[go: up one dir, main page]

CN105933291B - A kind of method, smart machine and the server of smart machine safe handling - Google Patents

A kind of method, smart machine and the server of smart machine safe handling Download PDF

Info

Publication number
CN105933291B
CN105933291B CN201610219050.8A CN201610219050A CN105933291B CN 105933291 B CN105933291 B CN 105933291B CN 201610219050 A CN201610219050 A CN 201610219050A CN 105933291 B CN105933291 B CN 105933291B
Authority
CN
China
Prior art keywords
necessary information
information
server
intelligent
sub
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Active
Application number
CN201610219050.8A
Other languages
Chinese (zh)
Other versions
CN105933291A (en
Inventor
贾向阳
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Hefei Lianbao Information Technology Co Ltd
Original Assignee
Hefei Lianbao Information Technology Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Hefei Lianbao Information Technology Co Ltd filed Critical Hefei Lianbao Information Technology Co Ltd
Priority to CN201610219050.8A priority Critical patent/CN105933291B/en
Publication of CN105933291A publication Critical patent/CN105933291A/en
Application granted granted Critical
Publication of CN105933291B publication Critical patent/CN105933291B/en
Active legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Classifications

    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00Network architectures or network communication protocols for network security
    • H04L63/08Network architectures or network communication protocols for network security for authentication of entities
    • H04L63/0876Network architectures or network communication protocols for network security for authentication of entities based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L67/00Network arrangements or protocols for supporting network services or applications
    • H04L67/01Protocols
    • H04L67/10Protocols in which an application is distributed across nodes in the network
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L67/00Network arrangements or protocols for supporting network services or applications
    • H04L67/50Network services
    • H04L67/52Network services specially adapted for the location of the user terminal

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Power Engineering (AREA)
  • Computer Hardware Design (AREA)
  • Computer Security & Cryptography (AREA)
  • Computing Systems (AREA)
  • General Engineering & Computer Science (AREA)
  • Stored Programmes (AREA)
  • Mobile Radio Communication Systems (AREA)

Abstract

The invention discloses method, smart machine and the server of a kind of safe handling of smart machine, necessary information when this method is by the smart machine normal use is processed into several pieces sub-information;At least a sub-information deposits in the server connecting with the smart device communication;When the smart machine normal boot-strap and is used under conditions of loading all sub-informations of the sub-informations or preset part.The invention enables smart machines arbitrarily to move within the scope of predeterminable area, and normal boot-strap uses, smart machine is prevented to be switched on and use outside defined predeterminable area range simultaneously, so that the concerning security matters data effectively prevented in smart machine is divulged a secret outside concerning security matters place.

