Method and apparatus for controlling access to a server

Patent metadata

Field	Value
Publication number	US-9794261-B2
Application number	US-201414505684-A
Country	US
Kind code	B2
Filing date	Oct 3, 2014
Priority date	Mar 28, 2014
Publication date	Oct 17, 2017
Grant date	Oct 17, 2017

Abstract

A method for use in a Digital Living Network Alliance (DLNA) server, for controlling access to the DLNA server, includes: receiving an access request sent from a DLNA client to access the DLNA server; obtaining a media access control (MAC) address used by the DLNA client; detecting whether the MAC address exists in a preset blacklist; and denying access of the DLNA client, if the MAC address exists in the preset blacklist.

First claim

What is claimed is:

1. A method for use in a Digital Living Network Affiance (DLNA) server, for controlling access to the DLNA server, comprising:
receiving an access request sent from a DLNA client to access the DLNA server;
obtaining a media access control (MAC) address used by the DLNA client;
detecting whether the MAC address exists in a preset blacklist;
denying access of the DLNA client, if the MAC address exists in the preset blacklist;
searching for the MAC address in pre-stored corresponding relationships to determine whether the MAC address exists in the pre-stored corresponding relationships, if the MAC address does not exist in the preset blacklist, the pre-stored corresponding relationships including corresponding relationships between different MAC addresses and different keys; and
determining, if the MAC address exists in the pre-stored corresponding relationships, whether to authorize the accesss of the DLNA client according to a key corresponding to the MAC address in the pre-stored corresponding relationships.

2. The method according to claim 1 , wherein the determining whether to authorize the access of the DLNA client comprises:
obtaining the key corresponding to the MAC address according to the pre-stored corresponding relationships;
judging whether a key is carried in the access request sent from the DLNA client;
authorizing the access of the DLNA client, if a key is carried in the access request and the carried key matches the obtained key corresponding to the MAC address; and
denying the access of the DLNA client, if no key is carried in the access request or the carried key does not match the obtained key corresponding to the MAC address.

3. The method according to claim 1 , further comprising:
generating a key corresponding to the MAC address, if the MAC address does not exist in the pre-stored corresponding relationships;
adding the MAC address and the key corresponding to the MAC address into the pre-stored corresponding relationships; and
sending the key to the DLNA client.

4. The method according to claim 1 , further comprising:
obtaining the preset blacklist, the obtained preset blacklist including at least one of an illegal MAC address or a MAC address not having an access right to the DLNA server.

5. An apparatus for controlling access to a Digital Living Network Alliance (DLNA) server, comprising:
a processor; and
a memory for storing instructions executable by the processor;
wherein the processor is configured to:
receive an access request sent from a DLNA client to access the DLNA server;
obtain a media access control (MAC) address used by the DLNA client;
detect whether the MAC address exists in a preset blacklist; and
deny an access of the DLNA client, if the MAC address exists in the preset blacklist;
search for the MAC address in pre-stored corresponding relationships to determine whether the MAC address exists in the pre-stored corresponding relationships, if the MAC address does not exist in the preset blacklist, the pre-stored corresponding relationships including corresponding relationships between different MAC addresses and different keys; and
determine whether to authorize the access of the DLNA client according to a key corresponding to the MAC address in the pre-stored corresponding relationships, if the MAC address exists in the pre-stored corresponding relationships.

6. The apparatus according to claim 5 , wherein the processor is further configured to:
obtain the key corresponding to the MAC address according to the pre-stored corresponding relationships;
judge whether a key is carried in the access request sent from the DLNA client;
authorize the access of the DLNA client, if a key is carried in the access request and the carried key matches the obtained key corresponding to the MAC address; and
deny the access of the DLNA client, if no key is carried in the access request or the carried key does not match the obtained key corresponding to the MAC address.

7. The apparatus according to claim 5 , wherein the processor is further configured to:
generate a key corresponding to the MAC address, if the MAC address does not exist in the pre-stored corresponding relationships;
add the MAC address and the key corresponding to the MAC address into the pre-stored corresponding relationships; and
send the key to the DLNA client.

8. The apparatus according to claim 5 , wherein the processor is further configured to:
obtain the preset blacklist, the obtained preset blacklist including at least one of an illegal MAC address or a MAC address not having an access right to the DLNA server.

9. A non-transitory computer-readable storage medium having stored therein instructions that, when executed by a processor of an apparatus, cause the apparatus to perform a method for controlling access to a Digital Living Network Alliance (DLNA) server, the method comprising:
receiving an access request sent from a DLNA client to access the DLNA server;
obtaining a media access control (MAC) address used by the DLNA client;
detecting whether the MAC address exists in a preset blacklist; and
denying access of the DLNA client, if the MAC address exists in the preset blacklist;
searching for the MAC address in pre-stored corresponding relationships to determine whether the MAC address exists in the pre-stored corresponding relationships, if the MAC address does not exist in the preset blacklist, the pre-stored corresponding relationships including corresponding relationships between different MAC addresses and different keys; and
determining, if the MAC address exists in the pre-stored corresponding relationships, whether to authorize the access of the DLNA client according to a key corresponding to the MAC address in the pre-stored corresponding relationship.

Assignees

• Xiaomi Inc

Inventors

• Liu Tiejun
• Li Zheng
• Chen Xianlin
• Cheng Liang

Classifications

• H04L61/103

  across network layers, e.g. resolution of network layer into physical layer addresses or address resolution protocol [ARP] · CPC title

• H04L63/101 Primary

  Access control lists [ACL] · CPC title

• H04L61/6022

  Electricity · mapped topic

• H04L2101/622

  Layer-2 addresses, e.g. medium access control [MAC] addresses · CPC title