CN116112929A

CN116112929A - Access right control method of terminal

Info

Publication number: CN116112929A
Application number: CN202310103485.6A
Authority: CN
Inventors: 陈泽天
Original assignee: Huawei Technologies Co Ltd
Current assignee: Huawei Technologies Co Ltd
Priority date: 2018-07-13
Filing date: 2018-07-13
Publication date: 2023-05-12
Also published as: CN112335275A; WO2020010605A1; CN112335275B

Abstract

The embodiment of the invention provides a method for controlling access rights of a terminal, which comprises the following steps: acquiring equipment information in a local area network where a terminal is located; judging whether the target equipment is in the local area network according to the acquired equipment information; and determining whether to release the access right limitation of the terminal according to the judgment result. The invention can provide a convenient and flexible access right control method for the prior terminal access without repeated manual input setting of operators.

Description

Access right control method of terminal

The present application is a divisional application, the filing number of the original application is 201880095183.6, the date of the original application is 2018, month 07, 13, and the entire contents of the original application are incorporated herein by reference.

Technical Field

The invention relates to the technical field of communication, in particular to a method for controlling access rights of a terminal.

Background

With the increase of household terminal devices, such as smart televisions, set top boxes, PAD, mobile phones and the like, the use of terminals in daily life study of people is increasing. Various terminals are also becoming increasingly attractive to minors, and the unrestricted, unrestricted use of the terminals can also negatively impact the minors.

In order to avoid that minors watch and use terminal devices such as televisions, set top boxes, mobile phones, PADs and the like without restriction, a plurality of terminal device manufacturers usually produce terminals with child lock functions, and the terminal devices do not respond to operation after the child lock is opened or only provide limited access rights.

The existing child lock locking and unlocking modes mainly comprise two modes, namely: 1. triggering the child lock through a specific key combination, and manually operating again when releasing; 2. and installing management software on the terminal, and unlocking by inputting a password.

However, whichever child lock method is adopted, the unlocking operation needs to be performed by a manual input of the user. For example: after the terminal is locked, when a user needs to use the locked function, firstly, a password is input to perform unlocking operation once, and unlocking processing is performed on the locked function. For example, for an intelligent television or a set top box, the locked channel or signal source needs to be unlocked through a remote controller, then the program of the channel or signal source can be watched normally, after the user watches the program, the current unlocked channel or signal source also needs to be subjected to password input operation again through the remote controller or a man-machine interaction interface, and then the current channel or signal source can be locked again, so that the aim of preventing children from watching the program of the channel or signal source is achieved. Therefore, no matter the user locks or unlocks the terminal function, the user needs to input a password once by using a remote controller or a man-machine interaction interface, the operation is complex, and the use is inconvenient.

Disclosure of Invention

The embodiment of the invention provides a method, a system and a device for controlling access rights of a terminal.

In one aspect of the embodiment of the present invention, there is provided a method for controlling access rights of a terminal, the method including: acquiring equipment information around a terminal; judging whether a target device exists in the device information according to the acquired device information; and if the target equipment exists in the acquired equipment information, releasing the access permission limit of the terminal.

Optionally, determining whether the target device exists according to the acquired device information includes: and storing a target device information list comprising one or more target devices in the terminal, and judging whether the target device exists in the acquired device information according to the acquired device information and the target device information list stored in the terminal.

Optionally, the terminal peripheral device is a device to which the terminal can be connected through a short-distance wireless communication technology.

Optionally, the acquiring the peripheral equipment information of the terminal is acquiring the peripheral equipment information through a short-distance communication technology.

Optionally, the acquiring the peripheral equipment information of the terminal is acquiring the peripheral equipment information through one or more short-distance communication technologies.

Optionally, before acquiring the device information of the periphery of the terminal, the method further includes: determining whether the access right control function is in an on state in a first state; if the terminal is started, acquiring equipment information around the terminal;

optionally, the first state is to perform a power-on trigger.

Optionally, the first state is to perform screen unlocking triggering.

In another aspect of the embodiment of the present invention, there is provided a terminal including: a determining communication unit for determining equipment information for acquiring the periphery of the terminal; a judging unit configured to judge whether a target device exists therein according to the device information acquired by the communication unit; and the control unit is used for deciding whether to release the access permission limit of the terminal according to the judging result of the judging unit.

Optionally, the terminal further includes: a storage unit configured to store target device information including one or more target devices; the judging unit judges whether or not a target device exists therein based on the device information acquired by the communication unit and the target device information list stored in the storage unit.

Optionally, the terminal is a smart television or a set top box.

Optionally, the terminal further includes a determining unit, configured to determine, in a first state of the terminal, whether the access right control function is in an on state.

Optionally, the communication unit is configured to obtain device information around the terminal when the determining unit determines that the access right control function is turned on.

In another aspect of the embodiment of the present invention, there is provided a terminal including: a processor and a readable storage medium storing a program, the processor being configured to execute the program, when executed, to perform the steps of: acquiring equipment information around a terminal; judging whether a target device exists in the device information according to the acquired device information; and determining whether to release the access right limitation of the terminal according to the judgment result.

In another aspect of the embodiment of the present invention, there is provided a method for controlling access rights of a terminal, the method including: acquiring equipment information in a local area network where a terminal is located; judging whether the target equipment is in the local area network according to the acquired equipment information; and determining whether to release the access right limitation of the terminal according to the judgment result.

Optionally, the determining whether the target device is in the local area network according to the acquired device information includes: and storing a target device information list comprising one or more target devices in the terminal, and judging whether the target device is in the local area network according to whether the acquired device information existing in the local area network comprises the target device stored in the terminal.

Optionally, the target device information is preset by a user and stored in the terminal.

Optionally, the determining whether to release the access permission restriction of the terminal according to the determination result includes: and if one or more of the target devices exist in the local area network, releasing the access permission limit of the terminal.

Optionally, the determining whether to release the access permission restriction of the terminal according to the determination result includes: and if the target equipment does not exist in the local area network, limiting the access authority of the terminal.

Optionally, the method further includes, before acquiring the device information around the terminal, determining whether the terminal access right control function is turned on in the first state.

Optionally, the first state is a power-on trigger state.

