFi access point, and in addition, the access information may further include a security key, an encryption method, and the like.

在步骤S305，WiFi客户端判断是否从WiFi接入点接收到接入WiFi接入点所需的接入信息，如果已接收到，则执行步骤S306；否则，返回执行步骤S304。In step S305, the WiFi client determines whether the access information required to access the WiFi access point is received from the WiFi access point, and if so, proceeds to step S306; otherwise, returns to step S304.

在步骤S304之后，WiFi接入点根据请求(即，请求信息)向WiFi客户端返回响应消息。WiFi客户端可以判断响应消息中是否携带接入WiFi接入点所需的接入信息。如果携带有所需的接入信息，则执行步骤S306；如果没有成功地从WiFi接入点接收到所需的接入信息，则返回执行步骤S304。After step S304, the WiFi access point returns a response message to the WiFi client according to the request (ie, the request information). The WiFi client can determine whether the response message carries the access information required to access the WiFi access point. If the required access information is carried, step S306 is performed; if the required access information is not successfully received from the WiFi access point, then step S304 is returned.

在步骤S306，WiFi客户端开启WiFi功能并连接WiFi接入点。In step S306, the WiFi client turns on the WiFi function and connects to the WiFi access point.

WiFi客户端从WiFi接入点成功接收到接入WiFi接入点所需的接入信息之后，可以开启WiFi功能，并基于接收到的接入信息连接WiFi接入点。连接WiFi接入点的方法可以是802.11协议所规定的所有连接方式。After successfully receiving the access information required for accessing the WiFi access point from the WiFi access point, the WiFi client can enable the WiFi function and connect the WiFi access point based on the received access information. The method of connecting the WiFi access point may be all the connection methods stipulated by the 802.11 protocol.

通过上述步骤，仅通过使用USB数据线连接WiFi接入点与WiFi客户端，就可以便捷地将WiFi客户端接入WiFi接入点，而不需要用户熟悉无线接入的流程，提高了用户操作的便捷性。除此以外，由于这种无线接入的便捷性，WiFi客户端可以不存储SSID和安全密钥，降低被盗取的风险。此外，通过WiFi接入点与WiFi客户端之间的安全传输通道或者可信通道来传输数据，也保证了数据的安全性。Through the above steps, the WiFi client can be conveniently connected to the WiFi access point only by connecting the WiFi access point and the WiFi client by using the USB data cable, without the user being familiar with the wireless access process and improving the user operation. Convenience. In addition, due to the convenience of such wireless access, the WiFi client can save the risk of being stolen without storing the SSID and the security key. In addition, data is transmitted through a secure transmission channel or a trusted channel between the WiFi access point and the WiFi client, and data security is also ensured.

图7示出了根据本公开实施例的基于SSID和安全密钥方式进行无线接入的方法的流程图。FIG. 7 illustrates a flow chart of a method of wireless access based on SSID and security key mode, in accordance with an embodiment of the present disclosure.

如图7所示，根据本公开实施例的基于SSID和安全密钥方式进行无线接入的方法可以包括步骤S701至S705。As shown in FIG. 7, a method for performing wireless access based on an SSID and a security key manner according to an embodiment of the present disclosure may include steps S701 to S705.

在步骤S701，通过USB数据线建立WiFi接入点与WiFi客户端之间的USB物理通道。In step S701, a USB physical channel between the WiFi access point and the WiFi client is established through the USB data line.

在步骤S702，建立WiFi接入点与WiFi客户端之间的安全传输通道。In step S702, a secure transmission channel between the WiFi access point and the WiFi client is established.

WiFi接入点枚举网口ECM设备，并基于DHCP分配IP地址给WiFi客户端的USB网口，从而在WiFi接入点和WiFi客户端之间就建立TCP/IP层的安全传输通道(也称为网络通道或数据通道)。The WiFi access point enumerates the network port ECM device, and assigns an IP address to the USB network port of the WiFi client based on the DHCP, thereby establishing a secure transmission channel of the TCP/IP layer between the WiFi access point and the WiFi client (also called For network channels or data channels).

