CN107172066A - A method and device for realizing private network communication - Google Patents

Abstract

The invention discloses a method and a device for realizing private network communication, wherein the method comprises the following steps: the terminal receives a control strategy issued by a control server in a mobile communication private network, wherein the control strategy is used for controlling the use authority of at least one functional object in the terminal; and the terminal communicates in the mobile communication private network according to the control strategy, so that the terminal communicating in the private network is effectively controlled.

Description

A method and device for realizing private network communication

technical field

The present invention relates to the communication field, in particular to a method and equipment for realizing private network communication.

Background technique

In order to ensure the safety and stability of the prison, according to the regulations of the Ministry of Justice that mobile phones are strictly prohibited from being brought into the prison, the prison currently adopts a cluster intercom system, which plays an important role in improving communication security capabilities, ensuring daily service communication and emergency dispatching command, and maintaining the continuous security and stability of the prison. function, improving the rapid response and disposal capabilities. However, in modern society, the terminals of wireless communication systems such as mobile phones have increasingly become indispensable important tools in people's work and life. Because the use of mobile phones is strictly prohibited in the prison, it brings greater inconvenience to the work and life of the police in the prison area.

Based on the actual situation of the current prison information management and command system, it is urgent to provide a new type of private network communication method, which can effectively integrate wireless communication technology and information security management and control, so that legal users can also use it in special occasions such as prisons. The purpose of the normal communication of the mobile phone.

Contents of the invention

Embodiments of the present invention provide a method and device for implementing private network communication, which are used to provide a method for effectively managing and controlling terminals that communicate within the private network.

On the one hand, the method of the present invention includes a method for implementing private network communication, the method comprising: the terminal receiving a management and control strategy issued by a management and control server in the mobile communication private network, wherein the management and control strategy is used to control the terminal The use authority of at least one functional object; the terminal communicates in the private mobile communication network according to the management and control policy.

On the other hand, based on the same inventive concept, the embodiment of the present invention also provides a method for implementing private network communication, the method including:

The management and control server in the mobile communication private network receives the management and control strategy sent by the management and control operation client, wherein the management and control strategy is used to control the use authority of at least one functional object in the terminal;

The management and control server sends the management and control policy to the terminals in the area controlled by the management and control server.

Corresponding to the above method, an embodiment of the present invention provides a terminal, the terminal includes:

The receiving unit is configured to receive a management and control strategy issued by a management and control server in the mobile communication private network, wherein the management and control strategy is used to control the use authority of at least one functional object in the terminal;

A processing unit, configured to communicate in the private mobile communication network according to the management and control policy.

The embodiment of the present invention also provides a management and control server, the management and control server is located in the mobile communication private network, including:

A receiving unit, configured to receive a management and control strategy sent by the management and control operation client, wherein the management and control strategy is used to control the use authority of at least one functional object in the terminal;

A sending unit, configured to send the management and control policy to the terminals in the area controlled by the management and control server.

The embodiment of the present invention provides a private network communication method, mainly when the terminal enters the area covered by the private network by swiping a card, etc., it is controlled by the management and control server of the private network, and the management and control server issues a management and control policy to the terminal to control various functions of the terminal The use authority of the object allows the terminal to connect to the private network with limited functions. Since the private network communication has the channel encryption capability, it completely blocks the channel that may leak data. It can be seen that this mobile communication private network is guaranteed Under the premise of security and stability in special scenarios, the normal voice communication function of terminals such as mobile phones can be realized, so that legitimate mobile phone users in special places can realize normal communication under controllable conditions.

Description of drawings

In order to more clearly illustrate the technical solutions in the embodiments of the present invention, the drawings that need to be used in the description of the embodiments will be briefly introduced below. Obviously, the drawings in the following description are only some embodiments of the present invention. For Those of ordinary skill in the art can also obtain other drawings based on these drawings without making creative efforts.

