WO2019076041A1

WO2019076041A1 - Method for paired connection of access devices, and access devices

Info

Publication number: WO2019076041A1
Application number: PCT/CN2018/086305
Authority: WO
Inventors: 谭细金
Original assignee: 华为技术有限公司
Priority date: 2017-10-18
Filing date: 2018-05-10
Publication date: 2019-04-25
Also published as: CN109688580A

Abstract

Embodiments of the present application provide a method for the paired connection of access devices, and access devices. The method comprises: a first access device receives an authentication request sent by a second access device after detecting the first access device, the authentication request comprising identifier information of the second access device and authentication information; authenticate the second access device according to the authentication information; send an authentication response to the second access device after the authentication succeeds; receive a network access request sent by the second access device; send an access response to the second access device. The embodiments of the present application implement the completion of an entire authentication and network access process by means of information interaction between a first access device and a second access device, without involving human participation, improve the access efficiency and user experience, and also improve the security of a network construction process.

Description

Access device pairing connection method and access device

This application claims the priority of the Chinese Patent Application entitled "Access Device Pairing Connection Method and Access Device" submitted by the Chinese Patent Office on October 18, 2017, with the application number of 201710969501.4, the entire contents of which are incorporated by reference. In this application.

Technical field

The present application relates to the field of wireless communications, and in particular, to an access device pairing connection method and an access device.

Background technique

Wireless Fidelity (WIFI) technology is a wireless transmission technology. Due to the mobility and convenience of its access, it is widely used in network access in homes, offices and other places. With the increase of mobile devices and the diversification of Internet services, users are increasingly demanding WIFI bandwidth and speed. Generally, the user deploys an access device in the room, and the access device provides a WIFI signal, and the user terminal can connect to the network by connecting the access device. However, there is a loss in the transmission of the WIFI signal, for example, a 25 cc (cm) thick brick wall is attenuated by about 25 db (representing the relative ratio of power), the space is transmitted by 15 m (m), and the attenuation is about 70 db. It can be seen that in a large space, if only a single access device can not completely cover the WIFI signal.

In order to achieve better coverage of the WIFI signal, multiple access device networking is generally used to achieve full rate coverage of a large space. The networking between the access device and the access device first requires effective authentication between the access devices, that is, pairing is achieved. In the prior art, the identification buttons of the two access devices are generally pressed by the user within a preset time. Complete valid authentication, or enter an identification code on the access device to complete valid authentication.

It can be seen that in the prior art, in the manner in which the access device completes the effective authentication, the user operation is cumbersome and efficient.

Summary of the invention

The present invention provides an access device pairing connection method and an access device, which are used to solve the problem that the user operation is cumbersome and efficient under the method in which the access device performs effective authentication in the prior art.

In a first aspect, the application provides a method for pairing access devices, including:

The first access device receives an authentication request that is sent by the second access device after detecting the first access device, where the authentication request includes: identifier information of the second access device, and authentication information;

The first access device performs authentication on the second access device according to the authentication information;

After the authentication succeeds, the first access device sends an authentication response to the second access device according to the identifier information of the second access device;

Receiving, by the first access device, a network access request sent by the second access device;

The first access device sends an access response to the second access device.

In a possible design manner, the authentication request further includes: a uniqueness verification parameter;

The method further includes:

The first access device verifies the uniqueness of the authentication request according to the uniqueness parameter.

In a possible design manner, the uniqueness verification parameter includes: a random number, and/or a timestamp.

In a possible design manner, the authentication information includes: an agreed content after the preset private key is encrypted;

The first access device performs authentication on the second access device according to the authentication information, including:

The first access device decrypts the authentication information by using a preset public key, and obtains the decrypted information;

The first access device determines whether the decrypted information is the same as the agreed content.

In a possible design manner, the agreed content includes: information other than the authentication information in the authentication request.

