WO2016131277A1

WO2016131277A1 - Notification resource processing method, device and system

Info

Publication number: WO2016131277A1
Application number: PCT/CN2015/091123
Authority: WO
Inventors: 吴昊
Original assignee: 中兴通讯股份有限公司
Priority date: 2015-07-01
Filing date: 2015-09-29
Publication date: 2016-08-25
Also published as: CN106325087A

Abstract

Provided are a notification resource processing method, device and system. The method comprises: receiving, by a target common service entity (CSE), a request message transmitted by a registered CSE of an application entity (AE), wherein the request message carries an access permission indication indicating whether the AE is permitted to access the target CSE; creating or updating, by the target CSE and according to the request message, an AE notification resource, wherein the created or updated notification resource comprises an access permission indication attribute. The present invention addresses the technical problem in which an AE can only obtain control over a household device by accessing a registered CSE, allowing the AE to obtain control over a household device by accessing a target CSE.

Description

Notification resource processing method, device and system

Technical field

The present invention relates to the field of communications, and in particular to a method, device, and system for processing an advertisement resource.

Background technique

According to the existing Machine to Machine (M2M) architecture, an Application Entity (AE) is a logical unit for executing an M2M application. A Common Service Entity (CSE) is a management AE. Logic unit. CSEs include multiple types depending on where they are located, for example:

An application service node (CSE), which is an ASN-CSE, is a CSE on an application terminal, and can be used to manage an AE on the application terminal and perform data interaction between the AE and the network server.

2. The intermediate node CSE (Middle Node-CSE, referred to as MN-CSE) is a CSE on the gateway, which can be used to manage the AE connected to the gateway, implement data interaction between the AEs connected to the gateway, and represent The AE connected to the gateway performs data interaction with the web server;

3. The infrastructure node CSE (Infrastructure Node-CSE, referred to as IN-CSE) is the CSE on the network server.

The AE manages the AE by registering on the CSE. The CSE registered by the AE is called the registration CSE of the AE. After the registration is successful, the registration CSE creates resources locally for the AE to manage and store application-related data. The AE can only directly send and receive request and response messages with the registered CSE. AE can only be registered on one CSE.

In order to facilitate retrieval of an AE by other AEs or CSEs, the manner in which the original resources are advertised is also defined in the related art. By announcing the original resource, the AE can advertise itself to other target CSEs (non-registered CSEs), ie the AE advertises itself to the target CSE by registering the CSE. The process of advertising is to create an advertising resource on the target CSE corresponding to the resource of the AE on the registered CSE, for conveniently retrieving the AE according to the information of the advertised resource, and the advertising resource may be a subset of the original resource. In the advertisement process, the resource created by the AE on the registration CSE is called the original resource of the AE, and the resource corresponding to the original resource created on the notified target CSE is called the advertisement resource of the AE.

During the research, it was found that User A uses the application AE1 on the mobile phone as the controller of the home smart home to remotely control the home appliances. At this time, AE1 needs to register on the IN-CSE to send control requests to the home through the IN-CSE. On the appliance, but when user A returns home, in order to save data traffic, he does not want to continue to access the Internet to control the home appliances, but wants to control through the smart home gateway at home, however, according to the existing M2M architecture, AE1 can only be registered on one CSE, and can only send requests to the registered CSE, so the application AE1 on the user A's mobile phone cannot control the home appliance through the home gateway, and must use the data network to connect to the network for control.

Similarly, if the mobile application AE1 is first registered on the home gateway, after leaving home, it is impossible to remotely access the home appliance because it cannot be registered on the remote server. This makes the application scenario of smart home subject to A huge limit has been reached.

For the technical problem that the application entity in the related art can only access the registered public service entity for home device control, an effective solution has not been proposed yet.

Summary of the invention

The invention provides a method, a device and a system for processing an advertisement resource, so as to at least solve the technical problem that an application entity can only access a registered public service entity for home device control.

According to an aspect of the present invention, a method for processing an advertisement resource is provided, including: a target CSE receives a request message sent by a registration CSE of an AE, where the request message carries an access permission indication, and the access The permission indication is used to indicate whether the AE is allowed to access the target CSE; the target CSE creates or updates an advertisement resource of the AE according to the request message, where the created or updated advertisement resource includes access permission Indicates the attribute.

Optionally, in the case that the request message is an advertisement resource creation request message, the creating, by the target CSE, the advertisement resource of the AE according to the request message includes: the target CSE creating the AE And an advertised resource, where the attribute of the advertised resource includes: an access permission indication attribute created according to the access permission indication.

Optionally, if the request message is an advertisement resource update request message, the target CSE updating the advertisement resource of the AE according to the request message includes: the target CSE checks the created AE Whether the attribute of the advertisement resource includes: an access permission indication attribute; in a case where the attribute of the advertisement resource of the AE is determined to include an access permission indication attribute, the target CSE allows the access permission The value indicating the attribute is set to the value of the access permission indication.