FIG. 1 is a schematic diagram of a novel private network communication implementation system provided by an embodiment of the present invention;

FIG. 2 is a first schematic flow diagram of a method for implementing private network communication provided by an embodiment of the present invention;

FIG. 3 is a schematic diagram of a communication method for an intelligent terminal to enter a private network provided by an embodiment of the present invention;

FIG. 4 is a schematic diagram of a communication method for an intelligent terminal to leave a private network provided by an embodiment of the present invention;

FIG. 5 is an architecture diagram of a voice communication system based on the above-mentioned private network communication system provided by an embodiment of the present invention;

FIG. 6 is an architecture diagram of a cluster scheduling system in a management and control communication system provided by an embodiment of the present invention;

FIG. 7 is a second schematic flow diagram of a method for implementing private network communication provided by an embodiment of the present invention;

FIG. 8 is a terminal provided by an embodiment of the present invention;

FIG. 9 is a management and control server provided by an embodiment of the present invention.

detailed description

In order to make the object, technical solution and advantages of the present invention clearer, the present invention will be further described in detail below in conjunction with the accompanying drawings. Obviously, the described embodiments are only some embodiments of the present invention, rather than all embodiments . Based on the embodiments of the present invention, all other embodiments obtained by persons of ordinary skill in the art without making creative efforts belong to the protection scope of the present invention.

Various aspects are described herein in connection with terminals and/or base stations. Terminal refers to a device that provides voice and/or data connectivity to users, including wireless terminals or wired terminals. The wireless terminal may be a handheld device with a wireless connection function, or other processing device connected to a wireless modem, and a mobile terminal that communicates with one or more core networks via a wireless access network. Wireless terminals may be, for example, mobile telephones (or "cellular" telephones), cell phones, and computers with mobile terminals. As another example, the wireless terminal may also be a portable, pocket, hand-held, computer built-in or vehicle-mounted mobile device. For another example, the wireless terminal may be a mobile station (English: mobile station), an access point (English: accesspoint), or a part of a user equipment (English: user equipment, referred to as UE).

As shown in Figure 1, the embodiment of the present invention provides a novel private network communication implementation system, which is mainly composed of the following subsystems: operator's fixed telephone network (Public Switched Telephone Network, PSTN), softswitch gateway, Voice communication server, cluster scheduling server, cluster scheduling operation platform, background management and control server, management and control operation platform, private network core network equipment, gigabit optical switch, micro base station, extension switch, radio frequency unit, etc.

Among them, the operator's fixed telephone network is a telephone network commonly used in daily life, providing public fixed telephone services. The private network core network equipment is connected to the operator's fixed-line network through the softswitch gateway to realize the interconnection and intercommunication between the private network and the public network. Among them, the softswitch gateway implements call proxy, including basic call control functions, such as call routing, management control (session establishment, session teardown), signaling intercommunication, and the like. The softswitch gateway is the key network element for the system's internal private network core network equipment to connect to the operator's fixed-line network, and is the connection bridge between the enterprise private network and the public network link.

Among them, the private network core network equipment is the core component of the system to provide private network wireless communication services. The functions of the private network core network equipment are mainly to provide user plane connections, manage users, and carry out services; the establishment of user connections includes Mobility management, call management, switching and other functions. User management includes user description, Qos (Qos: Quality of Service, quality of service), user communication records (Accounting), security (corresponding security measures provided by the authentication center include security management of mobile services and external security handling of network access). Bearer connections include to packet data networks and intranets, etc. In the internal voice communication of the private network communication system, the calling intelligent terminal is connected to the private network core network equipment through the micro base station, and is paged to the called party through the network access control, data routing and forwarding processing of the private network core network. Smart terminals form a local voice communication loopback network inside the private network. The private network communication composed of the private network core network equipment and the micro base station, if the interface of the softswitch gateway is connected to the fixed line network of the operator, the terminals in the private network and the terminals in the public network can communicate with each other.

Among them, the background management and control server is connected with the management and control operation client, and the administrator operates some management and control strategies through the remote processing and control of the management and control operation client, and saves them on the background management and control server.