Optionally, the first state is an unlock trigger state.

In another aspect of the embodiment of the present invention, there is provided a terminal including: the communication unit is used for determining and acquiring equipment information in the local area network where the terminal is located; a judging unit configured to judge whether a target device is in the local area network according to the device information acquired by the communication unit; and the control unit is used for deciding whether to release the access permission limit of the terminal according to the judging result of the judging unit.

Optionally, the terminal further includes a determining unit, configured to determine, in the first state, whether the access right control function is in an on state.

Optionally, the communication unit is configured to obtain device information in a local area network where the terminal is located when the determining unit determines that the access right control function is in an on state.

Optionally, the terminal further includes: and the setting unit is used for setting the access right control function.

Optionally, the setting unit is configured to set whether to start the access right control function.

Optionally, the setting unit is configured to set the target device information.

Optionally, the setting unit is configured to set a type of access right control.

Optionally, the setting unit is configured to set target device information; the storage unit is used for storing target equipment information set by a user through the setting unit.

A storage unit that stores setting information of the setting unit; a judging unit judges whether the target device is in the local area network according to whether the target device information stored in the storage unit is included in the acquired device information existing in the local area network.

Optionally, the terminal is a smart television, or a set top box, or a handheld terminal, or a PAD, or a computer.

In another aspect of the embodiment of the present invention, there is provided a terminal including: a processor and a readable storage medium storing a program, the processor being configured to execute the program, when executed, to perform the steps of: acquiring information of other devices in a local area network where the terminal is located; judging whether the target equipment is in the local area network according to the acquired equipment information; and determining whether to release the access right limitation of the terminal according to the judgment result.

In another aspect of the embodiment of the present invention, there is provided a method for controlling access rights of a terminal, the method including: triggering and acquiring the terminal peripheral equipment information when a specific condition is met; acquiring equipment information around a terminal; judging whether a target device exists in the device information according to the acquired device information; and if the target equipment exists in the acquired equipment information, releasing the access permission limit of the terminal.

Optionally, the method further comprises starting the terminal access right control function.

Optionally, the specific condition is a periodic trigger.

Optionally, the specific condition is detection of a specific operation instruction.

In another aspect of the embodiment of the present invention, there is provided a terminal including: the triggering unit is used for triggering and acquiring the terminal peripheral equipment information when the specific condition is met; a communication unit, configured to obtain device information around the terminal; a judging unit configured to judge whether a target device exists therein according to the acquired device information; and the control unit is used for releasing the access authority limit of the terminal when the target equipment exists in the acquired equipment information.

Optionally, the terminal further includes a setting unit, configured to start the terminal access right control function.

Optionally, the terminal is a smart television or a set top box.

In another aspect of the embodiment of the present invention, there is provided a terminal including: a processor and a readable storage medium storing a program, the processor being configured to execute the program, when executed, to perform the steps of: starting the terminal access right control function; triggering and acquiring the terminal peripheral equipment information when a specific condition is met; acquiring equipment information around a terminal; judging whether a target device exists in the device information according to the acquired device information; and if the target equipment exists in the acquired equipment information, releasing the access permission limit of the terminal.

In the embodiment of the invention, whether the target equipment is around the terminal is used as a mark of whether the terminal is in the supervision range of the manager or not so as to judge whether the access right limitation is carried out on the terminal or release the access right limitation. The embodiment of the invention has the advantages that the access authority management of the terminal is convenient and effective, the manual setting is not needed repeatedly, the access authority limit is released once the target equipment and the controlled terminal are accessed into the same local area network, and the access authority control is carried out on the terminal in time once the target equipment leaves the local area network, so that the problems that the authority limit is released by manually inputting the memory password or the authority limit is not released by forgetting the password or the authority limit setting is carried out by manually inputting the password again when the target equipment leaves each time in the prior art are avoided.

The embodiment of the invention not only can be used for limiting the television watching of minors or using the terminal equipment in the home, but also can be used for controlling the access authority of the terminal owner to the terminal of the minors under any conditions, namely judging whether the terminal owner is in the home or is in the vicinity of the terminal according to the position of the target equipment, such as the mobile terminal carried by the terminal owner, so as to intelligently open or release the access authority limit of the terminal.

Drawings

In order to more clearly describe the technical solutions in the embodiments or the background of the present application, the following description will describe the drawings that are required to be used in the embodiments or the background of the present application.

Fig. 1: the embodiment of the invention discloses a method flow chart for controlling terminal access rights;

fig. 2: the embodiment of the invention discloses a signaling flow chart for acquiring equipment information in a local area network;

fig. 3: the embodiment of the invention provides an access right control information setting interface;

fig. 4: the embodiment of the invention provides an access right control function setting interface;

fig. 5: an application scene graph of the embodiment of the invention;

fig. 6: the embodiment of the invention provides a terminal structure schematic diagram;

Fig. 7: still another schematic terminal structure according to an embodiment of the present invention.

Fig. 8: another method flow chart for controlling terminal access authority in the embodiment of the invention;

fig. 9: another method flow chart for controlling terminal access authority in the embodiment of the invention;

fig. 10: a further schematic terminal structure according to an embodiment of the present invention;

fig. 11: still another schematic terminal structure according to an embodiment of the present invention.

Detailed Description

The following description of the embodiments of the present invention will be made clearly and fully with reference to the accompanying drawings, in which it is evident that the embodiments described are some, but not all embodiments of the invention. It should be noted that, based on the embodiments of the present invention, all other embodiments obtained by a person having ordinary skill in the art without creative efforts fall within the protection scope of the present invention. It should be understood that the specific embodiments described herein are for purposes of illustration only and are not intended to limit the scope of the invention.

The embodiment of the invention mainly aims to manage the use authority of the terminal, and avoid the situation that the terminal is used under the condition of no supervision under the condition that the relevant supervision personnel of the terminal are not present. The method can be applied to various application scenes in which the use authority of the terminal is required to be managed, such as preventing the non-control use of smart televisions, set top boxes, PADs and the like by minors under the condition of no parental monitoring; information leakage after the terminal is lost is avoided; the personal terminal is prevented from being used by strangers and the like under the condition that the owner is not present. The embodiment of the invention determines whether to implement or release the access right limitation by judging whether the terminal equipment is near the target equipment or not as a basis for judging whether the terminal equipment is in the control range of the monitoring personnel. The target device selected is typically a portable device of a terminal supervisor, such as a handheld terminal, smart bracelet, or other wearable device.

