CN104994158B - Method for safely controlling household appliances through centralized gateway - Google Patents

Method for safely controlling household appliances through centralized gateway Download PDF

Info

Publication number
CN104994158B
CN104994158B CN201510385788.7A CN201510385788A CN104994158B CN 104994158 B CN104994158 B CN 104994158B CN 201510385788 A CN201510385788 A CN 201510385788A CN 104994158 B CN104994158 B CN 104994158B
Authority
CN
China
Prior art keywords
gateway
control terminal
household appliance
authority
controlled household
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Active
Application number
CN201510385788.7A
Other languages
Chinese (zh)
Other versions
CN104994158A (en
Inventor
茹昭
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Qingdao Haier Intelligent Home Appliance Technology Co Ltd
Original Assignee
Qingdao Haier Intelligent Home Appliance Technology Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Qingdao Haier Intelligent Home Appliance Technology Co Ltd filed Critical Qingdao Haier Intelligent Home Appliance Technology Co Ltd
Priority to CN201510385788.7A priority Critical patent/CN104994158B/en
Publication of CN104994158A publication Critical patent/CN104994158A/en
Application granted granted Critical
Publication of CN104994158B publication Critical patent/CN104994158B/en
Active legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Images

Classifications

    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L67/00Network arrangements or protocols for supporting network services or applications
    • H04L67/01Protocols
    • H04L67/02Protocols based on web technology, e.g. hypertext transfer protocol [HTTP]
    • H04L67/025Protocols based on web technology, e.g. hypertext transfer protocol [HTTP] for remote control or remote monitoring of applications
    • GPHYSICS
    • G05CONTROLLING; REGULATING
    • G05BCONTROL OR REGULATING SYSTEMS IN GENERAL; FUNCTIONAL ELEMENTS OF SUCH SYSTEMS; MONITORING OR TESTING ARRANGEMENTS FOR SUCH SYSTEMS OR ELEMENTS
    • G05B19/00Programme-control systems
    • G05B19/02Programme-control systems electric
    • G05B19/418Total factory control, i.e. centrally controlling a plurality of machines, e.g. direct or distributed numerical control [DNC], flexible manufacturing systems [FMS], integrated manufacturing systems [IMS], computer integrated manufacturing [CIM]
    • G05B19/4185Total factory control, i.e. centrally controlling a plurality of machines, e.g. direct or distributed numerical control [DNC], flexible manufacturing systems [FMS], integrated manufacturing systems [IMS], computer integrated manufacturing [CIM] characterised by the network communication
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L12/00Data switching networks
    • H04L12/66Arrangements for connecting between networks having differing types of switching systems, e.g. gateways
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00Network architectures or network communication protocols for network security
    • H04L63/10Network architectures or network communication protocols for network security for controlling access to devices or network resources
    • H04L63/101Access control lists [ACL]
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L67/00Network arrangements or protocols for supporting network services or applications
    • H04L67/01Protocols
    • H04L67/10Protocols in which an application is distributed across nodes in the network
    • H04L67/104Peer-to-peer [P2P] networks

Abstract

The invention discloses a method for safely controlling household appliances through a centralized gateway, which comprises the following steps: A. the control terminal sends a calling request to the gateway according to the authority of the control terminal to request for operating the controlled household appliance; B. the gateway determines the authority of the control terminal for controlling the controlled household appliance to execute the operation according to the authority list of the control terminal and the access control list of the controlled household appliance; C. and when the control terminal has the authority of controlling the controlled household appliance to execute the operation, the controlled household appliance executes the operation requested by the control terminal. The invention can realize the safety control of the access of the household appliance service interface under the mode of managing the household appliance equipment through the centralized gateway. The invention is designed based on the safety mechanism of the original point-to-point communication mode, and the household appliance can directly adopt the original safety strategy scheme without changing, thereby having better compatibility.

