WO2018119589A1

WO2018119589A1 - Account management method and apparatus, and account management system

Info

Publication number: WO2018119589A1
Application number: PCT/CN2016/112136
Authority: WO
Inventors: 王凤周
Original assignee: 深圳前海达闼云端智能科技有限公司
Priority date: 2016-12-26
Filing date: 2016-12-26
Publication date: 2018-07-05
Also published as: CN106716968A

Abstract

An account management method and apparatus, and an account management system. The account management method comprises: allocating, at a server, first account information to a user, and sending the allocated first account information to a terminal device (201); receiving, at the terminal device, the first account information sent by the server and second account information input by a user (202); and matching the second account information input by the user and the first account information sent by the server, and performing control on the access with regard to the terminal device according to a matching result (203). The present invention realizes, by means of a server allocating an account to a terminal device, the method for managing multiple accounts on the terminal device, can uniformly perform operations, such as creation or management and adjustment, on an account in the server, and allocates the account to a suitable terminal device without locally performing settings one by one in the terminal device, so that the overall account management is efficient and facilitates use.

Description

Account management method, device and account management system

Technical field

The present application relates to the field of multiple account management technologies, and in particular, to an account management method, apparatus, and account management system.

Background technique

With the rapid development of electronic technology, various types of terminal devices are integrated with more and more functions. In order to improve the utilization of equipment or the privacy of device data usage, it is a very effective method to configure different accounts for multiple users on the terminal device, and it is widely used in enterprises, homes or other fields. When different users use the same terminal device, they can log in to different accounts to ensure that different users can use data that meets their needs or guarantee data and functional isolation between different users.

In the process of implementing the present application, the inventors have found that the related art has the following problem: when an existing multi-account is set on the terminal device, the device administrator can only create an account locally or perform account management. Such a local operation mode is inefficient, and it is not convenient to uniformly manage and use in the case where the number of terminal devices is large.

Summary of the invention

The main purpose of the embodiment of the present application is to improve management efficiency of performing multi-account management on a terminal device.

In order to solve the above technical problem, one technical solution adopted by the embodiment of the present application is: an account management method. The method includes: at a server, allocating first account information to a user, and transmitting the allocated first account information to a terminal device;

Receiving, by the terminal device, the first account information sent by the server and the second account information input by the user; matching the second account information input by the user with the first account information sent by the server, according to the matching result, targeting the terminal device Access is controlled.

Optionally, the method further includes: sending, at the server, the first account information to a user.

Optionally, the allocated first account information corresponds to a specified function on the terminal device; the controlling the access to the terminal device according to the matching result, including: performing access to the specified function of the terminal device according to the matching result control.

Optionally, the specified function is an unlocking function, and the controlling, according to the matching result, the access to the terminal device, including: unlocking the terminal when the matching result is yes.

Optionally, the allocating the first account information corresponding to the specified function on the terminal device comprises: the first account information corresponding to a domain providing a plurality of specified functions; the specifying the terminal device according to the matching result The access of the function is controlled, including: controlling the access to the domain by the allocated account information according to the matching result.

Optionally, the method further includes: sending a timestamp corresponding to the allocated first account information to the terminal device;

The method further includes: determining, by the terminal device, whether the time of the second account information input by the user meets the time indicated by the timestamp corresponding to the first account information; when the determination is negative, determining the second account information input by the user The assigned first account information does not match; when the determination is yes, it is determined that the second account information input by the user matches the assigned first account information.

In order to solve the above technical problem, another technical solution adopted by the embodiment of the present application is to provide an account management apparatus. The device includes:

An account setting module, configured to: at the server, allocate first account information to the user, and send the allocated first account information to the terminal device;

An account receiving module, configured to: at the terminal device, receive first account information sent by the server and second account information input by the user; and an account execution module, configured to: at the terminal device, the second account information input by the user Matching with the first account information sent by the server, and controlling access to the terminal device according to the matching result.

Optionally, the account setting module is further configured to: send the first account information to the user at the server.

Optionally, the allocated first account information corresponds to a specified function on the terminal device; the account execution module is configured to access the specified function for the terminal device according to the matching result. Ask for control.

