WO2014201783A1

WO2014201783A1 - Encryption and authentication method, system and terminal for ad hoc network

Info

Publication number: WO2014201783A1
Application number: PCT/CN2013/084974
Authority: WO
Inventors: 孙爱芳
Original assignee: 中兴通讯股份有限公司
Priority date: 2013-06-19
Filing date: 2013-10-10
Publication date: 2014-12-24
Also published as: CN104243423A

Abstract

Disclosed in the present invention is an encryption and authentication method for an ad hoc network, comprising: generating a password of the ad hoc network according to the information of all the current terminals in the ad hoc network and notifying each terminal in the ad hoc network of the password; when each terminal in the ad hoc network transmits service information, encrypting the service information using the password; and when each terminal in the ad hoc network receives service information, decrypting the service information using the password. Simultaneously, further disclosed in the present invention are an encryption and authentication system and terminal for the ad hoc network. The communication security of the ad hoc network can be ensured by adopting the technical solution of the present invention.

Description

Encryption authentication method, system and terminal for self-organizing network

The present invention relates to encryption authentication technology in an ad hoc network, and in particular, to an encryption authentication method, system and terminal for an ad hoc network. Background technique

With the development of information technology and the promotion of new types of networks such as the Internet of Things and the ubiquitous network, more and more terminal devices will emerge in the space where people live and work. In order to make full use of the various terminals in the user's surrounding environment and provide users with real-time, efficient and high-quality services, it has become a requirement for multi-terminals to work together to provide services.

The secure interaction of information between multiple terminals is a prerequisite for multi-terminal collaboration. At present, the mode in which the multiple terminals work together is as follows: After the terminals are mutually authenticated, the terminals can form an ad hoc network, and one of the terminals in the ad hoc network is selected as the access point terminal by using the method of comparing the capability information of the terminal. The access point terminal can assign an Internet Protocol (IP) address to each terminal, so that the terminals can communicate with each other through the IP address. Sharing between terminal information can be achieved through an ad hoc network. However, the security of communication between terminals in the ad hoc network is not guaranteed, and if a new terminal requests to join an existing ad hoc network, there is currently no corresponding authentication method to authenticate the new terminal. Summary of the invention

In view of this, the main purpose of the embodiments of the present invention is to provide an encryption authentication method, system, and terminal for an ad hoc network, which can ensure the security of the self-organizing network communication.

To achieve the above objective, the technical solution of the embodiment of the present invention is implemented as follows:

An encryption authentication method for an ad hoc network, the method comprising: Generating a password of the ad hoc network according to all current terminal information in the ad hoc network, and notifying each terminal in the ad hoc network;

When the terminal in the ad hoc network sends the service information, the service information is encrypted by using the password; when each terminal in the ad hoc network receives the service information, the service information is used by using the password. Decrypt.

Preferably, the method further includes: when receiving the request of the terminal to access the ad hoc network, all the terminals in the ad hoc network authenticate the accessed terminal; after the authentication succeeds, the access The terminal accesses the ad hoc network.

Preferably, the method further includes:

When the access terminal in the ad hoc network is deleted or the terminal exits, the current terminal information in the ad hoc network updates the password of the ad hoc network, and notifies the updated password in the ad hoc network. Each terminal;

When the terminal in the ad hoc network sends the service information, the service information is encrypted by using the updated password; when each terminal in the ad hoc network receives the service information, the updated password is used to The business information is decrypted.

Preferably, before the generating the password of the ad hoc network according to all the terminal information in the ad hoc network, the method further includes:

After receiving the ad hoc network request message sent by the other terminal, the terminal authenticates the other terminal through the wireless fidelity (WIFI) network or the Bluetooth network, and after the authentication succeeds, establishes with the other terminal. Connect and generate an ad hoc network.

Preferably, the method further includes: determining, by the performance parameter of the terminal, a terminal as an access point terminal, and assigning, by the access point terminal, an IP address to all terminals of the ad hoc network.

Preferably, the generating, according to all current terminal information in the ad hoc network, the secret of the ad hoc network Code, including:

The access point terminal receives the terminal information sent by the non-access point terminal, and generates a password of the ad hoc network including the terminal information; where the terminal information includes at least one of the following information: Name, IP address, terminal identifier (ID, IDentity) ₀

Preferably, all the terminals in the ad hoc network authenticate the accessed terminal, including: acquiring terminal information of the accessed terminal, matching the accessed terminal information with the cached terminal information, and matching After the success, determining that the access terminal is successfully authenticated; after the matching fails, determining, according to the obtained terminal information, that the accessed terminal is a legal terminal, determining to authenticate the accessed terminal success.