Optionally, if the attribute of the advertised resource of the AE does not include the access permission indication attribute, the target CSE updating the advertised resource of the AE according to the request message further includes: And the target CSE creates an access permission indication attribute in the advertisement resource, and sets a value of the access permission indication attribute to a value of the access permission indication.

Optionally, after the target CSE creates or updates the advertisement resource of the AE according to the request message, the method further includes: the target CSE receiving another request message of the AE; the target The CSE queries an access permission indication attribute in the advertisement resource of the AE; and in a case that the value of the access permission indication attribute is indicated as allowing access, the target CSE sends an acceptance of the another request message. The requested response message to the AE.

Optionally, after the target CSE receives the another request message of the AE, the target CSE sends a response message rejecting the request of the another request message to the AE: the advertised resource of the AE does not exist on the target CSE; the access permission indication attribute does not exist in the advertised resource of the AE that has been created on the target CSE; The value of the access permission indication attribute in the advertisement resource of the AE is indicated as not allowing access; the target CSE root authority policy is to verify that the AE does not have access to the target CSE.

Optionally, the request message sent by the target CSE to receive the registration CSE of the AE includes: the note The CSE receives the request message for requesting to create or update the advertisement resource on the target CSE; the registration CSE sends a request message carrying the access permission indication to the target CSE.

Optionally, before the registration CSE sends the request message carrying the access permission indication to the target CSE, the method further includes: the registration CSE, according to the permission policy, verifying whether the AE meets creation or Updating the authority of the advertisement resource of the AE on the target CSE; wherein, in the case of verifying that the AE satisfies the authority to create or update the advertisement resource of the AE on the target CSE, The registration CSE sends a request message carrying the access permission indication to the target CSE.

Optionally, the request message sent by the registration CSE further carries a security certificate for verifying the legality of the registered CSE identity.

According to another aspect of the present invention, a notification resource processing apparatus is further provided, which is applied to a target CSE, and includes: a receiving module, configured to receive a request message sent by a registration CSE of an AE, where the request message carries An access permission indication, the access permission indication is used to indicate whether the AE is allowed to access the target CSE; and the processing module is configured to create or update an advertisement resource of the AE according to the request message, where The updated notification resource includes an access permission indication attribute.

Optionally, the processing module is configured to: when the request message is an advertisement resource creation request message, create the advertisement resource of the AE, where the attribute of the advertisement resource includes: according to the The access permission indication attribute created by the admission indication.

Optionally, the processing module is configured to: if the request message is an advertisement resource update request message, check whether an attribute of the advertisement resource of the created AE includes: an access permission indication attribute; If the result of the judgment is that the attribute of the advertisement resource of the AE includes an access permission indication attribute, the value of the access permission indication attribute is set to a value of the access permission indication.

Optionally, the processing module is further configured to: create an access permission indication attribute in the advertisement resource, if the attribute of the advertisement resource of the AE does not include an access permission indication attribute, And setting the value of the access permission indication attribute to the value of the access permission indication.

Optionally, the device further includes: another request message receiving module, configured to receive another request message of the AE; and a query module, configured to query an access permission indication attribute in the advertisement resource of the AE And a response module configured to, in a case where the value of the access permission indication attribute is indicated as allowing access, the target CSE transmitting a response message requesting the request of the another request message to the AE.

Optionally, the response module is further configured to send a response message rejecting the request of the another request message to the AE in a case where the notification resource of the AE does not exist on the target CSE; The access permission indication attribute does not exist in the advertisement resource of the AE that has been created on the target CSE; the value of the access permission indication attribute in the advertisement resource of the AE that has been created on the target CSE is represented by To prevent access; the target CSE verifies that the AE does not have access to the target CSE according to the rights policy.

According to another aspect of the embodiments of the present invention, an advertisement resource processing system is further provided, including: an AE, a registration CSE, The target CSE, wherein the target CSE includes the above-mentioned announcement resource processing device.

Optionally, the registering CSE includes: a registration CSE receiving module, configured to receive a request message that the AE is used to request to create or update the advertisement resource on the target CSE; and register a CSE sending module, and set to send and carry There is a request message for the access permission indication to the target CSE.

Optionally, the registration CSE further includes: a verification module, configured to verify, according to the permission policy, whether the AE meets the authority to create or update the advertisement resource of the AE on the target CSE; wherein, the verification The registration CSE sending module sends a request message carrying the access permission indication to the target, if the AE satisfies the right to create or update the advertisement resource of the AE on the target CSE. CSE.

Optionally, the request message sent by the registration CSE sending module further carries a security certificate for verifying the legality of the registered CSE identity.

The request message sent by the CSE of the AE is received by the target CSE, where the request message carries an access permission indication, the access permission indication is used to indicate whether the AE is allowed to access the target CSE, and the target CSE is requested according to the request. The message creates or updates the AE's advertised resource, where the created or updated advertised resource includes the access permission indication attribute, which solves the technical problem that the application entity can only access the registered public service entity for home device control, so that the application The entity can control the home device by accessing the target public service entity.

