WO2021035708A1

WO2021035708A1 - Method and apparatus for accessing collection resources, device and storage medium

Info

Publication number: WO2021035708A1
Application number: PCT/CN2019/103782
Authority: WO
Inventors: 吕小强
Original assignee: Oppo广东移动通信有限公司
Priority date: 2019-08-30
Filing date: 2019-08-30
Publication date: 2021-03-04
Also published as: CN113615140A; CN113615140B

Abstract

A method and apparatus for accessing collection resources, a device and a storage medium, relating to the technical field of an Internet of Things. The method comprises: a terminal sending a first collection resource access request to a first device; the first device sending a first link resource access request to the second device; the second device sending an access result of a first link resource to the first device, wherein the access result of the first link resource is generated after the second device executes the first link resource access request when it is determined that the terminal has the right to access the first link resource; and the first device sending a first collection resource access response to the terminal, wherein the first collection resource access response comprises the access result of the first link resource.

Description

Method, device, equipment and storage medium for accessing collective resources

Technical field

The embodiments of the present application relate to the technical field of the Internet of Things, and particularly relate to a method, device, device, and storage medium for accessing collective resources.

Background technique

IoT device management methods based on REST (Representational State Transfer) architecture are becoming more and more popular. Under the REST architecture, things (such as devices) in the physical world can be described in the form of resources, and CURDN (including create (create), update (modify/update), retrieve (acquire), delete) Delete), notification (notification)) to manipulate resources.

In the process of resource description, a collection resource named collection is defined. The collective resource may include one or more linked resources (linked resources). For a collective resource, the linked resources included can include collective resources and/or non-collective resources. In related technologies, a method for accessing collection resources through batch (batch processing) is defined. The terminal sends a first collection resource access request to the first device, where the first collection resource access request is used to request access to the first collection resource saved by the first device. Assume that the first set of resources includes the first link resource. After receiving the first collection resource access request, the first device verifies whether the terminal has the right to access the first collection resource. If the terminal has the right to access the first collection resource, the first device decomposes the first collection resource access request , Generating a first link resource access request, where the first link resource access request is used to request access to the first link resource. Then, the first device sends the first link resource access request to the second device, and the second device stores the first link resource. After receiving the first link resource access request, the second device verifies whether the first device has permission to access the first link resource. If the first device has the permission to access the first link resource, the second device executes the first link resource Access the request, and feed back the corresponding execution result to the first device, and then the first device sends the execution result to the terminal.

In the above-mentioned related art, since the second device verifies the access authority of the first device to the first link resource before executing the first link resource access request, instead of the terminal's access authority to the first link resource, it saves the first link resource. The first device of a collection of resources must have the right to access the link resources (including the above-mentioned first link resources) in the first collection of resources. However, in this case, it does not mean that the terminal must have the authority to access the first link resource, and therefore there are security loopholes.

Summary of the invention

The embodiments of the present application provide a method, device, device, and storage medium for accessing collective resources, which can be used to solve the above technical problems. The technical solution is as follows:

On the one hand, an embodiment of the present application provides a method for accessing a collective resource, which is applied to a first device, and the method includes:

Receiving a first collection resource access request sent by a terminal, where the first collection resource access request is a request for the terminal to access a first collection resource saved by the first device;

A first link resource access request is sent to a second device, where the second device stores the first link resource included in the first set of resources, and the first link resource access request is the request from the first device to the Request for access to the first link resource;

Receiving the access result of the first link resource sent by the second device;

Send a first collection resource access response to the terminal, where the first collection resource access response includes the access result of the first link resource, wherein the access result of the first link resource is determined when the terminal has access In the case of the authority of the first link resource, it is generated after the second device executes the first link resource access request.

On the other hand, an embodiment of the present application provides a method for accessing a collective resource, which is applied to a second device, and the method includes:

Receive a first link resource access request sent by a first device, where the first link resource access request is a request by the first device to access a first link resource in a first set of resources, wherein the first link The resource access request is generated by the first device after receiving the first collection resource access request sent by the terminal, and the first collection resource access request is the first collection saved by the terminal to the first device A request for access to a resource, the first link resource is stored in the second device;

Send the access result of the first link resource to the first device, where the access result of the first link resource is used to send the access to the terminal when it is determined that the terminal has the right to access the first link resource send.

On the other hand, an embodiment of the present application provides a method for accessing collective resources, which is applied to a terminal, and the method includes:

Sending a first set of resource access request to the first device, where the first set of resource access request is a request for the terminal to access the first set of resources saved by the first device;

Receive a first collection resource access response sent by the first device, where the first collection resource access response includes an access result of a first link resource in the first collection resource, wherein the access of the first link resource The result is sent to the terminal when it is determined that the terminal has the right to access the first link resource.

In another aspect, an embodiment of the present application provides an apparatus for accessing a collective resource, which is applied to a first device, and the apparatus includes:

A request receiving module, configured to receive a first collection resource access request sent by a terminal, where the first collection resource access request is a request for the terminal to access the first collection resource saved by the first device;

The request sending module is configured to send a first link resource access request to a second device, where the second device stores the first link resource included in the first set of resources, and the first link resource access request is the A request for the first device to access the first link resource;

A result receiving module, configured to receive the access result of the first link resource sent by the second device;

The response sending module is configured to send a first collection resource access response to the terminal, where the first collection resource access response includes the access result of the first link resource, wherein the access result of the first link resource is In a case where it is determined that the terminal has the authority to access the first link resource, it is generated after the second device executes the first link resource access request.

In another aspect, an embodiment of the present application provides a device for accessing a collective resource, which is applied to a second device, and the device includes:

The request receiving module is configured to receive a first link resource access request sent by a first device, where the first link resource access request is a request by the first device to access the first link resource in the first set of resources, where The first link resource access request is generated by the first device after receiving the first collection resource access request sent by the terminal, and the first collection resource access request is stored by the terminal on the first device Request for access to the first set of resources, the first link resource is stored in the second device;

The result sending module is configured to send the access result of the first link resource to the first device, where the access result of the first link resource is used when it is determined that the terminal has the right to access the first link resource In this case, send to the terminal.

On the other hand, an embodiment of the present application provides a device for accessing a collection of resources, which is applied to a terminal, and the device includes:

A request sending module, configured to send a first collection resource access request to a first device, where the first collection resource access request is a request for the terminal to access the first collection resource saved by the first device;

The response receiving module is configured to receive a first collection resource access response sent by the first device, where the first collection resource access response includes an access result of a first link resource in the first collection resource, wherein the The access result of the first link resource is sent to the terminal when it is determined that the terminal has the authority to access the first link resource.

In yet another aspect, an embodiment of the present application provides a network device, the network device includes a processor and a memory, the memory stores a computer program, and the computer program is used to be executed by the processor to implement the foregoing A method for accessing a collection of resources on the side of a device or a second device.

In yet another aspect, an embodiment of the present application provides a terminal, the terminal includes a processor and a memory, the memory stores a computer program, and the computer program is used to be executed by the processor to implement the foregoing terminal side The access method of the collection resource.

In another aspect, an embodiment of the present application provides a computer-readable storage medium in which a computer program is stored, and the computer program is used to be executed by a processor to implement the collective resource described in any of the above aspects. Access method.

The technical solutions provided by the embodiments of the present application may include the following beneficial effects:

After receiving the terminal's request for access to the collective resource, verify the terminal's access authority to the link resource contained in the collective resource, and after confirming that the terminal has the authority to access the linked resource, perform corresponding operations on the link resource , To prevent unauthorized terminals from accessing link resources, and improve the security of the system.

Description of the drawings

Figure 1 is a flow chart of a method for accessing collective resources provided by related technologies;

Figure 2 is a schematic diagram of an implementation environment provided by an embodiment of the present application;

Fig. 3 is a flowchart of a method for accessing a collective resource provided by an embodiment of the present application;

FIG. 4 is a flowchart of a method for accessing collective resources provided by another embodiment of the present application;

Fig. 5 is a flowchart of a method for accessing a collective resource provided by another embodiment of the present application;

Fig. 6 is a flowchart of a method for accessing a collective resource provided by another embodiment of the present application;

FIG. 7 is a flowchart of a method for accessing a collective resource provided by another embodiment of the present application;

Fig. 8 is a flowchart of a method for accessing a collective resource provided by another embodiment of the present application;

Fig. 9 is a flowchart of a method for accessing a collective resource provided by another embodiment of the present application;

Fig. 10 is a flowchart of a method for accessing a collective resource provided by another embodiment of the present application;

Fig. 11 is a block diagram of a device for accessing a collective resource provided by an embodiment of the present application;

FIG. 12 is a block diagram of a device for accessing collective resources provided by another embodiment of the present application;

Fig. 13 is a block diagram of a device for accessing a collective resource provided by another embodiment of the present application;

FIG. 14 is a schematic structural diagram of a network device provided by an embodiment of the present application;

FIG. 15 is a schematic structural diagram of a terminal provided by an embodiment of the present application.

detailed description

In order to make the objectives, technical solutions, and advantages of the present application clearer, the implementation manners of the present application will be further described in detail below with reference to the accompanying drawings.

