CN107612941B

CN107612941B - Authority management method, device, equipment and storage medium

Info

Publication number: CN107612941B
Application number: CN201711043535.7A
Authority: CN
Inventors: 尚宇翔
Original assignee: Guangdong Genius Technology Co Ltd
Current assignee: Guangdong Genius Technology Co Ltd
Priority date: 2017-10-31
Filing date: 2017-10-31
Publication date: 2021-01-29
Anticipated expiration: 2037-10-31
Also published as: CN107612941A

Abstract

The embodiment of the invention discloses a method, a device, equipment and a storage medium for authority management, wherein the authority management method comprises the following steps: when an account of a primary device is stored in a secondary device, matching the account of the primary device with a preset account set, wherein the preset account set comprises an identification code and a characteristic identification of the primary device; when the matching is successful, distributing a preset authority for the main equipment; and when receiving a control instruction sent by the main equipment, responding to the control instruction according to the preset authority of the main equipment. The invention can realize the operation of the user and eliminate the potential safety hazard.

Description

Authority management method, device, equipment and storage medium

Technical Field

The embodiment of the invention relates to the technical field of wireless communication, in particular to a method and a system for managing authority.

Background

In the internet era, the connection among different devices is established through modes such as two-dimensional codes, Bluetooth and Near Field Communication (NFC), so that the intelligent operations such as palm payment and remote control can be completed anytime and anywhere, and the life is more and more convenient.

However, data transmission is performed between the current master device and the current slave device through binding, the method is simple and fast to operate, and does not need any verification behavior, but when the slave devices are bound to a plurality of master devices, malicious operation caused by the authority management problem is easy to occur, for example, in an intelligent home, a user is bound with the home device through an intelligent mobile phone and sets the state of the home device through an intelligent terminal, when other intelligent terminals are bound with the home device, the state of the home device can also be set, if the home device does not have any authority setting, the change behavior of other intelligent terminals can be accepted, and the change behavior of other intelligent terminals can even be malicious operation, which causes inconvenience in use of the user and potential safety hazard.

Disclosure of Invention

The invention provides a method, a device, equipment and a storage medium for authority management, which are convenient for a user to operate and eliminate potential safety hazards.

In a first aspect, an embodiment of the present invention provides a method for rights management, including:

when an account of a primary device is stored in a secondary device, matching the account of the primary device with a preset account set, wherein the preset account set comprises an identification code and a characteristic identification of the primary device;

when the matching is successful, distributing a preset authority for the main equipment;

and when receiving a control instruction sent by the main equipment, responding to the control instruction according to the preset authority of the main equipment.

In a second aspect, an embodiment of the present invention further provides an apparatus for rights management, including:

the account matching module is used for matching an account of the primary device with a preset account set when the account of the primary device is stored in the secondary device, wherein the preset account set comprises an identification code and a characteristic identifier of the primary device;

the preset authority distributing module is used for distributing preset authority to the main equipment when the matching is successful;

and the response control instruction module is used for responding to the control instruction according to the preset authority of the main equipment when receiving the control instruction sent by the main equipment.

In a third aspect, an embodiment of the present invention further provides an apparatus, including:

one or more processors;

storage means for storing one or more programs;

communication means for establishing communication with a master device;

when the one or more programs are executed by the one or more processors, the one or more processors are caused to implement the rights management method of any of the first aspects.

In a fourth aspect, embodiments of the present invention also provide a storage medium containing computer-executable instructions, which when executed by a computer processor, are configured to perform the method of rights management according to any one of the first aspect.

According to the embodiment of the invention, the main equipment account stored in the slave equipment is matched with the preset account set, and the main equipment account which is successfully matched is allocated with the preset authority, so that when the slave equipment receives the control instruction sent by the main equipment, the control instruction can be responded according to the preset authority of the main equipment, random tampering and malicious operation of the slave equipment by the main equipment are avoided, the operation of a user is facilitated, and potential safety hazards are eliminated.

Drawings

Fig. 1 is a flowchart of a method for rights management according to an embodiment of the present invention;

fig. 2 is a flowchart of a method for rights management according to a second embodiment of the present invention;

fig. 3 is a schematic structural diagram of a device for rights management according to a third embodiment of the present invention;

fig. 4 is a schematic structural diagram of an apparatus according to a fourth embodiment of the present invention.

Detailed Description

The present invention will be described in further detail with reference to the accompanying drawings and examples. It is to be understood that the specific embodiments described herein are merely illustrative of the invention and are not limiting of the invention. It should be further noted that, for the convenience of description, only some of the structures related to the present invention are shown in the drawings, not all of the structures.