DRAWINGS

The drawings described herein are intended to provide a further understanding of the invention, and are intended to be a part of the invention. In the drawing:

1 is a flowchart of a method for processing an advertisement resource according to an embodiment of the present invention;

2 is a schematic structural diagram of an advertisement resource processing apparatus according to an embodiment of the present invention;

FIG. 3 is a schematic diagram of an optional structure of an advertisement resource processing apparatus according to an embodiment of the present invention; FIG.

4 is a schematic structural diagram of an announcement resource processing system according to an embodiment of the present invention;

5 is a flow diagram of a method of accessing a CSE by an advertising resource in accordance with an alternate embodiment of the present invention.

detailed description

The invention will be described in detail below with reference to the drawings in conjunction with the embodiments. It should be noted that the embodiments in the present application and the features in the embodiments may be combined with each other without conflict.

It is to be understood that the terms "first", "second" and the like in the specification and claims of the present invention are used to distinguish similar objects, and are not necessarily used to describe a particular order or order.

In this embodiment, a method for processing an advertisement resource is provided. FIG. 1 is a flowchart of a method for processing an advertisement resource according to an embodiment of the present invention. As shown in FIG. 1, the process includes the following steps:

In step S102, the target CSE receives the request message sent by the registration CSE of the AE, where the request message carries an access permission indication, and the access permission indication is used to indicate whether the AE is allowed to access the target CSE;

Step S104: The target CSE creates or updates an advertisement resource of the AE according to the request message, where the created or updated advertisement resource includes an access permission indication attribute.

Through the above steps, the access permission indication attribute is created on the advertising resource of the target CSE, so that the target CSE can access the AE according to the access permission indication attribute, and the application entity can only access the registered public service entity for home device control. The technical problem enables the application entity to perform home device control by accessing the target public service entity.

Applying the above method, the AE can create an access permission indication attribute on one or more target CSEs, thereby enabling the AE to access on one or more target CSEs to implement home device control. In this way, the inconvenience caused by the AE being able to access the registered CSE to achieve home device control is avoided, and the user experience is improved.

Optionally, in a case that the request message is an advertisement resource creation request message, in step S104, the target CSE creates an advertisement resource of the AE, where the attribute of the advertisement resource includes: an access permission indication attribute created according to the access permission indication. . In this way, the creation of an advertisement resource including an access permission indication attribute is implemented.

Optionally, in the case that the request message is the advertisement resource update request message, in step S104, the target CSE checks whether the attribute of the advertised resource of the created AE includes: an access permission indication attribute; and the notification that the result is AE In the case where the attribute of the resource includes the access permission indication attribute, the target CSE sets the value of the access permission indication attribute to the value of the access permission indication. In this way, an update of the advertisement resource including the access permission indication attribute is implemented.

Optionally, in a case that the attribute of the advertisement resource that is determined to be the result of the AE does not include the access permission indication attribute, the step S104 further includes: the target CSE creates an access permission indication attribute in the advertisement resource, and the access permission is performed. The value of the indication attribute is set to the value of the access permission indication. In this way, an update of the advertisement resource that does not include the access permission indication attribute is implemented.

Optionally, after the target CSE creates or updates the advertised resource of the AE according to the request message, when the AE needs to implement the control of the home device through the target CSE, the AE may send another request message to the target CSE by registering the CSE; thereafter, the target CSE Receiving another request message of the AE; the target CSE queries the access permission indication attribute in the advertisement resource of the AE; and in the case that the value of the access permission indication attribute is indicated as allowing access, the target CSE sends a request to accept another request message Response message to AE. At the same time, the target CSE can access the AE, so that the AE can control the home device through the target CSE. In this way, the AE access target CSE is implemented.

Optionally, after the target CSE receives another request message of the AE, the target CSE sends a response message rejecting the request of the other request message to the AE in one of the following: the advertising resource of the AE does not exist on the target CSE; The access permission indication attribute does not exist in the advertisement resource of the AE that has been created on the target CSE; the value of the access permission indication attribute in the advertisement resource of the AE that has been created on the target CSE is not allowed to be accessed; the target CSE root authority policy, Verify that the AE does not have access to the target CSE.

Optionally, the request message received by the target CSE is sent via the registration CSE, for example, the registration CSE receives the AE request to request to create or update the advertisement resource on the target CSE; the registration CSE sends the request carrying the access permission indication. Message to the target CSE. The access permission indication is also carried in the request message sent by the AE to the registration CSE.

Optionally, in order to improve security, the registration CSE verifies whether the AE satisfies the authority to create or update the AE resource of the AE on the target CSE according to the privilege policy; wherein, after verifying that the AE meets the notification of creating or updating the AE on the target CSE In the case of the authority of the resource, the registration CSE sends a request message carrying the access permission indication to the target CSE.

Optionally, the request message sent by the registration CSE further carries a security certificate for verifying the legality of the registered CSE identity. The security certificate can be used for the identity CSE to authenticate the registered CSE, thereby improving the security of the AE access target CSE.