As described in the background technology section above, a collective resource may include one or more linked resources, and the linked resource may be a collective resource or a non-collective resource. Generally, the link resource in the collective resource is only a link, and the link points to the real address of the link resource in the network. The link resource may be on the same physical device as the collection resource, or it may not be on the same physical device.

Regardless of whether it is a collective resource or a non-collective resource, it contains two attributes of resource type (resource type, referred to as "rt") and interface (referred to as "if"). Among them, the rt attribute is used to indicate the type of the resource. Generally speaking, a resource type is defined in an IoT technology system, and then different fields, different devices, and different resources can instantiate the resource type. The if attribute is used to indicate how the resource can be accessed, for example, through different interfaces such as read (read), readwrite (read and write), linklist (link operation), and batch (batch processing).

Among them, the function of the batch interface is to recurse to each link resource included in a collection resource to obtain the attribute value of the resource. For example, suppose there is a collection resource named "house". The house resource includes two link resources, namely the door resource and the light resource. Assume that device A saves the house resource, device B saves the door resource, and C If the light resource is stored in the device, the terminal can obtain the status of the door resource and the light resource, or modify the status of the door resource and the light resource by sending a collection resource access request with a batch interface to the A device. The implementation process is: when the A device (denoted as "hostdevice") receives the above-mentioned collective resource access request with the batch interface, it will decompose the collective resource access request to generate the first link resource access request and the second link resource access request , Where the first link resource access request is used to request access to the door resource, and the second link resource access request is used to request access to the light resource; after that, hostdevice sends the first link to the B device (denoted as "linkdevice1") For the resource access request, linkdevice1 processes the first link resource access request accordingly; hostdevice also sends a second link resource access request to the C device (denoted as "linkdevice2"), and linkdevice2 processes the second link resource access request accordingly.

It can be seen from the above example that through the batch interface, the terminal can obtain the status information of all the link resources in the collective resource at one time. It can be seen that the purpose of the batch interface is to access all the link resources in the collection resource at one time. If there is no batch interface, the terminal needs to first obtain the address of the link resource in the collection resource (ie, the "link" described above), and then obtain the address of the link resource, and then send the access to the device based on the address to the device used to save the link resource. Link resource request. The batch interface fully simplifies the process of accessing the link resource in the collection resource, and omits the step of obtaining the address of the link resource.

In an example, still taking the house resource as an example, the process of accessing the collection resource through the batch interface is introduced. As shown in Figure 1, the process can include the following steps (11-18):

Step 11. The terminal sends a first collection resource access request to the first device;

The first collection resource access request is a request for the terminal to access the first collection resource saved by the first device. For example, when the client requests to modify/update (update) the house resource saved by the hostdevice, the client can send an update request with a batch interface to the hostdevice. An example of the update request is as follows: Update/house? if=oic.if.b{content}. Among them, b represents the batch interface.

If the collection resource access request indicates that the collection resource is accessed through the batch interface, that is, the collection resource access request includes a batch interface, the collection resource access request can be called a batch request.

Step 12: The first device verifies whether the terminal has permission to access the first set of resources;

For example, after hostdevice receives the above update request, it verifies whether the client has permission to access house resources.

Step 13. If the terminal has the authority to access the first collection of resources, the first device decomposes the first collection of resource access requests to generate a first link resource access request;

The first link resource access request is a request used by the first device to access the first link resource included in the first set of resources. An example of the first link resource access request is as follows: Update/link1? if = default interface; where /link1 represents the first link resource, and default interface represents the default interface corresponding to /link1. The default interface can be any of different interfaces such as read interface, readwrite interface, linklist interface, batch interface, etc. .

Still taking the example of the above house resource as an example, if the client has the permission to access the house resource, the hostdevice decomposes the above update request, and generates an access request corresponding to the door resource and an access request corresponding to the light resource. Among them, an example of an access request corresponding to the door resource is as follows: Update/door? if=oic.if.rw, it means to update the door resource request through the readwrite interface; the example of the access request corresponding to the light resource is as follows: Update/light? if=oic.if.r, it means to update the light resource request through the read interface.

In addition, if the terminal does not have the authority to access the first set of resources, the first device sends an error response to the terminal.

Step 14. The first device sends a first link resource access request to a second device, and the second device stores the first link resource;

Assuming that the door resource is stored in linkdevice1 and the light resource is stored in linkdevice2, the hostdevice sends the above-mentioned access request corresponding to the door resource to linkdevice1; the first device also sends the above-mentioned access request corresponding to the light resource to linkdevice2.

Step 15. The second device verifies whether the first device has permission to access the first link resource;

After linkdevice1 receives the above-mentioned access request corresponding to the door resource, it will verify whether the hostdevice has the authority to access the door resource; linkdevice2 will verify whether the hostdevice has the authority to access the light resource after receiving the above-mentioned access request corresponding to the light resource.

Step 16. If the first device has the permission to access the first link resource, the second device executes the first link resource access request;

For example, when hostdevice has the permission to access the door resource, linkdevice1 will execute the above-mentioned access request corresponding to the door resource; when the hostdevice has the permission to access the light resource, linkdevice2 will execute the above-mentioned access request corresponding to the light resource.

In addition, if the first device does not have the authority to access the first link resource, the second device sends an error response to the first device.

Step 17, the second device sends the execution result corresponding to the first link resource access request to the first device;

For example, after linkdevice1 executes the access request corresponding to the door resource, it sends the corresponding execution result to hostdevice; linkdevice2 sends the corresponding execution result to the hostdevice after executing the access request corresponding to the light resource.

Step 18: The first device sends an execution result corresponding to the first set of resource access requests to the terminal.

For example, after receiving the execution results fed back by linkdevice1 and linkdevice2, hostdevice sends the execution results to the client.

The above is the processing flow of a batch request for a collection of resources. It can be seen that after hostdevice decomposes the original request sent by the client, linkdevice checks the hostdevice's access rights to the link resources, not the client's access rights to the link resources. What needs to be explained here is that the hostdevice that saves the collection resource must have the authority to access the link resource in the collection resource.

However, if the client directly accesses the link resource in the collection resource, it can go through the following process: Taking access to the door resource as an example, the client obtains the address of the door resource, and based on the address, sends an access request corresponding to the door resource to linkdevice1. The request example is update/door? if=oic.if.rw; after linkdevice1 receives the above request, it verifies whether the client has the permission to access the door resource; if the client has the permission to access the door resource, linkdevice1 executes the request and returns the execution result to the client; if the client does not have access If you have the permission of the door resource, linkdevice1 will not execute the request and feedback an error response to the client. Obviously, in theory, there is a possibility that the client does not have the authority to access the door resource.

Based on the above example, it can be seen that the client accesses the door resource by batch requesting the house resource, and it may get different results from directly accessing the door resource. In other words, it is possible to expand the access rights of the terminal through batch requests for collective resources, which is a security hole.

In the technical solution provided by the embodiments of the present application, after receiving the terminal's access request for the collective resource, the terminal will verify the access authority of the link resource included in the collective resource, thereby solving the above-mentioned problem and improving security.

In the following, several embodiments will be used to introduce and explain the technical solution of the present application.

Please refer to FIG. 2, which shows a schematic diagram of an implementation environment provided by an embodiment of the present application. The implementation environment may include: a terminal 21, a first device 22, and a second device 23. The implementation environment may be an Internet of Things system.

The terminal 21 may include various handheld devices (such as mobile phones, tablet computers, etc.) with wireless communication functions, in-vehicle devices, wearable devices, computing devices or other processing devices connected to wireless modems, as well as various forms of user equipment (User Equipment, UE), mobile station (Mobile Station, MS), terminal device (terminal device), etc. For ease of description, in the embodiments of the present application, the devices mentioned above are collectively referred to as terminals.

The first device 22 may store a collective resource, and the collective resource includes a link of the link resource stored on the second device 23. In different application scenarios, the specific implementation form of the first device 22 may also be different. For example, in a home Internet of Things system, the first device 22 may be a router; for another example, in a cloud platform-based Internet of Things system, the first device 22 may be a server in the cloud. In the embodiment of the present application, the specific implementation form of the first device 22 is not limited, and any device that stores collective resources can be used as the first device 22.

Link resources may be stored in the second device 23. A collection resource can include one or more link resources, and the link resource can be a collection resource or a non-collection resource. The second device 23 may be an access device in the Internet of Things system. For example, the second device 23 may be a terminal device, a smart home device, or other devices with network access capabilities, which is not limited in the embodiment of the present application.

The terminal 21 may communicate with the first device 22 through a wireless or wired network, and the first device 22 may communicate with the second device 23 through a wireless or wired network. In addition, the number of the second device 23 may be one or more.

