A method for controlling access permissions of a terminal

Abstract

The application provides a terminal access permission control method, which comprises the following steps: obtaining device information in a local area network where a terminal is located; judging whether a target device is in the local area network according to the obtained device information; and deciding whether to release the access permission limitation of the terminal according to the judgment result. The application can provide a convenient and flexible access permission control method for the existing terminal access, and manual input setting by an operator is not required.

Description

[0001] This application is a divisional application. The original application has the application number 201880095183.6 and the original application date is July 13, 2018. The entire contents of the original application are incorporated herein by reference. Technical Field

[0002] This invention relates to the field of communication technology, and in particular to a method for controlling access permissions of a terminal. Background Technology

[0003] With the increasing number of home terminal devices, such as smart TVs, set-top boxes, tablets, and mobile phones, people are using these devices more and more in their daily lives and studies. These devices are becoming increasingly attractive to minors, and the unrestrained and unrestricted use of these devices can have a negative impact on them.

[0004] To prevent minors from watching and using televisions, set-top boxes, mobile phones, tablets, and other terminal devices without restraint, many terminal device manufacturers typically equip their devices with a child lock function. When the child lock is activated, the terminal device will not respond to operations or will only provide limited access permissions.

[0005] There are two main ways to lock and unlock child locks: 1. Trigger the child lock by a specific key combination, which requires manual operation to unlock; 2. Install management software on the terminal and unlock by entering a password.

[0006] However, regardless of the child lock method used, users still need to manually enter a password to unlock it. For example, after the device is locked, when a user needs to use the locked functions, they must first enter a password to unlock it. For smart TVs or set-top boxes, the locked channel or signal source needs to be unlocked via the remote control before the user can watch the program. After watching the program, the user must again enter a password via the remote control or the user interface to relock the channel or signal source, thus preventing children from watching the program. Therefore, whether locking or unlocking the device, users need to enter a password via the remote control or the user interface, which is cumbersome and inconvenient. Summary of the Invention

[0007] This invention provides a method, system, and apparatus for controlling access permissions of a terminal.

[0008] In one aspect of this invention, a method for controlling access permissions of a terminal is provided. The method includes: acquiring device information surrounding the terminal; determining whether a target device exists in the acquired device information; and if the target device exists in the acquired device information, then removing the access permission restriction of the terminal.

[0009] Optionally, determining whether a target device exists based on the acquired device information includes: storing a target device information list including one or more target devices in the terminal, and determining whether a target device exists in the acquired device information based on the acquired device information and the target device information list stored in the terminal.

[0010] Optionally, the terminal peripheral device is a device that the terminal can connect to via short-range wireless communication technology.

[0011] Optionally, the acquisition of device information around the terminal can be achieved through short-range communication technology.

[0012] Optionally, obtaining the device information around the terminal can be achieved through one or more short-range communication technologies.

[0013] Optionally, before acquiring device information surrounding the terminal, the method further includes: determining whether the access control function is enabled in the first state; if enabled, acquiring device information surrounding the terminal.

[0014] Optionally, the first state is to trigger a power-on process.

[0015] Optionally, the first state is triggered by screen unlocking.

[0016] In another aspect of this invention, a terminal is provided, the terminal comprising: a determining communication unit for determining to acquire device information in the vicinity of the terminal; a judging unit for judging whether a target device exists based on the device information acquired by the communication unit; and a control unit for deciding whether to remove access restrictions on the terminal based on the judging result of the judging unit.

[0017] Optionally, the terminal further includes: a storage unit for storing target device information including one or more target devices; the judgment unit determines whether a target device exists based on the device information obtained by the communication unit and the list of target device information stored in the storage unit.

[0018] Optionally, the terminal is a smart TV or a set-top box.

[0019] Optionally, the terminal further includes a determining unit, configured to determine whether the access control function is enabled in the first state of the terminal.

[0020] Optionally, a communication unit is used to obtain device information around the terminal when the determining unit determines that the access control function is enabled.

[0021] In another aspect of this invention, a terminal is provided, the terminal comprising: a processor and a readable storage medium, the readable storage medium being used to store a program, and the processor being used to execute the program. When the program is executed, the following steps are performed: obtaining device information surrounding the terminal; determining whether a target device exists based on the obtained device information; and deciding whether to remove access restrictions on the terminal based on the determination result.

[0022] In another aspect of the present invention, a method for controlling access permissions of a terminal is provided. The method includes: obtaining device information in a local area network where the terminal is located; determining whether a target device is in the local area network based on the obtained device information; and deciding whether to remove the access permission restriction of the terminal based on the determination result.

[0023] Optionally, determining whether a target device is in the local area network based on the acquired device information includes: storing a target device information list including one or more target devices in the terminal, and determining whether the target device is in the local area network based on whether the acquired device information existing in the local area network includes the target device stored in the terminal.

[0024] Optionally, the target device information is preset by the user and stored in the terminal.

[0025] Optionally, the step of deciding whether to remove the access restriction of the terminal based on the judgment result includes: if one or more of the target devices exist in the local area network, removing the access restriction of the terminal.

[0026] Optionally, the step of deciding whether to lift the access restriction on the terminal based on the judgment result includes: if the target device does not exist in the local area network, then restricting the access restriction on the terminal.

[0027] Optionally, the method further includes, before acquiring device information around the terminal, determining whether the terminal access control function is enabled in a first state.

