CN104079565A

CN104079565A - Authorization method and device

Info

Publication number: CN104079565A
Application number: CN201410264199.9A
Authority: CN
Inventors: 江波; 李锋
Original assignee: Xiaomi Inc
Current assignee: Beijing Xiaomi Technology Co Ltd; Xiaomi Inc
Priority date: 2014-06-13
Filing date: 2014-06-13
Publication date: 2014-10-01

Abstract

The invention relates to an authorization method and device, and belongs to the technical field of networks. The method comprises the steps that a first terminal receives an authorized instruction, and the authorized instruction is used for indicating that specified permissions are authorized to other terminals; the first terminal obtains adjacent device identification lists, and the adjacent device identification lists are generated according to device identification of a terminal adjacent to the first terminal; when the first terminal detects selection operation on a second terminal in the adjacent device identification lists, the device identification of the second terminal is obtained; the first terminal sends an authorization request to a server, the authorization request is carried with the device identification and the specified permissions, the server is used for obtaining authorization information, corresponding to the specified permissions, of the first terminal when the authorization request is received, and the server authorizes the specified permissions to the second terminal. In the authorization process, a user does not need to input device identification on the first terminal, and does not need to input the authorization information on the second terminal, and operation by a user is simplified.

Description

Authorization method and device

Technical field

The disclosure is directed to networking technology area, is about authorization method and device specifically.

Background technology

Along with the development of cloud, different terminals can be based on same account information logon server, by server, realizes the synchronous of resource information on different terminals.And in daily life, user may wish the resource information on first terminal to be synchronized to current not second terminal of login, now, just need user in this second terminal, to input the account information that this first terminal is used, complex operation.For example, speaker uploads onto the server the speech draft on conventional first terminal based on account information, when speaker wishes the speech draft to be synchronized in the second terminal of meeting room, in this second terminal, input this account information, make this second terminal login this server based on this account information, this server sends to this second terminal by speech draft corresponding to this account information, and speaker can open speech draft in this second terminal.

Operation for fear of input account information, this first terminal can obtain the device identification of this second terminal, and based on this account information, to this server, send authorization requests, this authorization requests is carried this device identification, when this server receives this authorization requests, according to this device identification and this account information, this account information is licensed to this second terminal, and this second terminal is set to the state based on this account information login, and this second terminal can be logined automatically.

In above-mentioned licensing process, although input account information without user in this second terminal, need user to inquire this device identification in this second terminal, and on this first terminal, input this device identification, complex operation.

Summary of the invention

In order to solve the problem existing in correlation technique, the disclosure provides a kind of authorization method and device.Described technical scheme is as follows:

According to the first aspect of disclosure embodiment, a kind of authorization method is provided, described method comprises:

First terminal receives authorized order, and described authorized order is used to indicate authorizes specified right for other-end;

Described first terminal obtains nearby device identification list, and described nearby device identification list generates according to the device identification of the terminal adjacent with described first terminal;

When described first terminal detects selection when operation to the second terminal in described nearby device identification list, the device identification of obtaining described the second terminal;

Described first terminal sends authorization requests to server, described authorization requests is carried described device identification and described specified right, described server is for when receiving described authorization requests, obtain the authentication information that described first terminal is corresponding with described specified right, according to described device identification and described authentication information, for described the second terminal is authorized described specified right.

Described first terminal obtains nearby device identification list and comprises:

Each terminal broadcasting equipment sign, described first terminal receives the device identification of at least one terminal broadcast;

Described first terminal, according to the device identification of described at least one terminal broadcast, generates described nearby device identification list.

Described first terminal sends geographical location information and device identification to described server, the geographical location information of each terminal that described server receives for basis, determine at least one terminal in described first terminal preset range, according to the device identification of at least one terminal in described preset range, generate described nearby device identification list, return to described first terminal;

Described first terminal receives described nearby device identification list.

Described first terminal sends hotspot information and device identification to described server, the hotspot information of each terminal that described server receives for basis, determine at least one the identical terminal of hotspot connecting with described first terminal, according to the device identification of described at least one terminal, generate described nearby device identification list, return to described first terminal;

Described first terminal receives described nearby device identification list.

After described first terminal obtains nearby device identification list, described method also comprises:

Described first terminal display reminding message and confirmation Show Options, described prompting message is used for pointing out user to find adjacent end;

When described first terminal detects the clicking operation to described confirmation Show Options, show described nearby device identification list.

According to the second aspect of disclosure embodiment, a kind of authorization method is provided, described method comprises:

Receive the authorization requests that first terminal sends, described authorization requests is carried the device identification of the second terminal of specified right and described specified right to be granted, described device identification is obtained from nearby device identification list by described first terminal, and described nearby device identification list generates according to the device identification of the terminal adjacent with described first terminal;

Obtain the authentication information that described first terminal is corresponding with described specified right;

According to described device identification and described authentication information, for described the second terminal is authorized described specified right.

Before the authorization requests that described reception first terminal sends, described method also comprises:

When receiving the geographical location information of at least one terminal and device identification, according to the geographical location information of described at least one terminal, determine at least one terminal in described first terminal preset range;

According to the device identification of at least one terminal in described preset range, generate described nearby device identification list;

To described first terminal, send described nearby device identification list.

When receiving the hotspot information of at least one terminal and device identification, according to the hotspot information of described at least one terminal, determine at least one terminal identical with the hotspot of described first terminal connection;

Device identification according at least one terminal of determining, generates described nearby device identification list;

To described first terminal, send described nearby device identification list.

Described method also comprises:

When described authorization requests is login authorization requests, obtain the account information of described first terminal;

According to described device identification, described the second terminal is set to the state based on described account information login.

Described according to described device identification and described authentication information, for before described the second terminal authorizes described specified right, described method also comprises:

According to described device identification, to described the second terminal, send to authorize prompting message, described the second terminal is used for showing described mandate prompting message and license confirmation option, and when the clicking operation detecting described license confirmation option, return authorization is accepted message;

When receiving described mandate and accept message, according to described authentication information, for described the second terminal is authorized described specified right.