It should be noted that the link resource may be on the same physical device as the collective resource, or it may not be on the same physical device. That is, the above-mentioned first device 22 and second device 23 may be the same physical device, or may be two different physical devices. However, regardless of whether the first device 22 and the second device 23 are the same physical device or two different physical devices, the following method procedures provided in the embodiments of the present application are applicable.

In an example, taking a home Internet of Things system as an example, the terminal 21 may be a mobile phone used by the user, the first device 22 may be a router, and the second device 23 may be a smart TV, a smart speaker, a smart air conditioner, a smart light, or a smart door and window. , Smart curtains, smart sockets and other smart home appliances.

The terminal 21 may be installed and running with a client (client), which can initiate a collection resource access request to the first device 22, such as a batch request for the collection resource, to access each link resource contained in the collection resource, such as Perform operations such as create (create), update (modify/update), retrieve (acquire), delete (delete), notification (notification), etc. In the embodiments of the present application, "access" to resources may also be referred to as "operation", but those skilled in the art can understand its meaning. Access to resources, including CURDN and other methods introduced above.

Please refer to FIG. 3, which shows a flowchart of a method for accessing a collective resource provided by another embodiment of the present application. The method can be applied to the implementation environment shown in FIG. 2. The method can include the following steps (301-304):

Step 301: The terminal sends a first collection resource access request to the first device.

The first collection resource access request is a request for the terminal to access the first collection resource saved by the first device. Optionally, the first collection resource access request is a batch request, that is, the first collection resource access request has a batch interface for requesting access to all link resources in the first collection resource through the batch interface, such as obtaining the first collection of resources. The state of all the link resources in a set of resources, or the state of all the link resources in the first set of resources is modified.

The first collection resource may include one or more link resources, and the link resource may be a collection resource or a non-collection resource. For example, the first collection resource includes two link resources, and these two link resources are all non-collection resources. For another example, the first collection resource includes two link resources, one of the link resources is a collection resource, and the other link resource is a non-collection resource. For another example, the first collection resource includes two link resources, and these two link resources are all collection resources.

In the embodiments of the present application, collective resources refer to resources that include at least one link resource, and non-collective resources refer to resources that no longer include link resources.

Optionally, the first set of resource access requests include operation mode information, resource name information, and interface attribute information. Among them, the operation mode information included in the first collection resource access request is used to indicate the operation mode of the first collection resource, such as create (create), update (modify/update), retrieve (acquire), delete (delete), Any of notifications. The resource name information included in the first collection resource access request is the name of the first collection resource. The interface attribute information included in the first collection resource access request is used to indicate the interface used to access the first collection resource, such as read (read), readwrite (read and write), linklist (link operation) and batch (batch processing) ). Among them, the aforementioned batch processing interface may also be referred to as a collective operation interface.

Step 302: The first device sends a first link resource access request to the second device.

After receiving the first collection resource access request, the first device may decompose the first collection resource access request to generate at least one link resource access request. Wherein, each link resource access request corresponds to a link resource in the first set of resources, and is used to request access to this link resource.

In the embodiment of the present application, taking the first link resource included in the first collection resource as an example, the first link resource may be any link resource in the first collection resource. The first link resource may be a collective resource or a non-collective resource. The second device stores the first link resource included in the first set of resources. The first device decomposes the first set of resource access requests to generate a first link resource access request, where the first link resource access request is a request for the first device to access the first link resource.

The first link resource access request includes operation mode information, resource name information, and interface attribute information. Among them, the operation mode information included in the first link resource access request is used to indicate the operation mode of the first link resource, such as create (create), update (modify/update), retrieve (acquire), delete (delete), Any of notifications. Optionally, the operation mode information included in the first link resource access request is the same as the operation mode information included in the first collection resource access request. The resource name information included in the first link resource access request is the name of the first link resource. The interface attribute information included in the first link resource access request is used to indicate the interface used to access the first link resource, such as read (read), readwrite (read and write), linklist (link operation), and batch (batch processing). ). In addition, for the interface attribute information included in the first link resource access request, the indicated interface is the default interface of the first link resource. For example, if the default interface of the first link resource is the read interface, the interface indicated by the interface attribute information included in the first link resource access request is the read interface; for another example, if the default interface of the first link resource is the readwrite interface, Then the interface indicated by the interface attribute information included in the first link resource access request is the readwrite interface; for another example, if the default interface of the first link resource is the batch interface, the interface attribute information included in the first link resource access request is The indicated interface is a batch interface.

In addition, the first device stores the address corresponding to each link resource included in the first set of resources. Taking the first link resource as an example, the address of the first link resource points to the device that saves the first link resource (that is, " The second device"). The first device sends the first link resource access request to the second device according to the address of the first link resource.

In addition, the first set of resources may include one or more link resources, and for each link resource, the same way can be used to generate a corresponding link resource access request. In this embodiment, the first link resource is mainly taken as an example for introduction and description.

Step 303: The second device sends the access result of the first link resource to the first device. The access result of the first link resource is that the second device executes the first link resource when it is determined that the terminal has the right to access the first link resource. Generated after link resource access request.

After receiving the first link resource access request, the second device will detect whether the first device has the permission to access the first link resource. For example, the second device may store the identification of each device that is authorized to access the first link resource and/or the identification of each device that is not authorized to access the first link resource, and the second device may store the above-mentioned information based on the stored information and the device identification of the first device. , Perform permission verification on the first device.

In the technical solution provided by the embodiment of the present application, the terminal's permission to access the first link resource is also verified. The verification process may be performed by the second device or the first device. For these two methods, they will be separately introduced and explained in the following embodiments.

In the case where it is determined that the terminal has the authority to access the first link resource, the second device will execute the first link resource access request and generate the access result of the first link resource. Then, the second device sends the access result of the first link resource to the first device, and the first device sends the access result of the first link resource to the terminal.

In addition, if the terminal does not have the authority to access the first link resource, the second device will not execute the first link resource access request.

It should be noted that since the first link resource can be a non-collective resource or a collective resource, if the first link resource is a non-collective resource, the second device executes the first link resource access request, which may include obtaining the first link resource And/or modify the status of the first link resource; if the first link resource is a collective resource, the second device needs to further decompose the request. For related introduction, please refer to the following embodiments.

Step 304: The first device sends a first collection resource access response to the terminal, where the first collection resource access response includes the access result of the first link resource.

Optionally, if the first collection resource includes other link resources in addition to the first link resource, the access response to the first collection resource may also include access results of other link resources. In addition, the second device may simultaneously send the access results of multiple link resources in the first set of resources to the terminal, or may also send to the terminal separately, which is not limited in the embodiment of the present application.

In summary, in the technical solution provided by the embodiments of the present application, after receiving the terminal's access request for the collective resource, verifying the terminal's access authority to the link resource contained in the collective resource, confirming that the terminal has access to the link resource In the case of the permission, the corresponding operation is performed on the link resource to prevent the terminal without permission from accessing the link resource, and the security of the system is improved.

The embodiment of the present application provides two different implementation solutions to verify the terminal's access authority to the connection resource included in the collective resource. In the first possible implementation solution, the second device (that is, the device storing the link resource) verifies the terminal. In the second possible implementation solution, the first device (that is, the device storing the collective resource) verifies the terminal. In the following embodiments shown in Figs. 4 and 5, the first possible implementation scheme is mainly introduced; in the following embodiments shown in Figs. 6 to 8, the second possible implementation scheme is mainly introduced.

Please refer to FIG. 4, which shows a flowchart of a method for accessing a collective resource provided by an embodiment of the present application, and the method can be applied to the implementation environment shown in FIG. 2. The method can include the following steps (401-405):

Step 401: The first device receives the first collection resource access request sent by the terminal.

The first collection resource access request is used to request access to the first collection resource saved by the first device. Optionally, the first collection resource access request is a batch request, that is, the first collection resource access request has a batch interface for requesting access to all link resources in the first collection resource through the batch interface, such as obtaining the first collection of resources. The state of all the link resources in a set of resources, or the state of all the link resources in the first set of resources is modified. The first collection resource may include one or more link resources, and the link resource may be a collection resource or a non-collection resource.

For the introduction and description of the first set of resource access requests, please refer to the embodiment in FIG. 3 above, which will not be repeated in this embodiment.

Step 402: The first device decomposes the first set of resource access requests, and generates a first link resource access request. The first link resource access request includes the device identifier of the terminal.

After receiving the above-mentioned first set of resource access request, the first device may first detect whether the terminal has the right to access the first set of resources. For example, the first device may query a rights configuration table, the rights configuration table including a first collection of resources, and permission information corresponding to the first collection of resources, and the permission information can include the identification of each device that has access to the first collection of resources. If the authority information corresponding to the first set of resources includes the device identifier of the above-mentioned terminal, it is determined that the terminal has the authority to access the first set of resources.

When the terminal has the authority to access the first collection of resources, the first device decomposes the first collection of resource access requests, and generates at least one link resource access request. Wherein, each link resource access request corresponds to a link resource in the first set of resources, and is used to request access to this link resource. Optionally, the first link resource access request is used to request access to the first link resource included in the first set of resources. The first link resource may be any link resource in the first set of resources. The first link resource may be a collective resource or a non-collective resource.