[0028] Optionally, the first state is a power-on triggered state.

[0029] Optionally, the first state is the unlocked trigger state.

[0030] In another aspect of this invention, a terminal is provided, the terminal comprising: a determining communication unit, configured to determine and acquire device information in a local area network where the terminal is located; a judging unit, configured to judge whether a target device is in the local area network based on the device information acquired by the communication unit; and a control unit, configured to decide whether to remove access restrictions on the terminal based on the judging result of the judging unit.

[0031] Optionally, the terminal further includes a determining unit, configured to determine whether the access control function is enabled in the first state.

[0032] Optionally, a communication unit is used to obtain device information in the local area network where the terminal is located when the determining unit determines that the access control function is enabled.

[0033] Optionally, the terminal further includes a setting unit for setting access control functions.

[0034] Optionally, the setting unit is used to set whether to enable the access control function.

[0035] Optionally, the setting unit is used to set the target device information.

[0036] Optionally, the setting unit is used to set the type of access control.

[0037] Optionally, the setting unit is used to set target device information; the storage unit is used to store the target device information set by the user through the setting unit.

[0038] The storage unit stores the setting information of the setting unit; the judgment unit determines whether the target device is in the local area network based on whether the acquired device information existing in the local area network includes the target device information stored in the storage unit.

[0039] Optionally, the terminal is a smart TV, a set-top box, a handheld terminal, a tablet, or a computer.

[0040] In another aspect of this invention, a terminal is provided, comprising: a processor and a readable storage medium, wherein the readable storage medium is used to store a program, and the processor is used to execute the program. When the program is executed, the following steps are performed: obtaining information about other devices in the local area network where the terminal is located; determining whether a target device is in the local area network based on the obtained device information; and deciding whether to remove the access restrictions on the terminal based on the determination result.

[0041] In another aspect of this invention, a method for controlling access permissions of a terminal is provided. The method includes: triggering the acquisition of peripheral device information of the terminal when a specific condition is met; acquiring peripheral device information of the terminal; determining whether a target device exists in the acquired device information; and if the target device exists in the acquired device information, then removing the access permission restriction of the terminal.

[0042] Optionally, the method further includes enabling the terminal access control function.

[0043] Optionally, determining whether a target device exists based on the acquired device information includes: storing a target device information list including one or more target devices in the terminal, and determining whether a target device exists in the acquired device information based on the acquired device information and the target device information list stored in the terminal.

[0044] Optionally, the acquisition of device information around the terminal can be achieved through short-range communication technology.

[0045] Optionally, the specific condition is triggered periodically.

[0046] Optionally, the specific condition is the detection of a specified operation command.

[0047] In another aspect of this invention, a terminal is provided, the terminal comprising: a triggering unit, configured to trigger the acquisition of peripheral device information of the terminal when a specific condition is met; a communication unit, configured to acquire peripheral device information of the terminal; a judging unit, configured to judge whether a target device exists in the acquired device information; and a control unit, configured to remove the access restriction of the terminal when the target device exists in the acquired device information.

[0048] Optionally, the terminal further includes a setting unit for enabling the terminal access control function.

[0049] Optionally, the terminal further includes: a storage unit for storing target device information including one or more target devices; the judgment unit determines whether a target device exists based on the device information obtained by the communication unit and the list of target device information stored in the storage unit.

[0050] Optionally, the terminal is a smart TV or a set-top box.

[0051] In another aspect of this invention, a terminal is provided, the terminal comprising: a processor and a readable storage medium, the readable storage medium for storing a program, and the processor for executing the program. When the program is executed, the following steps are performed: enabling the terminal access control function; triggering the acquisition of peripheral device information of the terminal when specific conditions are met; acquiring peripheral device information of the terminal; determining whether a target device exists in the acquired device information; and if the target device exists in the acquired device information, then removing the access restriction of the terminal.

[0052] In this embodiment of the invention, the presence or absence of the target device near the terminal serves as an indicator of whether the terminal is within the monitoring range of the personnel in charge, thereby determining whether to restrict or remove access permissions for the terminal. This embodiment of the invention provides convenient and effective access permission management for the terminal, eliminating the need for repeated manual settings. Access restrictions are removed once the target device and the managed terminal are connected to the same local area network (LAN), and access restrictions are promptly implemented once the target device leaves the LAN. This avoids the problems of existing technologies that require remembering and manually entering passwords to remove access restrictions, or the inability to remove restrictions if the password is forgotten, or the need to manually enter the password again each time access is restricted.

[0053] This invention can not only be used to restrict minors from watching television or using home terminal devices, but also to control the access rights of the terminal owner to their own terminal in any situation. That is, by determining whether the terminal owner is at home or near the terminal based on the location of the target device, such as the mobile terminal carried by the terminal owner, the access rights restriction of the terminal can be intelligently enabled or disabled. Attached Figure Description

[0054] To more clearly illustrate the technical solutions in the embodiments of this application or the background art, the accompanying drawings used in the embodiments of this application or the background art will be described below.

[0055] Figure 1 : A flowchart of a method for controlling terminal access permissions according to an embodiment of the present invention;

[0056] Figure 2 A flowchart illustrating the signaling process for obtaining device information in a local area network according to an embodiment of the present invention;

[0057] Figure 3 An example of an access control information setting interface according to an embodiment of the present invention;

[0058] Figure 4 An example of an access control function setting interface according to an embodiment of the present invention;

[0059] Figure 5 : An application scenario diagram of an embodiment of the present invention;

[0060] Figure 6 : A schematic diagram of a terminal structure according to an embodiment of the present invention;

[0061] Figure 7 : Another terminal structure diagram according to an embodiment of the present invention.

