WO2021082945A1

WO2021082945A1 - Remote management method and system, terminal device and server

Info

Publication number: WO2021082945A1
Application number: PCT/CN2020/121377
Authority: WO
Inventors: 杜洪军
Original assignee: 京东方科技集团股份有限公司
Priority date: 2019-10-29
Filing date: 2020-10-16
Publication date: 2021-05-06
Also published as: CN110769065A

Abstract

The present application relates to a remote management method and system, a terminal device and a server. Data transmission is performed between a terminal device and a server on the basis of an MQTT protocol; the server sends a command message to the terminal device, the command message comprising a command name and a command body; the terminal device searches a memory registry for an executable program corresponding to the command name as a command processing program, and executes, by invoking the found command processing program, a command corresponding to the command message on the basis of a parameter in the command body.

Description

Remote management method, system, terminal equipment and server

CROSS-REFERENCE TO RELATED APPLICATIONS This application claims the priority of Chinese patent application 201911039449.8 filed on October 29, 2019, the content of which is incorporated herein by reference in its entirety.

Technical field

This application relates to the field of communication technology, in particular to a remote management method, system, terminal device and server.

Background technique

Currently, various electronic devices are set in various scenarios to perform corresponding tasks. For example, a router set up in a public place can provide a wireless network, a display screen can display content, a camera can monitor, and so on.

Generally speaking, after installing the electronic equipment in the relevant position in the scene, if you then manage the equipment, for example, change the relevant configuration of the router, adjust the brightness of the display by adjusting the control device of the display, and adjust the capture range of the camera, etc. , Can only rely on relevant technical personnel to go to the location of the equipment and manually perform related management operations on the equipment. It takes a lot of manpower and time for technicians to travel to the location of the equipment. Therefore, there is an urgent need for a solution for remote management of the equipment.

Summary of the invention

In view of this, the purpose of this application is to propose a remote management method, system, terminal device and server to remotely manage the device.

Based on the foregoing objectives, the embodiments of the present application provide a remote management method, which is applied to a terminal device, and the method includes:

By calling the executable program in the designated directory, the command name supported by the executable program is obtained, and the command name supported by the executable program is recorded in the memory registry;

The command message sent by the server is received based on the MQTT protocol; wherein, the command message includes the command name and the command body;

In the memory registry, search for an executable program that supports the command name as a command processing program;

By calling the found command processing program, the command corresponding to the command message is executed based on the parameters in the command body.

Optionally, said obtaining the command name supported by the executable program by calling the executable program in the specified directory includes:

Based on the preset parameters, sequentially call the executable programs in the designated directory to obtain a list of commands supported by each executable program, and the command list includes the command names supported by the executable program;

The recording the command name supported by the executable program to the memory registry includes:

The command list and the path information of the executable program are correspondingly recorded in the memory registry.

Optionally, the command message further includes signature information; after the command message sent by the server is received based on the MQTT protocol, it further includes:

Use the first encoding algorithm to encode the command body to obtain the first encoded command body; and use the decoding algorithm corresponding to the second encoding algorithm to decode the signature information to obtain the second decoded signature information ；

Verifying whether the first encoded command body matches the second decoded signature information based on the pre-appointed public key;

In response to the first encoded command body being matched with the second decoded signature information, the step of searching the executable program corresponding to the command name in the memory registry is executed as a command processing program.

Optionally, in the case of verifying that the first encoded command body matches the second decoded signature information, the method further includes:

Verifying whether the device identification information in the command body is the same as the identification information of the terminal device;

In response to the device identification information in the command body being the same as the identification information of the terminal device, the step of searching the executable program corresponding to the command name in the memory registry is executed as a command processing program.

Optionally, the command message further includes a command identifier; the method further includes:

Responding to the mismatch between the first encoded command body and the second decoded signature information, sending first prompt information including the command identifier to the server based on the MQTT protocol;

In response to the device identification information in the command body being different from the identification information of the terminal device, sending second prompt information including the command identification to the server based on the MQTT protocol;

If the executable program corresponding to the command name is not found in the memory registry, sending third prompt information including the command identifier to the server based on the MQTT protocol;

After the command processing program found by invoking executes the command corresponding to the command message based on the parameters in the command body, the method further includes:

The fourth prompt information including the command identifier is sent to the server based on the MQTT protocol.

