WO2013182126A1

WO2013182126A1 - Unified management and control method and platform for ubiquitous terminal

Info

Publication number: WO2013182126A1
Application number: PCT/CN2013/079351
Authority: WO
Inventors: 孙爱芳; 张志飞; 凌志浩; 高冲; 祁学文; 袁宜峰
Original assignee: 中兴通讯股份有限公司
Priority date: 2012-11-20
Filing date: 2013-07-15
Publication date: 2013-12-12
Also published as: CN103841557A

Abstract

An embodiment of the present invention provides a unified management and control method for a ubiquitous terminal. A unified management and control platform receives a registration request of an application server, performs registration on a service of the application server, and acquires requirements of the service on identity and capability of a terminal; receives a registration request of a terminal group, acquires identity information and capability information of each terminal in the terminal group, establishes a terminal service mapping table according to the identity information and capability information and the requirements of the service on the identity and capability of the terminal, the terminal service mapping table indicating mapping relationship between a terminal and a service capable of being accessed by the terminal, and authorizes each terminal the service capable of being accessed by the terminal. An embodiment of the present invention further provides a unified management and control system for a ubiquitous terminal.

Description

Universal ubiquitous terminal unified management and control method and platform

The present invention relates to the field of wireless communication technologies, and in particular, to a ubiquitous terminal unified management and control method and platform.

Background technique

With the improvement of people's life and the development of network technology, ubiquitous service provision and ubiquitous access have become a trend. In order to provide ubiquitous services for heterogeneous terminals more efficiently and safely, unified management and access control of terminal groups formed by heterogeneous terminals has become a real need. Unified management and control of the terminal includes unified registration, authentication, authorization, and access control.

In the related art, the terminal registration and authentication mainly focus on the group authentication of the homogeneous terminal in the Internet of Things, and all the terminals participating in the group authentication have no significant difference in identity and capability, and the services accessed are basically the same. The publicly-listed single-sign-on system based on unified authentication can realize one-time registration and authentication of the terminal and single-point login to achieve network-wide access, but it also brings security problems, especially in the case of ubiquitous services and terminal heterogeneous. The identity and capabilities of each terminal are different. The entire network access not only brings the burden of information management to the application server, but also has security risks such as data pollution and identity spoofing.

Summary of the invention

The embodiments of the present invention provide a unified management and control method and platform for a ubiquitous terminal, which implements management and control of a heterogeneous terminal group, improves registration and authentication efficiency, and improves security and reliability of service access.

In order to solve the above problem, an embodiment of the present invention provides a unified management and control method for a ubiquitous terminal, including:

The unified management and control platform receives the registration request of the application server, registers the service of the application server, and obtains the identity and capability requirements of the service to the terminal;

Receiving, by the unified management and control platform, a registration request of the terminal group, acquiring identity information and capability information of each terminal in the terminal group, according to the identity information and capability information, and the service to the terminal The identity and capability requirements are used to establish a terminal service mapping table, where the terminal service mapping table indicates a mapping relationship between the terminal and a service that can be accessed, and authorizes each terminal to access the service.

The foregoing method may further have the following feature: acquiring identity information and capability information of each terminal in the terminal group, and establishing a terminal service mapping table according to the identity information and capability information and the identity and capability requirements of the service to the terminal Includes:

The unified management and control platform organizes the terminals in the terminal group to register, and obtains the identity information of each terminal from the registration information submitted by each terminal;

Comparing the identity information of each terminal with the identity requirements of the service to the terminal, and generating a preliminary terminal service mapping table;

And transmitting, by the terminal in the terminal group, a digital certificate, and acquiring capability information that is transmitted by each terminal by using the digital certificate;

The capability information of each terminal is compared with the capability requirements of the service to the terminal, and the initial terminal service mapping table is filtered to generate a final terminal service mapping table.

The above method may also have the following features, the method further comprising:

After performing the service update, the unified management and control platform updates the terminal service mapping table according to the identity information and capability information of each terminal in the terminal group, and the updated service identity and capability requirements of the terminal, and When the terminal service mapping table is changed, the terminal is re-authorized for the changed terminal.

