+

CN118802438A - Router web management page access method, device and storage medium - Google Patents

Router web management page access method, device and storage medium Download PDF

Info

Publication number
CN118802438A
CN118802438A CN202410301212.7A CN202410301212A CN118802438A CN 118802438 A CN118802438 A CN 118802438A CN 202410301212 A CN202410301212 A CN 202410301212A CN 118802438 A CN118802438 A CN 118802438A
Authority
CN
China
Prior art keywords
router
user terminal
access
password
free
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Pending
Application number
CN202410301212.7A
Other languages
Chinese (zh)
Inventor
张依东
周鹏
钱宁
徐辉
毛龙华
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
China Mobile Communications Group Co Ltd
China Mobile Hangzhou Information Technology Co Ltd
Original Assignee
China Mobile Communications Group Co Ltd
China Mobile Hangzhou Information Technology Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by China Mobile Communications Group Co Ltd, China Mobile Hangzhou Information Technology Co Ltd filed Critical China Mobile Communications Group Co Ltd
Priority to CN202410301212.7A priority Critical patent/CN118802438A/en
Publication of CN118802438A publication Critical patent/CN118802438A/en
Pending legal-status Critical Current

Links

Classifications

    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L41/00Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
    • H04L41/02Standardisation; Integration
    • H04L41/0246Exchanging or transporting network management information using the Internet; Embedding network management web servers in network elements; Web-services-based protocols
    • H04L41/0253Exchanging or transporting network management information using the Internet; Embedding network management web servers in network elements; Web-services-based protocols using browsers or web-pages for accessing management information
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00Network architectures or network communication protocols for network security
    • H04L63/08Network architectures or network communication protocols for network security for authentication of entities
    • H04L63/0815Network architectures or network communication protocols for network security for authentication of entities providing single-sign-on or federations
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00Network architectures or network communication protocols for network security
    • H04L63/08Network architectures or network communication protocols for network security for authentication of entities
    • H04L63/0876Network architectures or network communication protocols for network security for authentication of entities based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00Network architectures or network communication protocols for network security
    • H04L63/10Network architectures or network communication protocols for network security for controlling access to devices or network resources
    • H04L63/101Access control lists [ACL]

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Computer Hardware Design (AREA)
  • Computer Security & Cryptography (AREA)
  • Computing Systems (AREA)
  • General Engineering & Computer Science (AREA)
  • Power Engineering (AREA)
  • Data Exchanges In Wide-Area Networks (AREA)

Abstract

本申请涉及通信技术领域,提供路由器web管理页面的访问方法、设备和存储介质,应用于路由器侧的方法包括:在路由器已连接外网的场景下接收第二用户终端发送的访问路由器web管理页面的免密登录指令;当第二用户终端不存在于免密访问白名单时,向云平台发送网络请求,以驱动云平台向作为路由器侧管理员的第一用户终端发送登录审核信息;接收第一用户终端反馈的回复信息;回复信息包括拒绝、单次同意或多次同意;当回复信息为多次同意时将第二用户终端添加至免密访问白名单。本申请通过管理员设备管理和维护路由器web访问白名单,使得原本不在白名单的第二用户终端也能实现免密访问路由器web页面且可实现多次访问,简化交互流程。

The present application relates to the field of communication technology, and provides a method, device and storage medium for accessing the web management page of a router. The method applied to the router side includes: receiving a password-free login instruction for accessing the web management page of the router sent by a second user terminal in a scenario where the router is connected to an external network; when the second user terminal does not exist in the password-free access whitelist, sending a network request to the cloud platform to drive the cloud platform to send login review information to the first user terminal as the administrator of the router side; receiving reply information fed back by the first user terminal; the reply information includes rejection, single consent or multiple consents; when the reply information is multiple consents, the second user terminal is added to the password-free access whitelist. The present application manages and maintains the router web access whitelist through the administrator device, so that the second user terminal that was not originally on the whitelist can also achieve password-free access to the router web page and can achieve multiple accesses, simplifying the interaction process.

Description

路由器web管理页面的访问方法、设备和存储介质Router web management page access method, device and storage medium

技术领域Technical Field

本申请涉及通信技术领域,具体涉及路由器web管理页面的访问方法、设备和存储介质。The present application relates to the field of communication technology, and in particular to a method, device and storage medium for accessing a router web management page.

背景技术Background Art

一般家庭用户使用路由器来进行上网、wifi修改、信道选择等操作,需以下步骤:先获取路由器的lan口IP地址,然后通过浏览器访问该IP,再登录用户名和密码,最后以网页菜单的形式来配置。Generally, home users use routers to access the Internet, modify Wi-Fi, select channels, etc. The following steps are required: first obtain the router's LAN port IP address, then access the IP through a browser, then log in with the username and password, and finally configure it in the form of a web menu.

路由器出厂默认web密码是字母/数字和特殊字符的随即组合,贴在背部铭牌上。一方面,铭牌信息会随时间磨损,而导致出厂密码丢失。另一方面,由于web页面的使用场景较少,登录频率较低,用户修改用户名和密码后经常会忘记而无法登录。虽然通过恢复设备出厂设置的方式可以重置原铭牌密码,但也会删除用户其他配置信息。The factory default web password of the router is a random combination of letters/numbers and special characters, which is affixed to the nameplate on the back. On the one hand, the nameplate information will wear out over time, resulting in the loss of the factory password. On the other hand, due to the small number of usage scenarios of the web page and the low login frequency, users often forget their usernames and passwords after changing them and cannot log in. Although the original nameplate password can be reset by restoring the device to factory settings, other user configuration information will also be deleted.

发明内容Summary of the invention

本申请实施例提供路由器web管理页面的访问方法、设备和存储介质,用以解决路由器web页面访问需要密码登录而密码容易遗忘或者丢失的技术问题。The embodiments of the present application provide a method, device and storage medium for accessing a router web management page, so as to solve the technical problem that accessing a router web page requires a password to log in but the password is easily forgotten or lost.

第一方面,本申请实施例提供一种路由器web管理页面的访问方法,应用于路由器侧,包括:在路由器已连接外网的场景下,接收第二用户终端发送的访问路由器web管理页面的免密登录指令;当第二用户终端不存在于免密访问白名单时,向云平台发送网络请求;网络请求用于驱动云平台向作为路由器侧管理员的第一用户终端发送登录审核信息;通过云平台接收第一用户终端基于登录审核信息反馈的回复信息;其中回复信息包括拒绝、单次同意或多次同意;当回复信息为拒绝时,不允许第二用户终端的本次免密访问;当回复信息为单次同意时,允许第二用户终端的本次免密访问,但不将第二用户终端添加至免密访问白名单;当回复信息为多次同意时,允许第二用户终端的本次免密访问,且将第二用户终端添加至免密访问白名单。In the first aspect, an embodiment of the present application provides a method for accessing a router web management page, which is applied to the router side, including: in a scenario where the router is connected to an external network, receiving a password-free login instruction for accessing the router web management page sent by a second user terminal; when the second user terminal does not exist in the password-free access whitelist, sending a network request to a cloud platform; the network request is used to drive the cloud platform to send login review information to a first user terminal that is an administrator on the router side; receiving reply information from the first user terminal based on the login review information feedback through the cloud platform; wherein the reply information includes rejection, single consent or multiple consents; when the reply information is rejection, the second user terminal is not allowed to access the web management page this time; when the reply information is a single consent, the second user terminal is allowed to access the web management page this time, but the second user terminal is not added to the password-free access whitelist; when the reply information is multiple consents, the second user terminal is allowed to access the web management page this time, and the second user terminal is added to the password-free access whitelist.

在一个实施例中,免密访问白名单为MAC地址白名单;接收第二用户终端发送的访问路由器web管理页面的免密登录指令之后,包括:通过对免密登录指令解析获取第二用户终端的MAC地址;将第二用户终端的MAC地址和MAC地址白名单作对比;当第二用户终端的MAC地址和MAC地址白名单不匹配时,判定第二用户终端不存在于免密访问白名单。In one embodiment, the password-free access whitelist is a MAC address whitelist; after receiving a password-free login instruction for accessing a web management page of a router sent by a second user terminal, the method includes: obtaining a MAC address of the second user terminal by parsing the password-free login instruction; comparing the MAC address of the second user terminal with the MAC address whitelist; when the MAC address of the second user terminal does not match the MAC address whitelist, determining that the second user terminal does not exist in the password-free access whitelist.