Based on the foregoing objective, an embodiment of the present application also provides a remote management method, which is applied to a server, and the method includes:

Obtain the command name, command parameters, and identification information of the pointed terminal device of the command to be executed;

Generating a command body based on the command parameters and the identification information of the terminal device;

Generate signature information based on the pre-appointed private key and the command body;

A command message is sent to the terminal device based on the MQTT protocol, and the command message includes the command name, the command body, and the signature information.

Optionally, the generating signature information based on the pre-appointed private key and the command body includes:

Encoding the command body by using the first coding algorithm to obtain the first encoded command body;

Generating signature information based on the pre-appointed private key and the first encoded command body;

Encoding the signature information by using the second encoding algorithm to obtain encoded signature information;

The sending a command message to a terminal device based on the MQTT protocol includes:

Send a command message including the command name, the command body, and the encoded signature information to the terminal device based on the MQTT protocol.

Based on the foregoing objective, an embodiment of the present application also provides a terminal device, including a memory, a processor, and a computer program stored in the memory and capable of running on the processor. The processor implements any of the foregoing when the program is executed. A remote management method applied to terminal equipment.

Based on the foregoing objective, an embodiment of the present application further provides a server, including a memory, a processor, and a computer program stored in the memory and capable of running on the processor. The processor implements any of the foregoing when the program is executed. The remote management method applied to the server.

Based on the foregoing objective, an embodiment of the present application also provides a remote management system, including a terminal device and a server, and the terminal device and the server perform data transmission based on the MQTT protocol;

The server is configured to send a command message to a terminal device, and the command message includes a command name and a command body;

The terminal device is used to obtain the command name supported by the executable program by calling the executable program in the specified directory, and record the command name supported by the executable program in the memory registry; receive the command message sent by the server; read and receive The command name and command body in the received command message are used as the to-be-executed command name and the to-be-executed command body; in the memory registry, the executable program that supports the to-be-executed command name is searched as a command processing program; The command processing program executes the command corresponding to the received command message based on the parameters in the command body to be executed.

Optionally, a first agent process is configured in the terminal device; the server accesses a second agent process; the first agent process and the second agent process perform data based on the MQTT protocol or the MQTTS protocol transmission.

Applying the embodiment shown in this application, the terminal device and the server perform data transmission based on the MQTT protocol; the server sends a command message to the terminal device, the command message includes the command name and the command body; the terminal device searches for the supported command in the memory registry The executable program of the name is used as the command processing program; by calling the found command processing program, the command corresponding to the command message is executed based on the parameters in the command body; it can be seen that in this solution, the command message is sent through the server to realize the terminal Remote management of equipment.

Description of the drawings

In order to more clearly describe the technical solutions in the embodiments of the present application or the prior art, the following will briefly introduce the drawings that need to be used in the description of the embodiments or the prior art. Obviously, the drawings in the following description are only These are some embodiments of the present application. For those of ordinary skill in the art, other drawings can be obtained based on these drawings without creative work.

FIG. 1 is a schematic structural diagram of a remote management system provided by an embodiment of this application;

FIG. 2 is a schematic diagram of interaction between a terminal device and a server according to an embodiment of the application;

FIG. 3 is a schematic diagram of another interaction between a terminal device and a server according to an embodiment of the application;

4 is a schematic flowchart of a remote management method applied to terminal equipment according to an embodiment of the application;

FIG. 5 is a schematic flowchart of a remote management method applied to a server according to an embodiment of the application;

FIG. 6 is a schematic structural diagram of a terminal device provided by an embodiment of this application;

Fig. 7 is a schematic structural diagram of a server provided by an embodiment of the application.

Detailed ways

In order to make the objectives, technical solutions, and advantages of the present application clearer, the following further describes the present application in detail in conjunction with specific embodiments and with reference to the accompanying drawings.

It should be noted that all the expressions "first" and "second" used in the examples of this application are used to distinguish two entities with the same name but not the same or parameters that are not the same, as shown in "first" and "second" Only for the convenience of presentation, it should not be construed as a limitation to the embodiments of the present application, and subsequent embodiments will not describe this one by one.

In order to achieve the foregoing objectives, the embodiments of the present application provide a remote management method applied to a terminal device, a remote management method applied to a server, a terminal device, a server, and a remote management system. The terminal device can be various devices that need to be remotely managed, such as a router, a control device for a display screen, a camera, etc., and the details are not limited. The following first introduces the remote management system in detail.