For the introduction and description of the first link resource access request, please refer to the embodiment in FIG. 3 above, which will not be repeated in this embodiment.

In this embodiment, the first link resource access request also includes the device identification of the terminal. The device identifier of the terminal is the unique identifier of the terminal, and is used to uniquely identify the terminal. For example, the request source attribute information is added to the first link resource access request, and the request source attribute information is used to indicate the device identifier of the source device (that is, the aforementioned terminal) of the first link resource access request. For example, the request source attribute information may be represented by the batchfrom attribute, and the value corresponding to the batchfrom attribute is the device identification of the terminal.

Optionally, the first link resource access request further includes a request identifier, and the request identifier is used to indicate that the first link resource access request is a decomposition request of the batch request. A batch request refers to a collective resource access request carrying a batch interface, and a decomposition request refers to a request generated based on the link resources included in the collective resource included in the batch request. For an introduction to decomposing a collection resource access request and generating a link resource access request, please refer to the above embodiment. For example, the request identifier may be represented by the batchflag attribute, and the value corresponding to the batchflag attribute indicates whether the current request is a decomposition request of the batch request. For example, if the current request is a decomposition request of a batch request, the value corresponding to the batchflag attribute is 1; if the current request is not a decomposition request of a batch request, the value corresponding to the batchflag attribute is 0.

Step 403: The first device sends a first link resource access request to the second device.

The first link resource is stored in the second device.

Step 404: The second device detects whether the terminal has the authority to access the first link resource.

After receiving the first link resource access request, the second device needs to detect whether the first device has the authority to access the first link resource on the one hand, and on the other hand, it also needs to detect whether the terminal has the authority to access the first link resource. For example, the second device may store the identification of each device that is authorized to access the first link resource and/or the identification of each device that is not authorized to access the first link resource, and the second device may store the above-mentioned information based on the stored information and the device identification of the first device. , The device identification of the terminal, to verify the authority of the first device and the terminal respectively.

Optionally, if the first link resource access request also includes a request identifier, the second device reads the request identifier in the first link resource access request, and if the request identifier is used to indicate that the first link resource access request is a batch request If the decomposition request is made, the second device executes the above step 404. Otherwise, if the request identifier is used to indicate that the first link resource access request is not a decomposition request of the batch request, the second device may not perform authorization verification on the terminal or execute other pre-configured processing logic, which is not limited in this embodiment of the application.

Step 405: If the terminal has the authority to access the first link resource, the second device executes the first link resource access request.

In the case that both the first device and the terminal have the authority to access the first link resource, the second device executes the first link resource access request to obtain the access result of the first link resource, and then sends the access result of the first link resource To the first device, the first device sends the access result of the first link resource to the terminal.

In addition, if the terminal does not have the authority to access the first link resource, the second device sends an error response to the first device, and the first device sends the error response to the terminal. Wherein, the error response is used to indicate that the access to the first link resource fails.

In an example, referring to FIG. 5, the following steps can be used to implement the authorization verification of the terminal by the device for saving the link resource:

Step 51: The terminal sends a first collection resource access request to the first device;

Exemplarily, the client sends a batch request for requesting to update the collection resource mycollection1 to the hostdevice, and the interface attribute information included in the request is used to indicate that the interface used to access the collection resource mycollection1 is the batch interface, and the request includes The operation mode information of is used to indicate that the operation mode of the collection resource mycollection1 is update (modification/update).

Step 52: The first device detects whether the terminal has the authority to access the first set of resources;

Hostdevice detects whether the client has the permission to access the collection resource mycollection1.

Step 53: If the terminal has the authority to access the first collection of resources, the first device decomposes the first collection of resource access requests to generate a first link resource access request, and the first link resource access request includes the device identification of the terminal;

If the client has the permission to access the collection resource mycollection1, the hostdevice decomposes the batch request and generates the first link resource access request. Exemplarily, the interface indicated by the interface attribute information included in the first link resource access request is the default interface of the first link resource link1; the operation mode information included in the first link resource access request is used to indicate that the first link resource access request The operation mode of the link resource link1 is update (modification/update); the value corresponding to the batchfrom attribute included in the first link resource access request is the device identifier corresponding to the client. Optionally, the first link resource access request further includes a batchflag attribute, and its corresponding value is 1, indicating that the current request is a decomposition request of the batch request.

Step 54: The first device sends the first link resource access request to the second device;

Assuming that linkdevice1 stores the first link resource link1, hostdevice sends the above-mentioned first link resource access request to linkdevice1.

Step 55: The second device detects whether the first device has the permission to access the first link resource;

Linkdevice1 detects whether hostdevice has the permission to access the first link resource link1.

Step 56: If the first device has the authority to access the first link resource, the second device detects whether the terminal has the authority to access the first link resource;

If the hostdevice has the permission to access the first link resource link1, linkdevice1 further detects whether the client has the permission to access the first link resource link1.

Optionally, linkdevice1 reads the value corresponding to the batchflag attribute. If it is determined according to the value corresponding to the batchflag attribute that the current request is a decomposition request of the batch request, linkdevice1 further reads the value corresponding to the batchfrom attribute to obtain the device ID corresponding to the client, and then Based on this, it is detected whether the client has the permission to access the first link resource link1.

Step 57: If the terminal has the authority to access the first link resource, the second device executes the first link resource access request;

If the client has the permission to access the first link resource link1, linkdevice1 executes the first link resource access request and obtains the corresponding execution result.

Step 58, the second device sends the execution result corresponding to the first link resource access request to the first device;

Linkdevice1 sends the execution result corresponding to the first link resource access request to hostdevice.

Step 59: The first device sends an execution result corresponding to the first set of resource access requests to the terminal.

The Hostdevice sends the execution result corresponding to the first set of resource access requests to the client, including the execution result corresponding to the first link resource access request.

In summary, in the technical solution provided by this embodiment, the device identification of the terminal is added to the link resource access request generated by decomposing the aggregate resource access request, so that the device storing the link resource receives the link resource access request After that, based on the device identification of the terminal, it can be detected whether the terminal has the authority to access the link resource, which realizes the verification of the terminal's access authority to the link resource, thereby overcoming the security loopholes in the related technology and improving the security.

In addition, by adding a request identifier to indicate whether it is a disassembly request of a batch request in the link resource access request, after receiving the link resource access request, the device that saves the link resource can determine the current request based on the request identifier. Whether it is the decomposition request of the batch request, and then determine whether to verify the authority of the terminal, which improves the standardization of the entire process and avoids performing unnecessary operations.

In the embodiments shown in Figures 4 and 5 above, the verification of the terminal by the second device (that is, the device that stores the link resource) is introduced; the following is another possible implementation through several embodiments The solution is introduced and explained, that is, the first device (that is, the device that stores the collective resource) verifies the terminal.

Please refer to FIG. 6, which shows a flowchart of a method for accessing a collective resource provided by another embodiment of the present application. The method can be applied to the implementation environment shown in FIG. 2. The method can include the following steps (601-605):

Step 601: The first device receives the first set of resource access request sent by the terminal.

For other introduction and description of step 601, please refer to the introduction and description of step 301 in the embodiment of FIG. 3, which will not be repeated here.

Step 602: The first device obtains first permission information from the second device, where the first permission information is used to indicate the access permission of the terminal to the first link resource included in the first set of resources.

After receiving the above-mentioned first set of resource access request, the first device may first detect whether the terminal has the right to access the first set of resources. In the case that the terminal has the authority to access the first set of resources, the first device obtains the first authority information to further verify the terminal's access authority to the first link resource. The first link resource may be any link resource in the first set of resources. The first link resource may be a collective resource or a non-collective resource.

Optionally, the first authority information is used to indicate the operation authority that the terminal has and/or does not possess for the first link resource. According to the first permission information, the first device can determine which operation permissions the terminal includes on the first link resource, for example, determine that the terminal’s operation permissions on the first link resource include create (create), update (modify/update) ), retrieve (acquisition), delete (delete), notification (notification) which types.

In a possible implementation manner, step 602 includes the following sub-steps:

1. The first device sends a first permission acquisition request to the second device, and the first permission acquisition request is a request for the first device to obtain the terminal's access permission to the first link resource;

The first link resource is stored in the second device. After receiving the first permission obtaining request, the second device obtains the terminal's access permission to the first link resource, and sends the first permission information to the first device.

2. The first device receives the first permission information sent by the second device.

In another possible implementation manner, step 602 includes the following sub-steps:

1. The first device sends a second permission acquisition request to the second device through the configuration device, and the second permission acquisition request is a request for the configuration device to obtain the terminal's access permission to the first link resource;

The configuration device is also called OBT device, which refers to the device running the OBT (On Boarding Tool) configuration tool, which is used to realize the configuration and management of each device in the Internet of Things system, such as the authority and authority of each device in the Internet of Things system. Subordination relationship, etc. for configuration management. In theory, the configuration device can obtain the resource access rights of any device it configures.