Among them, the management and control operation client can realize rights management, file management, personnel management, application management, security address book management, policy management, etc. Among them, the security control of the mobile phone is carried out. After the policy is issued, the control cannot be released regardless of whether the mobile phone is restarted or turned off. The following functions can be realized: mandatory program installation, deletion, and update; WiFi (Wireless Fidelity, Wireless Fidelity) on/off/off; GPS (Global Positioning System, Global Positioning System) on/off/off; 3G (3rd-Generation, third-generation mobile communication technology) module on/off/off; BT (Bluetooth, Bluetooth) on/off/off; camera on /disable/disable; screenshot function enable/disable; USB connection function.

Furthermore, the voice communication server in the private network communication system is a VoIP (Voice over Internet Protocol, network telephone) server, which is a technology based on IP telephony and which provides corresponding value-added services. VoIP can transmit voice, fax, video, and data services on the IP network, and the system mainly realizes voice call services.

Among them, the cluster dispatch server is a communication platform with an all-IP architecture, a multimedia command and dispatch platform integrating video dispatch, voice dispatch, and instant information. Support cluster intercom, one-key call, dynamic reorganization, delayed entry, etc.; have voice scheduling function, including organizational structure and authority management, support instant messaging, realize message distribution and user status presentation. At the same time, it also has management functions, including multi-level authority control management, multi-user group management functions and multi-unit management functions.

Among them, the cluster scheduling server is connected with the cluster scheduling operation platform, and the cluster scheduling server realizes video scheduling, voice scheduling, and instant messaging functions, and the scheduling management functions such as group call, group call, monitoring, conference, and recording are realized through the scheduling platform.

Based on the private network communication system shown in Figure 1, an embodiment of the present invention provides a schematic flowchart of a method for implementing private network communication, as shown in Figure 2, and the specific implementation method includes:

Step S101 , the terminal receives a management and control policy issued by a management and control server in a private mobile communication network, wherein the management and control policy is used to control the use authority of at least one functional object in the terminal.

Step S102, the terminal communicates in the private mobile communication network according to the management and control policy.

It should be noted that in step S101, the functional objects in the terminal refer to functions such as Bluetooth, WIFI, USB, or various application programs, and the application programs may include programs such as recorder, camera, dialer, and short message. The control strategy mainly includes the following aspects: enable/disable Bluetooth, enable/disable WIFI, enable/disable recording, enable/disable camera, enable/disable GPS, enable/disable mobile data flow, enable/disable USB connection, enable USB debugging /disable etc.

Further, before step S101 is executed, that is, before the terminal receives the management and control strategy issued by the management and control server in the private mobile communication network, the method further includes: the terminal receiving a first switching instruction issued by the management and control server of the mobile communication private network ;

The terminal works in a security mode according to the first switching instruction, wherein the security mode refers to a mode in which each functional object inside the terminal can be controlled by the management server.

Further, when the terminal leaves the control area of the management and control server, the terminal receives a second switching instruction issued by the management and control server, and the terminal exits the security mode according to the second switching instruction.

That is to say, the smart terminal suitable for the private network communication has two working modes, normal mode and safe mode, and can switch the working mode according to the network environment. Among them, when the smart terminal works in the normal mode, the functions are not limited, including: calling, text message, surfing the Internet, taking pictures, recording, WIFI, intercom, etc.; when the smart terminal subsystem works in the safe mode, it can Functions such as taking pictures, recording, and WIFI are restricted, and only intercom and call functions are allowed. Among them, the call function is limited to dialing or answering whitelist users. In addition, this type of terminal may have an NFC (Near Field Communication, short-range wireless communication technology) function. When entering the surveillance area, you can use the NFC function of the smart terminal to switch to the safe mode, and at the same time incorporate it into the background management and control system. The dual-mode smart terminal is connected to the LTE private network and is in the safe mode, completely blocking the channel that may leak data. Including Bluetooth, WIFI, external SD card, MMS, etc. Connect to the work intranet through the exclusive APN (APN: Access Point Name access point) configured by the system (users cannot modify the APN by themselves), and the intranet communication has channel encryption capabilities. When leaving the prison area, you can switch to the normal mode by swiping the smart terminal.