Description

Method for safely controlling household appliances through centralized gateway
Technical Field
The invention relates to the field of intelligent household appliances, in particular to a method for safely controlling household appliances through a centralized gateway.
Background
Currently, a peer-to-peer communication framework between devices based on a client/server architecture is shown in fig. 1 and is composed of a bus daemon and a terminal node. The bus daemon process is responsible for the functions of message routing, service discovery and the like among the terminal nodes; the terminal node is an application program running on the device and needs to be connected to the bus daemon process after being started.
The bus daemon may be viewed as a bus segment running on a different device. The bus daemons of the devices are connected to form the bus of a connected point-to-point network system. The bus provides a fast, lightweight way for a distributed system to communicate message sequences. Its goal is to allow two applications to communicate without having to deal with the details of the underlying mechanisms.
A user may configure credentials and security policies for each application in the peer-to-peer network via a security manager. Generally, the application is divided into two roles of a control end and a controlled end. And setting an access control strategy for the control end application program by the user, and allowing the control end application program to access the controlled end interfaces according to the function setting of the control end application program. After the security manager discovers the control application, the user configures an application permission list. The security manager obtains the authority list configuration template of the application, submits the authority list configuration template to the user and authorizes the user. A similar example is configuring the authority of a mobile phone application, and a user can configure whether the application can access an address list, short messages, geographical locations, and the like according to the functions of the mobile phone application. And after the user configuration is finished, the security manager installs the configured authority list in the control terminal application.
The user sets an access control policy for the controlled end application, and the policy specifies that the controlled end interface can only be accessed by the control end application with a specific certificate in the mode of an access control list.
The session is established between the Control end application and the controlled end application, firstly, a secure session path is established through authentication, then, the two parties exchange an authority List and an ACL (Access Control List), a session key is generated, and finally, a certificate is exchanged.
When the control end sends a control instruction to the controlled end, firstly, the control end judges whether the instruction can be sent to the target controlled end according to the authority list set by the user, and if the instruction can be sent to the target controlled end, the control end sends the instruction. After receiving the instruction, the controlled end judges whether the instruction can access the data of the controlled end according to the ACL access control strategy set by the user and the certificate of the control end, and if the instruction can be accessed, the controlled end executes the instruction.
In order to enable the communication technology to better support the smart home scene, the smart home service provides a concept of centralized management, that is, the smart home service runs on a gateway, and other household appliances register services provided by the intelligent home service with the gateway. The control equipment realizes the calling of the household appliance service interface through a general interface provided by the gateway, thereby expanding the point-to-point distributed communication mode into a centralized communication mode. Taking a mobile phone as an example of the control end, in the centralized communication mode, a flow of a method for controlling a home appliance by the mobile phone is shown in fig. 2.
The universal interface realized on the gateway can ensure that the control equipment can convert the corresponding interface name, method name, parameter and the like of the target household appliance into a calling instruction for the household appliance as long as the control equipment inputs the corresponding interface name, method name, parameter and the like.
However, when the inventor of the present invention is implemented, it is found that an intermediate device, which is a gateway, is introduced in a centralized communication mode of smart home services, and a control end performs centralized control on a controlled end through the gateway. Because the control end and the controlled end are interacted with each other to form a gateway, the control end and the controlled end are not directly interacted with each other any more, and therefore the original access control security mechanism cannot guarantee the security of the centralized system.
Disclosure of Invention
The technical problem to be solved by the invention is to provide a method for safely controlling household appliances through a centralized gateway, which is used for solving the problem that the safety of a centralized management system cannot be ensured in a household appliance centralized control scene through the gateway in the prior art.
In order to solve the above technical problems, the present invention provides a method for safely controlling a home appliance through a centralized gateway, the method comprising the steps of:
A. the control terminal sends a calling request to the gateway according to the authority of the control terminal to request for operating the controlled household appliance;
B. the gateway determines the authority of the control terminal for controlling the controlled household appliance to execute the operation according to the authority list of the control terminal and the access control list of the controlled household appliance;
C. and when the control terminal has the authority of controlling the controlled household appliance to execute the operation, the controlled household appliance executes the operation requested by the control terminal.
Further, the step a specifically includes:
