IP Library Granted Patent US 9,467,932
Granted Patent B2
US 9,467,932 · App. 14/145,234 · Granted Oct 11, 2016

Access control method for WiFi device and WiFi device

View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 9,467,932
App. No.
14/145,234
Granted
Oct 11, 2016
Kind
B2
Abstract

An access control method for a wireless fidelity (WiFi) device and a WiFi device. The method includes: receiving, at a user layer of the WiFi device, an access request for accessing the WiFi device based on a service set identifier (SSID), where the access request includes a request for accessing a management interface web user interface (WEBUI) of the WiFi device; determining, at the user layer of the WiFi device, whether a tag of the received access request is the same as one of tags that are preset for SSIDs forbidden to access the WiFi device; if the determination result is positive, rejecting the access request; if the determination result is negative, accepting the access request. In this way, access control of a WiFi device can be implemented in a simple manner.

Claims (43)

1. An access control method for a wireless fidelity (WiFi) device supporting a multi service set identifier (SSID) (Multi-SSID), wherein there is one or more terminal associated with each SSID, comprising:

receiving, from a terminal associated with a SSID in the Multi-SSID, at a user layer of the WiFi device, an access request for accessing the WiFi device based on the SSID, wherein the access request comprises a request for accessing a management interface web user interface (WEBUI) residing on the WiFi device and with one of one or more preset tags added at the kernel layer of the WiFi device;

determining, at the user layer of the WiFi device, whether a tag received with the access request is the same as one of one or more preset tags that are preset for one or more SSIDs forbidden to access the WEBUI residing on the WiFi device;

rejecting the access request when the determination result is positive; and

accepting the access request when the determination result is negative.

2. The access control method according to claim 1 , wherein before the receiving, at the user layer of the WiFi device, the access request for accessing the WiFi device based on the SSID, the method further comprises setting, at the user layer of the WiFi device, one or more corresponding tags for the SSIDs forbidden to access the WEBUI residing on the WiFi device.

3. An access control method for a wireless fidelity (WiFi) device supporting a multi service set identifier (SSID) (Multi-SSID), wherein there is one or more terminal associated with each SSID, comprising:

obtaining, at a kernel layer of the WiFi device, one or more index values of interfaces that represent one or more locations of SSIDs in the Multi-SSID that are forbidden to access a management interface web user interface (WEBUI) residing on the WiFi device;

receiving, from a terminal associated with a SSID in the Multi-SSID, at the kernel layer of the WiFi device, an access request for accessing the WiFi device based on the SSID, wherein the access request comprises a request for accessing the WEBUI;

determining whether an index value of the interface that corresponds to the SSID on which the access request is based matches one of the index values of the interfaces that correspond to the SSIDs forbidden to access the WEBUI when receiving the access request at the kernel layer of the WiFi device;

adding, at the kernel layer of the WiFi device, one of one or more preset tags to the access request based on the SSID when the determination result is positive;

sending the access request with the one of the one or more preset tags added to a user layer of the WiFi device;

receiving, at the user layer of the WiFi device, the access request with the one of the one or more preset tags added;

determining, at the user layer of the WiFi device, whether a tag of the access request is the same as one of one or more preset tags that are preset for one or more SSIDs forbidden to access the WEBUI;

rejecting the access request when the determination result is positive; and

accepting the access request when the determination result is negative.

4. The access control method according to claim 3 , wherein before the receiving, at the user layer of the WiFi device, the access request for accessing the WiFi device based on the SSID, the method further comprises setting, at the user layer of the WiFi device, one or more corresponding tags for the SSIDs forbidden to access the WEBUI residing on the WiFi device.

5. The access control method according to claim 3 , wherein the method further comprising:

not adding, at the kernel layer of the WiFi device, the one of the one or more preset tags to the access request based on the SSID when the determination result is negative;

sending the access request without the one of the preset tags added to the user layer of the WiFi device.

