WO2017000356A1

WO2017000356A1 - Permission management method, terminal, device and system

Info

Publication number: WO2017000356A1
Application number: PCT/CN2015/085874
Authority: WO
Inventors: 焦铸
Original assignee: 宇龙计算机通信科技(深圳)有限公司
Priority date: 2015-06-30
Filing date: 2015-07-31
Publication date: 2017-01-05
Also published as: CN105550553B; CN105550553A

Abstract

A permission management method comprises: when a terminal receives an authorization request requesting authorization to use a device, determining, by the terminal and according to the authorization request, whether to grant the authorization (S100); if the terminal determines to grant the authorization, acquiring, by the terminal, biometric information of a terminal user, and generating authorization information according to the biometric information (S101); and transmitting, by the terminal, the authorization information (S102), such that the device acquires the biometric information, and revokes, according to the biometric information, an operation restriction against the user of the device. Also disclosed are a device and system. The method, device and system enable the terminal to share authority management of the device, thus improving user convenience and terminal user experience.

Description

Rights management method, terminal, device and system

This application claims priority to Chinese Patent Application No. 201510385828.8, entitled "A Privilege Management Method, Terminal, Equipment and System" on June 30, 2015, the entire contents of which are incorporated by reference. In this application.

Technical field

The present invention relates to electronic technologies, and in particular, to a rights management method, apparatus, and system.

Background technique

At present, the traditional setting permission is required, and the method for opening the device that uses the user to authenticate is required to be verified by the owner of the device. For example, the iris-verified access control device needs to be initialized by the owner of the preset iris to stand in front of the access control device, and the access control device can be turned on. Another example is: the fingerprint verification POS machine needs the preset fingerprint owner to personally input the fingerprint for verification, and the POS machine starts to swipe the card. However, when the user trusted by the owner of the device uses this type of device, since the user-independent authentication information is not stored in the device in advance, the user does not have the right to use the device of the type, but the owner of the device needs to open it personally, which not only gives The owner of the device brings great inconvenience and brings great inconvenience to the user.

Summary of the invention

The technical problem to be solved by the embodiments of the present invention is to provide a method, device and system for managing rights. The terminal can share and manage the rights of the device, improve user convenience, and improve the experience of the terminal user.

In order to solve the above technical problem, an embodiment of the present invention provides a rights management method, including:

When the terminal receives an authorization request for requesting authorization to use the device, the terminal determines whether to authorize according to the authorization request;

When the terminal determines to perform authorization, the terminal collects human body feature information of the terminal user, and generates authorization information according to the human body feature information;

The terminal performs transmission processing on the authorization information, so that the device acquires the human body feature information, and revokes the operation restriction on the device user according to the human body feature information.

The authorization request carries the application information, where the application information includes the device user information and the device information;

Determining, according to the authorization request, whether the authorization is performed by the terminal includes:

The terminal outputs the application information, so that the terminal user determines whether to perform authorization according to the application information.

When the terminal determines that the authorization is performed, the terminal collects the human body feature information of the terminal user, and generates the authorization information according to the human body feature information, including:

The terminal acquires preset encrypted data;

The terminal encrypts the human body feature information according to the encrypted data to obtain the authorization information.

The device user information includes contact information of the first terminal;

The terminal performs the transmission processing of the authorization information, including:

Sending, by the terminal, the authorization information to the first terminal according to the contact information of the first terminal;

The terminal sends the encrypted data to the device, so that when the device obtains the authorization information, the authorization information is decrypted according to the encrypted data, and the human body feature information is acquired.

The embodiment of the invention further provides a rights management method, the method comprising:

The device receives the encrypted data sent by the terminal;

And when the device obtains the authorization information, decrypting the authorization information according to the encrypted data, and acquiring the decrypted human body feature information;

Obtaining, by the device, the preset human body feature information to be matched, and determining whether the human body feature information and the to-be-matched human body feature information are successfully matched;

When the device determines that the matching is successful, the device revokes the operation restriction on the device user.