Through the description of the above embodiments, those skilled in the art can clearly understand that the method according to the above embodiment can be implemented by means of software plus a necessary general hardware platform, and of course, by hardware, but in many cases, the former is A better implementation. Based on such understanding, the technical solution of the present invention, which is essential or contributes to the prior art, may be embodied in the form of a software product stored in a storage medium (such as ROM/RAM, disk, The optical disc includes a number of instructions for causing a terminal device (which may be a cell phone, a computer, a server, or a network device, etc.) to perform the methods described in various embodiments of the present invention.

In this embodiment, an advertised resource processing device is also provided, and the device is applied to the target CSE, and is used to implement the foregoing embodiments and optional embodiments. As used below, the term "module" may implement a combination of software and/or hardware of a predetermined function. Although the apparatus described in the following embodiments is preferably implemented in software, hardware, or a combination of software and hardware, is also possible and contemplated.

2 is a schematic structural diagram of an advertisement resource processing apparatus according to an embodiment of the present invention. As shown in FIG. 2, the apparatus includes: a receiving module 22 and a processing module 24, wherein the receiving module 22 is configured to receive an AE. Registering a request message sent by the CSE, where the request message carries an access permission indication, where the access permission indication is used to indicate whether the AE is allowed to access the target CSE; the processing module 24 is coupled to the receiving module 22, and is configured to create according to the request message. Or updating the AE's advertised resource, where the created or updated advertised resource includes an access permission indication attribute.

Through the comprehensive function of the above modules, the technical problem that the application entity can only access the registered public service entity for home device control is solved, so that the application entity can perform home device control by accessing the target public service entity.

Optionally, the processing module 24 is configured to: when the request message is an advertisement resource creation request message, create an advertisement resource of the AE, where the attribute of the advertisement resource includes: an access permission indication attribute created according to the access permission indication.

Optionally, the processing module 24 is configured to: if the request message is the advertisement resource update request message, check whether the attribute of the advertised resource of the created AE includes: an access permission indication attribute; and the notification resource whose judgment result is AE In the case where the attribute includes the access permission indication attribute, the value of the access permission indication attribute is set to the value of the access permission indication.

Optionally, the processing module 24 is further configured to: when the attribute of the advertisement resource whose judgment result is AE does not include the access permission indication attribute, create an access permission indication attribute in the advertisement resource, and set the access permission indication attribute The value is set to the value of the access permission indication.

FIG. 3 is a schematic diagram of an optional structure of an advertisement resource processing apparatus according to an embodiment of the present invention. As shown in FIG. 3, the apparatus may further include: another request message receiving module 32, configured to receive another request of the AE. a message; the query module 34 is coupled to another request message receiving module 32, configured to query an access permission indication attribute in the advertisement resource of the AE; Module 36, coupled to query module 34, is arranged to send a response message requesting another request message to the AE if the value of the access grant indication attribute is indicated as allowing access.

Optionally, the response module 36 is further configured to send a response message rejecting the request of another request message to the AE in the case of one of: the announcement resource of the AE not present on the target CSE; the announcement of the created AE on the target CSE The access permission indication attribute does not exist in the resource; the value of the access permission indication attribute in the advertisement resource of the AE that has been created on the target CSE is indicated as not allowing access; the target CSE verifies that the AE does not access the target CSE according to the rights policy. Permissions.

It should be noted that each of the above modules may be implemented by software or hardware. For the latter, the foregoing may be implemented by, but not limited to, the foregoing modules are all located in the same processor; or, the modules are located in multiple In the processor.

Embodiments of the present invention also provide a software for performing the technical solutions described in the foregoing embodiments and optional embodiments.

Embodiments of the present invention also provide a storage medium. In this embodiment, the above storage medium may be configured to store program code for performing the following steps:

In step S1, the target CSE receives the request message sent by the registration CSE of the AE, where the request message carries an access permission indication, and the access permission indication is used to indicate whether the AE is allowed to access the target CSE;

In step S2, the target CSE creates or updates an advertised resource of the AE according to the request message, where the created or updated advertised resource includes an access permission indication attribute.

Optionally, in the embodiment, the foregoing storage medium may include, but is not limited to, a USB flash drive, a Read-Only Memory (ROM), and a Random Access Memory (RAM). A variety of media that can store program code, such as a hard disk, a disk, or an optical disk.

For example, the specific examples in this embodiment may refer to the examples described in the foregoing embodiments and the optional embodiments, and details are not described herein again.

This embodiment also provides an advertisement resource processing system. 4 is a schematic structural diagram of an advertisement resource processing system according to an embodiment of the present invention. As shown in FIG. 4, the system includes: an AE 42, a registration CSE 44, and a target CSE 46, wherein the target CSE 46 includes the foregoing notification resource processing apparatus. .

It should be noted that only one AE 42 and one target CSE 46 are schematically shown in the figure. In actual situations, the number of AE 42 or target CSE 46 may be multiple.