Described according to described device identification and described authentication information, for after described the second terminal authorizes described specified right, described method also comprises:

When receive that described the second terminal sends exit request time, reclaim the described specified right of described the second terminal.

According to the third aspect of disclosure embodiment, a kind of authorization device is provided, described device comprises:

Command reception module, for receiving authorized order, described authorized order is used to indicate authorizes specified right for other-end;

List acquisition module, for obtaining nearby device identification list, described nearby device identification list generates according to the device identification of the terminal adjacent with described authorization device;

Device identification acquisition module, for selection when operation when detecting the second terminal of described nearby device identification list, the device identification of obtaining described the second terminal;

Request sending module, for sending authorization requests to server, described authorization requests is carried described device identification and described specified right, described server is for when receiving described authorization requests, obtain the authentication information that described authorization device is corresponding with described specified right, according to described device identification and described authentication information, for described the second terminal is authorized described specified right.

Described list acquisition module comprises:

Device identification receiving element, for receiving the device identification of at least one terminal broadcast, each terminal broadcasting equipment sign;

List generation unit, for according to the device identification of described at least one terminal broadcast, generates described nearby device identification list.

Described list acquisition module comprises:

First information transmitting element, for sending geographical location information and device identification to described server, the geographical location information of each terminal that described server receives for basis, determine at least one terminal in preset range, according to the device identification of at least one terminal in described preset range, generate described nearby device identification list;

The first list receiving element, for receiving described nearby device identification list.

Described list acquisition module comprises:

The second information transmitting unit, for sending hotspot information and device identification to described server, the hotspot information of each terminal that described server receives for basis, determine at least one the identical terminal of hotspot connecting with described authorization device, according to the device identification of described at least one terminal, generate described nearby device identification list, return to described first terminal;

The second list receiving element, for receiving described nearby device identification list.

Described device also comprises:

The first display module, for display reminding message and confirmation Show Options, described prompting message is used for pointing out user to find adjacent end;

The second display module, during for clicking operation when detecting described confirmation Show Options, shows described nearby device identification list.

According to the fourth aspect of disclosure embodiment, a kind of authorization device is provided, described device comprises:

Request receiving module, the authorization requests sending for receiving first terminal, described authorization requests is carried the device identification of the second terminal of specified right and described specified right to be granted, described device identification is obtained from nearby device identification list by described first terminal, and described nearby device identification list generates according to the device identification of the terminal adjacent with described first terminal;

Authentication information acquisition module, for obtaining the authentication information that described first terminal is corresponding with described specified right;

Authorization module, for according to described device identification and described authentication information, for described the second terminal is authorized described specified right.

Described device also comprises:

First terminal determination module, for when receiving the geographical location information of at least one terminal and device identification, according to the geographical location information of described at least one terminal, determines at least one terminal in described first terminal preset range;

First row table generation module, for according to the device identification of at least one terminal in described preset range, generates described nearby device identification list;

The first list sending module, for sending described nearby device identification list to described first terminal.

Described device also comprises:

The second terminal deciding module, for when receiving the hotspot information of at least one terminal and device identification, according to the hotspot information of described at least one terminal, determines at least one terminal identical with the hotspot of described first terminal connection;

Secondary series table generation module, for according to the device identification of at least one terminal of determining, generates described nearby device identification list;

The second list sending module, for sending described nearby device identification list to described first terminal.

Described device also comprises:

Account information acquisition module, for being while logining authorization requests when described authorization requests, obtains the account information of described first terminal;

Login arranges module, and for according to described device identification, described the second terminal is set to the state based on described account information login.

Described device also comprises:

Prompting message sending module, for according to described device identification, to described the second terminal, send and authorize prompting message, described the second terminal is used for showing described mandate prompting message and license confirmation option, and when the clicking operation detecting described license confirmation option, return authorization is accepted message;

Accept authorization module, for when receiving described mandate and accept message, according to described authentication information, for described the second terminal is authorized described specified right.

Described device also comprises:

Authority recycling module, for when receive that described the second terminal sends exit request time, reclaim the described specified right of described the second terminal.

The technical scheme that embodiment of the present disclosure provides can comprise following beneficial effect:

The method and apparatus that the present embodiment provides, by when first terminal receives authorized order, obtain nearby device identification list, this nearby device identification list generates according to the device identification of the terminal adjacent with this first terminal, user can choose the second terminal that will authorize specified right from this nearby device identification list, when this first terminal detects selection when operation to this second terminal, the device identification of obtaining this second terminal from this nearby device identification list, to this server, send authorization requests, when this server receives this authorization requests, according to this device identification and authentication information, for this second terminal is authorized specified right, in licensing process, without user, on this first terminal, input the device identification of this second terminal, also without user, in this second terminal, input this first terminal corresponding with this specified right authentication information, simplified user's operation.

Should be understood that, it is only exemplary that above general description and details are hereinafter described, and can not limit the disclosure.

Accompanying drawing explanation

Accompanying drawing is herein merged in specification and forms the part of this specification, shows embodiment according to the invention, and is used from and explains principle of the present invention with specification one.

Fig. 1 is according to the structural representation of a kind of authoring system shown in an exemplary embodiment;

Fig. 2 is according to the flow chart of a kind of authorization method shown in an exemplary embodiment;

Fig. 3 is according to the flow chart of a kind of authorization method shown in an exemplary embodiment;

Fig. 4 is according to the flow chart of a kind of authorization method shown in an exemplary embodiment;

Fig. 5 is according to the block diagram of a kind of authorization device shown in an exemplary embodiment;

Fig. 6 is according to the block diagram of a kind of authorization device shown in an exemplary embodiment;

Fig. 7 is according to a kind of block diagram for the device of authorizing shown in an exemplary embodiment;

Fig. 8 is according to a kind of block diagram for the device of authorizing shown in an exemplary embodiment.

