CN106331288A

CN106331288A - Application processing method and device

Info

Publication number: CN106331288A
Application number: CN201510355464.9A
Authority: CN
Inventors: 董劲
Original assignee: ZTE Corp
Current assignee: ZTE Corp
Priority date: 2015-06-24
Filing date: 2015-06-24
Publication date: 2017-01-11
Also published as: WO2016206404A1

Abstract

The invention provides an application processing method and device. The method comprises the steps of receiving a control strategy, wherein the control strategy is used for a device capability access function of an application in a terminal; and controlling the device capability access function of the application according to the control strategy. Through application of the method and the device, the problem in the related art that the device capability access function of the application in the terminal cannot be controlled is solved, and the effect of controlling the device capability access function of the application in the terminal is realized.

Description

Application processing method and device

Technical field

The present invention relates to the communications field, in particular to a kind of application processing method and device.

Background technology

Along with the development of science and technology, terminal occupies increasingly consequence in the life of people, to the life band of people Having carried out a lot of facility, as a example by intelligent mobile terminal, intelligent mobile terminal (such as Mobile, Pad) has abundant Capacity of equipment, the most wireless WIFI, bluetooth Bluetooth, global positioning system (Global Position System, letter Be referred to as GPS), photographing unit Camera, send short messages, make a phone call, network access etc..Mobile device management (Mobile Device Management, referred to as MDM) handle official business (Bring Your Own Device, referred to as BYOD) as from carrying device Important component part, although can dynamically control the opening and closing of some capacity of equipment according to strategy, right to realize The security management and control of intelligent mobile terminal；But this unified processing mode influences whether to be arranged on controlled intelligent mobile terminal On all Mobile solution, it is impossible to accomplish to be controlled for the capacity of equipment access function of Mobile solution.

For cannot carry out the problem of capacity of equipment access function control present in correlation technique for the application in terminal, At present effective solution is not yet proposed.

Summary of the invention

The invention provides a kind of application processing method and device, so that at least solve cannot be for end present in correlation technique The problem that application on end carries out capacity of equipment access function control.

According to an aspect of the invention, it is provided a kind of application processing method, including: reception management and control strategy, wherein, Described management and control strategy is for the capacity of equipment access function for the application in terminal；According to described management and control policy control The capacity of equipment access function of application.

Alternatively, before receiving described management and control strategy, also include: described application is processed as controlled application, wherein, Described controlled application is can the application of controlled device ability access function.

Alternatively, described application is processed as controlled application to include: answer use by revising the code of described application by described Reason is controlled application.

Alternatively, by the code of the described application of amendment, described application is processed as controlled application to include: answer use by described Reason is assembly code；Record in described assembly code, the mark of the capacity of equipment that described application is able to access that and described mark Aim at the position in described assembly code；Mark according to described capacity of equipment determines that described capacity of equipment accesses limitation function Code；Described capacity of equipment is accessed limitation function by the position in described assembly code of the mark according to described capacity of equipment Code injection, in described assembly code, forms new assembly code；Regenerate described according to described new assembly code Application；Again sign the described application regenerated.

Alternatively, receive described management and control strategy and include: receive the described management and control strategy that Strategy Center issues, wherein, described Strategy Center is positioned in the terminal at described application place, or, described management and control is centrally located at and the terminal at described application place In the server connected or terminal.

Alternatively, receive the described management and control strategy that described Strategy Center issues to include: log in described Strategy Center；To login Described Strategy Center report the application message of described application, wherein, described application message includes that described application is able to access that The information of capacity of equipment and at least one following information: the mount message of described application, the upgrade information of described application, The unloading information of described application；Receive the described management and control strategy that described Strategy Center issues according to described application message.

Alternatively, logging in before described Strategy Center, also including: according to the mark of the terminal at described application place in institute State and register in Strategy Center.

Alternatively, include according to the capacity of equipment access function of application described in described management and control policy control: utilize described application Strategy change registered in advance monitors management and control strategy described in the terminal applying place described in interface notification；Utilize described management and control plan Slightly control the capacity of equipment access function of described application.

Alternatively, after according to the capacity of equipment access function of application described in described management and control policy control, also include: on Report controls result.

According to a further aspect in the invention, it is provided that a kind of application processing method, it is characterised in that including: send out to terminal Sending management and control strategy, wherein, described management and control strategy is carried out for the capacity of equipment access function for the application in described terminal Control.

Alternatively, before sending described management and control strategy to described terminal, also include: receive the logging request of described terminal； The login process of described terminal is performed according to described logging request；After described terminal completes to log in, receive described terminal and send out The application message of the described application sent, wherein, described application message includes the letter of the capacity of equipment that described application is able to access that At least one breath and following information: the mount message of described application, the upgrade information of described application, the unloading of described application Information.

Alternatively, before receiving the described logging request of described terminal, also include: receive the registration request of described terminal； Registration request according to described terminal performs the location registration process of described terminal.

Alternatively, sending after described management and control strategy to described terminal, also including: receive described terminal to report to institute State the control result that application is controlled.

According to a further aspect in the invention, it is provided that a kind of application processing means, including: the first receiver module, it is used for connecing Closed tube control strategy, wherein, described management and control strategy is for the capacity of equipment access function for the application in terminal；Control mould Block, for according to the capacity of equipment access function of application described in described management and control policy control.

Alternatively, described device also includes: processing module, for described application is processed as controlled application, wherein, and institute Stating controlled application is can the application of controlled device ability access function.

Alternatively, described processing module includes: processing unit, for the code by revising described application by described application It is processed as controlled application.

Alternatively, described processing unit includes: described application is processed as assembly code；Record in described assembly code, The mark of the capacity of equipment that described application is able to access that and described mark position in described assembly code；Set according to described The mark of standby ability determines that described capacity of equipment accesses limitation function code；Mark according to described capacity of equipment is in described remittance Position in volume code, by described capacity of equipment access limitation function code injection to described assembly code, forms new remittance Compile code；Described application is regenerated according to described new assembly code；Again sign the described application regenerated.

Alternatively, described first receiver module includes: receive unit, for receiving the described management and control plan that Strategy Center issues Slightly, wherein, described Strategy Center is positioned in the terminal at described application place, or, described management and control is centrally located at described In the server of the terminal connection at application place or terminal.