the control terminal encapsulates the service interface instruction and the parameters of the controlled household appliance;
checking whether the authority list of the control terminal allows sending a device calling request to the gateway;
and when the control terminal allows to send a device calling request to the gateway, the control terminal sends a calling request to a general interface of the gateway.
Further, the step B specifically includes:
b1, the gateway determines the authority of the control terminal to access the universal interface according to the gateway certificate;
and B2, when the control terminal has the authority of accessing the general interface, the gateway determines the authority of the control terminal to access the service interface of the controlled household appliance.
Further, the step B2 specifically includes:
b21, the gateway analyzes the service interface information of the controlled household appliance;
b22, judging whether the control terminal has the authority for controlling the controlled household appliance to execute the operation according to the authority list of the control terminal;
b23, if the control terminal has the authority to control the controlled household appliance to execute the operation, the gateway searches the access control list of the controlled household appliance, checks the certificate of the control terminal and judges whether the certificate meets the requirement of accessing the service interface of the controlled household appliance.
Further, the step C specifically includes:
c1, when the certificate of the control terminal meets the requirement of accessing the service interface of the controlled household appliance, the gateway sends the request of the control terminal to the controlled household appliance;
c2, the controlled household appliance judges whether the gateway has the right to access the service interface according to the certificate of the gateway;
c3, when the gateway has the right to access the service interface, the controlled household appliance executes the operation requested by the control terminal and returns the execution result to the gateway;
and C4, the gateway returns the execution result to the control terminal.
Further, before the step a, a step of configuring an authority list of the control terminal is further included, which specifically includes:
m, configuring a security policy of the gateway and a security policy of the controlled household appliance through a security manager;
and N, configuring an authority list of the control terminal through a security manager according to the security policy of the gateway.
Further, the step M specifically includes:
m1, the security manager acquires the authority list configuration template of the gateway and feeds back the authority list configuration template to the user;
m2, configuring the authority list of the gateway on the authority list configuration template of the gateway by the user according to the function of the gateway;
m3, the user specifies that the service interface of the controlled household appliance can only be accessed by the control terminal with specific certificate through the access control list of the controlled household appliance.
Further, the step M further includes: and configuring the gateway to allow a legal control terminal to call an interface thereof to discover equipment and send a call request.
Further, the step N specifically includes:
n1, the security manager sends a request for obtaining the authority list configuration template to the control terminal;
n2, the control terminal acquires an authority list configuration template of the gateway;
n3, the control terminal merges the initial authority list configuration template and the gateway authority list configuration template to obtain a final authority list configuration template of the control terminal and feeds the final authority list configuration template back to the security manager;
and N4, the security manager shows the final authority list configuration template of the control terminal to a user, and the user configures the authority list of the control terminal on the final authority list configuration template of the control terminal according to the function of the control terminal.
Further, the security manager runs on an intelligent terminal or a network server.
The invention has the following beneficial effects:
the invention can realize the safety control of the access of the household appliance service interface under the mode of managing the household appliance equipment through the centralized gateway. The invention is designed based on the safety mechanism of the original point-to-point communication mode, and the household appliance can directly adopt the original safety strategy scheme without changing, thereby having better compatibility.
Drawings
FIG. 1 is a diagram of a prior art peer-to-peer communication framework between devices based on a client/server architecture;
fig. 2 is a flowchart of a method for controlling an appliance by a mobile phone in a centralized communication mode according to the prior art;
FIG. 3 is a flowchart of a method for configuring a permission list of a control terminal according to an embodiment of the present invention;
fig. 4 is a flowchart of a method for securely controlling an appliance through a centralized gateway according to an embodiment of the present invention.
Detailed Description
In order to solve the problem that the security of a centralized management system cannot be guaranteed in a centralized control scene of household appliances through a gateway in the prior art, the invention provides a method for safely controlling household appliances through a centralized gateway, and the invention is further described in detail below with reference to the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are merely illustrative of the invention and do not limit the invention.
The method for safely controlling the household appliances through the centralized gateway comprises the following steps: firstly, a control terminal sends a calling request to a gateway according to the authority of the control terminal to request for operating a controlled household appliance; then, the gateway determines the authority of the control terminal for controlling the controlled household appliance to execute the operation according to the authority list of the control terminal and the access control list of the controlled household appliance; and finally, when the control terminal has the authority of controlling the controlled household appliance to execute the operation, the controlled household appliance executes the operation requested by the control terminal.