在一个实施例中,还包括:接收第三用户终端发送的访问路由器web管理页面的免密登录指令;通过对免密登录指令解析获取第三用户终端的MAC地址;将第三用户终端的MAC地址和MAC地址白名单作对比;当第二用户终端的MAC地址和MAC地址白名单匹配时,判定第二用户终不存在于免密访问白名单;允许第三用户终端的免密访问。In one embodiment, the method further includes: receiving a password-free login instruction for accessing a web management page of a router sent by a third user terminal; obtaining a MAC address of the third user terminal by parsing the password-free login instruction; comparing the MAC address of the third user terminal with a MAC address whitelist; when the MAC address of the second user terminal matches the MAC address whitelist, determining that the second user terminal does not exist in the password-free access whitelist; and allowing the third user terminal to access the password-free access.

在一个实施例中,允许第二用户终端的本次免密访问,包括:判断第二用户终端的设备类型;其中设备类型包括电脑端和移动端;根据设备类型自适应调整页面访问的URL路径;根据设备类型自适应调整页面访问的前端模板。In one embodiment, allowing the second user terminal to access the page without password includes: determining the device type of the second user terminal; wherein the device type includes a computer terminal and a mobile terminal; adaptively adjusting the URL path of the page access according to the device type; and adaptively adjusting the front-end template of the page access according to the device type.

在一个实施例中,路由器侧和云平台通过互联网建立IOT长连接;和/或,路由器侧和任一用户终端通过本地短距离协议通信。In one embodiment, the router side and the cloud platform establish an IOT long connection through the Internet; and/or, the router side and any user terminal communicate through a local short-distance protocol.

第二方面,本申请实施例提供一种路由器web管理页面的访问方法,应用于作为路由器侧管理员的第一用户终端,包括:在路由器已连接外网的场景下,接收云平台发送的登录审核信息;其中登录审核信息是云平台响应于网络请求而生成的;网络请求是路由器侧响应于第二用户终端发出的免密登录指令而生成的;第二用户终端不存在于路由器侧的免密访问白名单;响应于登录审核信息,向云平台反馈回复信息;其中回复信息包括拒绝、单次同意或多次同意;当回复信息为拒绝时,路由器侧不允许第二用户终端本次免密访问路由器的web管理页面;当回复信息为单次同意时,路由器侧允许第二用户终端本次免密访问路由器的web管理页面,但不将第二用户终端添加至免密访问白名单;当回复信息为多次同意时,路由器侧允许第二用户终端的本次免密访问,且将第二用户终端添加至免密访问白名单。In a second aspect, an embodiment of the present application provides a method for accessing a router web management page, which is applied to a first user terminal that is an administrator on the router side, comprising: in a scenario where the router is connected to an external network, receiving login review information sent by a cloud platform; wherein the login review information is generated by the cloud platform in response to a network request; the network request is generated by the router side in response to a password-free login instruction issued by a second user terminal; the second user terminal does not exist in the password-free access whitelist on the router side; in response to the login review information, feedback information to the cloud platform; wherein the reply information includes rejection, single consent or multiple consents; when the reply information is rejection, the router side does not allow the second user terminal to access the router's web management page without a password this time; when the reply information is a single consent, the router side allows the second user terminal to access the router's web management page without a password this time, but does not add the second user terminal to the password-free access whitelist; when the reply information is multiple consents, the router side allows the second user terminal's password-free access this time, and adds the second user terminal to the password-free access whitelist.

第三方面,本申请实施例提供一种路由器web管理页面的访问方法,应用于第二用户终端,包括:在路由器已连接外网的场景下,向路由器侧发送访问路由器web管理页面的免密登录指令;其中免密登录指令用于驱动路由器侧向云平台发送网络请求;网络请求用于驱动云平台向作为路由器侧管理员的第一用户终端发送登录审核信息;第二用户终端不存在于路由器侧的免密访问白名单;接收路由器侧反馈的免密登录结果;其中免密登录结果包括拒绝、单次同意或多次同意;当免密登录结果为拒绝时,本次免密登录失败;当免密登录结果为单次同意时,本次免密登录成功;当免密登录结果为多次同意时,本次免密登录成功,且被添加至免密访问白名单。In the third aspect, an embodiment of the present application provides a method for accessing a router web management page, which is applied to a second user terminal, including: in a scenario where the router is connected to an external network, sending a password-free login instruction for accessing the router web management page to the router side; wherein the password-free login instruction is used to drive the router side to send a network request to the cloud platform; the network request is used to drive the cloud platform to send login review information to the first user terminal which is the administrator of the router side; the second user terminal does not exist in the password-free access whitelist on the router side; receiving the password-free login result fed back by the router side; wherein the password-free login result includes rejection, single consent or multiple consents; when the password-free login result is rejection, this password-free login fails; when the password-free login result is single consent, this password-free login is successful; when the password-free login result is multiple consents, this password-free login is successful and is added to the password-free access whitelist.

第四方面,本申请实施例提供一种路由器web管理页面的访问方法,应用于云平台,包括:在路由器已连接外网的场景下,接收路由器侧发送的网络请求;其中网络请求是路由器侧响应于第二用户终端发出的免密登录指令而生成的;第二用户终端不存在于路由器侧的免密访问白名单;响应于网络请求,生成登录审核信息,并将登录审核信息发送至作为路由器侧管理员的第一用户终端;接收第一用户终端反馈回复信息;其中回复信息包括拒绝、单次同意或多次同意;将回复信息转发至路由器侧,以使路由器侧生成免密登录结果;当回复信息为拒绝时,路由器侧不允许第二用户终端本次免密访问路由器的web管理页面;当回复信息为单次同意时,路由器侧允许第二用户终端本次免密访问路由器的web管理页面,但不将第二用户终端添加至免密访问白名单;当回复信息为多次同意时,路由器侧将第二用户终端添加至免密访问白名单。In a fourth aspect, an embodiment of the present application provides a method for accessing a router web management page, which is applied to a cloud platform, including: in a scenario where the router is connected to an external network, receiving a network request sent by the router side; wherein the network request is generated by the router side in response to a password-free login instruction issued by a second user terminal; the second user terminal does not exist in the password-free access whitelist on the router side; in response to the network request, generating login review information, and sending the login review information to a first user terminal that is an administrator on the router side; receiving feedback reply information from the first user terminal; wherein the reply information includes rejection, single consent or multiple consents; forwarding the reply information to the router side, so that the router side generates a password-free login result; when the reply information is rejection, the router side does not allow the second user terminal to access the router's web management page without a password this time; when the reply information is a single consent, the router side allows the second user terminal to access the router's web management page without a password this time, but does not add the second user terminal to the password-free access whitelist; when the reply information is multiple consents, the router side adds the second user terminal to the password-free access whitelist.

第五方面,本申请实施例提供一种电子设备,包括处理器和存储有计算机程序的存储器,所述处理器执行所述程序时实现第一方面至第四方面所述的路由器web管理页面的访问方法。In a fifth aspect, an embodiment of the present application provides an electronic device, comprising a processor and a memory storing a computer program, wherein when the processor executes the program, the method for accessing the router web management page described in the first to fourth aspects is implemented.

第六方面,本申请实施例一种非暂态计算机可读存储介质,其上存储有计算机程序,该计算机程序被处理器执行时实现第一方面至第四方面所述的路由器web管理页面的访问方法。In a sixth aspect, an embodiment of the present application provides a non-transitory computer-readable storage medium having a computer program stored thereon, which, when executed by a processor, implements the method for accessing the router web management page described in the first to fourth aspects.

第七方面,本申请实施例提供一种计算机程序产品,包括计算机程序,所述计算机程序被处理器执行时实现第一方面至第四方面所述的路由器web管理页面的访问方法。In a seventh aspect, an embodiment of the present application provides a computer program product, including a computer program, which, when executed by a processor, implements the method for accessing the router web management page described in the first to fourth aspects.