The embodiment of the invention relates to a method for controlling access rights of a terminal, wherein the terminal can be various intelligent terminals such as an intelligent television, a set top box, a PAD, a mobile phone, a computer, an intelligent household appliance and the like. Access rights may relate to different content for different types of terminals, such as for a smart tv, or a set-top box, control of access rights may refer to inability to watch certain channels or signal sources, or to inability to operate a tv, i.e. inability to watch any channels; for the terminals such as PAD, mobile phones, computers and the like, the control of access rights can mean that certain functions or applications such as playing of video files, starting of game applications and the like cannot be used, or that the terminals cannot be operated, namely, the terminals do not respond to the input operation instructions; for smart appliances, it may also be possible to limit some or all of their functionality.

Fig. 1 is a flowchart of a method for controlling access rights of a terminal according to an embodiment of the present invention.

S101: and in the first state, determining whether the terminal access right control function is started.

When the access right control function is set in the terminal, whether the access right control function is started or not is determined in the first state. The terminal may recognize or perceive the first state. For example, the terminal may identify its own state, such as an application execution state, an action execution state, a screen lock state and unlock trigger state, a restart or power on trigger state, etc., through a processor or other module. The terminal may display its status via a display.

When the terminal recognizes the first state, it is determined whether an access right control function of the terminal is in an on state. The access right control function is to limit some or all functions in the terminal in case that a certain condition is satisfied. The functions that may be limited include operation and/or use of some or all applications, reading and/or writing of some or all terminal data, reception and/or playing of some or all media assets or channels, and so forth.

The state of the access right control function may be manually set in advance by the user. The state of the access rights control function may be an on or off state. The terminal may turn on or off the access rights control function by detecting a user input. For example, the terminal may display a menu icon for turning on or off the access right control function on the touch screen. The terminal may turn on or off the access right control function by detecting a touch input to a menu icon for turning on the access right control function or a menu icon for turning off the access right control function. If the terminal is a smart television or a set-top box, the terminal can turn on or off the access right control function by detecting remote control selection of a menu icon for turning on the access right control function or a menu icon for turning off the access right control function. Fig. 4 is a schematic diagram of an exemplary access right control function setting interface according to an embodiment of the present invention, where a user may select whether to open the access right control function according to needs, save a setting result, and after selecting to open the access right control function, the interface may switch to the access right control function to perform setting, select or manually input a target device, and then save the target device. If the equipment information and the authority information are already set, after the access authority control function is started, the terminal performs access authority control according to the previous setting information. For a terminal which needs to be powered off after being used, such as an intelligent television or a set top box, if the access right control function is started, the access right control function is in an on state without resetting after each startup.

If it is determined in the first state that the terminal access right control function is turned off, step S106 is performed.

S106: the terminal access authority limit is not carried out, namely corresponding operation of the terminal is responded according to a conventional state, for example, the first state is a starting trigger state, the terminal enters the starting state when the terminal access authority control function is determined to be closed, and the authority limit of subsequent operation is not carried out; if the first state is an unlocking triggering state, entering a screen unlocking state when the terminal access right control function is determined to be closed, and not limiting the right of subsequent operation; if the first state is that each function of the using terminal is used or the terminal data is read, each function of the using terminal which is not limited when the terminal access authority control function is determined to be closed is used or the terminal related data is read.

If it is determined in the first state that the terminal access right control function is on, step S102 is performed.

S102: acquiring terminal peripheral equipment information;

terminal peripheral device information, namely other device information in the environment where the terminal is located, which is closer to the terminal. In the embodiment of the invention, whether the equipment is close to the terminal can be judged by whether the short-distance wireless communication information connection can be established with the terminal or not or by the short-distance wireless communication technology being searched by the terminal as a mark. Short-range wireless communication techniques include: wi-fi, mesh, bluetooth, zigBee, hlilink, thread, NFC, UWB, etc.

Terminals may have various methods for learning their peripheral information. The terminal can access to a local area network, such as a wi-fi network, through local area network equipment to obtain other equipment information in the local area network where the terminal is located. For example, in a home, a terminal such as a smart television, a set top box, a PAD, etc. can be connected with a home router in a wired or wireless manner to access a home lan. Or may search for personal area networks present around it, such as by bluetooth, wi-fi, etc. connections to search for personal area networks and their corresponding devices in the vicinity.

The method for obtaining the device information in the lan may be various, for example, in the lan, all other device information in the same lan may be obtained through NetBios protocol, and a specific protocol flow is shown in fig. 2, where the terminal 201 sends an NBNS Name query request to the lan device, after receiving the request, the lan device 200 broadcasts the NBNS Name query request to other devices 202 and 203 in the lan, and the other devices 202 and 203 return NBNS Name registration registration messages to send the device information to the terminal 201 through the lan device 200, so that the terminal may obtain other device information in the lan.

S103: and judging whether the target equipment exists or not according to the acquired equipment information.

The target device is usually set as a portable device for the terminal supervisor. Whether the terminal is within the supervision range of the terminal supervision staff is judged based on whether the target device is in the same local area network as the terminal or whether the target device and the terminal can be in short-distance wireless connection, so that whether the target device exists in the acquired device information is judged according to the acquired device information. The above judgment needs to acquire target equipment information, namely, portable equipment information of terminal supervisory personnel besides equipment information near the terminal.

The target device information may be preset by the user through a menu selection interface of the terminal. For example, the terminal may display a menu interface for selecting or inputting target device information on the touch screen. The terminal may set the target device information by detecting a touch input or a key input to a menu interface that selects or inputs the target device information. If the terminal is a smart television or a set-top box, the terminal may set target device information by detecting remote control selections or manual inputs to a menu interface for selecting or inputting the target device information.