In addition, because prisons and other places have independent private networks inside, mobile phones and other terminals entering the private network range cannot use public network authentication and authentication methods, so they need to issue separate cards, and terminals need full Netcom dual-card dual-standby mobile phones. The external use of the operator's public network card in places such as prisons will automatically switch to the use of private network cards in places such as prisons. Among them, the principle of terminal mode switching is as follows:

scene one:

As shown in Figure 3, when the smart terminal enters a specific supervision area, the user must swipe the card through the smart terminal, and the access control system recognizes the smart terminal subsystem through NFC (Near Field Communication, near field communication), and the smart terminal automatically Switch to the security system, and it is not allowed to switch to the normal system in the working area. When the smart terminal enters the supervision area, the smart terminal enters the safe working mode. At this time, after the smart terminal obtains the server-side policy control, Automatically detect whether it meets the policy conditions, including: policy action base station, policy action range and policy action time. If the policy conditions are satisfied, that is, the smart terminal is located in the policy area within the policy time, the smart terminal is forced to enter the security mode, so as to realize the security protection of the policy area.

Scene two:

As shown in Figure 4, when the terminal leaves a specific supervision area, it needs to perform NFC punch-in processing again. The private network communication system judges that the user will leave the supervision area, and the system prompts whether to switch to the normal mode, and releases the smart Terminal management and control. The smart terminal enters the normal working mode, and the terminal functions are not limited, including: calling, text message, surfing the Internet, taking pictures, recording, WIFI, intercom and other functions.

The embodiment of the present invention adopts the dual-mode intelligent terminal, which mainly has the following advantages: (1) the dual-mode intelligent terminal is divided into two completely independent ROM (Read-Only Memory, read-only memory) partitions, and the two partitions are completely independent of each other. Not affected. When working in the prison area, the safety mode is adopted, and the normal mode is restored when leaving the prison area, without interfering with or affecting each other. (2) During the working period in the surveillance area, the security mode is used to cooperate with the background to comprehensively control the dual-mode intelligent terminal, so that the intelligent terminal becomes a special device for work, and at the same time, it can also meet some convenient work needs such as telephone, intercom and other functions. This minimizes the use of duplication of equipment within the surveillance area. (3) The dual-mode intelligent terminal adopts the custom-developed application program and cooperates with the private network to realize the function of whitelist landing phone in the security mode.

It can be seen that, in combination with the above-mentioned smart terminals, in the prison area covered by private network communication, the terminal can only use the internal private network for communication. The private network communication system provides terminals with whitelist calls and group intercom functions, and all whitelists are controlled. The operation client is configured and pushed in a unified manner, and whitelist calls can be made, and whitelist contacts can also call back. The control operation client can effectively control the security of the terminal, and the terminal cannot be released after the policy is issued.

Fig. 5 is an architecture diagram of a voice communication system based on the above-mentioned private network communication system provided by an embodiment of the present invention. This system is mainly composed of LTE core network, distributed small base stations, and softswitch gateways. Among them, the communication system and communication frequency band of the internal private network communication should be well planned. Generally, a certain frequency band of an operator is selected for internal private network communication.

In the internal voice communication of the LTE private network, the calling smart terminal accesses the LTE core network through distributed small base stations, and paging to the called smart terminal through the network access control, data routing and forwarding processing of the LTE core network , forming a local voice communication loopback network. The LTE private network composed of LTE core network and distributed small base stations is connected to the operator's fixed-line network through the E1 interface of the softswitch gateway to realize mutual communication inside and outside the prison.