In the invention, a control terminal sends a calling request to a gateway according to the authority of the control terminal, and the specific process of requesting to operate the controlled household appliance comprises the following steps: firstly, the control terminal encapsulates the service interface instruction and the parameters of the controlled household appliance; then checking whether the authority list of the control terminal allows sending a device calling request to the gateway; and finally, when the control terminal allows to send a device calling request to the gateway, the control terminal sends a calling request to a general interface of the gateway.
In the present invention, the gateway determines, according to the authority list of the control terminal and the access control list of the controlled household appliance, the process of the control terminal controlling the controlled household appliance to execute the authority of the operation as follows: firstly, the gateway determines the authority of the control terminal for accessing the universal interface according to a gateway certificate; and then when the control terminal has the authority of accessing the universal interface, the gateway determines the authority of the control terminal to access the service interface of the controlled household appliance.
In the present invention, the process of determining the authority of the control terminal to access the service interface of the controlled household appliance specifically comprises: firstly, the gateway analyzes the service interface information of the controlled household appliance; then, according to the authority list of the control terminal, whether the control terminal has the authority for controlling the controlled household appliance to execute the operation is judged; and finally, if the control terminal has the authority of controlling the controlled household appliance to execute the operation, the gateway searches an access control list of the controlled household appliance, checks the certificate of the control terminal and judges whether the certificate meets the requirement of accessing a service interface of the controlled household appliance.
In the present invention, the specific process of the controlled home appliance executing the operation requested by the control terminal is as follows: when the certificate of the control terminal meets the requirement of accessing a service interface of the controlled household appliance, the gateway sends the request of the control terminal to the controlled household appliance; the controlled household appliance judges whether the gateway has the right to access the service interface according to the certificate of the gateway; when the gateway has the right to access the service interface, the controlled household appliance executes the operation requested by the control terminal and returns an execution result to the gateway; and the gateway returns the execution result to the control terminal.
Before the control terminal requests to operate the controlled household appliance, the method also comprises the step of configuring an authority list of the control terminal, firstly, a security manager is used for configuring a security policy of the gateway and a security policy of the controlled household appliance, and the security manager runs on an intelligent terminal or a network server; and then configuring the authority list of the control terminal through a security manager according to the security policy of the gateway. The specific process is as follows:
the security manager acquires an authority list configuration template of the gateway and feeds the authority list configuration template back to the user; a user configures an authority list of the gateway on an authority list configuration template of the gateway according to the function of the gateway, and configures the gateway to allow a legal control terminal to call an interface of the legal control terminal to discover equipment and send a call request; a user specifies that a service interface of a controlled household appliance can only be accessed by a control terminal with a specific certificate through an access control list of the controlled household appliance; the security manager sends a request for acquiring a permission list configuration template to the control terminal; the control terminal acquires an authority list configuration template of the gateway; the control terminal merges an initial authority list configuration template of the control terminal and an authority list configuration template of the gateway to obtain a final authority list configuration template of the control terminal and feeds the final authority list configuration template back to the security manager; and the security manager shows the final authority list configuration template of the control terminal to a user, and the user configures the authority list of the control terminal on the final authority list configuration template of the control terminal according to the function of the control terminal.
The following describes the present invention specifically by taking a mobile phone as a control terminal to control a television through a centralized gateway.
In this embodiment, in a home network of peer-to-peer communication, there is a gateway to which both the tv and the user's mobile phone are connected. In the embodiment, an application program is installed on the mobile phone to control the on/off of the television, switch channels, adjust volume and the like.
First, a user configures security policies for the gateway and the television through a security manager. The safety manager can be operated on intelligent terminals such as computers, mobile phones and the like, and can also be operated on a network server; after the security manager connects the device, credentials, access policies, etc. may be installed on the device. The specific process is as follows: the security manager acquires an authority list configuration template of the gateway and feeds the authority list configuration template back to the user; a user configures the authority list of the gateway on an authority list configuration template of the gateway according to the function of the gateway; the user specifies, through the access control list of the television, that the service interface of said television is accessible only by the control terminal having the specific certificate. In this embodiment, the television allows the gateway to access the switch and volume adjustment function, and the gateway is allowed to control the television to switch on and off and adjust the volume, and to control other household appliances such as an air conditioner and a refrigerator. And the gateway allows a legal application program to call an interface thereof to perform operations of device discovery, sending a call instruction and the like.