Optionally, the specified function is an unlocking function; and the account execution module is configured to unlock the terminal when the matching result is yes.

Optionally, the allocating the first account information corresponding to the specified function on the terminal device includes: the first account information corresponds to a domain that provides multiple specified functions; and the account execution module is specifically configured to: match As a result, access to the domain is controlled for the assigned account information.

Optionally, the device further includes: a timestamp module executed at the server, configured to send a timestamp corresponding to the allocated first account information to the terminal device; and a verification module executed at the terminal device, configured to determine the user input Whether the time of the second account information meets the time indicated by the timestamp corresponding to the first account information;

The account execution module is specifically configured to: when the determination is no, determine that the second account information input by the user does not match the allocated first account information; when the determination is yes, determine the second account information input by the user and the allocated The first account information matches.

In order to solve the above technical problem, another technical solution adopted by the embodiment of the present application is to provide an account management system. The system includes: at least one server and a plurality of terminal devices; the server is in communication connection with the terminal device;

The server includes at least one or more processors; and a memory; wherein the memory stores an instruction program executable by the at least one processor, the instruction program being executed by the at least one processor to Causing the at least one processor to perform the method performed at the server as described above;

The terminal device includes at least one or more processors; and a memory; wherein the memory stores an instruction program executable by the at least one or more processors, the instruction program being processed by the at least one The apparatus is executed to cause the at least one processor to perform the method of performing the setting at the terminal as described above.

In order to solve the above technical problem, yet another technical solution adopted by the embodiment of the present application is to provide a computer program product including a software code portion. The software code portion is configured to perform the method steps as described above when run in a memory of the computer.

The account management method provided by the embodiment of the present application distributes accounts to the terminal device through the server. The user's way to achieve multi-account management on the terminal device. In this way, the creation, management, adjustment, and the like of the account can be uniformly performed in the server, and allocated to the appropriate terminal device, and the setting is not required to be performed locally in the terminal device, and the overall account management is efficient and convenient to use.

DRAWINGS

FIG. 1 is an application environment provided by an embodiment of the present application;

2 is a flowchart of a method for managing an account provided by an embodiment of the present application;

FIG. 3 is a flowchart of a method for managing an account according to another embodiment of the present application;

4 is an effect diagram of a terminal device according to an embodiment of the present application;

FIG. 5 is a schematic diagram of a terminal device according to another embodiment of the present disclosure;

FIG. 6 is a schematic diagram of a page of a terminal device according to an embodiment of the present disclosure;

FIG. 7 is a schematic diagram of a page of a terminal device according to another embodiment of the present disclosure;

FIG. 8 is a functional block diagram of an account management apparatus according to an embodiment of the present application;

FIG. 9 is a functional block diagram of an account management apparatus according to another embodiment of the present application;

FIG. 10 is a structural block diagram of an electronic device according to an embodiment of the present application.

detailed description

In order to make the objects, technical solutions, and advantages of the present application more comprehensible, the present application will be further described in detail below with reference to the accompanying drawings and embodiments. It is understood that the specific embodiments described herein are merely illustrative of the application and are not intended to be limiting.

In the use of various types of terminal devices, usually each terminal device may have many different users, such as a corporate mobile phone, an office computer or a tablet computer. Each user has their own personalization habits, requirements, and usage data.

In order to prevent different users from using the same terminal device, the difference caused by their own usage habits or the leakage of usage data. Typically, multiple users are quarantined using multiple "accounts". An "account" is used herein to describe an operating environment of a specific user in a terminal device, which meets the user's personalized requirements, and provides usage habits (such as desktop layout) or requirements corresponding to the user on the terminal device (for example, Applicable functions such as application configuration and function interface).

FIG. 1 is an application environment of an account management method according to an embodiment of the present application. As shown in FIG. 1, the application environment includes: a user 10, a terminal device 20, a server 30, and a network 40.

User 10 can be any group of people having the same or similar operational behavior, such as a family, work group, or individual. Different users 10 have different personalization requirements, including usage habits, needs, or specific user data. Each user 10 can be provided with an account corresponding to the user to provide an operating environment that meets the personalized requirements.