It should also be noted that before discussing exemplary embodiments in greater detail, it should be noted that some exemplary embodiments are described as processes or methods depicted as flowcharts. Although a flowchart may describe the operations (or steps) as a sequential process, many of the operations can be performed in parallel, concurrently or simultaneously. In addition, the order of the operations may be re-arranged. The process may be terminated when its operations are completed, but may have additional steps not included in the figure. The processes may correspond to methods, functions, procedures, subroutines, and the like.

Example one

Fig. 1 is a flowchart of a method for rights management according to an embodiment of the present invention, where the method is applicable to rights management between a master device and a slave device, and the method may be executed by a device for rights management, where the device may be implemented by software and/or hardware, and may be generally integrated in a slave device (for example, an intelligent device such as a smart phone, a smart television, a smart air conditioner, and the like). The method of the embodiment specifically comprises the following steps:

and 110, when the account of the primary device is stored in the secondary device, matching the account of the primary device with a preset account set, wherein the preset account set comprises an identification code and a characteristic identification of the primary device.

The identification code of the main device is a specific code when the main device leaves a factory, and the feature identifier of the main device is a mark capable of showing the feature of the main device, for example, if the main device is a smart phone, both the factory code of the smart phone and the phone number of the smart phone can form a preset account set.

It is understood that before the slave device stores the account number of the new master device, at least one account number of the master device is already stored in the slave device or the account number of the master device is not already stored in the slave device. When the account number of the primary device is stored in the slave device, the account number includes at least one stored account number of the primary device and a new account number of the primary device.

And step 120, when the matching is successful, distributing preset authority for the main equipment.

The primary device account is matched with a preset account set, and two conditions of success and failure of matching can exist. In an optional implementation manner of this embodiment, the primary device account with failed matching is rejected, and when the matching fails, the primary device account may be automatically deleted or deleted according to an operation of a user. Or when the matching fails, adding the account of the primary device into a blacklist, and then, when the slave device allows the binding request sent by the primary device, only removing the account of the primary device from the blacklist without adding the related information of the primary device. And when the matching is successful, the preset authority can be allocated according to the overall characteristics of the successfully matched main equipment account, and the successfully allocated main equipment account can be added into a white list to allocate the preset authority to the main equipment account in the white list.

And step 130, when receiving the control instruction sent by the main device, responding to the control instruction according to the preset authority of the main device.

The preset authority of the master device can determine the level authority according to the sequence of the time of the account of the master device stored in the slave device, and can also set the level authority of the account of the master device according to user definition. For example, in a smart home, a user may bind a smart television to a smart phone, and assuming that there are 3 smart phones in the home, the sequence of the accounts of the primary device may be set according to the user's definition (e.g., the user's preference).

Further, the preset authority of the master device further includes a control authority, and the control authority may be a binding operation and a read-write request of the master device to the slave device, or a read-only request or a write-only request of the master device to the slave device. For example, a smart television is bound to 3 mobile phones of a home in a smart home, where the 3 mobile phones are a first-level mobile phone, a second-level mobile phone and a third-level mobile phone, respectively, and then the first-level mobile phone can control the permissions of the second-level mobile phone and the third-level mobile phone to be read-only requests, and then the second-level mobile phone and the third-level mobile phone cannot write the slave device, that is, the second-level mobile phone and the third-level mobile phone cannot change the setting of the smart television for the first-level mobile phone, so that the setting of the smart television for the first-level mobile phone can be ensured, and inconvenience in use of a user due to random change of the smart television is avoided.

Further, in any embodiment of the present invention, the communication between the master device and the slave device may be established through a network, bluetooth, or NFC, and optionally, the communication between the master device and the slave device is NFC, and both the master device and the slave device have NFC chips.

It should be noted that the master device and the slave device establish communication through NFC, and NFC communication is a short-distance high-frequency radio communication technology, and can quickly complete data transmission and read-write modes within a centimeter distance, while the memory space of the NFC chip itself is relatively small. Therefore, when the master device and the slave device establish a communication mode through NFC, a module dedicated to storing data, which is a data processing chip integrated on the slave device and independent from the NFC chip, and performs processing similar to a Micro Control Unit (MCU) for operating on data is also required in the slave device.

Further, the method of authority management is implemented by adding a Data Exchange Format (NDEF) record of an NFC chip with a fixed Format to the slave device, where the NDEF record includes an authority management field flag, a function setting word length, a function setting word, and account information, where:

the rights management field flag may be formed of any special word, such as rbac, by which the master device may be informed that the NDEF record is rights management.

The function setting word length can be defined by a standard, for example, the word length can be set to be 8 bits.