Embodiment

For making object of the present disclosure, technical scheme and advantage clearer, below in conjunction with execution mode and accompanying drawing, the disclosure is described in further details.At this, exemplary embodiment of the present disclosure and explanation thereof are used for explaining the disclosure, but not as to restriction of the present disclosure.

Disclosure embodiment provides a kind of authorization method and device, below in conjunction with accompanying drawing, the disclosure is elaborated.

Fig. 1 is according to the structural representation of a kind of authoring system shown in an exemplary embodiment, referring to Fig. 1, this mandate comprises: server, first terminal and the second terminal, between this first terminal and this server, by network, be connected, and between this second terminal and this server, by network, be connected.

Wherein, this first terminal has specified right, and this second terminal does not have specified right.This first terminal for when receiving authorized order, obtains nearby device identification list, and this authorized order is used to indicate authorizes specified right for other-end.This first terminal is also for selection when operation when detecting the second terminal of this nearby device identification list, and the device identification of obtaining the second terminal, sends authorization requests to this server, and this authorization requests is carried this device identification and specified right.This server, for when receiving this authorization requests, obtains the authentication information that this first terminal is corresponding with this specified right, according to this device identification and this authentication information, for this second terminal is authorized this specified right.

Fig. 2 is according to the flow chart of a kind of authorization method shown in an exemplary embodiment, and as shown in Figure 2, this authorization method, for first terminal, comprises the following steps:

In step 201, receive authorized order, this authorized order is used to indicate authorizes specified right for other-end.

In step 202, obtain nearby device identification list, this nearby device identification list generates according to the device identification of the terminal adjacent with this first terminal.

In one embodiment, step 202 can be carried out prior to step 201, that is, in one embodiment, can first perform step 202, then perform step 201.

In step 203, when selection when operation detecting the second terminal in this nearby device identification list, the device identification of obtaining this second terminal.

In step 204, to server, send authorization requests, this authorization requests is carried this device identification and this specified right, this server is for when receiving this authorization requests, obtain the authentication information that this first terminal is corresponding with this specified right, according to this device identification and this authentication information, for this second terminal is authorized this specified right.

The method that the present embodiment provides, by when first terminal receives authorized order, obtain nearby device identification list, this nearby device identification list generates according to the device identification of the terminal adjacent with this first terminal, user can choose the second terminal that will authorize specified right from this nearby device identification list, when this first terminal detects selection when operation to this second terminal, the device identification of obtaining this second terminal from this nearby device identification list, to this server, send authorization requests, when this server receives this authorization requests, according to this device identification and authentication information, for this second terminal is authorized specified right, in licensing process, without user, on this first terminal, input the device identification of this second terminal, also without user, in this second terminal, input the authentication information that this first terminal is corresponding with this specified right, simplified user's operation.

This first terminal obtains nearby device identification list and comprises:

Each terminal broadcasting equipment sign, this first terminal receives the device identification of at least one terminal broadcast;

This first terminal, according to the device identification of this at least one terminal broadcast, generates this nearby device identification list.

This first terminal obtains nearby device identification list and comprises:

This first terminal sends geographical location information and device identification to this server, the geographical location information of each terminal that this server receives for basis, determine at least one terminal in this first terminal preset range, according to the device identification of at least one terminal in this preset range, generate this nearby device identification list, return to this first terminal;

This first terminal receives this nearby device identification list.

This first terminal obtains nearby device identification list and comprises:

This first terminal sends hotspot information and device identification to this server, the hotspot information of each terminal that this server receives for basis, determine at least one the identical terminal of hotspot connecting with this first terminal, according to the device identification of this at least one terminal, generate this nearby device identification list, return to this first terminal;

This first terminal receives this nearby device identification list.

After this first terminal obtains nearby device identification list, the method also comprises:

This first terminal display reminding message and confirmation Show Options, this prompting message is used for pointing out user to find adjacent end;

When this first terminal detects the clicking operation to this confirmation Show Options, show this nearby device identification list.

Above-mentioned all optional technical schemes, can adopt any combination to form optional embodiment of the present invention, and this is no longer going to repeat them.

Fig. 3 is according to the flow chart of a kind of authorization method shown in an exemplary embodiment, and as shown in Figure 3, this authorization method, for server, comprises the following steps:

In step 301, receive the authorization requests that first terminal sends, this authorization requests is carried the device identification of the second terminal of specified right and this specified right to be granted, this device identification is obtained from nearby device identification list by this first terminal, and this nearby device identification list generates according to the device identification of the terminal adjacent with this first terminal.

In step 302, obtain the authentication information that this first terminal is corresponding with this specified right.

In step 303, according to this device identification and this authentication information, for this second terminal is authorized this specified right.

The method that the present embodiment provides, by when first terminal receives authorized order, obtain nearby device identification list, this nearby device identification list generates according to the device identification of the terminal adjacent with this first terminal, user can choose the second terminal that will authorize specified right from this nearby device identification list, when this first terminal detects selection when operation to this second terminal, the device identification of obtaining this second terminal from this nearby device identification list, to this server, send authorization requests, when this server receives this authorization requests, according to this device identification and authentication information, for this second terminal is authorized specified right, in licensing process, without user, on this first terminal, input the device identification of this second terminal, also without user, in this second terminal, input this first terminal corresponding with this specified right authentication information, simplified user's operation.

Before this receives the authorization requests of first terminal transmission, the method also comprises:

When receiving the geographical location information of at least one terminal and device identification, according to the geographical location information of this at least one terminal, determine at least one terminal in this first terminal preset range;

According to the device identification of at least one terminal in this preset range, generate this nearby device identification list;

To this first terminal, send this nearby device identification list.

When receiving the hotspot information of at least one terminal and device identification, according to the hotspot information of this at least one terminal, determine at least one terminal identical with the hotspot of this first terminal connection;

Device identification according at least one terminal of determining, generates this nearby device identification list;

To this first terminal, send this nearby device identification list.

The method also comprises:

When this authorization requests is login authorization requests, obtain the account information of this first terminal;

According to this device identification, this second terminal is set to the state based on this account information login.