Fig. 3 is an exemplary interface for setting access rights control information for a terminal according to an embodiment of the present invention, where setting rights control information for a terminal according to an embodiment of the present invention may mainly include setting two types of information, that is, device information and rights information, respectively. The embodiment of the invention can be mainly applied to judging whether the supervisory personnel of the terminal are in the supervisory range of the terminal, so that the setting of the equipment information can be that the portable equipment (target equipment) information of the supervisory personnel is selected through network scanning or manually input, one target equipment information can be set according to the requirement, a plurality of target equipment information can be set, the setting mode can be a single information selection or manual input mode, and an equipment list capable of controlling the access authority of the terminal can be set in the mode of setting the equipment information list.

The control type of the rights may also be selected as shown in fig. 3, e.g. only viewing a specific channel may be selected, or only a specific application may be used, or use may be disabled. The setting of the authority information in fig. 3 is only an example, the access authority control of the terminal can be a default state without selection, for example, the access authority control can be started by default to be the use prohibition state of the terminal, and the use of all functions is limited; or it may also be that different parent devices correspond to different rights limitation types.

Judging whether the target equipment exists in the peripheral equipment information according to the acquired terminal peripheral equipment information, specifically, searching whether the target equipment exists in the acquired peripheral equipment information, and the searching mode can be various, for example, sequentially searching whether the target equipment exists in the acquired peripheral equipment information according to the setting sequence of the target equipment, stopping searching once the target equipment is searched, and searching whether the target equipment exists in the acquired peripheral equipment information in parallel to acquire the existence condition of the target equipment in the acquired peripheral equipment information.

If the target device exists in the acquired peripheral device information, step S104 is performed.

S104: and releasing the access authority limit of the terminal.

And when the judgment result shows that the target equipment exists in the acquired peripheral equipment information, the terminal is considered to be in the control range of the supervisor, and the access authority limit of the terminal is released.

If the target device does not exist in the acquired peripheral device information, step S105 is performed.

S105: and carrying out corresponding access permission limitation on the terminal.

If the judgment result shows that the acquired peripheral equipment information does not contain the target equipment, the terminal is considered not to be in the control range of the terminal supervisor, and the access authority limit of the terminal is opened.

According to the authority management method, whether the access authority limit is carried out on the terminal or not is judged by acquiring the information of the peripheral equipment of the terminal and taking the target equipment as a mark of whether the terminal is in the supervision range of the manager or not at the periphery of the terminal. The embodiment of the invention has convenient and effective access authority management of the terminal, does not need repeated manual setting, releases the access authority limit once the target equipment and the controlled terminal are accessed into the same local area network, and timely controls the access authority of the terminal once the target equipment leaves the local area network, thereby avoiding the problems that the authority limit is released by manually inputting the memory password or the authority limit is not released by forgetting the password or the authority limit setting is manually performed again when the target equipment leaves each time in the prior art.

The rights management method is just a specific example of the present invention, and the acquisition of the peripheral device information of the terminal and the judgment of the target device may be performed under any conditions and environments, and is not limited to determining whether the access rights control function of the terminal is on in the first state; and if the access right control function is started, acquiring peripheral equipment information of the terminal and judging the target equipment.

Fig. 8 is a flowchart of another method for controlling access rights of a terminal according to an embodiment of the present invention. For smart televisions or set-top box terminal devices, in order to prevent minors from watching television programs without limitation, minors often have certain restrictions on television use, such as limited watching of specific programs or signal sources, and even do not respond to any operation. Therefore, when the startup operation is detected, whether the terminal is provided with the access right control function or not needs to be judged. Fig. 8 is a flow chart of a method of access rights control function execution for such a terminal.

S800: and judging whether a start trigger is detected.

The power-on trigger may be an input to a predetermined key, which may be a power key, a power-on key, or a power-on. When the starting trigger is detected, the terminal can start screen display and enter a starting state.

If the start trigger is detected, the process proceeds to step S801, and if the start trigger is not detected, the subsequent operation is not triggered.

S801: it is determined whether the access rights control function is on.

After the terminal detects the start trigger, determining whether an access right control function of the terminal is in an on state. The access right control function is to limit some or all functions in the terminal in case that a certain condition is satisfied. The functions that may be limited include operation and/or use of some or all applications, reading and/or writing of some or all terminal data, reception and/or playing of some or all media assets or channels, and so forth.

The state of the access right control function may be manually set in advance by the user. The state of the access rights control function may be an on or off state. The terminal may turn on or off the access rights control function by detecting a user input. For example, the terminal may turn on or off the access right control function by detecting a remote control selection of a menu icon for turning on the access right control function or a menu icon for turning off the access right control function. Fig. 4 is a schematic diagram of an exemplary access right control function setting interface according to an embodiment of the present invention, where a user may select whether to open the access right control function according to needs, save a setting result, and after selecting to open the access right control function, the interface may switch to the access right control function to perform setting, select or manually key to input a target device, and then save the target device. If the equipment information and the permission information are already set, after the access permission control function is started, the terminal performs access permission control according to the previous setting information, the starting is not reset after each shutdown, and the access permission control function is in an opening state.

If it is determined in the first state that the terminal access right control function is turned off, step S806 is performed.

S806: the terminal access authority limit is not carried out; and the corresponding operation of the terminal is responded according to the conventional state, namely, after the terminal is started, the terminal enters the starting state when the access right control function of the terminal is determined to be closed, and the right limitation of the subsequent operation is not carried out.

If it is determined that the terminal access right control function is on, step S802 is performed.

S802: and acquiring equipment information in a local area network where the terminal is located.

There are several ways for a terminal to learn about the device information in the local area network in which it is located. The terminal can access a local area network, such as a wireless router, through local area network equipment; or searching the personal local area network of other peripheral devices to obtain other device information in the local area network where the personal local area network is located. For example, in a home, a terminal such as a smart television, a set-top box and the like can be connected with a home router in a wired or wireless manner to access a home local area network, and other access equipment information is obtained by scanning the home local area network. Or the personal local area network built by other peripheral devices can be searched to acquire the device information in the local area network where the terminal is located. The local area network where the terminal is located can be one or a plurality of local area networks.

S803: and judging whether the target terminal equipment is in the local area network where the terminal is positioned according to the acquired local area network equipment information.