在步骤S703，WiFi客户端通过安全传输通道从WiFi接入点获取接入WiFi接入点所需的接入信息，包括SSID和安全密钥。此外，接入信息还可以包括加密方式。In step S703, the WiFi client acquires access information, including an SSID and a security key, required to access the WiFi access point from the WiFi access point through the secure transmission channel. In addition, the access information may also include an encryption method.

在步骤S704，WiFi客户端开启WiFi功能，并根据获取到的WiFi接入点的SSID和安全密钥连接WiFi接入点。In step S704, the WiFi client turns on the WiFi function, and connects the WiFi access point according to the acquired SSID and security key of the WiFi access point.

如果WiFi客户端的WiFi功能没有开启，则首先开启WiFi客户端的WiFi功能，然后按照标准的协议流程连接WiFi接入点。If the WiFi function of the WiFi client is not enabled, the WiFi function of the WiFi client is first turned on, and then the WiFi access point is connected according to a standard protocol flow.

在步骤S705，WiFi客户端成功连接WiFi接入点之后，断开WiFi 接入点和WiFi客户端的USB连接，并基于WiFi连接进行通信。In step S705, after the WiFi client successfully connects to the WiFi access point, the USB connection of the WiFi access point and the WiFi client is disconnected, and communication is performed based on the WiFi connection.

USB数据线仅用于接入信息的传输过程，因此连接成功后可以断开WiFi客户端与WiFi接入点之间的USB数据线的连接(即，USB连接)，并通过WiFi网络进行通信。The USB data cable is only used for the transmission process of the access information. Therefore, after the connection is successful, the USB data cable connection between the WiFi client and the WiFi access point (ie, the USB connection) can be disconnected, and communication is performed through the WiFi network.

在完成上述过程之后，WiFi接入点可以等待新的WiFi客户端来基于USB方式进行无线接入，并进行下一次的基于USB的交互。After completing the above process, the WiFi access point can wait for a new WiFi client to perform wireless access based on the USB mode and perform the next USB-based interaction.

与传统的无线接入方式相比，根据本公开的无线接入方式不需要在WiFi客户端上查找用于连接WiFi的界面，也不需要输入SSID以及安全密钥，而是仅通过利用USB数据线连接WiFi接入点与WiFi客户端，就可以便捷地将WiFi客户端接入WiFi接入点，提高了用户操作的便捷性。WiFi客户端也可以不存储SSID和安全密钥，降低被盗取的风险。此外，通过WiFi接入点与WiFi客户端之间的安全传输通道或者数据通道来传输数据，也保证了数据的安全性。Compared with the conventional wireless access method, the wireless access method according to the present disclosure does not need to find an interface for connecting WiFi on the WiFi client, and does not need to input the SSID and the security key, but only by using the USB data. By connecting the WiFi access point and the WiFi client, the WiFi client can be conveniently connected to the WiFi access point, which improves the convenience of user operation. The WiFi client can also reduce the risk of being stolen without storing the SSID and security key. In addition, data is transmitted through a secure transmission channel or a data channel between the WiFi access point and the WiFi client, and data security is also ensured.

图8为根据本公开实施例的无线接入装置的结构示意图。FIG. 8 is a schematic structural diagram of a wireless access device according to an embodiment of the present disclosure.

如图8所示，根据本公开实施例的无线接入装置包括获取模块801和接入模块802。As shown in FIG. 8, a wireless access device according to an embodiment of the present disclosure includes anacquisition module 801 and anaccess module 802.

获取模块801设置为通过安全传输通道获取接入无线接入点所需的接入信息。The obtainingmodule 801 is configured to acquire access information required to access the wireless access point through the secure transmission channel.

接入模块802设置为根据接入信息接入无线接入点。Theaccess module 802 is configured to access the wireless access point based on the access information.

根据本公开实施例，无线接入装置还可以包括第一通道建立模块803，其设置为与无线接入点建立传输数据的安全传输通道。According to an embodiment of the present disclosure, the wireless access device may further include a firstchannel establishment module 803 configured to establish a secure transmission channel for transmitting data with the wireless access point.

