Abstract:
The present disclosure discloses an Internet access authentication method and client, and a computer storage medium. The Internet access authentication method includes establishing a network connection to a subnetwork; displaying, in a browser, a login page specified by a wireless access point, a network application icon used for Internet access being displayed on the login page; receiving an operation on the network application icon, and authenticating first data by sending the first data to a network server, the first data comprising: a gateway address, a wireless access point address, and a device address; and making a network connection when authentication on the first data succeeds.

Description:
RELATED APPLICATION 
       [0001]    This patent application is a continuation application of PCT Application No. PCT/CN2016/082459 filed on May 18, 2016, which claims priority to Chinese Patent Application No. 201510493925.9, filed by Tencent Technology (Shenzhen) Company Limited on Aug. 12, 2015, and entitled “INTERNET ACCESS AUTHENTICATION METHOD AND CLIENT.” The two applications are both incorporated by reference in the entirety. 
     
    
     FIELD OF THE TECHNOLOGY 
       [0002]    The present disclosure relates to network authentication technologies, and in particular, to an Internet access authentication method and client, and a computer storage medium. 
       BACKGROUND OF THE DISCLOSURE 
       [0003]    With the fast development of Internet technologies, various local area networks such as a network in a company, a network on a bus, and a network in a shop are widely used. 
         [0004]    However, in many authentication processes, the phone number of the user needs to be obtained. It may be time-consuming to enter the phone number. User privacy may be impaired, resulting in that the user receiving undesired messages. In addition, the user often needs to wait for the short message service (SMS) password, resulting in the user not being able to access the Internet timely. Further, the user may need to actively obtain the password by inquiry, and manually enter the password, which is inconvenient. In addition, an application having a WiFi connection function needs to be programmed, resulting in high system improvement costs. 
       SUMMARY 
       [0005]    To resolve the foregoing technical problem, embodiments of the present disclosure provide an Internet access authentication method and client, and a computer storage medium. 
         [0006]    One aspect of the present disclosure provides an Internet access authentication method implemented by a computing terminal having at least one processor. The Internet access authentication method includes establishing a network connection to a subnetwork; displaying, in a browser, a login page specified by a wireless access point, a network application icon used for Internet access being displayed on the login page; receiving an operation on the network application icon, and authenticating first data by sending the first data to a network server, the first data comprising: a gateway address, a wireless access point address, and a device address; and making a network connection when authentication on the first data succeeds. 
         [0007]    Another aspect of the present disclosure provides an Internet access authentication client, comprising: a memory, a processor coupled to the memory, a connector, configured to establish a network connection to a subnetwork; a browser executed by the processor, configured to display, a login page specified by a wireless access point, network application icon for Internet access being displayed on the login page; to obtain an operation on the network application icon; to send the first data to a network server, the first data comprising: a gateway address, a wireless access point address, and a device address; and a lifting unit executed by the processor, configured to lift a network restriction when authentication on the first data succeeds. 
         [0008]    Another aspect of the present disclosure provides a computer storage medium, the computer storage medium storing a computer executable instruction, and the computer executable instruction being configured to perform the Internet access authentication method. The method includes: establishing a network connection to a subnetwork; displaying, in a browser, a login page specified by a wireless access point, a network application icon used for Internet access being displayed on the login page; receiving an operation on the network application icon, and authenticating first data by sending the first data to a network server, the first data comprising: a gateway address, a wireless access point address, and a device address; and making a network connection when authentication on the first data succeeds. 
         [0009]    In the technical solutions of the embodiments of the present disclosure, a user may select WiFi to establish a network connection to a subnetwork. The subnetwork herein may refer to a local area network, that is, a WiFi network. A login page specified by an AP is displayed in a browser when the browser window is opened. There is a network application icon used for Internet access on the login page. When the user clicks the network application icon, authentication is automatically completed by using an App, to lift a network restriction. 
     
    
     
       BRIEF DESCRIPTION OF THE DRAWINGS 
         [0010]      FIG. 1  is a schematic flowchart of an Internet access authentication method according to an embodiment of the present disclosure; 
           [0011]      FIG. 2  is a schematic flowchart of an Internet access authentication method according to an embodiment of the present disclosure; 
           [0012]      FIG. 3  is a schematic structural diagram of a client according to an embodiment of the present disclosure; 
           [0013]      FIG. 4  is a schematic diagram of a login page according to an embodiment of the present disclosure; and 
           [0014]      FIG. 5  is a schematic diagram of an optional hardware structure of an Internet access authentication client according to an embodiment of the present disclosure. 
