WO2018018859A1

WO2018018859A1 - Device access method and apparatus

Info

Publication number: WO2018018859A1
Application number: PCT/CN2017/071575
Authority: WO
Inventors: 李聪
Original assignee: 中兴通讯股份有限公司
Priority date: 2016-07-25
Filing date: 2017-01-18
Publication date: 2018-02-01
Also published as: CN107659932A; CN107659932B

Abstract

Embodiments of the present invention relate to the technical field of wireless communications. Disclosed are a device access method and apparatus. The method comprises: a first terminal and a second terminal provided in the same local area network are interconnected to each other and then respectively obtain authorization transfer attribute information of the opposite side; the first terminal and the second terminal determine whether both sides are transfer allowed devices or not according to the authorization transfer attribute information of the opposite side; if yes, the first terminal transfers device information and authorization grant information thereof to the second terminal so that the second terminal stores the device information and authorization grant information of the first terminal; when a third terminal and the second terminal provided in the same local area network are interconnected to each other, the third terminal obtains the device information and authorization grant information of the first terminal stored in the second terminal so as to access the first terminal.

Description

Method and device for accessing equipment

Technical field

The embodiments of the present invention relate to the field of wireless communications technologies, and in particular, to a device access method and apparatus.

Background technique

With the development of communication technology, more and more smart devices are held by users, and mobile communication terminals such as mobile phones, wearable devices, computers, tablets, sensor devices, and other smart devices have been more and more widely used. And the interoperability and collaboration of these smart devices are becoming more and more frequent.

With the increase of smart devices, especially the interworking between smart devices, collaboration is more and more frequent, and a function is no longer dependent on one device alone. It may require multiple devices to cooperate and may need to be acquired. The status of multiple sensor devices is updated, so there is a frequent need for communication between smart devices.

Under the current technology, there is a frequent need for communication transmission between smart devices. These transmission connections almost all require authentication, require manual authorization by the user, or input passwords, etc., which brings inconvenience to the user. One of the most typical examples is: home-set WIFI, each device is required Actively connect and enter a password for authentication, and then use it. For visitors who come to the home, visitors need to tell their WIFI account and password to use it before they can use it. This will lead to the leakage of passwords. Many users always I like to use only a few fixed passwords; on the other hand, the operation is complicated and affects the user experience.

Summary of the invention

The technical problem solved by the solution provided by the embodiment of the present invention is that authentication is required when accessing between smart devices, and thus there is an insecure factor.

A method for accessing a device according to an embodiment of the present invention includes:

After the first terminal and the second terminal in the same local area network are interconnected, the authorization attribute information of the other party is obtained respectively;

The first terminal and the second terminal determine, according to the authorization attribute information of the other party, whether the two parties are allowed to migrate the device;

When it is determined that both the first terminal and the second terminal are allowed to migrate the device, the first terminal migrates the device information and the license information to the second terminal, so that the second terminal saves the device information and the license information of the first terminal. ;

After the third terminal and the second terminal in the same local area network are interconnected, the third terminal acquires device information and authorization permission information of the first terminal saved by the second terminal, so as to access the first terminal.

Optionally, an authorization migration table is separately set in the first terminal and the second terminal; wherein the authorization migration table includes device information, authorization migration attribute information, and authorization permission information.

Optionally, the authorization migration attribute information includes allowing migration, limiting migration, and prohibiting migration.

Optionally, the first terminal and the second terminal determine, according to the authorization migration attribute information of the other end, whether the two parties are allowed to migrate the device, including:

If the authorization migration attribute information of the first terminal and the second terminal is allowed to be migrated, it is determined that both parties are allowed to migrate the device;

If the authorization migration attribute information of the first terminal and the second terminal is a limited migration, the comparison is performed with the pre-stored limited migration threshold. If the migration threshold is not exceeded, the device is allowed to migrate. Otherwise, the migration is not allowed. device;

If the authorization migration attribute information of the first terminal and the second terminal is forbidden to be migrated, it is determined that both parties are not allowed to migrate the device.

Optionally, when determining that both the first terminal and the second terminal are allowed to migrate the device, the first terminal migrating the device information and the license information to the slave interconnect device includes:

When it is determined that the first terminal and the second terminal are both allowed to migrate the device, the first terminal migrates the device information, the authorization migration attribute information, and the license information included in the authorization migration table to the authorization migration table of the second terminal, and simultaneously The second terminal migrates the device information, the authorization migration attribute information, and the license information contained in the authorization migration table to the authorization migration table of the first terminal.