[0062] Figure 8 : Flowchart of another method for controlling terminal access permissions according to an embodiment of the present invention;

[0063] Figure 9 : Flowchart of another method for controlling terminal access permissions according to an embodiment of the present invention;

[0064] Figure 10 : Another terminal structure diagram according to an embodiment of the present invention;

[0065] Figure 11 : Another terminal structure diagram according to an embodiment of the present invention. Detailed Implementation

[0066] The technical solutions of the embodiments of the present invention will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some, not all, of the embodiments of the present invention. It should be noted that all other embodiments obtained by those skilled in the art based on the embodiments of the present invention without creative effort are within the scope of protection of the present invention. It should be understood that the specific embodiments described herein are merely illustrative of the present invention and are not intended to limit the present invention.

[0067] The main objective of this invention is to manage terminal usage permissions, preventing unsupervised use of terminals when the relevant supervisors are absent. It can be applied to various scenarios requiring terminal usage permission management, such as preventing minors from uncontrolled use of smart TVs, set-top boxes, tablets, etc., without parental supervision; preventing information leakage after a terminal is lost; and preventing strangers from using personal terminals when the owner is not present. This invention determines whether a terminal device is within the supervisor's control range by judging whether the terminal device is near a target device, thereby deciding whether to implement or lift access restrictions. The selected target device is typically a personal device carried by the terminal supervisor, such as a handheld terminal, smart bracelet, or other wearable device.

[0068] The embodiments disclosed in this invention relate to a method for controlling access permissions of a terminal, wherein the terminal can be of various types, such as smart TVs, set-top boxes, tablets, mobile phones, computers, smart home appliances, and other smart terminals. Access permissions can involve different content for different types of terminals. For example, for smart TVs or set-top boxes, access permission control could mean preventing the viewing of certain channels or signal sources, or preventing the operation of the TV, i.e., preventing the viewing of any channels. For tablets, mobile phones, computers, and other terminals, access permission control could mean preventing the use of certain functions or applications, such as playing audio and video files, opening game applications, etc., or preventing the operation of such terminals, i.e., the terminal does not respond to input operation commands. Similarly, for smart home appliances, it could mean restricting some or all of their functions.

[0069] Figure 1 This is a flowchart of a method for controlling terminal access permissions according to an embodiment of the present invention.

[0070] S101: In the first state, determine whether the terminal access control function is enabled.

[0071] When access control is enabled on the terminal, it is determined whether the access control function is activated in the first state. The terminal can recognize or sense this first state. For example, the terminal can recognize its own state through the processor or other modules, such as application execution state, action execution state, screen lock state and unlock trigger state, restart or power-on trigger state, etc. The terminal can display its state on the display.

[0072] When the terminal recognizes the first state, it determines whether the terminal's access control function is enabled. The access control function restricts some or all functions of the terminal under certain conditions. The functions that can be restricted include the operation and / or use of some or all applications, the reading and / or writing of some or all terminal data, the reception and / or playback of some or all media resources or channels, etc.

[0073] The access control function can be manually set by the user beforehand. The access control function can be either on or off. The terminal can enable or disable the access control function by detecting user input. For example, the terminal can display menu icons on the touchscreen to enable or disable the access control function. The terminal can enable or disable the access control function by detecting touch input to the menu icons for enabling or disabling access control. If the terminal is a smart TV or set-top box, the terminal can enable or disable the access control function by detecting remote control selection to the menu icons for enabling or disabling access control. Figure 4 This is an example of an access control function settings interface according to an embodiment of the present invention, such as... Figure 4 Users can choose whether to enable the access control function as needed and save the settings. After enabling access control, the interface will redirect to the access control settings, allowing users to select or manually enter the target device, and then save. If device and permission information has already been set, enabling access control will apply the previous settings to the terminal. For terminals that need to be powered off after use, such as smart TVs or set-top boxes, if access control is enabled, it will not need to be reset each time the device is powered on; the access control function will be automatically enabled.

[0074] If it is determined in the first state that the terminal access control function is off, then proceed to step S106.

[0075] S106: No terminal access permission restrictions are imposed, i.e., the terminal responds to the corresponding operations in the normal state. For example, if the first state is the power-on triggered state, the terminal will enter the power-on state when the terminal access permission control function is determined to be off, and no subsequent operation permission restrictions will be imposed; if the first state is the unlock triggered state, the terminal will enter the screen unlock state when the terminal access permission control function is determined to be off, and no subsequent operation permission restrictions will be imposed; if the first state is to use various terminal functions or read terminal data, the terminal will be able to use various terminal functions or read relevant terminal data without restriction when the terminal access permission control function is determined to be off.

[0076] If the terminal access control function is determined to be enabled in the first state, then proceed to step S102.

[0077] S102: Obtain information about peripheral devices of the terminal;

[0078] Peripheral device information refers to information about other devices in the terminal's environment that are relatively close to the terminal. In this embodiment of the invention, the proximity of a device to the terminal can be determined by whether it can establish a short-range wireless communication connection with the terminal, or whether it can be located by the terminal through short-range wireless communication technology. Short-range wireless communication technologies include: Wi-Fi, Mesh, Bluetooth, ZigBee, Hillink, Thread, NFC, UWB, etc.