The target device is usually set as a portable device for the terminal supervisor. Whether the terminal is within the supervision range of the terminal supervision staff is judged based on whether the target device is in the same local area network as the terminal, so that whether the target device exists in the acquired device information is judged according to the acquired device information. The above judgment needs to acquire target equipment information, namely, portable equipment information of terminal supervisory personnel besides equipment information near the terminal.

The target device information may be preset by the user through a menu selection interface of the terminal. The terminal may set the target device information by detecting remote control selection or manual key input to a menu interface for selecting or inputting the target device information.

Fig. 3 is an exemplary interface for setting access rights to a terminal according to an embodiment of the present invention, where setting rights control information for the terminal according to an embodiment of the present invention may mainly include setting two types of information, that is, device information and rights information, respectively. The embodiment of the invention can be mainly applied to judging whether the supervisory personnel of the terminal are in the supervisory range of the terminal, so that the setting of the equipment information can be that the portable equipment (target equipment) information of the supervisory personnel is selected through network scanning or manually input, one target equipment information can be set according to the requirement, a plurality of target equipment information can be set, the setting mode can be a single information selection or manual input mode, and an equipment list capable of controlling the access authority of the terminal can be set in the mode of setting the equipment information list.

Judging whether the target equipment exists in the acquired local area network equipment information according to the acquired local area network equipment information, specifically, searching whether the target equipment exists in the acquired local area network equipment information, and if so, sequentially searching whether the target equipment exists in the acquired local area network equipment information according to the setting sequence of the target equipment, stopping searching once the target equipment is searched, and also searching whether the target equipment exists in the acquired local area network equipment information in parallel to acquire the existence condition of the target equipment in the acquired local area network equipment information.

If the target device exists in the acquired local area network device information, step S804 is performed.

S804: and releasing the access authority limit of the terminal.

And when the judging result shows that the target equipment exists in the acquired local area network equipment information, the terminal is considered to be in the control range of the supervisor, and the access authority limit of the terminal is released.

If the target device does not exist in the acquired lan device information, step S805 is performed.

S805: and limiting the access right of the terminal.

If the judgment result shows that the target equipment does not exist in the acquired local area network equipment information, the terminal is considered not to be in the control range of the terminal supervisor, and the access authority limit of the terminal is opened.

According to the authority management method, whether the target equipment is around the terminal is used as a mark that whether the terminal is in the supervision range of the manager or not is judged, so that whether access authority limit is carried out on the terminal or the access authority limit is released is judged. The embodiment of the invention has the advantages that the access authority management of the terminal is convenient and effective, the manual setting is not needed, the terminal performs network searching when the terminal is started, and once the target equipment and the managed terminal are in the same local area network, the access authority limitation is released, thereby avoiding the problems that the authority limitation is released by the manual input of the memory password or the authority limitation is not released by forgetting the password in the prior art.

Fig. 9 is a flowchart of another method for controlling access rights of a terminal according to an embodiment of the present invention.

S900: opening an access right control function;

the state of the access rights control function may be manually set by the user. The state of the access rights control function may be an on or off state. The terminal may turn on or off the access rights control function by detecting a user input. For example, the terminal may display a menu icon for turning on or off the access right control function on the touch screen. The terminal may turn on or off the access right control function by detecting a touch input to a menu icon for turning on the access right control function or a menu icon for turning off the access right control function. If the terminal is a smart television or a set-top box, the terminal can turn on or off the access right control function by detecting remote control selection of a menu icon for turning on the access right control function or a menu icon for turning off the access right control function. Fig. 4 is a schematic diagram of an exemplary access right control function setting interface according to an embodiment of the present invention, where a user may select whether to open the access right control function according to needs, save a setting result, and after selecting to open the access right control function, the interface may switch to the access right control function to perform setting, select or manually input a target device, and then save the target device. If the equipment information and the authority information are already set, after the access authority control function is started, the terminal performs access authority control according to the previous setting information. For a terminal which needs to be powered off after being used, such as an intelligent television or a set top box, if the access right control function is started, the access right control function is in an on state without resetting after each startup.

S901: triggering and acquiring the information of the peripheral equipment of the terminal when the specific condition is met.

The specific condition may be a specific action, that is, the terminal is triggered to acquire the peripheral information when the specific action is detected, or a set triggering period, that is, the peripheral information is acquired once every specific time.

S902: and acquiring terminal peripheral equipment information.

Terminals may have various methods for learning their peripheral information. The terminal can access the local area network through the local area network equipment to obtain other equipment information in the local area network where the terminal is located. For example, in a home, the terminal may connect with a home router through a wired or wireless manner to access a home lan. Or may build a personal area network itself or search for personal area networks of other devices.

S903: and judging whether the target terminal equipment exists or not according to the acquired peripheral equipment information.

If the target device exists in the acquired peripheral device information, step S904 is performed.

S904: and releasing the access authority limit of the terminal.

If the target device does not exist in the acquired peripheral device information, step S905 is performed.

S905: and limiting the access right of the terminal.

According to the authority management method, whether the target equipment is around the terminal is used as a mark of whether the terminal is in the supervision range of the manager or not, so that whether access authority limit is carried out on the terminal or the access authority limit is released is judged. The embodiment of the invention has convenient and effective access authority management of the terminal, does not need repeated manual setting, releases the access authority limit once the target equipment and the controlled terminal are accessed into the same local area network, and timely controls the access authority of the terminal once the target equipment leaves the local area network, thereby avoiding the problems that the authority limit is released by manually inputting the memory password or the authority limit is not released by forgetting the password or the authority limit setting is manually performed again when the target equipment leaves each time in the prior art.

Fig. 5 is a schematic diagram of an application scenario in an embodiment of the present invention, where a terminal 501 is a terminal with an access right control function, and the terminal may access a lan through a lan device 500, and the terminals (the terminal 501, the device a, the device B, and the device C) may also search and access through a personal lan, or search and connect through a short-range wireless communication technology. The terminal 501 may be any type of intelligent terminal, such as a smart television, a set-top box, a PAD, a mobile phone, a computer, an intelligent home appliance, etc., where the device a, the device B, and the device C are devices existing around the terminal 501. Fig. 5 is only an example of an application scenario in the embodiment of the present invention, where a plurality of lan access devices may be used in the environment where the terminal is located, and the number of peripheral devices may also be any number according to practical situations.