This is according to this device identification and this authentication information, and for before this second terminal authorizes this specified right, the method also comprises:

According to this device identification, to this second terminal, send and authorize prompting message, this second terminal is used for showing this mandate prompting message and license confirmation option, and when the clicking operation detecting this license confirmation option, return authorization is accepted message;

When receiving this mandate and accept message, according to this authentication information, for this second terminal is authorized this specified right.

This is according to this device identification and this authentication information, and for after this second terminal authorizes this specified right, the method also comprises:

When receive that this second terminal sends exit request time, reclaim this specified right of this second terminal.

Fig. 4 is according to the flow chart of a kind of authorization method shown in an exemplary embodiment, as shown in Figure 4, comprises the following steps:

In step 401, first terminal receives authorized order, and this authorized order is used to indicate authorizes specified right for other-end.

Wherein, this specified right can be logon rights, access rights, download permission etc., and the present embodiment does not limit this.This first terminal has had this specified right, can carry out operation corresponding to this specified right.For example, can logon server when this first terminal has this logon rights, when having access rights, this first terminal can access the resource that this server provides, when having download permission, this first terminal can download the file that this server provides.

In the present embodiment, this authorized order is used to indicate and authorizes specified right for other-end.This first terminal can provide the authorization options of a plurality of authorities that had, this authorized order can be triggered the clicking operation of the authorization options of one of them authority by user, when this first terminal detects the clicking operation to arbitrary authorization options, determine and receive this authorized order, now, this first terminal is using authority corresponding to this clicking operation as this specified right, so that follow-up the second terminal of selecting for user is authorized this specified right.For example, this first terminal shows login authorization options, access authorization option and downloads authorization options, when user being detected the clicking operation of login authorization options, determines and receives the authorized order to logon rights, using logon rights as this specified right.

When terminal only gets correct authentication information corresponding to this specified right, this server just can be authorized specified right for this terminal, and user has inputted correct authentication information on this first terminal, this first terminal has had this specified right, when user wishes the specified right of this first terminal to authorize second terminal without this specified right, can on this first terminal, trigger this authorized order, so that in subsequent process, this server, according to the authentication information of this first terminal, is that the second terminal is authorized this specified right.

In step 402, this first terminal obtains nearby device identification list.

Wherein, this nearby device identification list generates according to the device identification of the terminal adjacent with this first terminal, and this nearby device identification list comprises the device identification of at least one adjacent end of this first terminal.This device identification, for determining unique terminal, can be equipment Serial Number, terminal name or other signs of terminal, and the present embodiment does not limit this.

In actual application, user probably wishes the specified right of this first terminal to authorize the terminal adjacent with this first terminal, for fear of user's input equipment sign on this first terminal, this first terminal can obtain this nearby device identification list, the device identification of at least one terminal adjacent with this first terminal is recommended to user, so that user selects to wish to authorize the terminal of this specified right from this nearby device identification list.

Accordingly, this step 402 can comprise the following steps any one in 402a-402c:

402a, each terminal broadcasting equipment sign, this first terminal receives the device identification of at least one terminal broadcast, and the device identification according to this at least one terminal broadcast, generates this nearby device identification list.

Each terminal can, based on specified protocol broadcasting equipment sign, when this first terminal is based on this specified protocol, while receiving the device identification of at least one terminal broadcast, according to this at least one device identification, generate this nearby device identification list.Wherein, this specified protocol can be the agreements such as bluetooth, infrared ray, and the present embodiment does not limit this.

402b, this first terminal send geographical location information and device identification to server, when this server receives the geographical location information of at least one terminal and device identification, according to the geographical location information of this at least one terminal, determine at least one terminal in this first terminal preset range, according to the device identification of at least one terminal in this preset range, generate this nearby device identification list, to this first terminal, send this nearby device identification list.

In one embodiment, step 402 can be carried out prior to step 401, that is, in one embodiment, can first perform step 402 and perform step 401 again.

In the present embodiment, at least one terminal in this first terminal preset range can be thought the terminal adjacent with this first terminal, be likely that user wishes to authorize the terminal of this specified right, therefore, each terminal can be obtained geographical location information, to this server, send this geographical location information and device identification, when this server receives the geographical location information of at least one terminal and device identification, according to the geographical location information of this at least one terminal, determine at least one terminal in this first terminal preset range, according to the device identification of at least one terminal in this preset range, generate this nearby device identification list, to this first terminal, send this nearby device identification list, so that user selects to wish to authorize the terminal of this specified right from this nearby device identification list.

Wherein, this geographical location information can be positional information of the latitude and longitude coordinates of terminal, the point of interest nearest apart from terminal etc., this preset range can be that the center of circle, predeterminable range are the definite border circular areas of radius for this first terminal position, this predeterminable range can be determined by technical staff when developing, or in application process, according to the actual terminal number getting, adjust, the present embodiment does not all limit this.

402c, this first terminal send hotspot information and device identification to this server, when this server receives the hotspot information of at least one terminal and device identification, according to the hotspot information of this at least one terminal, determine at least one the identical terminal of hotspot connecting with this first terminal, according to the device identification of at least one terminal of determining, generate this nearby device identification list, to this first terminal, send this nearby device identification list.

In the present embodiment, after terminal access hotspot, be network-connectable, this hotspot information can be the sequence number of hotspot or identifier etc., the present embodiment does not limit this.The identical terminal of hotspot connecting with this first terminal can be thought the terminal adjacent with this first terminal, be likely that user wishes to authorize the terminal of this specified right, therefore, each terminal can be obtained hotspot information, to this server, send hotspot information and device identification, when this server receives the hotspot information of at least one terminal and device identification, according to the hotspot information of this at least one terminal, determine at least one the identical terminal of hotspot connecting with this first terminal, according to the device identification of at least one terminal of determining, generate this nearby device identification list, to this first terminal, send this nearby device identification list.

In step 403, when this first terminal detects selection when operation to the second terminal in this nearby device identification list, the device identification of obtaining this second terminal.