Optionally, the registration CSE 44 includes: a registration CSE receiving module, configured to receive a request message for the AE 42 to request to create or update an advertisement resource on the target CSE 46; and a registration CSE sending module, configured to send the indication with the access permission indication Request a message to the target CSE 46.

Optionally, the registration CSE 44 further includes: a verification module configured to verify, according to the rights policy, whether the AE 42 satisfies the authority to create or update the AE 42 of the target CSE 46; wherein, after verifying that the AE 42 meets the creation or In the case of updating the authority of the AE 42 on the target CSE 46, the registration CSE sending module sends the bearer The request message indicating the permission is entered to the target CSE 46.

Optionally, the request message sent by the registration CSE sending module further carries a security certificate for verifying the validity of the registered CSE 44 identity.

In order to make the description of the embodiments of the present invention more clear, the following description and description are made in conjunction with the exemplary embodiments.

An optional embodiment of the present invention provides a method for accessing a CSE by advertising a resource, wherein the AE and the non-registration are implemented by enhancing the process of advertising the resource in the related art, and modifying the limitation of the AE sending and receiving message in the related art. Information interaction between CSEs.

FIG. 5 is a flowchart of a method for accessing a CSE by advertising a resource according to an alternative embodiment of the present invention. As shown in FIG. 5, the process includes the following steps:

In step S501, the application (ie, AE) sends a first request message to the registration CSE, where the request message includes:

1) Access permission indication: When set to true (true), it means that the application is allowed to access on the target CSE; when set to false (false), it means that the application is not allowed to access on the target CSE.

Step S502: After receiving the first request message, the registration CSE sends a second request message (corresponding to the request message in step S102) to the target CSE, where the request message includes:

1) An access permission indication, the value being a value of an access permission indication in the first request message.

Step S503, after the target CSE receives the second request message,

1) If the request message requests to create an advertisement resource, the advertisement resource of the application is created locally, and the attribute "access permission indication" is created for the resource, and the value is set to the value of the access permission indication in the second request message; or

2) If the request message requests to update the advertisement resource, check whether the attribute "access permission indication" is included in the advertisement resource of the existing initiator of the locality, and if so, set its value to the access permission indication in the second request message. The value of the value; if not included, the attribute "access permission indication" is created for the advertisement resource, and its value is set to the value of the access permission indication in the second request message.

Step S504, the application sends a third request message (corresponding to another request message described above) to the target CSE, where the request message includes:

1) Identification of the application.

Step S505: After receiving the third request message of the initiator, the target CSE checks whether the advertised resource of the application exists according to the identifier of the application included in the request message, and if yes, checks whether the advertised resource includes the attribute “access permission indication”. If included and the value of the attribute is true, a response message is sent to the application, and the response message indicates acceptance of the request;

Wherein, when one of the following conditions is met, the target CSE sends a response message to the AE, and the response message indicates rejection:

1) If there is no local resource including the identity of the application;

2) If the resource of the application's identity is included locally, but the attribute "access permission indication" is not included;

3) If the resource including the identity of the application is locally included, the attribute "access permission indication" is also included, but the value is not true;

4) If the resource including the AE identifier is included locally, the attribute "access permission indication" is also included, but its value is true, but the verification according to the local authority database is not passed.

The following describes an optional embodiment of the present invention by way of examples.

Alternative Embodiment 1 (Scenario: AE is initially registered on the registered CSE)

In step 1, the AE sends a create resource request message to the registration CSE, and the resource request message includes the following parameters:

1) Announcement: the address of the target CSE of the announcement;

2) Access permission indication: true means that the AE is allowed to access on the advertised target CSE, and false means that the AE is not allowed to access on the advertised target CSE.

Among them, the access indication can send and receive messages on the CSE. For example, a request message is sent and a response message is received.

Step 2: After receiving the resource creation request message, the CSE authenticates the AE. After the verification is passed, the AE is assigned the identifier AE1-ID, the resource <AE1> is created, and the attribute AE identity (AE- is created for the resource <AE1>. ID)", attribute "announce to", and attribute "access permission indication".

The above verification process can be:

A) Check whether the AE has permission to create resources through a locally saved permission database;

or,

B) Judging whether the AE has the right to create a resource by using other security information carried by the AE, such as a security certificate pre-configured on the AE.

Step 3: The registration CSE sends a create resource response message to the AE, where the response message includes an identifier AE1-ID assigned to the AE, and an address of the resource <AE1>.

Step 4: According to the parameter “advertised to” included in the resource creation request, the registration CSE sends a request for creating a resource to the target CSE, where the request message includes the following parameters:

1) access permission indication;

2) the original resource link: the address of the resource that needs to be advertised, for example, the address set as the resource <AE1> in this embodiment;

3) AE-ID: set to the value of the attribute "AE-ID" of the resource <AE1>;

Step 5: After receiving the resource request message, the target CSE verifies the authority to register the CSE. After the verification is passed, the resource <AE1Annc> is created, and the attribute “access permission indication” is created for the resource <AE1Annc>, and the attribute “original resource connection” is created. , attribute "AE-ID", the value of the attribute is set to the value of the corresponding parameter in the creation resource request message.