Optionally, after the third terminal and the second terminal that are located in the same local area network are interconnected, the third terminal acquires device information and authorization permission information of the first terminal saved by the second terminal, so as to access the first terminal, including :

After the third terminal and the second terminal in the same local area network are interconnected, the second terminal migrates the device information, the authorization migration attribute information, and the license information contained in the authorization migration table and the first terminal to the third In the terminal, the third terminal accesses the first terminal.

An apparatus for accessing a device according to an embodiment of the present invention includes:

The acquiring module is configured to obtain the authorization migration attribute information of the other party after the first terminal and the second terminal are interconnected in the same local area network;

The determining module is configured to: the first terminal and the second terminal determine, according to the authorization attribute information of the other party, whether the two parties are allowed to migrate the device;

a migration module, configured to: when determining that both the first terminal and the second terminal are allowed to migrate the device, the first terminal migrates the device information and the license information to the second terminal, so that the second terminal sends the device information of the first terminal and The license information is saved, and after the third terminal and the second terminal in the same local area network are interconnected, the third terminal acquires the device information and the license information of the first terminal saved by the second terminal, so as to access the first terminal. .

Optionally, the determining module includes:

The determining unit is configured to: when the authorization migration attribute information of the first terminal and the second terminal is allowed to be migrated, determine that both the devices are allowed to migrate, and when the authorization migration attribute information of the first terminal and the second terminal is a limited migration, If the migration threshold is not exceeded, the device is allowed to migrate the device. Otherwise, the device is not allowed to be migrated, and the authorization migration attribute information of the first terminal and the second terminal is forbidden to be migrated. , it is judged that both parties are not allowed to migrate devices.

According to still another embodiment of the present invention, a storage medium is also provided. The storage medium is set as program code for storing a method for performing the above device access.

According to the solution provided by the embodiment of the present invention, the migration and handover of the authorization attribute between the interconnection devices are implemented, so that the licensed device can automatically obtain the device information and the authorization authority, and realize automatic access without authentication, thereby improving the user. Experience. At the same time, it avoids the security problems caused by the arbitrary access of all interconnected devices, realizes the intelligent and security considerations, and improves the user experience.

DRAWINGS

The drawings described herein are intended to provide a further understanding of the invention, and are intended to be a part of the invention. In the drawing:

FIG. 1 is a flowchart of a method for accessing a device according to an embodiment of the present invention;

2 is a schematic diagram of an apparatus for accessing a device according to an embodiment of the present invention;

3 is a flowchart of a device access method according to an embodiment of the present invention;

4 is a schematic diagram of functional modules of an interconnection device according to an embodiment of the present invention;

FIG. 5 is a schematic diagram of authorization migration of an interconnection device according to an embodiment of the present invention.

detailed description

The invention will be described in detail below with reference to the drawings in conjunction with the embodiments. It should be noted that the embodiments in the present application and the features in the embodiments may be combined with each other without conflict.

It is to be understood that the terms "first", "second" and the like in the specification and claims of the present invention are used to distinguish similar objects, and are not necessarily used to describe a particular order or order.

FIG. 1 is a flowchart of a method for accessing a device according to an embodiment of the present invention. As shown in FIG. 1 , the method includes:

Step S101: After the first terminal and the second terminal in the same local area network are interconnected, obtain the authorization attribute information of the other party respectively.

Step S102: The first terminal and the second terminal determine, according to the authorization attribute information of the other party, whether the two parties are all allowed to migrate the device;

Step S103: When it is determined that both the first terminal and the second terminal are allowed to migrate the device, the first terminal migrates the device information and the license information to the second terminal, so that the second terminal sets the device information and the license of the first terminal. Information is saved;

Step S104: After the third terminal and the second terminal in the same local area network are interconnected, the third terminal acquires device information and authorization permission information of the first terminal saved by the second terminal, so as to access the first terminal.

The authorization migration table is respectively configured in the first terminal and the second terminal, where the authorization migration table includes device information, authorization migration attribute information, and authorization permission information. The authorization migration attribute information includes permission migration, limited migration, and prohibition of migration.

And determining, by the first terminal and the second terminal, whether the two parties are allowed to migrate the device according to the authorization attribute information of the other party: if the authorization migration attribute information of the first terminal and the second terminal is allowed to migrate, In order to allow the device to be migrated, if the authorization migration attribute information of the first terminal and the second terminal is a limited migration, the comparison is performed with the pre-stored limited migration threshold. If the migration threshold is not exceeded, the device is allowed to migrate the device. Otherwise, If the migration of the first terminal and the second terminal is prohibited, the device is not allowed to migrate.