For example, after the configuration device receives the first permission acquisition request sent by the first device, it sends the second permission acquisition request to the second device, obtains the terminal's access permission to the first link resource from the second device, and then configures the device to transfer the A device sends first permission information. Optionally, the configuration device is used to request the first permission information from the second device, and then send the first permission information to the first device.

2. The first device receives the first permission information sent by the configuration device.

Step 603: If it is determined according to the first permission information that the terminal has the permission to access the first link resource, the first device decomposes the first collection resource access request, and generates the first link resource access request.

After obtaining the first authority information, the first device determines whether the terminal has the authority to access the first link resource. Optionally, if the access authority to the first link resource refers to the authority to access the first link resource through the batch interface, then according to the first authority information, the first device determines that the terminal has the right to modify and obtain the first link resource In the case of permission, the first device can determine that the terminal has the permission to access the first link resource through the batch interface.

In the case of determining that the terminal has the authority to access the first link resource, the first device decomposes the first collection resource access request and generates a first link resource access request. The first link resource access request is used to request the access to the first link resource. access.

For the specific process of decomposing the first collection resource access request and generating the first link resource access request, please refer to the introduction in the embodiment of FIG. 4, which will not be repeated in this embodiment. In addition, in this embodiment, since the first device has completed the authority verification of the terminal for the first link resource, the first link resource access request does not have to carry the device identification and request identification of the terminal introduced in the embodiment of FIG. 4 .

In addition, if the first device determines that the terminal does not have the authority to access the first link resource, the first device sends an error response to the terminal to inform the terminal that it has failed to access the first link resource.

In this embodiment, the first link resource is mainly taken as an example for introduction and description. The first set of resources may include one or more link resources. For each link resource, the same method may be used to verify the terminal's access authority to the link resource, and generate a corresponding link resource access request.

Step 604: The first device sends a first link resource access request to the second device.

Step 605: The second device executes the first link resource access request.

After receiving the first link resource access request, the second device can detect whether the first device has the permission to access the first link resource. If it is confirmed that the first device has the permission to access the first link resource, the second device executes the first link resource. Link the resource access request, and then send the execution result to the first device, and the first device sends the execution result to the terminal.

In an example, with reference to FIG. 7, taking the first device obtaining the first permission information from the second device as an example, the following steps may be included:

Step 701: The terminal sends a first collection resource access request to the first device;

Step 702: The first device detects whether the terminal has the authority to access the first set of resources;

Step 703: If the terminal has the permission to access the first set of resources, the first device sends a permission acquisition request to the second device;

The second device stores the first link resource included in the first set of resources, and the permission acquisition request is used to request the terminal to acquire the access permission of the first link resource.

Assuming that the collection resource mycollection1 includes the first link resource link1, and the first link resource link1 is stored in the linkdevice1, the hostdevice sends a permission acquisition request to the linkdevice1. Illustratively, an example of a permission acquisition request is as follows: Get/acl2? subject=client&resource=/link1; among them, /acl2 is the resource for all devices to save access rights, subject=client&resource=/link1 is a restriction condition, and the meaning of this request is to obtain the client's access right to the first link resource /link1.

Step 704: The second device sends the first permission information to the first device.

After Linkdevice1 receives the above permission acquisition request, it acquires the client's access permission to the first link resource/link1, and then sends the first permission information to the hostdevice. Optionally, the first authority information is used to indicate the operation authority that the terminal has and/or does not possess for the first link resource link1. Based on the first permission information, the hostdevice can determine which operation permissions the client includes on the first link resource link1, for example, determine that the client’s operation permissions on the first link resource link1 include create (create), update (modify/update) ), retrieve (acquisition), delete (delete), notification (notification) which types.

Step 705: The first device detects whether the terminal has the permission to access the first link resource according to the first permission information.

Based on the received first permission information, Hostdevice detects whether the client has the permission to access the first link resource/link1 through the batch interface. Because the permissions related to the batch interface are update (modify/update) and retrieve (acquisition) permissions, so If the client has the update (modify/update) and retrieve (obtain) permissions for the first link resource/link1, it can be determined that the client has the permission to access the first link resource/link1 through the batch interface.

Step 706: If the terminal has the authority to access the first link resource, the first device decomposes the first collection resource access request, and generates the first link resource access request.

If the client has the permission to access the first link resource/link1 through the batch interface, the hostdevice decomposes the batch request and generates the first link resource access request. Exemplarily, the interface indicated by the interface attribute information included in the first link resource access request is the default interface of the first link resource link1; the operation mode information included in the first link resource access request is used to indicate that the first link resource access request The operation mode of the link resource link1 is update (modify/update).

Step 707: The first device sends a first link resource access request to the second device.

Hostdevice sends the above-mentioned first link resource access request to linkdevice1.

Step 708: The second device detects whether the first device has the permission to access the first link resource;

Step 709: If the first device has the permission to access the first link resource, the second device executes the first link resource access request;

If the hostdevice has the permission to access the first link resource link1, then linkdevice1 executes the first link resource access request and obtains the corresponding execution result.

Step 710: The second device sends an execution result corresponding to the first link resource access request to the first device.

Step 711: The first device sends an execution result corresponding to the first set of resource access requests to the terminal.

In another example, with reference to FIG. 8, taking the first device obtaining the first permission information from the management device as an example, the following steps may be included:

Step 801: The terminal sends a first collection resource access request to the first device;

Step 802: The first device detects whether the terminal has the authority to access the first set of resources;

The above steps 801-802 are the same as the steps 701-702 in the embodiment of FIG. 7. For details, refer to the introduction and description in the embodiment of FIG. 7, which will not be repeated here.

Step 803: If the terminal has the permission to access the first set of resources, the first device sends a permission acquisition request to the management device;

In this example, hostdevice sends a permission acquisition request to the OBT device. Illustratively, an example of a permission acquisition request is as follows: Get/acl2? subject=client&resource=/link1; among them, /acl2 is the resource for all devices to save access rights, subject=client&resource=/link1 is a restriction condition, and the meaning of this request is to obtain the client's access right to the first link resource /link1.

Step 804: The management device forwards the permission acquisition request to the second device;

The OBT device forwards the permission acquisition request to linkdevice1, and the first link resource link1 is stored in the linkdevice1.

Step 805: The second device sends the first permission information to the management device.

After Linkdevice1 receives the above permission acquisition request, it acquires the client's access permission to the first link resource/link1, and then sends the first permission information to the OBT device.

Step 806: The management device forwards the first permission information to the first device;

The OBT device forwards the first permission information to the hostdevice.

Step 807: The first device detects whether the terminal has the permission to access the first link resource according to the first permission information;

Step 808: If the terminal has the authority to access the first link resource, the first device decomposes the first set of resource access requests, and generates the first link resource access request.

Step 809: The first device sends the first link resource access request to the second device;

Step 810: The second device detects whether the first device has the permission to access the first link resource;

Step 811: If the first device has the permission to access the first link resource, the second device executes the first link resource access request;

Step 812: The second device sends the execution result corresponding to the first link resource access request to the first device.

Step 813: The first device sends an execution result corresponding to the first set of resource access requests to the terminal.

The foregoing steps 807-813 are the same as steps 705-711 in the embodiment of FIG. 7. For details, refer to the introduction and description in the embodiment of FIG. 7 and will not be repeated here.

To sum up, in the technical solution provided in this embodiment, the device that saves the collection resource verifies the terminal's access authority to the link resource before decomposing the link resource access request generated by the collection resource access request, thereby overcoming the related problems. The security loopholes in the technology have improved security.

In addition, the embodiment of the present application provides two ways to obtain the access authority of the terminal to the link resource, which improves the flexibility of the solution.

Hereinafter, through the two embodiments of FIG. 9 and FIG. 10, the corresponding processing flow when the first link resource is a collective resource is introduced and explained. In the embodiment of FIG. 9, the device used to save the link resource verifies the authority of the terminal; in the embodiment of FIG. 10, the device used to save the collective resource verifies the authority of the terminal.

Please refer to FIG. 9, which shows a flowchart of a method for accessing a collective resource provided by another embodiment of the present application. The method can be applied to the implementation environment shown in FIG. 2. The method can include the following steps (901～906):

Step 901: The first device receives the first collection resource access request sent by the terminal.

Step 902: The first device decomposes the first set of resource access requests, and generates a first link resource access request. The first link resource access request includes the device identifier of the terminal.

Step 903: The first device sends a first link resource access request to the second device.

Step 904: The second device detects whether the terminal has the authority to access the first link resource.

The above steps 901 to 904 are the same as the steps 401 to 404 in the embodiment of FIG. 4. For details, please refer to the introduction and description in the embodiment of FIG.

Step 905: If the terminal has the authority to access the first link resource, and the first link resource is a second collection resource, the second device decomposes the first link resource access request to generate a second link resource access request, and the second link resource The access request includes the device identification of the terminal.