Correspondingly, the embodiment of the present invention further provides a terminal, where the terminal includes:

a determining unit, configured to determine, according to the authorization request, whether to authorize when receiving an authorization request for requesting authorization to use the device;

An acquisition processing unit, configured to collect human body feature information of the terminal user when the determining unit determines to perform authorization, and generate authorization information according to the human body feature information;

And a transmission unit, configured to perform the transmission processing on the authorization information, so that the device acquires the human body feature information, and revoke an operation restriction on the device user according to the human body feature information.

The determining unit is specifically configured to:

The application information is outputted to enable the end user to determine whether to authorize based on the application information.

The collection processing unit includes:

Obtaining a subunit for acquiring preset encrypted data;

And an encryption subunit, configured to encrypt the human body feature information according to the encrypted data to obtain the authorization information.

The device user information includes contact information of the first terminal;

The transmission unit includes:

a first sending subunit, configured to send the authorization information to the first terminal according to the contact information of the first terminal;

a second sending subunit, configured to send the encrypted data to the device, to decrypt the authorization information according to the encrypted data, to acquire the human body feature when the device obtains the authorization information information.

Correspondingly, an embodiment of the present invention further provides an apparatus, where the apparatus includes:

a receiving unit, configured to receive encrypted data sent by the terminal;

a decryption unit, configured to decrypt the authorization information according to the encrypted data, and obtain the decrypted human body feature information when the authorization information is acquired;

a judging unit, configured to obtain a preset body feature information to be matched, and determine whether the human body feature information and the to-be-matched human body feature information are successfully matched;

The revocation unit is configured to revoke the operation restriction on the device user when the judging unit judges that the matching is successful.

The present invention also provides a rights management system comprising: a mobile terminal, a terminal as described above, and a device as described above.

The terminal is configured to determine, according to the authorization request, whether to perform authorization when receiving an authorization request for requesting authorization to use the device, and collect the human body feature information of the terminal user according to the human body characteristic information when determining to perform authorization Generating authorization information, and transmitting the authorization information to And causing the device to acquire the human body feature information, and cancel an operation restriction on the device user according to the human body feature information;

The device is configured to receive the encrypted data sent by the terminal, and when the authorization information is obtained, decrypt the authorization information according to the encrypted data, obtain the decrypted human body feature information, and obtain a preset Matching the human body feature information, determining whether the human body feature information and the to-be-matched human body feature information are successfully matched, and when determining that the matching is successful, canceling the operation restriction on the device user.

Embodiments of the present invention have the following beneficial effects:

In the embodiment of the present invention, when the terminal receives an authorization request for requesting authorization to use the device, determining whether to perform authorization according to the authorization request, where the terminal manages the usage right of the device, when the terminal determines to perform authorization, The terminal collects the human body feature information of the terminal user, generates authorization information according to the human body feature information, and the terminal transmits the authorization information to enable the device to acquire the human body feature information, and cancel the pair according to the human body feature information. The operation restriction of the device user enables the terminal to share and manage the rights of the device, improve user convenience, and improve the experience of the terminal user.

DRAWINGS

In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings used in the embodiments or the description of the prior art will be briefly described below. Obviously, the drawings in the following description are only It is a certain embodiment of the present invention, and other drawings can be obtained from those skilled in the art without any creative work.

1 is a schematic flow chart of an embodiment of a rights management method according to the present invention;

2 is a schematic flow chart of still another embodiment of a rights management method according to the present invention;

3 is a schematic structural view of an embodiment of a terminal according to the present invention;

4 is a schematic structural view of an embodiment of an apparatus of the present invention;

FIG. 5 is a schematic structural diagram of an embodiment of a rights management system according to the present invention.

detailed description

The technical solutions in the embodiments of the present invention are clearly and completely described in the following with reference to the accompanying drawings in the embodiments of the present invention. It is obvious that the described embodiments are only a part of the embodiments of the present invention, instead of All embodiments. All other embodiments obtained by those skilled in the art based on the embodiments of the present invention without creative efforts are within the scope of the present invention.

In a specific implementation, the terminal or the first terminal described in the embodiment of the present invention may include: a mobile phone, a tablet computer, a palmtop computer, or a mobile Internet device (MID), etc., and the foregoing terminal is only an example, not an exhaustive , including but not limited to the above terminals.