When this first terminal gets this nearby device identification list, can show this nearby device identification list, now, user can select to wish to authorize the terminal of this specified right from this nearby device identification list, when this first terminal detects selection when operation of user to the second terminal in this nearby device identification list, show that user wishes to authorize this specified right for this second terminal, the device identification that this first terminal obtains this second terminal from this nearby device identification list.

Wherein, to the selection operation of this second terminal, can be the clicking operation of user to the device identification of this second terminal, or to this second terminal corresponding authorize clicking operation of option etc., the present embodiment does not limit this.

When the present embodiment gets this nearby device identification list with this first terminal, show that this nearby device identification list is that example describes, and in actual application, before this step 403, the method can also comprise: this first terminal display reminding message and confirmation Show Options, this prompting message is used for pointing out user to find adjacent end, and this confirmation Show Options confirms to show this nearby device identification list for user.When this first terminal detects user to the clicking operation of this confirmation Show Options, then show this nearby device identification list.

Certainly, this first terminal can also be when showing this prompting message and this confirmation Show Options, show input option, when this first terminal detects user to the clicking operation of this input option, do not show this nearby device identification list, but display device sign input field, this device identification input field is for inputting the device identification of the terminal of this specified right to be granted.So, when user wishes the specified right of this first terminal to authorize with non-conterminous the second terminal of this first terminal, can click this input option, input equipment sign in this device identification input field, the embodiment of the present invention does not limit this.

Further, this first terminal can also be before obtaining this nearby device identification list, show and confirm search option and this input option, this confirmation search option confirms to obtain this nearby device identification list for user, and this input option is for display device sign input field.When this first terminal detects user to the clicking operation of this confirmation search option, obtain this nearby device identification list, and show this nearby device identification list, and when this first terminal detects user to the clicking operation of this input option, show this device identification input field, obtain user in the device identification of this device identification input field input, now this first terminal is without obtaining this nearby device identification list.

In step 404, this first terminal sends authorization requests to server, and this authorization requests is carried this device identification and this specified right.In order to authorize this specified right for this second terminal, this first terminal sends this authorization requests to this server, and this authorization requests is carried this device identification and this specified right, so that this server is according to this device identification, for this second terminal is authorized this specified right.

In step 405, when this server receives this authorization requests, obtain the authentication information that this first terminal is corresponding with this specified right, according to this device identification and this authentication information, for this second terminal is authorized this specified right.

In the present embodiment, this first terminal has this specified right, and this server has been preserved the authentication information that this first terminal is corresponding with this specified right, when this server receives this authorization requests, obtain this authentication information, according to this device identification, determine this second terminal, according to this authentication information, for this second terminal is authorized this specified right.

In the present embodiment, when this specified right is different, the authentication information difference that this specified right is corresponding, the mode that this server is authorized this specified right is also different.This step 404 and 405 can comprise the following steps at least one in (1-1) to (1-3):

(1-1) when this specified right is logon rights, this first terminal sends login authorization requests to this server, when this server receives this login authorization requests, obtain the account information of this first terminal, according to this device identification, this second terminal is set to the state based on this account information login, and this second terminal, without this account information of input, can be logined this server.

When this specified right is logon rights, the authentication information that this first terminal is corresponding with this specified right is the account information of using when this first terminal is logined this server, when this server receives this login authorization requests, obtain the account information of this first terminal, this second terminal is set to the state based on this account information login.Wherein, this account information can comprise user account and password etc., and the present embodiment does not limit this.

After this second terminal is logined this server based on this account information, this server can be synchronized to resource information corresponding to this account information this second terminal, user can check this resource information or upgrade resource information in this second terminal, realized synchronizeing of first terminal and resource information in this second terminal.

(1-2) when this specified right is access rights, this first terminal sends access authorization request to this server, when this server receives this access authorization request, obtain the access token that is handed down to this first terminal, according to this device identification, this access token is handed down to this second terminal, makes this second terminal based on this access token, access the resource that this server provides.

In the present embodiment, this server can be for by the terminal distribution access token of access registrar, and the terminal by access registrar, based on this access token, is accessed the resource that this server provides.When this specified right is access rights, the authentication information that this first terminal is corresponding with this specified right is the access token of this first terminal, when this server receives this access authorization request, the access token of this first terminal will be handed down to, be handed down to this second terminal, this second terminal can, based on this access token, be accessed the resource that this server provides.

In actual application, this access token can be carried on account information, when this server is determined this first terminal by access registrar, for the account information of this first terminal is added this access token, so, when this server receives this access authorization request, according to this device identification, this second terminal is set to the state based on this account information login, this access token can be handed down to this second terminal, and this second terminal can have this specified right.

(1-3) when this specified right is download permission, this first terminal sends and downloads authorization requests to this server, when this server receives this download authorization requests, obtain the download token that is handed down to this first terminal, according to this device identification, this download token is handed down to this second terminal, makes this second terminal download token based on this, download the file that this server provides.

In the present embodiment, this server can be downloaded token for the terminal distribution authenticating by download, and the terminal authenticating by download is downloaded token based on this, downloads the file that this server provides.When this specified right is download permission, the authentication information that this first terminal is corresponding with this specified right is the download token of this first terminal, when this server receives this download authorization requests, the download token of this first terminal will be handed down to, be handed down to this second terminal, this second terminal can be downloaded token based on this, downloads the file that this server provides.

In actual application, this download token can be carried on account information, this server is determined when this first terminal authenticates by download, for the account information of this first terminal is added this download token, so, when this server receives this download authorization requests, according to this device identification, this second terminal is set to the state based on this account information login, this can be downloaded to token and be handed down to this second terminal, and this second terminal can have this specified right.

In above-mentioned steps (1-1) to (1-3), provided the mode of authorizing of three kinds of specified right, but do not formed the restriction to this specified right, this specified right can also comprise other authorities, and the present embodiment does not repeat them here.