After receiving the service access request of the terminal in the terminal group, the unified management and control platform determines, according to the terminal service mapping table, whether the terminal has access rights, and if yes, sends the service access request to The corresponding application server, if not, blocks access by the terminal.

The above method may further have the following features, the method further comprising: the unified management and control platform uploading identity information, or identity and capability information of the terminal having the service access authority to the corresponding application server.

The above method may also have the following features: the terminal group includes one or more heterogeneous terminals. The embodiment of the invention further provides a ubiquitous terminal unified management and control platform, including: a service registration module, configured to: receive a registration request of an application server, register a service of the application server, and obtain an identity and capability requirement of the service to the terminal;

a mapping module, configured to: receive a registration request of the terminal group, obtain identity information and capability information of each terminal in the terminal group, and establish, according to the identity information and capability information, the identity and capability requirements of the service to the terminal, a terminal service mapping table, where the terminal service mapping table indicates a mapping relationship between the terminal and a service that the terminal can access;

A terminal authorization module, which is configured to: authorize each terminal to access services.

The above platform may also have the following features, the mapping module includes: a terminal registration module and a terminal authentication module, where:

The terminal registration module is configured to: organize a terminal in the terminal group to register, obtain identity information of each terminal from registration information submitted by each terminal, and perform identity information of each terminal and identity requirements of the service to the terminal. Comparing, generating a preliminary terminal service mapping table and sending the terminal authentication module to the terminal;

The terminal authentication module is configured to: deliver a digital certificate to the terminal in the terminal group, and obtain capability information that each terminal uploads through the digital certificate; and perform capability information of each terminal and capability requirements of the service to the terminal. The initial terminal service mapping table is filtered to generate a final terminal service mapping table.

The platform may also have the following features, the platform further includes a terminal rights management module, where: the terminal authentication module is further configured to send the terminal service mapping table to the terminal rights management module;

The terminal rights management module is configured to: after the service update, update the terminal service mapping table according to the identity information and capability information of each terminal in the terminal group, and the updated service to the identity and capability requirements of the terminal, And when the terminal service mapping table is changed, the service authorization is re-authorized to the changed terminal.

The platform may further have the following features, the platform further includes a terminal access control module, configured to: after receiving the service access request of the terminal in the terminal group, determine, according to the terminal service mapping table, whether the terminal has access Permissions, if any, send the service access request to the corresponding application server; if not, block access by the terminal. The above-mentioned platform may also have the following features: The authorization module is further configured to: upload identity information of the terminal having the service access right, or identity and capability information to the corresponding application server.

The above platform may also have the following features: the terminal group includes one or more heterogeneous terminals. The unified management and control method and platform provided by the embodiments of the present invention can effectively manage and control terminal groups formed by heterogeneous terminals, and complete unified authentication, registration, authorization, rights management, and access control functions. The security of service access is ensured under the dual authentication of identity and capability. At the same time, the difference between heterogeneous terminals can be effectively shielded, and the efficient registration and authentication of heterogeneous terminals is realized. BRIEF abstract

1 is a flow chart of a unified management and control method according to Embodiment 1 of the present invention;

2 is a schematic structural diagram of a unified management and control platform according to Embodiment 2 of the present invention;

3 is a flowchart of a method for unified management and control by using a unified management and control platform according to Embodiment 3 of the present invention;

4 is a schematic view of Embodiment 4 of the present invention.

Preferred embodiment of the invention

Embodiments of the present invention will be described in detail below with reference to the accompanying drawings. It should be noted that, in the case of no conflict, the features in the embodiments and the embodiments in the present application may be arbitrarily combined with each other.

Additionally, although logical sequences are shown in the flowcharts, in some cases the steps shown or described may be performed in a different order than the ones described herein.

In the embodiment of the present application, a terminal group formed by a heterogeneous terminal is taken as an example, but the present invention is not limited thereto, and the terminal group may also include a homogeneous terminal. In addition, the terminal group does not exclude the case where only one terminal is included.