Step 6, the AE sends a read resource request message to the target CSE, and the read resource request message includes the following parameters:

1) the logo of the AE;

2) the address of the resource that needs to be read;

Step 7: After receiving the request message of the AE, the target CSE reads the identifier of the AE, and locally finds whether there is a resource including the AE identifier, and if so, checks whether the attribute “access permission indication” is included, and if so, checks Whether the value of the attribute "access permission indication" is true, if yes, the target CSE sends a response message to the AE, the response message indicates that the request is accepted, or after checking that the attribute "access permission indication" is true, the AE is also verified. Whether there is permission to perform this operation, after the verification is passed, the target CSE sends a response message to the AE, and the response message indicates acceptance of the request.

Wherein, when one of the following conditions is met, the target CSE sends a response message to the AE, and the response message indicates the rejection request:

1) If there is no local resource including the AE logo;

2) If the resource including the AE identity is included locally, but the attribute "access permission indication" is not included;

3) If the resource including the AE identifier is included locally, the attribute "access permission indication" is also included, but the value is not true;

Among them, verifying whether the AE has the authority to perform this operation can be performed in the following manner: The local database stores a set of information, which records which operation can be performed or which operation cannot be performed. Where "who" is recorded by the identifier of the object, which operation is described as creating, updating, reading, and deleting. From this it can be known whether the originator of the proposed operation request has the right to perform the operation it requested.

Alternative Embodiment 2 (Scenario: The original resource of the AE has been created, and the original resource is not advertised on the target CSE)

Step 1: The AE sends an update resource request message to the registration CSE, where the update resource request message includes the following parameters:

1) Announcement: the address of the target CSE of the announcement;

3) Address of the resource to be updated: Following the example of the first embodiment, the parameter is set to the address of the resource <AE1> in this embodiment.

Step 2: After receiving the update resource request message, the registration CSE checks whether the resource <AE1> includes the attribute “advertised to”, and if not, creates the attribute “advertised to” and the attribute “access permission indication” for the resource <AE1>. .

Step 3: According to the parameter “advertised to” included in the update resource request, the registration CSE sends a request for creating a resource to the target CSE, where the request message includes the following parameters:

1) access permission indication;

3) AE-ID: set to the value of the attribute "AE-ID" of the resource <AE1>;

Step 4: After receiving the resource request message, the target CSE verifies the authority to register the CSE. After the verification is passed, the resource <AE1Annc> is created, and the attribute "access permission indication" is created for the resource <AE1Annc>, and the attribute "original resource connection" is created. , attribute "AE-ID", the value of the attribute is set to the value of the corresponding parameter in the creation resource request message.

Step 5: The AE sends a read resource request message to the target CSE, where the read resource request message includes the following parameters:

1) the logo of the AE;

2) the address of the resource that needs to be read;

Step 6: After receiving the request message of the AE, the target CSE reads the identifier of the AE, and locally finds whether there is a resource including the AE identifier, and if so, checks whether the attribute “access permission indication” is included, and if so, checks Whether the value of the attribute "access permission indication" is true, if yes, the target CSE sends a response message to the AE, the response message indicates that the request is accepted, or after checking that the attribute "access permission indication" is true, the AE is also verified. Whether there is permission to perform this operation, after the verification is passed, the target CSE sends a response message to the AE, and the response message indicates acceptance of the request.

1) If there is no local resource including the AE logo;

Alternative Embodiment 3 (Scenario: AE's original resource has been created and has been advertised to the target CSE)

1) Access permission indication: true means that the AE is allowed to access on the advertised target CSE, and false means that the AE is not allowed to access on the advertised target CSE.

2) Address of the resource to be updated: This embodiment follows the example of the first embodiment and is set to the address of <AE1>.

Step 2: After receiving the update resource request message, the registration CSE verifies the AE, and verifies whether the AE has the resource that needs to be updated indicated in the permission update request message. After the verification is passed, check whether the resource <AE1> includes the attribute “access permission”. Indicates, if not included, the attribute "access permission indication" is created.

Step 3: The registration CSE sends an update resource request to the target CSE. The address of the target CSE is included in the attribute “advertised to” of the resource <AE1>, and the request message includes the following parameters:

1) access permission indication;

2) Address of the resource that needs to be updated: This embodiment is the address of the AE resource on the target CSE, that is, the address of the resource <AE1Annc>

Step 4: After receiving the update resource request message, the target CSE verifies the authority to register the CSE. After the verification is passed, if the AE's advertisement resource <AE1Annc> on the target CSE includes the attribute “access permission indication”, the value is set to be Update the value of the corresponding parameter in the resource request; if the attribute "access permission indication" is not included, create the attribute "access permission indication" whose value is set to the value of the corresponding parameter in the update resource request message.