       
    
    
     DESCRIPTION OF EMBODIMENTS 
       [0015]    To make the features and technical content of the embodiments of the present disclosure more compressible, the following describes implementations of the embodiments of the present disclosure in detail with reference to accompanying drawings. The accompanying drawings are intended only for reference, and not intended to limit the embodiments of the present disclosure. 
         [0016]    To understand the technical solutions of the embodiments of the present disclosure clearer, the technical terms in the embodiments of the present disclosure are described in details as follows: 
         [0017]    App: It may be a third-party software application on a smartphone or on a wireless network. 
         [0018]    Portal: Usually, portal authentication may also be referred to as web authentication, and a portal authentication website is generally referred to as a portal site. When an unauthorized user accesses the Internet, an electronic device forcibly directs the user to a specified site, and the user may access a service in the site for free. When the user needs to use another service in the Internet, the user needs to be authenticated on the portal site, and may use an Internet resource only when authentication succeeds. 
         [0019]    AP: It may be a wireless switch used in a wireless network, and is also a core of the wireless network. 
         [0020]    Wireless access control (AC): It may be responsible for gathering data from different APs and accessing the Internet, and completing control functions, such as configuration and management on AP devices, authentication and management on wireless users, broadband access, and security. 
         [0021]    ap_mac: It may be a MAC address of a router in the wireless network. 
         [0022]    Browser: It may be a mobile Internet tool used by a user to browse Internet content on a terminal by using a wireless communications network, in which a major App is web page browsing, and many Apps, such as navigation, community, multi-media, weather, and stock market, may be integrated to provide all-round mobile Internet services for the user. 
         [0023]    Uniform resource locator (URL): It may be a concise representation of a location of a resource that may be obtained from the Internet and an access method, and is an address of a standard resource on the Internet. Each file on the Internet has a unique URL, and information included in the URL indicates a location of the file and how the browser needs to process the file. 
         [0024]    gateway_id: It may be a unique identifier of an AP gateway in an App background. 
         [0025]    phone_mac: It may be a MAC address of a mobile phone. 
         [0026]    There are many network authentication processes. In a first example of network authentication, authentication is performed by using a short message service (SMS) message for Internet access. Specifically, the user connects to a wireless fidelity (WiFi) hotspot without a password, and forcibly opens a web authentication page to browse page content. The user enters a correct phone number on the authentication page, and a mobile phone receives an SMS message sent by a network operator and including an authentication password. The user enters, on the authentication page, the authentication password provided by the network operator, and accesses the Internet by means of WiFi after authentication succeeds. 
         [0027]    In another example of network authentication, authentication is performed by using a password for Internet access. Specifically, the user obtains a WiFi password by an inquiry. The user connects to a WiFi hotspot, and enters the WiFi password for Internet access. 
         [0028]    In another example of network authentication, automatic authentication/one-click authentication is performed by using an application (App) for Internet access. Specifically, the user connects to a WiFi hotspot without a password, or automatically connects to a WiFi hotspot of a specified service set identifier (SSID) by using an App; and then opens the App for automatic authentication or one-click authentication, and directly accesses the Internet. 
         [0029]      FIG. 1  is a schematic flowchart of an Internet access authentication method according to one embodiment of the present disclosure. The method may be implemented by a computing terminal having at least one processor. As shown in  FIG. 1 , the Internet access authentication method includes the following operations. 
         [0030]    Operation  101 . Establish a network connection to a subnetwork, and display, on a browser when the browser is opened, a login page specified by an AP. There may be a network application icon used for Internet access on the login page. 
         [0031]    The technical solutions in this embodiment of the present disclosure is applied to an electronic device, such as a mobile phone or a tablet computer. 
         [0032]    In this embodiment of the present disclosure, the electronic device has a local area network function, that is, a user may select a subnetwork on the electronic device, that is, a local area network or a WiFi network, and then establishes a network connection to the subnetwork. Herein, each subnetwork corresponds to a unique SSID. 
         [0033]    In this embodiment of the present disclosure, the browser obtains an operation of accessing a first address, the browser sends a first address access request to the AP, and the browser receives the login page specified by the AP, the login page being corresponding to a second address. 
         [0034]    Specifically, the user opens the browser window, and enters a first address on the browser. The first address is any web address entered by the user. The browser obtains the operation of accessing the first address. The browser sends a first address access request to the AP, and the AP returns a specified login page to the browser. The login page corresponds to a second address. The login page is a portal page. Referring to  FIG. 4 , there is a network application icon on the login page. The icon may be named wake up the App for Internet access, and the user may click the network application icon for one-click Internet access. Herein, the network application icon may be a touch icon, or may be a non-touch icon. When the network application icon is a touch icon, the user may implement one-click Internet access by a touch operation. When the network application icon is a non-touch icon, the user may activate the network application icon in another manner, for example, clicking using a mouse or hitting a particular function key or a key combination on a keyboard, to implement one-click Internet access. The network application icon may be implemented in various manners, and the user may implement one-click Internet access by multiple operations. 
