WO2015131642A1

WO2015131642A1 - Method and device for controlling access permission on terminal device

Info

Publication number: WO2015131642A1
Application number: PCT/CN2014/095415
Authority: WO
Inventors: 梁晓辉
Original assignee: 中兴通讯股份有限公司
Priority date: 2014-09-24
Filing date: 2014-12-29
Publication date: 2015-09-11
Also published as: CN105512524A

Abstract

Provided are a method and device for controlling access permission on a terminal device, the method comprising: obtaining the number of operations of inputting wrong unlocking information on the terminal device; when determining that the number of the operations is greater than or equal to a preset upper alarm threshold, sending an alarm message to a device bound to the terminal device; receiving a control instruction sent by the bound device after the bound device receives the alarm message, and controlling the terminal device according to the control instruction to enter a user mode corresponding to the control instruction, different user modes having different access permissions. The present invention ensures security of personal information on a user terminal through the trusted remote control mechanism when the terminal is in an unsafe state or when the user does not want the terminal to be operated by other users, and can also automatically identify unauthorized user operations and authorized users. The invention can be used in any terminal, and not only ensures security of terminal user information, but also ensures normal user operation of the terminal.

Description

Method and device for controlling access rights on terminal devices

Technical field

The present invention relates to the field of mobile terminals, and in particular, to a method and apparatus for controlling access rights on a terminal device.

Background technique

With the popularization and rapid development of mobile terminals, the functions of the system are more and more suitable for people's daily life and office needs, especially providing a good platform for users to conduct various communication, communication and business platform transactions. That is, the terminal will contain a lot of important information of the user, such as contact information, contact content, personal account and other private information; thus, personal information and safe use on the terminal is particularly important for the user.

At present, the anti-theft software is also installed on the terminal, but these anti-theft softwares have the following defects: the anti-theft software function is mainly embodied in the anti-theft; and the main monitoring mobile phone is stolen and carried out after the card is replaced, but the terminal is not stolen, but The location where the terminal is currently located is not visible to the terminal user; when the terminal user does not want to be used by others, how does the terminal handle the terminal information in this scenario is not protected; and the existing installation security software lacks The terminal personal information is processed hierarchically.

In summary, the anti-theft software installed on the existing terminal cannot fully guarantee the security of the user information.

Summary of the invention

In order to overcome the above problems of the anti-theft software, a method and apparatus for controlling access rights on a terminal device are provided.

In order to solve the above technical problem, the present invention adopts the following technical solutions:

According to an embodiment of the present invention, a method for controlling access rights on a terminal device is provided, the method comprising: acquiring an operation number of inputting an error unlocking information on a terminal device; determining that the number of operations is greater than or equal to a preset Sending an alarm message to the binding device bound to the terminal device; receiving a control command sent by the binding device after receiving the alarm message, and controlling the control device according to the control command The terminal device enters a user mode corresponding to the control instruction, wherein different user modes have different access rights.

Optionally, before acquiring the number of operations of inputting the error unlocking information on the terminal device, the method further includes: acquiring binding information preset by the user, where the binding information includes: binding bound to the terminal device The address information of the device, the upper limit of the alarm security, and at least one control command for controlling the terminal device to enter different modes; correspondingly, the number of operations for inputting the error unlocking information on the terminal device is specifically: receiving the location After the binding information is described, the number of operations for inputting the error unlocking information on the terminal device is obtained in real time.

Optionally, after obtaining the number of operations of inputting the error unlocking information on the terminal device, the method further includes: if the difference between the preset alarm security upper limit value and the real-time acquired operation time is preset When the difference is obtained, the location information of the terminal device, the number of operations of inputting the error unlocking information, and a preset control command are acquired; the location information of the terminal device, the number of operations of inputting the error unlocking information, and a preset control instruction are generated. The alarm message.

Optionally, the sending, by the binding device that is bound to the terminal device, the preset alarm message, specifically: setting the unlocking setting information of the terminal device to be invalid; The binding device bound by the terminal device sends a preset alarm message; and the process of receiving the control command sent by the binding device in real time on the terminal device is started.

Optionally, the control instruction is: a control mode of a guest mode, a control instruction of a delete mode, a control instruction of a lock mode, or a control instruction of a full-right mode; accordingly, the controlling the terminal device according to the control instruction Entering the user mode corresponding to the control command, specifically: if the control command is a guest mode control command, controlling the terminal device to enter a guest mode; if the control command is a delete mode control command, controlling the terminal device to enter The mode of deleting the pre-specified resource information; if the control instruction is the control command of the lock mode, controlling the terminal device to enter the permanent lock mode; if the control command of the full-right mode, controlling the terminal device to enter the full authority mode.