The user 10 can interact with the terminal device 20 by any suitable type, one or more user interaction devices, such as a mouse, keyboard, remote control, touch screen, somatosensory camera or smart wearable device, input commands or control terminal device 20 to perform One or more operations.

The terminal device 20 can also be any suitable type of electronic device having certain logic computing capabilities to provide one or more functions that meet the needs of the user. For example, enterprise computers, mobile phones, smart TVs, personal computers, tablets, smartphones, etc. The terminal device 20 may include one or more logical operation modules that perform any suitable type of function or operation in parallel, such as viewing a database, editing a chart, etc., in a single thread or multiple threads. The logic operation module can be any suitable type of electronic circuit or chip-type electronic device capable of performing logical operation operations, such as a single core processor, a multi-core processor, a graphics processing unit (GPU).

In some embodiments, the terminal device 20 may also include any suitable type of storage medium for storing data, such as a magnetic disk, a compact disc (CD-ROM), a read-only memory, or a random access memory. The storage medium stores a plurality of video or image data. As local data, the terminal device 20 can select to use local data or use online data acquired through the network 40 according to actual conditions.

The storage medium may also store a computer executable program for the logical computing module to invoke and execute, the program being executed by the logic computing module to perform one or more steps of the corresponding function.

The server 30 can provide corresponding service or logical computing capabilities to form any suitable electronic computing platform for performing account management as a cloud system. Server 30 can also be coupled to one or more databases to invoke related data or program instructions. User The administrator 11 in 10 can interact with the server 30 through any suitable type, one or more user interaction devices, such as a mouse, keyboard, remote control, touch screen, somatosensory camera or smart wearable device, inputting instructions or controlling the The cloud system performs one or more operations, such as creating an account or assigning an account to a terminal device. The administrator 11 can be any suitable one of the users 10 with one or more of the corresponding rights. The cloud system can also be any suitable platform built on one or more servers or electronic computing devices.

Network 40 may be any suitable wired or wireless network to enable a communication connection between two electronic devices, such as the Internet, a local area network, or a wired cable. The cloud management platform 30 can establish a communication connection with one or more different terminal devices 10 through the network 40, uploading or delivering data/instructions.

In some application scenarios, when the user 10 needs to use a certain terminal device 20, the user 10 may send a request to the cloud system. When it is determined that the request of the user 10 is legal, the cloud management platform 30 can assign the corresponding account and verification information to the terminal device 20. The user 10 inputs the relevant login information on the terminal device 20, and after the account is verified, the terminal device 20 can be used.

It should be noted that the multi-account management method provided by the embodiment of the present application can be further extended to other suitable application environments with multiple account management requirements, and is not limited to the application environment shown in FIG. Although only four users 10, three terminal devices 20, and one server 30 are shown in FIG. However, those skilled in the art can understand that the application environment may also include more or fewer users, terminal devices, and servers in actual application processes.

FIG. 2 is a flowchart of a method for an account management method according to an embodiment of the present application. The account management method can be executed by the application environment shown in FIG. 1 according to corresponding user instructions.

As shown in FIG. 2, the account management method includes:

201: At the server, assign the first account information to the user, and send the allocated first account information to the terminal device.

The administrator 11 can create, set, or edit multiple different accounts for each user on the cloud system provided by the server according to the actual situation, so as to meet the personalized requirements of different users for the terminal device. Use "first account information" to indicate data that can represent the account, such as the function that the account can use, the terminal device that can be unlocked, or the test Certificate information, etc.

202: At the terminal device, receive first account information sent by the server and second account information input by the user.

203: Match the second account information input by the user with the first account information sent by the server, and control access to the terminal device according to the matching result.

As described above, after receiving the first account information, the terminal device may match the first account information and the second account information, and then determine, according to the matching result, whether to allow access to the terminal device, for example, whether to unlock the terminal device. , let the user enter the terminal device to operate or provide a specific page with several functions.

The method for the terminal device may include, but is not limited to, a desktop (or home page) setting of the terminal device, an application that can be used, data that can be called, and the like. In different types of terminal devices, there are usually different functions, for example, computers in the image processing department and computers in the design department usually have distinct functions.

