CN111506893A - External equipment management method and device, electronic equipment and storage medium - Google Patents

Abstract

The invention discloses an external device management method, device, electronic device and storage medium. The method includes: when an external device is detected, acquiring identity information of the external device; Verification; if the verification is passed, the use of external devices is allowed; if the verification fails, the use of external devices is prohibited; when an external device is detected, the method uses the group policy with the management list of external devices to verify the identity information of the external device , only when the identity information of the external device is verified, the external device can be allowed to run, and then the external device can be used to achieve precise management of a single external device through group policy, that is, to achieve the smallest unit of external device management The process can meet various personalized needs of users, and improve the convenience, reliability and adaptability of external device management.

Description

An external device management method, device, electronic device and storage medium

technical field

The present invention relates to the field of communication technologies, and in particular, to an external device management method, device, electronic device and storage medium.

Background technique

With the widespread application of Internet technology, the degree of electronization in all walks of life is getting higher and higher. Correspondingly, data security is becoming more and more important. At present, many enterprises have implemented intranet isolation, so that users cannot directly send confidential data to the external network, which ensures data security to a certain extent. However, intranet isolation cannot completely prevent the leakage of confidential data. This is because users can also transfer confidential data through external devices such as U disk copy, external mobile network card, printer printing, etc. to a major hazard.

SUMMARY OF THE INVENTION

The purpose of the present invention is to provide an external device management method, device, electronic device and storage medium. By setting the external device management list in the group policy, precise management of a single external device can be realized and various personalized needs of users can be met. , to improve the convenience, reliability and adaptability of external device management.

In order to solve the above-mentioned technical problems, the present invention provides an external device management method, including:

When an external device is detected, obtain the identity information of the external device;

Verify the identity information by using the external device management list in the group policy;

If the verification is passed, the external device is allowed to be used;

If the verification fails, the use of the external device is prohibited.

In a possible implementation manner, the external device management method further includes:

When it is detected that the group policy is modified, the unmodified group policy is re-delivered.

In another possible implementation manner, before the acquiring the identity information of the external device when the external device is detected, the method further includes:

creating said external device management list;

The external device management list is set into the group policy, and the group policy is delivered.

In yet another possible implementation manner, the creating the external device management list includes:

Obtain the identity information of the target external device;

The external device management list is formed according to the identity information of the target external device.

In yet another possible implementation manner, the acquiring the identity information of the target external device includes:

The identity information of the target external device is acquired by using the device information enumeration technology.

In yet another possible implementation manner, the acquiring the identity information of the target external device includes:

Use the device manager to obtain the identity information of the target external device.

In another possible implementation manner, before the delivering the group policy, the method further includes:

Setting the selected prohibited external device type into the group policy; wherein the external device type includes at least one of a storage device, a network device, a Bluetooth device, a camera, and a printer.

In another aspect, the present invention also provides an apparatus for managing external devices, including:

a peripheral device identity information acquisition module, configured to acquire the identity information of the external device when an external device is detected;

The peripheral device management module is configured to use the external device management list in the group policy to verify the identity information; if the verification is passed, the external device is allowed to be used; if the verification fails, the use of the external device is prohibited.

In another aspect, the present invention also provides an electronic device, comprising:

memory for storing computer programs;

The processor is configured to implement the above-mentioned external device management method when executing the computer program.

In another aspect, the present invention also provides a storage medium, where computer-executable instructions are stored in the storage medium, and when the computer-executable instructions are loaded and executed by a processor, the above-mentioned external device management method is implemented.

It can be seen that when an external device is detected, the method obtains the identity information of the external device, and uses the group policy with the external device management list to verify the identity information of the external device. Only when the identity information of the external device passes the verification, Only then can the external device be allowed to run, and then the external device can be used to realize the management of the external device; that is, by setting the external device management list in the group policy, the management of each external device can be realized, and then the management of each external device can be realized through the group policy. The precise management of a single external device realizes the management process for the smallest unit of external devices, which can meet the various personalized needs of users and improve the convenience, reliability and adaptability of external device management.

Correspondingly, the present invention also provides an external device management device, an electronic device and a storage medium, which have the above beneficial effects, and are not repeated here.