The handset application is then configured, the configuration process of which is shown in fig. 3. After downloading and installing an application program for controlling the television through the mobile phone, a user opens the application program, and the application program firstly searches for a gateway. And after finding the gateway, establishing connection between the application and the gateway. The application issues a security configuration notification message that is received by a security manager in the network. The security manager prompts the user to configure the application program permission, and the user starts to configure the application program permission list. And after receiving the user instruction, the security manager sends the instruction to acquire the configuration template of the mobile phone application. And after receiving the instruction of the security manager, the mobile phone application program sends the instruction to the gateway to acquire the configuration template of the gateway. And after receiving the request, the gateway sends the configuration template to the mobile phone application.
After receiving the configuration template of the gateway, the mobile phone application combines the configuration template with the configuration template of the mobile phone application to form a final configuration template submitted to the user. For example, the configuration template of the mobile phone application is shown in table 1:
TABLE 1
Figure BDA0000752638310000081
The configuration template for the gateway is shown in table 2:
TABLE 2
Figure BDA0000752638310000082
The final template formed after merging is shown in table 3:
TABLE 3
Figure BDA0000752638310000083
Figure BDA0000752638310000091
And the mobile phone application returns the combined configuration template to the security manager. The security manager submits the template to user review and requests approval. The user selects permission or prohibition for each authority according to the possible use condition of the application, and the authority list of the mobile phone application is formed as shown in table 4:
TABLE 4
Figure BDA0000752638310000092
The security manager installs the list of permissions approved by the user in the cell phone application. And the mobile phone application uses the permission list to perform security access control.
Fig. 4 shows a method for safely controlling a home appliance through a centralized gateway in an embodiment of the present invention, where a user controls a television through a mobile phone. The mobile phone is connected with the gateway, establishes a secure session, and exchanges the authority list, the ACL and the certificate. Similarly, the gateway also establishes a connection with the television, exchanging lists of rights, ACLs and certificates.
The mobile phone application encapsulates the service interface instruction and the parameters of the television and sends a calling request to the general interface of the gateway. Before sending out the request, the mobile phone checks whether the permission list allows sending out the device call request to the gateway, which is allowed in this embodiment. After receiving the request sent by the mobile phone, the gateway judges whether the gateway has the right to access the universal interface according to the gateway certificate. In this embodiment, the gateway returns a response with an OK status; if not, the gateway sends a response denying the request.
Then, the gateway analyzes the service interface information of the household appliance, and judges that the request needs to control the television, such as adjusting the volume of the television. And the gateway judges whether the mobile phone application has corresponding authority or not according to the exchanged authority list of the mobile phone application. If the mobile phone application has no authority (for example, the control target is to switch the television channel or adjust the air conditioner temperature), the gateway refuses to execute and returns an error of no execution authority to the mobile phone.
In this embodiment, the mobile phone application has the authority to adjust the volume of the television, so the gateway continues to search the ACL of the exchanged volume adjustment interface of the television, and meanwhile, checks the certificate of the mobile phone application obtained by exchange, and determines whether the certificate meets the ACL requirement for accessing the interface. And if the mobile phone application does not allow to access the interface according to the ACL, refusing to execute and returning no execution permission error to the mobile phone.
If the certificate owned by the handset application has access to the volume adjustment interface of the television, the gateway sends the request to the television. And after receiving the request, the television judges whether the gateway has the right to access the volume interface according to the certificate of the gateway. If so, the operation is performed and the result is returned. And after receiving the execution result of the television, the gateway returns the result to the mobile phone.
The invention can realize the safety control of the access of the household appliance service interface under the mode of managing the household appliance equipment through the centralized gateway. The invention is designed based on the safety mechanism of the original point-to-point communication mode, and the household appliance can directly adopt the original safety strategy scheme without changing, thereby having better compatibility.
Although the preferred embodiments of the present invention have been disclosed for illustrative purposes, those skilled in the art will appreciate that various modifications, additions and substitutions are possible, and the scope of the invention should not be limited to the embodiments described above.