Further, Fig. 6 is a diagram of a cluster scheduling system architecture in a management and control communication system provided by an embodiment of the present invention; the system is mainly composed of an LTE core network, distributed small base stations, a cluster scheduling server, and a cluster scheduling operation platform. The LTE private network inside the prison mainly uses the cluster scheduling server to realize the cluster intercom function. The mobile terminal needs to install an independent intercom APP, which can realize the intercom function between the mobile phone and the mobile terminal, and can realize group calls, group calls, and monitoring through the cluster scheduling operation platform. , meeting, recording and other scheduling management functions.

Cluster intercom: The intercom function is integrated in the safe mode, and the prison guards communicate internally through the intercom function.

1. Support multiple intercom call methods of dual-system intelligent terminals, including support for group call, single call and other call methods. The system can realize dispatching and commanding functions, and supports priority settings such as group priority, member priority, business priority, and talk right preemption. Support group call function in case of emergency of group members. Support high-priority group calls to forcibly interrupt low-priority group calls, and automatically restore the default group intercom after the high-priority group calls end;

2. Provide emergency command and dispatch capabilities, platform management personnel on duty can initiate intercom calls across the network (provincial bureaus can communicate with each prison management platform, and grassroots units can only communicate with the prison users). Dispatch watch attendants on multiple calls at the same time. Calls that can be initiated and participated include: individual calls, group calls (temporary group calls, predefined group calls), etc., and have the highest outgoing authority.

Through the management and control operation platform, the addition and deletion of whitelist users can be realized. Moreover, the communication management and control strategy can also be configured through the management and control operation platform. The strategies include: only allow voice or SMS or data services, allow voice and SMS services, and allow voice and data Business, etc., specific policies and data are stored in the communication management and control server. Each user unit, according to the "white list" that independently manages the authorized communication, can increase or decrease in time as needed; in addition, only the mobile phone numbers of operators that are allowed to communicate openly can apply for authorization, and the mobile phone numbers of other non-authorized operators cannot authorized. For example, for whitelist users, only the mobile phone numbers of China Mobile, China Unicom or China Telecom can be authorized to communicate normally.

Based on the same inventive concept, an embodiment of the present invention further provides a schematic flowchart of a method for implementing private network communication, as shown in FIG. 7 , and the specific implementation method includes:

Step S201, the management and control server in the mobile communication private network receives the management and control strategy sent by the management and control operation client, wherein the management and control strategy is used to control the use authority of at least one functional object in the terminal;

Step S202, the management and control server sends a management and control policy to the terminals in the control area of the management and control server.

Further, when the terminal enters the control area of the management server, the management server sends a first switching instruction to the terminal, and the first switching instruction is used to instruct the terminal to work in a safe mode, wherein the The security mode refers to a mode in which each functional object inside the terminal can be controlled by the management and control server.

Further, when the terminal leaves the control area of the management server, the management server sends a second switching instruction to the terminal working in safe mode, wherein the second switching instruction is used to instruct the terminal to exit safe mode.

Specifically, the private network communication system applicable to the management and control server is consistent with the above, and the implementation process of the private network communication is consistent with the above method, so details are not repeated here.

Based on the same technical concept, embodiments of the present invention also provide a terminal, which can execute the above method embodiments. The terminal provided by the embodiment of the present invention is shown in FIG. 8, and includes: a receiving unit 301 and a processing unit 302, wherein:

The receiving unit 301 is configured to receive a management and control strategy issued by a management and control server in the private mobile communication network, wherein the management and control strategy is used to control the use authority of at least one functional object in the terminal;

The processing unit 302 is configured to communicate in the private mobile communication network according to the management and control policy.

Further, the receiving unit 301 is also configured to receive a first switching instruction issued by the management and control server of the mobile communication private network;

In addition, the terminal further includes: a switching unit 303, configured to work in a safe mode according to the first switching instruction, wherein the safe mode refers to a function in which each functional object inside the terminal can be controlled by the management server. model.

Further, the receiving unit 301 is further configured to receive a second switching instruction issued by the management server, wherein the second switching instruction is received when the terminal leaves the control area of the management server;

The switching unit 303 is further configured to exit the security mode according to the second switching instruction.