本申请实施例提供的路由器web管理页面的访问方法、设备和存储介质,应用于路由器侧的方法包括:在路由器已连接外网的场景下,接收第二用户终端发送的访问路由器web管理页面的免密登录指令;当第二用户终端不存在于免密访问白名单时,向云平台发送网络请求以驱动云平台向作为路由器侧管理员的第一用户终端发送登录审核信息;通过云平台接收第一用户终端基于登录审核信息反馈的回复信息;当回复信息为拒绝时不允许第二用户终端的本次免密访问;当回复信息为单次同意时允许第二用户终端的本次免密访问,但不将第二用户终端添加至免密访问白名单;当回复信息为多次同意时允许第二用户终端的本次免密访问,且将第二用户终端添加至免密访问白名单。通过上述方式,本申请通过管理员设备管理和维护路由器web访问白名单,使得原本不在白名单的第二用户终端也能实现免密访问路由器web页面且可实现多次访问,省去登录用户名和密码,避免用户遗忘或丢失密码等场景,简化交互流程。The access method, device and storage medium of the router web management page provided by the embodiment of the present application, the method applied to the router side includes: receiving a password-free login instruction for accessing the router web management page sent by the second user terminal in a scenario where the router is connected to the external network; when the second user terminal does not exist in the password-free access whitelist, sending a network request to the cloud platform to drive the cloud platform to send login review information to the first user terminal as the administrator of the router side; receiving the reply information of the first user terminal based on the login review information feedback through the cloud platform; when the reply information is a rejection, not allowing the second user terminal's current password-free access; when the reply information is a single consent, allowing the second user terminal's current password-free access, but not adding the second user terminal to the password-free access whitelist; when the reply information is multiple consents, allowing the second user terminal's current password-free access, and adding the second user terminal to the password-free access whitelist. Through the above-mentioned method, the present application manages and maintains the router web access whitelist through the administrator device, so that the second user terminal that was not originally in the whitelist can also achieve password-free access to the router web page and can achieve multiple accesses, eliminating the login username and password, avoiding the scenario of the user forgetting or losing the password, and simplifying the interaction process.

附图说明BRIEF DESCRIPTION OF THE DRAWINGS

为了更清楚地说明本申请或现有技术中的技术方案,下面将对实施例或现有技术描述中所需要使用的附图作一简单地介绍,显而易见地,下面描述中的附图是本申请的一些实施例,对于本领域普通技术人员来讲,在不付出创造性劳动的前提下,还可以根据这些附图获得其他的附图。In order to more clearly illustrate the technical solutions in the present application or the prior art, a brief introduction will be given below to the drawings required for use in the embodiments or the description of the prior art. Obviously, the drawings described below are some embodiments of the present application. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying any creative work.

图1是本申请实施例提供的路由器web管理页面的访问方法的流程示意图之一;FIG1 is a flow chart of a method for accessing a router web management page according to an embodiment of the present application;

图2是本申请实施例提供的web前端页面自适应设备类型的流程示意图;FIG2 is a schematic diagram of a process flow of a web front-end page adapting to a device type according to an embodiment of the present application;

图3是本申请实施例提供的路由器web管理页面的访问方法的流程示意图之二;3 is a second flow chart of a method for accessing a router web management page provided in an embodiment of the present application;

图4是本申请实施例提供的路由器web管理页面的访问方法的流程示意图之三;4 is a flowchart of a method for accessing a router web management page according to an embodiment of the present application;

图5是本申请实施例提供的路由器web管理页面的访问方法的流程示意图之四;5 is a fourth flow chart of a method for accessing a router web management page provided in an embodiment of the present application;

图6是本申请实施例提供的路由器web管理页面的设备交互示意图;6 is a schematic diagram of device interaction on a router web management page provided in an embodiment of the present application;

图7是本申请实施例提供的电子设备的实体结构示意图。FIG. 7 is a schematic diagram of the physical structure of an electronic device provided in an embodiment of the present application.

具体实施方式DETAILED DESCRIPTION

为使本申请的目的、技术方案和优点更加清楚,下面将结合本申请实施例中的附图,对本申请中的技术方案进行清楚、完整地描述,显然,所描述的实施例是本申请一部分实施例,而不是全部的实施例。基于本申请中的实施例,本领域普通技术人员在没有作出创造性劳动前提下所获得的所有其他实施例,都属于本申请保护的范围。In order to make the purpose, technical solutions and advantages of this application clearer, the technical solutions in this application will be clearly and completely described below in conjunction with the drawings in the embodiments of this application. Obviously, the described embodiments are part of the embodiments of this application, not all of them. Based on the embodiments in this application, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of this application.

相关技术中为了实现用户更为快速、便捷的对路由器进行配置,也提供了一些方法,例如通过浏览器访问配置请求方式,可直接打开WIFI路由器的配置页面,然而这种方式不校验和区分用户,存在安全风险;并且用户不能管理和维护路由器访问权限列表,无法实现管理员权限。In order to enable users to configure routers more quickly and conveniently, some methods are also provided in the related art. For example, the configuration request method is accessed through a browser, and the configuration page of the WIFI router can be directly opened. However, this method does not verify and distinguish users, which poses a security risk; and users cannot manage and maintain the router access permission list, and cannot achieve administrator privileges.

基于此,本申请实施例提供一种路由器web管理页面的访问方法。请参阅图1,图1是本申请实施例提供的路由器web管理页面的访问方法的流程示意图之一。本实施例的路由器web管理页面的访问方法应用于路由器侧,包括步骤S110至S130,各步骤具体如下:Based on this, an embodiment of the present application provides a method for accessing a router web management page. Please refer to Figure 1, which is one of the flow charts of the method for accessing a router web management page provided by an embodiment of the present application. The method for accessing a router web management page of this embodiment is applied to the router side, and includes steps S110 to S130, each of which is as follows:

S110:在路由器已连接外网的场景下,接收第二用户终端发送的访问路由器web管理页面的免密登录指令。S110: When the router is connected to an external network, receiving a password-free login instruction for accessing a web management page of the router sent by a second user terminal.

S120:当第二用户终端不存在于免密访问白名单时,向云平台发送网络请求。S120: When the second user terminal does not exist in the password-free access whitelist, send a network request to the cloud platform.

S130:通过云平台接收第一用户终端基于登录审核信息反馈的回复信息。S130: Receiving reply information from the first user terminal based on the login review information feedback through the cloud platform.

在本实施例的路由器web管理页面的访问方法中,涉及的执行主体可以包括路由器侧、第一用户终端、第二用户终端和云平台(设备服务器侧)。在其他的一些实施例中还可以涉及其他下挂STA终端和第三用户终端等。In the method for accessing the router web management page of this embodiment, the execution entities involved may include the router side, the first user terminal, the second user terminal and the cloud platform (device server side). In some other embodiments, other STA terminals and third user terminals may also be involved.

需要说明的是,在本实施例的定义中,第一用户终端为路由器侧管理员,可以存在于路由器侧的免密访问白名单,并且可以对免密访问白名单进行管理;初始状态的第二用户终端不存在于路由器侧的免密访问白名单,然而可以根据第一用户终端的回复信息进行单次免密访问或者多次免密访问;第三用户终端为存在于路由器侧的免密访问白名单但不具备管理功能的普通用户。It should be noted that, in the definition of this embodiment, the first user terminal is an administrator on the router side, may exist in the whitelist of password-free access on the router side, and may manage the whitelist of password-free access; the second user terminal in the initial state does not exist in the whitelist of password-free access on the router side, but may perform a single password-free access or multiple password-free accesses according to the reply information of the first user terminal; the third user terminal is an ordinary user who exists in the whitelist of password-free access on the router side but does not have management functions.

第二用户终端在进行单次免密访问时,路由器侧无需将第二用户终端添加至免密访问白名单,当第二用户终端下一次需要进行免密访问时,仍然需要第一用户终端进行审核确认。When the second user terminal performs a single password-free access, the router side does not need to add the second user terminal to the password-free access whitelist. When the second user terminal needs to perform password-free access next time, the first user terminal still needs to review and confirm.