If the first link resource is a collective resource, such as a second collective resource, the second device decomposes the first link resource access request to generate a second link resource access request. The second link resource access request is used to request access to the second link resource included in the second set of resources.

For the generation process of the second link resource access request, you can refer to the introduction to the generation process of the first link resource access request, which will not be repeated here.

The second link resource access request includes the device identifier of the terminal, so that the third device storing the second link resource can perform authority verification on the terminal after receiving the second link resource access request.

Optionally, the second link resource access request further includes the device identification of the first device, so that the third device storing the second link resource can also perform authorization verification on the first device after receiving the second link resource access request .

Optionally, the second link resource access request further includes a request identifier, and the request identifier is used to indicate that the second link resource access request is a decomposition request of the batch request.

The second link resource can also be a collective resource or a non-collective resource. In addition, the second set of resources may include one or more link resources, and for each link resource, the same method may be used to generate a corresponding link resource access request. In this embodiment, the second link resource is mainly taken as an example for introduction and description.

Step 906: The second device sends a second link resource access request to the third device.

The third device stores the second link resource. After receiving the second link resource access request, the third device detects whether the terminal has the authority to access the second link resource. In the case that the terminal has the authority to access the second link resource, the third device executes the second link resource access request.

Optionally, the third device also detects whether the first device and the second device have permission to access the second link resource. In the case that the terminal, the first device, and the second device all have the authority to access the second link resource, the third device executes the second link resource access request.

Please refer to FIG. 10, which shows a flowchart of a method for accessing a collective resource provided by another embodiment of the present application. The method can be applied to the implementation environment shown in FIG. 2. The method can include the following steps (1001-1007):

Step 1001: The first device receives the first set of resource access request sent by the terminal.

Step 1002: The first device obtains first permission information, where the first permission information is used to indicate the access permission of the terminal to the first link resource included in the first set of resources.

Step 1003: If it is determined according to the first permission information that the terminal has the permission to access the first link resource, the first device decomposes the first collection resource access request, and generates the first link resource access request.

Step 1004: The first device sends a first link resource access request to the second device.

The foregoing steps 1001-1004 are the same as steps 601-604 in the embodiment of FIG. 6. For details, refer to the introduction and description in the embodiment of FIG. 6, which will not be repeated here.

Step 1005: If the first link resource is the second collection resource, the second device obtains second permission information, where the second permission information is used to indicate the terminal's access permission to the second link resource included in the second collection resource.

If the first link resource is a collective resource, such as a second collective resource, the second device obtains the second authority information to further access the terminal's access authority to the second link resource. The second link resource may be any link resource in the second set of resources. The second link resource may be a collective resource or a non-collective resource.

Optionally, when the first link resource is a second set of resources, the first link resource access request sent by the first device to the second device may include the device identifier of the terminal, so that the second device can access the terminal Permission to verify.

In addition, for the related introduction and description of the second permission information, please refer to the introduction and description of the first permission information in the above embodiment, which will not be repeated in this embodiment.

Step 1006: If it is determined according to the second authority information that the terminal has the authority to access the second link resource, the second device decomposes the first link resource access request to generate a second link resource access request.

The second link resource access request is used to request access to the second link resource included in the second set of resources.

Optionally, if the access authority to the second link resource refers to the authority to access the second link resource through the batch interface, then according to the second authority information, the second device determines that the terminal has the right to modify and obtain the second link resource In the case of permission, the second device can determine that the terminal has the permission to access the second link resource through the batch interface.

Optionally, the second device also detects whether the first device has the authority to access the second link resource. In the case that both the terminal and the first device have the authority to access the second link resource, the second device decomposes the access to the first link resource. Request to generate a second link resource access request.

Step 1007: The second device sends a second link resource access request to the third device.

The third device stores the second link resource.

In summary, in the embodiments shown in Figs. 9 and 10, when the first link resource is a collective resource, the corresponding processing flow is introduced and explained. In this kind of collective resource, another collective resource is nested. Under the circumstance, it realizes the verification of the access authority of each link resource of the terminal that initiates the batch request, which fully ensures the security.

It should be noted that, in the foregoing method embodiment, the technical solution of the present application is introduced and explained mainly from the perspective of interaction between the terminal, the first device, and the second device. The above-mentioned steps related to the execution of the first device can be separately implemented as a method for accessing the collective resources on the first device side; the aforementioned steps related to the execution of the second device can be separately implemented as the method for accessing collective resources on the second device side; The steps executed by the terminal can be individually implemented as a method for accessing collective resources on the terminal side.

The following are device embodiments of this application, which can be used to implement the method embodiments of this application. For details that are not disclosed in the device embodiments of this application, please refer to the method embodiments of this application.

Please refer to FIG. 11, which shows a block diagram of an apparatus for accessing a collective resource provided by an embodiment of the present application. The device has the function of realizing the above-mentioned method example on the first device side, and the function can be realized by hardware, or by hardware executing corresponding software. The device may be the first device described above, or it may be set in the first device. As shown in FIG. 11, the apparatus 1100 may include: a request receiving module 1110, a request sending module 1120, a result receiving module 1130, and a response sending module 1140.

The request receiving module 1110 is configured to receive a first collection resource access request sent by a terminal, where the first collection resource access request is a request for the terminal to access the first collection resource saved by the first device.

The request sending module 1120 is configured to send a first link resource access request to a second device, where the second device stores the first link resource included in the first set of resources, and the first link resource access request is all The request of the first device to access the first link resource.

The result receiving module 1130 is configured to receive the access result of the first link resource sent by the second device.

The response sending module 1140 is configured to send a first collection resource access response to the terminal, where the first collection resource access response includes the access result of the first link resource, wherein the access result of the first link resource is In a case where it is determined that the terminal has the permission to access the first link resource, it is generated after the second device executes the first link resource access request.

In an exemplary embodiment, the first link resource access request includes the device identifier of the terminal.

In an exemplary embodiment, the first link resource access request further includes a request identifier, and the request identifier is used to indicate that the first link resource access request is a decomposition request of a batch processing batch request, and the batch request is Refers to a collective resource access request carrying a batch interface, and the decomposition request refers to a request generated according to the link resources included in the collective resource included in the batch request.

In an exemplary embodiment, the apparatus 1100 further includes: an information obtaining module, configured to obtain first permission information from the second device, and the first permission information is used to instruct the terminal to respond to the first link Access to resources;

The request sending module 1120 is further configured to send a first link resource access request to the second device when it is determined that the terminal has the permission to access the first link resource according to the first permission information.

In an exemplary embodiment, the information acquisition module is configured to: send a first permission acquisition request to the second device, where the first permission acquisition request is that the first device acquires the terminal's access to the second device. A request for access permission of a link resource; receiving the first permission information sent by the second device.

In an exemplary embodiment, the information acquisition module is configured to: send a second permission acquisition request to the second device through a configuration device, where the second permission acquisition request is that the configuration device acquires the terminal's The request for the access authority of the first link resource; receiving the first authority information sent by the configuration device, where the first authority information is sent by the second device to the configuration device.

In an exemplary embodiment, the access authority to the first link resource refers to the authority to access the first link resource through a batch interface. The device 1100 further includes: a permission determination module, configured to, when it is determined that the terminal has the right to modify and obtain the first link resource according to the first permission information, determine that the terminal has the ability to pass the batch The permission of the interface to access the first link resource.

In an exemplary embodiment, the first link resource is a collective resource, or the first link resource is a non-collective resource.

Please refer to FIG. 12, which shows a block diagram of an apparatus for accessing a collective resource provided by another embodiment of the present application. The device has the function of realizing the above-mentioned method example on the second device side, and the function can be realized by hardware, or by hardware executing corresponding software. The device can be the second device described above, or it can be set in the second device. As shown in FIG. 12, the apparatus 1200 may include: a request receiving module 1210 and a result sending module 1220.

The request receiving module 1210 is configured to receive a first link resource access request sent by a first device, where the first link resource access request is a request by the first device to access the first link resource in the first set of resources, Wherein, the first link resource access request is generated by the first device after receiving a first aggregate resource access request sent by the terminal, and the first aggregate resource access request is a request from the terminal to the first device. A request for accessing the saved first set of resources, and the first link resource is saved in the second device.

The result sending module 1220 is configured to send the access result of the first link resource to the first device, where the access result of the first link resource is used to determine that the terminal has the authority to access the first link resource In the case of sending to the terminal.

In an exemplary embodiment, the first link resource access request includes the device identifier of the terminal; the apparatus 1200 further includes:

A permission detection module, configured to detect whether the terminal has the permission to access the first link resource according to the device identifier of the terminal;

The request execution module is configured to execute the first link resource access request when the terminal has the authority to access the first link resource, and generate an access result of the first link resource.

In an exemplary embodiment, the device 1200 further includes:

An identifier reading module, configured to read the request identifier in the first link resource access request;

The permission detection module is configured to, when the request identifier is used to indicate that the first link resource access request is a disassembly request of a batch processing batch request, detect whether the terminal has access to the terminal according to the device identifier of the terminal. State the authority of the first link resource.