Description of drawings

In order to explain the embodiments of the present invention or the technical solutions in the prior art more clearly, the following briefly introduces the accompanying drawings that need to be used in the description of the embodiments or the prior art. Obviously, the accompanying drawings in the following description are only It is an embodiment of the present invention. For those of ordinary skill in the art, other drawings can also be obtained according to the provided drawings without creative work.

1 is a schematic diagram of a hardware composition framework to which a method for managing external devices provided by an embodiment of the present invention is applicable;

2 is a flowchart of a method for managing external devices provided by an embodiment of the present invention;

3 is a flowchart of a method for setting a group policy according to an embodiment of the present invention;

4 is a schematic diagram of a detailed information interface provided by an embodiment of the present invention;

FIG. 5 is a schematic diagram of a peripheral device management and control rule interface provided by an embodiment of the present invention;

6 is a structural block diagram of an apparatus for managing external devices provided by an embodiment of the present invention;

7 is a structural block diagram of an electronic device according to an embodiment of the present invention;

FIG. 8 is a schematic diagram of a specific structure of an electronic device provided by an embodiment of the present invention.

Detailed ways

In order to make the purposes, technical solutions and advantages of the embodiments of the present invention clearer, the technical solutions in the embodiments of the present invention will be clearly and completely described below with reference to the accompanying drawings in the embodiments of the present invention. Obviously, the described embodiments These are some embodiments of the present invention, but not all embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those of ordinary skill in the art without creative efforts shall fall within the protection scope of the present invention.

Since data security is very important to users, especially enterprise users, once confidential data is leaked, it will bring serious losses to users. In the related art, the leakage of confidential data is generally avoided by the technical means of intranet blocking. However, intranet isolation cannot completely prevent the leakage of confidential data. This is because users can also transfer confidential data through external devices such as U disk copy, external mobile network card, printer printing, etc. to a major hazard. Therefore, in order to ensure data security, external devices used by users must be managed. The embodiments of the present invention implement precise management of external devices through a group policy with a management list of external devices, thereby solving the above problems.

For ease of understanding, the hardware components applicable to the solution corresponding to the external device management method of the present invention are first introduced. The embodiments of the present invention may be applied to a single electronic device, or may be all electronic devices in a local area network, and certainly may be all electronic devices designated by a user, such as all electronic devices in an intranet. It should be noted that the specific structure of the electronic device is not limited in the embodiment of the present invention, as long as it can execute the external device management method provided by the embodiment of the present invention. For example, the electronic device may be a PC (such as a desktop computer, a notebook computer, a tablet computer, an ultrabook, etc.), or a server. Referring to FIG. 1 below, an application scenario composed of n user computers, an AC control center, and a network is used as an example for description. As can be seen from FIG. 1 , the hardware composition framework may include: an AC control center 10 and n user computers 20 . The AC control center 10 may be a client device with administrator rights, or may be an administrator device directly, which is not limited. The AC control center 10 creates an external device management list according to the information input by the administrator; sets the external device management list into the group policy, and after the group policy setting is completed, sends the group policy to each designated user computer 20 . Each user computer 20 executes the group policy after receiving the group policy. When the user computer 20 executes the group policy, once it detects an external device, it needs to obtain the identity information of the external device, and use the external device management list in the group policy. The identity information is verified; if the verification is passed, the user computer 20 allows the use of the external device; if the verification fails, the user computer 20 prohibits the use of the external device. This enables precise management of external devices. It should be noted that: in this embodiment of the present invention, when data is exchanged between various devices, the network 30 used may be determined according to actual needs, and may be a wireless communication network, such as a mobile communication network or a WIFI network, or a wired communication network. Communication network; either a wide area network or a local area network when circumstances permit.

In combination with the above hardware components, please refer to FIG. 2 for details. FIG. 2 is a flowchart of an external device management method provided by an embodiment of the present invention; the method may include:

S101. When an external device is detected, acquire identity information of the external device.

It should be noted that the embodiment of the present invention does not limit the type of the external device, and the external device is relative to the internal device (generally used devices that users are allowed to use, such as input device, keyboard, mouse), for example, it can be Portable storage devices (such as U disks), external network devices (such as mobile data network cards), cameras, printers, scanners, Bluetooth devices, etc.