Each bit meaning of the function setting word can be self-defined, for example, when the word length is set to 8 bits, the function setting word can be set to be from high to low in sequence as follows: a new adding permission bit, a black/white list control bit, an NFC read/write control bit, a binding application of a new main device refusing/accepting and a 4-bit function switch, wherein the 4-bit function switch can be self-defined according to actual application.

The account information may include a primary device account and a secondary device account, and the number of accounts in each account category may not be unique, for example, the primary device is a smart phone, and may be a phone number and/or a factory code.

Illustratively, the master device and the slave device are both smart phones with NFC chips, account information is a phone number of the master device, when the master device and the slave device establish NFC communication, the master device sends the phone number to the slave device, the slave device performs matching through a preset account set, if the matching finds that the phone number of the master device is not in the preset account set, a new permission bit is an impermissible bit, and then the new permission bit is fed back to the master device for binding failure information; and if the mobile phone number of the main equipment is found in the preset account set through matching, newly adding permission bit permission, feeding the function setting words back to the main equipment by the slave equipment at the moment, and self-defining the configuration function by the main equipment according to 4-bit function switches in the function setting words at the moment.

Example two

Fig. 2 is a flowchart of a method for rights management according to a second embodiment of the present invention, which is optimized based on the second embodiment, and as shown in fig. 2, the method for rights management according to the second embodiment of the present invention includes the following specific steps:

step 210, when the account of the primary device is stored in the secondary device, matching the account of the primary device with a preset account set;

step 220, if the matching fails, setting the account of the primary equipment as a blacklist account; and if the matching is successful, setting the account number of the primary equipment as a white list account number.

The method comprises the following steps that a blacklist account and a white list account are understood in a general sense, and the blacklist account and the white list account can be changed, namely, when a master device in the blacklist account can bind a slave device, the master device is unbound, and the master device is added into the white list; and when the master equipment in the white list account can not bind the slave equipment, performing binding rejection operation on the master equipment, and adding the master equipment into the black list.

Step 230, when the matching is successful, distributing a preset authority for the main device;

step 240, determining the level of the master device according to the sequence of the communication established between the master device and the slave device;

it is understood that, the level of the master device is determined according to the sequence of the master device and the slave device establishing communication, the level of the master device establishing communication with the slave device first may be higher, the level of the master device establishing communication with the slave device later may be higher, or the level of the master device establishing communication with the slave device at an intermediate position in time may be higher, which is not limited herein. Typically, for example: the first master device establishing communication with the slave device is the highest master device, the second master device establishing communication with the slave device is the first high-level master device, the third master device establishing communication with the slave device is the second high-level master device, and so on.

Further, step 240 further comprises:

if the account number of the primary device is stored in the slave device, determining the primary device as the high-level primary device; and if the account number of the master device is not stored in the slave device, determining the master device which first establishes communication with the slave device as the high-level master device.

Step 250, distributing a control authority for controlling the operation authority of the low-level main equipment to the high-level main equipment; the control authority comprises that the high-level master device can control the binding operation and the read-write request operation of the low-level master device on the slave device.

It can be understood that the operation authority of the master device at a high level for controlling the master device at a low level may be controlled in a stepwise hierarchical manner, or may be controlled entirely at a highest level, or may be controlled entirely in a stepwise manner. Taking the above example as an example: step-by-step hierarchical control, namely, the master device at the highest level controls the master device at the first level, the master device at the first level controls the master device at the second level, and so on; the master device of the second highest level controls the master device of the first highest level and the master device of the second highest level, that is, all the master devices of the second highest level are controlled by the master device of the highest level; or, the master device of the highest level controls the master device of the first highest level and the master device of the second highest level, the master device of the first highest level controls the master device of the second highest level, and so on, that the master device of the higher level controls all the master devices lower than the own level.

And step 260, when receiving the control instruction sent by the main equipment, responding to the control instruction according to the preset authority of the main equipment.

In this embodiment, the primary device account stored in the slave device may be matched with a preset account set, the primary device account that fails to be matched is set as a blacklist account, and the primary device account that succeeds in being matched is set as a whitelist account, so that the preset account set is divided into a blacklist and a whitelist, and when a primary device account matching result changes later, primary device information does not need to be added again. Meanwhile, the preset authority of the account of the main equipment is graded and controlled, so that when the slave equipment receives the control instruction sent by the main equipment, the control instruction can be responded according to the preset authority of the main equipment, random tampering and malicious operation of the slave equipment by the main equipment are avoided, the operation of a user is facilitated, and potential safety hazards are eliminated.