FIG. 1 is a schematic structural diagram of a remote management system provided by an embodiment of the application, including: a terminal device 100 and a server 200, and the interaction process between the terminal device 100 and the server 200 may be as shown in FIG. 2:

The server 200 is configured to send a command message to the terminal device 100, where the command message includes a command name and a command body;

The terminal device 100 is used to receive the command message sent by the server 200; read the command name and command body in the received command message as the name of the command to be executed and the command body to be executed; find the command to be executed in the memory registry The executable program corresponding to the name is used as a command processing program; by calling the found command processing program, the command corresponding to the received command message is executed based on the parameters in the command body to be executed.

In an implementation manner, the terminal device 100 and the server 200 perform data transmission based on the MQTT ((Message Queuing Telemetry Transport)) protocol. Or, in another implementation manner, the terminal device 100 and the server 200 may perform data transmission based on the MQTTS ((MQTT+TLS; TLS: Transport Layer Security, secure transport layer)) protocol, so that the transmission channel is encrypted , Improve the security of data transmission. Alternatively, the terminal device 100 and the server 200 may also perform data transmission based on other protocols, which will not be listed one by one.

In one embodiment, the terminal device 100 is configured with a first agent process; the server 200 accesses a second agent process; the first agent process and the second agent process perform data based on the MQTT protocol or the MQTTS protocol transmission. In the following content, the MQTT protocol is taken as an example for description.

For example, a cross-platform application based on POSIX C (Portable Operating System Interface) can be configured in the terminal device 100. The application runs in the background as a daemon. The application The program is the first agent process.

For example, the second agent process may be Broker (a message broker). Both the server 200 and the first agent process configured in the terminal device access the Broker. The Broker can be configured in the server 200, or the Broker can be configured in other devices, and the server 200 is connected to the device configured with the Broker. The application program configured in the terminal device 100 receives the command message sent by the server through the Broker.

The command message includes the command name and the command body. The command name is the name of the command to be executed, and the command body can include the parameters required to execute the command. For example, the server may assemble the command name and the command body into a command message in JSON (JavaScript Object Notation, JS object notation) format, and the specific format of the command message is not limited.

In one embodiment, the process of the server generating the command message may include: obtaining the command name, command parameters, and identification information of the pointed terminal device of the command to be executed; generating based on the command parameters and the identification information of the terminal device Command body; generate a command message including the command name and the command body.

For example, after the server and terminal device access the Broker, the terminal device subscribes to the topic, and then the server can send the command message to the terminal device through Publish.

A memory registry is stored in the terminal device, and the command name supported by the executable program is recorded in the memory registry. The recording process includes: by calling the executable program in the specified directory, obtaining the command name supported by the executable program, and executing The command names supported by the program are recorded in the memory registry.

In one embodiment, the recording process may include: based on preset parameters, sequentially calling executable programs in a specified directory to obtain a command list of each executable program, and the command list includes command names supported by the executable program. ; Correspondingly record the command list and the path information of the executable program to the memory registry.

For example, the first agent process can scan the executable programs in the specified directory, and call each executable program in turn with supportedcommands as a parameter. If the call is successful, the command list corresponding to the executable program is obtained, and the command list includes the The name of one or more commands that the executable program supports (can be executed), and the command list of the executable program and the path information of the executable program are recorded in the memory registry. In this way, the terminal device can find the executable program corresponding to the command name in the memory registry, that is, the executable program that executes the command. For the convenience of description, it is called a command processing program.

For example, suppose the executable program related to volume is called, the call is successful and the command list corresponding to the executable program is obtained. The command list includes the command name volume supported by the executable program, the path information of the executable program, and The command list is recorded in the memory registry.

Or, in one case, the command list corresponding to the executable program may include the command name and the method (method), so that the memory registry may also include the method corresponding to the command name. For example, suppose you call an executable program related to volume, the call is successful and the command list corresponding to the executable program is obtained. The command list includes the command name volume supported by the executable program. Volume corresponds to two methods: set and get , Where set means to set the volume, get means to obtain the volume value, and record the path information of the executable program and the command list in the memory registry.

In one embodiment, after receiving the command message, the terminal device parses the command message to obtain the command name and command body; in the memory registry, find the executable program corresponding to the command name as the command processing program; , The found command processing program is called, and the command corresponding to the command message is executed based on the parameters in the command body; if it is not found, it means that the terminal device does not support executing the command corresponding to the command message.