Alternatively, described reception unit includes: logs in subelement, is used for logging in described Strategy Center；Report subelement, For reporting the application message of described application to the described Strategy Center logged in, wherein, described application message includes described answering By at least one the information of the capacity of equipment being able to access that and following information: the mount message of described application, described application Upgrade information, the unloading information of described application；Receive subelement, be used for receiving described Strategy Center and believe according to described application The described management and control strategy that breath issues.

Alternatively, described reception unit also includes: registration subelement, for the mark of the terminal according to described application place Described Strategy Center registers.

Alternatively, described control module includes: notification unit, supervises for the strategy change utilizing described application registered in advance Listen and described in interface notification, apply management and control strategy described in the terminal at place；Control unit, is used for utilizing described management and control policy control The capacity of equipment access function of described application.

Alternatively, described device also includes: reporting module, is used for reporting control result.

According to a further aspect in the invention, it is provided that a kind of application processing means, including: sending module, for terminal Sending management and control strategy, wherein, described management and control strategy enters for the capacity of equipment access function for the application in described terminal Row controls.

Alternatively, described device also includes: the second receiver module, for receiving the logging request of described terminal；First holds Row module, for performing the login process of described terminal according to described logging request；3rd receiver module, for described After terminal completes to log in, receiving the application message of the described application that described terminal sends, wherein, described application message includes At least one the information of the capacity of equipment that described application is able to access that and following information: the mount message of described application, described The upgrade information of application, the unloading information of described application.

Alternatively, described device also includes: the 4th receiver module, for receiving the registration request of described terminal；Second holds Row module, performs the location registration process of described terminal for the registration request according to described terminal.

Alternatively, described device also includes: the 5th receiver module, for receiving the entering described application of described terminal to report The control result that row controls.

By the present invention, using and receive management and control strategy, wherein, described management and control strategy is used for setting for the application in terminal Standby ability access function；According to the capacity of equipment access function of application described in described management and control policy control, solve relevant skill The problem that cannot carry out capacity of equipment access function control present in art for the application in terminal, and then reached can Carry out capacity of equipment for the application in terminal and access the effect controlled.

Accompanying drawing explanation

Accompanying drawing described herein is used for providing a further understanding of the present invention, constitutes the part of the application, the present invention Schematic description and description be used for explaining the present invention, be not intended that inappropriate limitation of the present invention.In the accompanying drawings:

Fig. 1 is the flow chart of the first application processing method according to embodiments of the present invention；

Fig. 2 is the flow chart of the second application processing method according to embodiments of the present invention；

Fig. 3 is the structured flowchart of the first application processing means according to embodiments of the present invention；

Fig. 4 is the preferred structure block diagram one of the first application processing means according to embodiments of the present invention；

Fig. 5 is the structured flowchart of processing module 42 in the first application processing means according to embodiments of the present invention；

Fig. 6 is the structured flowchart of the first receiver module 32 in the first application processing means according to embodiments of the present invention；

Fig. 7 is the structured flowchart receiving unit 62 in the first application processing means according to embodiments of the present invention；

Fig. 8 is the preferred structure block diagram receiving unit 62 in the first application processing means according to embodiments of the present invention；

Fig. 9 is the structured flowchart of control module 34 in the first application processing means according to embodiments of the present invention；

Figure 10 is the structured flowchart two of the first application processing means according to embodiments of the present invention；

Figure 11 is the structured flowchart of the second application processing means according to embodiments of the present invention；

Figure 12 is the preferred structure block diagram one of the second application processing means according to embodiments of the present invention；

Figure 13 is the preferred structure block diagram two of the second application processing means according to embodiments of the present invention；

Figure 14 is the preferred structure block diagram three of the second application processing means according to embodiments of the present invention；

Figure 15 is that Mobile solution capacity of equipment according to embodiments of the present invention accesses the device limited；

Figure 16 is Strategy Center's module diagram according to embodiments of the present invention；

Figure 17 is policy agent module diagram according to embodiments of the present invention；

Figure 18 is Mobile solution strengthening flow process figure according to embodiments of the present invention；

Figure 19 is management and control policy agent schematic flow sheet according to embodiments of the present invention；

Figure 20 is the schematic flow sheet of Strategy Center's management and control Mobile solution according to embodiments of the present invention；

Figure 21 is strategy exchange schematic flow sheet according to embodiments of the present invention；

Figure 22 is remote-control schematic diagram according to embodiments of the present invention；

Figure 23 is local management and control schematic diagram according to embodiments of the present invention；

Figure 24 is the machine management and control schematic diagram according to embodiments of the present invention；

Figure 25 is iOS platform management and control schematic diagram according to embodiments of the present invention；

Figure 26 is that local management and control policy agent according to embodiments of the present invention connects flow chart；

Figure 27 is local management and control Strategy Center flow chart according to embodiments of the present invention；

Figure 28 is the machine management and control Strategy Center flow chart according to embodiments of the present invention；

Figure 29 is iOS application register flow path figure according to embodiments of the present invention；

Figure 30 is Strategy Center's management and control iOS applicating flow chart according to embodiments of the present invention.

Detailed description of the invention

Below with reference to accompanying drawing and describe the present invention in detail in conjunction with the embodiments.It should be noted that in the feelings do not conflicted Under condition, the embodiment in the application and the feature in embodiment can be mutually combined.

It should be noted that term " first " in description and claims of this specification and above-mentioned accompanying drawing, " second " Etc. being for distinguishing similar object, without being used for describing specific order or precedence.In below describing, " pipe Control strategy " and " capacity of equipment access restriction strategy " is quite, and all can be referred to as " tactful ".

Providing a kind of application processing method in the present embodiment, Fig. 1 is that according to embodiments of the present invention the first answers use The flow chart of reason method, as it is shown in figure 1, this flow process comprises the steps:

Step S102, receives management and control strategy, and wherein, this management and control strategy is for the capacity of equipment for the application in terminal Access function；

Step S104, according to the capacity of equipment access function of above-mentioned management and control policy control application.

In correlation technique when controlling the capacity of equipment access function of application, it is for system, all of application to be controlled , control mode is dumb.And carry out by above-mentioned steps, the capacity of equipment access function of the application in controlling terminal Time, it is to be controlled for concrete application, the quantity of its application controlled can freely be arranged, it is achieved to concrete The control of capacity of equipment access function of application, solves and cannot carry out for the application in terminal present in correlation technique The problem that capacity of equipment access function controls, and then reached to carry out capacity of equipment access control for the application in terminal The effect of system.