It should be noted that, the present embodiment be take this server and from this server, is obtained authentication information that this first terminal is corresponding with this specified right and describe as example, in fact, this server can also require this first terminal to send this authentication information, this first terminal sends authorization requests to this server, this authorization requests is carried this device identification, this specified right and authentication information corresponding to this specified right, this server first judges whether the authentication information carrying in this authorization requests mates with the authentication information of preserving in this server, if coupling, this server is again according to this device identification and this authentication information, for this second terminal is authorized this specified right.

Further it should be noted that, according to this device identification and this authentication information, for before this second terminal authorizes this specified right, this server can also be according to this device identification, to this second terminal, send and authorize prompting message, when this second terminal receives this mandate prompting message, show this mandate prompting message and license confirmation option, when this second terminal detects user to the clicking operation of this license confirmation option, to this server, send to authorize and accept message, when this server receives this mandate and accepts message, again according to this authentication information, for this second terminal is authorized this specified right.

In step 406, when this server receive that this second terminal sends exit request time, reclaim the specified right of this second terminal.

In the present embodiment, after this server is authorized this specified right for this second terminal, this second terminal can be carried out operation corresponding to this specified right.But, in order to guarantee the safety of user authentication information, the specified right that this server is authorized for this second terminal can be temporary, and once this second terminal executes operation corresponding to this specified right, while having exited interface corresponding to this specified right, this second terminal can send and exit request to this server, and now, this server is the specified right of recyclable this second terminal.

Corresponding to giving an example of above-mentioned steps (1-1) to (1-3), this step 406 can comprise the following steps at least one in (2-1) to (2-3):

(2-1) this specified right is logon rights, when this server determines that this second terminal has been closed the interface of this server association, reclaims the logon rights of this second terminal.When this second terminal is logined this server next time, still need to input this account information, or again by this first terminal, for this second terminal, authorize this logon rights.

(2-2) this specified right is access rights, when this server determines that this second terminal has been closed the resource that this server provides, reclaims the access rights of this second terminal.When this second terminal is accessed the resource that this server provides next time, still need to obtain access token, or again by this first terminal, for this second terminal, authorize this access rights.

(2-3) this specified right is download permission, when this server determines that this second terminal has been closed the download interface of this server association, reclaims the download permission of this second terminal.When this second terminal is downloaded the resource that this server provides next time, still need to obtain download token, or again by this first terminal, for this second terminal, authorize this download permission.

It should be noted that, in the present embodiment, the computer that this first terminal can have for user or mobile phone etc., this second terminal can be intelligent television, Set Top Box or public computer etc., the present embodiment does not limit this.Especially when this second terminal be intelligent television or Set Top Box etc. need to control by remote controller terminal time, user inputs this authentication information in this second terminal can consume the too much time, the device identification of obtaining this second terminal from this second terminal also can consume the too much time, and when the authentication information of the first terminals such as user's mobile phone or computer is offered to the second terminal, without user, in this second terminal, input the authentication information of this first terminal, the device identification of also obtaining this second terminal without user from this second terminal, be input to again in this first terminal, can save a lot of time, simplify user's operation.

Fig. 5 is according to the block diagram of a kind of authorization device shown in an exemplary embodiment.Referring to Fig. 5, this device comprises command reception module 501, list acquisition module 502, device identification acquisition module 503 and request sending module 504.

This command reception module 501 is configured to for receiving authorized order, and this authorized order is used to indicate authorizes specified right for other-end;

This list acquisition module 502 is configured to for obtaining nearby device identification list, and this nearby device identification list generates according to the device identification of the terminal adjacent with this authorization device;

This device identification acquisition module 503 is configured to for selection when operation when detecting the second terminal of this nearby device identification list, the device identification of obtaining this second terminal;

This request sending module 504 is configured to for sending authorization requests to server, this authorization requests is carried this device identification and this specified right, this server is for when receiving this authorization requests, obtain the authentication information that this authorization device is corresponding with this specified right, according to this device identification and this authentication information, for this second terminal is authorized this specified right.

This list acquisition module 502 comprises:

List generation unit, for according to the device identification of this at least one terminal broadcast, generates this nearby device identification list.

This list acquisition module 502 comprises:

First information transmitting element, for sending geographical location information and device identification to this server, the geographical location information of each terminal that this server receives for basis, determine at least one terminal in preset range, according to the device identification of at least one terminal in this preset range, generate this nearby device identification list;

The first list receiving element, for receiving this nearby device identification list.

This list acquisition module 502 comprises:

The second information transmitting unit, for sending hotspot information and device identification to this server, the hotspot information of each terminal that this server receives for basis, determine at least one the identical terminal of hotspot connecting with this authorization device, according to the device identification of this at least one terminal, generate this nearby device identification list, return to this first terminal;

The second list receiving element, for receiving this nearby device identification list.

This device also comprises:

The first display module, for display reminding message and confirmation Show Options, this prompting message is used for pointing out user to find adjacent end;

The second display module, during for clicking operation when detecting this confirmation Show Options, shows this nearby device identification list.

Fig. 6 is according to the block diagram of a kind of authorization device shown in an exemplary embodiment.Referring to Fig. 6, this device comprises request receiving module 601, authentication information acquisition module 602 and authorization module 603.

This request receiving module 601 is configured to the authorization requests sending for receiving first terminal, this authorization requests is carried the device identification of the second terminal of specified right and this specified right to be granted, this device identification is obtained from nearby device identification list by this first terminal, and this nearby device identification list generates according to the device identification of the terminal adjacent with this first terminal;

This authentication information acquisition module 602 is configured to for obtaining the authentication information that this first terminal is corresponding with this specified right;

This authorization module 603 is configured to for according to this device identification and this authentication information, for this second terminal is authorized this specified right.

This device also comprises:

First terminal determination module, for when receiving the geographical location information of at least one terminal and device identification, according to the geographical location information of this at least one terminal, determines at least one terminal in this first terminal preset range;

First row table generation module, for according to the device identification of at least one terminal in this preset range, generates this nearby device identification list;

The first list sending module, for sending this nearby device identification list to this first terminal.