         [0035]    Operation  102 . Obtain an operation on the network application icon, and authenticate first data by means of interaction between an App and a network server, the first data including: a gateway address, an AP address, and a device address. 
         [0036]    In this embodiment of the present disclosure, the operation on the network application icon is obtained, and the AP is requested to temporarily lift a restriction. After the AP temporarily lifts the restriction successfully, the browser sends the first data to the App, so that the App obtains a multi-media page from an App server according to the first data. The App accesses the multi-media page, and sends the first data to the network server. Internet access authentication succeeds when authentication on the first data by the network server succeeds. 
         [0037]    In this embodiment of the present disclosure, when the AP is requested to temporarily lift the restriction, device information is sent to the AP by using a request message. 
         [0038]    In this embodiment of the present disclosure, after the AP temporarily lifts the restriction successfully, a temporarily lifting restriction success message sent by the AP is received. The temporarily lifting restriction success message includes the first data. 
         [0039]    In this embodiment of the present disclosure, the browser receives and displays data of the multi-media page after authentication on the first data by the network server succeeds. The network server controls the AP to lift the network restriction. 
         [0040]    Specifically, the user clicks the network application icon on the login page, and the browser sends a request message to the AP to request to temporarily lift the restriction. The request message carries device information, such as ap_mac and ip. The AP saves the device information. After the AP temporarily lifts the restriction successfully, the AP sends first data, such as gateway_id, ap_mac, and phone_mac, to the browser, to temporarily allow the electronic device to pass. The browser wakes up the App, and sends the first data, such as gateway_id, ap_mac, and phone_mac, to the App. The App requests a to-be-opened multi-media page from the App server according to data such as gateway_id. The App server returns, to the App, a URL of the multi-media page and data such as gateway_id, ap_mac, and phone_mac. The App accesses the multi-media page and transfers the data such as gateway_id, ap_mac, and phone_mac to the network server. The network server checks the data transferred by the App, and after the data is checked as correct, normally allows the electronic device to pass, referring to the following operation  103 . 
         [0041]    Operation  103 . Lift a network restriction when authentication on the first data succeeds. 
         [0042]    In this embodiment of the present disclosure, after the network restriction is lifted, the electronic device exchanges network data with the AP. 
         [0043]    In this embodiment of the present disclosure, a network application icon used for Internet access is added to a specified login page, an App is woken up by clicking the touch icon, and authentication on an electronic device by a network server is implemented by means of background interaction between the App and the network server, to implement Internet access. In this embodiment of the present disclosure, user operations are simple and automated by the system; user privacy is protected; the speed for a user terminal to connect to WiFi for Internet access is greatly reduced; and App usage is increased. 
         [0044]    In the technical solutions of this embodiment of the present disclosure, a user selects WiFi, to establish a network connection to a subnetwork. The subnetwork herein refers to a local area network, that is, a WiFi network. A login page specified by an AP is displayed in a browser when the browser window is opened. There is a network application icon used for Internet access on the login page. When the user clicks the network application icon, authentication is automatically completed by using an App, to lift a network restriction. In this embodiment of the present disclosure, the user needs to only connect to WiFi and open the browser window, and the browser automatically displays the login page, that is, a portal page. Then the user clicks the network application icon on the portal page, to trigger the App to automatically undergo Internet access authentication for Internet access. 
         [0045]    According to the technical solutions of this embodiment of the present disclosure, phone number information of the user does not need to be obtained, the user does not need to wait for an SMS password and may access the Internet by clicking the network application icon, and the user neither needs to actively inquire about a password, nor needs to manually enter a password. Therefore, no independent App having a WiFi function needs to be programmed, and therefore reduce the cost for any software or system customization 
         [0046]      FIG. 2  is a schematic flowchart of an Internet access authentication method according to an embodiment of the present disclosure. As shown in  FIG. 2 , the Internet access authentication method includes the following operations executed by a browser and a network server. 
         [0047]    Operation  201 . Connect to WiFi. 
         [0048]    Operation  202 : A browser accesses a first web page. 
         [0049]    Operation  203 . The browser sends a first web page access request to an AC/AP. 
         [0050]    Operation  204 . The AC/AP returns a specified login page to the browser. 
         [0051]    Operation  205 . Click a network application icon, such as a touch icon of an App, on the login page. 