In a specific implementation, the device described in the embodiments of the present invention may include: an access control, an automobile, a POS machine, and the like that need to verify the user.

Referring to FIG. 1 , an embodiment of a rights management method according to the present invention is described. A rights management method is described in the following, and a rights management method in this embodiment may include:

S100. When the terminal receives an authorization request for requesting authorization to use the device, the terminal determines, according to the authorization request, whether to perform authorization.

In the embodiment of the present invention, the terminal can manage the usage rights of the device. The authorization request received by the terminal may be sent by a device connected to the terminal. Specifically, the device may be a device that needs to authenticate the device user, such as an access control, a car, and a POS (point of sale) machine. When a device user needs to use the device, the device needs to authenticate the device user and determine that the device user has the right to use. When the device authenticates the device user, the device user can revoke the operation restriction on the device user, so that the device user can use the device normally. The device authenticating the device user may be: the device verifies the human body feature information of the device user. The human body feature information includes one or more of face information, iris information, and fingerprint information. In a specific application, for example, the device presets the body feature information to be matched, wherein the body feature information to be matched may be iris information. When the device user needs to use the device, the device may collect the iris information of the device user and determine the collected information. Whether the iris information matches the preset iris information to be matched. When the matching is successful, it is determined that the device user has the device usage right, and the operation restriction of the device user can be revoked, so that the device user normally uses the device.

In the embodiment of the present invention, when the device user fails to pass the identity verification on the device user, the device determines that the device user does not have the use permission, but may output a prompt to remind the device user to send an authorization request to the terminal user through the device to the terminal user. Request authorization to use the device. The terminal user has the highest level of authority of the device, and the body feature information to be matched stored by the device may be the body feature information of the terminal user, and the terminal user may manage the usage rights of the device through the terminal.

In the embodiment of the present invention, when the device user sends an authorization request to the terminal user through the device, the process may be: the device user may input the application information on the operation page of the device, where the application information may include the device user information and the device information. The device user information may include: contact information of the device user (ie, contact information of the first terminal), identity information of the device user, location information of the device user, and usage time information, and the device information may include identity information of the device. , such as the ID or name of the device. Therefore, the device can send an authorization request carrying the application information to the terminal through the contact information of the preset terminal. Or the device user inputs the contact information of the terminal on the device, so that the device sends an authorization request carrying the application information to the terminal according to the contact information of the input terminal.

Further, in the embodiment of the present invention, the terminal receiving the authorization request may also be an authorization request sent by the device user through the first terminal. For example, when the device user knows that he does not have the usage right of the device, but the device user can know the contact information of the terminal, the device user can input the application information and the contact information of the terminal through the operation page of the first terminal, so that the first terminal will An authorization request carrying the application information is sent to the terminal. The operation page is an operation page installed in the first terminal for applying for authorization of the application. Further, when the device user inputs the contact information of the terminal through the operation page of the first terminal, the contact information of the input terminal may be input by calling the contact information stored by the first terminal. The first terminal may encrypt the information input by the device user and then send the information to the terminal.

In the embodiment of the present invention, when the terminal receives the authorization request carrying the application information, the terminal may determine whether to perform authorization. The determining whether the terminal performs the authorization may be: the terminal outputs the application information, so that the terminal user determines, according to the application information, whether the device user is authorized to use the device. For example, the terminal user can determine whether to authorize according to the identity information of the device user in the application information, the location information of the device user, and the usage time information. When the terminal user determines to authorize use of the device user, the terminal may receive a determination authorization command generated by the terminal user operation.

S101. When the terminal determines to perform authorization, the terminal collects human body feature information of the terminal user, and generates authorization information according to the human body feature information.

In the embodiment of the present invention, when the terminal determines to perform authorization and the terminal has not established a communication connection with the device, the terminal may establish a communication connection with the device. The terminal can obtain the contact information of the device according to the application information carried in the authorization request, so that the terminal establishes a communication connection with the device according to the contact information of the device. After the terminal establishes a communication connection with the device, the device may generate random data and return random data to the terminal, where the random data may include a random code.

