Credential information processing method and apparatus for network connection, and application (APP)

Patent metadata

Field	Value
Publication number	US-11751052-B2
Application number	US-201816482475-A
Country	US
Kind code	B2
Filing date	Feb 27, 2018
Priority date	Mar 1, 2017
Publication date	Sep 5, 2023
Grant date	Sep 5, 2023

Abstract

Disclosed in the present invention are a credential information processing method and apparatus for network connection, and an application (APP). The method comprises: in response to an instruction for applying for a network credential for a second terminal, a first terminal sends a first credential downloading request to a server; the first terminal receives first credential information sent by the server; and the second terminal receives the first credential information sent directly by the first terminal from a system memory of the first terminal and a network identifier of a wireless network to be connected, the second terminal stores the first credential information directly into a secure storage region of the second terminal from a system memory of the second terminal, and the second terminal connects a wireless network corresponding to the network identifier by using the first credential information in the secure storage region.

First claim

The invention claimed is:

1. A credential information processing method for network connection, comprising:
sending, by a first terminal, a first credential download request to a server in response to an instruction to apply a networking credential for a second terminal, wherein the first credential download request carries user identity information of the first terminal, and the user identity information is used by the server to perform user identity verification on the first terminal;
receiving, by the first terminal, first credential information sent from the server in a case that the user identity verification is successful;
receiving, by the second terminal, the first credential information and a network identifier of a wireless network to be connected directly sent by the first terminal from a system memory of the first terminal, wherein no processing is performed on the first credential information before the first credential information is sent to the second terminal;
storing, by the second terminal, the received first credential information, directly to a secure storage area of the second terminal from a system memory of the second terminal; and
connecting, by the second terminal, to the wireless network having the network identifier by using the first credential information in the secure storage area.

2. The method according to claim 1 , wherein the first terminal sends the first credential information and the network identifier to the second terminal by adopting a technology of point-to-point wireless communication without networking, and the second terminal receives the first credential information and the network identifier sent by the first terminal by adopting a technology of point-to-point wireless communication without networking.

3. The method according to claim 1 , wherein the first credential information comprises certificate data,
and wherein before the storing the first credential information directly to the secure storage area of the second terminal from the system memory of the second terminal, the method further comprises:
naming the certificate data based on a certificate identifier set for the certificate data by the second terminal,
and wherein the storing the first credential information in the secure storage area of the second terminal comprises:
storing the named certificate data in the secure storage area of the second terminal.

4. The method according to claim 3 , wherein the naming the certificate data based on the certificate identifier set for the certificate data by the second terminal comprises:
naming, by the second terminal, each piece of data comprised in the certificate data by using the certificate identifier, wherein the data comprised in the certificate data has a same certificate identifier, and the data comprises user certificate data, issuer certificate data and a user private key.

5. The method according to claim 3 , wherein the connecting, by the second terminal, to the wireless network having the network identifier by using the first credential information comprises:
searching, by the second terminal, the secure storage area for the certificate data for connecting to the wireless network, in response to an automatic connection instruction, and connecting, by the second terminal, to the wireless network by using the found certificate data; or
enumerating, by the second terminal, certificate identifiers of all certificate data in the secure storage area in response to a manual connection instruction, reading, by the second terminal, corresponding certificate data based on a manually selected certificate identifier, and connecting, by the second terminal, to the wireless network by using the read certificate data.

6. The method according to claim 5 , wherein in a case that the certificate data is WAPI certificate data, the searching, by the second terminal, the secure storage area for the certificate data for connecting to the wireless network comprising:
reading, by the second terminal, WAPI certificate data in the secure storage area;
associating, by the second terminal, with a wireless access point AP, receiving, by the second terminal, an authentication activation packet sent by the wireless access point AP, and obtaining, by the second terminal, an identity field of a local authentication service unit ASU in the authentication activation packet;
obtaining, by the second terminal, identity information of the WAPI certificate data by traversing the read WAPI certificate data; and
determining, by the second terminal, that the WAPI certificate data having the identity information is the certificate data for connecting to the wireless network in a case that the identity information is determined to match the identity field of the local authentication service unit ASU.

7. A credential information processing method for network connection, applied in a first terminal, comprising:
sending a first credential download request to a server in response to an instruction to apply a networking credential for a second terminal; receiving first credential information sent by the server in a case that user identity verification is successful; and sending the first credential information and a network identifier of a wireless network to be connected directly to the second terminal from a system memory of the first terminal, wherein no processing is performed on the first credential information before the first credential information is sent to the second terminal,
wherein the first credential download request carries user identity information of the first terminal, and the user identity information is used by the server to perform user identity verification on the first terminal; and the first credential information is stored in a secure storage area of the second terminal and is used by the second terminal to connect to the wireless network having the network identifier.

8. The credential information processing method for network connection according to claim 7 , wherein the sending the first credential information and the network identifier to the second terminal comprises:
sending the first credential information and the network identifier to the second terminal by adopting a technology of point-to-point wireless communication without networking.

9. The credential information processing method for network connection according to claim 7 , further comprising:
storing the second credential information directly from a system memory of the first terminal to a secure storage area of the first terminal; and
connecting to the wireless network by using the second credential information stored in the secure storage area.

10. The credential information processing method for network connection according to claim 9 , wherein the second credential information comprises certificate data, and the method further comprises:
naming certificate data based on a certificate identifier set for the certificate data before the second credential information is stored directly from the system memory of the first terminal to the secure storage area of the first terminal, and directly storing the named certificate data from the system memory of the first terminal to the secure storage area of the first terminal.

11. The credential information processing method for network connection according to claim 10 , wherein the naming certificate data comprises: naming each piece of data comprised in the certificate data by using the certificate identifier, wherein the data comprised in the certificate data has a same certificate identifier; and the data comprises user certificate data, issuer certificate data and a user private key.

12. The credential informa

Assignees

• China Iwncomm Co Ltd

Inventors

• Tian Yucun
• Zhang Wei
• Tong Weigang
• Yan Xiang

Classifications

• H04W12/069 Primary

  using certificates or pre-shared keys · CPC title

• H04W12/068 Primary

  using credential vaults, e.g. password manager applications or one time password [OTP] applications · CPC title

• H04W12/69

  Identity-dependent · CPC title

• H04W48/08

  Access restriction or access information delivery, e.g. discovery data delivery (signalling during connection H04W76/00) · CPC title

• H04W12/06 Primary

  Authentication · CPC title