Through the above-mentioned manner of allocating corresponding account information terminal devices based on the server, a unified management mode of multiple accounts can be realized, which can effectively improve the efficiency of account management, and does not require repeated operations by the operator to edit or maintain accounts locally on different terminal devices. In addition, such a method can support the allocation of an account when the terminal device does not have a corresponding account locally, which is convenient for the user to use.

In some embodiments, server 30 may also send the first account information to the user (step 204). The user can use the terminal device or access to the terminal device according to the received first account information. This sending step can facilitate the user to complete the verification.

In some embodiments, different account information may also have corresponding designated functions.

The specified function may be preset, or a function set by the administrator according to the user's request or the user's authority according to the actual situation.

In this embodiment, step 203 is specifically: controlling access to the specified function of the terminal device according to the matching result. That is to say, for different account information, access control of different designated functions may be performed on the same terminal device, and the functions of the terminal devices that the user can use are also different, and the requirements of personalized settings are met.

Optionally, the designated function may be an unlock function. Step 203 corresponds to: in matching When the result is YES, the terminal is unlocked. Such first account information may provide the user with a way to release the locked state of the terminal device, thereby enabling the user to operate the terminal device.

For example, the user inputs the account information on the terminal device through the first account information sent by the server. The terminal device matches the first account information from the server and the second account information input from the user. When the matching result is correct, the terminal is unlocked and allowed to be used by the user.

Optionally, in addition to the unlocking function, the specifying function may also be corresponding to one page of the terminal device, and the page may be provided with multiple applications capable of implementing a specific function. That is, the first account information may correspond to a domain that provides a plurality of designated functions.

In step 203, the terminal device controls the access to the domain for the allocated account information according to the matching result.

In other embodiments, the specified function may further correspond to the functionality of one or more of the applications in the page. The specified function corresponding to the first account information allocated by the server may also be a combination of one or more specified functions of the foregoing embodiment, and may be adjusted according to actual conditions.

FIG. 3 is a flowchart of a method for managing an account according to another embodiment of the present application. In addition to steps 201-204 shown in FIG. 2, steps as shown in FIG. 3 may also be included:

301: Send the timestamp corresponding to the allocated first account information to the terminal device.

The timestamp gives a time limit for the first account information, and can control the time available for the user or the timeliness of the account information.

302: The terminal device determines whether the time of the second account information input by the user meets the time indicated by the timestamp corresponding to the first account information.

303: When the determination is no, it is determined that the second account information input by the user does not match the allocated first account information.

304: When the determination is yes, it is determined that the second account information input by the user matches the allocated first account information.

When the terminal device performs matching of the second account information from the user and the first account information from the server, it is required to check the timeliness of the account information, and only when the account information satisfies the timeliness requirement, it is judged as yes, Access to the terminal device.

FIG. 4-7 is a method for performing the foregoing account management on a terminal device according to an embodiment of the present application. The effect map.

As shown in FIG. 4, the user 10 wishes to use his or her computer when entering a department. The computer is lit and the account information (name and password) needs to be entered. However, the user 10 does not have an account for the department at this time. Therefore, the user 10 makes a request to the server 30. The server 30 can assign a temporary account information to the user (e.g., from 11:00 to 14:00) and send the account information to the computer.

The user 10 enters the account information in the computer. After the result of the computer matching the two account information is "Yes", the user unlocks and enters the computer desktop (as shown in FIG. 5).

In other embodiments, the specified function corresponding to the account information may also correspond to a domain that includes multiple functions. For example, as shown in FIG. 6, the designated function corresponds to one of the pages of the computer or as shown in FIG. 7, some of the applications in the page corresponding to the computer (the applications that cannot be used are indicated by black slashes in FIG. 7) . When the matching result of the account information is YES, the computer can provide the user 10 with a page as shown in FIG. 6 or as shown in FIG. 7, so that the user can control access to the terminal device.

FIG. 8 is an account management apparatus according to an embodiment of the present application. The account management apparatus is executed based on an account management system composed of a server and a terminal device. As shown in FIG. 8, the account management apparatus includes an account setting module 100, an account receiving module 200, and an account execution module 300.