根据本公开实施例，第一通道建立模块803可以通过数据连接线的方式与无线接入点建立物理通道，并且在物理通道上建立传输数据的安全传输通道。According to an embodiment of the present disclosure, the firstchannel establishing module 803 can establish a physical channel with the wireless access point by means of a data connection line, and establish a secure transmission channel for transmitting data on the physical channel.

根据本公开实施例，获取模块801可以向无线接入点发送获取接入无线接入点所需的接入信息的请求信息，并且接收无线接入点根据所述请求信息发送的接入信息。According to an embodiment of the present disclosure, the obtainingmodule 801 may transmit, to the wireless access point, request information for acquiring access information required to access the wireless access point, and receive access information that the wireless access point transmits according to the request information.

根据本公开实施例，无线接入装置还可以包括通道关闭模块804，其设置为关闭所述安全传输通道。According to an embodiment of the present disclosure, the wireless access device may further include achannel shutdown module 804 configured to turn off the secure transmission channel.

如图9所示，根据本公开另一实施例的无线接入装置可以包括：传输模块901，其设置为通过安全传输通道向待接入设备发送接入无线接入点所需的接入信息，以使所述待接入设备根据所述接入信息接入无线接入点；以及第二通道建立模块902，其设置为与所述待接入设备建立传输数据的安全传输通道。As shown in FIG. 9, a wireless access apparatus according to another embodiment of the present disclosure may include: atransmission module 901 configured to send access information required for accessing a wireless access point to a device to be accessed through a secure transmission channel. So that the device to be accessed accesses the wireless access point according to the access information; and the secondchannel establishing module 902 is configured to establish a secure transmission channel for transmitting data with the device to be accessed.

根据本公开实施例，第二通道建立模块902可以通过数据连接线的方式与待接入设备建立物理通道，并且在物理通道上建立传输数据的安全传输通道。According to the embodiment of the present disclosure, the secondchannel establishing module 902 can establish a physical channel with the device to be accessed through a data connection line, and establish a secure transmission channel for transmitting data on the physical channel.

根据本公开实施例，传输模块901可以接收待接入设备发送的获取接入无线接入点所需的接入信息的请求信息，并且根据所述请求信息向待接入设备发送接入信息。According to an embodiment of the present disclosure, thetransmission module 901 may receive request information for acquiring access information required for accessing a wireless access point, and send the access information to the device to be accessed according to the request information.

本公开实施例还提供了一种无线设备，包括存储器和处理器，其中，存储器和处理器耦合，所述处理器在运行存储在所述存储器上的计算机程序时，执行根据本公开各实施例的无线接入方法。Embodiments of the present disclosure also provide a wireless device including a memory and a processor, wherein the memory is coupled to a processor that, when executing a computer program stored on the memory, performs embodiments in accordance with the present disclosure Wireless access method.

本公开实施例还提供了一种无线接入点，包括存储器和处理器，其中，存储器和处理器耦合，所述处理器在运行存储在所述存储器上的计算机程序时，执行根据本公开各实施例的无线接入方法。Embodiments of the present disclosure also provide a wireless access point including a memory and a processor, wherein the memory is coupled to a processor that executes each of the computer programs stored on the memory in accordance with the present disclosure Wireless access method of an embodiment.

本公开实施例还提供了一种计算机可读存储介质，其上存储有计算机程序，所述计算机程序被一个或者多个处理器执行时，所述一个或者多个处理器执行根据本公开各实施例的无线接入方法。Embodiments of the present disclosure also provide a computer readable storage medium having stored thereon a computer program executed by one or more processors, the one or more processors executing implementations in accordance with the present disclosure Example of a wireless access method.