Suppose the command name is volume (volume), the method is set, and the parameter in the command body is data:9, which means that the volume of the terminal device is set to 9; the terminal device searches for the executable program corresponding to the command name as the command processing program; If found, call the found command processing program and set the volume of the terminal device to 9.

In another embodiment, the process of generating the command message by the server may include: obtaining the command name, command parameters, and identification information of the terminal device to which the command is to be executed; based on the command parameters and the identification information of the terminal device, Generate a command body; generate signature information based on a pre-appointed private key and the command body; generate a command message including the command name, the command body, and the signature information.

For example, the command message may include: the ID (Identity) of the command message, the type of the device sending the command message, the command name, the command body, and the signature information. The command body may include the execution of the command. The required parameters, the device identification information of the terminal device, and so on.

For example, the format of the command message can be:

{

"id":20190730002,/ID of the command message

"from":"iot_web_console",/The type of device sending the command message, here is the IoT console

"command":"volume",/command name: volume

"method":"set",/method: set

"body":{"data":9,"sn":"A0BB3ED2BF3D"},/command body, where data:9 means to set the volume to 9, sn means the device identification information of the terminal device,

"Sig": "Signature Information"/Signature Information

}

In an implementation manner, the process of generating the signature information by the server may include:

Use the first encoding algorithm to encode the command body to obtain the first encoded command body; generate signature information based on the pre-appointed private key and the first encoded command body; use the second encoding algorithm to The signature information is encoded to obtain encoded signature information; in this way, the signature information included in the command message is the encoded signature information.

For example, the first encoding algorithm may be a sha256 algorithm, the second encoding algorithm may be a base64 encoding algorithm, and the signature information included in the command message may be a base64 encoded character string. Alternatively, other encoding algorithms can also be used, and the specific algorithm is not limited.

If the command message also includes signature information; after receiving the command message, the terminal device can first encode the command body using the first encoding algorithm to obtain the first encoded command body; and use the second encoding algorithm corresponding to the The decoding algorithm decodes the signature information to obtain the second decoded signature information; based on the pre-appointed public key, verify whether the first encoded command body matches the second decoded signature information; If it matches, the executable program corresponding to the command name is searched in the memory registry as a command processing program.

Continuing the above example, you can use the decoding algorithm corresponding to the base64 encoding algorithm to decode the signature information in the command message. In order to distinguish the description, the data obtained by decoding here is called the "second decoded signature information"; and the sha256 algorithm is used The command body is coded. In order to distinguish the description, the data obtained by coding here is called the "first coded command body".

The server and the terminal device pre-appoint a public and private key. For example, the public key may be an RSA (an asymmetric encryption algorithm) public key, and the private key may be an RSA private key. The server generates the signature information based on the RSA private key; the terminal device verifies whether the first encoded command body matches the second decoded signature information based on the RSA public key. If they match, it means that the command message has not been tampered with or forged For the command message, the terminal device searches for the executable program corresponding to the command name in the memory registry as a command processing program. This can be understood as security verification of command messages, which can filter out tampered command messages, and can also identify forged command messages, which improves the security of remote management.

In one embodiment, if it is verified that the first encoded command body matches the second decoded signature information, it can be further verified whether the device identification information in the command body is the same as the identification information of the terminal device; if they are the same, it means the command The message has not been tampered with, nor is it a forged command message. The terminal device then searches for the executable program corresponding to the command name in the memory registry as a command processing program. This can be understood as security verification of command messages, which can further filter out tampered command messages, and can also further identify forged command messages, which further improves the security of remote management.

In an implementation manner, the terminal device may feed back the verification result to the server in the process of verifying the security of the command message. The command message may also include a command identifier, and the terminal device may feed back the security verification result to the server based on the command identifier, so that the server determines which command message the security verification result is for.

For example, if the first encoded command body does not match the second decoded signature information successfully, the first prompt information including the command identifier is sent to the server based on the MQTT protocol.

For another example, if the device identification information in the command body is different from the identification information of the terminal device, the second prompt information including the command identification is sent to the server based on the MQTT protocol.

For another example, if the executable program corresponding to the command name is not found in the memory registry, the third prompt information including the command identifier is sent to the server based on the MQTT protocol.

For another example, after the terminal device executes the command corresponding to the command message, the fourth prompt information including the command identifier may be sent to the server based on the MQTT protocol, so that the server obtains the execution status of the command.