Optionally, the method further includes: after receiving the control instruction sent by the binding device, if the user mode corresponding to the control instruction is not matched, continuing to bind the binding device to the terminal device Send an alarm message.

According to another embodiment of the present invention, there is provided an apparatus for controlling access rights on a terminal device, the apparatus comprising: a detecting module configured to acquire an operation number of inputting an error unlocking information on the terminal device; and an alarm module configured to When it is determined that the number of operations is greater than or equal to a preset alarm security upper limit, sending an alarm message to the binding device bound to the terminal device; and the control module is configured to receive the binding device to receive the And a control instruction sent after the alarm message, and controlling, according to the control instruction, the terminal device to enter a user mode corresponding to the control instruction, wherein different user modes have different access rights.

Optionally, the foregoing apparatus further includes: a preset module, configured to acquire binding information preset by the user, where the binding information includes: address information of the binding device bound to the terminal device, and an upper limit of alarm security The value and at least one control command for controlling the terminal device to enter a different mode.

Optionally, the device further includes: a data acquiring module, configured to acquire the terminal device when a difference between a preset alarm security upper limit value and a real-time acquired operation time is a preset difference The location information, the number of operations of inputting the error unlocking information, and the preset control command; the alarm generating module is configured to generate the alarm by using the location information of the terminal device, the number of operations of inputting the error unlocking information, and a preset control command. Message.

Optionally, the foregoing alarm module includes: an invalidation unit, configured to set the unlocking setting information of the terminal device to be invalid; and the information sending unit is configured to bind the binding device to the terminal device by using a short message Sending a preset alarm message; the activation unit is configured to enable a process of receiving a control instruction sent by the binding device in real time on the terminal device.

Optionally, the device further includes: a retransmission module, configured to: after receiving the control command sent by the binding device, if the user mode corresponding to the control command is not matched, continue to be tied to the terminal device The binding device sends an alarm message.

The beneficial effects of the present invention are: detecting the number of screen unlocking errors in real time in the embodiment of the present invention, generating the alarm information content by comparing the number of screen unlocking errors with the security value of the alarm information, and making the content of the alarm information while transmitting the content of the alarm information The screen unlocking function is automatically disabled; in turn, the user mode entered by the terminal is activated by reading and analyzing the control command sent by the binding party to ensure the security of the personal information in the terminal.

DRAWINGS

1 is a schematic diagram of a method for controlling access rights on a terminal device in an embodiment of the present invention;

2 is a schematic diagram of sending alarm information to a binding device bound to a terminal according to an embodiment of the present invention;

3 is a second schematic diagram of a method for controlling access rights on a terminal device in an embodiment of the present invention;

4 is a third schematic diagram of a method for controlling access rights on a terminal device according to an embodiment of the present invention;

FIG. 5 is a fourth schematic diagram of a method for controlling access rights on a terminal device according to an embodiment of the present invention; FIG.

FIG. 6 is a schematic diagram showing an application of an embodiment of the present invention in an actual scenario;

FIG. 7 is a schematic diagram of an apparatus for controlling access rights on a terminal device according to an embodiment of the present invention;

FIG. 8 is a schematic diagram of an alarm module in an embodiment of the present invention.

detailed description

The present invention will be described in detail below with reference to the drawings and specific embodiments.

As shown in FIG. 1 , one of the flowcharts of the method for controlling access rights on a terminal device according to an embodiment of the present invention includes the following steps:

Step S100: Obtain an operation sequence of inputting an error unlocking information on the terminal device.

It should be noted that the terminal device detects the unlocking operation in real time, and the acquired number of operations is also real-time data.

Step S200: Send an alarm message to the binding device bound to the terminal device when the number of operations is greater than or equal to the preset alarm security upper limit value;

It should be noted that the alarm information includes: current location information of the terminal device, the number of operations of inputting the error unlocking information, and preset control commands, wherein the current location information of the terminal device can be acquired by the GPS module on the terminal device.

Step S300: Receive a control instruction sent by the binding device after receiving the alarm message, and control, according to the control instruction, the terminal device to enter a user mode corresponding to the control instruction, where different user modes have different access rights.