The account setting module 100 is configured to allocate first account information to the user at the server, and send the allocated first account information to the terminal device. The account configuration module 200 is configured to receive, at the terminal device, first account information sent by the server and second account information input by the user. The account execution module 300 is configured to match the second account information input by the user with the first account information sent by the server, and control access to the terminal device according to the matching result.

In some embodiments, the account setting module 100 is further configured to: send the first account information to a user at a server.

Optionally, the allocated first account information may correspond to a specified function on the terminal device. This specified function can correspond to many different types of functions.

Correspondingly, the account execution module 300 is configured to control access to a specified function of the terminal device according to the matching result.

For example, when the specified function is an unlocking function, the account execution module 300 is configured to unlock the terminal when the matching result is YES. Alternatively, the allocated first account information corresponds to a specified function on the terminal device, and the first account information corresponds to a domain that provides a plurality of designated functions. The account execution module 300 is specifically configured to: control the access to the domain by the allocated account information according to the matching result.

FIG. 9 is an account management apparatus according to another embodiment of the present application. As shown in FIG. 9, in addition to the modules 100-300 shown in FIG. 8, the account management apparatus may further include: a time stamp module 400 and a verification module 500.

The timestamp module 400 is configured to send the timestamp corresponding to the allocated first account information to the terminal device. The verification module 500 is configured to determine whether the time of the second account information input by the user meets the time indicated by the timestamp corresponding to the first account information. The account execution module 300 is configured to determine, when the determination is negative, that the second account information input by the user does not match the allocated first account information; when the determination is yes, determine the second account information input by the user and the first Account information matches.

In this embodiment, an additional time stamp module and a verification module are added to give account information timeliness, and meet the non-permanent account usage requirements of some users.

In the above account management apparatus, each module is respectively executed by the server and the terminal device shown in FIG. 1 and cooperates with each other to implement account management for the terminal device. For example, the account setup module 100 and the time error module 400 are executed in the server, assigning timestamps and account information to the terminal device. The account receiving module 200, the account execution module 300, and the verification module 500 are executed at the terminal device to implement corresponding functions.

FIG. 10 is a schematic structural diagram of hardware of an electronic device according to an embodiment of the present disclosure. The electronic device can be a server or a terminal device. As shown in FIG. 10, the device includes: one or more processors 1010 and a memory 1020, and one processor 910 is taken as an example in FIG.

The processor 1010 and the memory 1020 may be connected by a bus or other means, and the connection by a bus is taken as an example in FIG.

The memory 1020 is a non-volatile computer readable storage medium for storing non-volatile software programs, non-volatile computer executable programs, and modules, as in the present application. Program instructions/modules corresponding to the account management method in the embodiment (for example, the account setting module 100, the account receiving module 200, and the account execution module 300 shown in FIG. 8 or the time stamp module 400 shown in FIG. 9 and the checksum Module 500). The processor 1010 executes various functional applications and data processing of the server by executing non-volatile software programs, instructions, and modules stored in the memory 1020, that is, implementing the above-described method embodiment account management method.

The memory 1020 may include a storage program area and a storage data area, wherein the storage program area may store an operating system, an application required for at least one function; the storage data area may store data created according to usage of the account management device, and the like. Moreover, memory 1020 can include high speed random access memory, and can also include non-volatile memory, such as at least one magnetic disk storage device, flash memory device, or other non-volatile solid state storage device. In some embodiments, memory 1020 can optionally include memory remotely located relative to processor 1020, which can be connected to the account management device over a network. Examples of such networks include, but are not limited to, the Internet, intranets, local area networks, mobile communication networks, and combinations thereof.

The one or more modules are stored in the memory 1020, and when executed by the one or more processors 1010, perform an account management method in any of the above method embodiments.

A person skilled in the art should further appreciate that the elements and algorithm steps of the various examples described in connection with the embodiments disclosed herein can be implemented in electronic hardware, computer software, or a combination of both, in order to clearly illustrate hardware and software. Interchangeability, the composition and steps of the various examples have been generally described in terms of function in the above description. Whether these functions are performed in hardware or software depends on the specific application and design constraints of the solution. A person skilled in the art can use different methods to implement the described functions for each particular application, but such implementation should not be considered to be beyond the scope of the present application. The computer program instructions can be stored in a non-transitory computer readable storage medium, which, when executed, can include the flow of an embodiment of the methods described above. The storage medium may be a magnetic disk, an optical disk, a read-only storage memory, or a random storage memory.