[0079] Terminals can obtain information about their surrounding devices in various ways. These include accessing a local area network (LAN) via a device, such as a Wi-Fi network, to obtain information about other devices within that LAN. For example, at home, smart TVs, set-top boxes, and tablets can connect to the home router via wired or wireless connections to access the home LAN. Alternatively, they can search for nearby personal area networks (PANs), such as via Bluetooth or Wi-Fi, to locate nearby PANs and their associated devices.

[0080] There are several ways to obtain device information within a local area network (LAN). For example, the NetBIOS protocol can be used to obtain information about all other devices within the same LAN. The specific protocol flow is as follows: Figure 2 As shown, terminal 201 sends an NBNS Name query request to the local area network (LAN) device. After receiving the request, LAN device 200 broadcasts the NBNS Name query request to other devices 202 and 203 in the LAN. Other devices 202 and 203 return NBNS Name registration messages and send their device information to terminal 201 through LAN device 200, thereby enabling the terminal to obtain information about other devices in the LAN.

[0081] S103: Determine whether the target device exists based on the acquired device information.

[0082] The target device is typically a personal device carried by the terminal monitoring personnel. Whether the terminal is within the monitoring personnel's range is determined based on whether the target device and the terminal are on the same local area network, or whether the target device and the terminal can establish a short-range wireless connection. Therefore, the presence of the target device in the acquired device information must be determined. This determination requires not only acquiring information about devices near the terminal but also acquiring information about the target device, i.e., the personal device carried by the terminal monitoring personnel.

[0083] Target device information can be preset by the user through the terminal's menu selection interface. For example, the terminal can display a menu interface on a touchscreen for selecting or entering target device information. The terminal can set the target device information by detecting touch or key input to the menu interface for selecting or entering target device information. If the terminal is a smart TV or set-top box, it can set the target device information by detecting remote control selection or manual input to the menu interface for selecting or entering target device information.

[0084] Figure 3This embodiment of the invention provides an exemplary interface for setting access control information for a terminal. Setting access control information for the terminal in this embodiment mainly includes setting two types of information: device information and permission information. This embodiment is primarily used to determine whether a supervisor is within the terminal's supervisory scope. Therefore, setting device information can be done by selecting via network scanning or manually inputting the supervisor's personal device (target device). One or more target devices can be set as needed. The setting method can be single-selection, manual input, or a list of devices that can control access to the terminal.

[0085] In addition, it can also be like Figure 3 The options shown allow you to select the type of permission control, such as choosing to watch only specific channels, use only specific applications, or disable all applications. This is how you set permission information. Figure 3 This is just one example. Access control for the terminal can also be in the default state, without needing to be selected. For example, if access control is enabled by default, the terminal will be in a prohibited state, restricting the use of all functions. Alternatively, different parental devices can have different types of access restrictions.

[0086] The determination of whether a target device exists in the peripheral device information is based on the acquired peripheral device information. Specifically, it can be to search the acquired peripheral device information for the target device. There are multiple ways to do this, such as sequentially searching the acquired peripheral device information for the target device according to the setting order of the target device, and stopping the search once the target device is found. Alternatively, it can be to search the acquired peripheral device information for the target device in parallel to obtain the existence status of the target device in the acquired peripheral device information.

[0087] If the target device is found in the acquired peripheral device information, proceed to step S104.

[0088] S104: Remove the access restrictions on the terminal.

[0089] If the determination result indicates that the target device exists in the obtained peripheral device information, then the terminal is considered to be within the control range of the regulator, and the access restriction on the terminal is lifted.

[0090] If the target device is not found in the acquired peripheral device information, proceed to step S105.

[0091] S105: Impose appropriate access restrictions on the terminal.

[0092] If the determination result is that the target device is not found in the obtained peripheral device information, it is considered that the terminal is not within the control scope of the terminal supervisor, and access restrictions on the terminal are then enabled.

[0093] The aforementioned access control method obtains information about devices surrounding the terminal and uses the presence of a target device near the terminal as an indicator of whether the terminal is within the monitoring range of the personnel in charge, thereby determining whether to restrict or lift access restrictions on the terminal. This invention provides convenient and effective access control for terminals, eliminating the need for repeated manual settings. Access restrictions are lifted once the target device and the managed terminal are connected to the same local area network (LAN), and access control is promptly applied once the target device leaves the LAN. This avoids the problems of existing technologies that require remembering and manually entering passwords to lift restrictions, forgetting passwords, or having to manually set access restrictions every time the user leaves.

[0094] The above-described permission management method is merely a specific example of the present invention. The acquisition of peripheral device information of the terminal and the determination of the target device can be carried out under any conditions and environment, and are not limited to determining whether the terminal access permission control function is enabled in the first state; if the access permission control function is enabled, the acquisition of peripheral device information of the terminal and the determination of the target device are carried out.

[0095] Figure 8 This is a flowchart illustrating another method for controlling terminal access permissions according to an embodiment of the present invention. For smart TVs or set-top boxes, to prevent minors from unrestricted access to television programs, certain restrictions are typically placed on their use of the television, such as limiting access to specific programs or signal sources, or even preventing them from responding to any operations. Therefore, it is necessary to determine whether the terminal has access permission control functionality set when a power-on action is detected. Figure 8 This is a flowchart illustrating the method for implementing access control functionality on this type of terminal.