Further, the terminal further includes: a determining unit 304, configured to determine that the terminal satisfies the operation condition of the management and control policy, wherein the operation condition is that the terminal is located in the In the control area of the above-mentioned management and control server.

Further, the processing unit 302 is specifically configured to: access the private mobile communication network through the dedicated access point APN configured on the private mobile communication network to perform communication.

Based on the same technical concept, the embodiment of the present invention also provides a management and control server, which can execute the above method embodiment, the management and control server is located in the mobile communication private network, as shown in Figure 9, including:

The receiving unit 401 is configured to receive a management and control policy sent by the management and control operation client, wherein the management and control policy is used to control the use authority of at least one functional object in the terminal;

The sending unit 402 is configured to send the management policy to the terminals in the area controlled by the management server.

Further, the sending unit 402 is also configured to send a first switching instruction to the terminal, the first switching instruction is used to instruct the terminal to work in a safe mode, where the safe mode refers to that the terminal A mode in which each internal functional object can be controlled by the management server.

Further, the sending unit 402 is further configured to send a management and control policy to the terminal working in the security mode, where the management and control policy is used to control the usage authority of at least one functional object in the terminal.

To sum up, the embodiment of the present invention provides a new type of mobile communication private network. When a terminal enters the area covered by the private network by swiping a card, it is controlled by the management and control server of the private network, and the management and control server issues a management and control policy to the terminal to control The use rights of various functional objects of the terminal enable the terminal to connect to the private network with limited functions. Since the private network communication has channel encryption capabilities, it completely blocks the channel that may leak data. It can be seen that this mobile communication On the premise of ensuring the safety and stability of special scenes such as prisons, the private network can realize the normal voice communication function of terminals such as mobile phones, so that legitimate mobile phone users in special places can realize normal communication under controllable conditions.

The present invention is described with reference to flowchart illustrations and/or block diagrams of methods, apparatus (systems), and computer program products according to embodiments of the invention. It should be understood that each procedure and/or block in the flowchart and/or block diagram, and a combination of procedures and/or blocks in the flowchart and/or block diagram can be realized by computer program instructions. These computer program instructions may be provided to a general purpose computer, special purpose computer, embedded processor, or processor of other programmable data processing equipment to produce a machine such that the instructions executed by the processor of the computer or other programmable data processing equipment produce a An apparatus for realizing the functions specified in one or more procedures of the flowchart and/or one or more blocks of the block diagram.

These computer program instructions may also be stored in a computer-readable memory capable of directing a computer or other programmable data processing apparatus to operate in a specific manner, such that the instructions stored in the computer-readable memory produce an article of manufacture comprising instruction means, the instructions The device realizes the function specified in one or more procedures of the flowchart and/or one or more blocks of the block diagram.

These computer program instructions can also be loaded onto a computer or other programmable data processing device, causing a series of operational steps to be performed on the computer or other programmable device to produce a computer-implemented process, thereby The instructions provide steps for implementing the functions specified in the flow chart or blocks of the flowchart and/or the block or blocks of the block diagrams.

While preferred embodiments of the invention have been described, additional changes and modifications to these embodiments can be made by those skilled in the art once the basic inventive concept is appreciated. Therefore, it is intended that the appended claims be construed to cover the preferred embodiment as well as all changes and modifications which fall within the scope of the invention.

Obviously, those skilled in the art can make various changes and modifications to the present invention without departing from the spirit and scope of the present invention. Thus, if these modifications and variations of the present invention fall within the scope of the claims of the present invention and their equivalent technologies, the present invention also intends to include these modifications and variations.