第二用户终端在进行多次免密访问时,路由器侧可以将第二用户终端添加至免密访问白名单,当第二用户终端下一次需要进行免密访问时,不用需要第一用户终端进行审核确认。When the second user terminal performs multiple password-free accesses, the router side can add the second user terminal to the password-free access whitelist. When the second user terminal needs to perform password-free access next time, the first user terminal does not need to perform review and confirmation.

进一步地,免密多次免密访问可以包括永久免密访问或带期限限制或次数限制的免密访问。Furthermore, multiple password-free accesses may include permanent password-free access or password-free access with a time limit or a number limit.

其中,网络请求用于驱动云平台向作为路由器侧管理员的第一用户终端发送登录审核信息。The network request is used to drive the cloud platform to send login review information to the first user terminal that is the router side administrator.

可选地,路由器侧和云平台通过互联网建立IOT长连接;和/或,路由器侧和任一用户终端通过本地短距离协议通信,而不依赖互联网。Optionally, the router side and the cloud platform establish an IOT long connection through the Internet; and/or, the router side and any user terminal communicate through a local short-distance protocol without relying on the Internet.

回复信息包括拒绝、单次同意或多次同意。当回复信息为拒绝时,不允许第二用户终端的本次免密访问;当回复信息为单次同意时,允许第二用户终端的本次免密访问,但不将第二用户终端添加至免密访问白名单;当回复信息为多次同意时,允许第二用户终端的本次免密访问,且将第二用户终端添加至免密访问白名单。The reply information includes rejection, single consent or multiple consents. When the reply information is rejection, the second user terminal is not allowed to access the system without passwords; when the reply information is single consent, the second user terminal is allowed to access the system without passwords, but the second user terminal is not added to the whitelist of ...

本实施例提供一种路由器web管理页面的访问方法,应用于路由器侧,包括:在路由器已连接外网的场景下,接收第二用户终端发送的访问路由器web管理页面的免密登录指令;当第二用户终端不存在于免密访问白名单时,向云平台发送网络请求以驱动云平台向作为路由器侧管理员的第一用户终端发送登录审核信息;通过云平台接收第一用户终端基于登录审核信息反馈的回复信息;当回复信息为拒绝时不允许第二用户终端的本次免密访问;当回复信息为单次同意时允许第二用户终端的本次免密访问,但不将第二用户终端添加至免密访问白名单;当回复信息为多次同意时允许第二用户终端的本次免密访问,且将第二用户终端添加至免密访问白名单。通过上述方式,本实施例通过管理员设备管理和维护路由器web访问白名单,使得原本不在白名单的第二用户终端也能实现免密访问路由器web页面且可实现多次访问,省去登录用户名和密码,避免用户遗忘或丢失密码等场景,简化交互流程。This embodiment provides a method for accessing a web management page of a router, which is applied to the router side, and includes: receiving a password-free login instruction for accessing the web management page of the router sent by a second user terminal in a scenario where the router is connected to an external network; when the second user terminal does not exist in the password-free access whitelist, sending a network request to a cloud platform to drive the cloud platform to send login review information to a first user terminal as an administrator of the router side; receiving a reply information based on the login review information feedback from the first user terminal through the cloud platform; when the reply information is a rejection, not allowing the second user terminal to access the web management page of the router; when the reply information is a single consent, allowing the second user terminal to access the web management page of the router, but not adding the second user terminal to the password-free access whitelist; when the reply information is multiple consents, allowing the second user terminal to access the web management page of the router, and adding the second user terminal to the password-free access whitelist. In the above manner, this embodiment manages and maintains the router web access whitelist through the administrator device, so that the second user terminal that was not originally in the whitelist can also access the router web page without a password and can access it multiple times, eliminating the login username and password, avoiding the scenario of the user forgetting or losing the password, and simplifying the interaction process.

在一个实施例中,免密访问白名单为MAC地址白名单;接收第二用户终端发送的访问路由器web管理页面的免密登录指令之后,包括:通过对免密登录指令解析获取第二用户终端的MAC地址;将第二用户终端的MAC地址和MAC地址白名单作对比;当第二用户终端的MAC地址和MAC地址白名单不匹配时,判定第二用户终端不存在于免密访问白名单。In one embodiment, the password-free access whitelist is a MAC address whitelist; after receiving a password-free login instruction for accessing a web management page of a router sent by a second user terminal, the method includes: obtaining a MAC address of the second user terminal by parsing the password-free login instruction; comparing the MAC address of the second user terminal with the MAC address whitelist; when the MAC address of the second user terminal does not match the MAC address whitelist, determining that the second user terminal does not exist in the password-free access whitelist.

在一个实施例中,还包括:接收第三用户终端发送的访问路由器web管理页面的免密登录指令;通过对免密登录指令解析获取第三用户终端的MAC地址;将第三用户终端的MAC地址和MAC地址白名单作对比;当第二用户终端的MAC地址和MAC地址白名单匹配时,判定第二用户终不存在于免密访问白名单;允许第三用户终端的免密访问。In one embodiment, the method further includes: receiving a password-free login instruction for accessing a web management page of a router sent by a third user terminal; obtaining a MAC address of the third user terminal by parsing the password-free login instruction; comparing the MAC address of the third user terminal with a MAC address whitelist; when the MAC address of the second user terminal matches the MAC address whitelist, determining that the second user terminal does not exist in the password-free access whitelist; and allowing the third user terminal to access the password-free access.

可选地,本实施例中的用户终端可以看作是安装有预设APP的客户端。Optionally, the user terminal in this embodiment can be regarded as a client with a preset APP installed.

任一用户终端连接家庭路由器wifi,通过本地短距离协议(如coap/MQTT等)及私有接口来绑定家庭路由器,绑定时自动同步其MAC至路由器侧。Any user terminal connects to the home router wifi and binds to the home router through local short-distance protocols (such as coap/MQTT, etc.) and private interfaces, and automatically synchronizes its MAC to the router side when binding.

路由器侧可以配置MAC地址白名单,例如将app所在终端mac写保存本地,并添加到web访问白名单,只有指定的设备MAC地址才能直接访问路由器的web页面,无需密码。A MAC address whitelist can be configured on the router side. For example, the MAC address of the terminal where the app is located can be saved locally and added to the web access whitelist. Only the specified device MAC address can directly access the router's web page without a password.

当用户通过app所在终端来访问路由器web页面,路由器解析识别报文的源mac地址,并比对MAC地址白名单,当mac匹配、用户即可直接访问路由器的web页面,无需账号和密码登录。When the user accesses the router web page through the terminal where the app is located, the router parses and identifies the source MAC address of the message and compares it with the MAC address whitelist. When the MAC matches, the user can directly access the router web page without logging in with an account and password.

当用户使用其他终端(如sta_unbind)访问路由器web页面,MAC地址白名单不通过,跳转到web登录页面,显示用户名和密码输入栏,以及“免密登录”按钮。When the user uses other terminals (such as sta_unbind) to access the router web page, the MAC address whitelist does not pass, and jumps to the web login page, displaying the username and password input fields, and the "Login without password" button.

需要说明的是,在路由器无外网的场景下:“免密登录”按钮置灰,要求非app绑定终端必须通过密码强校验。It should be noted that in the scenario where the router has no external network, the "Login without password" button is grayed out, and non-app-bound terminals are required to pass strong password verification.

示例性地,在路由器外网连接的场景下,访问过程包括:Exemplarily, in the scenario where the router is connected to the external network, the access process includes:

1)用户可点击“免密登录”按钮,路由器侧发送网络请求到云平台,云平台基于绑定关系、推送消息到用户app;1) The user can click the "Login without Password" button, and the router will send a network request to the cloud platform. The cloud platform will push a message to the user's app based on the binding relationship.