An encryption authentication system for an ad hoc network, the system comprising: an access point terminal and a non-access point terminal; wherein

The access point terminal is configured to generate a password of the ad hoc network according to all current terminal information in the ad hoc network, and notify each non-access point terminal in the ad hoc network; When the information is used, the service information is encrypted by using the password; when the service information is received, the service information is decrypted by using the password.

The non-access point terminal is configured to receive a password of the ad hoc network notified by the access point terminal; when the service information is sent, encrypt the service information by using the password; and receive the service The information is used to decrypt the service information using the password.

Preferably, the system further includes: an access terminal;

The access terminal is configured to send a request for accessing the ad hoc network to the access point terminal or the non-access point terminal; the access point terminal and the non-access point After the terminal authenticates the access terminal, the terminal accesses the ad hoc network;

The access point terminal is further configured to: when receiving the request that the access terminal accesses the ad hoc network, authenticating the access terminal; and accessing the access terminal to the ad hoc network The request is pushed to the non-access point terminal; The non-access point terminal is further configured to: when receiving the request of the access terminal to access the ad hoc network, authenticating the access terminal; and accessing the access terminal to the ad hoc group A request for the network is pushed to the access point terminal.

Preferably, the access point terminal is further configured to: when the access terminal in the ad hoc network is deleted or the terminal exits, update the password of the ad hoc network according to the current terminal information in the ad hoc network, And notifying, by the updated password, each non-access point terminal in the ad hoc network; when transmitting the service information, encrypting the service information by using the updated password; and receiving the service information, using the update The subsequent password decrypts the service information;

The non-access point terminal is further configured to receive the updated password of the ad hoc network notified by the access point terminal; when transmitting the service information, encrypt the service information by using the updated password When the service information is received, the service information is decrypted by using the updated password.

Preferably, the access point terminal is further configured to: after receiving the ad hoc network request message sent by the non-access point terminal, by using a WIFI network or a Bluetooth network, performing a check on the non-access point terminal And after the authentication succeeds, establishing a connection with the non-access point terminal and generating an ad hoc network;

The non-access point terminal is further configured to: after receiving the ad hoc network request message sent by the access point terminal by using a WIFI network or a Bluetooth network, authenticating the access point terminal; After the authentication succeeds, a connection is established with the access point terminal and an ad hoc network is generated.

Preferably, the access point terminal is further configured to allocate an IP address to the access point terminal and all non-access point terminals of the ad hoc network.

Preferably, the access point terminal is further configured to receive terminal information sent by the non-access point terminal, and generate a password of the ad hoc network including the terminal information; where the terminal information includes At least one of the following information: End User Name, IP Address, Terminal ID.

Preferably, the access point terminal is further configured to acquire the terminal information of the access terminal. Matching the obtained terminal information with the cached terminal information. After the matching is successful, it is determined that the access terminal is successfully authenticated. After the matching fails, the access terminal is determined to be legal according to the obtained terminal information. When the terminal is determined, it is determined that the access terminal is successfully authenticated;

The non-access point terminal is further configured to acquire the terminal information of the access terminal, and the obtained terminal information is matched with the cached terminal information. After the matching is successful, it is determined that the access terminal is successfully authenticated. After the matching fails, when the access terminal is determined to be a legal terminal according to the obtained terminal information, it is determined that the access terminal is successfully authenticated.

An encryption authentication terminal of an ad hoc network, the terminal comprising: a cryptographic unit, and an encryption and decryption unit; wherein

The cryptographic unit is configured to: when the terminal determines to access the access point terminal, generate a password of the ad hoc network according to all current terminal information in the ad hoc network, and notify each terminal in the ad hoc network; Receiving, by the terminal, a password of the ad hoc network notified by the access point terminal when the terminal is determined to be a non-access point terminal;

The encryption and decryption unit is configured to encrypt the service information by using the password when transmitting the service information, and decrypt the service information by using the password when receiving the service information.

Preferably, the terminal further includes: a first receiving unit and an authentication unit, where the first receiving unit is configured to receive a request for the access terminal to access the ad hoc network; the authentication unit is configured to The access terminal is authenticated, and the request for accessing the access terminal to the ad hoc network is pushed to other terminals of the ad hoc network.