For example, if the terminal device is a router, the executed command may include changing the configuration of the router. In this case, the command parameter may include the modified configuration information; or the executed command may also include turning on/off the router, etc. Wait. If the terminal device is a control device of the display screen, the executed command may include adjusting the brightness of the display screen, the display area, and so on. In this case, the command parameters may include information such as the changed display brightness and display area. If the terminal device is a camera, the executed command may include adjusting the pitch angle, rotation angle, focal length, etc. of the camera. In this case, the command parameters may include the changed pitch angle, rotation angle, focal length, and other information. This solution does not limit the type of terminal equipment and the commands it executes, and will not list them one by one.

The following describes a specific implementation manner with reference to FIG. 3.

For terminal equipment:

The terminal device starts the first agent process, loads the RSA public key, obtains the command name supported by the executable program by calling the executable program in the specified directory, and records the command name supported by the executable program and the path information of the executable program to the memory registration table. In addition, the terminal device accesses the second agent process, the first agent process and the second agent process communicate based on the MQTT protocol, and the terminal device subscribes to the topic. Continuing the above example, the identification information of the terminal device is the serial number A0BB3ED2BF3D, then the terminal device can subscribe to topic cmd/A0BB3ED2BF3D, topic represents the subscription topic, cmd is the abbreviation of command, which represents the command prompt.

The first agent process in the terminal device can be a cross-platform application based on POSIX C. The application runs in the background as a daemon. The application can access the second agent process and can provide HTTP for sending messages. The interface can load executable programs, subscribe to receive command messages sent by the server, verify whether the signature information is legal, and call executable programs to execute corresponding commands.

For the server:

The server accesses the second agent process, loads the RSA private key, and assembles the command body after being triggered by the service, generates signature information, and assembles the command message. Since the terminal device subscribes to topic cmd/A0BB3ED2BF3D, the server can send the command message to the terminal device through Publish.

After receiving the command message, the terminal device verifies whether the signature information in the command message is legal. If it is legal, find the executable program corresponding to the command name in the memory registry as the command processing program; call the found command processing program and execute the command The command corresponding to the message. If the signature information in the verification command message is illegal, or the executable program corresponding to the command name is not found in the memory registry, you can feed back prompt information to the server.

Applying the embodiment shown in this application, in the first aspect, the remote management of the terminal device is realized by sending the command message through the server. In the second aspect, the communication between the server and the terminal device is based on the MQTT protocol. Compared with the HTTP (Hyper Text Transfer Protocol) polling communication method, the communication process of this solution has better timeliness. In the third aspect, the communication mode of the MQTT protocol has better versatility. It does not require specially customized terminal devices and servers. It only needs to configure the first processing process in the terminal device and connect the server to the second processing process. In the fourth aspect, the command message defined in this solution can add information related to multiple commands, and the command message has better scalability. In the fifth aspect, the terminal device performs signature verification and/or device identification information verification on the command message, which can filter out tampered command messages, and can also identify forged command messages, which improves the security of remote management.

The following describes the remote management method for the terminal device. The terminal device can be various devices that need to be remotely managed, such as routers, display control devices, cameras, etc., which are not specifically limited. As shown in FIG. 4, FIG. 4 is a schematic flowchart of a remote management method applied to terminal equipment, including:

S401: Receive a command message sent by a server based on the MQTT protocol; wherein, the command message includes a command name and a command body.

In an implementation manner, data transmission is performed between the terminal device and the server based on the MQTT protocol. Or, in another implementation manner, data transmission between the terminal device and the server can be based on the MQTTS protocol. In this way, the transmission channel is encrypted, which improves the security of data transmission. Or, the data transmission between the terminal device and the server can also be based on other protocols, which will not be listed here.

In an implementation manner, the terminal device is configured with a first proxy process; the server accesses the second proxy process; the first proxy process and the second proxy process perform data transmission based on the MQTT protocol or the MQTTS protocol. In the following content, the MQTT protocol is taken as an example for description.

For example, a cross-platform application based on POSIX C can be configured in the terminal device. The application runs in the background as a daemon, and the application is the first agent process. The application program can access the second agent process, can provide an HTTP interface for sending messages, can load executable programs, can subscribe to receive command messages sent by the server, can verify whether the signature information is legal, and can call executable programs to execute the corresponding The command.