         [0052]    Operation  206 . The browser requests the AC/AP to temporarily lift a restriction. 
         [0053]    Operation  207 . The AC/AP returns a temporarily lifting restriction success to the browser. 
         [0054]    Operation  208 . The browser wakes up the App. 
         [0055]    Operation  209 . The App sends authentication gateway information to an App server and requests a multi-media page from the App server. 
         [0056]    Operation  210 . After authentication succeeds, the App server returns a URL of the multi-media page to the App. 
         [0057]    Operation  211 . The App sends a multi-media page access request to a network server. 
         [0058]    Operation  212 . After information authentication succeeds, the network server returns data of the multi-media page to the App. 
         [0059]    Operation  213 . The network server controls the AC/AP to normally lift the network restriction. 
         [0060]    In this embodiment of the present disclosure, a network application icon used for Internet access is added to a specified login page, an App is woken up by clicking the touch icon, and authentication on an electronic device by a network server is implemented by means of background interaction between the App and the network server, to implement Internet access. In this embodiment of the present disclosure, user operations are simple and automated by the system; user privacy is protected; the speed for a user terminal to connect to WiFi for Internet access is greatly reduced; and App usage is increased. 
         [0061]      FIG. 3  is a schematic structural diagram of an Internet access authentication client according to an embodiment of the present disclosure. The client may include: a memory, a processor coupled to the memory, a connector, a browser executed by the processor, and a lifting unit executed by the processor. In some embodiments, the processor may also be executed by the processor. As shown in  FIG. 3 , the client includes the following components: a connection unit  31 , configured to establish a network connection to a subnetwork; a browser unit  32 , configured to display, on a browser when the browser is opened, a login page specified by an AP, there being a network application icon used for Internet access on the login page; an obtaining unit  33 , configured to obtain an operation on the network application icon; the browser unit  32  being further configured to authenticate first data by means of interaction between an App and a network server. The first data may include a gateway address, an AP address, and a device address. The first data may include other data required by the network server to authenticate a client. The client also may include a lifting unit  34 , configured to lift a network restriction when authentication on the first data succeeds. 
         [0062]    The browser unit  32  is further configured to request the AP to temporarily lift the restriction; and after the AP temporarily lifts the restriction successfully, send the first data to the App, so that the App obtains a multi-media page from an App server according to the first data, where the App accesses the multi-media page, and sends the first data to the network server; and Internet access authentication succeeds when authentication on the first data by the network server succeeds. 
         [0063]    The browser unit  32  is further configured to obtain an operation of accessing a first address; send a first address access request to the AP; and receive the login page specified by the AP, the login page being corresponding to a second address. 
         [0064]    The browser unit  32  is further configured to: when requesting the AP to temporarily lift the restriction, send device information to the AP by using a request message; and after the AP temporarily lifts the restriction successfully, receive a temporarily lifting restriction success message sent by the AP, the temporarily lifting restriction success message including the first data. 
         [0065]    The browser unit  32  is further configured to receive and display data of the multi-media page after authentication on the first data by the network server succeeds, where the network server controls the AP to lift the network restriction; and exchange network data with the AP. 
         [0066]      FIG. 5  is a schematic diagram of an optional hardware structure of an Internet access authentication client according to an embodiment of the present disclosure. 
         [0067]    A browser  501  is configured to display content of an HTML file of a web page server or a file system, and implement interaction between a user and the file. 
         [0068]    A memory  502  may be a storage medium in a form of a flash memory or a hard disk, configured to store cached data in the browser  501 , and store an executable instruction that is read by a controller  506  by using a bus  507 . 
         [0069]    The file of the browser may be displayed in a display unit  503 . 
         [0070]    A power supply unit  504  is configured to supply power for other components in an electronic device  500 . During actual application, the power supply unit  504  may be implemented as various storage batteries or power supply adapters. 
         [0071]    A communications unit  505  is configured to perform mobile communication by using various communications standard, such as Code Division Multiple Access (CDMA), Wideband Code Division Multiple Access (WCDMA), Time Division-Synchronous Code Division Multiple Access (TD-SCDMA), and an evolved communications standard, or communicate in a wireless Internet manner, such as a wireless compatibility certification (WiFi) manner. 
         [0072]    A person skilled in the art should understand that, the functions implemented by the units of the client shown in  FIG. 3 , are disclosed in related descriptions of the foregoing Internet access authentication method. The functions implemented by the units of the client shown in  FIG. 3  may be implemented by a program running on a processor, or may be implemented by a specific logical circuit. 