When the first terminal and the second terminal are both allowed to migrate the device, the first terminal migrating the device information and the license information to the slave interconnect device includes: determining that both the first terminal and the second terminal are When the device is allowed to migrate, the first terminal migrates the device information, the authorization migration attribute information, and the license information contained in the authorization migration table to the authorization migration table of the second terminal, and the second terminal encrypts the information contained in the migration table. The device information, the authorization migration attribute information, and the license information are migrated to the authorization migration table of the first terminal.

The third terminal acquires device information and authorization permission information of the first terminal saved by the second terminal, so that accessing the first terminal includes: when the third terminal and the second terminal are connected to each other in the same local area network. After the third terminal and the second terminal located in the same local area network are interconnected, the second The terminal migrates the device information, the authorization migration attribute information, and the license information contained in the authorization migration table and the first terminal to the third terminal, so that the third terminal accesses the first terminal.

2 is a schematic diagram of an apparatus for accessing a device according to an embodiment of the present invention. As shown in FIG. 2, the method includes: an obtaining module 201, configured to be interconnected after the first terminal and the second terminal in the same local area network are interconnected, respectively. The other party authorizes the migration attribute information; the determining module 202 is configured to: the first terminal and the second terminal determine, according to the authorization migration attribute information of the other party, whether the two parties are all allowed to migrate the device; and the migration module 203 is configured to determine the first terminal and the second terminal. When the terminal is allowed to migrate the device, the first terminal migrates the device information and the license information to the second terminal, so that the second terminal saves the device information and the license information of the first terminal, and is set in the same local area network. After the third terminal is interconnected with the second terminal, the third terminal acquires device information and authorization permission information of the first terminal saved by the second terminal, so as to access the first terminal.

The determining module 202 includes: a determining unit, configured to: when the authorization migration attribute information of the first terminal and the second terminal is allowed to migrate, determine that both parties are allowed to migrate the device, when the first terminal and the second terminal are authorized If the migration attribute information is a limited migration, it is compared with the pre-stored limited migration threshold. If the migration threshold is not exceeded, the device is allowed to migrate the device. Otherwise, the device is not allowed to migrate, and the first terminal and the second device are not allowed. If the authorization migration attribute information of the terminal is forbidden to be migrated, it is determined that both parties are not allowed to migrate the device.

FIG. 3 is a flowchart of a method for accessing a device according to an embodiment of the present invention. As shown in FIG. 3, the method includes:

Step S301: interconnecting a group of interconnected devices;

The interconnection device includes, but is not limited to, a computer, a tablet, a smart terminal, a wearable device, a sensor having a transmission function, a router, and the like.

Step S302: For each device that is set to be interconnected, the authorized migration attribute value of the device may be set and obtained;

The authorization migration attributes include, but are not limited to, not allowing migration, limiting migration, allowing migration, and the like.

The set authorization migration attribute value is a default value based on all interconnections, and the default value can be used when the real two devices are interconnected, or can be set in real time during interconnection authentication.

Step S303: Maintain an authorization migration table of a device interconnected with each device;

The authorization migration table records device information of all devices directly connected to the device, and authorizes a comparison table of migration attribute values, authorizations, and the like.

The device information is used to identify information of an interconnected device, including but not limited to a device number, a name, a MAC address, and the like;

Step S304: When one device is interconnected with other single devices, the two sides of the interconnection device mutually confirm the authorization migration attribute of the device for the peer device, and update the authorization migration table of the peer device;

The confirmation of the authorization migration attribute directly obtains the default authorization migration attribute value of the device as the authorized migration attribute value of the current connection to the device.

The confirmation of the authorization migration attribute may also be manually confirmed by the user when the connection is established, and the authorized migration attribute value of the current connection device is set.

Step S305: When one device is interconnected with other devices, the two devices and other devices connected thereto are respectively obtained according to the authorized migration table of the corresponding device, and the corresponding authorization migration attribute is obtained. Authorize the device that allows migration, and migrate the device's information and license information to the target device that is allowed to migrate.

Step S306: For the device with the license of the corresponding device, the corresponding device can be directly accessed without authentication.

4 is a schematic diagram of functional modules of an interconnection device according to an embodiment of the present invention. As shown in FIG. 4, the migration table management unit 401, the interconnection control unit 402, the authorization migration control unit 403, the authorization migration attribute management unit 404, and the authorization are provided. Management unit 405.

The migration table management unit 401 is configured to manage an authorization migration table of the interconnection device. The interconnection control unit 402 is configured to control the connection of the management interconnection device. Authorized migration control The unit 403 is configured to obtain an interconnection with other devices according to the authorization migration table of the two sides of the interconnection device, and corresponding authorization migration attributes. Authorize the device that allows migration, and migrate the device's information and license information to the target device that is allowed to migrate. The authorization migration attribute management unit 404 is configured to manage the authorization migration attribute of the device, including obtaining a default value of the authorization migration attribute of the setting device, and setting a corresponding authorization migration attribute value based on a single interconnection acquisition. The authorization management unit 405: configured to manage the license and verify the license for the connection to determine whether to directly connect or re-authenticate.

