Access Control Method for WiFi Device and WiFi Device

• US 20140169354A1
• Filed: 12/31/2013
• Published: 06/19/2014
• Est. Priority Date: 12/18/2012
• Status: Active Grant

• Current Assignee: Huawei Device Company Limited (Huawei Investment & Holding Co., Ltd.)
• Original Assignee: Huawei Device Company Limited (Huawei Investment & Holding Co., Ltd.)
• Inventors: Xiang, Chao
• Granted Patent: US 9,467,932 B2
• Time in Patent Office: Days
• US Class Current: 370/338
• CPC Class Codes: H04L 63/0263 Rule management
• CPC Class Codes: H04L 63/101 Access control lists [ACL]
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 48/16 Discovering, processing access restriction or access information

Abstract

An access control method for a wireless fidelity (WiFi) device and a WiFi device. The method includes: receiving, at a user layer of the WiFi device, an access request for accessing the WiFi device based on a service set identifier (SSID), where the access request includes a request for accessing a management interface web user interface (WEBUI) of the WiFi device; determining, at the user layer of the WiFi device, whether a tag of the received access request is the same as one of tags that are preset for SSIDs forbidden to access the WiFi device; if the determination result is positive, rejecting the access request; if the determination result is negative, accepting the access request. In this way, access control of a WiFi device can be implemented in a simple manner.

Claims

1. An access control method for a wireless fidelity (WiFi) device, comprising:

receiving, at a user layer of the WiFi device, an access request for accessing the WiFi device based on a service set identifier (SSID), wherein the access request comprises a request for accessing a management interface web user interface (WEBUI) of the WiFi device;

determining, at the user layer of the WiFi device, whether a tag of the access request is the same as one of one or more preset tags that are preset for one or more SSIDs forbidden to access the WiFi device;

rejecting the access request when the determination result is positive; and

accepting the access request when the determination result is negative.

2. The access control method according to claim 1, wherein before the receiving, at the user layer of the WiFi device, the access request for accessing the WiFi device based on the SSID, the method further comprises:

obtaining, at a kernel layer of the WiFi device and in a multi-service set identifier (Multi-SSID), one or more index values of interfaces that represent one or more locations of the SSIDs that are forbidden to access the WiFi device;

receiving, at the kernel layer of the WiFi device, the access request for accessing the WiFi device based on the SSID;

determining whether an index value of the interface that corresponds to the SSID on which the access request is based matches one of the index values of the interfaces that correspond to the SSIDs forbidden to access the WiFi device when receiving the access request at the kernel layer of the WiFi device;

adding, at the kernel layer of the WiFi device, one of the preset tags to the access request based on the SSID when the determination result is positive;

sending the access request with the one of the preset tags added to the user layer of the WiFi device;

not adding, at the kernel layer of the WiFi device, the one of the preset tags to the access request based on the SSID when the determination result is negative; and

sending the access request without the one of the preset tags added to the user layer of the WiFi device.

3. The access control method according to claim 1, wherein before the receiving, at the user layer of the WiFi device, the access request for accessing the WiFi device based on the SSID, the method further comprises setting, at the user layer of the WiFi device, one or more corresponding tags for the SSIDs forbidden to access the WiFi device.

4. The access control method according to claim 2, wherein before the receiving, at the user layer of the WiFi device, the access request for accessing the WiFi device based on the SSID, the method further comprises setting, at the user layer of the WiFi device, one or more corresponding tags for the SSIDs forbidden to access the WiFi device.

5. A wireless fidelity (WiFi) device, comprising:

a memory; and

a processor, wherein the memory stores a specified instructions and the processor invokes the instructions stored in the memory to execute by the processer to cause the WiFi device to perform the following;

receive, at a user layer of the WiFi device, an access request for accessing the WiFi device based on a service set identifier (SSID), wherein the access request comprises a request for accessing a management interface web user interface (WEBUI) of the WiFi device;

determine, at the user layer of the WiFi device, whether a tag of the access request is the same as one of one or more preset tags that are preset for one or more SSIDs forbidden to access the WiFi device;

reject the access request when the determination result is positive; and

accept the access request when the determination result is negative.

6. The WiFi device according to claim 5, wherein before determining, at the user layer of the WiFi device, whether the tag of the received access request is the same as one of one or more preset tags that are preset for SSIDs forbidden to access the WiFi device, the instructions executed by the processor further cause the WiFi device to:

obtain, at a kernel layer of the WiFi device and in a multi-service set identifier (Multi-SSID), one or more index values of interfaces that represent one or more locations of the SSIDs that are forbidden to access the WiFi device;

receive, at the kernel layer of the WiFi device, the access request for accessing the WiFi device based on the SSID;

determine whether an index value of an interface that corresponds to the SSID on which the access request is based matches one of the index values of the interfaces that correspond to the SSIDs forbidden to access the WiFi device when the access request at the kernel layer of the WiFi device is received;

add, at the kernel layer of the WiFi device, one of the preset tags to the access request based on the SSID when the determination result is positive;

send the access request with the one of the preset tags added to the user layer of the WiFi device

not add, at the kernel layer of the WiFi device, one of the preset tags to the access request based on the SSID when the determination result is negative; and

send the access request without the one of the preset tags added to the user layer of the WiFi device.

7. The WiFi device according to claim 5, wherein before receiving, at the user layer of the WiFi device, the access request for accessing the WiFi device based on the SSID, the instructions executed by the processor further cause the WiFi device to:

set, at the user layer of the WiFi device, one or more corresponding tags for the SSIDs forbidden to access the WiFi device.

8. The WiFi device according to claim 6, wherein before receiving, at a user layer of the WiFi device, an access request for accessing the WiFi device based on a SSID, the instructions executed by the processor further cause the WiFi device to set, at the user layer of the WiFi device, one or more corresponding tags for the SSIDs forbidden to access the WiFi device.