[0096] S800: Determines whether a power-on trigger has been detected.

[0097] The power-on trigger can be an input to a predetermined key, such as the power button, the power-on button, or a power-on switch. Upon detecting the power-on trigger, the terminal can turn on the screen and enter the power-on state.

[0098] If a power-on trigger is detected, proceed to step S801; otherwise, do not trigger subsequent operations.

[0099] S801: Determine whether access control is enabled.

[0100] After the terminal detects a power-on trigger, it determines whether the terminal's access control function is enabled. The access control function restricts some or all functions of the terminal under certain conditions. These restricted functions include the operation and / or use of some or all applications, the reading and / or writing of some or all terminal data, the reception and / or playback of some or all media resources or channels, etc.

[0101] The access control function's state can be manually set by the user. The access control function can be either on or off. The terminal can enable or disable the access control function by detecting user input. For example, the terminal can enable or disable the access control function by detecting remote selection of a menu icon used to enable or disable the access control function. Figure 4 This is an example of an access control function settings interface according to an embodiment of the present invention, such as... Figure 4 Users can choose whether to enable the access control function as needed and save the settings. After enabling access control, the interface will redirect to the access control settings, allowing users to select or manually input the target device, and then save. If device and permission information has already been set, enabling access control will apply the previous settings, and the access control function will be enabled automatically after each power-on and power-off without needing to be reset.

[0102] If it is determined in the first state that the terminal access control function is off, then proceed to step S806.

[0103] S806: No terminal access permission restrictions are imposed; that is, the terminal responds to the corresponding operations in the normal state. That is, after power-on, if it is determined that the terminal access permission control function is off, it enters the power-on state and does not impose permission restrictions on subsequent operations.

[0104] If it is determined that the terminal access control function is enabled, proceed to step S802.

[0105] S802: Obtain device information in the local area network where the terminal is located.

[0106] A terminal can obtain information about devices within its local area network (LAN) in several ways. These include connecting to the LAN via a device such as a wireless router, or searching for other devices' personal area networks (PANs) in the vicinity to obtain information about other devices on its LAN. For example, at home, smart TVs, set-top boxes, and other terminals can connect to the home router via wired or wireless means to access the home LAN and scan the LAN to obtain information about other connected devices. Alternatively, they can search for PANs created by other devices in the vicinity to obtain information about devices on the terminal's LAN. A terminal can be on one or multiple LANs.

[0107] S803: Determine whether the target terminal device is in the local area network where the terminal is located based on the obtained local area network device information.

[0108] The target device is typically a personal device carried by the terminal supervisor. Whether the terminal is within the supervisor's monitoring range is determined by whether the target device and the terminal are on the same local area network. Therefore, it is necessary to determine whether the target device exists in the acquired device information. This determination requires not only acquiring information about devices near the terminal but also acquiring information about the target device, i.e., the personal device carried by the terminal supervisor.

[0109] The target device information can be preset by the user through the terminal's menu selection interface. The terminal can also set the target device information by detecting remote control selection or manual key input through the menu interface used to select or input the target device information.

[0110] Figure 3 This embodiment of the invention provides an exemplary interface for controlling access permissions to a terminal. In this embodiment, setting access control information for the terminal mainly includes two types of information: device information and permission information. This embodiment is primarily used to determine whether a supervisor is within the terminal's supervisory scope. Therefore, setting device information can be done by selecting via network scanning or manually inputting the supervisor's personal device (target device). One or more target devices can be set as needed. The setting method can be single-selection, manual input, or a list of devices that can control access permissions to the terminal.

[0111] In addition, it can also be like Figure 3 The options shown allow you to select the type of permission control, such as choosing to watch only specific channels, use only specific applications, or disable all applications. This is how you set permission information. Figure 3This is just one example. Access control for the terminal can also be in the default state, without needing to be selected. For example, if access control is enabled by default, the terminal will be in a prohibited state, restricting the use of all functions. Alternatively, different parental devices can have different types of access restrictions.

[0112] The system determines whether the target device exists in the acquired LAN device information based on the obtained LAN device information. Specifically, it can search the acquired LAN device information for the target device. There are several ways to do this, such as sequentially searching the acquired LAN device information according to the setting order of the target device, stopping the search once the target device is found, or searching the acquired LAN device information in parallel to determine whether the target device exists in the acquired LAN device information.

[0113] If the target device is found in the obtained LAN device information, proceed to step S804.

[0114] S804: Remove the access restrictions on the terminal.

[0115] If the determination result indicates that the target device exists in the obtained local area network device information, then the terminal is considered to be within the supervisor's control scope, and the access restriction on the terminal is lifted.

[0116] If the target device is not found in the obtained LAN device information, proceed to step S805.

[0117] S805: Restrict access permissions to the terminal.

[0118] If the determination result indicates that the target device is not found in the obtained local area network device information, it is considered that the terminal is not within the control scope of the terminal supervisor, and access restrictions on the terminal are then enabled.

[0119] The aforementioned access control method uses the proximity of the target device to the terminal as an indicator of whether the terminal is within the monitoring range of the personnel in charge, thereby determining whether to restrict or remove access restrictions on the terminal. This invention provides convenient and effective access control management for terminals, eliminating the need for repeated manual settings. The terminal performs a network search upon startup, and once the target device and the managed terminal are on the same local area network, access restrictions are lifted. This avoids the problems of existing technologies that require remembering and manually entering passwords to remove access restrictions, or the inability to remove restrictions if the password is forgotten.