In a second aspect, the application provides a method for connecting and connecting an access device, including:

After detecting the second access device, the first access device sends an authentication request to the second access device, where the authentication request includes: identifier information of the first access device, and authentication information;

The first access device receives an authentication response that is sent by the second access device according to the identifier information of the first access device, where the authentication response is used to indicate that the second access device is configured according to the Successful authentication of authentication information;

The first access device sends a network access request to the second access device;

The first access device receives an access response sent by the second access device, and completes a network connection according to the access response.

In a possible design manner, the authentication request further includes: a uniqueness verification parameter.

In a possible design manner, the authentication information includes: an agreed content after the preset private key is encrypted.

In a third aspect, the present application provides an access device, the device comprising means or means for performing the methods of the first aspect and the various implementations of the first aspect described above.

In a fourth aspect, the present application provides an access device, the device comprising means or means for performing the methods of the second aspect and the various implementations of the second aspect described above.

In a fifth aspect, the application provides an access device, the device comprising a processor and a memory, the memory is for storing a program, and the processor calls a program stored in the memory to perform the method provided by the first aspect of the application.

In a sixth aspect, the application provides an access device, the device comprising a processor and a memory, the memory is for storing a program, and the processor calls a program stored in the memory to perform the method provided by the second aspect of the application.

In a seventh aspect, the application provides an access device comprising at least one processing element (or chip) for performing the method of the above first aspect.

In an eighth aspect, the application provides an access device comprising at least one processing element (or chip) for performing the method of the above second aspect.

In a ninth aspect, the present application provides a computer storage medium comprising a program for performing the method of the above first aspect.

In a tenth aspect, the application provides a computer storage medium comprising a program for performing the method of the above second aspect.

In the access device pairing connection method and the access device provided by the present application, the first access device receives an authentication request sent by the second access device after detecting the first access device, where the authentication request includes: The first access device authenticates the second access device according to the authentication information, and the first access device sends the second access device to the second access device after the authentication succeeds. After the authentication succeeds, the first access device sends an authentication response to the second access device after the authentication succeeds. After the authentication is completed, the access device can initiate the access to access the second access device to the network. The entire authentication and access network process is completed by the first access device and the second access device, and no human intervention is required, which improves the access efficiency and user experience, and also improves the security of the networking process.

DRAWINGS

1 is a schematic diagram of a communication network architecture;

2 is a schematic flowchart of a method for pairing and connecting access devices according to an embodiment of the present disclosure;

FIG. 3 is a schematic structural diagram of an authentication request in an access device pairing connection method according to an embodiment of the present disclosure;

FIG. 4 is a schematic structural diagram of an authentication request in an access device pairing connection method according to another embodiment of the present disclosure;

FIG. 5 is a schematic structural diagram of an authentication request in an access device pairing connection method according to an embodiment of the present disclosure;

FIG. 6 is a schematic structural diagram of an access device according to an embodiment of the present disclosure;

FIG. 7 is a schematic structural diagram of an access device according to another embodiment of the present disclosure;

FIG. 8 is a schematic structural diagram of an access device according to another embodiment of the present disclosure.

Detailed ways

FIG. 1 is a schematic diagram of a communication network architecture. As shown in FIG. 1 , the communication network includes a plurality of access devices 01, and the plurality of access devices 01 include a primary access device, and the primary access device can be connected to a network provided by an operator, and other access devices. The access network can be accessed by accessing the primary access device or other access devices that have access to the network, that is, the multiple access devices 01 are networked.

The foregoing access device may be referred to as an access point (AP).

Each access device 01 can access one or more terminals 02 to provide a network for the terminal 02.

Multiple access devices 01 can be deployed in various locations in a large space, or deployed in various rooms of an office building, various rooms in a family home, etc., to achieve more comprehensive network coverage.

In the present application, the terminal device includes, but is not limited to, a mobile station (MS, Mobile Station), a mobile terminal (Mobile Terminal), a mobile telephone (Mobile Telephone), a mobile phone (handset), and a portable device. The terminal can communicate with one or more core networks via a Radio Access Network (RAN). For example, the terminal can be a mobile phone (or “cellular” phone), a computer with wireless communication function, etc., the terminal. It can also be a portable, pocket, handheld, computer built-in or in-vehicle mobile device or device.