In the embodiment of the present invention, the human body feature information may include one or more of fingerprint information, iris information, and face information. The terminal may collect fingerprint information through the fingerprint collection device, or the terminal may collect iris information through the camera or the terminal may collect facial information through the camera. When the human body feature information to be collected preset by the terminal is the fingerprint information, the terminal may prompt the terminal user to input the fingerprint information to collect the fingerprint information of the terminal user; when the collected human body feature information preset by the terminal is the fingerprint information and the iris information, The terminal collects iris information and fingerprint information of the terminal user. The body feature information to be collected preset by the terminal is consistent with the type of the body feature information to be matched preset by the device.

In the embodiment of the present invention, after the terminal collects the human body feature information of the terminal user, the terminal may acquire the encrypted data. The encrypted data may be the encrypted data preset by the terminal, or may be data such as device user identity information, device user location information, or encrypted data input by the terminal user in the application information carried by the authorization request, or may be a device. Random data returned. Further, after the terminal obtains the encrypted data, the terminal may use the encrypted data as a key and encrypt the acquired human body feature information by using a preset encryption rule to generate authorization information. The encryption rule may be an encryption algorithm such as a DES (Data Encryption Standard) encryption algorithm or an RSA encryption algorithm, such as using the encrypted data as an encryption key and encrypting the human body feature information by using an RSA encryption algorithm to obtain authorization information. The authorization information is encrypted human body characteristic information, and the authorization information may include image information, optical information, audio information, and the like. The image information is an image description of the encrypted human body feature information, the light information is a light description of the encrypted human body feature information, and the audio information is an audio description of the encrypted human body feature information.

S102. The terminal performs transmission processing on the authorization information.

In the embodiment of the present invention, after the terminal obtains the authorization information, the terminal may send the authorization information to the first terminal according to the contact information of the first terminal included in the device user information in the received application information, and encrypt the data. The encrypted data is sent to the device when it is not random data. When the first terminal receives the authorization information, the first terminal may initiate a use request request to the device again. The first terminal may initiate a use request request to the device. When the authorization information received by the first terminal is image information, the device user may scan the image information received by the first terminal to the device, so that the device can scan. The picture information obtained by the terminal obtains the authorization information; when the authorization information received by the first terminal is the optical information, the device user can output the optical information through the light output device of the first terminal, so that the device can collect the light through the light. Collecting optical information output by the first terminal, thereby obtaining authorization information; when the first terminal When the received authorization information is audio information, the device user can output the audio information through the speaker of the first terminal, so that the device can collect the audio information output by the first terminal through the microphone, thereby obtaining the authorization information.

In the embodiment of the present invention, the device may decrypt the acquired authorization information according to the received encrypted data, obtain the human body feature information, and determine whether the acquired human body feature information is successfully matched with the body feature information to be matched preset by the device. When the match is successful, the device can revoke the operation restriction on the device user. Further, when the matching is successful, the device may also send a request to the terminal whether to allow the application instruction. When the device receives the confirmation instruction returned by the terminal, the device may cancel the operation restriction on the device user.

Further, in the embodiment of the present invention, after the terminal obtains the authorization information, the terminal may send the authorization information and the encrypted data to the device, so that the device can decrypt the received authorization information according to the received encrypted data, and obtain The human body characteristic information is used to determine whether the acquired human body characteristic information is successfully matched with the body characteristic information to be matched preset by the device. When the matching is successful, the device may cancel the operation restriction on the device user.

2 is a further embodiment of a rights management method according to the present invention. A rights management method is described below from the device side. The rights management method in this embodiment may include:

S200. The device receives the encrypted data sent by the terminal.

In the embodiment of the present invention, the encrypted data may be encrypted data preset by the terminal, or may be data such as device user identity information, device user location information, or the terminal user input in the application information carried by the authorization request received by the terminal. The data is encrypted, or it may be random data generated by the device and sent to the terminal, and is not limited herein.

Further, when the encrypted data is random data generated by the device and sent to the terminal, the terminal may not send the encrypted data to the device.

S201. When the device obtains the authorization information, decrypt the authorization information according to the encrypted data, and obtain the decrypted human body feature information.