Description

Intelligent device safe use method, intelligent device and server
Technical Field
The invention relates to the field of information security, in particular to a method for safely using intelligent equipment, the intelligent equipment and a server.
Background
At present, in some special security-related places (such as military or security institutions), the security is caused, the intelligent equipment in the security-related places is not allowed to be moved and used at will (generally, the intelligent equipment is fixed to a certain position by using a fixing device such as a safety lock and the like), and the intelligent equipment can only be started and used at a specific position, so that the data in the intelligent equipment can be effectively prevented from being scattered outside the security-related places. However, the fixed use position of the intelligent device brings trouble to the normal use of the intelligent device, for example, users cannot normally bring their notebook computers to conference rooms inside confidential places to participate in discussions (the confidential regulations are not violated at this time), which is inconvenient for the users to use and does not play the roles that many intelligent devices should have.
Disclosure of Invention
The invention aims to provide a method for safely using intelligent equipment, the intelligent equipment and a server.
In order to solve the technical problems, the invention adopts the following technical scheme: a method for safely using intelligent equipment processes necessary information into a plurality of pieces of sub information when the intelligent equipment is normally used; at least one piece of sub information is stored in a server in communication connection with the intelligent equipment; and when the intelligent equipment is normally started and used under the condition of loading all the sub-information or the preset part of the sub-information.
Preferably, the method further comprises the steps of:
s1, acquiring necessary information required by the normal use of the intelligent equipment;
s2, dividing the necessary information into first necessary information and second necessary information after analysis processing;
s3, storing the first necessary information on the intelligent equipment and storing the second necessary information on a server;
and S4, the intelligent device acquires the second necessary information in a preset area range, and the intelligent device is normally started and used after the first necessary information and the second necessary information are loaded.
Preferably, the step S4 further includes:
s41, the intelligent device loads the first necessary information and sends a request to the server to call the second necessary information;
s42, the server sends the second necessary information to the intelligent device after judging that the position of the intelligent device is within the preset area range;
s43, the intelligent device loads the second necessary information after completing the loading of the first necessary information;
and S44, the intelligent device is normally started and used after verifying that the first necessary information and the second necessary information are accurate and correct.
Preferably, the step S1 is to obtain different necessary information according to different smart devices.
Preferably, the method further comprises step S5: and deleting the second necessary information after the intelligent equipment is started and used.
Preferably, the method further comprises step S6: the server sends the second necessary information that can be used only a preset number of times to the smart device.
Preferably, the intelligent device acquires the second necessary information from the server in a wired or wireless manner within the preset range.
Preferably, when the intelligent device is a computer, the second necessary information is partial information of the BOIS of the computer, partial parameter information of a hard disk, and/or partial information of a network MAC address.
The invention also provides an intelligent device based on the method, which comprises the following steps:
the storage module is used for storing the sub information;
the loading module is used for loading the sub information;
and the control module guides the intelligent equipment to be normally started and used according to the loaded sub information.
The invention also provides a server based on the method, which comprises the following steps:
and the storage module is used for storing at least one piece of sub information.
The invention has the beneficial effects that: the invention enables the intelligent equipment to move randomly in the preset area range and start up normally for use, and simultaneously prevents the intelligent equipment from starting up and using outside the specified preset area range, thereby effectively avoiding the secret leakage of secret-related data in the intelligent equipment outside a secret-related place.
Drawings
Fig. 1 is a schematic main flow diagram of a method for safely using an intelligent device according to an embodiment of the present invention.
Detailed Description
In order that those skilled in the art will better understand the present invention, the following detailed description of the embodiments of the present invention refers to the accompanying drawings, but the present invention is not limited thereto.
The method for safely using the intelligent equipment of the embodiment of the invention processes necessary information (which will be explained in detail below) when the intelligent equipment is normally used into a plurality of pieces of sub information; the plurality of pieces of sub information can be stored in one or more places, for example, one piece of sub information can be stored on the intelligent device and can be used by the intelligent device at any time, but at least one piece of sub information is necessarily stored in a server which is in communication connection with the intelligent device, which means that the intelligent device cannot obtain the sub information of the necessary information stored on the server if the intelligent device does not communicate with the server and is authorized; otherwise, when the intelligent device communicates with the server and is allowed to obtain the sub information of the necessary information stored in the server, the intelligent device can be normally started and used under the condition of loading all the sub information or the preset part of the sub information.
Specifically, in one embodiment of the present invention, the method for safely using the intelligent device further comprises the following steps:
and S1, acquiring necessary information required by the normal use of the intelligent equipment. The necessary information is information that must be used for the startup and normal operation of the intelligent device, for example, the necessary information is information of a BOIS of a computer, parameter information of a hard disk and/or information of a network MAC address, and the necessary information may also be information of a U-Boot of the intelligent device of an Arm platform, and the like. It should be understood that the information necessary herein contains a general meaning as understood by those skilled in the art, having different, but corresponding, unambiguous content for different intelligent devices.
S2, dividing the necessary information into a first necessary information and a second necessary information after analyzing the necessary information (the necessary information may be divided into two or more parts, in one embodiment of the present invention, the necessary information is divided into two parts); the first necessary information can be stored in a memory of the intelligent device or stored on the server, and the first necessary information and the second necessary information must be acquired when the intelligent device is started and used.
S3, in an embodiment of the present invention, the first necessary information is stored in the smart device, and the second necessary information is stored in the server, that is, the smart device only stores the necessary information for partial power-on and normal operation. Of course, if the necessary information is divided into two or more parts, other parts of the necessary information may be stored elsewhere in the non-smart device in the above process. In one embodiment of the invention, the first necessary information may provide the smart device with a partial function, for example, a function of accessing the server and acquiring the second necessary information.
And S4, the intelligent device acquires the second necessary information in the preset area range, and the intelligent device is normally started and used after the first necessary information and the second necessary information are loaded. The range of the preset area is preset by a user according to the actual situation, and particularly, the range is controlled and realized by the user through using a server, a router and other equipment. The intelligent device can be normally started and used after the first necessary information and the second necessary information are loaded (the operation process is not sequential, the first necessary information can be loaded first, then the second necessary information is obtained from the server, and the second necessary information is loaded).
Therefore, in order to further clarify the implementation process of the present method, step S4 may further include: s41, the intelligent device loads the first necessary information and sends a request to the server to call the second necessary information; s42, the server judges whether the position of the intelligent device is in the range of the preset area, if the position of the intelligent device is in the range of the preset area, the intelligent device sends second necessary information to the intelligent device through a wired or wireless network, the intelligent device stores the second necessary information in a memory or directly runs in the memory, but if the position of the intelligent device is not in the range of the preset area, the server does not send the second necessary information to the intelligent device, and prompts that the intelligent device is not in the preset area; s43, the intelligent device loads the second necessary information after completing the loading of the first necessary information (the operation process is not sequential); and S44, the intelligent device is normally started and used after verifying that the first necessary information and the second necessary information are accurate. When the intelligent equipment verifies that the second necessary information is incorrect, the error information can be reported to the server through the network, the server judges the position of the intelligent equipment again and resends the second necessary information until the intelligent equipment verifies that the first necessary information and the second necessary information are both accurate and correct, and the intelligent equipment is started up normally for use.
Certainly, the content of the necessary information required for booting and normal operation of different intelligent devices is also different, for example, the correct hard disk password information must be run when the notebook computer is booted, and the specific firmware information needs to be run when the intelligent network set-top box with the storage function is booted, so that the traditional Chinese medicine specifically acquires different necessary information according to different intelligent devices in step S1. The acquired content and the method need to be obtained through specific algorithm calculation in advance, wherein the second necessary information is stored in the server and then stored after being calculated through a series of algorithms, and when the second necessary information needs to be sent to the intelligent equipment, the server also sends the second necessary information to the intelligent equipment in a form capable of being processed by the intelligent equipment through inverse operation.
In order to increase the security effect, the smart device can be powered on and used after obtaining the first necessary information and the second necessary information, and after the use is finished, the method proceeds to step S5 to delete the second necessary information so that the second necessary information is not reused. Or the method may proceed to step S6, where the server sends the second necessary information that can only be used a preset number of times to the smart device, that is, the second necessary information may only be used once, and is automatically disabled after being loaded once, and is not reused.
It should be noted that, since the computer is used frequently, when the intelligent device is a computer, the second necessary information may be partial information of the BOIS of the computer, partial parameter information of the hard disk, and/or partial information of the network MAC address.
The invention also provides an intelligent device based on the method, and the intelligent device comprises: the storage module is used for storing the sub information of the necessary information; the loading module is used for loading the sub information; and the control module guides the intelligent equipment to be normally started and used according to the loaded sub information.
The invention also provides a server based on the method, which comprises the following steps: and the storage module is used for storing at least one piece of sub information, and the server is usually arranged at a certain fixed position and cannot move.
The above embodiments are only exemplary embodiments of the present invention, and are not intended to limit the present invention, and the scope of the present invention is defined by the claims. Various modifications and equivalents may be made by those skilled in the art within the spirit and scope of the present invention, and such modifications and equivalents should also be considered as falling within the scope of the present invention.