The command message includes the command name and the command body. The command name is the name of the command to be executed, and the command body can include the parameters required to execute the command.

S402: Find the executable program corresponding to the command name in the memory registry as the command processing program. If found, execute S403.

S403: By invoking the found command processing program, execute the command corresponding to the command message based on the parameters in the command body.

In an implementation manner, after receiving the command message, the terminal device parses the command message to obtain the command name and command body; in the memory registry, find the executable program corresponding to the command name as the command processing program; if found, The command processing program found is called, and the command corresponding to the command message is executed based on the parameters in the command body; if it is not found, it means that the terminal device does not support executing the command corresponding to the command message.

In another implementation manner, if the command message also includes signature information; after S401, the terminal device may first use the first encoding algorithm to encode the command body to obtain the first encoded command body; and use the second The decoding algorithm corresponding to the encoding algorithm decodes the signature information to obtain the second decoded signature information; based on the pre-appointed public key, verify the first encoded command body and the second decoded signature Whether the information matches; if it matches, execute S402 again.

For example, the first encoding algorithm may be a sha256 algorithm, and the second encoding algorithm may be a base64 encoding algorithm. You can use the decoding algorithm corresponding to the base64 encoding algorithm to decode the signature information in the command message. In order to distinguish the description, the data obtained by decoding here is called the "second decoded signature information"; and the sha256 algorithm is used to perform the command body For encoding processing, in order to distinguish the description, the data obtained by encoding here is called the "first encoded command body".

The server and the terminal device pre-appoint a public and private key. For example, the public key may be an RSA (an asymmetric encryption algorithm) public key, and the private key may be an RSA private key. Based on the RSA public key, the terminal device verifies whether the first encoded command body matches the second decoded signature information. If it matches, it means that the command message has not been tampered with, nor is it a forged command message. The terminal device is then stored in the memory In the registry, the executable program corresponding to the command name is searched for as a command processing program. This can be understood as security verification of command messages, which can filter out tampered command messages, and can also identify forged command messages, which improves the security of remote management.

In one embodiment, if it is verified that the first encoded command body matches the second decoded signature information, it can be further verified whether the device identification information in the command body is the same as the identification information of the terminal device; if they are the same, it means the command If the message has not been tampered with, nor is it a forged command message, the terminal device executes S402 again. This can be understood as security verification of command messages, which can further filter out tampered command messages, and can also further identify forged command messages, which further improves the security of remote management.

In an implementation manner, the terminal device may feed back the verification result to the server during the process of verifying the security of the command message. The command message may also include a command identifier, and the terminal device may feed back the security verification result to the server based on the command identifier, so that the server determines which command message the security verification result is for.

For example, if the terminal device is a router, the executed command may include changing the configuration of the router. In this case, the command parameter may include the modified configuration information; or the executed command may also include turning on/off the router, etc. Wait. If the terminal device is a control device of the display screen, the executed command may include adjusting the brightness of the display screen, the display area, and so on. In this case, the command parameters may include information such as the changed display brightness and display area. If the terminal device is a camera, the executed command may include adjusting the pitch angle, rotation angle, and focal length of the camera. In this case, the command parameters may include the changed pitch angle, rotation angle, and focal length. This solution does not limit the type of terminal equipment and the commands it executes, and will not list them one by one.

The following is an introduction corresponding to the remote management method for the server, as shown in Fig. 5, which is a schematic flowchart of a remote management method applied to the server, including:

S501: Acquire the command name, command parameters, and identification information of the pointed terminal device of the command to be executed.

The command name is the name of the command that needs to be executed, and the command parameters are the parameters needed to execute the command. For example, if the command name is volume and the command parameter can be data:9, it means that the volume of the terminal device is set to 9. The pointed terminal device is the terminal device that needs to be remotely managed. The identification information of the terminal device may be the device serial number, or may also be other information that can identify the terminal device, which is not specifically limited.

S502: Generate a command body based on the command parameters and the identification information of the terminal device.

In an implementation manner, the command parameters and the identification information of the terminal device may be assembled into a command body. Or, the command body may also include other data, which is not specifically limited.

S503: Generate signature information based on the pre-appointed private key and command body.

In an implementation manner, S503 may include: encoding the command body using a first encoding algorithm to obtain a first encoded command body; based on the pre-appointed private key and the first encoded command body, Generate signature information; use the second encoding algorithm to encode the signature information to obtain encoded signature information.