Embodiment 1

The embodiment of the invention provides a method for unified management and control, and the method includes the following steps:

The unified management and control platform receives a registration request of the application server, and the application server The service is registered to obtain the identity and capability requirements of the service to the terminal;

Receiving a registration request of the terminal group, acquiring identity information and capability information of each terminal in the terminal group, and establishing a terminal service mapping table according to the identity information and the capability information and the identity and capability requirements of the service to the terminal, where The terminal service mapping table indicates the mapping relationship between the terminal and the services that the terminal can access, and authorizes each terminal to access the services that it can access.

In an alternative of the embodiment, the terminal service mapping table is established as follows: The unified management and control platform organizes the terminals in the terminal group to register, and obtains each terminal from the registration information submitted by each terminal. Identity information;

The capability information of each terminal is compared with the capability requirements of the service to the terminal, and the preliminary terminal service mapping table is filtered to generate a final terminal service mapping table.

In an alternative of this embodiment, the method further includes:

After the service is updated, the unified management and control platform updates the terminal service mapping table according to the identity information and capability information of each terminal in the terminal group, and the updated service identity and capability requirements of the terminal, and When the terminal service mapping table is changed, the terminal is re-authorized for the changed terminal.

In an alternative of this embodiment, the method further includes:

After receiving the service access request of the terminal in the terminal group, the unified management and control platform determines, according to the terminal service mapping table, whether the terminal has access rights, and if yes, sends the service access request to The corresponding application server obtains the access of the terminal to the service after receiving the response from the application server; if not, the access of the terminal is blocked, and the terminal is notified that the terminal does not have the access right.

In an alternative of the embodiment, the unified management and control platform uploads the identity information of the terminal having the service access authority, or the identity and capability information to the corresponding application server.

The invention will now be described by way of an example. This example provides a unified management and control method. As shown in Figure 1, the following steps are included:

Step 101: After receiving the service registration request of the application server, register the application server to obtain the identity and capability requirements of the service to the terminal.

In this step, the service registration request of the application server is responded to and registered, and the service includes: disaster warning, environmental monitoring, medical service, in-vehicle service, mobile office, data communication, social service, etc., taking into account the specific object of the service and Special requirements require that the business be registered with the identity and capabilities of the terminal that performs the service. For example, the identity of the terminal includes the identity of the general user and the administrator, and may also include the identity of the society, such as students, staff, seniors, etc., and the service without identity requirements defaults to all end users. For example, terminal capabilities include the terminal's CPU, storage capabilities, display capabilities, network interface capabilities, mobility, and more. The specific information of the terminal identity and capability herein is merely an example, and the present invention is not limited thereto, and can be set according to specific needs.

Step 102: Receive a registration request of the terminal group and perform unified registration on the terminal group to obtain identity information of the terminal.

The terminal group may include heterogeneous terminals, and may also include similar terminals.

In this step, the terminal group registration request is responded to and the terminals in the terminal are registered, and the terminals in the terminal group may include a handheld terminal, a workstation, a data collector, an in-vehicle terminal, a medical terminal, and the like. Considering that the users of the terminals have different identity information, and the different identities do not meet the requirements of all services when roaming in the unified service platform, the terminal is required to provide the identity information when the terminal registers, including Ordinary users or administrator users are information such as students, staff, or seniors.

Step 103: Compare the identity information registered by the terminal with the identity requirement of the service to the terminal, and form a preliminary terminal service mapping table.

In this step, the terminal identity information obtained in step 102 is compared with the identity requirement information of the service obtained by the terminal in step 101. Before the decision, all the terminals have the right to roam the whole network by default. After the decision, the services that do not meet the identity of the terminal are deleted from the service access list of the terminal to form a preliminary terminal service mapping table. Decision-making methods include elimination method, ring method, classification method, and so on.

Step 104: The organization performs unified digital authentication on the terminal in the terminal group, and obtains the capability of the terminal. Information.

In this step, all the terminals in the terminal group are organized to log in for the first time by issuing a digital certificate, and the identity of the terminal is confirmed by digital information such as a password, and the capability information of the terminal is obtained. The digital certificate is based on the existing digital certificate technology, and adds a collection of capability information of the terminal. Identity authentication Using unified group authentication, you can improve authentication efficiency. At the same time, the digital certificate function has been extended to support the collection of terminal capabilities, providing sufficient information for the terminal capability decision provided in step 105.