Preferably, the terminal further includes: an update unit, a sending unit, and a second receiving unit;

The updating unit, configured to: when the terminal determines to access the access point terminal, determine that the access terminal in the ad hoc network or the terminal exits, update the current terminal information according to the current terminal information in the ad hoc network Self-organizing network password; The sending unit is configured to notify the non-access point terminal in the ad hoc network of the updated password;

The second receiving unit is configured to: when the terminal determines to be a non-access point terminal, receive the updated password of the ad hoc network notified by the access point terminal;

The encryption and decryption unit is further configured to encrypt the service information by using the updated password when transmitting the service information, and decrypt the service information by using the updated password when receiving the service information.

Preferably, the terminal further includes: a third receiving unit and an establishing unit, where the third receiving unit is configured to receive an ad hoc network request message sent by the other terminal by using a WIFI network or a Bluetooth network;

The authentication unit is further configured to perform authentication on the other terminal;

The establishing unit is configured to establish a connection with the other terminal and generate an ad hoc network after the authentication succeeds.

Preferably, the terminal further includes an allocating unit configured to allocate an IP address to all terminals of the ad hoc network when the terminal determines to access the access point terminal.

Preferably, the cryptographic unit includes: a receiving subunit, a sending subunit, and a generating subunit; wherein

The receiving subunit is configured to: when the terminal determines to access the access point terminal, receive terminal information sent by the non-access point terminal; and generate a password of the ad hoc network including the terminal information; The terminal information includes at least one of the following information: a terminal user name, an IP address, and a terminal ID;

The sending subunit is configured to send terminal information to the access point terminal when the terminal determines to be a non-access point terminal;

Generating a subunit, configured to generate a password of the ad hoc network including the terminal information. Preferably, the authentication unit includes: acquiring a subunit, matching a subunit, and determining a sub-order Yuan; among them,

The acquiring subunit is configured to acquire terminal information of the access terminal;

The matching subunit is configured to match the obtained terminal information with the cached terminal information;

The determining subunit is configured to determine that the access terminal is successfully authenticated after the matching subunit is successfully matched; and after the matching fails, determining, according to the obtained terminal information, that the access terminal is a legal terminal And determining that the access terminal is successfully authenticated.

The encryption authentication method, system, and terminal of the ad hoc network provided by the embodiment of the present invention generate a password of the ad hoc network according to all current terminal information in the ad hoc network, and notify each terminal in the ad hoc network;

When the terminal in the ad hoc network sends the service information, the service information is encrypted by using the password; when each terminal in the ad hoc network receives the service information, the service information is used by using the password. Decrypt. In this way, the service information of the communication in the ad hoc network can be encrypted to ensure the security of the data. When receiving the request of the terminal to access the ad hoc network, all the terminals in the ad hoc network access the terminal. After the authentication succeeds, the accessed terminal accesses the ad hoc network; thus, all terminals in the ad hoc network can authenticate other terminals other than the ad hoc network, thereby ensuring joining. The security of the terminal in the self-organizing network. DRAWINGS

1 is a schematic flowchart of a method for implementing an encryption authentication method for an ad hoc network according to an embodiment of the present invention; FIG. 2 is a schematic structural diagram of a structure of an encryption authentication system for an ad hoc network according to an embodiment of the present invention; Schematic diagram of the structure of the encryption authentication terminal. detailed description

For a more detailed understanding of the features and technical details of the embodiments of the present invention, the embodiments of the present invention are described in detail below with reference to the accompanying drawings. It is not intended to limit the embodiments of the invention.

An embodiment of the present invention provides an encryption authentication method for an ad hoc network. As shown in FIG. 1, the method includes the following steps:

Step 101: Generate a password of the ad hoc network according to all current terminal information in the ad hoc network, and notify each terminal in the ad hoc network.

Pre-generating the ad hoc network, preferably, before the step 101, the method further includes: after receiving the ad hoc network request message sent by the other terminal through the WIFI network or the Bluetooth network, the terminal authenticates the other terminal; After the authentication succeeds, a connection is established with the other terminals and an ad hoc network is generated. The performance parameter of the terminal determines a terminal as an access point terminal, and the access point terminal allocates an IP address to all terminals of the ad hoc network.

Here, the performance parameter may be a processing capability of a central processing unit (CPU) of the terminal, a memory size, and the like.