6. A wireless fidelity (WiFi) device supporting a multi service set identifier (SSID) (Multi-SSID), wherein there is one or more terminals associated with each SSID, comprising:

a memory; and

a processor, wherein the memory stores a specified instructions and the processor invokes the instructions stored in the memory to execute by the processor to cause the WiFi device to perform the following:

receive, from a terminal associated with a SSID in the Multi-SSID, at a user layer of the WiFi device, an access request for accessing the WiFi device based on the SSID, wherein the access request comprises a request for accessing a management interface web user interface (WEBUI) residing on the WiFi device and with one of one or more preset tags added at the kernel layer of the WiFi device;

determine, at the user layer of the WiFi device, whether a tag received with the access request is the same as one of one or more preset tags that are preset for one or more SSIDs forbidden to access the WEBUI residing on the WiFi device;

reject the access request when the determination result is positive; and

accept the access request when the determination result is negative.

7. The WiFi device according to claim 6 , wherein before receiving, at the user layer of the WiFi device, the access request for accessing the WiFi device based on the SSID, the instructions executed by the processor further cause the WiFi device to: set, at the user layer of the WiFi device, one or more corresponding tags for the SSIDs forbidden to access the WEBUI residing on the WiFi device.

8. A wireless fidelity (WiFi) device supporting a multi service set identifier (SSID) (Multi-SSID), wherein there is one or more terminal associated with each SSID, comprising:

a memory; and

a processor, wherein the memory stores specified instructions and the processor invokes the instructions stored in the memory to execute by the processor to cause the WiFi device to perform the following:

obtain, at a kernel layer of the WiFi device, one or more index values of interfaces that represent one or more locations of SSIDs in the Multi-SSID that are forbidden to access the WiFi device;

receive, from a terminal associated with a SSID in the Multi-SSID, at the kernel layer of the WiFi device, an access request for accessing the WiFi device based on the SSID, wherein the access request comprises a request for accessing the WEBUI;

determine whether an index value of an interface that corresponds to the SSID on which the access request is based matches one of the index values of the interfaces that correspond to the SSIDs forbidden to access the WEBUI when the access request is received at the kernel layer of the WiFi device;

add, at the kernel layer of the WiFi device, one of one or more preset tags to the access request based on the SSID when the determination result is positive;

send the access request with the one of the one or more preset tags added to a user layer of the WiFi device;

receive, at the user layer of the WiFi device, the access request with the one of the one or more preset tags added;

determine, at the user layer of the WiFi device, whether the tag of the access request is the same as one of one or more preset tags that are preset for one or more SSIDs forbidden to access the WEBUI;

reject the access request when the determination result is positive; and

accept the access request when the determination result is negative.

9. The WiFi device according to claim 8 , wherein before receiving, at a user layer of the WiFi device, an access request for accessing the WiFi device based on a SSID, the instructions executed by the processor further cause the WiFi device to set, at the user layer of the WiFi device, one or more corresponding tags for the SSIDs forbidden to access the WEBUI residing on the WiFi device.

10. The WiFi device according to claim 8 , wherein the instructions executed by the processor further cause the WiFi device to not add, at the kernel layer of the WiFi device, one of the one or more preset tags to the access request based on the SSID when the determination result is negative; and

send the access request without the one of the preset tags added to the user layer of the WiFi device.

Assignments (3)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Nov 19, 2018
From: HUAWEI DEVICE (SHENZHEN) CO., LTD.
To: HUAWEI DEVICE CO., LTD.
Reel/Frame 047603/0039 →
CHANGE OF NAME Recorded Jun 12, 2018
From: HUAWEI DEVICE CO.,LTD.
To: HUAWEI DEVICE (SHENZHEN) CO., LTD.
Reel/Frame 046340/0590 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Sep 10, 2014
From: XIANG, CHAO
To: HUAWEI DEVICE CO., LTD.
Reel/Frame 033709/0933 →