In the embodiment of the present invention, the device obtains the authorization information, and the device obtains the authorization information by using the first terminal, where the terminal sends the authorization information to the first terminal. Specifically, when the authorization information is the picture information, the device may obtain the authorization information by scanning the picture information of the first terminal, and obtain the authorization information; when the authorization information is the optical information, the device may collect the first terminal by using the optical collector. The output optical information is obtained, thereby obtaining the authorization information; when the authorization information is the audio information, the device can collect the audio information output by the first terminal through the microphone, thereby obtaining the authorization information.

In the embodiment of the present invention, the device obtains the authorization information, and the device obtains the authorization information sent by the terminal.

In the embodiment of the present invention, the device may use the obtained encrypted data as a decryption key, decrypt the authorization information by using a preset decryption rule, and obtain the human body feature information, wherein the decryption rule may be a DES decryption algorithm or an RSA decryption. Decryption algorithm such as algorithm. The human body feature information is obtained by using the encrypted data as a decryption key and decrypting the authorization information by using an RSA decryption algorithm. The human body characteristic information includes one or more kinds of information such as face information, iris information, and fingerprint information.

S202. The device acquires preset human body feature information to be matched, and determines whether the human body feature information and the to-be-matched human body feature information are successfully matched.

In the embodiment of the present invention, the preset human body feature information to be matched may include one or more of face information, iris information, and fingerprint information. The device can match the human body feature information with the body feature information to be matched, and determine whether the device is consistent. If the device is consistent, the device can determine that the human body feature information is successfully matched with the body feature information to be matched.

S203. When the device determines that the matching is successful, the device revokes an operation restriction on the terminal user of the device.

In the embodiment of the present invention, when the device determines that the matching is successful, the device may revoke the operation restriction on the device user. Further, when the matching is successful, the device may also send a request to the terminal whether to allow the application instruction. When the device receives the confirmation instruction returned by the terminal, the device may cancel the operation restriction on the device user.

In the embodiment of the present invention, the device receives the encrypted data sent by the terminal, and when the device obtains the authorization information, decrypts the authorization information according to the encrypted data, and obtains the decrypted human body feature information, where the device acquires Presetting the body feature information to be matched, and determining the body feature information and Whether the matching of the human body characteristic information to be matched is successful, and when the device determines that the matching is successful, the device revokes the operation restriction on the terminal user of the device, which enables the terminal to share management of the device rights and improve the terminal. User experience.

Referring to FIG. 3, an embodiment of a terminal according to the present invention includes:

The determining unit 100 is configured to determine, according to the authorization request, whether to authorize when receiving an authorization request for requesting authorization to use the device;

The collection processing unit 200 is configured to collect human body feature information of the terminal user when the determining unit determines that authorization is performed, and generate authorization information according to the human body feature information;

The transmitting unit 300 is configured to perform the transmission processing on the authorization information.

The authorization request carries application information, where the application information includes the device user information and the device information.

The determining unit 100 is specifically configured to:

The collection processing unit 200 is specifically configured to:

Obtain preset encrypted data;

And encrypting the human body feature information according to the encrypted data to obtain the authorization information.

The device user information includes contact information of the first terminal.

The transmission unit 300 is specifically configured to:

Sending the authorization information to the first terminal according to the contact information of the first terminal;

Sending the encrypted data to the device, when the device obtains the authorization information, decrypting the authorization information according to the encrypted data, and acquiring the human body feature information.

In the embodiment of the present invention, the terminal can manage the usage rights of the device. The authorization request received by the determining unit 100 may be transmitted by a device connected to the terminal. Specifically, the device may be a device that needs to authenticate the device user, such as an access control, a car, and a POS (point of sale) machine. When a device user needs to use the device, the device needs to authenticate the device user and determine that the device user has the right to use. When the device authenticates the device user, the device user can revoke the operation restriction on the device user, so that the device user can use the device normally. The device authenticating the device user may be: the device verifies the human body feature information of the device user. among them, The human body characteristic information includes one or more kinds of information of face information, iris information, and fingerprint information. In a specific application, for example, the device presets the body feature information to be matched, wherein the body feature information to be matched may be iris information. When the device user needs to use the device, the device may collect the iris information of the device user and determine the collected information. Whether the iris information matches the preset iris information to be matched. When the matching is successful, it is determined that the device user has the device usage right, and the operation restriction of the device user can be revoked, so that the device user normally uses the device.

