	US 12,231,888 B2
	Wireless network access method, apparatus, device, equipment and system
Xiyi Yin, Shenzhen (CN); Jun Li, Shenzhen (CN); and Boheng Liu, Shenzhen (CN)
Assigned to TENCENT TECHNOLOGY (SHENZHEN) COMPANY LIMITED, Shenzhen (CN)
Filed by TENCENT TECHNOLOGY (SHENZHEN) COMPANY LIMITED, Guangdong (CN)
Filed on Apr. 23, 2021, as Appl. No. 17/238,328.
Application 17/238,328 is a continuation of application No. PCT/CN2019/126136, filed on Dec. 18, 2019.
Claims priority of application No. 201910028708.0 (CN), filed on Jan. 11, 2019.
Prior Publication US 2021/0243603 A1, Aug. 5, 2021
Int. Cl. H04W 12/08 (2021.01); H04W 12/041 (2021.01); H04W 12/06 (2021.01); H04W 12/106 (2021.01); H04W 84/12 (2009.01)

CPC H04W 12/08 (2013.01) [H04W 12/041 (2021.01); H04W 12/06 (2013.01); H04W 12/106 (2021.01); H04W 84/12 (2013.01)]

19 Claims

1. A wireless network access method to prevent unauthorized access sharing, performed by a server, the method comprising:

receiving, by the server and from a guest terminal, a user account and identification information of a wireless access point, the identification information comprising first identification information and second identification information, wherein the first identification information is associated with a secure wireless network, and wherein the second identification information is associated with a common wireless network;

based on determining that the secure wireless network is a secure network, generating, by the server, a first dynamic key using the user account and the first identification information, and transmitting the first dynamic key to the guest terminal;

receiving, by the server and from the wireless access point, an encrypted version of a second dynamic key, wherein the second dynamic key was generated by the wireless access point based on a media access control (MAC) address of the guest terminal, the first identification information, and a first message integrity code (MIC);

verifying, by the server, whether the MAC address of the guest terminal is stored in an authorization library based on decrypting the second dynamic key and the MAC address, and generating a first authorization result according to a verification result;

transmitting, by the server and to the guest terminal through the wireless access point, the first authorization result;

transmitting, by the server, an authorization request to an authorizer terminal corresponding to the first identification information in response to the guest terminal being unauthorized by the first authorization result, wherein the authorizer terminal is a different terminal than the guest terminal;

receiving, by the server and from the authorizer terminal, an authorization response authorizing the guest terminal to access the secure wireless network;

updating, by the server, the authorization library according to a correspondence between the user account and the first identification information based on the authorization response; and

transmitting, by the server the authorization response authorizing the quest terminal to access the secure wireless network to the guest terminal.