When the preset condition is satisfied, the terminal 501 first determines whether the access right control function is in an on state. The preset condition may be any terminal access instruction or a terminal setting instruction, such as a start trigger, a screen unlocking trigger, or a channel switching instruction received, or an application access instruction, or a data reading instruction, a data writing instruction, or the like. The preset condition may also be a periodic triggering of the access rights control function. The state of the access right control function may be manually set in advance by the user. The above access right judging control process may be triggered when a preset condition is met each time, for example, triggering is performed each time when the device is started up, and triggering is performed periodically. After determining that the access right control function is in an on state, the terminal 501 acquires information of peripheral equipment; the manner in which the terminal 501 obtains the peripheral device information may be multiple, the terminal 501 may obtain other access device information in the lan through the lan device 500, may obtain the peripheral device information by searching for connectable devices through a short-range wireless communication technology, may obtain the peripheral device information by searching for a personal lan existing in the periphery, or may simultaneously integrate one or more of the obtaining manners to comprehensively obtain the peripheral device information. After the terminal 501 obtains the peripheral device information (device a, device B, and device C), it determines whether the target device is in the obtained device information, where the determination manner may be to compare the obtained device information with the stored target device information, or to sequentially find whether the target device information is in the obtained device information. As shown in fig. 5, if the device C is found to exist in the access right control device information (target device C) stored in the terminal after the comparison, the supervisor of the target device C is considered to be in the periphery of the terminal, that is, the terminal is within the control range of the supervisor, the access right limitation on the terminal is released, if the result of the judgment is that the target device does not exist in the obtained device information, the terminal is considered not to be within the control range of the supervisor, and all or part of operations on the terminal are limited according to the setting condition of the access right control function.

In addition to the above manner, the terminal 501 may perform access rights control of the terminal in a similar manner to that of fig. 1, 8, and 9.

In the above embodiment, whether the target device is in the periphery of the terminal is used as a flag that whether the terminal is in the supervision range of the manager, so as to determine whether to limit or release the access right to the terminal. The embodiment of the invention has convenient and effective access authority management of the terminal, does not need repeated manual setting, releases the access authority limit once the target equipment and the controlled terminal are accessed into the same local area network, and timely controls the access authority of the terminal once the target equipment leaves the local area network, thereby avoiding the problems that the authority limit is released by manually inputting the memory password or the authority limit is not released by forgetting the password or the authority limit setting is manually performed again when the target equipment leaves each time in the prior art.

Fig. 6 is a block diagram of a terminal with access right control function according to an embodiment of the present invention, and it can be seen that the terminal 600 includes a determining unit 601, a storing unit 602, a communication unit 603, a judging unit 604 and a control unit 605.

A determining unit 601, configured to determine whether an access right control function of the terminal 600 is turned on in a first state;

The determination unit 601 may recognize or perceive the first state. The first state may be an application execution state, an action execution state, a screen locking state and unlocking trigger state, a restart or start trigger state, and the like. When the determination unit 601 recognizes the first state, it is determined whether the access right control function of the terminal 600 is in an on state. The manner of determining whether the access right control function of the terminal 600 is in the on state may be to learn setting information of the access right control function of the terminal 600 from the storage unit 602. The setting information may be stored in the storage unit 602, or may be stored in other locations, such as a network, in a distributed manner.

The determination unit 601 determines that the access right control function of the terminal 600 is off in the first state, the control unit 605 does not perform access right restriction on the terminal 600. The determining unit 601 notifies the communication unit 603 if it is determined in the first state that the access right control function of the terminal 600 is on.

A communication unit 603 configured to acquire peripheral device information of the terminal 600; the terminal 600 peripheral device information, i.e., other device information in the environment where the terminal 600 is located, which is closer to the terminal 600. The communication unit 603 acquires, searches, or connects peripheral devices by a short-range wireless communication technology to acquire peripheral device information.

The manner in which the communication unit 603 obtains the peripheral device information may be multiple, the communication unit 603 may obtain other access device information in the lan through the lan device, may obtain the peripheral device information by searching for connectable devices through a short-range wireless communication technology, may obtain the peripheral device information by searching for a personal lan existing around, or may simultaneously integrate one or more obtaining manners to comprehensively obtain the peripheral device information.

A judging unit 604 for judging whether or not a target device exists therein based on the peripheral device information acquired from the communication unit 603; the determining unit 604 determines whether the target device exists in the peripheral device information according to the acquired terminal peripheral device information, and specifically may search whether the target device exists in the acquired peripheral device information, where the search manner may be multiple, for example, sequentially searches whether the target device exists in the acquired peripheral device information according to a setting order of the target device, and stops the search operation once the target device is found, or searches whether the target device exists in the acquired peripheral device information in parallel, so as to obtain the existence condition of the target device in the acquired peripheral device information. For the target device information, the judging unit 604 may be learned from the storage unit 602. The target device information may be stored in the storage unit 602, or may be stored in other locations, such as a network, in a distributed manner.

If the judgment unit 604 judges that the target device exists in the acquired peripheral device information, the control unit 605 releases the access right restriction of the terminal 600.

If the judging unit 604 judges that the obtained peripheral device information does not have the target device, the control unit 605 performs corresponding access right limitation on the terminal.

Fig. 6 is only an example case of the embodiment of the present invention, and specific unit structures and interaction between units, and information required to be acquired by the units may be increased, decreased or changed correspondingly according to specific cases.

Fig. 10 is a block diagram of a terminal having an access right control function according to an embodiment of the present invention, and it can be seen that terminal 1000 includes a power-on detection unit 1001, a determination unit 1002, a storage unit 1003, a communication unit 1005, a judgment unit 1004, and a control unit 1006.

The power-on detection unit 1001 determines whether a power-on trigger is detected.

A determining unit 1002, configured to determine whether the access right control function of the terminal 1000 is turned on when the power-on detection unit 1001 detects a power-on trigger;

the determination unit 1002 determines whether the access right control function of the terminal 1000 is in an on state when the power-on detection unit 1001 detects a power-on trigger. The manner of determining whether the access right control function of terminal 1000 is in the on state may be such that setting information of the access right control function of terminal 1000 is known from storage unit 1003. The setting information may be stored in the storage unit 1003 or may be stored in other locations, such as a network, in a distributed manner.