Claims (9)

1. A method for safely using intelligent equipment is characterized in that necessary information when the intelligent equipment is normally used is processed into a plurality of pieces of sub information; at least one piece of sub information is stored in a server in communication connection with the intelligent equipment; when the intelligent equipment is normally started and used under the condition of loading all the sub information or the preset part of the sub information; wherein,
the method specifically comprises the following steps:
s1, acquiring necessary information required by the normal use of the intelligent equipment;
s2, dividing the necessary information into first necessary information and second necessary information after analysis processing;
s3, storing the first necessary information on the intelligent equipment and storing the second necessary information on a server;
and S4, the intelligent device acquires the second necessary information in a preset area range, and the intelligent device is normally started and used after the first necessary information and the second necessary information are loaded.
2. The method according to claim 1, wherein the step S4 further comprises:
s41, the intelligent device loads the first necessary information and sends a request to the server to call the second necessary information;
s42, the server sends the second necessary information to the intelligent device after judging that the position of the intelligent device is within the preset area range;
s43, the intelligent device loads the second necessary information after completing the loading of the first necessary information;
and S44, the intelligent device is normally started and used after verifying that the first necessary information and the second necessary information are accurate and correct.
3. The method according to claim 1, wherein the step S1 is specifically to obtain different necessary information according to different smart devices.
4. The method according to claim 1, further comprising step S5: and deleting the second necessary information after the intelligent equipment is started and used.
5. The method according to claim 1, further comprising step S6: the server sends the second necessary information that can be used only a preset number of times to the smart device.
6. The method according to claim 1, wherein the smart device obtains the second necessary information from the server in a wired or wireless manner within the preset range.
7. The method according to claim 1, wherein when the smart device is a computer, the second necessary information is partial information of a BOIS of the computer, partial parameter information of a hard disk, and/or partial information of a network MAC address.
8. A smart device based on the method of any one of claims 1 to 7, comprising:
the storage module is used for storing the sub information;
the loading module is used for loading the sub information;
and the control module guides the intelligent equipment to be normally started and used according to the loaded sub information.
9. A server based on the method of any one of claims 1 to 7, comprising:
and the storage module is used for storing at least one piece of sub information.
CN201610219050.8A 2016-04-07 2016-04-07 A kind of method, smart machine and the server of smart machine safe handling Active CN105933291B (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN201610219050.8A CN105933291B (en) 2016-04-07 2016-04-07 A kind of method, smart machine and the server of smart machine safe handling