In the embodiment of the present invention, when the device user sends an authorization request to the determining unit 100 through the device, the process may be: the device user may input the application information on the operation page of the device, where the application information may include the device user information and the device. The device information may include: contact information of the device user (ie, contact information of the first terminal), identity information of the device user, location information of the device user, and usage time information, and the device information may include the identity of the device. Information, such as the ID or name of the device. Therefore, the device can send an authorization request carrying the application information to the terminal through the contact information of the preset terminal. Or the device user inputs the contact information of the terminal on the device, so that the device sends an authorization request carrying the application information to the terminal according to the contact information of the input terminal.

In the embodiment of the present invention, when the terminal receives the authorization request carrying the application information, the determining unit 100 may determine whether to perform authorization. Wherein, the determining unit 100 determines whether the authorization is performed: The breaking unit 100 outputs the application information to enable the terminal user to determine whether to authorize the device user to use the device according to the application information. For example, the terminal user can determine whether to authorize according to the identity information of the device user in the application information, the location information of the device user, and the usage time information. When the terminal user determines to authorize the use of the device user, the determining unit 100 may receive the determination authorization command generated by the terminal user operation.

In the embodiment of the present invention, when the determining unit 100 determines to perform authorization and the terminal has not established a communication connection with the device, the terminal may establish a communication connection with the device. The terminal can obtain the contact information of the device according to the application information carried in the authorization request, so that the terminal establishes a communication connection with the device according to the contact information of the device. After the terminal establishes a communication connection with the device, the device may generate random data and return random data to the terminal, where the random data may include a random code.

In the embodiment of the present invention, the human body feature information may include one or more of fingerprint information, iris information, and face information. The collection processing unit 200 can collect fingerprint information through the fingerprint collection device, or the collection processing unit 200 can collect iris information through the camera or the collection processing unit 200 can collect facial information through the camera. When the human body feature information to be collected preset by the terminal is the fingerprint information, the collection processing unit 200 may prompt the terminal user to input the fingerprint information to collect the fingerprint information of the terminal user; and the collected human body feature information preset by the terminal is the fingerprint information and When the iris information is obtained, the collection processing unit 200 collects the iris information and the fingerprint information of the terminal user. The body feature information to be collected preset by the terminal is consistent with the type of the body feature information to be matched preset by the device.

In the embodiment of the present invention, after the collection processing unit 200 collects the human body feature information of the terminal user, the collection processing unit 200 may acquire the encrypted data. The encrypted data may be the encrypted data preset by the terminal, or may be data such as device user identity information, device user location information, or encrypted data input by the terminal user in the application information carried by the authorization request, or may be a device. Random data returned. Further, when the collection processing unit 200 can use the encrypted data as a key and encrypt the acquired human body feature information by using a preset encryption rule, the authorization information is generated. The encryption rule may be an encryption algorithm such as a DES (Data Encryption Standard) encryption algorithm or an RSA encryption algorithm, such as using the encrypted data as an encryption key and encrypting the human body feature information by using an RSA encryption algorithm to obtain authorization information. The authorization information is the encrypted human body feature information, and the authorization information may include image information, optical information, audio information, and the like. The image information is an image description of the encrypted human body feature information, the light information is a light description of the encrypted human body feature information, and the audio information is an audio description of the encrypted human body feature information.

In the embodiment of the present invention, after the acquisition processing unit 200 acquires the authorization information, the transmission unit 300 may send the authorization information to the first terminal according to the contact information of the first terminal included in the device user information in the received application information. And send the encrypted data to the device when the encrypted data is not random data. When the first terminal receives the authorization information, the first terminal may initiate a use request request to the device again. The first terminal may initiate a use request request to the device. When the authorization information received by the first terminal is image information, the device user may scan the image information received by the first terminal to the device, so that the device can scan. The picture information obtained by the terminal obtains the authorization information; when the authorization information received by the first terminal is the optical information, the device user can output the optical information through the light output device of the first terminal, so that the device can collect the light through the light. Collecting the optical information output by the first terminal to obtain the authorization information; when the authorization information received by the first terminal is the audio information, the device user may output the audio information through the speaker of the first terminal, so that the device can pass the microphone The audio information output by the first terminal is collected to obtain authorization information.