In an optional embodiment, before receiving above-mentioned management and control strategy, also include: be processed as being subject to by above-mentioned application Control application, wherein, this controlled application is can the application of controlled device ability access function.By application is processed as Controlled application, it is possible to achieve the purpose that the capacity of equipment access function of this application is controlled.

Alternatively, application is processed as controlled application to include: the code applied by amendment this application is processed as controlled should With.

Alternatively, this application is processed as controlled application and includes by the code applied by amendment: application is processed as generation of collecting Code；Record in assembly code, the mark of the capacity of equipment that this application is able to access that and this mark position in assembly code Put；Mark according to the said equipment ability determines that capacity of equipment accesses limitation function code；Mark according to capacity of equipment exists Capacity of equipment is accessed limitation function code injection in assembly code by the position in assembly code, forms new assembly code； Application is regenerated according to the assembly code that this is new；Again sign the application regenerated.That is, utilization recompiles application Mode carry out the control of the capacity of equipment access function applied.Certainly, described herein is only a kind of example, it is possible to To control the capacity of equipment access function of application in other way.Wherein, equipment is determined according to the mark of capacity of equipment Ability accesses limitation function code can include following manner: in assembly code, can there is the equipment that application is able to access that The code of ability, by recompilating the code of the capacity of equipment being able to access that, can compile it as can root Enabling or disabling of the capacity of equipment carrying out according to actual conditions being able to access that.

In an optional embodiment, receive management and control strategy and include: the management and control strategy that reception Strategy Center issues, wherein, This Strategy Center may be located in the terminal at application place, or, this management and control is centrally located at and is connected with the terminal applying place Server or terminal in.With the terminal that is connected of terminal at application place can be PC (Personal Computer, Referred to as PC), it is also possible to it is smart mobile phone, or other possess the terminal of above-mentioned control function.

Alternatively, receive the management and control strategy that above-mentioned Strategy Center issues to include: log in this Strategy Center；To the strategy logged in Center reports the application message of application, wherein, information that this application message includes applying the capacity of equipment being able to access that and with At least one lower information: the mount message of application, the upgrade information of application, the unloading information of application；Receive in this strategy The management and control strategy that the heart issues according to application message.

Wherein, when first logging into Strategy Center, need to register in Strategy Center, wait logging on Strategy Center and just may be used Without registration, directly to log in, naturally it is also possible to all registered before logging in every time.In an optional embodiment In, logging in before above-mentioned Strategy Center, also including: according to the mark of the terminal at application place in above-mentioned Strategy Center Register.

In an optional embodiment, include according to the capacity of equipment access function of management and control policy control application: utilizing should Strategy change registered in advance is applied to monitor management and control strategy described in the terminal at interface notification application place；Utilize this management and control strategy Control the capacity of equipment access function of application.

In an optional embodiment, after the capacity of equipment access function applied according to management and control policy control, also wrap Include: report control result.

Fig. 2 is the flow chart of the second application processing method according to embodiments of the present invention, as in figure 2 it is shown, this flow process bag Include following steps:

Step S202, sends management and control strategy to terminal, and wherein, this management and control strategy is used for setting for the application in terminal Standby ability access function is controlled.

In an optional embodiment, before sending management and control strategy to terminal, also include: receive the login of this terminal Request；The login process of terminal is performed according to logging request；After terminal completes to log in, receive the above-mentioned of this terminal transmission The application message of application, wherein, information that this application message includes applying the capacity of equipment being able to access that and following information are extremely One of few: the mount message of application, the upgrade information of application, the unloading information of application.

In an optional embodiment, before receiving the logging request of terminal, also include: the registration receiving terminal please Ask；Registration request according to this terminal performs the location registration process of terminal.Wherein, when terminal first logs into, need to note Volume, waits to log on just directly can log in without registration, and certain terminal all can also be noted before logging in every time Volume.

In an optional embodiment, after sending management and control strategy to terminal, also include: receive the right of terminal to report The control result that application is controlled.

Through the above description of the embodiments, those skilled in the art is it can be understood that arrive according to above-described embodiment Method can add the mode of required general hardware platform by software and realize, naturally it is also possible to by hardware, but a lot In the case of the former is more preferably embodiment.Based on such understanding, technical scheme is the most in other words to existing The part having technology to contribute can embody with the form of software product, and this computer software product is stored in one In storage medium (such as ROM/RAM, magnetic disc, CD), including some instructions with so that a station terminal equipment (can To be mobile phone, computer, server, or the network equipment etc.) perform the method described in each embodiment of the present invention.

Additionally providing a kind of application processing means in the present embodiment, this device is used for realizing above-described embodiment and being preferable to carry out Mode, had carried out repeating no more of explanation.As used below, term " module " can realize predetermined function Software and/or the combination of hardware.Although the device described by following example preferably realizes with software, but firmly Part, or the realization of the combination of software and hardware also may and be contemplated.

Fig. 3 is the structured flowchart of the first application processing means according to embodiments of the present invention, as it is shown on figure 3, this device Including the first receiver module 32 and control module 34, below this device is illustrated.

First receiver module 32, is used for receiving management and control strategy, and wherein, this management and control strategy is for for the application in terminal Capacity of equipment access function；Control module 34, is connected to above-mentioned first receiver module 32, for according to management and control strategy control The capacity of equipment access function of system application.

Fig. 4 is the preferred structure block diagram one of the first application processing means according to embodiments of the present invention, as shown in Figure 4, This device, in addition to including all modules shown in Fig. 3, also includes processing module 42, illustrates this device below.

Processing module 42, is connected to above-mentioned first receiver module 32, for above-mentioned application is processed as controlled application, its In, controlled application is can the application of controlled device ability access function.

Fig. 5 is the structured flowchart of processing module 42 in the first application processing means according to embodiments of the present invention, such as Fig. 5 Shown in, this processing module 42 includes processing unit 52, illustrates this processing module 42 below.

Processing unit 52, is processed as controlled application for the code applied by amendment by this application.

Alternatively, this processing unit 52 includes: application is processed as assembly code；Record, should in assembly code With mark and the mark position in assembly code of the capacity of equipment being able to access that；Mark according to capacity of equipment determines and sets Standby ability accesses limitation function code；Capacity of equipment is accessed limit by the position in assembly code of the mark according to capacity of equipment Function code processed is injected in above-mentioned assembly code, forms new assembly code；Regenerate according to the assembly code that this is new Application；Again sign the application regenerated.