In the prior art, the networking process requires other access devices to be paired with the primary access device, that is, the validity of the verification. In this process, the user needs to input information or press a button to complete, that is, the operation must be performed manually, and the process is cumbersome. And the security is not high. In response to these problems, the present application proposes a new access device pairing connection method.

2 is a schematic flowchart of a method for pairing and connecting an access device according to an embodiment of the present disclosure. In this embodiment, the first access device is a primary access device or an access device that has accessed the network through other access devices. The two access devices need to access the network by accessing the first access device. Here, the first access device and the second access device may be the same physical device.

As shown in Figure 2, the method includes:

S201. The first access device receives an authentication request sent by the second access device after detecting the first access device, where the authentication request includes: identifier information of the second access device, and authentication information.

The identifier information of the second access device is used to identify the second access device, which may be a media access control (MAC) address of the second access device, a serial number of the second access device, and the like. No restrictions. So that the first access device identifies the second access device and obtains relevant address information for subsequent interaction.

The authentication information may be some information pre-approved by the first access device and the second access device, or some information configured before the factory, for the opposite device to verify its validity, and the first access device needs to be After confirming that the second access device is valid and trusted, the subsequent access process will be performed.

In the specific implementation process, the first access device may perform authentication on the second access device, or both parties may perform authentication, that is, the second access device also receives the authentication sent by the first access device. Requesting to authenticate the first device, both parties pass the authentication and then enter the subsequent access process.

It should be noted that the second access device may detect the signals of other access devices within the coverage of the signal, and after detecting the first access device, automatically send an authentication request without human triggering.

S202. The first access device authenticates the second access device according to the foregoing authentication information.

S203. After the authentication succeeds, the first access device sends an authentication response to the second access device according to the identifier information of the second device.

S204. The second access device sends a network access request to the first access device.

S205. The first access device sends an access response to the second access device.

Optionally, the first access device sends an access response to the second access device according to the identifier information of the second device.

In this embodiment, after the first access device authenticates the second access device, the validity of the second access device is confirmed, and the authentication response is sent to the second access device. After that, the two parties can enter the access process. For example, the access process can use the Wi-Fi protected setup (WPS) authentication process to complete the authentication to access. This application does not limit the application. Specifically, the first access device and the second access device securely acquire an account through key exchange and complete network access.

After the second access device completes the access, it can connect to the network to provide network services for the terminals in the coverage.

In this embodiment, the first access device receives an authentication request sent by the second access device after detecting the first access device, where the authentication request includes: identifier information of the second access device, and authentication information, The first access device authenticates the second access device according to the foregoing authentication information, and the first access device sends an authentication response to the second access device after the authentication succeeds, and the first access device is authenticated. After the success, the authentication response is sent to the second access device. After the authentication is completed, the access may be initiated to access the second access device to the network. The entire authentication and access network process is completed by the first access device and the second access device, and no human intervention is required, which improves the access efficiency and user experience, and also improves the security of the networking process.

Optionally, the foregoing authentication request may further include: a uniqueness verification parameter. Correspondingly, the above method may further comprise: verifying the uniqueness of the foregoing authentication request according to the uniqueness parameter.

The interaction between the first access device and the second access device is a plaintext interaction before the data encryption key is officially obtained, so that the third party can easily forge the first access device and the second access device by using packet capture. Inter-communication packets, in order to avoid attacks, can carry unique authentication parameters in the message. The uniqueness verification parameters carried in each authentication request are different. If the first access device receives the same uniqueness verification parameter, the second access device may be denied access, or attack identification may be performed to determine the authentication. Whether the request is attacked.

Optionally, the above-mentioned uniqueness verification parameter may include: a random number, and/or a timestamp.

Random numbers and timestamps are different at any time. Embedding random numbers and/or timestamps in authentication requests ensures the uniqueness of each transmission.