It can be understood that, the purpose of the embodiments of the present invention is to prevent users from transferring confidential data through an external device, resulting in leakage of confidential data, and bringing major hidden dangers to data security of users. Therefore, in the embodiment of the present invention, when the electronic device detects that it is connected to an external device, the external device needs to be verified, and only the verified external device is allowed to run, so as to avoid leakage of confidential data caused by running an unverified external device. Case. That is, when the electronic device detects that it is connected to an external device, it needs to determine whether the external device is an external device that can be used. Avoid the transfer of confidential data through unauthenticated external devices, resulting in the leakage of confidential data.

The embodiment of the present invention does not limit the method for detecting the external device, and the method is related to the type of the external device, as long as it can be determined whether the current electronic device is connected to the external device. For example, when the external device is a U-disk, if the U-disk is inserted into the electronic device, the U-disk will be powered on, and the controller in the U-disk will automatically send identification information to the electronic device. As long as the electronic device receives the identification information, that is, It can be considered that access to an external device is detected.

It should be noted that in the embodiment of the present invention, as long as the electronic device detects that an external device is connected, it will acquire the identity information of the external device, so as to verify the identity information by using the external device management list in the group policy to determine the identity information of the external device. Whether external devices are allowed to be used. This embodiment of the present invention does not limit the content of the identity information, as long as the external device can be uniquely identified. For example, the identity information may be a hardware ID (Identity document, identification number) of the external device. Since the embodiment of the present invention does not limit the content of the identity information, furthermore, the embodiment of the present invention does not limit the process of acquiring the identity information of the external device. For example, when the identity information of the external device is the hardware ID of the external device, the process of acquiring the identity information of the external device may be: using a device information enumeration technology to acquire the hardware ID of the external device. The identity information (eg hardware ID) of the external device may also be obtained by using the device manager. Of course, the device information enumeration technology and the device manager may also exist at the same time, and use these two methods to obtain the identity information of the external device. The device information enumeration technology may be HardwareID software, that is, a HardwareID tool. The HardwareID software can display the identification information of the relevant hardware. The embodiment of the present invention does not limit the implementation process of the HardwareID software. It can be enumerated by using the device information. A function (such as the SetupDiGetClassDevsA function) searches for the device information existing in the current electronic device. Device Manager is an administrative tool that you can use to manage the devices on your computer. For example, you can use Device Manager to view device properties, update device drivers, configure device settings, and uninstall devices.

S102 , verify the identity information by using the external device management list in the group policy.

Among them, Group Policy (Group Policy) refers to a feature on the Windows operating system that controls the working environment of user accounts and computer accounts. It mainly provides centralized management and configuration of user settings in the operating system, applications and Active Directory.

It can be understood that the embodiment of the present invention does not limit the content of the external device management list, as long as the identity information of the external device can be verified through the external device management list to determine whether to allow the use of the external device. For example, the external device management list can be a white list that records the identity information of external devices that are allowed to be used; it can also be a black list that records the identity information of external devices that are not allowed to be used; A whitelist of identities of external devices, and a blacklist of identities of external devices that are not allowed to be used. The embodiment of the present invention also does not limit the number of lists in the external device management list, that is, does not limit the number of identity information of external devices corresponding to the external device management list. The user (when the group policy is for multiple electronic devices, the user generally refers to the user with management rights) can set and modify the external device management list according to the actual situation, which improves the flexibility and convenience of external device management and satisfies the needs of users. of individual needs. For example, the user can add or delete the identity information in the external device management list according to the actual situation.

Correspondingly, the embodiment of the present invention does not limit the process of using the external device management list in the group policy to verify the identity information, which is related to the specific setting form of the external device management list. For example, if the external device management list is a white list that records the identity information of the external device that is allowed to be used, the process of using the external device management list in the group policy to verify the identity information may be: judging whether the identity information of the external device is In the external device management list in the group policy, if it exists, the verification is passed and the external device is allowed to be used. If not, the verification fails and the use of the external device is prohibited. For another example, if the external device management list is a blacklist that records the identity information of external devices that are prohibited from being used, the process of using the external device management list in the group policy to verify the identity information may be: judging the identity information of the external device. Whether it is in the external device management list in the group policy, if so, the verification fails and the use of the external device is prohibited. If not, the verification is passed and the external device is allowed to be used.