Preferably, the generating the password of the ad hoc network according to the terminal information in the current ad hoc network includes:

The access point terminal receives the terminal information sent by the non-access point terminal; generates a password of the ad hoc network including the terminal information; wherein the terminal information includes at least one of the following information: Name, IP address, terminal ID.

For example, the non-access point terminal will be the terminal 2, 3, 4, the access point terminal is the terminal 1; the terminal 2, 3, 4 will send its own terminal information to the terminal 1; the terminal 1 receives the terminal 2 After the terminal information is sent, the password of the terminal information is generated. The format of the password includes, but is not limited to, the terminal user name, the IP address, and the terminal ID.

Terminal 2 Terminal 3 Terminal 4 Terminal 1 Terminal User Name Name2 Name3 Name4 Namel IP address 192.168.0.2 192.168.0.3 192.168.0.4 192.168.0.1 Terminal ID SSID2 SSID3 SSID4 SSID1 Table 1

The password of the ad hoc network that accesses the access node terminal with terminal 1 is:

NAME(2+3+4+ 1 )+IP(2+3+4+ 1 )+S SID (2+3+4+ 1 ), where Service Set Identifier (SSID) is the terminal ID The length of the password can be intercepted according to the user's own needs; the password is a unified password of the ad hoc network.

Here, the SSID includes user information such as a service name and device attribute information input by the user. Preferably, the CPU, memory, and disk space of a device may be represented by numbers, and the numbers may be set by a user or a developer, or may be obtained by using a standard value.

Step 102: When each terminal in the ad hoc network sends service information, encrypt the service information by using the password; when each terminal in the ad hoc network receives the service information, use the password pair The business information is decrypted.

Correspondingly, the method further includes: when determining an access terminal in the ad hoc network or having a terminal exiting, updating a password of the ad hoc network according to current terminal information in the ad hoc network, and updating the Notifying each terminal in the ad hoc network by a password;

For example, the terminal 5 is a terminal other than the ad hoc network. When the terminal 5 searches for the terminals 2, 3, and 4 in the ad hoc network through WIFI or Bluetooth, the terminal 5 sends a join request message to the terminals 2, 3, and 4; 2, 3, 4 push the join request message to the terminal 1; the terminal 1, 2, 3, 4 to the terminal 5 to verify. Alternatively, when the terminal 5 searches for the terminal 1 in the ad hoc network through WIFI or Bluetooth, it sends a join request message to the terminal 1; the terminal 1 pushes the join request message to the terminals 2, 3, 4; the terminals 1, 2 , 3, 4 authenticate the terminal 5.

Preferably, all the terminals in the ad hoc network authenticate the accessed terminal, including: acquiring terminal information of the accessed terminal;

Matching the obtained terminal information with the cached terminal information, and after the matching is successful, determining that the access terminal is successfully authenticated; after the matching fails, determining the accessed terminal according to the acquired terminal information. When it is a legal terminal, it is determined that the terminal that authenticates the access is successfully authenticated.

Here, each time the terminal information sent by the terminal is received, the terminal information needs to be stored, so that when the terminal information sent by the terminal is received again, the terminal information is directly matched by the stored terminal information to determine that the terminal is a legal terminal. , and then its authentication is successful.

Preferably, the updating the password of the ad hoc network according to the terminal information in the current ad hoc network includes:

And the access point terminal receives terminal information sent by the accessed terminal, and generates a password of the ad hoc network including the terminal information and terminal information of other non-access point terminals in the ad hoc network.

For example, the terminal 5 is an access terminal, and after the terminal 5 is added to the ad hoc network, there are terminals 1, 2, 3, 4, and 5 in the self-organizing network, where the terminal 1 is an access point terminal, and the terminals 2, 3, and 4 are 5 is a non-access point terminal, and the password of the updated ad hoc network is:

NAME(2+3+4+l+5)+IP(2+3+4+l+5)+SSID(2+3+4+l+5).

For the encryption authentication method of the ad hoc network, the embodiment of the present invention further provides an encryption authentication system for the ad hoc network. As shown in FIG. 2, the system includes: an access point terminal 21 and a non-access access. Point terminal 22; wherein

The access point terminal 21 is configured to generate a password of the ad hoc network according to all current terminal information in the ad hoc network, and notify each non-access point terminal 22 in the ad hoc network; When the service information is sent, the service information is encrypted by using the password; when the service information is received, the service information is decrypted by using the password;

The non-access point terminal 22 is configured to receive the password of the ad hoc network notified by the access point terminal 21; when the service information is sent, encrypt the service information by using the password; When the service information is obtained, the service information is decrypted by using the password.