Further, in the embodiment of the present invention, after the acquisition processing unit 200 acquires the authorization information, the transmission unit 300 may send the authorization information and the encrypted data to the device, so that the device can authorize the received according to the received encrypted data. The information is decrypted, the human body feature information is obtained, and the acquired human body feature information is successfully matched with the body feature information to be matched preset by the device. When the matching is successful, the device may cancel the operation restriction on the device user.

Referring to FIG. 4, an embodiment of a device according to the present invention includes:

The receiving unit 400 is configured to receive encrypted data sent by the terminal.

The decryption unit 500 is configured to decrypt the authorization information according to the encrypted data when acquiring the authorization information, and obtain the decrypted human body feature information.

The determining unit 600 is configured to obtain the preset human body feature information to be matched, and determine whether the human body feature information and the to-be-matched human body feature information are successfully matched.

The revocation unit 700 is configured to revoke the operation restriction on the device user when the judging unit judges that the matching is successful.

In the embodiment of the invention, when the encrypted data is not random data, the receiving unit 400 acquires the encrypted data sent by the terminal.

In the embodiment of the present invention, the decryption unit 500 may use the acquired encrypted data as a decryption key, decrypt the authorization information by using a preset decryption rule, and obtain the human body feature information, where the decryption rule may be a DES decryption algorithm or A decryption algorithm such as an RSA decryption algorithm. The human body feature information is obtained by using the encrypted data as a decryption key and decrypting the authorization information by using an RSA decryption algorithm. among them, The human body characteristic information includes one or more kinds of information such as face information, iris information, and fingerprint information.

In the embodiment of the present invention, the preset human body feature information to be matched may include one or more of face information, iris information, and fingerprint information. The determining unit 600 can match the human body feature information with the body feature information to be matched to determine whether the human body feature information is consistent. If the information is consistent, the determining unit 600 can determine that the human body feature information is successfully matched with the human body feature information to be matched.

In the embodiment of the present invention, when the determining unit 600 determines that the matching is successful, the revoking unit 700 may cancel the operation restriction on the device user. Further, when the matching is successful, the device may also send a request to the terminal whether to allow the application instruction. When the device receives the confirmation instruction returned by the terminal, the device may cancel the operation restriction on the device user.

In the embodiment of the present invention, the device receives the encrypted data sent by the terminal, and when the device obtains the authorization information, decrypts the authorization information according to the encrypted data, and obtains the decrypted human body feature information, where the device acquires Presetting the human body feature information to be matched, determining whether the human body feature information and the to-be-matched human body feature information are successfully matched. When the device determines that the matching is successful, the device cancels the operation restriction on the terminal user of the device. This enables the terminal to share management of the device's permissions and improve the end user's experience.

Please refer to FIG. 5, which is a schematic structural diagram of an embodiment of a rights management system according to the present invention. A rights management system according to this embodiment includes:

Mobile terminal 1, terminal 2 and device 3.

The mobile terminal 1 may be the first terminal as described in the foregoing embodiment, the terminal 2 may be the terminal as described in the foregoing embodiment, and the device 3 may be the device described in the foregoing embodiment, and details are not described herein.

One of ordinary skill in the art can. It is understood that all or part of the processes in the above embodiments may be implemented by a computer program to instruct related hardware, and the program may be stored in a The computer readable storage medium, which when executed, may include the flow of an embodiment of the methods as described above. The storage medium may be a magnetic disk, an optical disk, a read-only memory (ROM), or a random access memory (RAM).

The above is only the preferred embodiment of the present invention, and the scope of the present invention is not limited thereto, and thus equivalent changes made in the claims of the present invention are still within the scope of the present invention.