[0120] Figure 9 This is a flowchart illustrating another method for controlling terminal access permissions according to an embodiment of the present invention.

[0121] S900: Enable access control function;

[0122] The access control function's status can be manually set by the user. The access control function can be either on or off. The terminal can enable or disable the access control function by detecting user input. For example, the terminal can display menu icons on the touchscreen for enabling or disabling the access control function. The terminal can enable or disable the access control function by detecting touch input to the menu icons for enabling or disabling access control. If the terminal is a smart TV or set-top box, it can enable or disable the access control function by detecting remote control selection to the menu icons for enabling or disabling access control. Figure 4 This is an example of an access control function settings interface according to an embodiment of the present invention, such as... Figure 4 Users can choose whether to enable the access control function as needed and save the settings. After enabling access control, the interface will redirect to the access control settings, allowing users to select or manually enter the target device, and then save. If device and permission information has already been set, enabling access control will apply the previous settings to the terminal. For terminals that need to be powered off after use, such as smart TVs or set-top boxes, if access control is enabled, it will not need to be reset each time the device is powered on; the access control function will be automatically enabled.

[0123] S901: Trigger the acquisition of terminal peripheral device information when specific conditions are met.

[0124] The specific condition can be a specified action, that is, triggering the terminal to obtain its surrounding device information every time a specified action is detected, or a set trigger period, that is, obtaining surrounding device information once at a specific time interval.

[0125] S902: Obtain information about peripheral devices of the terminal.

[0126] Peripheral device information refers to information about other devices in the terminal's environment that are relatively close to the terminal. In this embodiment of the invention, the proximity of a device to the terminal can be determined by whether it can establish a short-range wireless communication connection with the terminal, or whether it can be located by the terminal through short-range wireless communication technology. Short-range wireless communication technologies include: Wi-Fi, Mesh, Bluetooth, ZigBee, Hillink, Thread, NFC, UWB, etc.

[0127] Terminals can obtain information about their surrounding devices in various ways. These include accessing a local area network (LAN) via a LAN device to obtain information about other devices within that LAN. For example, at home, a terminal can connect to a home router via wired or wireless means to access the home LAN. Alternatively, it can create its own personal LAN or search for other devices' personal LANs.

[0128] S903: Determine whether the target terminal device exists based on the acquired peripheral device information.

[0129] The target device is typically a personal device carried by the terminal monitoring personnel. Whether the terminal is within the monitoring personnel's range is determined based on whether the target device and the terminal are on the same local area network, or whether the target device and the terminal can establish a short-range wireless connection. Therefore, the presence of the target device in the acquired device information must be determined. This determination requires not only acquiring information about devices near the terminal but also acquiring information about the target device, i.e., the personal device carried by the terminal monitoring personnel.

[0130] Target device information can be preset by the user through the terminal's menu selection interface. For example, the terminal can display a menu interface on a touchscreen for selecting or entering target device information. The terminal can set the target device information by detecting touch or key input to the menu interface for selecting or entering target device information. If the terminal is a smart TV or set-top box, it can set the target device information by detecting remote control selection or manual input to the menu interface for selecting or entering target device information.

[0131] Figure 3 This embodiment of the invention provides an exemplary interface for controlling access permissions to a terminal. In this embodiment, setting access control information for the terminal mainly includes two types of information: device information and permission information. This embodiment is primarily used to determine whether a supervisor is within the terminal's supervisory scope. Therefore, setting device information can be done by selecting via network scanning or manually inputting the supervisor's personal device (target device). One or more target devices can be set as needed. The setting method can be single-selection, manual input, or a list of devices that can control access permissions to the terminal.

[0132] In addition, it can also be like Figure 3 The options shown allow you to select the type of permission control, such as choosing to watch only specific channels, use only specific applications, or disable all applications. This is how you set permission information. Figure 3This is just one example. Access control for the terminal can also be in the default state, without needing to be selected. For example, if access control is enabled by default, the terminal will be in a prohibited state, restricting the use of all functions. Alternatively, different parental devices can have different types of access restrictions.

[0133] The determination of whether a target device exists in the peripheral device information is based on the acquired peripheral device information. Specifically, it can be to search the acquired peripheral device information for the target device. There are multiple ways to do this, such as sequentially searching the acquired peripheral device information for the target device according to the setting order of the target device, and stopping the search once the target device is found. Alternatively, it can be to search the acquired peripheral device information for the target device in parallel to obtain the existence status of the target device in the acquired peripheral device information.

[0134] If the target device is found in the acquired peripheral device information, proceed to step S904.

[0135] S904: Remove the access restrictions on the terminal.

[0136] If the determination result indicates that the target device exists in the obtained peripheral device information, then the terminal is considered to be within the control range of the regulator, and the access restriction on the terminal is lifted.

[0137] If the target device is not found in the acquired peripheral device information, proceed to step S905.

[0138] S905: Restrict access permissions to the terminal.

[0139] If the determination result is that the target device is not found in the obtained peripheral device information, it is considered that the terminal is not within the control scope of the terminal supervisor, and access restrictions on the terminal are then enabled.