In an exemplary embodiment, the device 1200 further includes:

The error response module is configured to send an error response to the first device when the terminal does not have the authority to access the first link resource.

In an exemplary embodiment, the request execution module is configured to:

When the first link resource is a second collection resource, a second link resource access request is generated, and the second link resource access request is for the second device to request a second link resource included in the second collection resource. Request for access, where the second link resource access request includes the device identifier of the terminal;

Sending the second link resource access request to a third device, where the third device stores the second link resource.

In an exemplary embodiment, the device 1200 further includes a permission providing module for:

Receiving a first permission acquisition request sent by the first device, where the first permission acquisition request is a request by the first device to obtain the terminal's access permission to the first link resource;

Send first permission information to the first device, where the first permission information is used to indicate the access permission of the terminal to the first link resource.

Receiving a second permission acquisition request sent by a configuration device, where the second permission acquisition request is a request for the configuration device to obtain an access permission of the terminal to the first link resource;

Send first permission information to the configuration device, where the first permission information is used to indicate the terminal's access permission to the first link resource, and the first permission information is sent by the configuration device to the first link resource. One device.

Please refer to FIG. 13, which shows a block diagram of an apparatus for accessing a collective resource provided by an embodiment of the present application. The device has the function of realizing the above-mentioned method example on the terminal side, and the function can be realized by hardware, or by hardware executing corresponding software. The device can be the terminal described above, or it can be set in the terminal. As shown in FIG. 13, the apparatus 1300 may include: a request sending module 1310 and a response receiving module 1320.

The request sending module 1310 is configured to send a first collection resource access request to a first device, where the first collection resource access request is a request for the terminal to access the first collection resource saved by the first device.

The response receiving module 1320 is configured to receive a first collection resource access response sent by the first device, where the first collection resource access response includes the access result of the first link resource in the first collection resource, where all The access result of the first link resource is sent to the terminal when it is determined that the terminal has the right to access the first link resource.

It should be noted that, when the device provided in the above embodiment realizes its functions, only the division of the above-mentioned functional modules is used as an example for illustration. In actual applications, the above-mentioned functions can be allocated by different functional modules according to actual needs. That is, the content structure of the device is divided into different functional modules to complete all or part of the functions described above.

Regarding the device in the above-mentioned embodiment, the specific manner in which each module performs operations has been described in detail in the embodiment of the method, and will not be elaborated here.

Please refer to FIG. 14, which shows a schematic structural diagram of a network device 140 provided by an embodiment of the present application. The network device 140 may be the first device, the second device, or the third device described above. That is, the network device 140 may be a device for storing collective resources and/or non-collective resources in the Internet of Things system. The network device 140 may include a processor 141, a receiver 142, a transmitter 143, a memory 144, and a bus 145.

The processor 141 includes one or more processing cores, and the processor 141 executes various functional applications and information processing by running software programs and modules.

The receiver 142 and the transmitter 143 may be implemented as a communication component, and the communication component may be a communication chip.

The memory 144 is connected to the processor 141 through a bus 145.

The memory 144 may be used to store a computer program, and the processor 141 is used to execute the computer program to implement each step performed by the first device in the foregoing method embodiment, or implement each step performed by the second device in the foregoing method embodiment.

In addition, the memory 144 can be implemented by any type of volatile or non-volatile storage device or a combination thereof. The volatile or non-volatile storage device includes, but is not limited to: magnetic disks or optical disks, electrically erasable and programmable Read-only memory (EEPROM), erasable programmable read-only memory (EPROM), static anytime access memory (SRAM), read-only memory (ROM), magnetic memory, flash memory, programmable read-only memory (PROM) .

Please refer to FIG. 15, which shows a schematic structural diagram of a terminal 150 provided by an embodiment of the present application. The terminal 150 may include a processor 151, a receiver 152, a transmitter 153, a memory 154, and a bus 155.

The processor 151 includes one or more processing cores, and the processor 151 executes various functional applications and information processing by running software programs and modules.

The receiver 152 and the transmitter 153 may be implemented as a communication component, and the communication component may be a communication chip.

The memory 154 is connected to the processor 151 through a bus 155.

The memory 154 may be used to store a computer program, and the processor 151 is used to execute the computer program to implement each step executed by the terminal in the foregoing method embodiment.

In addition, the memory 154 can be implemented by any type of volatile or non-volatile storage device or a combination thereof. The volatile or non-volatile storage device includes, but is not limited to: magnetic disks or optical disks, electrically erasable and programmable Read-only memory (EEPROM), erasable programmable read-only memory (EPROM), static anytime access memory (SRAM), read-only memory (ROM), magnetic memory, flash memory, programmable read-only memory (PROM) .

The embodiment of the present application also provides a computer-readable storage medium in which a computer program is stored, and the computer program is loaded and executed by a processor to implement the above-mentioned method for accessing the collective resource on the first device side, and /Or, implement the above-mentioned method for accessing the collective resource on the second device side.

An embodiment of the present application also provides a computer-readable storage medium, in which a computer program is stored, and the computer program is loaded and executed by a processor to implement the foregoing method for accessing collective resources on the terminal side.

This application also provides a computer program product, which when the computer program product runs on the processor of the network device, causes the network device to execute the above-mentioned method for accessing the collective resources on the first device side, and/or execute the above-mentioned second device Access method of the collection resource on the side.

This application also provides a computer program product, which when the computer program product runs on the processor of the terminal, causes the terminal to execute the above-mentioned method for accessing the collective resources on the terminal side.

Those skilled in the art should be aware that, in one or more of the foregoing examples, the functions described in the embodiments of the present application may be implemented by hardware, software, firmware, or any combination thereof. When implemented by software, these functions can be stored in a computer-readable medium or transmitted as one or more instructions or codes on the computer-readable medium. Computer-readable media include computer storage media and communication media, where communication media includes any media that facilitates the transfer of computer programs from one place to another. The storage medium may be any available medium that can be accessed by a general-purpose or special-purpose computer.

The above are only exemplary embodiments of this application and are not intended to limit this application. Any modification, equivalent replacement, improvement, etc. made within the spirit and principle of this application shall be included in the protection of this application. Within range.

Claims

A method for accessing collective resources, characterized in that it is applied to a first device, and the method includes:

Receiving a first collection resource access request sent by a terminal, where the first collection resource access request is a request for the terminal to access a first collection resource saved by the first device;

A first link resource access request is sent to a second device, where the second device stores the first link resource included in the first set of resources, and the first link resource access request is the request from the first device to the Request for access to the first link resource;

Receiving the access result of the first link resource sent by the second device;

Send a first collection resource access response to the terminal, where the first collection resource access response includes the access result of the first link resource, wherein the access result of the first link resource is determined when the terminal has access In the case of the authority of the first link resource, it is generated after the second device executes the first link resource access request.
The method according to claim 1, wherein the first link resource access request includes a device identifier of the terminal.
The method according to claim 2, wherein the first link resource access request further includes a request identifier, and the request identifier is used to indicate that the first link resource access request is a decomposition request of a batch request The batch request refers to a collective resource access request carrying a batch interface, and the decomposition request refers to a request generated according to the link resources included in the collective resource included in the batch request.
The method according to claim 1, wherein after the receiving the first set of resource access request sent by the terminal, the method further comprises:

Acquiring first permission information from the second device, where the first permission information is used to indicate the access permission of the terminal to the first link resource;

If it is determined according to the first authority information that the terminal has the authority to access the first link resource, the step of sending the first link resource access request to the second device is performed.
The method according to claim 4, wherein the obtaining first permission information from the second device comprises:

Sending a first permission acquisition request to the second device, where the first permission acquisition request is a request by the first device to acquire the terminal's access permission to the first link resource;

Receiving the first permission information sent by the second device.
The method according to claim 4, wherein the obtaining first permission information from the second device comprises:

Sending a second permission acquisition request to the second device through a configuration device, where the second permission acquisition request is a request for the configuration device to obtain the terminal's access permission to the first link resource;

Receiving the first permission information sent by the configuration device, where the first permission information is sent by the second device to the configuration device.
The method according to any one of claims 4 to 6, wherein the access authority to the first link resource refers to the authority to access the first link resource through a batch interface;

After obtaining the first permission information from the second device, the method further includes:

If it is determined according to the first authority information that the terminal has the modification authority and the acquisition authority for the first link resource, it is determined that the terminal has the authority to access the first link resource through the batch interface.
The method according to any one of claims 1 to 7, wherein the first link resource is a collective resource, or the first link resource is a non-collective resource.
A method for accessing collective resources, characterized in that it is applied to a second device, and the method includes:

Receive a first link resource access request sent by a first device, where the first link resource access request is a request by the first device to access a first link resource in a first set of resources, wherein the first link The resource access request is generated by the first device after receiving the first collection resource access request sent by the terminal, and the first collection resource access request is the first collection saved by the terminal to the first device A request for access to a resource, the first link resource is stored in the second device;