Preferably, the system further includes: an access terminal 23;

The access terminal 23 is configured to send a request for accessing the ad hoc network to the access point terminal 21 or the non-access point terminal 22; the access point terminal 21 and the non-access After accessing the access terminal terminal 22 to authenticate the access terminal, accessing the ad hoc network;

The access point terminal 21 is further configured to: when receiving the request of the access terminal 23 to access the ad hoc network, authenticating the access terminal 23; and accessing the access terminal 23 The request from the networking is pushed to the non-access point terminal 22;

The non-access point terminal 22 is further configured to: when receiving the request of the access terminal 23 to access the ad hoc network, authenticating the access terminal 23; and accessing the access terminal 23 The request of the ad hoc network is pushed to the access point terminal 21.

Preferably, the access point terminal 21 is further configured to: when the access terminal in the ad hoc network is deleted or the terminal exits, update the password of the ad hoc network according to the current terminal information in the ad hoc network. And notifying the non-access point terminal 22 in the ad hoc network of the updated password; when transmitting the service information, encrypting the service information by using the updated password; when receiving the service information, Decrypting the service information by using the updated password;

The non-access point terminal 22 is further configured to receive the updated password of the ad hoc network notified by the access point terminal 21; when the service information is sent, use the updated password to the service information. Encryption is performed; when the service information is received, the service information is decrypted by using the updated password.

Preferably, the access point terminal 21 is further configured to pass through a WIFI network or a Bluetooth network. After receiving the ad hoc network request message sent by the non-access point terminal 22, the network authenticates the non-access point terminal 22; and after the authentication succeeds, the non-access point is The terminal 22 establishes a connection and generates an ad hoc network;

The non-access point terminal 22 is further configured to: after receiving the ad hoc network request message sent by the access point terminal 21 through the WIFI network or the Bluetooth network, authenticating the access point terminal 21 And after the authentication succeeds, establish a connection with the access point terminal 22 and generate an ad hoc network.

Preferably, the access point terminal 21 is further configured to allocate an IP address to the access point terminal 21 and all non-access point terminals 22 of the ad hoc network.

Preferably, the access point terminal 21 is further configured to receive terminal information sent by the non-access point terminal 22, and generate a password of the ad hoc network including the terminal information, where the terminal The information includes at least one of the following information: terminal username, IP address, terminal ID.

Preferably, the access point terminal 21 is further configured to acquire the terminal information of the access terminal 23; the obtained terminal information is matched with the cached terminal information, and after the matching is successful, the access is determined to be the access The terminal 23 succeeds in authenticating; after the matching fails, when the access terminal 23 is determined to be a legal terminal according to the obtained terminal information, it is determined that the access terminal 23 is successfully authenticated;

The non-access point terminal 22 is further configured to acquire the terminal information of the access terminal 23, and match the acquired terminal information with the cached terminal information, and after the matching is successful, determine that the access terminal 23 is After the matching succeeds, when the access terminal 23 is determined to be a legal terminal according to the acquired terminal information, it is determined that the access terminal 23 is successfully authenticated.

Those skilled in the art should understand that the implementation functions of the devices of the cipher authentication system of the ad hoc network shown in FIG. 2 can be understood by referring to the related description of the cipher authentication method of the ad hoc network. The function of the device of the cryptographic authentication system of the ad hoc network shown in FIG. 2 can be implemented by a program running on the processor, or can be realized by a specific logic circuit. In an actual application, the access point terminal 21 and the non-access point terminal 22 in the encryption authentication system of the ad hoc network can be implemented by terminal devices such as a smart phone, a computer, and a tablet computer.

The encryption authentication method and system for the above-mentioned ad hoc network, the embodiment of the present invention further provides an encryption authentication terminal of the ad hoc network, as shown in FIG. 3, the terminal includes: a cryptographic unit 31 and an encryption and decryption unit 32; among them,

The cryptographic unit 31 is configured to: when the terminal determines to access the access point terminal, generate a password of the ad hoc network according to all current terminal information in the ad hoc network, and notify each terminal in the ad hoc network Receiving, by the terminal, a password of the ad hoc network notified by the access point terminal when the terminal is determined to be a non-access point terminal;

The encryption and decryption unit 32 is configured to encrypt the service information by using the password when transmitting the service information, and decrypt the service information by using the password when receiving the service information.