2)用户app选择是否同意“免密登录”,如选择“拒绝”,则通过平台、反向推送消息到路由器侧,web页面显示“免密登录失败”;2) The user app chooses whether to agree to "password-free login". If "reject" is selected, the platform will push a message to the router side, and the web page will display "password-free login failed";

3)如选择“永远同意”,app发送消息至云平台,并同步更新云端的MAC地址簿、添加其MAC,并推送消息到路由器侧;3) If you select "Always Agree", the app sends a message to the cloud platform, updates the MAC address book in the cloud synchronously, adds its MAC, and pushes a message to the router;

路由器侧接收到消息后,web服务器响应终端sta_unbind,实现管理页面跳转;同时,保存其mac至本地flash,并更新MAC地址簿。后续,该设备可直接免密访问路由器的web页面。After the router receives the message, the web server responds to the terminal sta_unbind to redirect the management page; at the same time, it saves its MAC to the local flash and updates the MAC address book. Later, the device can directly access the router's web page without a password.

4)如选择“同意一次”,app发送消息至云平台,然后推送到路由器侧;路由器侧实现管理页面跳转,但不添加其MAC。4) If you select "Agree once", the app sends a message to the cloud platform and then pushes it to the router; the router will jump to the management page but will not add its MAC.

综上,本实施例提供的路由器web管理页面的访问方法,在路由器未连外网场景或者已连接外网场景时,基于本地短距离协议,家庭路由器通过来绑定用户app动作、自动同步其MAC至web白名单,实现内网环境下无感免密访问web管理页面;在路由器连外网场景时,用户可通过app来管理和维护路由器web访问白名单,动态添加、删除其他连接下挂终端,实现该设备是否可免密登录路由器web页面。因此用户终端可以实现免密访问路由器web页面,省去登录用户名和密码,避免用户遗忘或丢失密码等场景,简化交互流程;并且,路由器通过MAC地址过滤规则来实现web访问白名单,实现免密访问登录的安全性。In summary, the method for accessing the web management page of the router provided in this embodiment is that when the router is not connected to the external network or is connected to the external network, based on the local short-distance protocol, the home router binds the user app action and automatically synchronizes its MAC to the web whitelist, so as to achieve non-sensitive and password-free access to the web management page in the intranet environment; when the router is connected to the external network, the user can manage and maintain the router web access whitelist through the app, dynamically add and delete other connected terminals, and realize whether the device can log in to the router web page without password. Therefore, the user terminal can access the router web page without password, eliminating the login username and password, avoiding the scenario of the user forgetting or losing the password, and simplifying the interaction process; and the router implements the web access whitelist through the MAC address filtering rule to achieve the security of password-free access and login.

在一个实施例中,允许第二用户终端的本次免密访问,包括:判断第二用户终端的设备类型;其中设备类型包括电脑端和移动端;根据设备类型自适应调整页面访问的URL路径;根据设备类型自适应调整页面访问的前端模板。In one embodiment, allowing the second user terminal to access the page without password includes: determining the device type of the second user terminal; wherein the device type includes a computer terminal and a mobile terminal; adaptively adjusting the URL path of the page access according to the device type; and adaptively adjusting the front-end template of the page access according to the device type.

路由器的web页面默认电脑(PC)端、不能很好适应移动端浏览,而随着移动互联网的普及和发展,越来越多的用户习惯于在移动端上网,未考虑到用户在移动端来访问web页面、配置路由器。考虑到移动端与pc前端各有特点、且移动端机型设备众多,目前还没有通用性很好的同时能适应两者前端显示。The web page of the router is designed for PC by default and cannot be well adapted to mobile browsing. With the popularization and development of mobile Internet, more and more users are accustomed to surfing the Internet on mobile terminals, but users are not considered to access web pages and configure routers on mobile terminals. Considering that the mobile terminal and PC front-end have their own characteristics and there are many mobile terminal models, there is currently no universal front-end display that can adapt to both.

相关技术中也提出了一些解决方案,例如PC端和移动端复用一套web页面,然而这可能会导致布局、页面设计和SEO等方面的问题,带来不良的用户体验;例如PC端转换为移动端页面,然而这会导致页面加载时间延长和性能下降。Some solutions have also been proposed in related technologies, such as reusing a set of web pages for PC and mobile terminals. However, this may cause problems in layout, page design, and SEO, resulting in a poor user experience; for example, converting a PC terminal to a mobile terminal page, but this will result in longer page loading time and degraded performance.

而本实施例提出的路由器web前端页面自适应方案,是为了优化、改进移动端无线方式访问路由器Web页面,通过多种方式智能判断设备类型,从而确认不同的URL路径,并部署多套web前端模板,实现自适应移动端和PC前端。The router web front-end page adaptation solution proposed in this embodiment is to optimize and improve the wireless access of mobile terminals to router web pages, intelligently determine the device type through various methods, thereby confirming different URL paths, and deploying multiple sets of web front-end templates to achieve adaptive mobile and PC front-ends.

请参阅图2,图2是本申请实施例提供的web前端页面自适应设备类型的流程示意图。在本实施例中包括步骤S210至S250,各步骤具体如下:Please refer to Figure 2, which is a schematic diagram of a process of adapting a web front-end page to a device type according to an embodiment of the present application. In this embodiment, steps S210 to S250 are included, and each step is as follows:

S210:用户终端访问路由器web页面。S210: The user terminal accesses the router web page.

本实施例中的用户终端可以是第一用户终端、第二用户终端或第三用户终端中的任意一种。The user terminal in this embodiment may be any one of a first user terminal, a second user terminal or a third user terminal.

S220:判断用户终端的设备类型。S220: Determine the device type of the user terminal.

可选地,可以通过识别下挂STA设备类型:获取设备连接时自带的hostname,如无则缺省,如有包含“phone”、“desktop”、“PC”等字段;基于DHCP协议中OPTION来解析option12,获取下挂设备类型(Statype)。Optionally, the type of the downstream STA device can be identified by: obtaining the hostname of the device when it is connected, if not, it is defaulted, if it contains fields such as "phone", "desktop", "PC", etc.; parsing option 12 based on OPTION in the DHCP protocol to obtain the downstream device type (Statype).

可选地,可以通过IP地址范围来判断:PC端通过有线以太方式连接(一般LAN1-LAN4口),移动端则通过无线wifi方式(ra0/raw)。不同LAN口对应各自IP地址段,因此,PC端和移动端会分别分配不同的IP地址段。Alternatively, you can use the IP address range to determine: the PC is connected via wired Ethernet (usually LAN1-LAN4 ports), and the mobile terminal is connected via wireless WiFi (ra0/raw). Different LAN ports correspond to their own IP address segments, so the PC and mobile terminals will be assigned different IP address segments.

可选地,可以通过获取下挂终端的IP地址、结合查询LAN口IP地址段配置,与PC端和移动端的IP地址范围进行比较等方式,识别不同终端类型。Optionally, different terminal types can be identified by obtaining the IP address of the downstream terminal, querying the LAN port IP address segment configuration, and comparing it with the IP address ranges of the PC and mobile terminals.

可选地,可以通过User Agent检测判断:检查用户HTTP请求的User Agent头部来获取设备类型信息,从而判断其设备类型和操作系统。例如,PC端常见的User Agent可能包含关键词"Windows"、“Macintosh"等,而移动端则可能包含关键词"Android”、"iOS"等。通过分析User Agent,可以判断用户是从PC端还是移动端访问网页。Optionally, you can use User Agent detection to determine: Check the User Agent header of the user's HTTP request to obtain device type information, thereby determining the device type and operating system. For example, common User Agents on PCs may contain keywords such as "Windows" and "Macintosh", while mobile terminals may contain keywords such as "Android" and "iOS". By analyzing the User Agent, you can determine whether the user is accessing the web page from a PC or a mobile terminal.

可选地,可以通过设备分辨率判断:PC端和移动端设备通常具有不同的屏幕分辨率和显示特性,PC端设备通常拥有较高的分辨率,如1920x1080等,而移动端设备的分辨率通常较低,如800x480等。路由器可以根据下挂设备的请求时所携带的屏幕分辨率信息来区分设备类型。Alternatively, the device resolution can be used for judgment: PC and mobile devices usually have different screen resolutions and display characteristics. PC devices usually have higher resolutions, such as 1920x1080, while mobile devices usually have lower resolutions, such as 800x480. The router can distinguish the device type based on the screen resolution information carried in the request of the connected device.

S230:自适应修改URL路径。S230: Adaptively modify the URL path.