FIG. 5 is a schematic diagram of the authorization migration of the interconnection device according to the embodiment of the present invention. As shown in FIG. 5 , the example is only for the illustration of a case of the authorization migration. The embodiment of the present invention includes but is not limited to the following examples:

State 1: includes primary interconnect device A, slave interconnect device B, and other interconnect device C;

State 2: The primary interconnect device A and the slave interconnect device B are interconnected to obtain the authorized migration table of the other party, and the primary interconnect device A will modify the authorized migration attribute of the interconnected device B to not allow migration;

State 3: interconnecting the interconnected device B from other interconnected devices C, respectively acquiring the authorized migration table of the other party;

State 4: After the other interconnection device C acquires the authorization migration table from the interconnection device B, the slave device B simultaneously migrates the authorization migration table of the primary interconnection device A to the other interconnection device C;

State 5: The other interconnected device C accesses the primary interconnect device A.

In the embodiment of the present invention, for each device that is set to be interconnected, the authorized migration attribute value of the device may be set and obtained. The authorization migration attributes include, but are not limited to, not allowing migration, limiting migration, allowing migration, and the like. For each device, maintain an authorized migration table of devices interconnected with it, which records device information of all devices directly interconnected with the device, and authorizes a comparison table of migration attribute values, licenses, and the like. When a device is interconnected with other single devices, the two interconnected devices confirm each other's authorized migration attributes for the peer device and update the authorized migration table of the peer device. At the same time, according to the authorization migration table of both sides of the interconnection device, the interconnection with other devices is obtained, and the corresponding authorization migration attribute is obtained. Authorize the device that allows migration, and migrate the device's information and license information to the target device that is allowed to migrate. For licenses with corresponding devices The device can directly access the corresponding device without authentication.

The embodiment of the present invention has a wide application scenario, for example, a home WIFI, and setting the WIFI as a license migration attribute, only one terminal of the host needs to complete the connection with the device and input password authentication. Thereafter, if other user equipments need to use the WIFI, only the user terminal needs to be interconnected with the owner's terminal, and the migration authorization can be obtained, thereby directly accessing the WIFI. Instead of telling the user the password, the user enters the password authentication access. That is to protect the password, which greatly simplifies the user experience. Although smart devices, including wearable devices, smart homes, and the Internet of Things, the number of devices owned by users is increasing, making application scenarios more extensive.

According to the solution provided by the embodiment of the present invention, the migration and handover of the authorization attribute between the interconnection devices are implemented, so that the licensed device can automatically obtain the device information and the authorization authority, and realize automatic access without authentication. The setting of the migration attribute also prevents the security problems caused by the arbitrary access of all connected devices, achieving intelligent and security considerations and improving the user experience.

It should be noted that each of the above modules may be implemented by software or hardware. For the latter, the foregoing may be implemented by, but not limited to, the foregoing modules are all located in the same processor; or, the above modules are in any combination. The forms are located in different processors.

Embodiments of the present invention also provide a storage medium. Optionally, in the embodiment, the foregoing storage medium may be configured to store program code for performing the following steps:

Optionally, in this embodiment, the foregoing storage medium may include, but not limited to, a USB flash drive, a Read-Only Memory (ROM), a Random Access Memory (RAM), a mobile hard disk, and a magnetic memory. A variety of media that can store program code, such as a disc or a disc.

For example, the specific examples in this embodiment may refer to the examples described in the foregoing embodiments and the optional embodiments, and details are not described herein again.

It will be apparent to those skilled in the art that the various modules or steps of the present invention described above can be implemented by a general-purpose computing device that can be centralized on a single computing device or distributed across a network of multiple computing devices. Alternatively, they may be implemented by program code executable by the computing device such that they may be stored in the storage device by the computing device and, in some cases, may be different from the order herein. The steps shown or described are performed, or they are separately fabricated into individual integrated circuit modules, or a plurality of modules or steps thereof are fabricated as a single integrated circuit module. Thus, the invention is not limited to any specific combination of hardware and software.

The above description is only the preferred embodiment of the present invention, and is not intended to limit the present invention, and various modifications and changes can be made to the present invention. Any modifications, equivalent substitutions, improvements, etc. made within the spirit and scope of the present invention are intended to be included within the scope of the present invention.