Step 105: Compare the obtained terminal capability information with the capability requirement information of the service to the terminal, form a final terminal service mapping table, and authorize the terminal.

In this step, the terminal capability information obtained in step 104 is compared with the capability requirement information of the service obtained by the terminal in step 101. The preliminary terminal service mapping table formed in step 103 is determined according to the terminal capability, and the services conforming to the identity and capability of the terminal are filtered and filtered to form a final terminal service mapping table, and the terminal is uniformly authorized. Unified authorization means that the terminal service mapping table is sent to the gateway through the combination with the gateway, and then the gateway authorizes the terminal in the group.

Step 106: Determine whether there is a service update. If there is an update, perform steps 107 and 108. If there is no update, perform step 109 directly.

In this step, since the release of the development of the service is dynamic, there may be a new service generation, upgrade, or revocation at any time. If there is a service update, steps 107 and 108 are required to regenerate the terminal service mapping table and The terminal re-authorizes.

Step 107: Update the terminal service mapping table.

In this step, after obtaining the new service registration information, the new terminal service mapping table is automatically generated according to the identity information and capability information of the terminal obtained in steps 102 and 104, and the original terminal service mapping table is replaced.

Step 108, re-authorize and notify the terminal.

In this step, the changed terminal is re-authorized according to the newly generated terminal service mapping table in step 107, and the terminal is notified.

Step 109: Receive a service access request of the terminal.

Step 110: Determine, according to the terminal service mapping table, whether the terminal has access rights, if not Step 111 is performed if access is available, and step 112 is performed if access is available.

In this step, the terminal service mapping table in step 105 or step 107 is invoked to query whether the terminal has the right to access the service. If not, step 111 is performed, and if access rights are available, step 112 is performed.

Step 111: When the terminal does not have the access right, block the access and notify the terminal that the access right is not available, and the process ends.

In this step, when the terminal requests access to the service without having access rights, the terminal blocks the access and notifies the terminal that the access right is not available. The case where there is no access right includes: The service does not exist after the service update, and the corresponding service option cannot be found in the mapping table; on the other hand, malicious access may be caused due to attack or destructiveness of the terminal. By judging the access rights, the above insecurities can be effectively eliminated.

Step 112: Submit a service access request of the terminal to an application server.

In this step, the service access request of the terminal is sent to the corresponding application server, and the response of the application server is awaited.

Step 113: After obtaining the response from the application server, the terminal accesses the service and ends. The execution sequence between the above steps 106-108 and steps 109-113 may be changed, that is, steps 109-113 are performed first, and then steps 106-108 are performed; in addition, steps 106-108 and steps 109-113 may be performed as many times as needed. Execution, steps 106-108 are performed when the service update occurs, and steps 109-113 are performed when the service request of the terminal is received.

In this step, after the response of the application server is obtained, a link between the terminal and the service is formed, and the terminal accesses the service.

Through the foregoing method, the terminal group formed by the heterogeneous terminal can perform identity registration, capability information collection, service authority decision and generation, and access control, thereby ensuring the security of the access and improving the efficiency of registration and authentication.

Embodiment 2

This embodiment provides a unified management and control platform for a ubiquitous terminal, including: The service registration module is configured to: receive a registration request of the application server, register the service of the application server, and obtain an identity and capability requirement of the service to the terminal;

The mapping module is configured to: receive a registration request of the terminal group, obtain identity information and capability information of each terminal in the terminal group, and establish a terminal according to the identity information and capability information and the identity and capability requirements of the service to the terminal a service mapping table, where the terminal service mapping table indicates a mapping relationship between the terminal and a service that can be accessed by the terminal;

The terminal authorization module is configured to: authorize each terminal to access the services it can access.

In an alternative of the embodiment, the mapping module includes: a terminal registration module and a terminal authentication module, where:

In an alternative of this embodiment, the platform further includes a terminal rights management module, where:

The terminal authentication module is further configured to: send the terminal service mapping table to the terminal authority management module;

The terminal rights management module is configured to: after the service update, update the terminal service mapping table according to the identity information and capability information of each terminal in the terminal group, and the updated service to the identity and capability requirements of the terminal, and When the terminal service mapping table is changed, the terminal is re-authorized for the changed terminal.