[0140] The aforementioned access control method uses the proximity of the target device to the terminal as an indicator of whether the terminal is within the monitoring range of the personnel in charge, thereby determining whether to restrict or lift access restrictions on the terminal. This invention provides convenient and effective access control for terminals, eliminating the need for repeated manual settings. Access restrictions are lifted once the target device and the managed terminal are connected to the same local area network (LAN), and access restrictions are promptly implemented once the target device leaves the LAN. This avoids the problems of existing technologies that require remembering and manually entering passwords to lift restrictions, or the inability to lift restrictions if the password is forgotten, or the need to manually set access restrictions every time the user leaves.

[0141] Figure 5This is a schematic diagram illustrating an application scenario of an embodiment of the present invention. Terminal 501 is a terminal with access control functionality. The terminal can access the local area network (LAN) through LAN device 500. Terminals (terminal 501, device A, device B, and device C) can also search for and connect to each other through a personal LAN, or through short-range wireless communication technology. Terminal 501 can be any type of smart terminal, such as a smart TV, set-top box, PAD, mobile phone, computer, smart home appliance, etc. Devices A, B, and C are devices located around terminal 501. Figure 5 This is merely an example of an application scenario in an embodiment of the present invention. There may be multiple local area network access devices in the environment where the terminal is located, and the number of peripheral devices may also be arbitrary depending on the actual situation.

[0142] When preset conditions are met, terminal 501 first determines whether the access control function is enabled. The preset conditions can be any terminal access command or terminal setting command, such as power-on trigger, screen unlock trigger, receiving a channel switching command, application access command, data read command, data write command, etc. Preset conditions can also be periodic triggering of the access control function. The status of the access control function can be manually set by the user. The above-mentioned access control determination process can be triggered every time the preset conditions are met, such as triggering every time the device is powered on, or periodic triggering. After determining that the access control function is enabled, terminal 501 obtains its surrounding device information. Terminal 501 can obtain its surrounding device information in various ways: it can obtain information about other access devices in the local area network through local area network device 500, it can search for connectable devices through short-range wireless communication technology, it can search for existing personal area networks in the vicinity, or it can combine one or more methods to comprehensively obtain surrounding device information. After acquiring information about surrounding devices (device A, device B, device C), terminal 501 determines whether the target device is among the acquired device information. This determination can be made by comparing the acquired device information with its stored target device information, or by sequentially searching the acquired device information for the target device. For example... Figure 5 As shown, if the comparison reveals that device C exists in the access control device information (target device C) stored in the terminal, it is assumed that the regulator of target device C is also near the terminal, that is, the terminal is within the regulator's control range, and the access restriction on the terminal is lifted. If the judgment result is that the target device does not exist in the obtained device information, it is assumed that the terminal is not within the regulator's control range, and all or part of the operation on the terminal is restricted according to the settings of the access control function.

[0143] In addition to the methods described above, terminal 501 can also be configured according to... Figure 1 , Figure 8 , Figure 9 A similar approach can be used to control access permissions for the terminal.

[0144] The above embodiments use the proximity of the target device to the terminal as an indicator of whether the terminal is within the monitoring range of the personnel, in order to determine whether to restrict or remove access permissions to the terminal. This invention provides convenient and effective access permission management for terminals, eliminating the need for repeated manual settings. Access restrictions are removed once the target device and the managed terminal are connected to the same local area network. Access restrictions are promptly re-imposed once the target device leaves the local area network. This avoids the problems of existing technologies that require remembering and manually entering passwords to remove restrictions, forgetting passwords, or having to manually re-set access restrictions each time the user leaves.

[0145] Figure 6 This is a structural diagram of a terminal with access control function according to an embodiment of the present invention. It can be seen that the terminal 600 includes a determination unit 601, a storage unit 602, a communication unit 603, a judgment unit 604, and a control unit 605.

[0146] The determining unit 601 is used to determine whether the access control function of the terminal 600 is enabled in the first state;

[0147] The determining unit 601 can identify or sense a first state. The first state can be an application execution state, an action execution state, a screen lock state and unlock trigger state, a restart or power-on trigger state, etc. When the determining unit 601 identifies the first state, it determines whether the access control function of the terminal 600 is enabled. The method for determining whether the access control function of the terminal 600 is enabled can be by obtaining the access control function setting information of the terminal 600 from the storage unit 602. This setting information can be stored in the storage unit 602 or distributed and stored in other locations, such as a network.

[0148] If the determining unit 601 determines that the access control function of the terminal 600 is off in the first state, then the control unit 605 will not restrict the access rights of the terminal 600. If the determining unit 601 determines that the access control function of the terminal 600 is on in the first state, then it will inform the communication unit 603.

[0149] The communication unit 603 is used to acquire information about peripheral devices of the terminal 600; this information refers to information about other devices in the environment where the terminal 600 is located that are relatively close to the terminal 600. The communication unit 603 can acquire, locate, search for, or connect to peripheral devices using short-range wireless communication technology to obtain peripheral device information.

[0150] The communication unit 603 can obtain information about its surrounding devices in various ways. It can obtain information about other access devices in the local area network through local area network devices, search for connectable devices through short-range wireless communication technology, search for existing personal area networks in the vicinity, or combine one or more methods to obtain information about surrounding devices.

[0151] The judgment unit 604 is used to determine whether a target device exists in the peripheral device information obtained from the communication unit 603. Specifically, the judgment unit 604 can search the obtained peripheral device information to determine if the target device exists. This search can be done in various ways, such as sequentially searching the obtained peripheral device information according to the target device's setting order, stopping the search once a target device is found, or searching the obtained peripheral device information in parallel to determine the presence of the target device. The target device information can be obtained by the judgment unit 604 from the storage unit 602. This target device information can be stored in the storage unit 602 or distributed and stored in other locations, such as a network.