Industrial applicability

As described above, a method and an apparatus for accessing a device provided by an embodiment of the present invention have the following beneficial effects: according to the solution provided by the embodiment of the present invention, the migration and handover of the authorization attribute between the interconnected devices are implemented, so that the licensed The device can automatically obtain device information and authorization rights, and achieve automatic access without authentication, which improves the user experience. At the same time, it avoids the security problems caused by the arbitrary access of all interconnected devices, realizes the intelligent and security considerations, and improves the user experience.

Claims

A method of device access, including:

After the first terminal and the second terminal in the same local area network are interconnected, the authorization attribute information of the other party is obtained respectively;

The first terminal and the second terminal determine, according to the authorization attribute information of the other party, whether the two parties are allowed to migrate the device;

When it is determined that both the first terminal and the second terminal are allowed to migrate the device, the first terminal migrates the device information and the license information to the second terminal, so that the second terminal saves the device information and the license information of the first terminal. ;

After the third terminal and the second terminal in the same local area network are interconnected, the third terminal acquires device information and authorization permission information of the first terminal saved by the second terminal, so as to access the first terminal.
The method according to claim 1, wherein an authorization migration table is separately set in the first terminal and the second terminal; wherein the authorization migration table includes device information, authorization migration attribute information, and authorization permission information.
The method according to claim 1 or 2, wherein the authorization migration attribute information comprises allowing migration, limiting migration, and prohibiting migration.
The method according to claim 3, wherein the first terminal and the second terminal determine, according to the authorization migration attribute information of the other party, whether the two parties are allowed to migrate the device, including:

If the authorization migration attribute information of the first terminal and the second terminal is allowed to be migrated, it is determined that both parties are allowed to migrate the device;

If the authorization migration attribute information of the first terminal and the second terminal is a limited migration, the comparison is performed with the pre-stored limited migration threshold. If the migration threshold is not exceeded, the device is allowed to migrate. Otherwise, the migration is not allowed. device;

If the authorization migration attribute information of the first terminal and the second terminal is forbidden to be migrated, it is determined that both parties are not allowed to migrate the device.
The method according to claim 4, wherein said determining said first terminal and said second terminal When all devices are allowed to migrate, the first terminal migrates its device information and license information to the slave interconnect device including:

When it is determined that the first terminal and the second terminal are both allowed to migrate the device, the first terminal migrates the device information, the authorization migration attribute information, and the license information included in the authorization migration table to the authorization migration table of the second terminal, and simultaneously The second terminal migrates the device information, the authorization migration attribute information, and the license information contained in the authorization migration table to the authorization migration table of the first terminal.
The method according to claim 5, after the third terminal and the second terminal in the same local area network are interconnected, the third terminal acquires device information and authorization permission information of the first terminal saved by the second terminal, so that Access to the first terminal includes:

After the third terminal and the second terminal in the same local area network are interconnected, the second terminal migrates the device information, the authorization migration attribute information, and the license information contained in the authorization migration table and the first terminal to the third In the terminal, the third terminal accesses the first terminal.
A device for accessing a device, comprising:

The acquiring module is configured to obtain the authorization migration attribute information of the other party after the first terminal and the second terminal are interconnected in the same local area network;

The determining module is configured to: the first terminal and the second terminal determine, according to the authorization attribute information of the other party, whether the two parties are allowed to migrate the device;

a migration module, configured to: when determining that both the first terminal and the second terminal are allowed to migrate the device, the first terminal migrates the device information and the license information to the second terminal, so that the second terminal sends the device information of the first terminal and The license information is saved, and after the third terminal and the second terminal in the same local area network are interconnected, the third terminal acquires the device information and the license information of the first terminal saved by the second terminal, so as to access the first terminal. .
The apparatus according to claim 7, wherein an authorization migration table is respectively set in the first terminal and the second terminal; wherein the authorization migration table includes device information, authorization migration attribute information, and authorization permission information.
The apparatus according to claim 7 or 8, wherein the authorization migration attribute information comprises Allow migrations, qualify migrations, and prohibit migrations.
The apparatus according to claim 9, wherein the determining module comprises:

The determining unit is configured to: when the authorization migration attribute information of the first terminal and the second terminal is allowed to be migrated, determine that both the devices are allowed to migrate, and when the authorization migration attribute information of the first terminal and the second terminal is a limited migration, If the migration threshold is not exceeded, the device is allowed to migrate the device. Otherwise, the device is not allowed to be migrated, and the authorization migration attribute information of the first terminal and the second terminal is forbidden to be migrated. , it is judged that both parties are not allowed to migrate devices.
A storage medium arranged to store a computer program for performing the method of accessing a device according to any one of claims 1 to 6.