上述无线接入装置以软件功能单元的形式实现并作为独立的产品销售或使用时，可以存储在一个计算机可读取存储介质中。基于这样的理解，本公开的技术方案的全部或部分可以以软件产品的形式体现出来，该计算机软件产品存储在一个存储介质中，包括若干指令用以使得一台计算机设备(可为个人计算机、服务器或者网络设备等)执行根据本公开各个实施例的无线接入方法的全部或部分步骤。所述存储介质包括：U盘、只读存储器(ROM，Read-Only Memory)、随机存取存储器(RAM，Random Access Memory)、移动硬盘、磁碟或者光盘等各种可以存储程序代码的介质。When the wireless access device is implemented in the form of a software functional unit and sold or used as a standalone product, it can be stored in a computer readable storage medium. Based on such understanding, all or part of the technical solutions of the present disclosure may be embodied in the form of a software product stored in a storage medium, including a plurality of instructions for causing a computer device (which may be a personal computer, A server or network device or the like) performs all or part of the steps of the wireless access method according to various embodiments of the present disclosure. The storage medium includes: a U disk, a Read-Only Memory (ROM), a Random Access Memory (RAM), a removable hard disk, a magnetic disk, or an optical disk, and the like, which can store program codes.

根据本公开的各实施例，可以通过安全传输通道获取接入无线接入点所需的接入信息，能够快速便捷地接入无线接入点，提高了无线接入的安全性和用户操作的便捷性。According to the embodiments of the present disclosure, the access information required for accessing the wireless access point can be obtained through the secure transmission channel, and the wireless access point can be quickly and conveniently accessed, thereby improving the security of the wireless access and the operation of the user. Convenience.

本领域普通技术人员可以理解，上文中所公开方法中的全部或某些步骤、系统、装置中的功能模块/单元可以被实施为软件、固件、硬件及其适当的组合。在硬件实施方式中，在以上描述中提及的功能模块/单元之间的划分不一定对应于物理组件的划分；例如，一个物理组件可以具有多个功能，或者一个功能或步骤可以由若干物理组件合作执行。某些物理组件或所有物理组件可以被实施为由处理器，如中央处理器、数字信号处理器或微处理器执行的软件，或者被实施为硬件，或者被实施为集成电路，如专用集成电路。这样的软件可以分布在计算机可读介质上，计算机可读介质可以包括计算机存储介质(或非暂时性介质)和通信介质(或暂时性介质)。如本领域普通技术人员公知的，术语计算机存储介质包括在用于存储信息(诸如计算机可读指令、数据结构、程序模块或其他数据)的任何方法或技术中实施的易失性和非易失性、可移除和不可移除介质。计算机存储介质包括但不限于RAM、ROM、EEPROM、闪存或其他存储器技术、CD-ROM、数字多功能盘(DVD)或其他光盘存储、磁盒、磁带、磁盘存储或其他磁存储装置、或者可以用于存储期望的信息并且可以被计算机访问的任何其他的介质。此外，本领域普通技术人员公知的是，通信介质通常包含计算机可读指令、数据结构、程序模块或者诸如载波或其他传输机制之类的调制数据信号中的其他数据，并且可包括任何信息递送介质。Those of ordinary skill in the art will appreciate that all or some of the steps, systems, and functional blocks/units of the methods disclosed above may be implemented as software, firmware, hardware, and suitable combinations thereof. In a hardware implementation, the division between functional modules/units mentioned in the above description does not necessarily correspond to the division of physical components; for example, one physical component may have multiple functions, or one function or step may be composed of several physical The components work together. Certain physical components or all physical components may be implemented as software executed by a processor, such as a central processing unit, digital signal processor or microprocessor, or implemented as hardware, or as an integrated circuit, such as an application specific integrated circuit. . Such software may be distributed on a computer readable medium, which may include computer storage media (or non-transitory media) and communication media (or transitory media). As is well known to those of ordinary skill in the art, the term computer storage medium includes volatile and nonvolatile, implemented in any method or technology for storing information, such as computer readable instructions, data structures, program modules or other data. Sex, removable and non-removable media. Computer storage media includes, but is not limited to, RAM, ROM, EEPROM, flash memory or other memory technology, CD-ROM, digital versatile disc (DVD) or other optical disc storage, magnetic cartridge, magnetic tape, magnetic disk storage or other magnetic storage device, or may Any other medium used to store the desired information and that can be accessed by the computer. Moreover, it is well known to those skilled in the art that communication media typically includes computer readable instructions, data structures, program modules or other data in a modulated data signal, such as a carrier wave or other transport mechanism, and can include any information delivery media. .