It should be noted that the control command is: a guest mode control command, a delete mode control command, a lock mode control command, or a full-right mode control command; each command can cause the terminal to enter a different user mode, specifically:

If the control command is a guest mode control command, the terminal device is controlled to enter the guest mode; in the guest mode, some specific application software on the terminal device can be used, and all the information cannot be viewed, and the specific software used in the guest mode is preset by the user. . For example, the browser on the terminal device can be used in advance, and the phone book and the short message cannot be viewed. When the user enters the guest mode, the browser can be used but the phone book and the short message cannot be viewed.

If the control command is a control command of the delete mode, the control terminal device enters a mode in which the pre-designated resource information has been deleted; in the delete mode, the terminal deletes part of the resource information, such as information related to personal privacy, photos, address books, and short messages. , mail, etc., this part of the resource information can be preset by the user.

If the control command is the lock mode control command, the control terminal device enters the permanent lock mode; in the lock mode, the terminal unlock information is invalid, no matter how the unlock information is input, the terminal will not be unlocked, but can receive the control command and press the control command. Take action.

If the control command of the full-right mode, the control terminal device enters the full-right mode; in the full-right mode, the user can unlock the terminal by inputting any unlocking information.

2 is a specific step of sending an alarm message to a binding device bound to a terminal device in step S200 of FIG. 1 :

Step S201, setting unlocking setting information of the terminal device to be invalid;

It should be noted that when the unlock setting information of the terminal device is set to be invalid, the user cannot unlock any unlock information.

Step S202: Send a preset alarm message to the binding device bound to the terminal device by using a short message.

It should be noted that sending the alarm information by means of a short message is a preferred manner, and of course, it is not limited thereto, and the alarm information may also be sent by email.

Step S203: Enable a process of receiving a control command sent by the binding device in real time on the terminal device.

It should be noted that, before the terminal sends the alarm information, the process of receiving the control command sent by the binding device is closed.

As shown in FIG. 3, different from FIG. 1 in the embodiment of the present invention, between step S100 and step S200, the method further includes the following steps:

Step S400: If the difference between the preset alarm security upper limit value and the real-time acquired operation time is a preset difference, acquiring the location information of the terminal device, the operation times of inputting the error unlocking information, and the preset control instruction;

It should be noted that the preset difference is an arbitrary value. Preferably, the preset difference is 1, that is, when the difference between the preset alarm security upper limit value and the real-time acquired operation number is 1, the terminal is acquired. The location information of the device, the number of operations for inputting the error unlock information, and the preset control commands.

In step S500, the location information of the terminal device, the number of operations of inputting the error unlocking information, and the preset control command generate an alarm message.

As shown in FIG. 4, in the embodiment of the present invention, unlike FIG. 1, before the step S100, the method further includes the following steps:

Step S600: Obtain binding information preset by the user, where the binding information includes: address information of the binding device bound to the terminal device, an alarm security upper limit value, and at least one control instruction for controlling the terminal device to enter different modes;

It should be noted that the binding information is arbitrarily added by the user.

As shown in FIG. 5, in the embodiment of the present invention, unlike FIG. 1, after step S300, the method further includes the following steps:

Step 700: After receiving the control command sent by the binding device, if the user mode corresponding to the control command is not matched, the device continues to send an alarm message to the binding device bound to the terminal device.

It should be noted that the binding device sends a control command to the terminal device after receiving the alarm information. When the control command sends an error, the terminal device continues to send the alarm information without being locked until the correct control command is received.

FIG. 6 is a schematic diagram of an application of an embodiment of the present invention in an actual scenario;

First, the user presets binding information, and the binding information includes: address information of the binding device bound to the terminal device (which may be a mobile phone number or an email address), an alarm security upper limit value M, and at least one used for control. The terminal device enters a control command of a different mode; the terminal device detects the unlocking information in real time, and records the number of times the error is unlocked by K; when the value of the M-K is less than 1, the terminal device enters the full-right mode to unlock the terminal device; When the value of -K is equal to 1, the terminal device calls the positioning module to package and prepare the information of the location of the terminal device and the K value, and the terminal device enters the full-right mode to unlock the terminal device; when M=K, the unlocking setting information of the terminal device If it is set to invalid, the user can not unlock any unlock information. The current K value, the location of the terminal, and the preset control command are sent to the binding device. Preferably, the short message is sent to the binding device to enable the terminal device. The process of receiving the control command sent by the binding device in real time; the binding device sends a control instruction to the terminal device; Side apparatus receives the binding apparatus to control transmission and parsing instructions, matched to a predetermined control command, enter the corresponding mode, the following are a few common mode:

If the control command is a guest mode control command (u(user)), the terminal device is controlled to enter the guest mode; in the guest mode, some specific application software on the terminal device can be used, and all the information cannot be viewed, and the specific mode used in the guest mode is used. The software is pre-set by the user. For example, a browser on the terminal device can be set in advance, If the phone book or SMS cannot be viewed, the browser can be used while the user enters the guest mode but the phone book and text message cannot be viewed. ;

If the control command is a delete mode control command (del(secret)), the control terminal device enters a mode in which the pre-designated resource information has been deleted; in the delete mode, the terminal deletes part of the resource information, and the part of the resource information may be a user advance Set

If the control command is a lock mode control command (lock (device)), the terminal device is controlled to enter a permanent lock mode; in the lock mode, the terminal unlock information is invalid, and the terminal will not be unlocked anyway regardless of how the unlock information is input;

If the control command (all(limits)) of the full-right mode, the control terminal device enters the full-right mode; in the full-right mode, the user can unlock the terminal by inputting any unlocking information;

If the control command received by the terminal device does not match the preset control command, the terminal device continues to send the K value, the location of the terminal, and the preset control command to the binding device.

As shown in FIG. 7, a schematic diagram of an apparatus for controlling access rights on a terminal device according to an embodiment of the present invention includes: a preset module 510, a detection module 520, a data acquisition module 530, an alarm generation module 540, an alarm module 550, a control module 560, and The re-issuing module 570 is configured to acquire binding information preset by the user, where the binding information includes: address information of the binding device bound to the terminal device, an alarm security upper limit value, and at least one used to control the terminal. The device enters a control command of a different mode; the detecting module 520 is configured to acquire the number of operations of inputting the wrong unlocking information on the terminal device; and the data acquiring module 530 is configured to set a difference between the preset alarm security upper limit value and the real-time acquired operation time. When the value is a preset difference, the location information of the terminal device, the number of operations of inputting the error unlocking information, and the preset control command are acquired; the alarm generating module 540 is configured to set the location information of the terminal device and the number of operations for inputting the error unlocking information. Generating an alarm message with a preset control command; the alarm module 550 is configured to determine that the number of operations is greater than or equal to When the alarm security upper limit is set, the alarm message is sent to the binding device bound to the terminal device; the control module 560 is configured to receive the control command sent by the binding device after receiving the alarm message, and control the terminal device to enter according to the control command. a user mode corresponding to the control command, wherein different user modes have different access rights; the retransmission module 570 is configured to continue to the user mode corresponding to the control command after receiving the control command sent by the binding device The binding device bound to the terminal device sends an alarm message.

If the control command is a guest mode control command, the terminal device is controlled to enter the guest mode; in the guest mode, the current user can use some functions of the terminal, which may be preset by the user.

If the control command is the control command of the delete mode, the control terminal device enters a mode in which the pre-designated resource information has been deleted; in the delete mode, the terminal deletes part of the resource information, and the part of the resource information may be preset by the user.

If the control command is the lock mode control command, the terminal device is controlled to enter the permanent lock mode; in the lock mode, the terminal unlock information is invalid, and the terminal will not be unlocked anyway regardless of how the unlock information is input.

8 is a schematic diagram of the alarm module 550 of FIG. 7. The alarm module 550 includes: an invalidation unit 551, an information transmission unit 552, and an activation unit 553; the invalidation unit 551 is configured to set the unlock setting information of the terminal device to be invalid; the information transmission unit 552 The method is configured to send a preset alarm message to the binding device bound to the terminal device by means of a short message; the startup unit 553 is configured to enable the process of receiving the control command sent by the binding device in real time on the terminal device.

It should be noted that when the unlocking setting information of the terminal device is set to be invalid, the user cannot unlock any unlocking information; sending the alarm information by means of a short message is a preferred method, and of course, it is not limited thereto, and may also be emailed. The alarm information is sent; before the terminal sends the alarm information, the process of receiving the control command sent by the binding device is closed.

The above is a preferred embodiment of the present invention, and it should be noted that those skilled in the art can also make several improvements and refinements without departing from the principles of the present invention. These improvements and refinements are also within the scope of the present invention. Inside.

Industrial applicability

According to the foregoing technical solution provided by the embodiment of the present invention, the number of screen unlocking errors is detected in real time, and the alarm information content is generated by comparing the number of screen unlocking errors with the security value of the alarm information, and the screen unlocking function of the terminal is simultaneously performed while transmitting the content of the alarm information. Automatically invalidate; further, by reading and analyzing the control commands sent by the binding party, the user mode entered by the terminal is started to ensure the security of the personal information in the terminal.