Claims (8)

1. A method for securely controlling an appliance through a centralized gateway, the method comprising the steps of:
A. the control terminal sends a calling request to the gateway according to the authority of the control terminal to request for operating the controlled household appliance;
B. the gateway determines the authority of the control terminal for controlling the controlled household appliance to execute the operation according to the authority list of the control terminal and the access control list of the controlled household appliance;
C. when the control terminal has the authority of controlling the controlled household appliance to execute the operation, the controlled household appliance executes the operation requested by the control terminal;
the step B specifically comprises the following steps:
b1, the gateway determines the authority of the control terminal to access the universal interface according to the gateway certificate;
b2, when the control terminal has the authority of accessing the universal interface, the gateway determines the authority of the control terminal to access the service interface of the controlled household appliance;
the step B2 specifically includes:
b21, the gateway analyzes the service interface information of the controlled household appliance;
b22, judging whether the control terminal has the authority for controlling the controlled household appliance to execute the operation according to the authority list of the control terminal;
b23, if the control terminal has the authority to control the controlled household appliance to execute the operation, the gateway searches the access control list of the controlled household appliance, checks the certificate of the control terminal and judges whether the certificate meets the requirement of accessing the service interface of the controlled household appliance.
2. The method for securely controlling home appliances through a centralized gateway according to claim 1, wherein the step a specifically comprises:
the control terminal encapsulates the service interface instruction and the parameters of the controlled household appliance;
checking whether the authority list of the control terminal allows sending a device calling request to the gateway;
and when the control terminal allows to send a device calling request to the gateway, the control terminal sends a calling request to a general interface of the gateway.
3. The method for securely controlling home appliances through a centralized gateway according to claim 1, wherein the step C specifically comprises:
c1, when the certificate of the control terminal meets the requirement of accessing the service interface of the controlled household appliance, the gateway sends the request of the control terminal to the controlled household appliance;
c2, the controlled household appliance judges whether the gateway has the right to access the service interface according to the certificate of the gateway;
c3, when the gateway has the right to access the service interface, the controlled household appliance executes the operation requested by the control terminal and returns the execution result to the gateway;
and C4, the gateway returns the execution result to the control terminal.
4. The method for securely controlling home appliances through a centralized gateway according to any one of claims 1 to 3, further comprising, before the step A, a step of configuring a list of permissions of the control terminal, specifically comprising:
m, configuring a security policy of the gateway and a security policy of the controlled household appliance through a security manager;
and N, configuring an authority list of the control terminal through a security manager according to the security policy of the gateway.
5. The method for securely controlling home appliances through a centralized gateway according to claim 4, wherein the step M specifically comprises:
m1, the security manager acquires the authority list configuration template of the gateway and feeds back the authority list configuration template to the user;
m2, configuring the authority list of the gateway on the authority list configuration template of the gateway by the user according to the function of the gateway;
m3, the user specifies that the service interface of the controlled household appliance can only be accessed by the control terminal with specific certificate through the access control list of the controlled household appliance.
6. The method for securely controlling home appliances through a centralized gateway as set forth in claim 5, wherein the step M further comprises: and configuring the gateway to allow a legal control terminal to call an interface thereof to discover equipment and send a call request.
7. The method for securely controlling home appliances through a centralized gateway according to claim 6, wherein the step N specifically comprises:
n1, the security manager sends a request for obtaining the authority list configuration template to the control terminal;
n2, the control terminal acquires an authority list configuration template of the gateway;
n3, the control terminal merges the initial authority list configuration template and the gateway authority list configuration template to obtain a final authority list configuration template of the control terminal and feeds the final authority list configuration template back to the security manager;
and N4, the security manager shows the final authority list configuration template of the control terminal to a user, and the user configures the authority list of the control terminal on the final authority list configuration template of the control terminal according to the function of the control terminal.
8. The method for securely controlling home appliances through a centralized gateway as set forth in claim 4, wherein the security manager is operated on an intelligent terminal or a web server.
CN201510385788.7A 2015-06-30 2015-06-30 Method for safely controlling household appliances through centralized gateway Active CN104994158B (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN201510385788.7A CN104994158B (en) 2015-06-30 2015-06-30 Method for safely controlling household appliances through centralized gateway