在一些实施例中,默认访问路径为/pc。当智能识别为移动端,则将路径中默认的/pc改为/mobile。In some embodiments, the default access path is /pc. When the intelligent identification is a mobile terminal, the default /pc in the path is changed to /mobile.

S240:访问路由器不同的前端模板。S240: Access different front-end templates of the router.

S250:路由器Web页面响应。S250: The router web page responds.

本实施例通过部署不同的前端模板,通过智能识别不同终端设备类型、添加URL路径来差异化访问前端,从而实现web页面的自适应;综合多种方式,智能识别不同终端设备类型,web管理页面自适应PC端和移动端,可有效区分不同终端,给用户提供相似的布局、导航和功能,从而减少用户的学习成本和混淆。This embodiment deploys different front-end templates, intelligently identifies different terminal device types, and adds URL paths to differentiate access to the front end, thereby achieving adaptation of web pages. By combining various methods, different terminal device types can be intelligently identified, and the web management page can adapt to PC and mobile terminals, which can effectively distinguish different terminals and provide users with similar layouts, navigation, and functions, thereby reducing users' learning costs and confusion.

请参阅图3,图3是本申请实施例提供的路由器web管理页面的访问方法的流程示意图之二。本实施例的路由器web管理页面的访问方法应用于作为路由器侧管理员的第一用户终端,包括步骤S310至S320,各步骤具体如下:Please refer to FIG. 3, which is a second flow chart of the method for accessing the web management page of a router provided in an embodiment of the present application. The method for accessing the web management page of a router in this embodiment is applied to a first user terminal as a router side administrator, and includes steps S310 to S320, each of which is as follows:

S310:在路由器已连接外网的场景下,接收云平台发送的登录审核信息。S310: When the router is connected to the external network, receiving login review information sent by the cloud platform.

其中登录审核信息是云平台响应于网络请求而生成的;网络请求是路由器侧响应于第二用户终端发出的免密登录指令而生成的;第二用户终端不存在于路由器侧的免密访问白名单。The login audit information is generated by the cloud platform in response to a network request; the network request is generated by the router side in response to a password-free login instruction issued by the second user terminal; the second user terminal does not exist in the password-free access whitelist on the router side.

S320:响应于登录审核信息,向云平台反馈回复信息。S320: In response to the login review information, feedback reply information is sent to the cloud platform.

其中回复信息包括拒绝、单次同意或多次同意;当回复信息为拒绝时,路由器侧不允许第二用户终端本次免密访问路由器的web管理页面;当回复信息为单次同意时,路由器侧允许第二用户终端本次免密访问路由器的web管理页面,但不将第二用户终端添加至免密访问白名单;当回复信息为多次同意时,路由器侧允许第二用户终端的本次免密访问,且将第二用户终端添加至免密访问白名单。The reply information includes rejection, single consent or multiple consents; when the reply information is rejection, the router side does not allow the second user terminal to access the router's web management page without a password this time; when the reply information is single consent, the router side allows the second user terminal to access the router's web management page without a password this time, but does not add the second user terminal to the whitelist for password-free access; when the reply information is multiple consents, the router side allows the second user terminal to access the router without a password this time, and adds the second user terminal to the whitelist for password-free access.

请参阅图4,图4是本申请实施例提供的路由器web管理页面的访问方法的流程示意图之三。本实施例的路由器web管理页面的访问方法应用于第二用户终端,包括步骤S410至S420,各步骤具体如下:Please refer to Figure 4, which is a flowchart of the third method for accessing the web management page of a router provided in an embodiment of the present application. The method for accessing the web management page of a router in this embodiment is applied to a second user terminal, and includes steps S410 to S420, each of which is as follows:

S410:在路由器已连接外网的场景下,向路由器侧发送访问路由器web管理页面的免密登录指令。S410: When the router is connected to the external network, a password-free login instruction for accessing the router web management page is sent to the router side.

其中免密登录指令用于驱动路由器侧向云平台发送网络请求;网络请求用于驱动云平台向作为路由器侧管理员的第一用户终端发送登录审核信息;第二用户终端不存在于路由器侧的免密访问白名单。The password-free login instruction is used to drive the router to send a network request to the cloud platform; the network request is used to drive the cloud platform to send login review information to the first user terminal that is the administrator of the router; the second user terminal does not exist in the password-free access whitelist on the router side.

S420:接收路由器侧反馈的免密登录结果。S420: Receive the password-free login result fed back by the router.

其中免密登录结果包括拒绝、单次同意或多次同意;当免密登录结果为拒绝时,本次免密登录失败;当免密登录结果为单次同意时,本次免密登录成功;当免密登录结果为多次同意时,本次免密登录成功,且被添加至免密访问白名单。The results of password-free login include rejection, single consent or multiple consents; when the result of password-free login is rejection, this password-free login fails; when the result of password-free login is single consent, this password-free login is successful; when the result of password-free login is multiple consents, this password-free login is successful and is added to the password-free access whitelist.

请参阅图5,图5是本申请实施例提供的路由器web管理页面的访问方法的流程示意图之四。本实施例的路由器web管理页面的访问方法应用于云平台,包括步骤S510至S540,各步骤具体如下:Please refer to Figure 5, which is a fourth flow chart of the method for accessing the web management page of a router provided in an embodiment of the present application. The method for accessing the web management page of a router in this embodiment is applied to a cloud platform, and includes steps S510 to S540, each of which is as follows:

S510:在路由器已连接外网的场景下,接收路由器侧发送的网络请求。S510: When the router is connected to an external network, a network request sent by the router is received.

其中网络请求是路由器侧响应于第二用户终端发出的免密登录指令而生成的;第二用户终端不存在于路由器侧的免密访问白名单。The network request is generated by the router side in response to a password-free login instruction issued by the second user terminal; the second user terminal does not exist in the password-free access whitelist on the router side.

S520:响应于网络请求,生成登录审核信息,并将登录审核信息发送至作为路由器侧管理员的第一用户终端。S520: In response to the network request, generate login audit information, and send the login audit information to the first user terminal that is the administrator of the router side.

S530:接收第一用户终端反馈回复信息。S530: Receive feedback reply information from the first user terminal.

其中回复信息包括拒绝、单次同意或多次同意。The response information includes rejection, single consent or multiple consents.

S540:将回复信息转发至路由器侧,以使路由器侧生成免密登录结果。S540: Forward the reply information to the router side, so that the router side generates a password-free login result.

当回复信息为拒绝时,路由器侧不允许第二用户终端本次免密访问路由器的web管理页面;当回复信息为单次同意时,路由器侧允许第二用户终端本次免密访问路由器的web管理页面,但不将第二用户终端添加至免密访问白名单;当回复信息为多次同意时,路由器侧将第二用户终端添加至免密访问白名单。When the reply message is rejection, the router side does not allow the second user terminal to access the router's web management page without a password this time; when the reply message is a single consent, the router side allows the second user terminal to access the router's web management page without a password this time, but does not add the second user terminal to the whitelist for password-free access; when the reply message is multiple consents, the router side adds the second user terminal to the whitelist for password-free access.

请参阅图6,图6是本申请实施例提供的路由器web管理页面的设备交互示意图。Please refer to Figure 6, which is a device interaction diagram of the router web management page provided in an embodiment of the present application.

本实施例中进行交互的设备包括APP(管理员,相当于第一用户终端)、路由器和其他终端(普通用户,相当于第二用户终端)。In this embodiment, the interacting devices include an APP (administrator, equivalent to a first user terminal), a router, and other terminals (ordinary users, equivalent to a second user terminal).

APP向路由器请求绑定,路由器保存对应MAC地址,并向APP返回绑定成功的消息。APP访问路由器的额web页面,路由器MAC白名单(相当于免密访问白名单)校验通过,因此APP可实现无感免密登录,直接跳转管理页面。The APP requests binding from the router, the router saves the corresponding MAC address, and returns a message of successful binding to the APP. The APP accesses the web page of the router, and the router MAC whitelist (equivalent to the whitelist for password-free access) is verified, so the APP can log in without a password and directly jump to the management page.

