CN101051909B - An authorization method for controlling multiple devices, a communication device and a server - Google Patents

Abstract

The embodiment of the present invention discloses an authorization method for controlling multiple devices, including: receiving an authorization file, the authorization file contains information on the scope of licensed use, and the information on the scope of licensed use adopts device identification information wildcards and/or device identification information consecutively interval; compare the identification information corresponding to the device with the permitted use range information in the authorization file, and if the identification information of the device exists in the range indicated by the permitted use range information in the authorization file, determine that the device has Permissions to use the authorization file. The embodiment of the present invention also provides a communication device and a server that can use the above method. The authorization process of devices can be simplified by using the authorization method for controlling multiple devices, the communication device and the server provided by the embodiments of the present invention.

Description

An authorization method for controlling multiple devices, a communication device and a server

technical field

The invention relates to authorization (License) technology, in particular to an authorization method for controlling multiple devices, a communication device and a server.

Background technique

With the diversified development of telecommunication services, the integration and complexity of software and hardware of telecommunication equipment are increasing day by day, and the cost and price of telecommunication equipment are also getting higher and higher. In order to reduce the early investment of telecom operators, telecom equipment suppliers use license technology to softly control the functions, capacity and usage time of telecom equipment sold. In this way, telecom operators only need to purchase telecom equipment that supports some functions and capacities as needed in the initial stage. When the operator's market matures or expands, the telecom operator will expand the function and capacity of the telecom equipment by purchasing a license file from the telecom equipment supplier.

The existing license control schemes can be divided into: stand-alone license control schemes and network license control schemes.

The single-device license control scheme refers to setting up a license file for each device, and binding each license file with the corresponding device identification information to control the licensed use of the device.

The network license control scheme refers to controlling the license usage of all devices in the network through the license server (Server). The license file corresponding to each device is saved on the license server. It is not necessary to load the license file on each device in the network. The device communicates with the License Server to request permission.

In the license control solution in the prior art, the form and format of the license file are different, and the common license file adopts the initialization (INI) format or the extensible markup language (XML) format. The format of the license file in INI format is as follows:

ESN="13612345678";

Resource = "MaxUser = 200000";

Sign＝00DA7462150D36C6909B6D56828EB9C6E323D40;

The equipment identification information (ESN) field in the above license file stipulates that the identification information of the device authorized to use the license file is 13612345678; the resource field specifies the capability control information supported by the license file: the maximum number of devices running is 20000; The Sign field is the signature field of the license file, and this field provides the validity verification conditions of the entire license file.

When adopting the license control scheme of the prior art to control the license usage of multiple devices, one way is: set a license file for each device respectively, and the license file only contains the identification information of the corresponding device; another way is: Set the same license file for multiple devices, and enumerate the identification information of the corresponding multiple devices one by one in the ESN field in the license file.

When the number of devices is large, use the above-mentioned first implementation method to set the license file for the device. The operator needs to load the license file set by the device supplier for each device to the corresponding device, that is, different devices need to receive the license file of the device supplier. Different license files are issued. When the number of devices is large, that is, the number of license files is large, the device authorization process will be cumbersome, and it is easy to happen that the license file does not correspond to the device, that is, it is easy to be loaded incorrectly, which makes the device authorization fail. . At the same time, the device supplier needs to set up a license file for each device. When the number of devices to be set is large, the workload of setting up the authorization file will be heavy.

When adopting the above-mentioned second implementation method to set the license file for the device, although the number of license files set by the device supplier can be reduced, enumerating the serial numbers of the devices one by one in the same license file will not only make the license file huge, but also in practice During the device authorization process, the current device needs to compare its own device identification with a large number of device serial numbers one by one, which makes the device authorization process cumbersome and still has the problem of heavy workload.

Contents of the invention

The embodiment of the present invention provides an authorization method for controlling multiple devices, a communication device and a server, and simplifies the device authorization process.