Further, since the identity information of each external device is different, even the corresponding identity information between external devices of the same type is not the same, that is, the identity information forms a one-to-one correspondence with a single external device. For example, the identity information corresponding to each U disk is also different. Therefore, in the embodiment of the present invention, the external device management list in the group policy can be used to verify the identity information of a single external device, and then the precise management of the single external device can be completed through the group policy. That is, the embodiment of the present invention realizes the The management process of the external equipment of the smallest unit can further meet the various needs of users, and improve the convenience, reliability and adaptability of external equipment management.

It should be noted that, in this embodiment of the present invention, in order to implement the management of the external device through the identity information of the external device, it is necessary to create an external device management list for verifying the identity information of the external device, and set the external device management list into the group policy, so that the issued group policy can manage a single external device according to the external device management list. That is, before executing the external device management method in this embodiment of the present invention, an external device management list may be created by its own electronic device, and the external device management list may be set in a group policy, and the group policy may be issued so that the electronic device can This Group Policy performs the external device management process. Of course, the embodiment of the present invention does not limit the process of creating an external device management list, setting the external device management list into a group policy, and delivering the execution subject of the group policy. It can also be created by other electronic devices (such as electronic devices that implement management functions for all electronic devices specified in the intranet), and setting the external device management list The group policy is issued, so that all the specified electronic devices execute the external device management process according to the group policy. That is, at this time, all the designated electronic devices only need to execute the external device management process according to the issued group policy.

It can be understood that, the process of creating an external device management list is not limited in this embodiment of the present invention. For example, a corresponding external device management list can be formed according to the acquired identity information of the target external device and the list attribute. For example, when the acquired list attribute of the identity information of the target external device is the identity information of the permitted external device, the formed external device management list is a white list that records the identity information of the permitted external device. When the acquired list attribute of the identity information of the target external device is the identity information of the prohibited external device, the formed external device management list is a blacklist that records the identity information of the prohibited external device. The embodiment of the present invention also does not limit the process of setting the external device management list into the group policy and issuing the group policy, as long as the electronic device issued to the group policy can use the group policy to perform the management of the external device The list can be used to manage external devices. For example, the external device management list is formed into a peripheral device management and control rule. When the peripheral device management and control rule is configured into the group policy, when the peripheral device management and control rule is referenced, the electronic device that receives the issued group policy will be reliable. You can set the group policy to realize the management process of external devices according to the group policy.

S103. If the verification is passed, the external device is allowed to be used.

S104. If the verification fails, the use of an external device is prohibited.

It should be noted that the embodiments of the present invention do not limit the manner in which the use of the external device is permitted and the manner in which the use of the external device is prohibited, as long as the use of the external device can be controlled. For example, an external device used for operation can run normally in the electronic device and enter a normal working state, while an external device that is prohibited from being used cannot run in the electronic device or enter a normal working state.

In the embodiment of the present invention, when an external device is detected, the identity information of the external device is acquired, and the identity information of the external device is verified by using a group policy with a management list of external devices, and only when the identity information of the external device passes the verification , the external device can be allowed to run, and then the external device can be used to realize the management of the external device. Further, because in the embodiment of the present invention, it can be determined whether the external network device is a mobile network card through the identity information of the external device, and then it can be disabled for a single network card peripheral device, so as to avoid the current requirement that the network card that the electronic device itself comes with cannot be prohibited. In the case of a mobile network card, when the mobile network card is to be disabled, it is impossible to distinguish whether the network card is a local network card or a mobile network card, and the related art can only choose not to manage the network card. This will create a data security breach. However, the embodiment of the present invention can realize the control of a single network card through the identity information of the network card, thereby solving the above problems. That is to say, in this embodiment of the present invention, only the mobile network card can be prohibited without affecting the use of the local network card through the identity information of the external device. That is, in the embodiment of the present invention, only a specific external device can be prohibited without affecting the use of other external devices through the identity information of the external device.

Based on the above technical solution, an embodiment of the present invention provides a method for managing external devices. The method can manage each external device by setting a management list of external devices in a group policy, and further realizes the management of a single external device through a group policy. The precise management of equipment can realize the external equipment management process for the smallest unit, can meet the various personalized needs of users, and improve the convenience, reliability and adaptability of external equipment management.