Preferably, the terminal further includes: a first receiving unit 33 and an authentication unit 34; wherein the first receiving unit 33 is configured to receive a request for the access terminal to access the ad hoc network; 34. The device is configured to authenticate the access terminal, and push the request for accessing the access terminal to the ad hoc network to be pushed to another terminal of the ad hoc network.

Preferably, the terminal further includes: an update unit 35, a sending unit 36, and a second receiving unit 37;

The updating unit 35 is configured to: when the terminal determines to access the access point terminal, determine that the access terminal in the ad hoc network or the terminal exits, update the location according to the current terminal information in the ad hoc network The password of the self-organizing network;

The sending unit 36 is configured to notify the non-access point terminal in the ad hoc network of the updated password;

The second receiving unit 37 is configured to: when the terminal determines to be a non-access point terminal, receive the updated password of the ad hoc network notified by the access point terminal; The encryption/decryption unit 32 is further configured to encrypt the service information by using the updated password when transmitting the service information, and decrypt the service information by using the updated password when receiving the service information.

Preferably, the terminal further includes: a third receiving unit 38 and an establishing unit 39; wherein the third receiving unit 38 is configured to receive the ad hoc network request message sent by the other terminal by using a WIFI network or a Bluetooth network. ;

The authentication unit 34 is further configured to perform authentication on the other terminal.

The establishing unit 39 is configured to establish a connection with the other terminal and generate an ad hoc network after the authentication succeeds.

Preferably, the terminal further includes an allocating unit 310, configured to allocate an IP address to all terminals of the ad hoc network when the terminal determines to access the access point terminal.

Preferably, the cryptographic unit 31 includes: a receiving subunit 311, a transmitting subunit 312, and a generating subunit 313;

The receiving subunit 311 is configured to: when the terminal determines to access the access point terminal, receive terminal information sent by the non-access point terminal; generate a password of the ad hoc network including the terminal information; The terminal information includes at least one of the following information: a terminal user name, an IP address, and a terminal ID;

The sending subunit 312 is configured to send terminal information to the access point terminal when the terminal determines to be a non-access point terminal;

The generating subunit 313 is configured to generate a password of the ad hoc network including the terminal information. Preferably, the authentication unit 34 includes: an obtaining subunit 341, a matching subunit 342, and a determining subunit 343;

The obtaining subunit 341 is configured to acquire terminal information of the access terminal.

The matching sub-unit 342 is configured to match the acquired terminal information with the cached terminal information. The determining sub-unit 343 is configured to determine that the access terminal is successfully authenticated after the matching sub-unit 342 is successfully matched. After the matching fails, determining, according to the acquired terminal information, that the access terminal is legal. When the terminal is determined, it is determined that the access terminal is successfully authenticated.

Those skilled in the art should understand that the implementation functions of each unit and its subunits in the cryptographic authentication terminal of the ad hoc network shown in FIG. 3 can be understood by referring to the cipher authentication method and system related description of the aforementioned ad hoc network. The functions of each unit and its subunits in the cryptographic authentication terminal of the ad hoc network shown in FIG. 3 can be implemented by a program running on a processor, or can be implemented by a specific logic circuit.

In an actual application, the cryptographic unit 31, the encryption and decryption unit 32, the first receiving unit 33, the authentication unit 34, the updating unit 35, the sending unit 36, the second receiving unit 37, the third receiving unit 38, and the establishment in the terminal are established. The unit 39 and the allocation unit 310 can be implemented by a central processing unit (CPU) in the terminal, or a digital signal processor (DSP), or a Field-Programmable Gate Array (FPGA).

The above is only the preferred embodiment of the present invention and is not intended to limit the scope of the present invention.

Claims

claims

1. An encryption and authentication method for ad hoc networks. The method includes:

Generate the password of the ad hoc network based on all current terminal information in the ad hoc network and notify each terminal in the ad hoc network;

When each terminal in the ad hoc network sends service information, the password is used to encrypt the service information; when each terminal in the ad hoc network receives the service information, the password is used to encrypt the service information. Decrypt.

2. The encryption authentication method according to claim 1, wherein the method further includes: when receiving a request from a terminal to access the ad hoc network, all terminals in the ad hoc network respond to the accessed terminal. Authentication is performed; after the authentication is successful, the access terminal accesses the ad hoc network.