The authorization method for controlling multiple devices provided by the embodiment of the present invention includes:

A. Receive the authorization file, the authorization file includes the licensed use range information and capability control information, and the licensed use range information is set by using continuous intervals of equipment identification information;

B. Compare the identification information corresponding to the device with the permitted use range information in the authorization file, and if the identification information of the device exists in the range indicated by the permitted use range information in the authorization file, determine that the device has the right to use the Authorize the authority of the file, obtain the capability control information including the device running speed and/or function setting from the authorization file, and control the running speed and/or function setting of the device according to the obtained capability control information.

A communication device for controlling the authorization of multiple devices, including an authorization confirmation unit and a device control unit,

The authorization confirmation unit is used to compare the identification information corresponding to the device itself with the permitted use range indicated by the wildcard of the device identification information and/or the continuous interval of the device identification information in the received authorization file, if the identification information of the device exists In the permitted use scope of the authorization file, determine that the device has the authority to use the authorization file;

The device control unit is configured to obtain capability control information including device operating speed and/or function setting from the authorization file, and control the device operating speed and/or function setting according to the obtained capability control information .

A server for controlling authorization of multiple devices, comprising: an authorization request receiving unit for receiving an authorization request from a device, and further comprising:

The device authorization confirming unit is configured to compare the identification information of the device corresponding to the received authorization request with the permitted use range indicated by the continuous range of device identification information in the authorization file stored by the server, if the identification information of the device exists In the permitted use scope of the authorization file, determine that the device has the authority to use the authorization file;

The capability control unit is configured to respond to the authorization request according to the capability control information in the authorization file including device operating speed and/or function settings.

It can be seen from the above technical solutions that when using the authorization method for controlling multiple devices provided by the embodiment of the present invention, the communication device and the server to perform device authorization, the device supplier only needs to set up a license file for controlling multiple devices, which includes Identification information wildcards and/or licensed use range information represented by continuous intervals. The authorization process of each device is simplified as follows: compare the identification information corresponding to the device with the licensed use range information in the authorization file, specifically compare whether the identification information corresponding to the device matches the wildcard of the device identification information and/or compare the identification corresponding to the device Whether the information is within the continuous interval of the device identification information can confirm whether the device has the authority to use the authorization file. Therefore, the authorization method for controlling multiple devices, the communication device and the server provided by the embodiment of the present invention can simplify the authorization process of the device.

FIG. 1 is a flowchart of a method for controlling multi-device authorization according to an embodiment of the present invention;

Fig. 2 is the flowchart of a specific embodiment of the method shown in Fig. 1;

Fig. 3 is a flowchart of another specific embodiment of the method shown in Fig. 1;

FIG. 4 is a schematic structural diagram of a communication device according to an embodiment of the present invention;

FIG. 5 is a schematic structural diagram of a server according to an embodiment of the present invention.

Detailed ways

In order to make the purpose, technical solutions and beneficial effects of the present invention more clear, the present invention will be further described in detail below in conjunction with the embodiments and accompanying drawings.

The authorization method for controlling multiple devices provided by the embodiment of the present invention includes: receiving an authorization file, in which the device identification information wildcard and/or device identification information continuous intervals are used to indicate the permitted use range of the authorization file; comparing the identification information corresponding to the device When the comparison result shows that the identification information of the device exists in the scope indicated by the permitted use range information in the authorization file, it is determined that the device has the right to use the authorization file .

Here, if the stand-alone license control scheme is adopted, the set authorization file that uses the device identification information wildcard and/or the device identification information continuum to indicate the scope of permitted use is loaded into the device, and the device itself performs the above steps, including receiving the authorization file , compare your own identification information with the permitted use scope in the authorization file to determine whether you have the right to use the authorization file; The continuous interval indicates that the authorization file of the permitted use range is set to the server, and the server performs the above steps, including, when the server receives the authorization request from the device, it compares the identification information of the device sending the authorization request with the authorized use range of the received authorization file , and then determine whether the device has permission to use the authorization file.