In an alternative of the embodiment, the platform further includes a terminal access control module, configured to: after receiving the service access request of the terminal in the terminal group, determine, according to the terminal service mapping table, Whether the terminal has access rights, and if so, sends the service access request To the corresponding application server, if not, block access by the terminal.

In an alternative of the embodiment, the authorization module is further configured to: upload the identity information of the terminal having the service access authority, or the identity and capability information to the corresponding application server.

In an alternative of the embodiment, the platform may further include a gateway, configured to form a heterogeneous terminal group to form a heterogeneous terminal group, and conveniently perform the terminal registration module, the terminal authentication module, the terminal authorization module, and the terminal authority. The interaction between the management module and the terminal access control module.

The device is illustrated by an example below. As shown in Figure 2, this example provides a unified management and control platform. The platform is built between the terminal group and the application server, and provides a solution for forming a secure and reliable mapping table between the ubiquitous terminal and the ubiquitous service. . The unified management and control platform 10 includes: a service registration module 11, a terminal registration module 12, a terminal authentication module 13, a terminal authorization module 14, a terminal rights management module 15, a terminal access control module 16, and a gateway 17, wherein:

The service registration module 11 is configured to: communicate with the ubiquitous service layer, the terminal unified registration module, and the terminal unified authentication module, and respond to the service registration request, provide an API interface for the service registration request and a registration API interface for the service layer, and register the terminal. Module and terminal authentication modules provide the information needed for decision making. The service layer can request service registration by calling the API interface. After obtaining the response, the service can register the service and submit the requirements for the identity and capability of the terminal. The information obtained by the service registration module 11 can be called when the terminal is uniformly registered and authenticated.

Terminal Registration Module 12: Set to: Uniform registration for the terminal. The module can communicate with the gateway 17 through the registration interface, respond to the registration request sent by the gateway, and receive the identity information of the terminal group from the gateway. At the same time, the module also calls the existing service to the terminal identity request from the service registration module 11. The information, the decision generates a preliminary terminal service mapping table, and transmits the registration information and the terminal service mapping table to the terminal authentication module 13.

Terminal Authentication Module 13: Set to: Unified authentication for the terminal. The module can communicate with the gateway 17 through the authentication interface, and issue a digital certificate to the gateway 17. The organization gateway 17 logs in to the terminal accessing the gateway for the first time, collects login information of all terminals in the network through the gateway 17, and performs proofreading with the registration information. . At the same time, the module also obtains the capability information of all the terminals in the network from the gateway 17, invokes the information about the terminal capability in the service registration module 11, and determines the final terminal service mapping table. The terminal service mapping table is delivered to the terminal authorization module 14.

Terminal Authorization Module 14: Set to: Upload the terminal authorization and authorization information connected to the gateway 17. The module sends the terminal service mapping table generated by the terminal authentication module 13 to the gateway 17, and organizes the gateway 17 to perform unified authorization on the terminals in the network, and also extracts the identity and capability information of the terminals registered in each service. The service center is used to upload the terminal information that has the service authority to the corresponding application server. In addition, in order to facilitate access control, the module also passes the authorized information (authorized information including the terminal service mapping table) to the terminal rights management module 15.

The terminal rights management module 15: is set to: receive a notification of the service server update, update the terminal service mapping table, and notify the terminal. The module provides a notification interface for the service update for the ubiquitous service layer. When the service layer application server is upgraded, updated, or revoked, the API interface can be called to notify the terminal authority management module. After obtaining the update information, the terminal rights management module regenerates the terminal service mapping table. The terminal notifies the change information of the terminal service through the query and notification interface, and the terminal can also query the authority according to the requirement.

The terminal access control module 16: is set to: respond to the service access request of the terminal and notify the application server to have a service access request of the terminal. The terminal may invoke an access request API to request access to the service. After responding to the request, the terminal access control module 16 retrieves the latest permission information from the terminal rights management module 15 to confirm whether the access right of the service is available. Then notify the corresponding application server to provide services for the terminal.