3. The encryption authentication method according to claim 1 or 2, wherein the method further includes: when determining that an access terminal in the ad hoc network or a terminal exits, the current terminal in the ad hoc network The information updates the password of the ad hoc network, and notifies each terminal in the ad hoc network of the updated password;

When each terminal in the ad hoc network sends service information, the updated password is used to encrypt the service information; when each terminal in the ad hoc network receives the service information, the updated password is used to encrypt the service information. Business information is decrypted.

4. The encryption authentication method according to claim 3, wherein before generating the password of the ad hoc network based on all current terminal information in the ad hoc network, the method further includes:

After the terminal receives the ad hoc network request message sent by other terminals through the wireless fidelity WIFI network or Bluetooth network, it authenticates the other terminals; and after the authentication is successful, it establishes a connection with the other terminals and generates ad hoc network requests. net.

5. The encryption authentication method according to claim 4, wherein the method further includes: The performance parameters of the terminal determine a terminal as an access point terminal, and the access point terminal allocates Internet protocol IP addresses to all terminals of the ad hoc network.

6. The encryption authentication method according to claim 5, wherein the generating the password of the ad hoc network based on all current terminal information in the ad hoc network includes:

The access point terminal receives terminal information sent by a non-access point terminal, and generates a password for the ad hoc network including the terminal information; wherein the terminal information includes at least one of the following information: Terminal user Name, IP address, terminal identification ID.

7. The encryption authentication method according to claim 2, 4, 5 or 6, wherein all terminals in the ad hoc network authenticate the accessed terminals, including:

Obtain the terminal information of the accessed terminal, and match the accessed terminal information with the cached terminal information. After the matching is successful, it is determined that the accessed terminal has been authenticated successfully; after the matching fails, according to the obtained When the terminal information of the terminal determines that the accessed terminal is a legitimate terminal, it is determined that the authentication of the accessed terminal is successful.

8. An encryption and authentication system for ad hoc networks. The system includes: access point terminals and non-access point terminals; wherein,

The access point terminal is configured to generate a password for the ad hoc network based on all current terminal information in the ad hoc network and notify each of the non-access point terminals in the ad hoc network; when sending a service When receiving information, the password is used to encrypt the service information; when the service information is received, the password is used to decrypt the service information.

The non-access point terminal is configured to receive the password of the ad hoc network notified by the access point terminal; when sending service information, use the password to encrypt the service information; receive the service When receiving information, the password is used to decrypt the service information.

9. The encryption authentication system according to claim 8, wherein the system further includes: an access terminal;

The access terminal is configured to send a request to access the ad hoc network to the access point. The terminal or the non-access point terminal; the access point terminal and the non-access point terminal access the ad hoc network after authenticating the access terminal;

The access point terminal is further configured to authenticate the access terminal when receiving a request from the access terminal to access the ad hoc network; and connect the access terminal to the ad hoc network. Push the request to the non-access point terminal;

The non-access point terminal is further configured to authenticate the access terminal when receiving a request from the access terminal to access the ad hoc network; and connect the access terminal to the ad hoc network. The network request is pushed to the access point terminal.

10. The encryption authentication system according to claim 8 or 9, wherein,

The access point terminal is also configured to update the password of the ad hoc network according to the current terminal information in the ad hoc network when it is determined that the access terminal in the ad hoc network or a terminal exits, and will update Notify each non-access point terminal in the ad hoc network of the updated password; when sending service information, use the updated password to encrypt the service information; when receiving service information, use the updated password Decrypt the business information;

The non-access point terminal is further configured to receive the updated password of the ad hoc network notified by the access point terminal; when sending service information, use the updated password to encrypt the service information. ; When receiving the business information, use the updated password to decrypt the business information.

11. The encryption authentication system according to claim 10, wherein,

The access point terminal is further configured to authenticate the non-access point terminal after receiving the ad hoc network request message sent by the non-access point terminal through the WIFI network or Bluetooth network; and After successful authentication, establish a connection with the non-access point terminal and generate an ad hoc network;

The non-access access point terminal is also configured to perform an ad hoc network request message on the access point terminal after receiving the ad-hoc network request message sent by the access point terminal through the WIFI network or Bluetooth network. Authentication; and after successful authentication, establish a connection with the access point terminal and generate an ad hoc network.

12. The encryption authentication system according to claim 11, wherein the access point terminal is further configured to allocate the access point terminal and all non-access point terminals of the ad hoc network. IP address.