When the permitted use range of the authorization file is represented by wildcards of the device identification information, the steps for comparing the device identification information with the permitted use range of the authorization file are as follows: compare whether the corresponding identification information of the device matches the wildcards of the device identification information in the authorization file, if match, it is determined that the device has the authority to use the authorization file.

When the permitted use range of the authorization file is represented by a continuous interval of equipment identification information, the step of comparing the identification information of the device with the permitted use range of the authorization file is specifically: comparing whether the identification information corresponding to the device is within the device identification information of the authorization file If yes, it is determined that the device has the right to use the authorization file.

The authorization file may also include: capability control information. After it is determined that the device has the authority to use the authorization file, the authorization method for controlling multiple devices further includes:

The capability control information is obtained from the authorization file, and the device is controlled according to the obtained capability control information.

The device in this embodiment of the present invention is a physical device or a software entity; the device identification information is information that uniquely identifies the device. When the device is a physical device, the identification information of the device can be: the identification number of an important component contained in the device, or a combination of identification numbers of multiple important components; when the device is a software logical entity, the identification information of the device can be software The identification information of the software, such as the serial number, may also be the identification information of the hardware device corresponding to the software.

The authorization file also includes: authorization file validity verification conditions. After the set authorization file is loaded into the device, the validity of the authorization file is verified according to the validity verification conditions in the authorization file. If the verification result is valid, the subsequent comparison between the corresponding identification information of the device itself and the authorization file is performed. Steps in the scope of licensed use.

In the embodiment of the present invention, the authorization file can be set in any format, including: INI format or XML format.

FIG. 1 is a flow chart of a method for controlling multi-device authorization according to an embodiment of the present invention. In this process, a single-machine License control scheme may be used as an example, including the following steps:

Step 101, setting an authorization file capable of controlling multiple devices.

The authorization file contains: ESN field, which is used to indicate the permitted use scope of the authorization file; capability control information (Resource), which is used to indicate the capability control information supported by the authorization file; validity verification conditions (Sign) of the authorization file, In this embodiment, it is represented by digital signature information.

Wherein, the ESN field of the authorization file is represented by a wildcard of the device identification information and a continuous interval of the equipment identification information, but is not limited to the form of the continuous interval and the wildcard. For example: the continuous interval of device identification information is: (13755555555, 13788888888], the scope of use of the authorization file represented by this continuous interval is: all devices with device identification information greater than 13755555555 and less than or equal to 13788888888. The wildcard of the device identification information is: 10.70.* , the scope of use of the authorization file indicated by the wildcard is: any device whose device identification information matches 10.70.*. The capability control information is that the maximum number of devices running is 150,000.

Taking the INI format as an example, the information contained in the License file provided by this embodiment is as follows:

ESN="(13755555555,13788888888],10.70.*";

Resource = "MaxUser = 150000";

Sign＝00DA7462150D36C6909B6D56828EB9C6E323D40;

The capability control information in the foregoing License file may also be other quantifiable capability control information, such as the running speed of the device. The capability control information of the license file may also include non-quantifiable capability control information, specifically information about whether one or more functions of the device can be enabled, for example, whether the mobile terminal can enable the ring tone function.

The digital signature information of the authorization file in the above license file, that is, the validity verification condition of the authorization file may be optional information, and the validity verification condition may not be set in the authorization file. In addition, the validity verification conditions in the license file are not limited to the above-mentioned digital signature information, and may also be other conditions other than the digital signature information.

Step 102, load the configured license file into the device, and verify the validity of the license file.

The specific implementation process is: verify the validity of the license file according to the digital signature information of the authorization file carried in the license file, and if the verification result is valid, execute step 103; otherwise, end this process.

The validity verification process in this step is optional. If no validity verification conditions are set in the license file, this step is omitted.

Step 103, check whether the current device has permission to use the License file.