Claims

A method for controlling access rights on a terminal device, comprising:

Obtaining the number of operations for inputting the error unlocking information on the terminal device;

When it is determined that the number of operations is greater than or equal to a preset alarm security upper limit, sending an alarm message to the binding device bound to the terminal device;

Receiving a control instruction sent by the binding device after receiving the alarm message, and controlling, according to the control instruction, the terminal device to enter a user mode corresponding to the control instruction, where different user modes have different access rights .
The method of claim 1, wherein the method further comprises: before acquiring the number of operations of inputting the error unlocking information on the terminal device, the method further comprising:

Obtain binding information preset by the user, where the binding information includes: address information of the binding device bound to the terminal device, an alarm security upper limit value, and at least one control instruction for controlling the terminal device to enter different modes. ;

Correspondingly, the operation operation of obtaining the error unlocking information on the terminal device is specifically:

After receiving the binding information, the number of operations for inputting the error unlocking information on the terminal device is obtained in real time.
The method of claim 1, wherein after the number of operations of inputting the error unlocking information on the terminal device, the method further comprises:

If the difference between the preset alarm security upper limit value and the real-time acquired operation count is a preset difference, acquiring the location information of the terminal device, the operation times of inputting the error unlocking information, and the preset Control instruction;

The alarm message is generated by using the location information of the terminal device, the number of operations of inputting the error unlocking information, and a preset control command.
The method of claim 1, wherein the sending the preset alarm message to the binding device bound to the terminal device comprises:

Setting the unlock setting information of the terminal device to be invalid;

Sending a preset alarm message to the binding device bound to the terminal device by means of a short message;

And a process of receiving, in real time, the control instruction sent by the binding device on the terminal device.
The method according to claim 1, wherein the control instruction is: a guest mode control command, a delete mode control command, a lock mode control command, or a full authority mode control command;

Correspondingly, the controlling the terminal device to enter the user mode corresponding to the control instruction according to the control instruction comprises:

Controlling the terminal device to enter a guest mode if the control command is a guest mode control command;

If the control instruction is a control instruction of the deletion mode, controlling the terminal device to enter a mode in which the pre-specified resource information has been deleted;

If the control instruction is a control command of the lock mode, controlling the terminal device to enter a permanent lock mode;

If the control command of the full authority mode, the terminal device is controlled to enter the full authority mode.
The method of any of claims 1 to 5, wherein the method further comprises:

After receiving the control command sent by the binding device, if the user mode corresponding to the control command is not matched, the device continues to send an alarm message to the binding device bound to the terminal device.
A device for controlling access rights on a terminal device, the device comprising:

The detecting module is configured to obtain the number of operations for inputting the error unlocking information on the terminal device;

The alarm module is configured to send an alarm message to the binding device bound to the terminal device when determining that the number of operations is greater than or equal to a preset alarm security upper limit value;

a control module, configured to receive a control instruction sent by the binding device after receiving the alarm message, and control, according to the control instruction, the terminal device to enter a user mode corresponding to the control instruction, where different user modes Have different access rights.
The device of claim 7 wherein said device further comprises:

The preset module is configured to obtain the binding information preset by the user, where the binding information includes: address information of the binding device bound to the terminal device, an alarm security upper limit value, and at least one used to control the terminal device Enter control commands for different modes.
The device of claim 7 wherein said device further comprises:

The data acquisition module is configured to acquire the location information of the terminal device and input the error unlocking information when the difference between the preset alarm security upper limit value and the real-time acquired operation time is a preset difference value. Number of operations and preset control commands;

The alarm generating module is configured to generate the alarm message by using the location information of the terminal device, the number of operations of inputting the error unlocking information, and a preset control command.
The apparatus of claim 7, wherein the alarm module comprises:

An invalid unit, configured to set the unlock setting information of the terminal device to be invalid;

The information sending unit is configured to send, by using a short message, a preset alarm message to the binding device bound to the terminal device;

And a startup unit, configured to enable a process of receiving a control instruction sent by the binding device in real time on the terminal device.
The apparatus of any one of claims 7 to 10, wherein the apparatus further comprises:

The retransmission module is configured to, after receiving the control command sent by the binding device, continue to send an alarm message to the binding device bound to the terminal device if the user mode corresponding to the control command is not matched.