Fig. 6 is the structured flowchart of the first receiver module 32 in the first application processing means according to embodiments of the present invention, As shown in Figure 6, this first receiver module 32 includes receiving unit 62, illustrates this first receiver module 32 below.

Receiving unit 62, for receiving the management and control strategy that Strategy Center issues, wherein, this Strategy Center is positioned at application place Terminal in, or, this management and control is centrally located in the server or terminal being connected with the terminal applying place.

Fig. 7 is the structured flowchart receiving unit 62 in the first application processing means according to embodiments of the present invention, such as Fig. 7 Shown in, this reception unit 62 includes logging in subelement 72, reporting subelement 74 and receive subelement 76, below to this Receive unit 62 to illustrate.

Log in subelement 72, be used for logging in above-mentioned Strategy Center；Report subelement 74, be connected to above-mentioned login subelement 72, for reporting the application message of application to the Strategy Center logged in, wherein, this application message includes that application is able to access that The information of capacity of equipment and at least one following information: the mount message of application, the upgrade information of application, the unloading of application Information carrying ceases；Receive subelement 76, be connected to above-mentioned report subelement 74, be used for receiving Strategy Center according to application message The management and control strategy issued.

Fig. 8 is the preferred structure block diagram receiving unit 62 in the first application processing means according to embodiments of the present invention, As shown in Figure 8, this reception unit 62, in addition to including all subelements shown in Fig. 7, also includes registering subelement 82, Below this reception unit 62 is illustrated.

Registration subelement 82, is connected to above-mentioned login subelement 72, is used for the mark according to the terminal applying place in plan Slightly register on center.

Fig. 9 is the structured flowchart of control module 34 in the first application processing means according to embodiments of the present invention, such as Fig. 9 Shown in, this control module 34 includes notification unit 92 and control unit 94, illustrates this control module 34 below.

Notification unit 92, the strategy change for utilizing application registered in advance monitors this pipe of terminal at interface notification application place Control strategy；Control unit 94, is connected to above-mentioned notification unit 92, for the equipment energy utilizing management and control policy control to apply Power access function.

Figure 10 is the structured flowchart two of the first application processing means according to embodiments of the present invention, as shown in Figure 10, and should Device, in addition to including all modules shown in Fig. 3, also includes reporting module 102, illustrates this device below.

Reporting module 102, is connected to above-mentioned control module 34, is used for reporting control result.

Figure 11 is the structured flowchart of the second application processing means according to embodiments of the present invention, as shown in figure 11, this dress Put and include sending module 112, below this device is illustrated.

Sending module 112, for sending management and control strategy to terminal, wherein, this management and control strategy is for for answering in terminal Capacity of equipment access function be controlled.

Figure 12 is the preferred structure block diagram one of the second application processing means according to embodiments of the present invention, as shown in figure 12, This device, in addition to including all modules shown in Figure 11, also includes that the second receiver module 122, first performs module 124 With the 3rd receiver module 126, below this device is illustrated.

Second receiver module 122, for receiving the logging request of terminal；First performs module 124, is connected to above-mentioned the Two receiver modules 122, for performing the login process of terminal according to logging request；3rd receiver module 126, is connected to Above-mentioned first performs module 124 and sending module 112, after completing to log in terminal, receives the above-mentioned of terminal transmission The application message of application, wherein, information that this application message includes applying the capacity of equipment being able to access that and following information are extremely One of few: the mount message of application, the upgrade information of application, the unloading information of application.

Figure 13 is the preferred structure block diagram two of the second application processing means according to embodiments of the present invention, as shown in figure 13, This device, in addition to including all modules shown in Figure 12, also includes that the 4th receiver module 132 and second performs module 134, Below this device is illustrated.

4th receiver module 132, for receiving the registration request of terminal；Second performs module 134, is connected to above-mentioned the Four receiver module 132 and the second receiver modules 122, perform the location registration process of terminal for the registration request according to terminal.

Figure 14 is the preferred structure block diagram three of the second application processing means according to embodiments of the present invention, as shown in figure 14, This device, in addition to including all modules shown in Figure 11, also includes the 5th receiver module 142, says this device below Bright.

5th receiver module 142, is connected to above-mentioned sending module 112, for receiving the controlling application of terminal to report The control result of system.

Below as a example by controlling the Mobile solution on intelligent mobile terminal, the present invention is illustrated.

Capacity of equipment cannot be carried out for application and access, in order to solve MDM present in correlation technique, the problem limited, this Invention proposes following method:

1, use code injection technology to transform the original Mobile solution in terminal as controlled Mobile solution so that it is Neng Goujie Accessed restriction strategy (the management and control strategy with above-mentioned) by capacity of equipment, and access restriction strategy according to the capacity of equipment accepted Perform；

2, centered by strategy management and control (Strategy Center with above-mentioned), control intelligent mobile terminal and controlled Mobile solution, Pass through distributing policy, it is achieved dynamically control the Mobile solution access to capacity of equipment；

3, resident policy agent on intelligent mobile terminal, management and control strategy from Strategy Center is uniformly processed, and Strategy is given controlled Mobile solution perform.

Additionally providing a kind of Mobile solution capacity of equipment in the embodiment of the present invention and access the device limited, Figure 15 is according to this The Mobile solution capacity of equipment of inventive embodiments accesses the device limited, and this device consists of the following components: Mobile solution Reinforce (processing module 42 with above-mentioned), Strategy Center, policy agent.

Mobile solution is reinforced by code injection method, and capacity of equipment accesses the original Mobile solution of limitation function code injection, It is transform as the controlled Mobile solution that can obtain management and control strategy and access according to management and control strategy execution capacity of equipment.

Strategy Center, as control platform, (holds with above-mentioned the 4th receiver module 132 and second including location registration process module Row module 134), login process module (performing module 124 with above-mentioned second receiver module 122 and first), mobile Application message processing module (the 3rd receiver module 126 with above-mentioned), policy distribution module are (with above-mentioned sending module 112) and policy execution result processing module (the 5th receiver module 142 with above-mentioned), as shown in figure 16, Tu16Shi Strategy Center's module diagram according to embodiments of the present invention.Wherein location registration process module is for processing from intelligent mobile eventually The registration request of end；Login process module is for processing the logging request from intelligent mobile terminal；At Mobile solution information Reason module is for receiving and preserving from the controlled Mobile solution information in intelligent mobile；Policy distribution module is for by management and control Policy distribution is to intelligent mobile terminal；Policy execution result processing module user processes policy execution result.

Policy agent is selectable, self-contained unit, and it includes Registering modules (the registration subelement 82 with above-mentioned), steps on Record module (the login subelement 72 with above-mentioned), Mobile solution information reporting module (reporting subelement 74 with above-mentioned), Strategy processing module (control module 34 with above-mentioned), policy execution result reporting module (reporting module 102 with above-mentioned), Strategy Switching Module (the first receiver module 32 with above-mentioned), as shown in figure 17, Figure 17 is according to embodiments of the present invention Policy agent module diagram.Wherein Registering modules and login module are used for and Strategy Center's communication, are respectively completed intelligence The registering and logging of mobile terminal；Mobile solution information reporting module be used for reporting mounted controlled Mobile solution information and Its controlled plant ability information；Strategy processing module is for receiving and preserving the management and control strategy from Strategy Center；Strategy is held Row result reporting module is for performing result to Strategy Center's feedback strategy；Strategy Switching Module is used for and controlled Mobile solution Alternately, support controlled Mobile solution active obtaining strategy and when strategy changes real-time informing Mobile solution.

Mobile solution capacity of equipment in the embodiment of the present invention accesses the method limited and can be such that

The first step, Mobile solution reinforcing, Figure 18 is Mobile solution strengthening flow process figure according to embodiments of the present invention, such as figure Shown in 18, this flow process comprises the steps:

Step S1802, pretreatment Mobile solution.By unpacking, decompiling, the method such as dis-assembling, Mobile solution is pre- It is processed as assembly code.

Step S1804, determines the capacity of equipment used in Mobile solution.Traversal capacity of equipment set, takes out the most one by one Capacity of equipment mark, and in above-mentioned assembly code, retrieve this mark；The capacity of equipment mark retrieved is being moved with it Positional information in application records stand-by.

Step S1806, injection device ability accesses limitation function code.Travel through above-mentioned record information aggregate, the most one by one Extraction device capability flags and positional information, access according to capacity of equipment mark extraction device ability from capacity of equipment set Limitation function code, and be injected in Mobile solution according to positional information.

Step S1808, regenerates Mobile solution.By compiling, linking, the method such as packing, will have been injected into limiting merit The code of energy regenerates Mobile solution.

Step S1810, Mobile solution of again signing.Use the signature file pair that acquiescence signature file or user specify Mobile solution is signed again.

Second step, registers intelligent mobile terminal, the management and control at reception strategy center.Figure 19 is according to embodiments of the present invention Management and control policy agent schematic flow sheet, as shown in figure 19, this flow process comprises the steps:

Step S1902, policy agent is automatic startup optimization after intelligent mobile terminal has been started shooting.

Step S1904, it is judged that whether policy agent is to start first, in the case of judged result is for being, goes to step S1908, otherwise goes to step S1906.

Step S1906, account policy center, go to step S1912.

Step S1908, policy agent uses intelligent mobile terminal uniquely to identify and registers to Strategy Center.

Step S1910, policy agent reports mounted controlled Mobile solution information on intelligent mobile terminal to Strategy Center, Thus start the management and control at reception strategy center.

Step S1912, policy agent is monitored Mobile solution and is installed, upgrades, unloads message, it is judged that in intelligent mobile terminal Mounted controlled Mobile solution information whether change, in the case of judged result is for being, go to step S1914, Otherwise, step S1916 is gone to.

Step S1914, when controlled Mobile solution changes, is reported to Strategy Center by change information, is subject to update Control content.These change informations include being mounted with new controlled application, have upgraded and installed controlled application, unloaded and pacified Dress controlled application.

Step S1916, it may be judged whether receive the capacity of equipment access restriction strategy that Strategy Center issues, in judged result be In the case of being, go to step S1918, otherwise go to step S1920.

Step S1918, the capacity of equipment that conversation strategy center issues accesses restriction strategy.

Step S1920, it may be judged whether log off Strategy Center, in the case of judged result is for being, goes to step S1922, otherwise goes to step S1912.

Step S1922, log off Strategy Center, terminates.

3rd step, Strategy Center's management and control Mobile solution.Figure 20 is that Strategy Center's management and control according to embodiments of the present invention is moved The schematic flow sheet of application, as shown in figure 20, this flow process comprises the steps:

Step S2002, starts, Strategy Center accept from intelligent mobile terminal, sent by policy agent device Registration request.Strategy Center accept from intelligent mobile terminal, by policy agent device send logging request.Strategy Center is received and processes from intelligent mobile terminal, the controlled Mobile solution information that reported by policy agent device.This A little information include newly-increased controlled Mobile solution, update controlled Mobile solution and unload controlled Mobile solution.For newly-increased controlled Mobile solution information, Strategy Center will record and preserve；For updating controlled Mobile solution information, Strategy Center will update Corresponding record；For unloading controlled Mobile solution, corresponding record will be deleted by Strategy Center.

Step S2004, selects intelligent mobile terminal.

Step S2006, selects controlled Mobile solution.

Step S2008, Strategy Center issues capacity of equipment to selected controlled Mobile solution and accesses restriction strategy.

Step S2010, Strategy Center issues capacity of equipment to selected intelligent mobile terminal and accesses restriction strategy.Which Can be disposably to all controlled Mobile solution distributing policy of place terminal.

Step S2012, Strategy Center receives and shows the policy execution result from intelligent mobile terminal.

Step S2014, terminates.

4th step, strategy exchange.Figure 21 is strategy exchange schematic flow sheet according to embodiments of the present invention, such as Figure 21 institute Showing, this flow process comprises the steps:

Step S2102, actively inquires about and obtains the equipment energy relevant to oneself to policy agent device when Mobile solution starts Power accesses restriction strategy.

Step S2104, monitors interface to policy agent device registration strategy change when Mobile solution starts, and policy agent fills Put when strategy change by monitoring interface notification Mobile solution New Policy.

Step S2106, runs the capacity of equipment obtained and accesses restriction strategy.

Step S2108, it may be judged whether need capacity of equipment is accessed to be controlled, in the case of judged result is for being, Go to step S2010, otherwise go to step S2118.

Step S2110, it may be judged whether allow application to use capacity of equipment, in the case of judged result is for being, goes to step Rapid S2112, otherwise, goes to step S2114.

Step S2112, uses capacity of equipment.

Step S2114, prompting capacity of equipment is unavailable.

Step S2116, it may be judged whether need to exit, in the case of judged result is for being, go to step S2118, no Then, step S2106 is gone to.

Step S2118, nullifies strategy change to policy agent when Mobile solution exits and monitors interface.

Below in conjunction with the embodiment under concrete application scenarios, the present invention is illustrated.

Figure 22 is remote-control schematic diagram according to embodiments of the present invention, the scheme in the present embodiment can be used for enterprise Information security, on the Intelligent mobile equipment that can be carried employee by strategic server (Strategy Center) by manager Mobile solution carries out capacity of equipment and accesses and limit, and as disabled the strategy of photographing unit during issuing working, is limited in workplace Take pictures.

Figure 23 is local management and control schematic diagram according to embodiments of the present invention, can say that this programme in the present embodiment is for meeting View information security, can be passed through intelligent mobile terminal strategy APP (Strategy Center) to other participants by meeting presider The Mobile solution on intelligent mobile terminal entrained by Yuan does capacity of equipment and accesses restriction, forbids video and audio recording strategy as issued, Limit meeting-place video and audio recording.

Figure 24 is the machine management and control schematic diagram according to embodiments of the present invention, and the scheme in the present embodiment of can saying is for mobile phone Application safety, the controlled Mobile solution can installed the machine by strategy APP (Strategy Center) by cellie is entered Row capacity of equipment accesses and limits, as forbidden accessing address list.

Figure 25 is iOS platform management and control schematic diagram according to embodiments of the present invention, in view of iOS system particularity (simultaneously Only allow to run an application), when this programme is used for iOS intelligent terminal, it is by strategic server (Strategy Center) Directly push strategy to the Mobile solution being currently running and realize capacity of equipment access dynamic limit.

As a example by android system, Strategy Center is deployed on PC the remote-control as strategic server and realizes patrolling Collect as follows:

The first step, Mobile solution is reinforced.

This step can comprise the following steps: again

Pretreatment Mobile solution.Apktool carries out unpacking, decompiling, dis-assembling, be smali by Mobile solution pretreatment Code.

Determine the capacity of equipment used in Mobile solution.Traversal capacity of equipment set, the most one by one extraction device capability flags, And in above-mentioned assembly code, retrieve this mark；By the capacity of equipment mark retrieved and its letter of position in Mobile solution Breath records stand-by.

Injection device ability accesses limitation function code.Travel through above-mentioned record information aggregate, extraction device ability the most one by one Mark and positional information, access limitation function code according to capacity of equipment mark extraction device ability from capacity of equipment set, And be injected in Mobile solution according to positional information.

Regenerate Mobile solution.Use aapt compiling, link, use apktool packing, limitation function will be had been injected into Code regenerate Mobile solution.

Again sign Mobile solution.Use the signature file that signapk and acquiescence signature file or user specify to shifting Dynamic application is signed again.

Second step, registers intelligent mobile terminal, reception strategy server management and control.

This step can comprise the following steps: again.

Policy agent is automatic startup optimization after intelligent mobile terminal has been started shooting.

When running first, policy agent uses intelligent mobile terminal uniquely to identify and registers to strategic server.

Policy agent automated log on strategic server.

After first logging into, policy agent reports mounted controlled Mobile solution letter on intelligent mobile terminal to strategic server Breath, thus start the management and control of reception strategy server.

Policy agent is monitored Mobile solution and is installed, upgrades, unloads message, when controlled Mobile solution changes, will become Change information reporting is to strategic server, to update controlled content.These change informations include being mounted with new controlled application, Upgrade and controlled application is installed, has unloaded and controlled application is installed.

Policy agent receives and keeps the capacity of equipment issued from strategic server to access restriction strategy.

3rd step strategic server management and control.

This step can comprise the following steps: again

Strategic server is accepted from intelligent mobile terminal, the registration request that sent by policy agent device.

Strategic server accept from intelligent mobile terminal, by policy agent device send logging request.

Strategic server receive and process from intelligent mobile terminal, the controlled movement that reported by policy agent device should Use information.These information include newly-increased controlled Mobile solution, update controlled Mobile solution and unload controlled Mobile solution.Right In newly-increased controlled Mobile solution information, strategic server will record and preservation；For updating controlled Mobile solution information, plan Slightly server will update corresponding record；For unloading controlled Mobile solution, strategic server will delete corresponding record.

Strategic server issues capacity of equipment to selected controlled Mobile solution and accesses restriction strategy.

Strategic server issues capacity of equipment to selected intelligent mobile terminal and accesses restriction strategy.Which can be disposable Ground is to all controlled Mobile solution distributing policy of place terminal.

Strategic server receives and shows the policy execution result from intelligent mobile terminal.

4th step strategy exchange.

This step can comprise the following steps: again

Actively to the strategy that the inquiry of policy agent device is relevant to oneself when Mobile solution starts.

Interface is monitored to policy agent device registration strategy change when Mobile solution starts.

Policy agent device when strategy change by monitor interface notification Mobile solution New Policy.

Nullify strategy change to policy agent when Mobile solution exits and monitor interface.

Still as a example by android system, Strategy Center is deployed on intelligent mobile terminal the local pipe as strategy APP It is as follows that control realizes logic:

The first step, Mobile solution is reinforced.

This step can comprise the following steps: again

Second step, links master control intelligent mobile terminal, and reception strategy APP management and control, Figure 26 is according to embodiments of the present invention Local management and control policy agent connect flow chart, as shown in figure 26, this flow process comprises the steps:

Step S2602, by policy agent link policy center, thus starts the management and control of reception strategy APP.

Step S2604, policy agent to strategy APP report on intelligent mobile terminal mounted controlled Mobile solution and Capacity of equipment type.

Step S2606, it is judged that whether policy agent receives the capacity of equipment issued from strategy APP and access restriction strategy, In the case of judged result is for being, go to step S2608, otherwise go to step S2610.

Step S2608, preserves the capacity of equipment issued from strategy APP and accesses restriction strategy.

Step S2610, it may be judged whether exit, in the case of judged result is for being, terminates flow process, otherwise goes to step S2606。

3rd step, strategy APP management and control.Figure 27 is local management and control Strategy Center flow chart according to embodiments of the present invention, As shown in figure 27, this flow process comprises the steps:

Step S2702, strategy APP start, and accept from intelligent mobile terminal, sent by policy agent device Connection request.

Step S2704, strategy APP receive and process from intelligent mobile terminal, reported by policy agent device Controlled Mobile solution information.

Step S2706, selects intelligent mobile terminal.

Step S2708, selects controlled Mobile solution.

Step S2710, selects capacity of equipment.

Step S2712, strategy APP issues capacity of equipment to selected controlled Mobile solution and accesses restriction strategy.

Step S2714, strategy APP issues capacity of equipment to selected intelligent mobile terminal and accesses restriction strategy.Which Can be disposably to all controlled Mobile solution distributing policy of place terminal.Strategy APP receives and shows from intelligence The policy execution result of energy mobile terminal.

4th step, strategy exchange.

This step can comprise the following steps: again

Still as a example by android system, Strategy Center is deployed on intelligent mobile terminal the machine pipe as strategy APP It is as follows that control realizes logic:

The first step, Mobile solution is reinforced.

This step can comprise the following steps: again

Second step, starts strategy APP, arranges management and control strategy.Figure 28 is the machine management and control plan according to embodiments of the present invention Slightly central flow figure, as shown in figure 28, this flow process comprises the steps:

Step S2802, strategy APP travels through the controlled Mobile solution of the machine.

Step S2804, selects controlled Mobile solution.

Step S2806, selects capacity of equipment.

Step S2808, and management and control strategy is set.

3rd step, strategy exchange.

This step can comprise the following steps: again

Actively to the strategy that strategy APP inquiry is relevant to oneself when Mobile solution starts.

Interface is monitored to strategy APP registration policy change when Mobile solution starts.

Strategy APP when strategy change by monitor interface notification Mobile solution New Policy.

Nullify strategy change to strategy APP when Mobile solution exits and monitor interface.

It is as follows that management and control as a example by iOS system realizes logic:

The first step, Mobile solution is reinforced.

This step can comprise the following steps: again

Pretreatment Mobile solution.Processing Mobile solution by decompiling is assembly code.

Regenerate Mobile solution.Use xcode compiling, link, and regenerate Mobile solution.

Again sign Mobile solution.Use signature instrument and signature file that Mobile solution is signed again.

Second step, Mobile solution registration, reception strategy server management and control.Figure 29 is iOS according to embodiments of the present invention Application register flow path figure, as shown in figure 29, this flow process comprises the steps:

Step S2902, it is judged that whether controlled Mobile solution is to start first, in the case of judged result is for being, goes to Step S2904, otherwise, goes to step S2908.

Step S2904, after controlled Mobile solution starts first, uses DeviceToken to register to strategic server.

Step S2906, controlled Mobile solution reports the capacity of equipment self used to strategic server, reports all controlled Capacity of equipment type.

Step S2908, controlled Mobile solution is non-when starting first, automated log on strategic server.

Step S2910, it may be judged whether receive the strategy that strategic server issues, in the case of judged result is for being, turns To step S2912, otherwise, step S2914 is gone to.

Step S2912, controlled Mobile solution receives and keeps the capacity of equipment issued from strategic server to access and limits plan Slightly.

Step S2914, it may be judged whether exit, in the case of judged result is for being, terminates flow process.Otherwise, step is gone to Rapid S2910.

3rd step, strategic server management and control.Figure 30 is Strategy Center management and control iOS application stream according to embodiments of the present invention Cheng Tu, as shown in figure 30, this flow process comprises the steps:

Step S3002, strategic server accepts the registration request from controlled Mobile solution.

Step S3004, strategic server accepts the logging request from controlled Mobile solution.

Step S3006, strategic server receives and processes the controlled plant ability information from controlled Mobile solution.

Step S3008, strategic server selects controlled Mobile solution.

Step S3010, strategic server selects capacity of equipment.

Step S3012, selects to open or shutdown strategy.

Step S3014, strategic server issues capacity of equipment to selected controlled Mobile solution and accesses restriction strategy.Strategy Server receives and shows the policy execution result from intelligent mobile terminal.

It should be noted that above-mentioned modules can be by software or hardware realizes, for the latter, Ke Yitong Cross in the following manner to realize, but be not limited to this: above-mentioned module is respectively positioned in same processor；Or, above-mentioned module position respectively In multiple processors.

Embodiments of the invention additionally provide a kind of storage medium.Alternatively, in the present embodiment, above-mentioned storage medium can To be arranged to storage for the program code performing following steps:

S1, receives management and control strategy, and wherein, this management and control strategy is for the capacity of equipment access function for the application in terminal；

S2, according to the capacity of equipment access function of above-mentioned management and control policy control application.

Alternatively, storage medium is also configured to storage for the program code performing following steps:

S1, sends management and control strategy to terminal, and wherein, this management and control strategy is visited for the capacity of equipment for the application in terminal Ask that function is controlled.

Alternatively, in the present embodiment, above-mentioned storage medium can include but not limited to: USB flash disk, read only memory (Random ■ Access Memory is called for short for (Read-Only Memory, referred to as ROM), random access memory For RAM), portable hard drive, the various media that can store program code such as magnetic disc or CD, wherein, above-mentioned end The storage medium of the application in end can include but not limited to flash memory (Compact flash, referred to as CF) card, safety Digital card (Secure Digital Memory Card, referred to as SD) blocks.

Alternatively, the concrete example in the present embodiment is referred to showing described in above-described embodiment and optional embodiment Example, the present embodiment does not repeats them here.

Use the method for the invention and device, compared with correlation technique, access in capacity of equipment and be precisely controlled aspect acquirement Progress, has reached the effect of the single Mobile solution of control, has improve management and control motility etc..Overcome in correlation technique The shortcoming that cannot carry out management and control for concrete Mobile solution, solving present in correlation technique cannot should for specific movement By the problem carrying out management and control.

Obviously, those skilled in the art should be understood that each module of the above-mentioned present invention or each step can be with general Calculating device to realize, they can concentrate on single calculating device, or be distributed in multiple calculating device and formed Network on, alternatively, they can realize, it is thus possible to by them with calculating the executable program code of device Storage is performed by calculating device in the storage device, and in some cases, can hold with the order being different from herein Step shown or described by row, or they are fabricated to respectively each integrated circuit modules, or by many in them Individual module or step are fabricated to single integrated circuit module and realize.So, the present invention is not restricted to any specific hardware Combine with software.

The foregoing is only the preferred embodiments of the present invention, be not limited to the present invention, for the technology of this area For personnel, the present invention can have various modifications and variations.All within the spirit and principles in the present invention, that is made is any Amendment, equivalent, improvement etc., should be included within the scope of the present invention.

Claims

1. an application processing method, it is characterised in that including:

Receiving management and control strategy, wherein, described management and control strategy accesses merit for the capacity of equipment for the application in terminal Energy；

According to the capacity of equipment access function of application described in described management and control policy control.

Method the most according to claim 1, it is characterised in that before receiving described management and control strategy, also include:

Described application is processed as controlled application, and wherein, described controlled application is controlled device ability to access The application of function.

Method the most according to claim 2, it is characterised in that described application is processed as controlled application and includes:

By revising the code of described application, described application is processed as controlled application.

Method the most according to claim 3, it is characterised in that answer use by described by revising the code of described application Reason includes for controlled application:

Described application is processed as assembly code；

Record is in described assembly code, and the mark of the capacity of equipment that described application is able to access that and described mark are in institute State the position in assembly code；

Mark according to described capacity of equipment determines that described capacity of equipment accesses limitation function code；

Described capacity of equipment is accessed and limits by the position in described assembly code of the mark according to described capacity of equipment Function code is injected in described assembly code, forms new assembly code；

Described application is regenerated according to described new assembly code；

Again sign the described application regenerated.

Method the most according to claim 1, it is characterised in that receive described management and control strategy and include:

Receiving the described management and control strategy that Strategy Center issues, wherein, described Strategy Center is positioned at described application place In terminal, or, described management and control is centrally located in the server or terminal that the terminal with described application place is connected.

Method the most according to claim 5, it is characterised in that receive the described management and control strategy that described Strategy Center issues Including:

Log in described Strategy Center；

Report the application message of described application to the described Strategy Center logged in, wherein, described application message includes institute State at least one the information of capacity of equipment that application is able to access that and following information: the mount message of described application, institute State the upgrade information of application, the unloading information of described application；

Receive the described management and control strategy that described Strategy Center issues according to described application message.

Method the most according to claim 6, it is characterised in that before logging in described Strategy Center, also include:

The mark of the terminal according to described application place is registered in described Strategy Center.

Method the most according to claim 1, it is characterised in that according to the equipment of application described in described management and control policy control Ability access function includes:

The strategy change utilizing described application registered in advance is monitored and is managed described in the terminal applying place described in interface notification Control strategy；

Utilize the capacity of equipment access function of application described in described management and control policy control.

Method the most according to claim 1, it is characterised in that setting according to application described in described management and control policy control After standby ability access function, also include:

Report control result.

10. an application processing method, it is characterised in that including:

Sending management and control strategy to terminal, wherein, described management and control strategy is for the equipment for the application in described terminal Ability access function is controlled.

11. methods according to claim 10, it is characterised in that before sending described management and control strategy to described terminal, Also include:

Receive the logging request of described terminal；

The login process of described terminal is performed according to described logging request；

After described terminal completes to log in, receive the application message of the described application that described terminal sends, wherein, institute State at least one the information of the capacity of equipment that application message includes that described application is able to access that and following information: described should Mount message, the upgrade information of described application, the unloading information of described application.

12. methods according to claim 11, it is characterised in that before receiving the described logging request of described terminal, Also include:

Receive the registration request of described terminal；

Registration request according to described terminal performs the location registration process of described terminal.

13. methods according to claim 10, it is characterised in that after sending described management and control strategy to described terminal, Also include:

Receive the control result that described application is controlled of described terminal to report.

14. 1 kinds of application processing meanss, it is characterised in that including:

First receiver module, is used for receiving management and control strategy, and wherein, described management and control strategy is for for answering in terminal Capacity of equipment access function；

Control module, for according to the capacity of equipment access function of application described in described management and control policy control.

15. devices according to claim 14, it is characterised in that also include:

Processing module, for described application is processed as controlled application, wherein, described controlled application is can be controlled The application of control equipment ability access function.

16. devices according to claim 15, it is characterised in that described processing module includes:

Processing unit, for being processed as controlled application by the code of the described application of amendment by described application.

17. devices according to claim 16, it is characterised in that described processing unit includes:

Described application is processed as assembly code；

Again sign the described application regenerated.

18. devices according to claim 14, it is characterised in that described first receiver module includes:

Receiving unit, for receiving the described management and control strategy that Strategy Center issues, wherein, described Strategy Center is positioned at In the terminal at described application place, or, described management and control is centrally located at the clothes that the terminal with described application place is connected In business device or terminal.

19. devices according to claim 18, it is characterised in that described reception unit includes:

Log in subelement, be used for logging in described Strategy Center；

Report subelement, for reporting the application message of described application, wherein, institute to the described Strategy Center logged in State at least one the information of the capacity of equipment that application message includes that described application is able to access that and following information: described should Mount message, the upgrade information of described application, the unloading information of described application；

Receive subelement, for receiving the described management and control strategy that described Strategy Center issues according to described application message.

20. devices according to claim 19, it is characterised in that also include:

Registration subelement, the mark for the terminal according to described application place is registered in described Strategy Center.

21. devices according to claim 14, it is characterised in that described control module includes:

Notification unit, the strategy change for utilizing described application registered in advance is monitored and is applied place described in interface notification Terminal described in management and control strategy；

Control unit, for utilizing the capacity of equipment access function of application described in described management and control policy control.

22. devices according to claim 14, it is characterised in that also include:

Reporting module, is used for reporting control result.

23. 1 kinds of application processing meanss, it is characterised in that including:

Sending module, for sending management and control strategy to terminal, wherein, described management and control strategy is for for described terminal In the capacity of equipment access function of application be controlled.

24. devices according to claim 23, it is characterised in that also include:

Second receiver module, for receiving the logging request of described terminal；

First performs module, for performing the login process of described terminal according to described logging request；

3rd receiver module, after completing to log in described terminal, receives the described application of described terminal transmission Application message, wherein, described application message includes the information of the capacity of equipment that described application is able to access that and following letter At least one breath: the mount message of described application, the upgrade information of described application, the unloading information of described application.

25. devices according to claim 24, it is characterised in that also include:

4th receiver module, for receiving the registration request of described terminal；

Second performs module, performs the location registration process of described terminal for the registration request according to described terminal.

26. devices according to claim 23, it is characterised in that also include:

5th receiver module, for receiving the control result being controlled described application of described terminal to report.