On the basis of the foregoing embodiment, optionally, the authentication information may include: the preset content encrypted by the preset private key.

Correspondingly, the first access device performs the authentication on the second access device according to the foregoing authentication information, where the first access device decrypts the authentication information by using a preset public key, and obtains the decrypted information. Then, the first access device determines whether the decrypted information is the same as the agreed content.

It should be noted that the above public key and private key are a pair of keys, one for encryption and the other for decryption. In this embodiment, the private key is used for encryption, and only the corresponding public key can decrypt the content. If the decrypted content is the same as the pre-agreed content, the first access device determines that the second access device is valid and can access. .

Optionally, the content of the agreement includes: information other than the authentication information in the authentication request. That is, in the authentication request, the information statistics other than the authentication information may be encrypted with the private key and carried in the authentication request. When the first access device decrypts the authentication information by using the preset public key, the information is compared and decrypted. If the information is consistent with other information, if the authentication is successful, the second access device is determined to be valid and can be accessed. If the authentication is inconsistent, the authentication fails, and the second access device is not allowed to access.

FIG. 3 is a schematic structural diagram of an authentication request in an access device pairing connection method according to an embodiment of the present disclosure. FIG. 4 is a schematic structural diagram of an authentication request in an access device pairing connection method according to another embodiment of the present disclosure.

Optionally, the authentication request may include the uniqueness verification parameter and the authentication information. After receiving the authentication request, the first access device authenticates the authentication information and determines the uniqueness according to the uniqueness verification parameter. The second access device is allowed to access the network when both are met.

As shown in FIG. 3, the authentication request may include: identifier information of the second access device, uniqueness verification parameters, custom text, and authentication information. The custom text is a reserved space and can be expanded in the future. This application is not limited.

The authentication information includes the “identity information of the second access device + uniqueness verification parameter + custom text” after the preset private key is encrypted. In order to save resources, a hash algorithm may be used to calculate a hash value of "identity information of the second access device + uniqueness verification parameter + custom text", and the authentication information includes "second" encrypted by the preset private key. The hash value of the identification information of the access device + uniqueness verification parameter + custom text.

4 is an example in which the identifier information of the second access device is the MAC address of the second access device, and the uniqueness verification parameter is a timestamp. The authentication information may include the “MAC address of the second access device + time stamp + custom text” after the preset private key is encrypted, or the authentication information may include the “second access device” after the preset private key is encrypted. MAC address + time stamp + custom text "hash value, this application is not limited.

FIG. 5 is a schematic structural diagram of an authentication request in an access device pairing connection method according to an embodiment of the present disclosure. Corresponding to the foregoing embodiment, the first access device may also serve as an accessing party. It should be noted that the second access device, like the first access device, can be the access party or the requesting access party.

As shown in FIG. 5, the method includes:

S501. After detecting the second access device, the first access device sends an authentication request to the second access device, where the authentication request includes: identifier information of the first access device, and authentication information.

The identifier of the first access device may be the MAC address of the first access device, the serial number of the first access device, and the like, which are not limited herein.

After detecting the second access device in the signal coverage, the first access device may automatically send an authentication request to the second access device, without manual triggering operation.

S502. The first access device receives an authentication response that is sent by the second access device according to the identifier information of the first access device. The authentication response is used to indicate that the second access device successfully authenticates according to the authentication information.

S503. The first access device sends a network access request to the second access device.

S504. The first access device receives an access response sent by the second access device, and completes the network connection according to the access response.

Further, after the second access device authenticates the first access device, the validity of the first access device is confirmed, and the authentication response is sent to the first access device. Then, the two parties can enter the access process. For example, the access process can use the WPS authentication process to complete the authentication to access. This application does not limit the application. Specifically, the first access device and the second access device securely acquire an account through key exchange and complete network access.