Claims

A method for managing rights, characterized in that the method comprises:

When the terminal receives an authorization request for requesting authorization to use the device, the terminal determines whether to authorize according to the authorization request;

When the terminal determines to perform authorization, the terminal collects human body feature information of the terminal user, and generates authorization information according to the human body feature information;

The terminal performs transmission processing on the authorization information, so that the device acquires the human body feature information, and revokes the operation restriction on the device user according to the human body feature information.
The method according to claim 1, wherein the authorization request carries application information, wherein the application information includes the device user information and the device information;

Determining, according to the authorization request, whether the authorization is performed by the terminal includes:

The terminal outputs the application information, so that the terminal user determines whether to perform authorization according to the application information.
The method according to claim 1, wherein when the terminal determines that the authorization is performed, the terminal collects the human body feature information of the terminal user, and generates the authorization information according to the human body feature information, including:

The terminal acquires preset encrypted data;

The terminal encrypts the human body feature information according to the encrypted data to obtain the authorization information.
The method of claim 3, wherein the device user information comprises contact information of the first terminal;

The terminal performs the transmission processing of the authorization information, including:

Sending, by the terminal, the authorization information to the first terminal according to the contact information of the first terminal;

The terminal sends the encrypted data to the device, so that when the device obtains the authorization information, the authorization information is decrypted according to the encrypted data, and the human body feature information is acquired.
A method for managing rights, characterized in that the method comprises:

The device receives the encrypted data sent by the terminal;

And when the device obtains the authorization information, decrypting the authorization information according to the encrypted data, and acquiring the decrypted human body feature information;

Obtaining, by the device, the preset human body feature information to be matched, and determining whether the human body feature information and the to-be-matched human body feature information are successfully matched;

When the device determines that the matching is successful, the device revokes the operation restriction on the device user.
A terminal, wherein the terminal comprises:

a determining unit, configured to determine, according to the authorization request, whether to authorize when receiving an authorization request for requesting authorization to use the device;

An acquisition processing unit, configured to collect human body feature information of the terminal user when the determining unit determines to perform authorization, and generate authorization information according to the human body feature information;

And a transmission unit, configured to perform the transmission processing on the authorization information, so that the device acquires the human body feature information, and revoke an operation restriction on the device user according to the human body feature information.
The terminal according to claim 6, wherein the authorization request carries application information, wherein the application information includes the device user information and the device information;

The determining unit is specifically configured to:

The application information is outputted to enable the end user to determine whether to authorize based on the application information.
The terminal according to claim 6, wherein the collection processing unit comprises:

Obtaining a subunit for acquiring preset encrypted data;

And an encryption subunit, configured to encrypt the human body feature information according to the encrypted data to obtain the authorization information.
The terminal according to claim 8, wherein the device user information comprises contact information of the first terminal;

The transmission unit includes:

a first sending subunit, configured to send the authorization information to the first terminal according to the contact information of the first terminal;

a second sending subunit, configured to send the encrypted data to the device, to decrypt the authorization information according to the encrypted data, to acquire the human body feature when the device obtains the authorization information information.
A device, characterized in that the device comprises:

a receiving unit, configured to receive encrypted data sent by the terminal;

a decryption unit, configured to decrypt the authorization information according to the encrypted data, and obtain the decrypted human body feature information when the authorization information is acquired;

a judging unit, configured to obtain a preset body feature information to be matched, and determine whether the human body feature information and the to-be-matched human body feature information are successfully matched;

The revocation unit is configured to revoke the operation restriction on the device user when the judging unit judges that the matching is successful.
A rights management system includes a mobile terminal, a terminal, and a device, wherein:

The terminal is configured to determine, according to the authorization request, whether to perform authorization when receiving an authorization request for requesting authorization to use the device, and collect the human body feature information of the terminal user according to the human body characteristic information when determining to perform authorization Generating the authorization information, and performing the transmission processing on the authorization information, so that the device acquires the human body feature information, and cancels the operation restriction on the device user according to the human body feature information;

The device is configured to receive the encrypted data sent by the terminal, and when the authorization information is obtained, decrypt the authorization information according to the encrypted data, obtain the decrypted human body feature information, and obtain a preset Matching the human body feature information, determining whether the human body feature information and the to-be-matched human body feature information are successfully matched, and when determining that the matching is successful, canceling the operation restriction on the device user.