For example, the first encoding algorithm may be a sha256 algorithm, the second encoding algorithm may be a base64 encoding algorithm, and the signature information included in the command message may be a base64 encoded character string. Alternatively, other encoding algorithms can also be used, and the specific algorithm is not limited. The server and the terminal device pre-appoint an RSA public and private key, and S503 performs a signature based on the RSA private key.

S504: Send a command message to the terminal device based on the MQTT protocol, where the command message includes the command name, the command body, and the signature information.

In an implementation manner, data transmission is performed between the terminal device and the server based on the MQTT protocol. Or, in another implementation manner, data transmission between the terminal device and the server can be based on the MQTTS protocol. In this way, the transmission channel is encrypted, which improves the security of data transmission. Or, the data transmission between the terminal device and the server can also be based on other protocols, which will not be listed here. In the following content, the MQTT protocol is taken as an example for description.

In the foregoing implementation manner, the encoded signature information is obtained. In this implementation manner, S504 may include: sending the command name, the command body, and the encoded signature information to the terminal device based on the MQTT protocol Command message.

For example, the command message may include: the ID of the command message, the type of the device sending the command message, the command name, the command body, and the signature information. The command body may include the parameters and terminal equipment required to execute the command. Device identification information and so on.

For example, the format of the command message can be:

{

"id":20190730002,/ID of the command message

"command":"volume",/command name: volume

"method":"set",/method: set

"Sig": "Signature Information"/Signature Information

}

For example, the server may assemble the command name and the command body into a command message in JSON format, and the specific format of the command message is not limited. After the server and terminal device access the Broker, the terminal device subscribes to the topic, and then the server can send the command message to the terminal device through Publish.

Corresponding to the foregoing method embodiment, the embodiment of the present application also provides a terminal device, as shown in FIG. 6, including: a memory 602, a processor 601, and a computer stored in the memory 602 and running on the processor 601 A program, when the processor 601 executes the program, any one of the above-mentioned remote management methods applied to a terminal device is implemented.

Corresponding to the foregoing method embodiment, the embodiment of the present application also provides a server, as shown in FIG. 7, including: a memory 702, a processor 701, and a computer program stored on the memory 702 and running on the processor 701 When the processor 701 executes the program, any one of the foregoing remote management methods applied to the server is implemented.

An embodiment of the present application also provides a non-transitory computer-readable storage medium that stores computer instructions, and the computer instructions are used to make the computer execute any of the above-mentioned remote management methods.

Those of ordinary skill in the art should understand that the discussion of any of the above embodiments is only exemplary, and is not intended to imply that the scope of the present disclosure (including the claims) is limited to these examples; under the idea of this application, the above embodiments or The technical features in different embodiments can also be combined, the steps can be implemented in any order, and there are many other changes in different aspects of the present application as described above, which are not provided in the details for the sake of brevity.

In addition, in order to simplify the description and discussion, and in order not to make the application difficult to understand, the well-known power/ground connections to integrated circuit (IC) chips and other components may or may not be shown in the provided drawings. . In addition, the devices may be shown in the form of block diagrams in order to avoid making the application difficult to understand, and this also takes into account the fact that the details of the implementation of these block diagram devices are highly dependent on the platform on which the application will be implemented (ie , These details should be completely within the understanding of those skilled in the art). In the case where specific details (for example, a circuit) are described to describe the exemplary embodiments of the present application, it is obvious to those skilled in the art that it may be possible without these specific details or when these specific details are changed. Implement this application under. Therefore, these descriptions should be considered illustrative rather than restrictive.

Although the present application has been described in conjunction with the specific embodiments of the present application, many substitutions, modifications and variations of these embodiments will be apparent to those of ordinary skill in the art based on the foregoing description. For example, other memory architectures (e.g., dynamic RAM (DRAM)) may use the discussed embodiments.

The embodiments of the present application are intended to cover all such substitutions, modifications and variations that fall within the broad scope of the appended claims. Therefore, any omissions, modifications, equivalent substitutions, improvements, etc. made within the spirit and principles of this application should be included in the scope of protection of this application.