Claims (16)

1. A method for realizing private network communication, characterized in that the method comprises: The terminal receives a management and control strategy issued by a management and control server in the mobile communication private network, wherein the management and control strategy is used to control the use authority of at least one functional object in the terminal; The terminal communicates in the private mobile communication network according to the management and control policy. 2. The method according to claim 1, wherein before the terminal receives the management and control strategy issued by the management and control server in the mobile communication private network, it also includes: The terminal receives a first switching instruction issued by the management and control server of the mobile communication private network; The terminal works in a security mode according to the first switching instruction, wherein the security mode refers to a mode in which each functional object inside the terminal can be controlled by the management server. 3. The method of claim 2, further comprising: The terminal receives a second switching instruction issued by the management server, where the second switching instruction is received when the terminal leaves the control area of the management server; The terminal exits the security mode according to the second switching instruction. 4. The method according to claim 1 or 2, wherein the terminal further comprises: The terminal determines that the operation condition of the management and control policy is satisfied, wherein the operation condition is that the terminal is located in the control area of the management and control server within the effective time period of the management and control policy. 5. The method according to claim 1, wherein the terminal communicates in the mobile communication private network according to the management and control strategy, comprising: The terminal accesses the private mobile communication network through the dedicated access point APN configured by the private mobile communication network for communication. 6. A method for implementing private network communication, characterized in that the method comprises: The management and control server in the mobile communication private network receives the management and control strategy sent by the management and control operation client, wherein the management and control strategy is used to control the use authority of at least one functional object in the terminal; The management and control server sends the management and control policy to the terminals in the area controlled by the management and control server. 7. The method of claim 6, further comprising: The management and control server sends a first switching instruction to the terminal, the first switching instruction is used to instruct the terminal to work in a safe mode, where the safe mode means that each functional object inside the terminal can be controlled by Describes the mode of control of the management server. 8. The method of claim 6, further comprising: The management and control server sends a second switching instruction to the terminal working in the security mode, wherein the second switching instruction is used to instruct the terminal to exit the security mode, and the second switching instruction is for the terminal to leave the Received when the control area of the control server is described. 9. A terminal, characterized in that the terminal comprises: The receiving unit is configured to receive a management and control strategy issued by a management and control server in the mobile communication private network, wherein the management and control strategy is used to control the use authority of at least one functional object in the terminal; A processing unit, configured to communicate in the private mobile communication network according to the management and control policy. 10. The terminal according to claim 9, wherein the receiving unit is further configured to receive a first switching instruction issued by the management and control server of the mobile communication private network; The terminal also includes: The switching unit is configured to work in a safe mode according to the first switching instruction, wherein the safe mode refers to a mode in which each functional object inside the terminal can be controlled by the management server. 11. The terminal according to claim 10, wherein the receiving unit is further configured to receive a second switching instruction issued by the management server, wherein the second switching instruction is when the terminal leaves the Received when the control area of the control server is described; The switching unit is further configured to exit the security mode according to the second switching instruction. 12. The terminal according to claim 9 or 10, further comprising: The determining unit is configured to determine that the operation condition of the management and control policy is satisfied, wherein the operation condition is that the terminal is located in the control area of the management and control server within the effective time period of the management and control policy. 13. The terminal according to claim 9, wherein the processing unit is specifically configured to: The dedicated access point APN configured through the mobile communication private network is connected to the mobile communication private network for communication. 14. A management and control server, characterized in that the management and control server is located in a mobile communication private network, comprising: A receiving unit, configured to receive a management and control strategy sent by the management and control operation client, wherein the management and control strategy is used to control the use authority of at least one functional object in the terminal; A sending unit, configured to send the management and control policy to the terminals in the area controlled by the management and control server. 15. The management and control server according to claim 14, wherein the sending unit is further configured to: send a first switching instruction to the terminal, the first switching instruction is used to instruct the terminal to work in a safe mode, wherein the security mode refers to a mode in which each functional object inside the terminal can be controlled by the management server. 16. The management server according to claim 15, wherein the sending unit is further configured to: send a second switching instruction to the terminal, wherein the second switching instruction is used to instruct the terminal to exit the security mode, and the second switching instruction is received when the terminal leaves the control area of the management server.