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN201510385788.7A CN104994158B (en) 2015-06-30 2015-06-30 Method for safely controlling household appliances through centralized gateway

Publications (2)

Publication Number Publication Date
CN104994158A CN104994158A (en) 2015-10-21
CN104994158B true CN104994158B (en) 2021-05-14

Family

ID=54305909

Family Applications (1)

Application Number Title Priority Date Filing Date
CN201510385788.7A Active CN104994158B (en) 2015-06-30 2015-06-30 Method for safely controlling household appliances through centralized gateway

Country Status (1)

Country Link
CN (1) CN104994158B (en)

Families Citing this family (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
GB2547932B (en) * 2016-03-03 2019-08-14 Arm Ip Ltd Time-limited access to configuration settings
CN106656695A (en) * 2016-11-30 2017-05-10 海尔优家智能科技(北京)有限公司 Method for controlling intelligent household electrical appliance, intelligent gateway and cloud platform
CN110071921B (en) * 2019-04-19 2022-01-18 广东中安金狮科创有限公司 Internet of things platform access method, device, computer readable storage medium and system
CN111695150B (en) * 2020-05-15 2023-07-28 浙江信网真科技股份有限公司 Dynamic granularity self-polymerization safe filtering method and device

Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN103067340A (en) * 2011-10-20 2013-04-24 中兴通讯股份有限公司 Authentication method for remote control network information domestic appliance, and system and internet domestic gateway
CN103136827A (en) * 2013-01-21 2013-06-05 九阳股份有限公司 Authority limit control method of network household appliance system
CN104468630A (en) * 2014-12-31 2015-03-25 北京海尔广科数字技术有限公司 Access control method and device of intelligent household electrical appliances

Family Cites Families (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US8805339B2 (en) * 2005-09-14 2014-08-12 Millennial Media, Inc. Categorization of a mobile user profile based on browse and viewing behavior

Patent Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN103067340A (en) * 2011-10-20 2013-04-24 中兴通讯股份有限公司 Authentication method for remote control network information domestic appliance, and system and internet domestic gateway
CN103136827A (en) * 2013-01-21 2013-06-05 九阳股份有限公司 Authority limit control method of network household appliance system
CN104468630A (en) * 2014-12-31 2015-03-25 北京海尔广科数字技术有限公司 Access control method and device of intelligent household electrical appliances

Also Published As

Publication number Publication date
CN104994158A (en) 2015-10-21

Similar Documents

Publication Publication Date Title
US7917942B2 (en) System and method for configuring security in a plug-and-play architecture
EP3616426B1 (en) Network policy configuration
KR100799222B1 (en) A method for implementing grouping devices and interacting among grouped devices
US9763094B2 (en) Methods, devices and systems for dynamic network access administration
US8271649B2 (en) Access rights used for resource discovery in peer-to-peer networks
JP4864094B2 (en) Communication control system
CN107223326B (en) Network access authority management method and related equipment
US10856171B2 (en) Controlled connection of a wireless device to a network
CN104994158B (en) Method for safely controlling household appliances through centralized gateway
CN111194035B (en) Network connection method, device and storage medium
US11627011B1 (en) Smart device network provisioning
CN105338529A (en) Wireless network connecting method and system
US20080133723A1 (en) Extended home service apparatus and method for providing extended home service on p2p networks
US20090157880A1 (en) Management system for quality of service in home network
CN105007164A (en) Centralized safety control method and device
WO2023005525A1 (en) Configuration method for device control privilege, apparatus, computer device, and storage medium
US20120210399A1 (en) Location-enabled access control lists for real-world devices
CN104320384A (en) Wireless router control method and device
US10212163B1 (en) Method and apparatus for simplified and secured hotspot device connectivity
Nguyen et al. An SDN-based connectivity control system for Wi-Fi devices
WO2022067831A1 (en) Method and apparatus for establishing secure communication
WO2021134562A1 (en) Configuration device replacement method and apparatus, device, and storage medium
US11424961B2 (en) Exporting the device sharing attribute for host devices from a wireless controller to a switch
WO2020258099A1 (en) Method for configuring internet of things device, and internet of things device
WO2023130405A1 (en) Device configuration method and apparatus, computer device, and storage medium

Legal Events

Date Code Title Description
C06 Publication
PB01 Publication
SE01 Entry into force of request for substantive examination
SE01 Entry into force of request for substantive examination
GR01 Patent grant
GR01 Patent grant