The specific steps include: the current device obtains its own identification information, compares the obtained identification information with the ESN field in the license file, and if the comparison result is that its own identification information is included in the ESN field of the license file, then determine If you have the right to use the license file, go to step 104; otherwise, determine that you do not have the right to use the license file, and end this process.

Here, the specific process for the current device to compare its own identification information with the ESN field in the License file includes: when the ESN field contains a device identification information wildcard, the current device compares its own identification information with the device identification information wildcard in the ESN field Whether it matches, and if it matches, it is determined that it has the authority to use the authorization file;

When the ESN field contains a continuous range of device identification information, the current device compares whether its own identification information is within the range of the continuous range of device identification information in the ESN field, and if so, determines that it has the authority to use the authorization file.

Step 104, obtain capability control information from the license file, and control the capability of the current device according to the obtained capability control information, and end this process.

For example, the capability control information in the license file includes: if the running speed of the device is less than or equal to a certain set value, or if the current device can start a specific function, such as the color ring function, then the current device can control itself according to the obtained capability control information. Adjust the running speed of the computer, or set the specific functions that can be performed by itself.

Fig. 2 is the flowchart of a specific embodiment of the method shown in Fig. 1, and this process comprises:

In step 201, an authorization file capable of controlling multiple devices is set, and the ESN field of the authorization file is represented by a wildcard of device identification information.

Step 202, load the set license file into the device, check the validity of the license file, if valid, execute step 203, otherwise end the process.

Step 203, the current device obtains its own identification information, compares its own identification information with the device identification information wildcard in the ESN field, and if it matches, determines that it has the authority to use the authorization file, and executes step 204; otherwise, end the process.

Step 204, obtain capability control information from the license file, and control the current device according to the obtained capability control information, and end this process.

Fig. 3 is the flow chart of another specific embodiment of the method shown in Fig. 1, and this process comprises:

In step 301, an authorization file capable of controlling multiple devices is set, and the ESN field of the authorization file is represented by a continuous range of device identification information.

Step 302, load the set license file into the device, check the validity of the license file, if valid, execute step 303, otherwise end the process.

Step 303, the current device obtains its own identification information, compares whether its own identification information is within the continuous range of device identification information in the ESN field, and if so, determines that it has the authority to use the authorization file, and executes step 304; otherwise, the process ends.

Step 304, acquire capability control information from the license file, and control the current device according to the acquired capability control information, and end this process.

The method described in the embodiment of FIG. 1 can be applied to the process in which a telecommunications equipment supplier authorizes newly developed network terminal software to multiple terminal equipments. The telecommunications equipment supplier first needs to set up the license file for the newly developed network terminal software. The ESN field in the license file is set to the wildcard of the IP network segment 10.70.144.*, which belongs to the terminal equipment within the range of the 10.70.144.* network segment. All have the right to use the license file, that is, have the right to enable the functions specified in the license file.

When loading the newly developed network terminal software into a certain terminal device, the license file needs to be loaded at the same time; The ESN field in the license file is matched. If the IP address matches 10.70.144.*, that is, the terminal device belongs to the range of the 10.70.144.* network segment, it is determined that the terminal device has the permission to use the license file. After the software determines that it has the right to use the license file, it obtains capability control information from the license file to control software functions.

The method described in the embodiment in FIG. 1 can also be applied to the process of authorization of the mobile terminal by the mobile terminal provider. The mobile terminal provider first needs to set up a license file for the mobile terminal. The ESN field in the license file is set to ESN = "(13755555555, 13788888888]", then all mobile terminals with a mobile terminal serial number greater than 13755555555 and less than or equal to 13788888888 are authorized Use the License file. In this way, the mobile terminal supplier can sell all the mobile terminals within the range to the distributor at one time, and the distributor uses the same License file to control the mobile terminals when selling the mobile terminals within the ESN range. Therefore, the use of this license file can not only ensure the mobile terminal supplier's control over the mobile terminals sold, but also the mobile terminal supplier does not need to provide a separate license file to the distributor for each mobile terminal, which simplifies the mobile terminal sales process .