Determination unit 1002, if it is determined that the access right control function of terminal 1000 is off, control unit 1006 does not perform access right restriction on terminal 1000. The determining unit 1002 notifies the communication unit 1005 if it is determined that the access authority control function of the terminal 1000 is on.

A communication unit 1005 for acquiring device information in a local area network in which the terminal 1000 is located;

the communication unit 1005 may have a variety of methods to learn the device information in the local area network in which it is located. The communication unit 1005 may access a local area network, such as a wireless router, through a local area network device; or searching the personal local area network of other peripheral devices to obtain other device information in the local area network where the personal local area network is located. Or the personal local area network built by other peripheral devices can be searched to acquire the device information in the local area network where the terminal is located. The local area network in which terminal 1000 can be located may be one or more.

A judging unit 1004, configured to judge whether the target terminal device is in the local area network where the terminal 1000 is located according to the acquired information of the local area network device; a judging unit 1004 for judging whether or not a target device exists therein based on the lan access device information acquired from the communication unit 1005; the determining unit 1004 determines whether the target device exists in the lan access device information according to the obtained lan access device information, which may specifically be searching whether the target device exists in the obtained lan access device information. For the target device information, the judgment unit 1004 may be learned from the storage unit 1003. The target device information may be stored in the storage unit 1003, or may be stored in other locations, such as a network, in a distributed manner.

If the judging unit 1004 judges that the target device exists in the obtained lan access device information, the control unit 1006 releases the access right restriction of the terminal 1000.

If the judging unit 1004 judges that the obtained lan access device information does not have the target device, the control unit 1006 performs corresponding access permission restriction on the terminal 1000.

Fig. 10 is only an example case of the embodiment of the present invention, and specific unit structures and interaction between units, and information required to be acquired by the units may be increased, decreased or changed correspondingly according to specific cases.

Fig. 11 is a block diagram of a terminal with access right control function according to an embodiment of the present invention, and it can be seen that the terminal 1100 includes a setting unit 1101, a triggering unit 1102, a communication unit 1103, a storage unit 1104, a judging unit 1105, and a control unit 1106.

A setting unit 1101 for turning on an access right control function; the user can set the access right control function by the setting unit 1101. The state of the access rights control function may be an on or off state. In addition to setting the state of the access right control function, the user can also set device information and right information through the setting unit 1101.

In the case that the setting unit 1101 starts the access right control function, the triggering unit 1102 is configured to trigger the communication unit 1103 to acquire terminal peripheral device information when a specific condition is satisfied; the specific condition may be a specific action, that is, triggering the terminal 1100 to acquire its peripheral information each time the specific action is detected, or a set triggering period, that is, performing the acquisition of the peripheral information every specific time.

A communication unit 1103 for acquiring peripheral equipment information of the terminal 1100;

terminal 1100 peripheral device information, i.e., other device information that is closer to terminal 1100 in the environment in which terminal 1100 is located. The communication unit 1103 acquires, searches, or connects peripheral devices by a short-range wireless communication technology to acquire peripheral device information.

The manner in which the communication unit 1103 obtains the peripheral device information may be multiple, the communication unit 1103 may obtain other access device information in the lan through the lan device, may obtain the peripheral device information by searching connectable devices through a short-range wireless communication technology, may obtain the peripheral device information by searching a personal lan existing around, or may simultaneously integrate one or more obtaining manners to comprehensively obtain the peripheral device information.

A judging unit 1105 for judging whether or not a target device exists therein based on the peripheral device information acquired from the communication unit 1103; the determining unit 1105 determines whether the target device exists in the peripheral device information according to the acquired terminal peripheral device information, specifically, may search whether the target device exists in the acquired peripheral device information, and the search mode may be various, for example, may search whether the target device exists in the acquired peripheral device information sequentially according to a setting sequence of the target device, stop the search operation once the target device is found, or search whether the target device exists in the acquired peripheral device information in parallel, so as to obtain the existence condition of the target device in the acquired peripheral device information. For the target device information, the determination unit 1105 may be learned from the storage unit 1104. The target device information may be stored in the storage unit 1104 or may be stored in other locations, such as a network, in a distributed manner.

If the determination unit 1105 determines that the target device exists in the acquired peripheral device information, the control unit 1106 releases the access right restriction of the terminal 1100.

If the determination unit 1105 determines that the target device does not exist in the acquired peripheral device information, the control unit 1106 performs corresponding access permission restriction on the terminal 1100.

Fig. 11 is only an example case of the embodiment of the present invention, and specific unit structures and interaction between units, and information required to be acquired by the units may be increased, decreased or changed correspondingly according to specific cases.

Fig. 7 is a schematic structural diagram of a terminal according to still another embodiment of the present invention. The terminal can be various intelligent terminals such as intelligent televisions, set top boxes, PADs, mobile phones, computers, intelligent home appliances and the like. The terminal 700 includes a processor 701, a random access memory RAM707, a read only memory ROM708, a memory 702, a power supply 703, a display unit 704, a communication unit 706, and an input unit 705. The communication unit 706 may include a wifi module 7061 and/or a short-range communication module 7062, among others.

Wherein the random access memory RAM707 is used to store signals or data received from outside the terminal 700 or to serve as a memory space for operations performed by the terminal 700; a read only memory ROM708 for storing a control program for controlling the terminal 700. The processor 701, the random access memory RAM707, and the read only memory ROM708 may be interconnected by an internal bus.

The communication unit 706 may include at least one of a wifi module 7061 and a short-range communication module 7062.

The wifi module 7061 may be connected to a wifi network under the control of the processor 701 where the wifi access device is installed. The wifi module 7061 supports the WLAN standard IEEE802.11x of the Institute of Electrical and Electronics Engineers (IEEE). The short-range communication module 7062 may perform short-range wireless communication between the terminal 700 and its peripheral devices under the control of the processor 701. Short-range communications may be in compliance with bluetooth, infrared data association (IrDA), wiFi, NFC, etc.