当其他终端访问路由器的Web页面,且路由器白名单校验不通过时,路由器需要向APP请求验证,并将消息推送至APP,此时APP管理员选择权限,例如拒绝、临时同意和永久同意等,并跳转管理页面。When other terminals access the router's web page and the router whitelist verification fails, the router needs to request verification from the APP and push the message to the APP. At this time, the APP administrator selects permissions, such as rejection, temporary consent, and permanent consent, and jumps to the management page.

此外,APP管理员日常维护时,可以添加/删除MAC地址以更新白名单,当更新成功后,路由器会向APP返回消息。In addition, during routine maintenance, the APP administrator can add/delete MAC addresses to update the whitelist. When the update is successful, the router will return a message to the APP.

另一方面,本申请实施例还提供一种电子设备,图7是本申请实施例提供的电子设备的实体结构示意图,如图7所示,该电子设备可以包括:电子设备可以包括存储器(memory)720、处理器(processor)710及存储在存储器720上并可在处理器710上运行的计算机程序。处理器710执行程序时实现上述各方法所提供的路由器web管理页面的访问方法。On the other hand, an embodiment of the present application further provides an electronic device, and FIG7 is a schematic diagram of the physical structure of the electronic device provided in an embodiment of the present application. As shown in FIG7, the electronic device may include: the electronic device may include a memory 720, a processor 710, and a computer program stored in the memory 720 and executable on the processor 710. When the processor 710 executes the program, the access method of the router web management page provided by the above methods is implemented.

可选地,电子设备还可以包括通信总线730和通信接口(CommunicationsInterface)740,其中,处理器710,通信接口740,存储器720通过通信总线730完成相互间的通信。处理器710可以调用存储器720中的计算机程序,以执行路由器web管理页面的访问方法方法,具体可参阅上述实施例。Optionally, the electronic device may further include a communication bus 730 and a communication interface (CommunicationsInterface) 740, wherein the processor 710, the communication interface 740, and the memory 720 communicate with each other through the communication bus 730. The processor 710 may call a computer program in the memory 720 to execute a method for accessing the web management page of the router, and the details may refer to the above embodiment.

此外,上述的存储器720中的逻辑指令可以通过软件功能单元的形式实现并作为独立的产品销售或使用时,可以存储在一个计算机可读取存储介质中。基于这样的理解,本申请的技术方案本质上或者说对现有技术做出贡献的部分或者该技术方案的部分可以以软件产品的形式体现出来,该计算机软件产品存储在一个存储介质中,包括若干指令用以使得一台计算机设备(可以是个人计算机,服务器,或者网络设备等)执行本申请各个实施例所述方法的全部或部分步骤。而前述的存储介质包括:U盘、移动硬盘、只读存储器(ROM,Read-Only Memory)、随机存取存储器(RAM,Random Access Memory)、磁碟或者光盘等各种可以存储程序代码的介质。In addition, the logic instructions in the above-mentioned memory 720 can be implemented in the form of a software functional unit and can be stored in a computer-readable storage medium when it is sold or used as an independent product. Based on this understanding, the technical solution of the present application can be essentially or partly embodied in the form of a software product that contributes to the prior art, and the computer software product is stored in a storage medium, including several instructions to enable a computer device (which can be a personal computer, a server, or a network device, etc.) to perform all or part of the steps of the method described in each embodiment of the present application. The aforementioned storage medium includes: various media that can store program codes, such as a USB flash drive, a mobile hard disk, a read-only memory (ROM), a random access memory (RAM), a disk or an optical disk.

另一方面,本申请实施例还提供一种计算机程序产品,计算机程序产品包括计算机程序,计算机程序可存储在非暂态计算机可读存储介质上,计算机程序被处理器执行时,计算机能够执行上述各实施例所提供的路由器web管理页面的访问方法,其步骤和原理在上述方法已详细介绍,在此不再赘述。On the other hand, an embodiment of the present application also provides a computer program product, which includes a computer program. The computer program can be stored on a non-transitory computer-readable storage medium. When the computer program is executed by a processor, the computer can execute the method for accessing the router web management page provided in the above embodiments. The steps and principles have been described in detail in the above methods and will not be repeated here.

另一方面,本申请还提供一种非暂态计算机可读存储介质,其上存储有计算机程序,该计算机程序被处理器执行时实现以执行上述各方法提供的路由器web管理页面的访问方法,其步骤和原理在上述方法已详细介绍,在此不再赘述。On the other hand, the present application also provides a non-transitory computer-readable storage medium on which a computer program is stored. When the computer program is executed by a processor, it is implemented to execute the access method of the router web management page provided by the above methods. Its steps and principles have been introduced in detail in the above methods and will not be repeated here.

非暂态计算机可读存储介质可以是处理器能够存取的任何可用介质或数据存储设备,包括但不限于磁性存储器(例如软盘、硬盘、磁带、磁光盘(MO)等)、光学存储器(例如CD、DVD、BD、HVD等)、以及半导体存储器(例如ROM、EPROM、EEPROM、非易失性存储器(NANDFLASH)、固态硬盘(SSD))等。Non-transitory computer-readable storage media can be any available media or data storage devices that can be accessed by a processor, including but not limited to magnetic storage (such as floppy disks, hard disks, magnetic tapes, magneto-optical disks (MO), etc.), optical storage (such as CDs, DVDs, BDs, HVDs, etc.), and semiconductor storage (such as ROM, EPROM, EEPROM, non-volatile memory (NANDFLASH), solid-state drives (SSDs)), etc.

以上所描述的装置实施例仅仅是示意性的,其中所述作为分离部件说明的单元可以是或者也可以不是物理上分开的,作为单元显示的部件可以是或者也可以不是物理单元,即可以位于一个地方,或者也可以分布到多个网络单元上。可以根据实际的需要选择其中的部分或者全部模块来实现本实施例方案的目的。本领域普通技术人员在不付出创造性的劳动的情况下,即可以理解并实施。The device embodiments described above are merely illustrative, wherein the units described as separate components may or may not be physically separated, and the components displayed as units may or may not be physical units, that is, they may be located in one place, or they may be distributed on multiple network units. Some or all of the modules may be selected according to actual needs to achieve the purpose of the scheme of this embodiment. Ordinary technicians in this field can understand and implement it without paying creative labor.

通过以上的实施方式的描述,本领域的技术人员可以清楚地了解到各实施方式可借助软件加必需的通用硬件平台的方式来实现,当然也可以通过硬件。基于这样的理解,上述技术方案本质上或者说对现有技术做出贡献的部分可以以软件产品的形式体现出来,该计算机软件产品可以存储在计算机可读存储介质中,如ROM/RAM、磁碟、光盘等,包括若干指令用以使得一台计算机设备(可以是个人计算机,服务器,或者网络设备等)执行各个实施例或者实施例的某些部分所述的方法。Through the description of the above implementation methods, those skilled in the art can clearly understand that each implementation method can be implemented by means of software plus a necessary general hardware platform, and of course, it can also be implemented by hardware. Based on this understanding, the above technical solution is essentially or the part that contributes to the prior art can be embodied in the form of a software product, and the computer software product can be stored in a computer-readable storage medium, such as ROM/RAM, a disk, an optical disk, etc., including a number of instructions for a computer device (which can be a personal computer, a server, or a network device, etc.) to execute the methods described in each embodiment or some parts of the embodiments.

最后应说明的是:以上实施例仅用以说明本申请的技术方案,而非对其限制;尽管参照前述实施例对本申请进行了详细的说明,本领域的普通技术人员应当理解:其依然可以对前述各实施例所记载的技术方案进行修改,或者对其中部分技术特征进行等同替换;而这些修改或者替换,并不使相应技术方案的本质脱离本申请各实施例技术方案的精神和范围。Finally, it should be noted that the above embodiments are only used to illustrate the technical solutions of the present application, rather than to limit it. Although the present application has been described in detail with reference to the aforementioned embodiments, those skilled in the art should understand that they can still modify the technical solutions described in the aforementioned embodiments, or make equivalent replacements for some of the technical features therein. However, these modifications or replacements do not deviate the essence of the corresponding technical solutions from the spirit and scope of the technical solutions of the embodiments of the present application.