         [0073]    When the integrated module is implemented in the form of a software functional module and sold or used as an independent product, the integrated module may be stored in a computer-readable storage medium. A person skilled in the art should understand that the embodiments of the present disclosure may be provided as a method, a system, or a computer program product. Therefore, the present disclosure may use a form of hardware only embodiments, software only embodiments, or embodiments with a combination of software and hardware. Moreover, this application may be in a form of a computer program product that is implemented on one or more computer-usable storage media including computer-usable program code. The storage media may include, but not limited to, a USB flash drive, a removable hard disk, a read-only memory (ROM), a random access memory (RAM), a magnetic disk storage, a CD-ROM, an optical storage, and the like. 
         [0074]    In the embodiments of the present disclosure, the user needs to only connect to WiFi and open the browser window, and the browser automatically displays the login page, that is, a portal page. Then the user clicks the network application icon on the portal page, to trigger the App to automatically undergo Internet access authentication for Internet access. According to the technical solutions of the embodiments of the present disclosure, phone number information of the user does not need to be obtained from the user, and the user does not need to wait for an SMS password, and may access the Internet by clicking the network application icon. The network application icon may include a touch icon and a non-touch icon, and is applicable to a touch interaction scenario of a smart terminal, and also applicable to a non-touch interaction scenario of a conventional terminal. In the embodiments of the present disclosure, the user neither needs to actively inquire about a password, nor needs to manually enter a password. Therefore, no independent App having a WiFi function needs to be programmed. 
         [0075]    The present disclosure is described with reference to the flowcharts and/or block diagrams of the method, the device (system), and the computer program product according to the embodiments of the present disclosure. It should be understood that computer program instructions may be used to implement each process and/or each block in the flowcharts and/or the block diagrams and a combination of a process and/or a block in the flowcharts and/or the block diagrams. These computer program instructions may be provided for a general-purpose computer, a dedicated computer, an embedded processor, or a processor of any other programmable data processing device to generate a machine, so that the instructions executed by a computer or a processor of any other programmable data processing device generate an apparatus for implementing a specific function in one or more processes in the flowcharts and/or in one or more blocks in the block diagrams. 
         [0076]    These computer program instructions may be stored in a computer readable memory that can instruct the computer or any other programmable data processing device to work in a specific manner, so that the instructions stored in the computer readable memory generate an artifact that includes an instruction apparatus. The instruction apparatus implements a specific function in one or more processes in the flowcharts and/or in one or more blocks in the block diagrams. 
         [0077]    These computer program instructions may be loaded onto a computer or another programmable data processing device, so that a series of operations and operations are performed on the computer or the another programmable device, thereby generating computer-implemented processing. Therefore, the instructions executed on the computer or the another programmable device provide operations for implementing a specific function in one or more processes in the flowcharts and/or in one or more blocks in the block diagrams. 
         [0078]    Although some preferred embodiments of the present disclosure have been described, persons skilled in the art can make changes and modifications to these embodiments once they learn the basic inventive concept. Therefore, the following claims are intended to be construed as to cover the preferred embodiments and all changes and modifications falling within the scope of this application. 
         [0079]    Correspondingly, an embodiment of the present disclosure further provides a computer storage medium, storing a computer program. The computer program is configured to perform the Internet access authentication method in the foregoing embodiment of the present disclosure. 
         [0080]    The technical solutions recorded in the embodiments of the present disclosure may be combined in any way provided that no conflict is caused. 
         [0081]    In the several embodiments provided in the present disclosure, it should be understood that the disclosed method and intelligent device may be implemented in other manners. The described device embodiment is merely exemplary. For example, the unit division is merely a logical function division and there may be other division in actual implementation. For example, a plurality of units or components may be combined or integrated into another system, or some features may be ignored or not performed. In addition, the displayed or discussed mutual couplings or direct couplings or communication connections between parts may be implemented through some interfaces. The indirect couplings or communication connections between the devices or units may be implemented in electronic, mechanical, or other forms. 
         [0082]    The units described as separate parts may or may not be physically separated, and parts displayed as units may or may not be physical units, which may be located in one position, or may be distributed on a plurality of network elements. Some or all of the units may be selected according to actual needs to achieve the objectives of the solutions of the embodiments. 
         [0083]    In addition, functional units in the embodiments of the present disclosure may be integrated into one second processing unit, or each of the units may exist alone physically, or two or more units are integrated into one unit. The integrated unit may be implemented in a form of hardware, or may be implemented in a form of hardware in addition to a software functional unit. 
         [0084]    The foregoing descriptions are merely specific implementations of the present disclosure, but are not intended to limit the protection scope of the present disclosure. Any variation or replacement readily figured out by a person skilled in the art within the technical scope disclosed in the present disclosure shall fall within the protection scope of the present disclosure.