In this embodiment, after detecting the second access device, the first access device sends an authentication request to the second access device, where the authentication request includes: identifier information of the first access device, and authentication information, After the second access device successfully authenticates, the first access device sends an authentication response to the first access device, and then the first access device sends a network access request to the second access device, and receives the connection sent by the second access device. After the response is received, the network connection is completed according to the access response. The entire authentication and access network process is completed by the interaction information between the first access device and the second access device, and no human intervention is required, thereby improving access efficiency and user experience.

Similar to the foregoing embodiment, the authentication request may further include: a uniqueness verification parameter. The uniqueness verification parameter can be a random number, and/or a timestamp.

After receiving the authentication request, the second access device further verifies the uniqueness of the foregoing authentication request according to the uniqueness parameter. The uniqueness verification parameters carried in each authentication request are different. If the second access device receives the same uniqueness verification parameter, the first access device may be denied access, or attack identification may be performed to determine the authentication. Whether the request is attacked.

Optionally, the authentication information includes: an agreed content that is encrypted by the preset private key. The agreement content includes: information other than the authentication information in the authentication request. See Figure 3 and Figure 4.

The specific embodiment of the present embodiment is similar to the embodiment shown in FIG. 2 to FIG. 4, and the foregoing embodiments may be referred to, and details are not described herein again.

FIG. 6 is a schematic structural diagram of an access device according to an embodiment of the present disclosure. As shown in FIG. 6, the device includes: a receiving module 601, an authentication module 602, and a sending module 603, where:

The receiving module 601 is configured to receive an authentication request that is sent by the second access device after detecting the first access device, where the authentication request includes: identifier information of the second access device, and authentication information. .

The authentication module 602 is configured to perform authentication on the second access device according to the authentication information.

The sending module 603 is configured to send an authentication response to the second access device according to the identifier information of the second access device after the authentication succeeds.

Further, the receiving module 601 is further configured to receive a network access request sent by the second access device. The sending module 603 is further configured to send an access response to the second access device.

In a possible implementation manner, the authentication request further includes: a uniqueness verification parameter. Correspondingly, the authentication module 602 is further configured to verify the uniqueness of the authentication request according to the uniqueness parameter.

Optionally, the uniqueness verification parameter includes: a random number, and/or a timestamp.

In another possible implementation manner, the authentication information includes: an agreed content that is encrypted by a preset private key.

Correspondingly, the authentication module 602 is specifically configured to decrypt the authentication information by using a preset public key to obtain the decrypted information, and determine whether the decrypted information is identical to the agreed content.

Optionally, the agreed content includes: information other than the authentication information in the authentication request.

FIG. 7 is a schematic structural diagram of an access device according to another embodiment of the present disclosure. As shown in FIG. 7, the device includes: a sending module 701 and a receiving module 702, where:

The sending module 701 is configured to send an authentication request to the second access device after detecting the second access device, where the authentication request includes: identifier information of the first access device, and authentication information.

The receiving module 702 is configured to receive an authentication response that is sent by the second access device according to the identifier information of the first access device, where the authentication response is used to indicate that the second access device is configured according to the authentication information. The authentication was successful.

The sending module 701 is further configured to send a network access request to the second access device.

The receiving module 702 is further configured to receive an access response sent by the second access device, and complete a network connection according to the access response.

Optionally, the authentication request further includes: a uniqueness verification parameter.

In a possible implementation manner, the uniqueness verification parameter includes: a random number, and/or a timestamp.

In still another implementation manner, the authentication information includes: an agreed content after the preset private key is encrypted.

The foregoing device is used to perform the foregoing method embodiments, and the implementation principle and technical effects are similar, and details are not described herein again.

It should be noted that the division of each module of the above device is only a division of a logical function, and the actual implementation may be integrated into one physical entity in whole or in part, or may be physically separated. And these modules can all be implemented by software in the form of processing component calls; or all of them can be implemented in hardware form; some modules can be realized by processing component calling software, and some modules are realized by hardware. For example, the authentication module may be a separately set processing element, or may be integrated in one of the above-mentioned devices, or may be stored in the memory of the above device in the form of program code, and processed by one of the devices. The component invokes and executes the functions of the above authentication module. The implementation of other modules is similar. In addition, all or part of these modules can be integrated or implemented independently. The processing elements described herein can be an integrated circuit that has signal processing capabilities. In the implementation process, each step of the above method or each of the above modules may be completed by an integrated logic circuit of hardware in the processor element or an instruction in a form of software.