It can be seen from the above description that in the authorization method for controlling multiple devices provided by the embodiment of the present invention, the authorized use range information of the authorization file is represented by using the device identification information wildcard and/or the device identification information continuous interval in the authorization file, so that the authorization of the device The process is simple and effective. At the same time, it simplifies the process of setting up the authorization file and reduces the workload of the equipment supplier to set up the license file. Especially for the case of a large number of equipment, it can effectively improve the work efficiency of the equipment supplier to set up the license file.

The embodiment of the present invention also provides a communication device, including an authorization confirmation unit and a device control unit. Its structural schematic diagram is shown in Figure 4, wherein,

An authorization confirmation unit, configured to compare the identification information corresponding to the communication device with the licensed use range information represented by the wildcard of the device identification information and/or the continuous interval of the device identification information in the received authorization file, if the identification information of the device exists in the In the scope indicated by the permitted use range information of the authorization file, it is determined that the device has the authority to use the authorization file; the device control unit is configured to obtain capability control information from the authorization file, and control the Device capabilities are controlled.

The authorization confirmation unit includes: a wildcard matching unit and/or a continuous interval matching unit. in,

A wildcard matching unit, configured to compare whether the identification information corresponding to the device itself matches the wildcard of the device identification information in the authorization file, and if it matches, determine that the device has permission to use the authorization file;

The continuous interval matching unit is used to compare whether the identification information corresponding to the device itself is within the continuous interval of the device identification information in the authorization file, and if so, determine that the device has the authority to use the authorization file.

The communication device may further include: a validity verification unit, configured to verify the validity of the authorization file according to the validity verification conditions in the authorization file.

In order to apply the method provided in the embodiment of the present invention to a network license control solution, the embodiment of the present invention further provides a server, and FIG. 5 is a schematic structural diagram of the server in the embodiment of the present invention. The server includes: an authorization request receiving unit for receiving an authorization request from a device, and further includes: a device authorization confirmation unit and a capability control unit.

Wherein, the device authorization confirming unit is used to compare the identification information of the device corresponding to the received authorization request with the permitted use range information represented by the wildcard of the device identification information and/or the continuous interval of the device identification information in the stored authorization file, if the device The identification information of the authorization file exists in the scope indicated by the permitted use range information of the authorization file, and it is determined that the device has the authority to use the authorization file; the capability control unit is configured to control the Respond to the above authorization request.

Here, when the authorization request sent by the device carries the device's identification information, the server's response to the authorization request may be: the server sends all capability control information matching the device's identification information to the device. After receiving the capability control information, the device performs capability control. When the authorization request sent by the device also carries the content of the device's capability request, that is, the capability control information requested by the device, the server first performs matching according to the device's identification information. If the device has the authority to use the authorization file, the server Then determine whether to allow the capability request content of the device according to the capability request content of the device and the capability control information in the authorization file, and return the determination result to the device.

The device authorization confirmation unit includes: a wildcard matching unit and/or a continuous interval matching unit, wherein,

A wildcard matching unit, configured to compare whether the identification information of the device corresponding to the received authorization request matches the wildcard of the device identification information in the authorization file stored by the server, and if it matches, determine that the device has the authority to use the authorization file ;

A continuous interval matching unit, configured to compare whether the identification information of the device corresponding to the received authorization request is within the continuous interval of the device identification information in the authorization file stored by the server, and if so, determine that the device has the authorization to use the authorization file. permission.