Claims (11)

1. An access method of a router web management page is characterized by being applied to a router side and comprising the following steps:
Under the condition that the router is connected with an external network, receiving a password-free login instruction which is sent by a second user terminal and accesses to a web management page of the router;
when the second user terminal does not exist in the access-free white list, sending a network request to a cloud platform; the network request is used for driving the cloud platform to send login auditing information to a first user terminal serving as a router side administrator;
Receiving reply information fed back by the first user terminal based on the login audit information through the cloud platform; wherein the reply message includes a rejection, a single agreement, or multiple agreements;
When the reply message is refused, the current secret-free access of the second user terminal is not allowed; when the reply message is single agreement, allowing the second user terminal to access the second user terminal without secret access, but not adding the second user terminal to the access-free white list; and when the reply message is a plurality of agreements, allowing the current access-free access of the second user terminal, and adding the second user terminal to the access-free white list.
2. The method for accessing a router web management page according to claim 1, wherein the access-free whitelist is a MAC address whitelist; after receiving the password of the password-free login of the access router web management page sent by the second user terminal, the method comprises the following steps:
the MAC address of the second user terminal is obtained through resolving the password-free login instruction;
comparing the MAC address of the second user terminal with the MAC address white list;
And when the MAC address of the second user terminal is not matched with the MAC address white list, judging that the second user terminal does not exist in the access-free white list.
3. The method for accessing a router web management page according to claim 2, further comprising:
Receiving a password-free login instruction of an access router web management page sent by a third user terminal;
the MAC address of the third user terminal is obtained through resolving the password-free login instruction;
Comparing the MAC address of the third user terminal with the MAC address white list;
When the MAC address of the second user terminal is matched with the MAC address white list, judging that the second user terminal does not exist in the access-free white list;
and allowing the password-free access of the third user terminal.
4. The method for accessing a router web management page according to claim 1, wherein the allowing the present privacy-free access of the second user terminal comprises:
Judging the equipment type of the second user terminal; the equipment type comprises a computer end and a mobile end;
adaptively adjusting the URL path of the page access according to the equipment type;
and adaptively adjusting a front-end template of the page access according to the equipment type.
5. The method for accessing a router web management page according to any one of claims 1-4,
The router side and the cloud platform establish IOT long connection through the Internet; and/or the router side and any user terminal communicate through a local short-range protocol.
6. An access method of a router web management page, which is applied to a first user terminal as a router side manager, comprising:
Receiving login auditing information sent by a cloud platform under the condition that a router is connected with an external network; wherein the login audit information is generated by the cloud platform in response to a network request; the network request is generated by the router side in response to a password-free login instruction sent by the second user terminal; the second user terminal does not exist in the access-free white list of the router side;
responding to the login auditing information, and feeding back reply information to the cloud platform; wherein the reply message includes a rejection, a single agreement, or multiple agreements;
When the reply message is refused, the router side does not allow the second user terminal to access the web management page of the router without secret information; when the reply message is single agreement, the router side allows the second user terminal to access the web management page of the router without secret access, but does not add the second user terminal to the secret access-free white list; and when the reply message is agreed for a plurality of times, the router side allows the current access-free access of the second user terminal, and adds the second user terminal to the access-free white list.
7. The access method of the router web management page is characterized by being applied to a second user terminal and comprising the following steps of:
Sending a password-free login instruction for accessing a web management page of a router to a router side under the condition that the router is connected with an external network; the password-free login instruction is used for driving the router to send a network request to the cloud platform; the network request is used for driving the cloud platform to send login auditing information to a first user terminal serving as a router side administrator; the second user terminal does not exist in the access-free white list of the router side;
receiving a password-free login result fed back by the router side; wherein the password-free login result comprises refusal, single agreement or multiple agreements;
When the password-free login result is refused, the password-free login fails; when the password-free login result is single agreement, the password-free login is successful; and when the password-free login result is a plurality of agreements, the password-free login is successful, and the password-free login result is added to the password-free access white list.
8. The access method of the router web management page is characterized by being applied to a cloud platform and comprising the following steps:
Receiving a network request sent by a router side under the condition that the router is connected with an external network; wherein the network request is generated by the router side in response to a password-free login instruction sent by a second user terminal; the second user terminal does not exist in the access-free white list of the router side;
Responding to the network request, generating login audit information, and sending the login audit information to a first user terminal serving as a router side administrator;
receiving feedback reply information of the first user terminal; wherein the reply message includes a rejection, a single agreement, or multiple agreements;
forwarding the reply information to the router side so that the router side generates a password-free login result;
When the reply message is refused, the router side does not allow the second user terminal to access the web management page of the router without secret information; when the reply message is single agreement, the router side allows the second user terminal to access the web management page of the router without secret access, but does not add the second user terminal to the secret access-free white list; and when the reply message is agreed for a plurality of times, the router side adds the second user terminal to the access-free white list.
9. An electronic device comprising a processor and a memory storing a computer program, characterized in that the processor implements the router web management page access method of any of claims 1 to 8 when executing the computer program.
10. A non-transitory computer readable storage medium having stored thereon a computer program, which when executed by a processor implements a method of accessing a router web management page according to any of claims 1 to 8.
11. A computer program product comprising a computer program which when executed by a processor implements the method of accessing a router web management page according to any one of claims 1 to 8.
CN202410301212.7A 2024-03-15 2024-03-15 Router web management page access method, device and storage medium Pending CN118802438A (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN202410301212.7A CN118802438A (en) 2024-03-15 2024-03-15 Router web management page access method, device and storage medium

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN202410301212.7A CN118802438A (en) 2024-03-15 2024-03-15 Router web management page access method, device and storage medium

Publications (1)

Publication Number Publication Date
CN118802438A true CN118802438A (en) 2024-10-18

Family

ID=93034842

Family Applications (1)

Application Number Title Priority Date Filing Date
CN202410301212.7A Pending CN118802438A (en) 2024-03-15 2024-03-15 Router web management page access method, device and storage medium

Country Status (1)

Country Link
CN (1) CN118802438A (en)

Cited By (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN119561792A (en) * 2025-01-24 2025-03-04 新华三信息技术有限公司 Network access method, device, electronic device and storage medium

Cited By (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN119561792A (en) * 2025-01-24 2025-03-04 新华三信息技术有限公司 Network access method, device, electronic device and storage medium

Similar Documents

Publication Publication Date Title
CN108616490B (en) Network access control method, device and system
US11283805B2 (en) Cloud device account configuration method, apparatus and system, and data processing method
US9154955B1 (en) Authenticated delivery of premium communication services to trusted devices over an untrusted network
US10855512B2 (en) Dynamic account updating
US8086678B2 (en) Device centric controls for a device controlled through a web portal
CN108901022A (en) A kind of micro services universal retrieval method and gateway
JP2017506034A (en) Method, device and system for dynamic network access management
US20120240184A1 (en) System and method for on the fly protocol conversion in obtaining policy enforcement information
CN113341798A (en) Method, system, device, equipment and storage medium for remotely accessing application
US10757089B1 (en) Mobile phone client application authentication through media access gateway (MAG)
CN110311929A (en) An access control method, device, electronic equipment, and storage medium
US9219646B2 (en) Managing actions of a network device
CN111786969A (en) Single sign-on method, device and system
US10075447B2 (en) Secure distributed device-to-device network
CN105871881A (en) Portal authentication method based on Openwrt router
CN106254319B (en) Light application login control method and device
US9154949B1 (en) Authenticated delivery of premium communication services to untrusted devices over an untrusted network
CN106330880A (en) Address book management method and home gateway
CN118802438A (en) Router web management page access method, device and storage medium
CN116760579A (en) Data transmission methods, devices, storage media and systems based on industrial Internet
US10657093B2 (en) Managing actions of a network device based on policy settings corresponding to a removable wireless communication device
CN115664761A (en) Single sign-on method and device, electronic equipment and readable storage medium
CN112073366B (en) Data processing method for railway financial system and data center
CN113518091A (en) Multi-user authentication method, device, system and storage medium
CN118842617A (en) Cross-device login method, device and storage medium

Legal Events

Date Code Title Description
PB01 Publication
PB01 Publication
SE01 Entry into force of request for substantive examination
SE01 Entry into force of request for substantive examination
点击 这是indexloc提供的php浏览器服务,不要输入任何密码和下载