1) the logo of the AE;

2) the address of the resource that needs to be read;

1) If there is no local resource including the AE logo;

Optional Embodiment 4 (including security certificate)

1) Announcement: the address of the target CSE of the announcement;

3) Security certificate: A security certificate can be a set of pre-configured strings on the application. The CSE acts as a manager and is pre-configured with policies to verify which security certificates are legitimate.

Step 2: After the registration CSE receives the resource creation request message, the AE is verified, and after the verification is passed, the AE is given. The identifier AE1-ID is created, the resource <AE1> is created, the attribute "AE-ID" is created for the resource <AE1>, the attribute "advertised to", and the attribute "access permission indication".

The above verification process can be:

or,

1) access permission indication;

3) AE-ID: set to the value of the attribute "AE-ID" of the resource <AE1>;

4) Security certificate.

Step 5: After receiving the resource creation request message, the target CSE verifies the authority to register the CSE, verifies the AE-ID and the security certificate, and after the verification is passed, creates the resource <AE1Annc>, and creates the attribute “access permission indication” for the resource <AE1Annc>. ", attribute "original resource connection", attribute "AE-ID", the value of the attribute is set to the value of the corresponding parameter in the creation resource request message.

1) the logo of the AE;

2) the address of the resource that needs to be read;

3) Security certificate;

Step 7: After receiving the request message of the AE, the target CSE reads the identifier of the AE and the security certificate, and verifies the identity of the AE and the validity of the security certificate. After the verification is passed, the local search for the resource including the AE identifier, if any, Then check whether the attribute "access permission indication" is included, and if so, check whether the value of the attribute "access permission indication" is true, and if so, the target CSE sends a response message to the AE, the response message indicates acceptance of the request, or After checking that the value of the attribute "access permission indication" is true, it also verifies whether the AE has the authority to perform this operation. After the verification is passed, the target CSE sends a response message to the AE, and the response message indicates acceptance of the request.

1) If there is no local resource including the AE logo;

4) If the local resource including the AE identity also includes the attribute "access permission indication", but its value is true, but fails to pass the verification according to the local authority database;

5) If the AE's identification and security certificate verification did not pass.

Among them, verifying whether AE or CSE has the right to perform this operation can be done in the following way: The local database stores a set of information, which records who can perform which operation or who can not. Where "who" is recorded by the identifier of the object, which operation is described as creating, updating, reading, and deleting. From this it can be known whether the originator of the proposed operation request has the right to perform the operation it requested.

The authentication of the AE and the security certificate may be: the local database stores a set of information, and records which identifiers of the security certificates are legal, such as the security certificate s001, the corresponding legal identifier is c001, and the security certificate s002. The corresponding legal ID is the beginning of r001. If the identifier of an application is r001001 and the security certificate is s001, the registered CSE considers this to be illegal.

In summary, by using the foregoing embodiment or the optional embodiment of the present invention, the same AE can send and receive messages on different CSEs, and the application scenario of the M2M is extended.

Industrial Applicability: The above description shows that the present invention creates an access permission indication attribute on the advertisement resource of the target CSE, so that the target CSE can access the AE according to the access permission indication attribute, and the application entity can only access the registration. The technical problem of the public service entity performing home equipment control enables the application entity to perform home equipment control by accessing the target public service entity.

It will be apparent to those skilled in the art that the various modules or steps of the present invention described above can be implemented by a general-purpose computing device that can be centralized on a single computing device or distributed across a network of multiple computing devices. Alternatively, they may be implemented by program code executable by the computing device such that they may be stored in the storage device by the computing device and, in some cases, may be different from the order herein. The steps shown or described are performed, or they are separately fabricated into individual integrated circuit modules, or a plurality of modules or steps thereof are fabricated as a single integrated circuit module. Thus, the invention is not limited to any specific combination of hardware and software.

The above description is only an alternative embodiment of the present invention, and is not intended to limit the present invention, and various modifications and changes can be made to the present invention. Any modifications, equivalent substitutions, improvements, etc. made within the spirit and scope of the present invention are intended to be included within the scope of the present invention.

Claims

A method for processing an advertisement resource, comprising:

The target public service entity CSE receives the request message sent by the registration CSE of the application entity AE, where the request message carries an access permission indication, where the access permission indication is used to indicate whether the AE is allowed to access the target CSE;

The target CSE creates or updates an advertisement resource of the AE according to the request message, where the created or updated advertisement resource includes an access permission indication attribute.
The method according to claim 1, wherein, in a case that the request message is an advertisement resource creation request message, the target CSE creates the advertisement resource of the AE according to the request message, including:

The target CSE creates the advertisement resource of the AE, where the attribute of the advertisement resource includes: an access permission indication attribute created according to the access permission indication.
The method according to claim 1, wherein, in a case that the request message is an advertisement resource update request message, the target CSE updating the advertisement resource of the AE according to the request message includes:

The target CSE checks whether an attribute of the advertisement resource of the AE that has been created includes: an access permission indication attribute;