It can be seen from the above embodiments that when using the authorization method for controlling multiple devices provided by the embodiment of the present invention, the communication device and the server to perform device authorization, the device supplier only needs to set up a license file for controlling multiple devices, which includes Identification information wildcards and/or licensed use range information represented by continuous intervals. The authorization process of each device is simplified as follows: compare the identification information corresponding to the device with the licensed use range information in the authorization file, specifically compare whether the identification information corresponding to the device matches the wildcard of the device identification information and/or compare the identification corresponding to the device Whether the information is within the continuous interval of the device identification information can confirm whether the device has the authority to use the authorization file. Therefore, the authorization method for controlling multiple devices, the communication device and the server provided by the embodiment of the present invention can simplify the authorization process of the device.

At the same time, when the authorization method for controlling multiple devices provided by the embodiment of the present invention is applied to the single-machine license control scheme, it can not only simplify the process of setting up the license file for the device supplier, but also solve the problem that different devices need to load different license files. error-prone problems, thereby improving the effectiveness of the device authorization process.

When the authorization method for controlling multiple devices provided by the embodiment of the present invention is applied to the network license control scheme, it can not only avoid the cumbersome problem of the device authorization process caused by comparing the device identification information with a large number of device serial numbers one by one, but also The license file in the license control solution of the prior art network can be reduced, the amount of data transmitted by the network can be reduced, and the transmission efficiency of the network can be improved.

In addition, by using continuous intervals of device identification information and/or wildcards of device identification information to indicate the scope of licensed use of the authorization file, it also simplifies the process of setting up and maintaining the authorization file for the device supplier, and reduces the work of the device supplier for setting up and maintaining the license file Especially for a large number of devices, it can effectively improve the efficiency of device suppliers to set up and maintain license files. Here, the maintenance of the license file mainly includes: issuing and updating the license file.

In a word, the above descriptions are only preferred embodiments of the present invention, and are not intended to limit the protection scope of the present invention. Any modifications, equivalent replacements, improvements, etc. made within the spirit and principles of the present invention shall be included within the protection scope of the present invention.

Claims (5)

1. An authorization method for controlling multiple devices, the method comprising:

A. receiving an authorization file, wherein the authorization file comprises permitted use range information and capability control information, and the permitted use range information is set by adopting a continuous interval of equipment identification information;

B. and comparing the identification information corresponding to the equipment with the permitted use range information in the authorization file, if the identification information of the equipment exists in the range represented by the permitted use range information of the authorization file, determining that the equipment has the authority to use the authorization file, acquiring capacity control information comprising the running speed and/or function setting of the equipment from the authorization file, and controlling the running speed and/or function setting of the equipment according to the acquired capacity control information.

2. The method of claim 1, wherein the authorization file further comprises: the validity of the authorization file is checked for conditions,

before the step B, the method further comprises: and B, verifying the validity of the authorization file according to the validity verification condition, and executing the step B when the verification result is valid.

3. The method of claim 1, wherein when the device is a physical device, the identification information of the device is: the equipment comprises an identification number of an important component or a combination of identification numbers of a plurality of important components, and the identification number or the identification number combination can uniquely identify the equipment.

4. A communication device that controls authorization of multiple devices, comprising:

the authorization confirming unit is used for comparing the identification information corresponding to the equipment with the permitted use range represented by the equipment identification information continuous interval in the received authorization file, and if the identification information of the equipment exists in the permitted use range of the authorization file, determining that the equipment has the authority of using the authorization file;

and the equipment control unit is used for acquiring the capacity control information comprising the running speed and/or the function setting of the equipment from the authorization file and controlling the running speed and/or the function setting of the equipment according to the acquired capacity control information.

5. A server that controls authorization of multiple devices, comprising: a request receiving unit configured to receive an authorization request from a device, the request receiving unit further comprising:

the device authorization confirming unit is used for comparing the identification information of the device corresponding to the received authorization request with the permitted use range represented by the device identification information continuous interval in the stored authorization file, and if the identification information of the device exists in the permitted use range of the authorization file, determining that the device has the authority of using the authorization file;

and the capability control unit is used for responding to the authorization request according to capability control information comprising the equipment running speed and/or the function setting in the authorization file.

Images