Send the access result of the first link resource to the first device, where the access result of the first link resource is used to send the access to the terminal when it is determined that the terminal has the right to access the first link resource send.
The method according to claim 9, wherein the first link resource access request includes the device identifier of the terminal;

After receiving the first link resource access request sent by the first device, the method further includes:

According to the device identifier of the terminal, detecting whether the terminal has the authority to access the first link resource;

If the terminal has the authority to access the first link resource, execute the first link resource access request to generate an access result of the first link resource.
The method according to claim 10, wherein after receiving the first link resource access request sent by the first device, the method further comprises:

Reading the request identifier in the first link resource access request;

If the request identifier is used to indicate that the first link resource access request is a disassembly request of a batch request, then execute the device identification of the terminal to detect whether the terminal has access to the first link resource The steps of the permissions.
The method according to claim 10 or 11, wherein after detecting whether the terminal has the authority to access the first link resource according to the device identifier of the terminal, the method further comprises:

If the terminal does not have the authority to access the first link resource, sending an error response to the first device.
The method according to any one of claims 10 to 12, wherein the executing the first link resource access request comprises:

If the first link resource is a second collection resource, a second link resource access request is generated, and the second link resource access request is the second link resource included in the second collection resource by the second device Request for access, where the second link resource access request includes the device identifier of the terminal;

Sending the second link resource access request to a third device, where the third device stores the second link resource.
The method according to claim 9, wherein before the receiving the first link resource access request sent by the first device, the method further comprises:

Receiving a first permission acquisition request sent by the first device, where the first permission acquisition request is a request by the first device to obtain the terminal's access permission to the first link resource;

Sending first permission information to the first device, where the first permission information is used to indicate the access permission of the terminal to the first link resource.
The method according to claim 9, wherein before the receiving the first link resource access request sent by the first device, the method further comprises:

Receiving a second permission acquisition request sent by a configuration device, where the second permission acquisition request is a request for the configuration device to obtain an access permission of the terminal to the first link resource;

Send first permission information to the configuration device, where the first permission information is used to indicate the terminal's access permission to the first link resource, and the first permission information is sent by the configuration device to the first link resource. One device.
A method for accessing collective resources, characterized in that it is applied to a terminal, and the method includes:

Sending a first set of resource access request to the first device, where the first set of resource access request is a request for the terminal to access the first set of resources saved by the first device;

Receive a first collection resource access response sent by the first device, where the first collection resource access response includes an access result of a first link resource in the first collection resource, wherein the access of the first link resource The result is sent to the terminal when it is determined that the terminal has the right to access the first link resource.
The method according to claim 16, wherein the first link resource is a collective resource, or the first link resource is a non-collective resource.
A device for accessing collective resources, which is characterized in that it is applied to a first device, and the device includes:

A request receiving module, configured to receive a first collection resource access request sent by a terminal, where the first collection resource access request is a request for the terminal to access the first collection resource saved by the first device;

The request sending module is configured to send a first link resource access request to a second device, where the second device stores the first link resource included in the first set of resources, and the first link resource access request is the A request for the first device to access the first link resource;

A result receiving module, configured to receive the access result of the first link resource sent by the second device;

The response sending module is configured to send a first collection resource access response to the terminal, where the first collection resource access response includes the access result of the first link resource, wherein the access result of the first link resource is In a case where it is determined that the terminal has the authority to access the first link resource, it is generated after the second device executes the first link resource access request.
The apparatus according to claim 18, wherein the first link resource access request includes a device identifier of the terminal.
The apparatus according to claim 19, wherein the first link resource access request further includes a request identifier, and the request identifier is used to indicate that the first link resource access request is a decomposition request of a batch request The batch request refers to a collective resource access request carrying a batch interface, and the decomposition request refers to a request generated according to the link resources included in the collective resource included in the batch request.
The device according to claim 18, wherein the device further comprises:

An information acquisition module, configured to acquire first permission information from the second device, where the first permission information is used to indicate the terminal's access permission to the first link resource;

The request sending module is further configured to send a first link resource access request to the second device when it is determined that the terminal has the permission to access the first link resource according to the first permission information.
The device according to claim 21, wherein the information acquisition module is configured to:

Sending a first permission acquisition request to the second device, where the first permission acquisition request is a request by the first device to acquire the terminal's access permission to the first link resource;

Receiving the first permission information sent by the second device.
The device according to claim 21, wherein the information acquisition module is configured to:

Sending a second permission acquisition request to the second device through a configuration device, where the second permission acquisition request is a request for the configuration device to obtain the terminal's access permission to the first link resource;

Receiving the first permission information sent by the configuration device, where the first permission information is sent by the second device to the configuration device.
The device according to any one of claims 21 to 23, wherein the access authority to the first link resource refers to the authority to access the first link resource through a batch interface;

The device also includes:

The permission determination module is configured to determine that the terminal has the permission to access the first link through the batch interface when it is determined that the terminal has the permission to modify and obtain the first link resource according to the first permission information The permissions of the resource.
The apparatus according to any one of claims 18 to 24, wherein the first link resource is a collective resource, or the first link resource is a non-collective resource.
A device for accessing collective resources, which is characterized in that it is applied to a second device, and the device includes:

The request receiving module is configured to receive a first link resource access request sent by a first device, where the first link resource access request is a request by the first device to access the first link resource in the first set of resources, where The first link resource access request is generated by the first device after receiving the first collection resource access request sent by the terminal, and the first collection resource access request is stored by the terminal on the first device Request for access to the first set of resources, the first link resource is stored in the second device;

The result sending module is configured to send the access result of the first link resource to the first device, where the access result of the first link resource is used when it is determined that the terminal has the right to access the first link resource In this case, send to the terminal.
The apparatus according to claim 26, wherein the first link resource access request includes a device identifier of the terminal;

The device also includes:

A permission detection module, configured to detect whether the terminal has the permission to access the first link resource according to the device identifier of the terminal;

The request execution module is configured to execute the first link resource access request when the terminal has the authority to access the first link resource, and generate an access result of the first link resource.
The device according to claim 27, wherein the device further comprises:

An identifier reading module, configured to read the request identifier in the first link resource access request;

The permission detection module is configured to, when the request identifier is used to indicate that the first link resource access request is a disassembly request of a batch processing batch request, detect whether the terminal has access to the terminal according to the device identifier of the terminal. State the authority of the first link resource.
The device according to claim 27 or 28, wherein the device further comprises:

The error response module is configured to send an error response to the first device when the terminal does not have the authority to access the first link resource.
The device according to any one of claims 27 to 29, wherein the request execution module is configured to:

When the first link resource is a second collection resource, a second link resource access request is generated, and the second link resource access request is for the second device to request a second link resource included in the second collection resource. Request for access, where the second link resource access request includes the device identifier of the terminal;

Sending the second link resource access request to a third device, where the third device stores the second link resource.
The device according to claim 26, wherein the device further comprises a permission providing module for:

Receiving a first permission acquisition request sent by the first device, where the first permission acquisition request is a request by the first device to obtain the terminal's access permission to the first link resource;

Sending first permission information to the first device, where the first permission information is used to indicate the access permission of the terminal to the first link resource.
The device according to claim 26, wherein the device further comprises a permission providing module for:

Receiving a second permission acquisition request sent by a configuration device, where the second permission acquisition request is a request for the configuration device to obtain an access permission of the terminal to the first link resource;

Send first permission information to the configuration device, where the first permission information is used to indicate the terminal's access permission to the first link resource, and the first permission information is sent by the configuration device to the first link resource. One device.
A device for accessing collective resources, which is characterized in that it is applied to a terminal, and the device includes:

A request sending module, configured to send a first collection resource access request to a first device, where the first collection resource access request is a request for the terminal to access the first collection resource saved by the first device;

The response receiving module is configured to receive a first collection resource access response sent by the first device, where the first collection resource access response includes an access result of a first link resource in the first collection resource, wherein the The access result of the first link resource is sent to the terminal when it is determined that the terminal has the authority to access the first link resource.
The apparatus according to claim 33, wherein the first link resource is a collective resource, or the first link resource is a non-collective resource.
A network device, wherein the network device includes a processor and a memory, the memory stores a computer program, and the computer program is used to be executed by the processor to implement any one of claims 1 to 8 The method for accessing the collective resource as described in item, or the method for accessing the collective resource as described in any one of claims 9 to 15.
A terminal, characterized in that the terminal includes a processor and a memory, the memory stores a computer program, and the computer program is used to be executed by the processor to implement the set according to claim 16 or 17. The access method of the resource.
A computer-readable storage medium, characterized in that a computer program is stored in the storage medium, and the computer program is used to be executed by a processor to realize the collection of resources according to any one of claims 1 to 8. The access method, or implements the access method of the collective resource according to any one of claims 9 to 15, or implements the access method of the collective resource according to claim 16 or 17.