The display unit 704 is used to display a user interaction interface, and the display unit 704 may be used to display information input by a user through the input unit 705 or information provided to the user and various menu interfaces of the terminal 700. The display unit 704 may include a display panel, and optionally, the display panel may be configured in the form of an LCD (Liquid Crystal Display) or an OLED (Organic Light-Emitting Diode) or the like. In a particular implementation, the touch panel may overlay the display panel to form a touch display screen, with the processor 701 providing a corresponding visual output on the touch display screen depending on the type of touch event. The display unit 704 may be a general display screen, and the processor 701 may provide a corresponding visual output on the display screen according to an instruction input by the user through the input unit 705.

The input unit 705 may be used to receive input numeric or character information, receive user switching application interface operations, and generate switching signals, as well as signal inputs related to user settings and function control of the terminal. Specifically, in the embodiment of the present invention, the input unit 705 may include a touch panel, which is also called a touch screen, on or near which a touch operation by a user (such as a user operating on the touch panel using any suitable object or accessory such as a finger, a stylus pen, etc.), and may be implemented in various types such as a resistive type, a capacitive type, an infrared type, and a surface acoustic wave type. In addition to a touch panel, the input unit 705 may also include other input devices including, but not limited to, one or more of a physical keyboard, function keys (e.g., volume control keys, switch keys, etc.), a trackball, a mouse, a joystick, a remote control, etc.

The power supply 703 may supply power to the entire terminal. Different types of terminals having different power supply types, including various models of lithium batteries, or the power supply 703 may be to supply power received from the outside to the terminal 700 via a cable; the power supply 703 may also be one or more batteries (not shown) mounted in the terminal 700 under the control of the processor 701; the power supply 703 may also supply power received wirelessly from an external power source to the terminal 700 through wireless charging technology.

The memory 702 may store signals or data input/output from the terminal 700 under the control of the processor 701. The memory 702 may store control programs and applications for controlling the terminal 700 or the processor 701.

The term "memory" may include the memory 702, the RAM707 and ROM708 of the processor 701, or a memory card (not shown) installed in the terminal 700, such as a Secure Digital (SD) card or memory stick. The memory may include a nonvolatile memory, a volatile memory, a hard disk (HDD), or a Solid State Disk (SSD).

The processor 701 is a control center of the terminal 700, connects and controls various parts of the terminal using various interfaces and lines, and performs various functions of the intelligent terminal and processes data by running or executing data stored in the memory. Optionally, the processor 701 includes one or more processing units.

After receiving the instruction of the processor 701, a program stored in the memory may be used to execute the methods shown in fig. 1, 8, and 9.

In the embodiment of the invention, whether the target equipment is around the terminal is used as a mark of whether the terminal is in the supervision range of the manager or not so as to judge whether the access right limitation is carried out on the terminal or release the access right limitation. The embodiment of the invention has convenient and effective access authority management of the terminal, does not need repeated manual setting, releases the access authority limit once the target equipment and the controlled terminal are accessed into the same local area network, and timely controls the access authority of the terminal once the target equipment leaves the local area network, thereby avoiding the problems that the authority limit is released by manually inputting the memory password or the authority limit is not released by forgetting the password or the authority limit setting is manually performed again when the target equipment leaves each time in the prior art.

Finally, it should be noted that: the above embodiments are only for illustrating the technical solution of the present invention, and not for limiting the same; although the invention has been described in detail with reference to the foregoing embodiments, it will be understood by those of ordinary skill in the art that: the technical scheme described in the foregoing embodiments can be modified or some or all of the technical features thereof can be replaced by equivalents; such modifications and substitutions do not depart from the spirit of the invention.

Claims

1. A method for controlling access rights of a terminal, the method comprising:

acquiring equipment information around a terminal;

and if the target equipment exists in the acquired equipment information, releasing the access permission limit of the terminal.

2. The method of claim 1, wherein determining whether a target device is present therein based on the acquired device information comprises:

and storing a target device information list comprising one or more target devices in the terminal, and judging whether the target device exists in the acquired device information according to the acquired device information and the target device information list stored in the terminal.

3. The method of claim 1 or 2, wherein the method further comprises:

and if the target equipment does not exist in the acquired equipment information, limiting the access right of the terminal.

4. The method of claim 1, wherein prior to the obtaining device information about the periphery of the terminal, the method further comprises: and determining whether an access right control function is started in a first state of the terminal, wherein the first state is to be started and triggered.

5. The method of claim 1, wherein prior to the obtaining device information about the periphery of the terminal, the method further comprises: and determining whether an access right control function is started in a first state of the terminal, wherein the first state is to perform screen unlocking triggering.

6. A terminal, the terminal comprising:

a determining communication unit for determining equipment information for acquiring the periphery of the terminal;

a judging unit configured to judge whether a target device exists therein according to the device information acquired by the communication unit;

and the control unit is used for deciding whether to release the access permission limit of the terminal according to the judging result of the judging unit.

7. The terminal of claim 6, wherein the terminal further comprises:

a storage unit configured to store target device information including one or more target devices; the judging unit judges whether or not a target device exists therein based on the device information acquired by the communication unit and the target device information list stored in the storage unit.

8. The terminal of claim 6, wherein the terminal further comprises:

a determining unit, configured to determine, in a first state of the terminal, whether an access right control function is in an on state; the communication unit is used for acquiring equipment information around the terminal when the access right control function is in an on state; the first state is a power-on trigger state.

9. The terminal of claim 6, wherein the terminal is a smart television or a set top box.

10. A terminal, the terminal comprising:

a processor and a readable storage medium storing a program, the processor being configured to execute the program, when executed, to perform the steps of: acquiring equipment information around a terminal; judging whether a target device exists in the device information according to the acquired device information; and determining whether to release the access right limitation of the terminal according to the judgment result.

11. A method for controlling access rights of a terminal, the method comprising:

displaying menu icons for turning on or off the access right control function on the display screen;

opening or closing the access right control function by detecting a touch input to a menu icon for opening the access right control function or a menu icon for closing the access right control function;

identifying a first state, wherein the first state comprises at least one of an application execution state, an action execution state, a screen locking state and an unlocking triggering state, and a restarting or starting triggering state;

and if the terminal access right control function is determined to be closed in the first state, the terminal access right is not limited.