The gateway 17 is configured to: manage the accessed terminal, and is responsible for communication with the terminal registration module 12, the terminal authentication module 13, and the terminal authorization module 14, and the organization terminal registers and integrates the identity information of the terminal to be uniformly registered to the terminal registration module 12, The capability information of all the terminals in the network to log in and integrate the terminal is uploaded to the terminal authentication module 13. After obtaining the authorization of the terminal authentication module 13, the unified authorization information is distributed to each terminal in the network.

Embodiment 3

In the following, in conjunction with the unified management and control platform structure shown in FIG. 2, a method for uniformly registering, authenticating, authorizing, and accessing the ubiquitous terminal by using the unified management and control platform in the embodiment of the present invention is described in detail. As shown in 3, the process includes the following steps: Step 301: The ubiquitous service layer performs service registration with the unified management and control platform and submits the identity and capability requirements of the terminal to the service registration module.

Step 302: The ubiquitous terminal submits a registration request to the unified management and control platform.

Step 303: The unified management and control platform organizes the terminal to register after responding to the registration request. Step 304: The ubiquitous terminal submits the registration information to the gateway of the unified management and control platform, and is uploaded by the gateway to the terminal registration module.

Step 305: The unified management and control platform organizes the terminal to log in for the first time and issue a digital certificate. Step 306: The terminal logs in and uploads the capability information to the gateway through the digital certificate, and the gateway transmits the capability information to the terminal authentication module.

Step 307: The unified management and control platform extracts terminal information authorized by each service and uploads the information to the corresponding application server.

Step 308: The unified management and control platform notifies the authorization information obtained by the terminal in the network through the gateway.

Step 309: If there is a service update notification, the application server notifies the unified management and control platform through the service update notification interface.

Step 310: After the unified management and control platform regenerates the terminal service mapping table, notify the terminal permission update information.

Step 311: The terminal submits a service access request to the unified management and control platform.

Step 312: After confirming that the terminal has the access right, the unified management and control platform notifies the application server that there is a terminal service access request.

Step 313: The application server serves the terminal after responding to the access request.

Embodiment 4

FIG. 4 is a schematic diagram of an embodiment of unified registration, authentication, authorization, and access control by using the method of the embodiment of the present invention.

As shown in Figure 4, a heterogeneous terminal group consisting of a computer, a mobile phone, a PDA (Personal Digital Assistant), a Pad (tablet), a camera, a copier, a printer, etc., needs to access the pan. In the business, such as data communication, printing business, Internet business, streaming media business, social, mail, file sharing and other services, the establishment of a unified management and control platform, can achieve unified registration, authentication and authorization of heterogeneous terminals, And control it to achieve secure access to ubiquitous services. The unified management and control platform includes registration, authentication, authorization servers, relational databases, communication servers, and gateways. The registration, authentication, and authorization server implement the functions of the terminal registration module, the service registration module, the terminal authentication module, and the terminal authorization module, the relational database implements the function of the terminal authority management module, and the communication server implements the function of the terminal access control module.

In summary, in order to improve the registration and authentication efficiency of the ubiquitous terminal and the security of the access, the present application provides a unified management and control method and platform, which can uniformly register and authenticate the terminal group formed by the heterogeneous terminal. And empower, and achieve control of terminal rights management and business access, improve efficiency and security.

One of ordinary skill in the art will appreciate that all or a portion of the above steps may be accomplished by a program instructing the associated hardware, such as a read-only memory, a magnetic disk, or an optical disk. Alternatively, all or part of the steps of the above embodiments may also be implemented using one or more integrated circuits. Correspondingly, each module/unit in the above embodiment may be implemented in the form of hardware or in the form of a software function module. The invention is not limited to any specific form of combination of hardware and software.

Industrial applicability

System, complete unified authentication, registration, authorization, rights management and access control functions. The security of service access is ensured under the dual authentication of identity and capability. At the same time, the difference between heterogeneous terminals can be effectively shielded, and the efficient registration and authentication of heterogeneous terminals is realized.