In a case where the judgment result is that the attribute of the advertisement resource of the AE includes an access permission indication attribute, the target CSE sets a value of the access permission indication attribute to a value of the access permission indication.
The method according to claim 3, wherein, in a case where the result of the judgment is that the attribute of the advertisement resource of the AE does not include an access permission indication attribute, the target CSE updates the AE according to the request message. The notification resource further includes:

And the target CSE creates an access permission indication attribute in the advertisement resource, and sets a value of the access permission indication attribute to a value of the access permission indication.
The method of claim 1, wherein after the target CSE creates or updates the advertisement resource of the AE according to the request message, the method further includes:

Receiving, by the target CSE, another request message of the AE;

The target CSE queries an access permission indication attribute in the advertisement resource of the AE;

In case the value of the access permission indication attribute is indicated as allowing access, the target CSE sends a response message requesting the request of the other request message to the AE.
The method of claim 5, wherein after the target CSE receives the another request message of the AE, the target CSE sends a rejection of the another request message in the case of one of The requested response message to the AE:

The notification resource of the AE does not exist on the target CSE;

An access permission indication attribute does not exist in the advertisement resource of the AE that has been created on the target CSE;

The value of the access permission indication attribute in the advertisement resource of the AE that has been created on the target CSE is indicated as not allowing access;

The target CSE root authority policy verifies that the AE does not have access to the target CSE.
The method of claim 1, wherein the request message sent by the target CSE to receive the registration CSE of the AE comprises:

The registration CSE receives a request message for requesting to create or update the advertisement resource on the target CSE;

The registration CSE sends a request message carrying the access permission indication to the target CSE.
The method according to claim 7, wherein before the registration CSE sends a request message carrying the access permission indication to the target CSE, the method further includes:

Determining, by the registration CSE, whether the AE satisfies the authority to create or update the advertisement resource of the AE on the target CSE according to the rights policy;

Wherein, in the case that it is verified that the AE satisfies the authority to create or update the advertised resource of the AE on the target CSE, the registration CSE sends a request message carrying the access permission indication to the The target CSE.
The method of claim 7 wherein

The request message sent by the registration CSE also carries a security certificate for verifying the legality of the registered CSE identity.
An advertisement resource processing apparatus is applied to a target public service entity CSE, including:

a receiving module, configured to receive a request message sent by the registration CSE of the application entity AE, where the request message carries an access permission indication, where the access permission indication is used to indicate whether the AE is allowed to access the target CSE;

The processing module is configured to create or update the advertisement resource of the AE according to the request message, where the created or updated advertisement resource includes an access permission indication attribute.
The apparatus of claim 10 wherein said processing module is configured to:

And in the case that the request message is an advertisement resource creation request message, the advertisement resource of the AE is created, where the attribute of the advertisement resource includes: an access permission indication attribute created according to the access permission indication.
The apparatus of claim 10 wherein said processing module is configured to:

In case the request message is an advertisement resource update request message, checking the created AE of the AE Whether the attribute of the resource includes: an access permission indication attribute;

And determining, in the case that the attribute of the advertisement resource of the AE includes an access permission indication attribute, setting a value of the access permission indication attribute to a value of the access permission indication.
The apparatus of claim 12, wherein the processing module is further configured to:

If the attribute of the advertisement resource of the AE does not include the access permission indication attribute, the access permission indication attribute is created in the advertisement resource, and the value of the access permission indication attribute is set. The value indicated for the access indication.
The device of claim 10, wherein the device further comprises:

Another request message receiving module, configured to receive another request message of the AE;

a query module, configured to query an access permission indication attribute in the advertisement resource of the AE;

The response module is configured to, in a case where the value of the access permission indication attribute is indicated as allowing access, the target CSE transmitting a response message requesting the request of the another request message to the AE.
The apparatus of claim 14, wherein the response module is further configured to send a response message rejecting the request for the another request message to the AE in one of:

The notification resource of the AE does not exist on the target CSE;

An access permission indication attribute does not exist in the advertisement resource of the AE that has been created on the target CSE;

The value of the access permission indication attribute in the advertisement resource of the AE that has been created on the target CSE is indicated as not allowing access;

The target CSE verifies that the AE does not have access to the target CSE according to the rights policy.
An advertisement resource processing system includes: an application entity AE, a registered public service entity CSE, and a target CSE, wherein the target CSE includes the advertisement resource processing apparatus according to claims 10 to 15.
The system of claim 16 wherein said registering CSE comprises:

Registering a CSE receiving module, configured to receive a request message that the AE is used to request to create or update the advertising resource on the target CSE;

The registration CSE sending module is configured to send a request message carrying the access permission indication to the target CSE.
The system of claim 17 wherein said registering CSE further comprises:

a verification module, configured to verify, according to the rights policy, whether the AE meets the authority to create or update the advertisement resource of the AE on the target CSE;

The registration CSE sending module sends a request message carrying the access permission indication, if it is verified that the AE meets the permission to create or update the advertised resource of the AE on the target CSE. To the target CSE.
The system of claim 17 wherein

The request message sent by the registration CSE sending module further carries a security certificate for verifying the legality of the registered CSE identity.