For example, the above modules may be one or more integrated circuits configured to implement the above methods, such as one or more Application Specific Integrated Circuits (ASICs), or one or more microprocessors (Digital) Signal Processor, DSP), or one or more Field Programmable Gate Arrays (FPGAs). As another example, when one of the above modules is implemented in the form of a processing component scheduler code, the processing component can be a general purpose processor, such as a central processing unit.

(Central Processing Unit, CPU) or other processor that can call program code. As another example, these modules can be integrated and implemented in the form of a system-on-a-chip (SOC).

FIG. 8 is a schematic structural diagram of an access device according to another embodiment of the present disclosure. As shown in FIG. 8, the device includes: a memory 10 and a processor 11.

The memory 10 can be a separate physical unit and can be connected to the processor 11 via a bus. The memory 10 and the processor 11 can also be integrated together, implemented by hardware or the like.

The memory 10 is configured to store a program for implementing the above method embodiments, or the modules of the embodiments shown in FIG. 6 to FIG. 7, and the processor 11 calls the program to perform the operations of the above method embodiments.

Optionally, when part or all of the access device pairing connection method of the foregoing embodiment is implemented by software, the access device may also include only the processor. The memory for storing the program is located outside the access device, and the processor is connected to the memory through the circuit/wire for reading and executing the program stored in the memory.

The processor may be a Central Processing Unit (CPU), a Network Processor (NP) or a combination of a CPU and an NP.

The processor may further include a hardware chip. The hardware chip may be an Application-specific Integrated Circuit (ASIC), a Programmable Logic Device (PLD), or a combination thereof. The PLD may be a Complex Programmable Logic Device (CPLD), a Field-Programmable Gate Array (FPGA), a Generic Array Logic (GAL), or any combination thereof.

The memory may include a volatile memory such as a random access memory (RAM); the memory may also include a non-volatile memory such as a flash memory. A hard disk drive (HDD) or a solid state drive (SSD); the memory may also include a combination of the above types of memories.

The embodiment of the present application further provides a computer storage medium, which is stored with a computer program, which is used to perform the access device pairing connection method provided by the foregoing embodiment.

The embodiment of the present application further provides a computer program product including instructions, which when executed on a computer, causes the computer to perform the access device pairing connection method provided by the foregoing embodiment.

Those skilled in the art will appreciate that embodiments of the present application can be provided as a method, system, or computer program product. Thus, the present application can take the form of an entirely hardware embodiment, an entirely software embodiment, or an embodiment in combination of software and hardware. Moreover, the application can take the form of a computer program product embodied on one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) including computer usable program code.

The present application is described with reference to flowchart illustrations and/or block diagrams of methods, apparatus (system), and computer program products according to embodiments of the present application. It will be understood that each flow and/or block of the flowchart illustrations and/or FIG. These computer program instructions can be provided to a processor of a general purpose computer, special purpose computer, embedded processor, or other programmable data processing device to produce a machine for the execution of instructions for execution by a processor of a computer or other programmable data processing device. Means for implementing the functions specified in one or more of the flow or in a block or blocks of the flow chart.

The computer program instructions can also be stored in a computer readable memory that can direct a computer or other programmable data processing device to operate in a particular manner, such that the instructions stored in the computer readable memory produce an article of manufacture comprising the instruction device. The apparatus implements the functions specified in one or more blocks of a flow or a flow and/or block diagram of the flowchart.

These computer program instructions can also be loaded onto a computer or other programmable data processing device such that a series of operational steps are performed on a computer or other programmable device to produce computer-implemented processing for execution on a computer or other programmable device. The instructions provide steps for implementing the functions specified in one or more of the flow or in a block or blocks of a flow diagram.