EXAMPLE III

Fig. 3 is a schematic structural diagram of an apparatus for rights management according to a third embodiment of the present invention, where the apparatus includes an account matching module 310, a preset rights assignment module 320, and a response control instruction module 330, where:

the account matching module 310 is configured to match, when an account of the primary device is stored in the secondary device, the account of the primary device with a preset account set, where the preset account set includes an identification code and a feature identifier of the primary device;

the preset authority distributing module 320 is used for distributing preset authority to the main device when the matching is successful;

the response control instruction module 330 is configured to, when receiving a control instruction sent by the host device, respond to the control instruction according to a preset authority of the host device.

Further, in the apparatus, the master device and the slave device are both devices having near field communication NFC chips.

The device also includes:

the blacklist setting module is used for setting the account of the primary equipment as a blacklist account if the matching fails;

and the white list setting module is used for setting the account number of the primary equipment as the account number of the white list if the matching is successful.

Further, the preset authority distributing module comprises a grading submodule and an authority distributing submodule, wherein:

the grading submodule is used for determining the grade of the master equipment according to the sequence of communication established between the master equipment and the slave equipment;

the authority distribution submodule is used for distributing control authority for controlling the operation authority of the main equipment of the lower level to the main equipment of the higher level; the control authority comprises that a high-level master device can control the binding operation and the read-write request operation of a low-level master device on the slave device;

optionally, the hierarchical sub-module is specifically configured to: if the account of the primary device is stored in the secondary device, determining the primary device as a high-grade primary device; and if the account number of the master device is not stored in the slave device, determining the first master device establishing communication with the slave device as a high-level master device.

The product can execute the method provided by any embodiment of the invention, and has corresponding functional modules and beneficial effects of the execution method.

Example four

Fig. 4 is a schematic structural diagram of an apparatus according to a fourth embodiment of the present invention, as shown in fig. 4, the apparatus includes a processor 40, a memory 41, an input device 42, an output device 43, and a communication device 44; the number of processors 40 in the device may be one or more, and one processor 40 is taken as an example in fig. 4; the processor 40, the memory 41, the input means 42, the output means 43 and the communication means 44 in the device may be connected by a bus or other means, which is exemplified in fig. 4.

The memory 41 is used as a computer-readable storage medium, and can be used for storing software programs, computer-executable programs, and modules, such as program instructions/modules corresponding to the method for rights management in the embodiment of the present invention (for example, the account number matching module 310, the preset rights assignment module 320, and the response control instruction module 330 in the device for rights management). The processor 40 executes various functional applications and data processing of the electronic device by executing software programs, instructions, and modules stored in the memory 41, that is, realizes the above-described bill-oriented recognition method.

The memory 41 may mainly include a storage program area and a storage data area, wherein the storage program area may store an operating system, an application program required for at least one function; the storage data area may store data created according to the use of the terminal, and the like. Further, the memory 41 may include high speed random access memory, and may also include non-volatile memory, such as at least one magnetic disk storage device, flash memory device, or other non-volatile solid state storage device. In some examples, memory 41 may further include memory located remotely from processor 40, which may be connected to devices/terminals/servers via a network. Examples of such networks include, but are not limited to, the internet, intranets, local area networks, mobile communication networks, and combinations thereof.

The input device 42 is operable to receive input numeric or character information and to generate key signal inputs relating to user settings and function controls of the apparatus. The output device 43 may include a display device such as a display screen. The communication means 44 is used for establishing communication between the slave device and the master device, and may be NFC communication, bluetooth communication, or the like.

EXAMPLE five

An embodiment of the present invention further provides a computer-readable storage medium, on which a computer program is stored, where the computer program, when executed by a processor, implements a method for rights management, where the method includes:

Of course, the embodiments of the present invention provide a computer-readable storage medium, whose computer-executable instructions can perform, but are not limited to, the relevant operations in the method for rights management provided in any embodiments of the present invention.

Further, it is clear to those skilled in the art that the present invention can be implemented by software and necessary general hardware, and certainly, by hardware, but the former is a better implementation in many cases. With this understanding, the technical solutions of the present invention may be embodied in the form of a software product, which can be stored in a computer-readable storage medium, such as a floppy disk, a Read-Only Memory (ROM), a Random Access Memory (RAM), a flash Memory (FLA step H), a hard disk or an optical disk of a computer, and the like, and includes several instructions for enabling a computer device (which may be a personal computer, a server, or a network device) to execute the methods according to the embodiments of the present invention.

It should be noted that, in the embodiment of the apparatus for rights management, the included units and modules are only divided according to functional logic, but are not limited to the above division as long as the corresponding functions can be implemented; in addition, specific names of the functional units are only for convenience of distinguishing from each other, and are not used for limiting the protection scope of the present invention.