Based on the above embodiment, please refer to FIG. 3, which is a flowchart of a method for setting a group policy provided by an embodiment of the present invention; the process may include:

S201. Create an external device management list.

Because the embodiment of the present invention does not limit the number of lists in the external device management list, that is, does not limit the number of identity information of the target external device in the external device management list. In the embodiment of the present invention, the corresponding external device in the external device management list is referred to as a target external device. The user (when the group policy is for multiple electronic devices (such as in the intranet scenario), the user generally refers to the user with management rights) can set and modify the external device management list according to the actual situation, which improves the flexibility of external device management flexibility and convenience to meet the individual needs of users. For example, the user can add or delete the identity information in the external device management list according to the actual situation.

It should be noted that the embodiment of the present invention does not limit the process of creating the external device management list, as long as the external device management list can be formed according to the acquired identity information of the target external device. For example, the corresponding external device management list can be formed according to the acquired identity information of the target external device and the list attribute of the external device management list required by the user. For example, when the acquired list attribute of the identity information of the target external device is the identity information of the permitted external device, the formed external device management list is a white list that records the identity information of the permitted external device. When the acquired list attribute of the identity information of the target external device is the identity information of the prohibited external device, the formed external device management list is a blacklist that records the identity information of the prohibited external device.

It can be understood that, since the embodiment of the present invention does not limit the content of the identity information, furthermore, the embodiment of the present invention does not limit the process of acquiring the identity information of the target external device. For example, the process of obtaining the identity information of the target external device may be: using hardware ID software (such as HardwareID software, namely the HardwareID tool) to obtain the hardware ID of the target external device (that is, using the hardware ID as the identity information); or using device management The controller obtains the identity information (such as hardware ID) of the target external device. Of course, the hardware ID software and the device manager can also exist at the same time, and the identity information of the target external device can be obtained by using these two methods. Wherein, the HardwareID software can display the identification information of the relevant hardware, and the embodiment of the present invention does not limit the implementation process of the HardwareID software, which can search for the device information existing in the current electronic device by using the device information enumeration function (such as the SetupDiGetClassDevsA function). . Device Manager is an administrative tool that you can use to manage the devices on your computer. For example, you can use Device Manager to view device properties, update device drivers, configure device settings, and uninstall devices.

Further, the embodiment of the present invention does not limit the process of obtaining the hardware ID of the target external device by using the hardware ID software. For example, first open the HardwareID tool, then insert or connect the target external device that needs to obtain the hardware ID, and then enter the acquisition command in the HardwareID tool (for example, click the acquire button in the HardwareID tool), the hardware of the target external device will be displayed in the HardwareID tool. ID, the user can select the hardware ID information through a tool such as a mouse, that is, obtain the identity information of the target external device. The embodiment of the present invention also does not limit the process of acquiring the identity information of the target external device by using the device manager. For example, open the device manager (for example, after the electronic device enters the Windows operating system interface, press the windows key + R key of the keyboard, enter the command "devmgmt.msc" and press Enter to open the device manager of the machine), and then in Find the corresponding external device in the device type list of the device manager, check the properties of the external device, select the hardware ID in the property option in the detailed information list in the properties, and the corresponding display in the value (V) is the external device Hardware ID information of the device. The following takes the disk device as an external device as an example: first, open the device manager of the electronic device, select the target disk device in the disk drive, click the Properties button in the pop-up box, click the Details button in the pop-up interface, and then click the In the detailed information interface, select the hardware ID option in the option corresponding to the attribute (P), and the corresponding hardware ID information of the target disk device will be displayed in the first line of the list corresponding to the value (V). For details, please refer to Figure 4, which shows a schematic diagram of the final detailed information interface. The hardware ID information of the target disk device in Figure 4 is SCSI\Disk_WD_____WD3200BPVT-11HXZ01.0. When the target external device is a USB flash drive, you can first obtain the hardware ID value according to the above process, and then you need to select the parent system option in the selection item corresponding to the attribute (P) in the detailed information interface, and the corresponding value will be displayed in the value (V) The first line in the corresponding list displays the parent ID of the USB flash drive. Finally, the obtained hardware ID value and the parent ID are spliced together with commas to obtain the identity information corresponding to the USB flash drive.