Claims

An access device pairing connection method, comprising:

The first access device receives an authentication request that is sent by the second access device after detecting the first access device, where the authentication request includes: identifier information of the second access device, and authentication information;

The first access device performs authentication on the second access device according to the authentication information;

After the authentication succeeds, the first access device sends an authentication response to the second access device according to the identifier information of the second access device;

Receiving, by the first access device, a network access request sent by the second access device;

The first access device sends an access response to the second access device.
The method according to claim 1, wherein the authentication request further comprises: a uniqueness verification parameter;

The method further includes:

The first access device verifies the uniqueness of the authentication request according to the uniqueness parameter.
The method of claim 2, wherein the uniqueness verification parameter comprises: a random number, and/or a timestamp.
The method according to any one of claims 1-3, wherein the authentication information comprises: an agreed content encrypted by a preset private key;

The first access device performs authentication on the second access device according to the authentication information, including:

The first access device decrypts the authentication information by using a preset public key, and obtains the decrypted information;

The first access device determines whether the decrypted information is the same as the agreed content.
The method according to claim 4, wherein the agreed content comprises: information other than the authentication information in the authentication request.
An access device pairing connection method, comprising:

After detecting the second access device, the first access device sends an authentication request to the second access device, where the authentication request includes: identifier information of the first access device, and authentication information;

The first access device receives an authentication response that is sent by the second access device according to the identifier information of the first access device, where the authentication response is used to indicate that the second access device is configured according to the Successful authentication of authentication information;

The first access device sends a network access request to the second access device;

The first access device receives an access response sent by the second access device, and completes a network connection according to the access response.
The method according to claim 6, wherein the authentication request further comprises: a uniqueness verification parameter.
The method of claim 7, wherein the uniqueness verification parameter comprises: a random number, and/or a timestamp.
The method according to any one of claims 6-8, wherein the authentication information comprises: an agreed content encrypted by a preset private key.
The method according to claim 9, wherein the agreed content comprises: information other than the authentication information in the authentication request.
An access device, comprising:

a receiving module, configured to receive an authentication request that is sent by the second access device after detecting the first access device, where the authentication request includes: identifier information of the second access device, and authentication information;

An authentication module, configured to authenticate the second access device according to the authentication information;

a sending module, configured to send an authentication response to the second access device according to the identifier information of the second access device after the authentication succeeds;

The receiving module is further configured to receive a network access request sent by the second access device;

The sending module is further configured to send an access response to the second access device.
The access device according to claim 11, wherein the authentication request further comprises: a uniqueness verification parameter;

The authentication module is further configured to verify the uniqueness of the authentication request according to the uniqueness parameter.
The access device according to claim 12, wherein the uniqueness verification parameter comprises: a random number, and/or a timestamp.
The access device according to any one of claims 11 to 13, wherein the authentication information comprises: an agreed content after the preset private key is encrypted;

The authentication module is specifically configured to decrypt the authentication information by using a preset public key, obtain the decrypted information, and determine whether the decrypted information is the same as the agreed content.
The access device according to claim 14, wherein the agreed content comprises: information other than the authentication information in the authentication request.
An access device, comprising:

a sending module, configured to send an authentication request to the second access device after detecting the second access device, where the authentication request includes: identifier information of the first access device, and authentication information ;

a receiving module, configured to receive an authentication response that is sent by the second access device according to the identifier information of the first access device, where the authentication response is used to indicate that the second access device is configured according to the authentication Successful information authentication;

The sending module is further configured to send a network access request to the second access device;

The receiving module is further configured to receive an access response sent by the second access device, and complete a network connection according to the access response.
The access device according to claim 16, wherein the authentication request further comprises: a uniqueness verification parameter.
The access device according to claim 17, wherein the uniqueness verification parameter comprises: a random number, and/or a timestamp.
The access device according to any one of claims 16 to 18, wherein the authentication information comprises: an agreed content encrypted by a preset private key.
The access device according to claim 19, wherein the agreed content comprises: information other than the authentication information in the authentication request.