The above description is only the embodiment of the present application, and thus does not limit the scope of patents of the present application, and the equivalent structure or equivalent process made by using the contents of the specification and the drawings of the present application is changed. It is also within the scope of patent protection of the present application to change, or directly or indirectly, in other related technical fields.

Claims

An account management method, characterized in that the method comprises:

At the server, assigning first account information to the user, and transmitting the allocated first account information to the terminal device;

Receiving, by the terminal device, the first account information sent by the server and the second account information input by the user; matching the second account information input by the user with the first account information sent by the server, according to the matching result, targeting the terminal device Access is controlled.
The method of claim 1 wherein the method further comprises: transmitting, at the server, the first account information to a user.
The method according to claim 1, wherein the allocated first account information corresponds to a designated function on the terminal device;

The controlling access to the terminal device according to the matching result includes: controlling access to the specified function of the terminal device according to the matching result.
The method according to claim 3, wherein the designated function is an unlocking function;

The controlling the access to the terminal device according to the matching result includes: unlocking the terminal when the matching result is YES.
The method according to claim 3, wherein the allocating the first account information corresponding to the specified function on the terminal device comprises: the first account information corresponding to a domain providing a plurality of designated functions;

The controlling the access to the specified function of the terminal device according to the matching result includes: controlling, according to the matching result, the access to the domain by the allocated account information.
The method according to claim 1, wherein the method further comprises: transmitting a timestamp corresponding to the allocated first account information to the terminal device;

The method further includes: determining, by the terminal device, whether the time of the second account information input by the user meets the time indicated by the timestamp corresponding to the first account information;

When the determination is no, it is determined that the second account information input by the user does not match the allocated first account information;

When the determination is YES, it is determined that the second account information input by the user matches the assigned first account information.
An account management apparatus, characterized in that the apparatus comprises:

An account setting module, configured to: at the server, allocate first account information to the user, and send the allocated first account information to the terminal device;

An account receiving module, configured to receive, at the terminal device, first account information sent by the server and second account information input by the user;

And an account execution module, configured to: at the terminal device, match the second account information input by the user with the first account information sent by the server, and control access to the terminal device according to the matching result.
The device according to claim 7, wherein the account setting module is further configured to: send the first account information to a user at a server.
The apparatus according to claim 7, wherein said allocated first account information corresponds to a designated function on the terminal device;

The account execution module is configured to control access to a specified function of the terminal device according to the matching result.
The apparatus according to claim 9, wherein the designated function is an unlocking function; and the account execution module is configured to unlock the terminal when the matching result is YES.
The apparatus according to claim 9, wherein the assigned first account information corresponds to a specified function on the terminal device, the first account information corresponding to a domain providing a plurality of designated functions;

The account execution module is specifically configured to: control the access to the domain by the allocated account information according to the matching result.
The device according to claim 7, wherein the device further comprises:

a timestamp module executed on the server, configured to send the timestamp corresponding to the allocated first account information to the terminal device;

Performing a verification module on the terminal device, configured to determine whether a time of the second account information input by the user meets a time indicated by a timestamp corresponding to the first account information;

The account execution module is specifically configured to: when the determination is no, determine the second input by the user The account information does not match the assigned first account information; when the determination is yes, it is determined that the second account information input by the user matches the assigned first account information.
An account management system, comprising: at least one server and a plurality of terminal devices; wherein the server is in communication connection with the terminal device;

The server includes at least one or more processors; and, a memory;

Wherein the memory stores an instruction program executable by the at least one processor, the instruction program being executed by the at least one processor to cause the at least one processor to perform any of claims 1-6 The method performed on the server as described in the item;

The terminal device includes at least one or more processors; and a memory;

Wherein the memory stores an instruction program executable by the at least one or more processors, the instruction program being executed by the at least one processor to cause the at least one processor to perform as claimed in claim 1 The method of performing the setting in the terminal described in any one of 6.
A computer program product comprising a software code portion, wherein the software code portion is configured to perform the method steps of any of claims 1-6 when run in a memory of a computer.