This device also comprises:

The second terminal deciding module, for when receiving the hotspot information of at least one terminal and device identification, according to the hotspot information of this at least one terminal, determines at least one terminal identical with the hotspot of this first terminal connection;

Secondary series table generation module, for according to the device identification of at least one terminal of determining, generates this nearby device identification list;

The second list sending module, for sending this nearby device identification list to this first terminal.

This device also comprises:

Account information acquisition module, for being while logining authorization requests when this authorization requests, obtains the account information of this first terminal;

Login arranges module, and for according to this device identification, this second terminal is set to the state based on this account information login.

This device also comprises:

Prompting message sending module, for according to this device identification, to this second terminal, send and authorize prompting message, this second terminal is used for showing this mandate prompting message and license confirmation option, and when the clicking operation detecting this license confirmation option, return authorization is accepted message;

Accept authorization module, for when receiving this mandate and accept message, according to this authentication information, for this second terminal is authorized this specified right.

This device also comprises:

Authority recycling module, for when receive that this second terminal sends exit request time, reclaim this specified right of this second terminal.

About the device in above-described embodiment, wherein the concrete mode of modules executable operations have been described in detail in the embodiment of relevant the method, will not elaborate explanation herein.

It should be noted that: the authorization device that above-described embodiment provides is when authorizing, only the division with above-mentioned each functional module is illustrated, in practical application, can above-mentioned functions be distributed and by different functional modules, completed as required, the internal structure that is about to terminal and server is divided into different functional modules, to complete all or part of function described above.In addition, the authorization device that above-described embodiment provides and authorization method embodiment belong to same design, and its specific implementation process refers to embodiment of the method, repeats no more here.

Fig. 7 is according to a kind of block diagram for the device 700 of authorizing shown in an exemplary embodiment.For example, device 700 can be mobile phone, computer, digital broadcast terminal, information receiving and transmitting equipment, game console, flat-panel devices, Medical Devices, body-building equipment, personal digital assistant etc.

Referring to Fig. 7, device 700 can comprise following one or more assembly: processing components 702, memory 704, power supply module 706, multimedia groupware 708, audio-frequency assembly 710, the interface 712 of I/O (I/O), sensor cluster 714, and communications component 716.

The integrated operation of processing components 702 common control device 700, such as with demonstration, call, data communication, the operation that camera operation and record operation are associated.Treatment element 702 can comprise that one or more processors 720 carry out instruction, to complete all or part of step of above-mentioned method.In addition, processing components 702 can comprise one or more modules, is convenient to mutual between processing components 702 and other assemblies.For example, processing unit 702 can comprise multi-media module, to facilitate mutual between multimedia groupware 708 and processing components 702.

Memory 704 is configured to store various types of data to be supported in the operation of equipment 700.The example of these data comprises for any application program of operation on device 700 or the instruction of method, contact data, telephone book data, message, picture, video etc.Memory 704 can be realized by the volatibility of any type or non-volatile memory device or their combination, as static RAM (SRAM), Electrically Erasable Read Only Memory (EEPROM), Erasable Programmable Read Only Memory EPROM (EPROM), programmable read only memory (PROM), read-only memory (ROM), magnetic memory, flash memory, disk or CD.

Electric power assembly 706 provides electric power for installing 700 various assemblies.Electric power assembly 706 can comprise power-supply management system, one or more power supplys, and other and the assembly that generates, manages and distribute electric power to be associated for device 700.

Multimedia groupware 708 is included in the screen that an output interface is provided between described device 700 and user.In certain embodiments, screen can comprise liquid crystal display (LCD) and touch panel (TP).If screen comprises touch panel, screen may be implemented as touch-screen, to receive the input signal from user.Touch panel comprises that one or more touch sensors are with the gesture on sensing touch, slip and touch panel.Described touch sensor is the border of sensing touch or sliding action not only, but also detects duration and the pressure relevant to described touch or slide.In certain embodiments, multimedia groupware 708 comprises a front-facing camera and/or post-positioned pick-up head.When equipment 700 is in operator scheme, during as screening-mode or video mode, front-facing camera and/or post-positioned pick-up head can receive outside multi-medium data.Each front-facing camera and post-positioned pick-up head can be fixing optical lens systems or have focal length and optical zoom ability.

Audio-frequency assembly 710 is configured to output and/or input audio signal.For example, audio-frequency assembly 710 comprises a microphone (MIC), and when device 700 is in operator scheme, during as call model, logging mode and speech recognition mode, microphone is configured to receive external audio signal.The audio signal receiving can be further stored in memory 704 or be sent via communications component 716.In certain embodiments, audio-frequency assembly 710 also comprises a loud speaker, for output audio signal.

I/O interface 712 is for providing interface between processing components 702 and peripheral interface module, and above-mentioned peripheral interface module can be keyboard, some striking wheel, button etc.These buttons can include but not limited to: home button, volume button, start button and locking press button.

Sensor cluster 714 comprises one or more transducers, is used to device 700 that the state estimation of various aspects is provided.For example, sensor cluster 714 can detect the opening/closing state of equipment 700, the relative positioning of assembly, for example described assembly is display and the keypad of device 700, the position of all right checkout gear 700 of sensor cluster 714 or 700 1 assemblies of device changes, user is with device 700 existence that contact or do not have the variations in temperature of device 700 orientation or acceleration/deceleration and device 700.Sensor cluster 714 can comprise proximity transducer, be configured to without any physical contact time detect near the existence of object.Sensor cluster 714 can also comprise optical sensor, as CMOS or ccd image sensor, for using in imaging applications.In certain embodiments, this sensor cluster 714 can also comprise acceleration transducer, gyro sensor, Magnetic Sensor, pressure sensor or temperature sensor.

Communications component 716 is configured to be convenient to the communication of wired or wireless mode between device 700 and other equipment.Device 700 wireless networks that can access based on communication standard, as WiFi, 2G or 3G, or their combination.In one exemplary embodiment, communication component 716 receives broadcast singal or the broadcast related information from external broadcasting management system via broadcast channel.In one exemplary embodiment, described communication component 716 also comprises near-field communication (NFC) module, to promote junction service.For example, can be based on radio-frequency (RF) identification (RFID) technology in NFC module, Infrared Data Association (IrDA) technology, ultra broadband (UWB) technology, bluetooth (BT) technology and other technologies realize.