13. The encryption authentication system according to claim 12, wherein the access point terminal is further configured to receive terminal information sent by the non-access point terminal; and generate the terminal information including the terminal information. The password of the ad hoc network; wherein the terminal information includes at least one of the following information: terminal user name, IP address, terminal ID.

14. The encryption authentication system according to claim 9, 11, 12 or 13, wherein the access point terminal is further configured to obtain terminal information of the access terminal; and combine the obtained terminal information with the already obtained terminal information. The cached terminal information is matched. After the matching is successful, it is determined that the access terminal is successfully authenticated; after the matching fails, when the access terminal is determined to be a legitimate terminal according to the acquired terminal information, it is determined that the access terminal is authenticated. Authentication successful;

The non-access point terminal is also configured to obtain the terminal information of the access terminal; match the obtained terminal information with the cached terminal information. After the matching is successful, it is determined that the access terminal has been successfully authenticated. ; After the matching fails, when it is determined that the access terminal is a legal terminal based on the acquired terminal information, it is determined that the access terminal has been successfully authenticated.

15. An encryption and authentication terminal for an ad hoc network. The terminal includes: a cryptographic unit, and an encryption and decryption unit; wherein,

The cryptographic unit is configured to generate a password for the ad hoc network based on all current terminal information in the ad hoc network and notify each terminal in the ad hoc network when the terminal is determined to be an access point terminal; When the terminal is determined to be a non-access point terminal, receive the password of the ad hoc network notified by the access point terminal;

The encryption and decryption unit is configured to use the password to encrypt the business information when sending business information; when receiving the business information, use the password to encrypt the business information. Decrypt.

16. The encryption authentication terminal according to claim 15, wherein the terminal further includes: a first receiving unit and an authentication unit; wherein,

The first receiving unit is configured to receive a request from an access terminal to access the ad hoc network; the authentication unit is configured to authenticate the access terminal and connect the access terminal to the ad hoc network. The networking request is pushed to other terminals of the ad hoc network.

17. The encryption authentication terminal according to claim 15 or 16, wherein the terminal further includes: an update unit, a sending unit and a second receiving unit; wherein,

The update unit is configured to update the terminal according to the current terminal information in the ad hoc network when the terminal is determined to be an access point terminal, when it is determined that the access terminal in the ad hoc network or a terminal exits. Ad hoc network password;

The sending unit is configured to notify each of the non-access point terminals in the ad hoc network of the updated password;

The second receiving unit is configured to receive the updated password of the ad hoc network notified by the access point terminal when the terminal is determined to be a non-access point terminal;

The encryption and decryption unit is also configured to encrypt the business information using the updated password when sending the business information; and decrypt the business information using the updated password when receiving the business information.

18. The encryption authentication terminal according to claim 17, wherein the terminal further includes: a third receiving unit and an establishing unit; wherein,

The third receiving unit is configured to receive the ad hoc network request message sent by the other terminal through the WIFI network or Bluetooth network;

The authentication unit is also configured to authenticate the other terminals;

The establishment unit is configured to establish a connection with the other terminal and generate an ad hoc network after successful authentication.

19. The encryption authentication terminal according to claim 18, wherein the terminal further includes an allocation unit configured to allocate IP to all terminals of the ad hoc network when the terminal is determined to be an access point terminal. address.

20. The encryption authentication terminal according to claim 19, wherein the cryptographic unit includes: a receiving subunit, a sending subunit and a generating subunit; wherein,

The receiving subunit is configured to receive terminal information sent by a non-access point terminal when the terminal is determined to be an access point terminal; generate a password for the ad hoc network containing the terminal information; wherein, The terminal information includes at least one of the following information: terminal user name, IP address, terminal ID;

The sending subunit is configured to send terminal information to the access point terminal when the terminal is determined to be a non-access point terminal;

The generating subunit is configured to generate a password of the ad hoc network containing the terminal information.

21. The encryption authentication terminal according to claim 16, 18, 19 or 20, wherein the authentication unit includes: an acquisition subunit, a matching subunit and a determination subunit; wherein,

The acquisition subunit is configured to acquire terminal information of the access terminal;

The matching subunit is configured to match the acquired terminal information with cached terminal information;

The determining subunit is configured to determine that the access terminal is successfully authenticated after the matching subunit successfully matches; and after the matching fails, determine that the access terminal is a legal terminal based on the acquired terminal information. , it is determined that the access terminal is successfully authenticated.