S202. Set the external device management list into the group policy, and issue the group policy.

It should be noted that, in the embodiment of the present invention, the process of setting the external device management list into the group policy and issuing the group policy is not limited, as long as the electronic device issued to the group policy can use the group policy to execute The external device management list can be used to manage external devices. For example, the external device management list is formed into a peripheral device management and control rule, and then the peripheral device management and control rule is configured into the group policy. When the peripheral device management and control rule is referenced, the electronic device that receives the issued group policy will be reliable. You can set the group policy to realize the management process of external devices according to the group policy.

It can be understood that, in order to improve the convenience and flexibility of the external device management by the group policy in the embodiment of the present invention, an option of the type of external device prohibited from being used may also be added in the embodiment of the present invention, so that the user is more convenient. The use of a certain type of external equipment is prohibited. For example, when the user chooses to disable the external device corresponding to the storage device, the user cannot use any external device with a storage function, such as a U disk, in the electronic device. That is, when forming a group policy in this embodiment of the present invention, in addition to setting the external device management list, the selected prohibited external device types can also be set in the group policy; wherein, the external device types include storage devices, network devices, Bluetooth At least one of a device, a camera, and a printer. Of course, the type of the external device may not be limited to this, and may also include other types of external devices such as a scanner. That is, the embodiment of the present invention does not limit the types of external device types.

The embodiment of the present invention does not limit the process of setting the selected prohibited external device type into the group policy, as long as the function of adding the prohibited external device type in the group policy can be implemented. For example, the prohibited peripheral type option can be set in the peripheral control rule. Users can select the relevant prohibited type according to their actual needs, and then configure the peripheral control rule into the group policy. When the reference is made, the electronic device that receives the issued group policy will reliably set the group policy, so as to realize the management process of the external device according to the group policy. Of course, the embodiment of the present invention does not limit the specific content of the external device management and control rules, and the user can set a related external device management list and prohibited peripheral device types according to their actual needs. Corresponding rule description content can also be added according to the actual needs of the user, so that the user can understand the peripheral device management and control rules more clearly. For example, the rule name, rule type, and rule description can also be set in the peripheral device management and control rules. Referring to FIG. 5 , a schematic diagram of a peripheral device management and control rule interface is given by taking the white list as an external device management list as an example. Among them, the user can set the ID of the target external device at the whitelist setting place, and the number of the ID of the target external device can be limited, and of course, there can be no quantitative limit. The device hardware ID (that is, the external device hardware ID) acquisition guide may be a tutorial showing how to use the hardware ID software or the device manager to acquire the target external device ID, so that the user can easily obtain the hardware ID of the external device. Of course, the embodiment of the present invention does not limit the content corresponding to the device hardware ID acquisition guide, which may be a video tutorial, a voice tutorial, a picture tutorial, or a text tutorial. The user can select only one of the types of peripherals that are prohibited from being used, or select multiple items at the same time, of course, or not.

Based on the above technical solutions, the embodiments of the present invention provide an external device management method, which can effectively and reliably prohibit the use of a certain external device, or the use of a certain type of external device, and can more flexibly realize the management of external devices. Control.

Based on any of the above embodiments, since the group policy is a function in the Windows operating system, the user of the electronic device can modify the group policy by himself. When it is necessary to ensure the validity of the group policy and avoid the group policy issued by the electronic device with management function being modified by the user of the electronic device receiving the group policy, the group policy cannot be reliably executed, for example, in the intranet scenario, Modifications to group policies by users of electronic devices other than managing electronic devices. In the embodiment of the present invention, the group policy can also be monitored to avoid malicious modification of the group policy. That is, in the embodiment of the present invention, when it is detected that the group policy is modified, the unmodified group policy is re-delivered.

It should be noted that, once the electronic device in this embodiment of the present invention detects that the group policy is modified, in order to avoid the modification of the group policy, the unmodified group policy needs to be re-delivered in time, thereby avoiding the modification of the group policy. The embodiment of the present invention does not limit the method for monitoring whether the group policy is modified, as long as the monitoring of the group policy can be realized. For example, a daemon can monitor whether Group Policy has been modified. In order to ensure the reliability of monitoring, the daemon process will not be killed by the system, which can effectively ensure the normal use of peripheral management and control functions.

It can be understood that, the process of monitoring the group policy provided by the embodiment of the present invention may be real-time monitoring, or may be monitoring according to a preset period. Of course, the embodiment of the present invention does not limit the value of the preset period. For example, the preset period may be a period smaller than the period in which the system issues the group policy.

Based on the above technical solution, the embodiment of the present invention provides a method for managing external devices, which monitors whether the group policy is modified through a daemon process, thereby ensuring the validity of the set group policy and preventing the user from modifying the group policy by himself. In this way, the normal use of the peripheral management and control functions can be effectively guaranteed.

It should be noted that, the non-contradictory features in each embodiment of the present invention can be combined arbitrarily to form a new embodiment, which is not limited to the above-mentioned embodiments. The embodiment of the present invention does not limit the execution body of the foregoing embodiments, which may be an electronic device.

The following describes the external device management apparatus, electronic device, and storage medium provided by the embodiments of the present invention. The external device management apparatus, electronic device, and storage medium described below and the external device management method described above may refer to each other correspondingly.

Please refer to FIG. 6, which is a structural block diagram of an apparatus for managing external devices provided by an embodiment of the present invention; the apparatus may include:

The peripheral device identity information acquisition module 110 is used to acquire the identity information of the external device when the external device is detected;

The peripheral device management module 120 is configured to use the external device management list in the group policy to verify the identity information; if the verification is passed, the use of the external device is allowed; if the verification fails, the use of the external device is prohibited.

Based on the above embodiment, the apparatus may further include:

The group policy setting module is used to create an external device management list; set the external device management list to the group policy,

The group policy distribution module is used to distribute group policies.

Based on the above embodiment, the group policy setting module can also be used to set the selected prohibited external device type into the group policy; wherein, the external device type includes at least one of a storage device, a network device, a Bluetooth device, a camera, and a printer. item.

Based on any of the foregoing embodiments, the group policy setting module may include:

The external device management list creation unit is used for acquiring the identity information of the target external device; and forming the external device management list according to the identity information of the target external device.

Based on the above embodiment, the external device management list creation unit may include:

The first identity information obtaining subunit is used for obtaining the identity information of the target external device by using the device information enumeration technology.

and / or,

The second identity information obtaining subunit is used for obtaining the identity information of the target external device by using the device manager.

Based on any of the foregoing embodiments, the apparatus may further include:

The validity protection module is used for re-delivering the unmodified group policy when it is detected that the group policy is modified.

It should be noted that, based on any of the foregoing embodiments, the apparatus may be implemented based on a programmable logic device, and the programmable logic device includes an FPGA, a CPLD, a single-chip microcomputer, a processor, and the like. These programmable logic devices may be provided in electronic equipment.

Corresponding to the above method embodiments, the embodiments of the present invention further provide an electronic device. As shown in FIG. 7 , the electronic device may include:

memory 332 for storing computer programs;

The processor 322 is configured to implement the external device management method of the above method embodiment when executing the computer program.

Specifically, please refer to FIG. 8 , which is a schematic diagram of a specific structure of an electronic device provided in this embodiment. The electronic device may have relatively large differences due to different configurations or performances, and may include one or more processors (central processing units). , CPU) 322 (eg, one or more processors) and memory 332, one or more storage media 330 (eg, one or more mass storage devices) storing applications 342 or data 344. Among them, the memory 332 and the storage medium 330 may be short-term storage or persistent storage. The program stored in the storage medium 330 may include one or more modules (not shown in the figure), and each module may include a series of instructions to operate on the data processing device. Furthermore, the processor 322 may be configured to communicate with the storage medium 330 to execute a series of instruction operations in the storage medium 330 on the electronic device 301 .

Electronic device 301 may also include one or more power supplies 326 , one or more wired or wireless network interfaces 350 , one or more input output interfaces 358 , and/or, one or more operating systems 341 . For example, Windows ServerTM, Mac OS XTM, UnixTM, LinuxTM, FreeBSDTM, etc.

The steps in the external device management method described above may be implemented by the structure of the electronic device. The electronic device may be a terminal (eg, a computer, a server, etc.), which is not limited in this embodiment of the present invention.

Corresponding to the above method embodiments, the embodiments of the present invention further provide a storage medium. A computer program is stored on the storage medium, and when the computer program is executed by the processor, the steps of the external device management method of the above method embodiment are implemented.

The storage medium may specifically be a USB flash drive, a mobile hard disk, a read-only memory (ROM), a random access memory (RAM), a magnetic disk or an optical disk and other storage media that can store program codes. .

The various embodiments in the specification are described in a progressive manner, and each embodiment focuses on the differences from other embodiments, and the same and similar parts between the various embodiments can be referred to each other. As for the device disclosed in the embodiment, since it corresponds to the method disclosed in the embodiment, the description is relatively simple, and the relevant part can be referred to the description of the method.

Professionals may further realize that the units and algorithm steps of each example described in conjunction with the embodiments disclosed herein can be implemented in electronic hardware, computer software, or a combination of the two, in order to clearly illustrate the possibilities of hardware and software. Interchangeability, the above description has generally described the components and steps of each example in terms of functionality. Whether these functions are performed in hardware or software depends on the specific application and design constraints of the technical solution. Skilled artisans may implement the described functionality using different methods for each particular application, but such implementations should not be considered beyond the scope of the present invention.

The steps of a method or algorithm described in conjunction with the embodiments disclosed herein may be directly implemented in hardware, a software module executed by a processor, or a combination of the two. A software module can be placed in random access memory (RAM), internal memory, read only memory (ROM), electrically programmable ROM, electrically erasable programmable ROM, registers, hard disk, removable disk, CD-ROM, or any other in the technical field. in any other known form of storage medium.

The method, device, electronic device, and storage medium for managing external devices provided by the present invention have been described in detail above. The principles and implementations of the present invention are described herein by using specific examples, and the descriptions of the above embodiments are only used to help understand the method and the core idea of the present invention. It should be pointed out that for those skilled in the art, without departing from the principle of the present invention, several improvements and modifications can also be made to the present invention, and these improvements and modifications also fall within the protection scope of the claims of the present invention.

Claims (10)

1. A method for managing external devices, comprising: When an external device is detected, obtain the identity information of the external device; Verify the identity information by using the external device management list in the group policy; If the verification is passed, the external device is allowed to be used; If the verification fails, the use of the external device is prohibited. 2. The external device management method according to claim 1, further comprising: When it is detected that the group policy is modified, the unmodified group policy is re-delivered. 3. The external device management method according to claim 1 or 2, characterized in that, before acquiring the identity information of the external device when the external device is detected, the method further comprises: creating said external device management list; The external device management list is set into the group policy, and the group policy is delivered. 4. The external device management method according to claim 3, wherein the creating the external device management list comprises: Obtain the identity information of the target external device; The external device management list is formed according to the identity information of the target external device. 5. The external device management method according to claim 4, wherein the acquiring the identity information of the target external device comprises: The identity information of the target external device is acquired by using the device information enumeration technology. 6. The external device management method according to claim 4, wherein the acquiring the identity information of the target external device comprises: Use the device manager to obtain the identity information of the target external device. 7 . The method for managing external devices according to claim 3 , wherein before the issuing the group policy, the method further comprises: 8 . Setting the selected prohibited external device type into the group policy; wherein the external device type includes at least one of a storage device, a network device, a Bluetooth device, a camera, and a printer. 8. A device for managing external devices, comprising: a peripheral device identity information acquisition module, used for acquiring the identity information of the external device when an external device is detected; The peripheral device management module is configured to use the external device management list in the group policy to verify the identity information; if the verification is passed, the external device is allowed to be used; if the verification fails, the use of the external device is prohibited. 9. An electronic device, characterized in that, comprising: memory for storing computer programs; The processor is configured to implement the external device management method according to any one of claims 1 to 7 when executing the computer program. 10. A storage medium, characterized in that, computer-executable instructions are stored in the storage medium, and when the computer-executable instructions are loaded and executed by a processor, the computer-executable instructions as described in any one of claims 1 to 7 are implemented. External device management method.

Images