In the exemplary embodiment, device 700 can be realized by one or more application specific integrated circuits (ASIC), digital signal processor (DSP), digital signal processing appts (DSPD), programmable logic device (PLD), field programmable gate array (FPGA), controller, microcontroller, microprocessor or other electronic components, for carrying out said method.

In the exemplary embodiment, also provide a kind of non-provisional computer-readable recording medium that comprises instruction, for example, comprised the memory 704 of instruction, above-mentioned instruction can have been carried out said method by the processor 720 of device 700.For example, described non-provisional computer-readable recording medium can be ROM, random access memory (RAM), CD-ROM, tape, floppy disk and optical data storage equipment etc.

A non-provisional computer-readable recording medium, when the instruction in this storage medium is carried out by the processor of mobile terminal, makes mobile terminal can carry out a kind of authorization method, and the method comprises:

First terminal receives authorized order, and this authorized order is used to indicate authorizes specified right for other-end;

This first terminal obtains nearby device identification list, and this nearby device identification list generates according to the device identification of the terminal adjacent with this first terminal;

When this first terminal detects selection when operation to the second terminal in this nearby device identification list, the device identification of obtaining this second terminal;

This first terminal sends authorization requests to server, this authorization requests is carried this device identification and this specified right, this server is for when receiving this authorization requests, obtain the authentication information that this first terminal is corresponding with this specified right, according to this device identification and this authentication information, for this second terminal is authorized this specified right.

This first terminal obtains nearby device identification list and comprises:

This first terminal receives this nearby device identification list.

This first terminal obtains nearby device identification list and comprises:

This first terminal receives this nearby device identification list.

Another kind of non-provisional computer-readable recording medium, when the instruction in this storage medium is carried out by the processor of mobile terminal, makes mobile terminal can carry out a kind of authorization method, and the method comprises:

Receive the authorization requests that first terminal sends, this authorization requests is carried the device identification of the second terminal of specified right and this specified right to be granted, this device identification is obtained from nearby device identification list by this first terminal, and this nearby device identification list generates according to the device identification of the terminal adjacent with this first terminal;

Obtain the authentication information that this first terminal is corresponding with this specified right;

According to this device identification and this authentication information, for this second terminal is authorized this specified right.

To this first terminal, send this nearby device identification list.

The method also comprises:

Fig. 8 is according to a kind of block diagram for the device 800 of authorizing shown in an exemplary embodiment.For example, device 800 may be provided in a server.Referring to Fig. 8, device 800 comprises processing components 822, and it further comprises one or more processors, and by the memory resource of memory 832 representatives, can for example, by the instruction of the execution of processing unit 822, application program for storing.In memory 832, the application program of storage can comprise one or more each module corresponding to one group of instruction.In addition, processing components 822 is configured to carry out instruction, to carry out above-mentioned authorization method.

Device 800 can also comprise that a power supply module 826 is configured to the power management of final controlling element 800, and a wired or wireless network interface 850 is configured to device 800 to be connected to network, and input and output (I/O) interface 858.Device 800 operating systems that can operate based on being stored in memory 832, Windows ServerTM for example, Mac OS XTM, UnixTM, LinuxTM, FreeBSDTM or similar.

Those skilled in the art, considering specification and putting into practice after invention disclosed herein, will easily expect other embodiment of the present invention.The application is intended to contain any modification of the present invention, purposes or adaptations, and these modification, purposes or adaptations are followed general principle of the present invention and comprised undocumented common practise or the conventional techniques means in the art of the disclosure.Specification and embodiment are only regarded as exemplary, and true scope of the present invention and spirit are pointed out by claim below.

Should be understood that, the present invention is not limited to precision architecture described above and illustrated in the accompanying drawings, and can carry out various modifications and change not departing from its scope.Scope of the present invention is only limited by appended claim.

Claims

1. an authorization method, is characterized in that, described method comprises:

2. method according to claim 1, is characterized in that, described first terminal obtains nearby device identification list and comprises:

3. method according to claim 1, is characterized in that, described first terminal obtains nearby device identification list and comprises:

Described first terminal receives described nearby device identification list.

4. method according to claim 1, is characterized in that, described first terminal obtains nearby device identification list and comprises:

Described first terminal receives described nearby device identification list.

5. method according to claim 1, is characterized in that, after described first terminal obtains nearby device identification list, described method also comprises:

6. an authorization method, is characterized in that, described method comprises:

7. method according to claim 6, is characterized in that, before the authorization requests that described reception first terminal sends, described method also comprises:

To described first terminal, send described nearby device identification list.

8. method according to claim 6, is characterized in that, before the authorization requests that described reception first terminal sends, described method also comprises:

To described first terminal, send described nearby device identification list.

9. method according to claim 6, is characterized in that, described method also comprises:

10. method according to claim 6, is characterized in that, described according to described device identification and described authentication information, and for before described the second terminal authorizes described specified right, described method also comprises:

11. methods according to claim 6, is characterized in that, described according to described device identification and described authentication information, and for after described the second terminal authorizes described specified right, described method also comprises:

12. 1 kinds of authorization devices, is characterized in that, described device comprises:

13. devices according to claim 12, is characterized in that, described list acquisition module comprises:

14. devices according to claim 12, is characterized in that, described list acquisition module comprises:

15. devices according to claim 12, is characterized in that, described list acquisition module comprises:

16. devices according to claim 12, is characterized in that, described device also comprises:

17. 1 kinds of authorization devices, is characterized in that, described device comprises:

18. devices according to claim 17, is characterized in that, described device also comprises:

19. devices according to claim 17, is characterized in that, described device also comprises:

20. devices according to claim 17, is characterized in that, described device also comprises:

21. devices according to claim 17, is characterized in that, described device also comprises:

22. devices according to claim 17, is characterized in that, described device also comprises: