CN112335275A

CN112335275A - Access right control method of terminal

Info

Publication number: CN112335275A
Application number: CN201880095183.6A
Authority: CN
Inventors: 陈泽天
Original assignee: Huawei Technologies Co Ltd
Current assignee: Huawei Technologies Co Ltd
Priority date: 2018-07-13
Filing date: 2018-07-13
Publication date: 2021-02-05
Anticipated expiration: 2038-07-13
Also published as: CN116112929A; WO2020010605A1; CN112335275B

Abstract

The embodiment of the invention provides an access right control method of a terminal, which comprises the following steps: acquiring equipment information in a local area network where a terminal is located; judging whether the target equipment is in the local area network or not according to the acquired equipment information; and determining whether to release the access right limit of the terminal according to the judgment result. The invention can provide a convenient and flexible access authority control method for the prior terminal access without repeated manual input setting of an operator.

Description

Access right control method of terminal

Technical Field

The present invention relates to the field of communications technologies, and in particular, to a method for controlling access rights of a terminal.

Background

With the increase of household terminal devices, such as smart televisions, set-top boxes, PADs, mobile phones and the like, people use more and more terminals in daily life and study. Various terminals are also more and more attractive to minors, and the unregulated and unlimited use of terminals can also have negative effects on minors.

In order to prevent minors from watching and using terminal devices such as televisions, set top boxes, mobile phones, PADs and the like in an uncontrolled manner, many terminal device manufacturers produce terminals with a child lock function, and the terminal devices do not respond to operation or only provide limited access rights after the child lock is opened.

The existing child lock has two main locking and unlocking modes, which are respectively as follows: 1. the child lock is triggered through a specific key combination, and manual operation is needed again when the child lock is released; 2. and installing management software on the terminal, and unlocking in a password input mode.

However, in any child lock system, the user is required to manually input the unlocking operation. For example: after the terminal is locked, when a user needs to use the locked function, firstly, a password needs to be input to perform an unlocking operation, and the locked function is unlocked. For example, for an intelligent television or a set-top box, a locked channel or a signal source needs to be unlocked through a remote controller, and then a program of the channel or the signal source can be normally viewed. Therefore, no matter the user locks or unlocks the terminal function, the password needs to be input once by using a remote controller or a human-computer interaction interface, and the operation is complicated and the use is inconvenient.

Disclosure of Invention

The embodiment of the invention provides a method, a system and a device for controlling access authority of a terminal.

In one aspect of the embodiments of the present invention, a method for controlling access rights of a terminal is provided, where the method includes: acquiring equipment information around a terminal; judging whether target equipment exists according to the acquired equipment information; and if the target equipment exists in the acquired equipment information, releasing the access authority limit of the terminal.

Optionally, determining whether the target device exists according to the acquired device information includes: and storing a target device information list comprising one or more target devices in the terminal, and judging whether the target devices exist in the acquired device information according to the acquired device information and the target device information list stored in the terminal.

Optionally, the peripheral device of the terminal is a device to which the terminal can connect through a short-range wireless communication technology.

Optionally, the acquiring of the peripheral device information of the terminal is to acquire the peripheral device information through a short-distance communication technology.

Optionally, the acquiring of the peripheral device information of the terminal is to acquire the peripheral device information through one or more short-distance communication technologies.

Optionally, before obtaining the device information around the terminal, the method further includes: determining whether the access right control function is in an open state or not in a first state; if the terminal is started, acquiring equipment information around the terminal;

optionally, the first state is a boot trigger.

Optionally, the first state is to perform a screen unlock trigger.

In another aspect of the embodiments of the present invention, a terminal is provided, where the terminal includes: a determination communication unit for determining device information for acquiring the periphery of the terminal; a determination unit configured to determine whether a target device exists therein based on the device information acquired by the communication unit; and the control unit is used for determining whether to release the access right limit of the terminal according to the judgment result of the judgment unit.

Optionally, the terminal further includes: a storage unit for storing target device information including one or more target devices; the judging unit judges whether a target device exists in the device information acquired by the communication unit and the target device information list stored in the storage unit; .

Optionally, the terminal is an intelligent television or a set-top box.

Optionally, the terminal further includes a determining unit, configured to determine whether the access right control function is in an on state in the first state of the terminal.

Optionally, the communication unit is configured to acquire device information around the terminal when the determining unit determines that the access right control function is turned on.

In another aspect of the embodiments of the present invention, a terminal is provided, where the terminal includes: a processor and a readable storage medium, the readable storage medium storing a program, the processor being configured to execute the program and, when executing the program, to perform the steps of: acquiring equipment information around a terminal; judging whether target equipment exists according to the acquired equipment information; and determining whether to release the access right limit of the terminal according to the judgment result.

In another aspect of the embodiments of the present invention, a method for controlling access rights of a terminal is provided, where the method includes: acquiring equipment information in a local area network where a terminal is located; judging whether the target equipment is in the local area network or not according to the acquired equipment information; and determining whether to release the access right limit of the terminal according to the judgment result.

Optionally, the determining, according to the acquired device information, whether a target device is in the local area network includes: storing a target device information list comprising one or more target devices in the terminal, and judging whether the target devices are in the local area network according to whether the acquired device information existing in the local area network comprises the target devices stored in the terminal.

Optionally, the target device information is preset for a user and stored in the terminal.

Optionally, the determining whether to release the access right limitation of the terminal according to the determination result includes: and if one or more of the target devices exist in the local area network, releasing the access right limitation of the terminal.

Optionally, the determining whether to release the access right limitation of the terminal according to the determination result includes: and if the target equipment does not exist in the local area network, limiting the access authority of the terminal.

Optionally, the method further includes, before obtaining the device information around the terminal, determining whether the terminal access right control function is turned on in the first state.

Optionally, the first state is a power-on trigger state.

Optionally, the first state is an unlock trigger state.

In another aspect of the embodiments of the present invention, a terminal is provided, where the terminal includes: the communication determining unit is used for determining and acquiring the equipment information in the local area network where the terminal is located; a determination unit configured to determine whether a target device is in the local area network according to the device information acquired by the communication unit; and the control unit is used for determining whether to release the access right limit of the terminal according to the judgment result of the judgment unit.

Optionally, the terminal further includes a determining unit, configured to determine whether the access right control function is in an on state in the first state.

Optionally, the communication unit is configured to acquire device information in a local area network where the terminal is located when the determining unit determines that the access right control function is in an open state.

Optionally, the terminal further includes: and the setting unit is used for setting the access authority control function.

Optionally, the setting unit is configured to set whether to start an access right control function.

Optionally, the setting unit is configured to set the target device information.

Optionally, the setting unit is configured to set a type of access right control.

Optionally, the setting unit is configured to set target device information; the storage unit is used for storing the target equipment information set by the user through the setting unit.

A storage unit that stores setting information of the setting unit; the judgment unit judges whether the target device is in the local area network according to whether the acquired device information existing in the local area network includes target device information stored in the storage unit.

Optionally, the terminal is a smart television, or a set top box, or a handheld terminal, or a PAD, or a computer.

In another aspect of the embodiments of the present invention, a terminal is provided, where the terminal includes: a processor and a readable storage medium, the readable storage medium storing a program, the processor being configured to execute the program and, when executing the program, to perform the steps of: acquiring information of other equipment in a local area network where a terminal is located; judging whether the target equipment is in the local area network or not according to the acquired equipment information; and determining whether to release the access right limit of the terminal according to the judgment result.

In another aspect of the embodiments of the present invention, a method for controlling access rights of a terminal is provided, where the method includes: triggering and acquiring the information of the peripheral equipment of the terminal when specific conditions are met; acquiring equipment information around a terminal; judging whether target equipment exists according to the acquired equipment information; and if the target equipment exists in the acquired equipment information, releasing the access authority limit of the terminal.

Optionally, the method further includes starting the terminal access right control function.

Optionally, the specific condition is a periodic trigger.

Optionally, the specific condition is that a specified operation instruction is detected.

In another aspect of the embodiments of the present invention, a terminal is provided, where the terminal includes: the triggering unit is used for triggering and acquiring the information of the peripheral equipment of the terminal when a specific condition is met; a communication unit for acquiring device information around a terminal; a judging unit configured to judge whether a target device exists therein according to the acquired device information; and the control unit is used for releasing the access authority limit of the terminal when the target equipment exists in the acquired equipment information.

Optionally, the terminal further includes a setting unit, configured to start the terminal access right control function.

Optionally, the terminal further includes: a storage unit for storing target device information including one or more target devices; the determination unit determines whether or not a target device exists therein based on the device information acquired by the communication unit and a target device information list stored in the storage unit.

Optionally, the terminal is an intelligent television or a set-top box.

In another aspect of the embodiments of the present invention, a terminal is provided, where the terminal includes: a processor and a readable storage medium, the readable storage medium storing a program, the processor being configured to execute the program and, when executing the program, to perform the steps of: starting the terminal access authority control function; triggering and acquiring the information of the peripheral equipment of the terminal when specific conditions are met; acquiring equipment information around a terminal; judging whether target equipment exists according to the acquired equipment information; and if the target equipment exists in the acquired equipment information, releasing the access authority limit of the terminal.

According to the embodiment of the invention, whether the target equipment is arranged at the periphery of the terminal is used as a mark for judging whether the terminal is in the supervision range of a manager or not so as to judge whether to carry out access authority limitation on the terminal or remove the access authority limitation. The embodiment of the invention is convenient and effective to manage the access right of the terminal, does not need to repeatedly carry out manual setting, removes the access right limitation once the target equipment and the controlled terminal are accessed into the same local area network, and carries out access right control on the terminal in time once the target equipment leaves the local area network, thereby avoiding the problems that the user needs to memorize the password to manually input and remove the right limitation, or forgets the password and can not remove the right limitation, or needs to manually input the password again to carry out the right limitation setting when leaving each time in the prior art.

The embodiment of the invention not only can be used for limiting the watching of television by minors or the use of terminal equipment in a family, but also can be used for controlling the access authority of the owner of the terminal to the terminal under any condition, namely judging whether the owner of the terminal is at home or not or whether the owner of the terminal is near the terminal or not according to the position of target equipment, such as a mobile terminal carried by the owner of the terminal, so as to intelligently start or remove the access authority limit of the terminal.

Drawings

In order to more clearly illustrate the technical solutions in the embodiments or the background art of the present application, the drawings required to be used in the embodiments or the background art of the present application will be described below.

FIG. 1: the invention discloses a method for controlling terminal access authority, which comprises the following steps of (1) carrying out a flow chart of the method for controlling the terminal access authority;

FIG. 2: the invention discloses a signaling flow chart for acquiring equipment information in a local area network;

FIG. 3: an access right control information setting interface of the embodiment of the invention;

FIG. 4: an access right control function setting interface of the embodiment of the invention;

FIG. 5: an application scenario diagram of an embodiment of the present invention;

FIG. 6: the terminal structure of the embodiment of the invention is shown schematically;

FIG. 7: the embodiment of the invention also discloses a terminal structure schematic diagram.

FIG. 8: another method for controlling terminal access authority according to the embodiment of the invention is a flow chart;

FIG. 9: another method for controlling terminal access authority according to the embodiment of the invention is a flow chart;

FIG. 10: the invention also discloses a terminal structure schematic diagram;

FIG. 11: the embodiment of the invention also discloses a terminal structure schematic diagram.

Detailed Description

The technical solutions in the embodiments of the present invention will be clearly and completely described below with reference to the drawings in the embodiments of the present invention, and it is obvious that the described embodiments are some, not all, embodiments of the present invention. It should be noted that, based on the embodiments of the present invention, all other embodiments obtained by a person of ordinary skill in the art without any inventive step are within the protection scope of the present invention. It should be understood that the specific embodiments described herein are merely illustrative of the invention and are not intended to limit the invention.

The embodiment of the invention mainly aims to manage the use permission of the terminal and avoid the situation that the terminal is used without supervision under the condition that related supervision personnel of the terminal are absent. The method can be applied to various application scenes in which the use permission of the terminal needs to be managed, such as the situation that minors are prevented from using the smart television, the set top box, the PAD and the like without parental supervision; information leakage after the terminal is lost is avoided; the personal terminal is prevented from being used by a stranger or the like in the case where the owner is absent. The embodiment of the invention determines whether to implement or remove the access authority limit by judging whether the terminal equipment is close to the target equipment or not as a basis for judging whether the terminal equipment is in the control range of the supervisory personnel. The selected target device is usually a portable device of a terminal supervisor, such as a handheld terminal, a smart band, or other wearable device.

The embodiment disclosed by the invention relates to an access right control method of a terminal, wherein the terminal can be various intelligent terminals such as an intelligent television, a set top box, a PAD, a mobile phone, a computer, an intelligent household appliance and the like. The access rights may relate to different content for different types of terminals, such as for smart televisions, or set-top boxes, the control of the access rights may mean that certain channels or signal sources cannot be viewed, or that the television cannot be operated, i.e. cannot view any channel; for the terminals such as PAD, mobile phone, computer, etc., the control of the access right may mean that some functions or applications, such as playing of video files, opening of game applications, etc., cannot be used, or that such terminals cannot be operated, that is, the terminals do not respond to the input operation instructions; for intelligent appliances, it may also be possible to limit some or all of their functionality.

Fig. 1 is a flowchart of a method for controlling terminal access rights according to an embodiment of the present invention.

S101: and determining whether the terminal access authority control function is started or not in the first state.

When the terminal is provided with the access right control function, whether the access right control function is started or not is determined in the first state. The terminal may recognize or perceive the first state. For example, the terminal may identify its own state, such as an application execution state, an action execution state, a screen lock state and an unlock trigger state, a restart or power-on trigger state, and the like, through the processor or other modules. The terminal may display its status via the display.

And when the terminal identifies the first state, determining whether the access right control function of the terminal is in an open state. The access right control function is to limit part or all of functions in the terminal when a certain condition is satisfied. The functions that may be restricted include operation and/or use of some or all of the applications, reading and/or writing of some or all of the terminal data, reception and/or playback of some or all of the media assets or channels, and so forth.

The state of the access right control function may be manually set in advance by the user. The state of the access right control function may be an on or off state. The terminal may turn on or off the access right control function by detecting a user input. For example, the terminal may display a menu icon for turning on or off the access right control function on the touch screen. The terminal may turn on or off the access right control function by detecting a touch input to a menu icon for turning on the access right control function or a menu icon for turning off the access right control function. If the terminal is an intelligent television or a set-top box, the terminal can start or close the access authority control function by detecting the remote control selection of the menu icon for starting the access authority control function or the menu icon for closing the access authority control function. Fig. 4 is a setting interface of an exemplary access right control function according to an embodiment of the present invention, as shown in fig. 4, a user may select whether to start the access right control function according to a requirement, and store a setting result, and after selecting to start the access right control function, the interface may be transferred to the access right control function to perform setting, select or manually input a target device, and then store the target device. If the equipment information and the authority information are set, after the access authority control function is started, the terminal performs access authority control according to the previous set information. For a terminal which needs to be powered off after being used, such as an intelligent television or a set top box, if the access authority control function is started, the access authority control function does not need to be reset after being powered on every time, and the access authority control function is in an on state.

If it is determined in the first state that the terminal access right control function is off, the process proceeds to step S106.

S106: the access right of the terminal is not limited, namely the corresponding operation of the terminal is responded according to the conventional state, for example, the first state is a starting triggering state, the terminal enters the starting state when the access right control function of the terminal is determined to be closed, and the right limitation of the subsequent operation is not carried out; if the first state is an unlocking trigger state, entering a screen unlocking state when the terminal access authority control function is determined to be closed, and not performing authority limitation of subsequent operation; and if the first state is that the terminal functions are used or terminal data are read, the terminal functions are used or terminal related data are read without limitation when the terminal access right control function is determined to be closed.

If the terminal access right control function is determined to be on in the first state, step S102 is performed. S102: acquiring information of peripheral equipment of a terminal;

the terminal peripheral device information is information of other devices in the environment where the terminal is located, which are closer to the terminal. In the embodiment of the invention, whether the equipment is close to the terminal can be judged according to whether the short-distance wireless communication information connection can be established with the terminal or not or whether the equipment is searched by the terminal through a short-distance wireless communication technology as a mark. The short-range wireless communication technology includes: wi-fi, Mesh, Bluetooth, ZigBee, Hlilink, Thread, NFC, UWB and the like.

The terminal may have various methods to know its peripheral device information. The method comprises the step that the terminal can access a local area network through local area network equipment, such as a wi-fi network, to obtain information of other equipment in the local area network where the terminal is located. For example, in a home, a terminal such as a smart television, a set-top box, a PAD, etc. may be connected with a home router in a wired or wireless manner to access a home lan. Or may search for personal area networks that exist around it, such as personal area networks and their corresponding devices in their vicinity via bluetooth, wi-fi, etc. connections.

For example, in a local area network, all other device information in the same local area network may be obtained through a NetBios protocol, a specific protocol flow is as shown in fig. 2, a terminal 201 sends an NBNS Name query request to a local area network device, the local area network device 200 broadcasts the NBNS Name query request to other devices 202 and 203 in the local area network after receiving the request, and the other devices 202 and 203 return an NBNS Name registration message to send the device information to the terminal 201 through the local area network device 200, so that the terminal can obtain the other device information in the local area network.

S103: and judging whether the target equipment exists according to the acquired equipment information.

The target device is usually set as a portable device of a terminal supervisor. Whether the terminal is in the supervision range of the terminal supervisor is judged based on whether the target device and the terminal are in the same local area network or whether the target device and the terminal can be in short-distance wireless connection, so whether the target device exists in the acquired device information is judged according to the acquired device information. The above determination requires acquiring target device information, that is, portable device information of a terminal supervisor, in addition to acquiring device information near the terminal.

The target device information may be preset by a user through a menu selection interface of the terminal. For example, the terminal may display a menu interface for selecting or inputting target device information on a touch screen. The terminal may set the target device information by detecting a touch input or a key input to a menu interface that selects or inputs the target device information. If the terminal is a smart television or a set-top box, the terminal may set the target device information by detecting a remote selection or a manual input to a menu interface for selecting or inputting the target device information.

Fig. 3 is an exemplary setting interface for access right control information of a terminal in an embodiment of the present invention, where setting the access right control information of the terminal in the embodiment of the present invention mainly includes setting two types of information, which are device information and right information respectively. The embodiment of the invention can be mainly applied to judging whether the supervisor of the terminal is in the supervision range of the terminal, so the setting of the equipment information can be selected by network scanning or manually inputting the portable equipment (target equipment) information of the supervisor, the target equipment information can be set into one or more according to the requirement, the setting form can be a single information selection or manual input form, and an equipment list capable of controlling the access authority of the terminal can be set in a setting equipment information list form.

The type of control of the rights may also be selected as shown in fig. 3, such as to only view a particular channel, or only use a particular application, or to disable use. The setting of the authority information in fig. 3 is only an example, the access authority control of the terminal may also be in a default state, and selection is not required, for example, the access authority control may be turned on by default to be in a use prohibition state of the terminal, so that use of all functions is limited; or different parental devices may correspond to different types of permissions restrictions.

Whether the target device exists in the peripheral device information is judged according to the acquired terminal peripheral device information, specifically, whether the target device exists in the acquired peripheral device information may be searched, and the searching manner may be various, for example, whether the target device exists in the acquired peripheral device information may be sequentially searched according to a setting sequence of the target device, once the target device is searched, the searching operation is stopped, or whether the target device exists in the acquired peripheral device information may be parallelly searched, so as to obtain a target device existence condition in the acquired peripheral device information.

If the target device is present in the acquired peripheral device information, step S104 is performed.

S104: and releasing the access authority limit of the terminal.

And when the judgment result is that the target equipment exists in the acquired peripheral equipment information, the terminal is considered to be in the control range of the supervisor, and the access authority limit of the terminal is removed.

If the target device is not present in the acquired peripheral device information, step S105 is performed.

S105: and carrying out corresponding access right limitation on the terminal.

And if the judgment result is that the target equipment does not exist in the acquired peripheral equipment information, the terminal is not considered to be in the control range of a terminal supervisor, and the access authority limit of the terminal is started.

According to the authority management method, whether access authority limit is performed on the terminal or is removed is judged by acquiring the peripheral equipment information of the terminal and whether the target equipment is in the periphery of the terminal as a mark indicating whether the terminal is in the supervision range of a manager. The embodiment of the invention is convenient and effective to manage the access right of the terminal, does not need to repeatedly carry out manual setting, removes the access right limitation once the target equipment and the controlled terminal are accessed into the same local area network, and carries out access right control on the terminal in time once the target equipment leaves the local area network, thereby avoiding the problems that the access right limitation is removed by manually inputting a memorized password, or the authority limitation can not be removed by forgetting the password, or the authority limitation setting needs to be carried out manually again each time the equipment leaves.

The above-mentioned right management method is only a specific example of the present invention, and the acquisition of the peripheral device information of the terminal and the judgment of the target device may be performed under any conditions and environments, and is not limited to determining whether the terminal access right control function is turned on in the first state; and if the access right control function is started, acquiring peripheral equipment information of the terminal and judging the target equipment.

Fig. 8 is a flowchart of another method for controlling terminal access rights according to an embodiment of the present invention. For a smart television or a set-top box type terminal device, in order to prevent the minors from unlimited watching of television programs, certain limitation is usually performed on the use of the television by the minors, such as limited watching of a specific program or a signal source, or even no response to any operation. Therefore, it is necessary to determine whether the terminal has the access right control function when the power-on operation is detected. Fig. 8 is a flowchart of a method for performing the access right control function of such a terminal.

S800: and judging whether the startup trigger is detected.

The power-on trigger may be an input to a predetermined key, and the predetermined key may be a power key, a power-on key, or a power-on. When the startup trigger is detected, the terminal can start screen display and enter a startup state.

If the power-on trigger is detected, the process proceeds to step S801, and if the power-on trigger is not detected, the subsequent operation is not triggered.

S801: it is determined whether the access right control function is turned on.

And after the terminal detects the startup trigger, determining whether the access right control function of the terminal is in an open state. The access right control function is to limit part or all of functions in the terminal when a certain condition is satisfied. The functions that may be restricted include operation and/or use of some or all of the applications, reading and/or writing of some or all of the terminal data, reception and/or playback of some or all of the media assets or channels, and so forth.

The state of the access right control function may be manually set in advance by the user. The state of the access right control function may be an on or off state. The terminal may turn on or off the access right control function by detecting a user input. For example, the terminal may turn on or off the access right control function by detecting a remote selection of a menu icon for turning on the access right control function or a menu icon for turning off the access right control function. Fig. 4 is a setting interface of an exemplary access right control function according to an embodiment of the present invention, as shown in fig. 4, a user may select whether to start the access right control function according to a requirement, and store a setting result, and after selecting to start the access right control function, the interface may be transferred to the access right control function for setting, and select or manually key-input a target device, and then store the target device. If the equipment information and the authority information are set, after the access authority control function is started, the terminal performs access authority control according to the previous set information, the terminal does not need to be reset after being powered off every time, and the access authority control function is in an on state.

If it is determined in the first state that the terminal access right control function is off, the process proceeds to step S806.

S806: the access right of the terminal is not limited; the method comprises the steps of responding to corresponding operation of the terminal according to a conventional state, namely entering a starting state when the access authority control function of the terminal is determined to be closed after starting triggering, and not carrying out authority limitation of subsequent operation.

If the terminal access right control function is determined to be on, the step S802 is performed.

S802: and acquiring the equipment information in the local area network where the terminal is located.

There are several ways for a terminal to know the device information in the local area network where it is located. The terminal can access a local area network, such as a wireless router, through a local area network device; or searching personal local area networks of other peripheral devices to obtain information of other devices in the local area network. For example, in a home, a terminal such as a smart television or a set-top box may be connected to a home router in a wired or wireless manner to access a home lan, and obtain information of other access devices by scanning the home lan. Or a personal local area network built by other devices existing around can be searched to acquire the device information in the local area network where the terminal is located. The local area network where the terminal is located may be one or more.

S803: and judging whether the target terminal equipment is in the local area network where the terminal is located according to the acquired local area network equipment information.

The target device is usually set as a portable device of a terminal supervisor. Whether the terminal is in the supervision range of the terminal supervisor is judged based on whether the target device and the terminal are in the same local area network, so whether the target device exists in the acquired device information is judged according to the acquired device information. The above determination requires acquiring target device information, that is, portable device information of a terminal supervisor, in addition to acquiring device information near the terminal.

The target device information may be preset by a user through a menu selection interface of the terminal. The terminal may set the target device information by detecting a remote control selection or a manual key input to a menu interface for selecting or inputting the target device information.

Fig. 3 is an exemplary setting interface for controlling access rights of a terminal in an embodiment of the present invention, where setting rights control information for the terminal in the embodiment of the present invention mainly includes setting two types of information, which are device information and rights information. The embodiment of the invention can be mainly applied to judging whether the supervisor of the terminal is in the supervision range of the terminal, so the setting of the equipment information can be selected by network scanning or manually inputting the portable equipment (target equipment) information of the supervisor, one or more target equipment information can be set according to the requirement, the setting form can be a single information selection or manual input form, and an equipment list capable of controlling the access authority of the terminal can be set in a setting equipment information list form.

Whether the target device exists in the acquired local area network device information is judged according to the acquired local area network device information, specifically, whether the target device exists in the acquired local area network device information may be searched, the searching manner may be various, for example, whether the target device exists in the acquired local area network device information may be sequentially searched according to a setting sequence of the target device, once the target device is searched, the searching operation is stopped, or whether the target device exists in the acquired local area network device information may be parallelly searched, so as to obtain a target device existence condition in the acquired local area network device information.

If the target device exists in the acquired local area network device information, step S804 is performed.

S804: and releasing the access authority limit of the terminal.

And when the judgment result is that the target equipment exists in the acquired local area network equipment information, the terminal is considered to be in the control range of the supervisor, and the access authority limit of the terminal is removed.

If the target device does not exist in the acquired local area network device information, step S805 is performed.

S805: and limiting the access authority of the terminal.

And if the judgment result is that the target equipment does not exist in the acquired local area network equipment information, the terminal is not considered to be in the control range of a terminal supervisor, and the access authority limit of the terminal is started.

According to the authority management method, whether the target device is arranged around the terminal or not is used as a mark for judging whether the terminal is in the supervision range of a manager or not, so that whether the access authority limit is carried out on the terminal or not or whether the access authority limit is removed is judged. The embodiment of the invention is convenient and effective to manage the access right of the terminal, does not need to repeatedly carry out manual setting, carries out network search when the terminal is started, and removes the access right limitation once the target device and the controlled terminal are in the same local area network, thereby avoiding the problems that the access right limitation is removed by manually inputting the memorized password or the password is forgotten in the prior art.

Fig. 9 is a flowchart of another method for controlling terminal access rights according to an embodiment of the present invention.

S900: starting an access authority control function;

the state of the access right control function may be manually set by the user. The state of the access right control function may be an on or off state. The terminal may turn on or off the access right control function by detecting a user input. For example, the terminal may display a menu icon for turning on or off the access right control function on the touch screen. The terminal may turn on or off the access right control function by detecting a touch input to a menu icon for turning on the access right control function or a menu icon for turning off the access right control function. If the terminal is an intelligent television or a set-top box, the terminal can start or close the access authority control function by detecting the remote control selection of the menu icon for starting the access authority control function or the menu icon for closing the access authority control function. Fig. 4 is a setting interface of an exemplary access right control function according to an embodiment of the present invention, as shown in fig. 4, a user may select whether to start the access right control function according to a requirement, and store a setting result, and after selecting to start the access right control function, the interface may be transferred to the access right control function to perform setting, select or manually input a target device, and then store the target device. If the equipment information and the authority information are set, after the access authority control function is started, the terminal performs access authority control according to the previous set information. For a terminal which needs to be powered off after being used, such as an intelligent television or a set top box, if the access authority control function is started, the access authority control function does not need to be reset after being powered on every time, and the access authority control function is in an on state.

S901: and triggering to acquire the peripheral equipment information of the terminal when a specific condition is met.

The specific condition may be a specific action, that is, triggering the terminal to acquire the peripheral device information each time the specific action is detected, or a set trigger period, that is, acquiring the peripheral device information every certain time.

S902: and acquiring information of peripheral equipment of the terminal.

The terminal peripheral device information is information of other devices in the environment where the terminal is located, which are closer to the terminal. In the embodiment of the invention, whether the equipment is close to the terminal can be judged according to whether the short-distance wireless communication information connection can be established with the terminal or not or whether the equipment is searched by the terminal through a short-distance wireless communication technology as a mark. The short-range wireless communication technology includes: wi-fi, Mesh, Bluetooth, ZigBee, Hlilink, Thread, NFC, UWB and the like

The terminal may have various methods to know its peripheral device information. The method comprises the steps that the terminal can access the local area network through the local area network device to obtain the information of other devices in the local area network. For example, in a home, the terminal may be connected to a home router in a wired or wireless manner to access a home lan. Or may itself constitute a personal area network, or search for personal area networks of other devices.

S903: and judging whether the target terminal equipment exists according to the acquired peripheral equipment information.

If the target device is present in the acquired peripheral device information, step S904 is performed.

S904: and releasing the access authority limit of the terminal.

If the target device does not exist in the acquired peripheral device information, step S905 is performed.

S905: and limiting the access authority of the terminal.

According to the authority management method, whether the target device is arranged around the terminal or not is used as a mark for judging whether the terminal is in the supervision range of a manager or not, so that whether the access authority limit is carried out on the terminal or not or whether the access authority limit is removed is judged. The embodiment of the invention is convenient and effective to manage the access right of the terminal, does not need to repeatedly carry out manual setting, removes the access right limitation once the target equipment and the controlled terminal are accessed into the same local area network, and carries out access right control on the terminal in time once the target equipment leaves the local area network, thereby avoiding the problems that the access right limitation is removed by manually inputting a memorized password, or the authority limitation can not be removed by forgetting the password, or the authority limitation setting needs to be carried out manually again each time the equipment leaves.

Fig. 5 is a schematic view of an application scenario according to an embodiment of the present invention, where a terminal 501 is a terminal with an access right control function, the terminal may access a local area network through a local area network device 500, and terminals (the terminal 501, a device a, a device B, and a device C) may also search and access through a personal local area network, or search and connect through a short-distance wireless communication technology. The terminal 501 may be any type of intelligent terminal, such as an intelligent television, a set-top box, a PAD, a mobile phone, a computer, an intelligent household appliance, and the like, and the device a, the device B, and the device C are devices existing around the terminal 501. Fig. 5 is only an example of an application scenario according to an embodiment of the present invention, where there are a plurality of local area network access devices in an environment where the terminal is located, and the number of the peripheral devices may be any number according to an actual situation.

When the preset condition is satisfied, the terminal 501 first determines whether the access right control function is in an on state. The preset condition may be any terminal access instruction or terminal setting instruction, such as a power-on trigger, a screen unlocking trigger, or a received channel switching instruction, or an application access instruction, or a data reading instruction, a data writing instruction, and the like. The preset condition may also be a periodic triggering of the access right control function. The state of the access right control function may be manually set in advance by the user. The access permission judgment control process may be triggered each time a preset condition is met, such as triggering at each startup, periodically triggering, and the like. After determining that the access right control function is in an open state, the terminal 501 obtains information of peripheral equipment of the access right control function; the terminal 501 may acquire the peripheral device information in various manners, and the terminal 501 may acquire the information of other access devices in the lan through the lan device 500, may search connectable devices through a short-range wireless communication technology to acquire the peripheral device information, may search a personal lan existing around to acquire the peripheral device information, or may simultaneously integrate one or more acquisition manners to comprehensively acquire the peripheral device information. After acquiring the peripheral device information (device a, device B, and device C), the terminal 501 determines whether the target device is in the acquired device information, where the determination may be performed by comparing the acquired device information with the stored target device information, or by sequentially searching whether the target device information exists in the acquired device information. As shown in fig. 5, if it is found after the comparison that the device C exists in the access right control device information (target device C) stored in the terminal, it is considered that the administrator of the target device C is also in the periphery of the terminal, that is, the terminal is in the control range of the administrator, the access right limitation on the terminal is removed, if it is determined that the obtained device information does not include the target device, it is considered that the terminal is not in the control range of the administrator, and then the whole or part of operations on the terminal are limited according to the setting condition of the access right control function.

In addition to the above, the terminal 501 may perform access right control of the terminal in a manner similar to that of fig. 1, 8, and 9.

In the above embodiment, whether the target device is located around the terminal is used as a flag indicating whether the terminal is within the supervision range of the manager, so as to determine whether to perform access right limitation on the terminal or to remove the access right limitation. The embodiment of the invention is convenient and effective to manage the access right of the terminal, does not need to repeatedly carry out manual setting, removes the access right limitation once the target equipment and the controlled terminal are accessed into the same local area network, and carries out access right control on the terminal in time once the target equipment leaves the local area network, thereby avoiding the problems that the access right limitation is removed by manually inputting a memorized password, or the authority limitation can not be removed by forgetting the password, or the authority limitation setting needs to be carried out manually again each time the equipment leaves.

Fig. 6 is a structural diagram of a terminal having an access right control function according to an embodiment of the present invention, and it can be seen that the terminal 600 includes a determination unit 601, a storage unit 602, a communication unit 603, a judgment unit 604, and a control unit 605.

A determining unit 601 for determining whether the access right control function of the terminal 600 is turned on in a first state;

the determining unit 601 may recognize or perceive the first state. The first state may be an application execution state, an action execution state, a screen lock state and unlock trigger state, a restart or power-on trigger state, and the like. When the determination unit 601 recognizes the first state, it is determined whether the access authority control function of the terminal 600 is in an on state. The manner of determining whether the access right control function of the terminal 600 is in an on state may be to acquire setting information of the access right control function of the terminal 600 from the storage unit 602. The setting information may be stored in the storage unit 602, or may be stored in other locations in a distributed manner, such as in a network.

The determination unit 601 does not perform access right restriction on the terminal 600 by the control unit 605 if it is determined that the access right control function of the terminal 600 is off in the first state. The determination unit 601 informs the communication unit 603 if it is determined in the first state that the access right control function of the terminal 600 is on.

A communication unit 603 configured to acquire information on peripheral devices of the terminal 600; the peripheral device information of the terminal 600 is other device information in the environment where the terminal 600 is located, which is close to the terminal 600. The communication unit 603 acquires peripheral device information by acquiring, searching, or connecting peripheral devices by short-range wireless communication technology.

The communication unit 603 may acquire the peripheral device information in multiple manners, and the communication unit 603 may acquire the information of other access devices in the lan through the lan device, may search for connectable devices through a short-range wireless communication technology to acquire the peripheral device information, may search for a personal lan in the periphery to acquire the peripheral device information, or may simultaneously integrate one or more acquisition manners to comprehensively acquire the peripheral device information.

A determination unit 604 for determining whether or not a target device exists therein based on the peripheral device information acquired from the communication unit 603; the determining unit 604 determines whether the target device exists in the peripheral device information according to the obtained terminal peripheral device information, specifically, whether the target device exists in the obtained peripheral device information may be found, and the finding manner may be multiple, for example, whether the target device exists in the obtained peripheral device information may be sequentially found according to a setting sequence of the target device, once the target device is found, the finding operation is stopped, or whether the target device exists in the obtained peripheral device information may be found in parallel, so as to obtain a target device existence condition in the obtained peripheral device information. As for the target device information, the judging unit 604 may be known from the storage unit 602. The target device information may be stored in the storage unit 602, or may be stored in other locations in a distributed manner, such as in a network.

The control unit 605 releases the access authority restriction of the terminal 600 if the determination unit 604 determines that the target device is present in the acquired peripheral device information.

If the determining unit 604 determines that the target device does not exist in the acquired peripheral device information, the control unit 605 performs corresponding access right restriction on the terminal.

Fig. 6 is only an exemplary case of the embodiment of the present invention, and the specific unit structure and the interaction between units, and the information that needs to be acquired by the units may be increased, decreased, or changed according to the specific case.

Fig. 10 is a block diagram of another terminal with an access right control function according to an embodiment of the present invention, and it can be seen that the terminal 1000 includes a power-on detection unit 1001, a determination unit 1002, a storage unit 1003, a communication unit 1005, a determination unit 1004, and a control unit 1006.

The power-on detection unit 1001 determines whether a power-on trigger is detected.

A determining unit 1002, configured to determine whether an access right control function of the terminal 1000 is started when the power-on detection unit 1001 detects a power-on trigger;

the determining unit 1002 determines whether the access right control function of the terminal 1000 is in an on state when the power-on trigger is detected by the power-on detecting unit 1001. The manner of determining whether the access authority control function of the terminal 1000 is in an on state may be that setting information of the access authority control function of the terminal 1000 is known from the storage unit 1003. The setting information may be stored in the storage unit 1003, or may be stored in other locations in a distributed manner, such as in a network.

Determination unit 1002 if it is determined that the terminal 1000 access right control function is off, control unit 1006 does not perform access right restriction on terminal 1000. The determination unit 1002 informs the communication unit 1005 if it determines that the access authority control function of the terminal 1000 is on.

A communication unit 1005 configured to acquire device information in a local area network in which the terminal 1000 is located;

the communication unit 1005 may have various methods to know the device information in the local area network where it is located. The communication unit 1005 can access a local area network, such as a wireless router, through a local area network device; or searching personal local area networks of other peripheral devices to obtain information of other devices in the local area network. Or a personal local area network built by other devices existing around can be searched to acquire the device information in the local area network where the terminal is located. Terminal 1000 can be located in one or more local area networks.

A judging unit 1004, configured to judge whether a target terminal device is in a local area network in which the terminal 1000 is located according to the acquired local area network device information; a judging unit 1004 for judging whether or not a target device exists therein based on the local area network access device information acquired from the communication unit 1005; the determining unit 1004 determines whether the target device exists in the local area network access device information according to the obtained local area network access device information, specifically, whether the target device exists in the obtained local area network access device information may be searched. As for the target device information, the judgment unit 1004 may be known from the storage unit 1003. The target device information may be stored in the storage unit 1003, or may be stored in other locations in a distributed manner, such as in a network.

If the judgment unit 1004 judges that the target device exists in the acquired lan access device information, the control unit 1006 releases the access right restriction of the terminal 1000.

If the judgment result of the judgment unit 1004 is that the target device does not exist in the acquired local area network access device information, the control unit 1006 performs corresponding access right restriction on the terminal 1000.

Fig. 10 is only an exemplary case of the embodiment of the present invention, and the specific unit structure and the interaction between units, and the information that needs to be acquired by a unit may be increased, decreased, or changed according to the specific case.

Fig. 11 is a structural diagram of another terminal with an access right control function according to an embodiment of the present invention, and it can be seen that the terminal 1100 includes a setting unit 1101, a triggering unit 1102, a communication unit 1103, a storage unit 1104, a determination unit 1105, and a control unit 1106.

A setting unit 1101 for starting an access authority control function; the user can set the access authority control function through the setting unit 1101. The state of the access right control function may be an on or off state. In addition to setting the state of the access authority control function, the user can set device information and authority information through the setting unit 1101.

When the setting unit 1101 turns on the access right control function, the triggering unit 1102 is configured to trigger the communication unit 1103 to acquire terminal peripheral device information when a specific condition is satisfied; the specific condition may be a specific action that triggers the terminal 1100 to acquire the peripheral information thereof each time the specific action is detected, or a set trigger period that triggers the terminal 1100 to acquire the peripheral information every certain time.

A communication unit 1103 for acquiring peripheral device information of the terminal 1100;

information on peripheral devices of terminal 1100, that is, information on other devices in the environment where terminal 1100 is located and closer to terminal 1100. The communication unit 1103 acquires peripheral device information by acquiring, searching, or connecting peripheral devices by short-range wireless communication technology.

The communication unit 1103 may acquire the peripheral device information in multiple manners, and the communication unit 1103 may acquire the information of other access devices in the lan through the lan device, may search for connectable devices through a short-range wireless communication technology to acquire the peripheral device information, may search for a personal lan in the periphery to acquire the peripheral device information, or may simultaneously integrate one or more acquisition manners to comprehensively acquire the peripheral device information.

A determination unit 1105 configured to determine whether or not a target device exists therein from the peripheral device information acquired from the communication unit 1103; the determining unit 1105 determines whether the target device exists in the peripheral device information according to the obtained terminal peripheral device information, specifically, it may be to search whether there is a target device in the obtained peripheral device information, where the search may be performed in multiple ways, for example, it may be performed according to a set sequence of the target device, and the search operation is stopped once the target device is found, or it may be performed in parallel to search whether there is a target device in the obtained peripheral device information, so as to obtain a target device existence condition in the obtained peripheral device information. As for the target device information, the determination unit 1105 may be known from the storage unit 1104. The target device information may be stored in the storage unit 1104, or may be stored in other locations in a distributed manner, such as in a network.

The control unit 1106 releases the access authority restriction of the terminal 1100 if the determination unit 1105 determines that the target device is present in the acquired peripheral device information.

If the determining unit 1105 determines that the target device does not exist in the acquired peripheral device information, the control unit 1106 performs corresponding access right restriction on the terminal 1100.

Fig. 11 is only an exemplary case of the embodiment of the present invention, and the specific unit structure and the interaction between units, and the information that needs to be acquired by a unit may be increased, decreased, or changed according to the specific case.

Fig. 7 is a schematic structural diagram of another terminal according to an embodiment of the present invention. The terminal can be of various types, such as various intelligent terminals of an intelligent television, a set top box, a PAD, a mobile phone, a computer, an intelligent household appliance and the like. The terminal 700 includes a processor 701, a random access memory RAM707, a read only memory ROM708, a memory 702, a power supply 703, a display unit 704, a communication unit 706, and an input unit 705. The communication unit 706 may include a wifi module 7061 and/or a short-range communication module 7062, among others.

Among them, the random access memory RAM707 is used to store signals or data received from the outside of the terminal 700 or used as a memory space for operations performed by the terminal 700; a read only memory ROM708 for storing a control program for controlling the terminal 700. The processor 701, the random access memory RAM707, and the read only memory ROM708 may be connected to each other through an internal bus.

The communication unit 706 may include at least one of a wifi module 7061 and a short-range communication module 7062.

The wifi module 7061 may connect to a wifi network under the control of the processor 701 where a wifi access device is installed. wifi module 7061 supports the Institute for Electrical and Electronics Engineers (IEEE) WLAN standard IEEE802.11 x. The short-range communication module 7062 may perform short-range wireless communication between the terminal 700 and its peripheral devices under the control of the processor 701. The short-range communication may be bluetooth compliant, infrared data association (IrDA), WiFi, NFC, etc.

A display unit 704 is used to display a user interaction interface, and the display unit 704 may be used to display information input by a user through an input unit 705 or information provided to the user and various menu interfaces of the terminal 700. The Display unit 704 may include a Display panel, and optionally, the Display panel may be configured in the form of an LCD (Liquid Crystal Display) or an OLED (Organic Light-Emitting Diode). In a specific implementation, the touch panel may cover the display panel to form a touch display screen, and the processor 701 provides a corresponding visual output on the touch display screen according to the type of the touch event. The display unit 704 may be a common display screen, and the processor 701 may provide a corresponding visual output on the display screen according to an instruction input from the user through the input unit 705.

The input unit 705 may be used to receive input numeric or character information, receive user switching application interface operations, and generate switching signals, and generate signal inputs related to user settings and function control of the terminal. Specifically, in the embodiment of the present invention, the input unit 705 may include a touch panel, also referred to as a touch screen, which may collect touch operations of a user on or near the touch panel (for example, the user may operate on the touch panel by using any suitable object or accessory such as a finger, a stylus pen, etc.), and the touch panel may be implemented by using various types such as a resistive type, a capacitive type, an infrared ray, a surface acoustic wave, etc. In addition to the touch panel, the input unit 705 may include other input devices including, but not limited to, one or more of a physical keyboard, function keys (such as volume control keys, switch keys, etc.), a trackball, a mouse, a joystick, a remote control, and the like.

The power supply 703 may supply power to the entire terminal. Different types of terminals having different power supply types including various types of lithium batteries, or the power supply 703 may be a device that supplies power received from the outside to the terminal 700 via a cable; the power supply 703 may also supply power to one or more batteries (not shown) mounted in the terminal 700 under the control of the processor 701; the power supply 703 may also supply power wirelessly received from an external power source to the terminal 700 through a wireless charging technique.

Among other things, the memory 702 can store input/output signals or data of the terminal 700 under the control of the processor 701. The memory 702 may store control programs and applications for controlling the terminal 700 or the processor 701.

The term "memory" may include the memory 702, the RAM707 and the ROM708 of the processor 701, or a memory card (not shown) installed in the terminal 700, for example, a Secure Digital (SD) card or a memory stick. The memory may include a nonvolatile memory, a volatile memory, a hard disk (HDD), or a Solid State Disk (SSD).

The processor 701 is a control center of the terminal 700, connects and controls various parts of the terminal using various interfaces and lines, and performs various functions of the intelligent terminal and processes data by operating or executing data stored in the memory. Optionally, the processor 701 includes one or more processing units.

A program stored in the memory, upon receiving instructions from the processor 701, may be used to perform the methods illustrated in fig. 1, 8, and 9.

According to the embodiment of the invention, whether the target equipment is arranged at the periphery of the terminal is used as a mark for judging whether the terminal is in the supervision range of a manager or not so as to judge whether to carry out access authority limitation on the terminal or remove the access authority limitation. The embodiment of the invention is convenient and effective to manage the access right of the terminal, does not need to repeatedly carry out manual setting, removes the access right limitation once the target equipment and the controlled terminal are accessed into the same local area network, and carries out access right control on the terminal in time once the target equipment leaves the local area network, thereby avoiding the problems that the access right limitation is removed by manually inputting a memorized password, or the authority limitation can not be removed by forgetting the password, or the authority limitation setting needs to be carried out manually again each time the equipment leaves.

Finally, it should be noted that: the above embodiments are only used to illustrate the technical solution of the present invention, and not to limit the same; while the invention has been described in detail and with reference to the foregoing embodiments, it will be understood by those skilled in the art that: the technical solutions described in the foregoing embodiments may still be modified, or some or all of the technical features may be equivalently replaced; and the modifications or the substitutions do not make the essence of the corresponding technical solutions depart from the scope of the technical solutions of the embodiments of the present invention.

Claims

A method for controlling access rights of a terminal, the method comprising:

acquiring equipment information around a terminal;

judging whether target equipment exists according to the acquired equipment information;

and if the target equipment exists in the acquired equipment information, releasing the access authority limit of the terminal.
The method of claim 1, wherein determining whether a target device is present therein based on the acquired device information comprises:

and storing a target device information list comprising one or more target devices in the terminal, and judging whether the target devices exist in the acquired device information according to the acquired device information and the target device information list stored in the terminal.
The method of claim 1 or 2, wherein the method further comprises:

and if the target equipment does not exist in the acquired equipment information, limiting the access authority of the terminal.
The method of claim 1, wherein before the acquiring device information on the periphery of the terminal, the method further comprises: and determining whether an access authority control function is started in a first state of the terminal, wherein the first state is a starting trigger.
The method of claim 1, wherein before the acquiring device information on the periphery of the terminal, the method further comprises: and determining whether an access right control function is started in a first state of the terminal, wherein the first state is a screen unlocking trigger.
A terminal, characterized in that the terminal comprises:

a determination communication unit for determining device information for acquiring the periphery of the terminal;

a determination unit configured to determine whether a target device exists therein based on the device information acquired by the communication unit; and the control unit is used for determining whether to release the access right limit of the terminal according to the judgment result of the judgment unit.
The terminal of claim 6, wherein the terminal further comprises:

a storage unit for storing target device information including one or more target devices; the determination unit determines whether or not a target device exists therein based on the device information acquired by the communication unit and a target device information list stored in the storage unit.
The terminal of claim 6, wherein the terminal further comprises:

the terminal comprises a determining unit, a judging unit and a judging unit, wherein the determining unit is used for determining whether an access authority control function is in an opening state or not in a first state of the terminal; the communication unit is used for acquiring equipment information around the terminal when the access right control function is in an open state; the first state is a power-on trigger state.
The terminal of claim 6, wherein the terminal is a smart television or a set-top box.
A terminal, characterized in that the terminal comprises:

a processor and a readable storage medium, the readable storage medium storing a program, the processor being configured to execute the program and, when executing the program, to perform the steps of: acquiring equipment information around a terminal; judging according to the acquired equipment information

Whether a target device is present; and determining whether to release the access right limit of the terminal according to the judgment result.