Claims

A remote management method, applied to a terminal device, the method including:

By calling the executable program in the specified directory, the command name supported by the executable program is obtained, and the command name supported by the executable program is recorded in the memory registry;

The command message sent by the server is received based on the MQTT protocol; wherein, the command message includes the command name and the command body;

In the memory registry, search for an executable program that supports the command name as a command processing program;

By calling the found command processing program, the command corresponding to the command message is executed based on the parameters in the command body.
The method according to claim 1, wherein said obtaining the command name supported by the executable program by calling the executable program in the specified directory comprises:

Based on the preset parameters, sequentially call the executable programs in the designated directory to obtain a list of commands supported by each executable program, and the command list includes the command names supported by the executable program;

The recording the command name supported by the executable program to the memory registry includes:

The command list and the path information of the executable program are correspondingly recorded in the memory registry.
The method according to claim 1, wherein the command message further includes signature information; after the command message sent by the server is received based on the MQTT protocol, the method further includes:

Use the first encoding algorithm to encode the command body to obtain the first encoded command body; and use the decoding algorithm corresponding to the second encoding algorithm to decode the signature information to obtain the second decoded signature information ；

Verifying whether the first encoded command body matches the second decoded signature information based on the pre-appointed public key;

In response to the first encoded command body being matched with the second decoded signature information, the step of searching the executable program corresponding to the command name in the memory registry is executed as a command processing program.
The method according to claim 3, wherein, in response to the first encoded command body matching the second decoded signature information, executing the in-memory registry to find the command name corresponding to the The executable program, as the steps of the command processing program, includes:

Verifying whether the device identification information in the command body is the same as the identification information of the terminal device;

In response to the device identification information in the command body being the same as the identification information of the terminal device, the step of searching the executable program corresponding to the command name in the memory registry is executed as a command processing program.
The method according to claim 4, wherein the command message further includes a command identifier; the method further comprises:

Responding to the mismatch between the first encoded command body and the second decoded signature information, sending first prompt information including the command identifier to the server based on the MQTT protocol;

In response to the device identification information in the command body being different from the identification information of the terminal device, sending second prompt information including the command identification to the server based on the MQTT protocol;

If the executable program corresponding to the command name is not found in the memory registry, sending third prompt information including the command identifier to the server based on the MQTT protocol;

After the command processing program found by invoking executes the command corresponding to the command message based on the parameters in the command body, the method further includes:

The fourth prompt information including the command identifier is sent to the server based on the MQTT protocol.
A remote management method applied to a server, the method includes:

Obtain the command name, command parameters, and identification information of the pointed terminal device of the command to be executed;

Generating a command body based on the command parameters and the identification information of the terminal device;

Generate signature information based on the pre-appointed private key and the command body;

A command message is sent to the terminal device based on the MQTT protocol, and the command message includes the command name, the command body, and the signature information.
The method according to claim 6, wherein the generating the signature information based on the pre-appointed private key and the command body comprises:

Encoding the command body by using the first coding algorithm to obtain the first encoded command body;

Generating signature information based on the pre-appointed private key and the first encoded command body;

Encoding the signature information by using the second encoding algorithm to obtain encoded signature information;

The sending a command message to a terminal device based on the MQTT protocol includes:

Send a command message including the command name, the command body, and the encoded signature information to the terminal device based on the MQTT protocol.
A terminal device, comprising a memory, a processor, and a computer program stored on the memory and capable of running on the processor, wherein the processor executes the program as described in any one of claims 1 to 5 method.
A server comprising a memory, a processor, and a computer program stored on the memory and running on the processor, wherein the processor implements the method according to any one of claims 6 to 7 when the processor executes the program .
A remote management system includes a terminal device and a server, and the terminal device and the server perform data transmission based on the MQTT protocol;

The server is configured to send a command message to a terminal device, and the command message includes a command name and a command body;

The terminal device is used to obtain the command name supported by the executable program by calling the executable program in the specified directory, and record the command name supported by the executable program in the memory registry; receive the command message sent by the server; read and receive The command name and command body in the received command message are used as the command name to be executed and the command body to be executed; in the memory registry, the executable program corresponding to the command name to be executed is searched as a command processing program; The received command processing program executes the command corresponding to the received command message based on the parameters in the command body to be executed.
The system according to claim 10, wherein a first agent process is configured in the terminal device; the server accesses a second agent process; the communication between the first agent process and the second agent process is based on MQTT Protocol, or MQTTS protocol for data transmission.
A non-transitory computer-readable storage medium storing computer instructions for causing the computer to execute the remote management according to any one of claims 1 to 7 method.