Claims

claims

1. A unified management and control method for ubiquitous terminals, including:

The unified management and control platform receives the registration request of the application server, registers the business of the application server, and obtains the identity and capability requirements of the terminal for the business;

The unified management and control platform receives the registration request of the terminal group, obtains the identity information and capability information of each terminal in the terminal group, and establishes based on the identity information and capability information and the identity and capability requirements of the terminal for the service. Terminal service mapping table. The terminal service mapping table indicates the mapping relationship between the terminal and the services it can access, and authorizes each terminal to access the services it can access.

2. The method of claim 1, wherein, said obtaining the identity information and capability information of each terminal in the terminal group is based on the identity information and capability information and the identity and capability requirements of the terminal for the service, Establishing a terminal service mapping table includes:

Compare the identity information of each terminal with the identity requirements of the terminal for the service, and generate a preliminary terminal service mapping table;

Issue digital certificates to the terminals in the terminal group and obtain the capability information uploaded by each terminal through the digital certificate;

Compare the capability information of each terminal with the capability requirements of the terminal by the service, filter the preliminary terminal service mapping table, and generate a final terminal service mapping table.

3. The method of claim 1, further comprising:

After updating the service, the unified management and control platform updates the terminal service mapping table according to the identity information and capability information of each terminal in the terminal group, as well as the updated service's identity and capability requirements for the terminal, and When the terminal service mapping table is changed, service authorization is performed again on the changed terminal.

4. The method of claim 1, further comprising:

After receiving the service access request of the terminal in the terminal group, the unified management and control platform determines whether the terminal has access rights according to the terminal service mapping table. If so, then The service access request is sent to the corresponding application server, and if there is no corresponding application server, access by the terminal is blocked.

5. The method of claim 1, further comprising: the unified management and control platform uploading the identity information of the terminal with business access rights, or the identity and capability information to the corresponding application server.

6. The method according to any one of claims 1 to 5, wherein the terminal group includes one or more heterogeneous terminals.

7. A ubiquitous terminal unified management and control platform, including:

A business registration module, which is configured to: receive a registration request from an application server, register the business of the application server, and obtain the identity and capability requirements of the terminal for the business;

A mapping module, which is configured to: receive a registration request from a terminal group, obtain the identity information and capability information of each terminal in the terminal group, and establish based on the identity information and capability information and the identity and capability requirements of the terminal for the service. Terminal service mapping table, the terminal service mapping table indicates the mapping relationship between the terminal and the services it can access; and

8. The platform of claim 7, wherein the mapping module includes: a terminal registration module and a terminal authentication module, wherein:

The terminal registration module is configured to: organize the terminals in the terminal group to register, obtain the identity information of each terminal from the registration information submitted by each terminal; compare the identity information of each terminal with the identity requirements of the terminal for the business Compare, generate a preliminary terminal service mapping table and send it to the terminal authentication module;

The terminal authentication module is configured to: issue digital certificates to terminals in the terminal group, obtain the capability information uploaded by each terminal through the digital certificate; compare the capability information of each terminal with the capability requirements of the terminal by the service Compare and filter the preliminary terminal service mapping table to generate a final terminal service mapping table.

9. The platform of claim 8, wherein the platform further includes a terminal authority management module, wherein:

The terminal authentication module is also configured to send the terminal service mapping table to the terminal authority. Limited management module;

The terminal authority management module is configured to update the terminal service mapping table according to the identity information and capability information of each terminal in the terminal group and the identity and capability requirements of the terminal by the updated service after the service is updated, And when the terminal service mapping table is changed, service authorization is performed again on the changed terminal.

10. The platform of claim 7, wherein the platform further includes a terminal access control module, which is configured to: after receiving a service access request from a terminal in the terminal group, determine according to the terminal service mapping table Whether the terminal has access rights, if so, the service access request is sent to the corresponding application server; if not, access by the terminal is blocked.

11. The platform of claim 7, wherein the authorization module is further configured to: upload the identity information of the terminal with business access rights, or the identity and capability information, to the corresponding application server.

12. The platform according to any one of claims 7 to 11, wherein the terminal group includes one or more heterogeneous terminals.