It is to be noted that the foregoing is only illustrative of the preferred embodiments of the present invention and the technical principles employed. It will be understood by those skilled in the art that the present invention is not limited to the particular embodiments described herein, but is capable of various obvious changes, rearrangements and substitutions as will now become apparent to those skilled in the art without departing from the scope of the invention. Therefore, although the present invention has been described in greater detail by the above embodiments, the present invention is not limited to the above embodiments, and may include other equivalent embodiments without departing from the spirit of the present invention, and the scope of the present invention is determined by the scope of the appended claims.

Claims

1. a method for rights management, is characterized in that, comprises:

When the account of the master device is stored in the slave device, the account of the master device is matched with a preset account set, wherein the preset account set includes the identification code and feature identifier of the master device;

When the matching is successful, assign a preset authority to the master device;

When receiving the control instruction sent by the master device, responding to the control instruction according to the preset authority of the master device;

When the matching is successful, assign a preset authority to the master device, including:

Determine the level of the master device according to the sequence of establishing communication between the master device and the slave device;

Assign a control authority to control the operation authority of a lower-level master device to a high-level master device; wherein, the control authority includes that the high-level master device can control the binding of the lower-level master device to the slave device operation and read-write request operation, the control of the operation authority of the low-level master device by the high-level master device includes: level-by-level hierarchical control and level-by-level full control;

It also includes: generating a data exchange format NDEF record, the NDEF record including a rights management field flag, a function setting word length, a function setting word and account information;

Wherein, the function setting words are sequentially set as: newly added permission bit, blacklist or whitelist control bit, near field communication NFC read and write control bit, reject or accept the binding application and function switch of the new master device;

When the account of the master device is stored in the slave device, after matching the account of the master device with the preset account set, the method further includes:

If the matching fails, the master device account is set as a blacklist account; if the matching is successful, the master device account is set as a whitelist account.

2 . The method according to claim 1 , wherein the master device and the slave device are both devices having a near field communication (NFC) chip. 3 .

3. The method according to claim 1, wherein the determining the level of the master device according to the sequence of establishing communication between the master device and the slave device comprises:

If there is an account of the master device stored in the slave device, the master device is determined as the high-level master device; if the slave device does not store the account of the master device, the first device is determined as the master device. One of the master devices that establishes communication with the slave device is determined to be the high-level master device.

4. A device for rights management, comprising:

an account matching module, configured to match the account of the master device with a preset account set when the slave device stores the account of the master device, wherein the preset account set includes the identification code and the feature identifier of the master device ;

a preset authority assignment module, configured to assign a preset authority to the master device when the matching is successful;

a control command response module, configured to respond to the control command according to the preset authority of the master device when receiving the control command sent by the master device;

The preset authority assignment module includes:

a grading sub-module, configured to determine the level of the master device according to the sequence of establishing communication between the master device and the slave device;

The authority assignment sub-module is used to assign the control authority to control the operation authority of the lower-level master equipment to the high-level master equipment; wherein, the control authority includes that the high-level master equipment can control the low-level master equipment to The binding operation and read-write request operation of the slave device, the control of the operation authority of the low-level master device by the high-level master device includes: level-by-level hierarchical control and level-by-level full control;

Also include a module for generating a data exchange format NDEF record, the NDEF record comprising a rights management field flag, a function setting word length, a function setting word and account information;

Wherein, the function setting words are sequentially set as: newly added permission bit, blacklist or whitelist control bit, near field communication NFC read-write control bit, reject or accept the binding application and function switch of the new master device;

The blacklist setting module is used to set the master device account as a blacklist account if the matching fails;

The whitelist setting module is used to set the master device account as a whitelist account if the match is successful.

5. The device according to claim 4, wherein:

Both the master device and the slave device are devices with a near field communication NFC chip.

6 . The apparatus according to claim 4 , wherein the grading submodule is specifically configured to: if the slave device stores an account of the master device, determine the master device as the master device. 7 . A high-level master device; if the slave device does not store the account of the master device, the first master device that establishes communication with the slave device is determined as the high-level master device.

7. A device, characterized in that the device comprises:

one or more processors;

a storage device for storing one or more programs;

a communication device for establishing communication with the master device;

When the one or more programs are executed by the one or more processors, the one or more processors implement the rights management method according to any one of claims 1-3.

8. A storage medium containing computer-executable instructions, wherein the computer-executable instructions are used to execute the rights management method according to any one of claims 1-3 when the computer-executable instructions are executed by a computer processor.