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN201610219050.8A CN105933291B (en) 2016-04-07 2016-04-07 A kind of method, smart machine and the server of smart machine safe handling

Publications (2)

Publication Number Publication Date
CN105933291A CN105933291A (en) 2016-09-07
CN105933291B true CN105933291B (en) 2019-04-05

Family

ID=56840566

Family Applications (1)

Application Number Title Priority Date Filing Date
CN201610219050.8A Active CN105933291B (en) 2016-04-07 2016-04-07 A kind of method, smart machine and the server of smart machine safe handling

Country Status (1)

Country Link
CN (1) CN105933291B (en)

Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN1862441A (en) * 2005-05-11 2006-11-15 联想(北京)有限公司 Safety turn-on method in visual range
CN101211264A (en) * 2006-12-26 2008-07-02 环达电脑(上海)有限公司 Network computer startup system and method
CN101299848A (en) * 2008-05-30 2008-11-05 宇龙计算机通信科技(深圳)有限公司 Mobile terminal as well as method and system for starting emergency application thereof
CN103136463A (en) * 2011-12-01 2013-06-05 宏达国际电子股份有限公司 System and method for temporary secure boot process of electronic device

Family Cites Families (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US9942385B2 (en) * 2011-08-04 2018-04-10 International Business Machines Corporation System and method for preventing and/or limiting use of a mobile device

Patent Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN1862441A (en) * 2005-05-11 2006-11-15 联想(北京)有限公司 Safety turn-on method in visual range
CN101211264A (en) * 2006-12-26 2008-07-02 环达电脑(上海)有限公司 Network computer startup system and method
CN101299848A (en) * 2008-05-30 2008-11-05 宇龙计算机通信科技(深圳)有限公司 Mobile terminal as well as method and system for starting emergency application thereof
CN103136463A (en) * 2011-12-01 2013-06-05 宏达国际电子股份有限公司 System and method for temporary secure boot process of electronic device

Also Published As

Publication number Publication date
CN105933291A (en) 2016-09-07

Similar Documents

Publication Publication Date Title
US20230045087A1 (en) Method for Remedying a Security Breach on a Mobile Device
US9875113B2 (en) System and method for managing BIOS setting configurations
US20170140137A1 (en) Multi-System Entering Method, Apparatus and Terminal
WO2016165536A1 (en) Identity verification method and device
CN102262574B (en) Boot protecting method and device of operating system
US20130139233A1 (en) System and method for controlling user access to a service processor
WO2020224238A1 (en) Blockchain node depolyment method, device and equipment, and storage medium
US20140020096A1 (en) System to profile application software
CN105825122A (en) Weak password verification and cracking method and device
US9262631B2 (en) Embedded device and control method thereof
US11200065B2 (en) Boot authentication
US20160196422A1 (en) Method and apparatus for controlling invoking of hardware instruction
WO2017076051A1 (en) Method and apparatus for acquiring superuser permission
US20200409871A1 (en) Information handling apparatus and method for unlocking a persistent region in memory
TWI604336B (en) Runtime verification using external device
CN105933291B (en) A kind of method, smart machine and the server of smart machine safe handling
CN107329753B (en) Firmware interface code adjusting method and electronic equipment
CN103369533A (en) Antitheft method and antitheft device of mobile terminal
CN110612510A (en) Input/output (I/O) isolation without a dedicated arbiter
CN108170482B (en) Information processing method and computer equipment
US10366016B2 (en) Access to persistent memory regions of computing devices
US20170060612A1 (en) Terminal device, system for controlling virtual machine and method employing the same
US9576117B2 (en) Electronic device and protection method
WO2017156931A1 (en) Locking method and system for mobile terminal
CN105760747A (en) Method for protecting intelligent equipment through power-on passwords and intelligent equipment

Legal Events

Date Code Title Description
C06 Publication
PB01 Publication
C10 Entry into substantive examination
SE01 Entry into force of request for substantive examination
GR01 Patent grant
GR01 Patent grant