[0152] If the judgment unit 604 determines that the target device exists in the acquired peripheral device information, the control unit 605 removes the access restriction of the terminal 600.

[0153] If the judgment unit 604 determines that the target device is not found in the acquired peripheral device information, the control unit 605 imposes corresponding access restrictions on the terminal.

[0154] Figure 6 This is merely an example of an embodiment of the present invention. The specific unit structure, the interaction between units, and the information required by the units can be added, subtracted, or changed according to the specific circumstances.

[0155] Figure 10 This is a structural diagram of another terminal with access control function according to an embodiment of the present invention. It can be seen that the terminal 1000 includes a power-on detection unit 1001, a determination unit 1002, a storage unit 1003, a communication unit 1005, a judgment unit 1004, and a control unit 1006.

[0156] The power-on detection unit 1001 determines whether a power-on trigger has been detected.

[0157] The determining unit 1002 is used to determine whether the access control function of the terminal 1000 is enabled when the power-on detection unit 1001 detects a power-on trigger.

[0158] When the power-on detection unit 1001 detects a power-on trigger, the determining unit 1002 determines whether the access control function of the terminal 1000 is enabled. The method for determining whether the access control function of the terminal 1000 is enabled can be by obtaining the access control function setting information from the storage unit 1003. This setting information can be stored in the storage unit 1003 or distributed and stored in other locations, such as a network.

[0159] If determining unit 1002 determines that the access control function of terminal 1000 is off, then control unit 1006 will not restrict access permissions for terminal 1000. If determining unit 1002 determines that the access control function of terminal 1000 is on, then it will inform communication unit 1005.

[0160] Communication unit 1005 is used to obtain device information in the local area network where terminal 1000 is located;

[0161] The communication unit 1005 can obtain device information in its local area network (LAN) through various methods. These include accessing the LAN via a LAN device, such as a wireless router; searching for other devices' personal LANs in the vicinity to obtain information about other devices in its LAN; or searching for other devices' self-created personal LANs in the vicinity to obtain device information in the LAN where the terminal is located. The LAN where the terminal 1000 is located can be one or multiple.

[0162] The judgment unit 1004 is used to determine whether the target terminal device is in the local area network where the terminal 1000 is located based on the acquired local area network device information; the judgment unit 1004 is also used to determine whether the target device exists in the local area network access device information acquired from the communication unit 1005; specifically, the judgment unit 1004 may search the acquired local area network access device information to determine whether the target device exists. The target device information may be obtained by the judgment unit 1004 from the storage unit 1003. This target device information may be stored in the storage unit 1003 or distributed and stored in other locations, such as a network.

[0163] If the judgment result of the judgment unit 1004 is that the target device exists in the obtained local area network access device information, the control unit 1006 removes the access permission restriction of the terminal 1000.

[0164] If the judgment result of the judgment unit 1004 is that the target device does not exist in the obtained local area network access device information, the control unit 1006 imposes corresponding access restrictions on the terminal 1000.

[0165] Figure 10 This is merely an example of an embodiment of the present invention. The specific unit structure, the interaction between units, and the information required by the units can be added, subtracted, or changed according to the specific circumstances.

[0166] Figure 11 This is a structural diagram of another terminal with access control function according to an embodiment of the present invention. It can be seen that the terminal 1100 includes a setting unit 1101, a triggering unit 1102, a communication unit 1103, a storage unit 1104, a judgment unit 1105, and a control unit 1106.

[0167] Setting unit 1101 is used to enable the access control function; users can configure the access control function through setting unit 1101. The access control function can be in an on or off state. In addition to setting the state of the access control function, users can also set device information and permission information through setting unit 1101.

[0168] When the access control function is enabled by the setting unit 1101, the triggering unit 1102 is used to trigger the communication unit 1103 to obtain terminal peripheral device information when a specific condition is met; the specific condition may be a specified action, that is, the terminal 1100 is triggered to obtain its peripheral device information every time a specified action is detected, or a set triggering period, that is, the peripheral device information is obtained once every specific time period.

[0169] Communication unit 1103 is used to acquire information about peripheral devices of terminal 1100;

[0170] The information on surrounding devices of terminal 1100 refers to information on other devices in the environment where terminal 1100 is located that are relatively close to terminal 1100. The communication unit 1103 can obtain, locate, search for, or connect to surrounding devices through short-range wireless communication technology to obtain information on surrounding devices.

[0171] The communication unit 1103 can obtain information about its surrounding devices in various ways. The communication unit 1103 can obtain information about other access devices in the local area network through local area network devices, search for connectable devices through short-range wireless communication technology to obtain information about surrounding devices, search for existing personal local area networks in the vicinity to obtain information about surrounding devices, or combine one or more acquisition methods to obtain information about surrounding devices.

[0172] The judgment unit 1105 is used to determine whether a target device exists in the peripheral device information obtained from the communication unit 1103. Specifically, the judgment unit 1105 can search the obtained peripheral device information to determine if the target device exists. This search can be done in various ways, such as sequentially searching the obtained peripheral device information according to the target device's setting order, stopping the search once a target device is found, or searching the obtained peripheral device information in parallel to determine the presence of the target device. The judgment unit 1105 can obtain the target device information from the storage unit 1104. This target device information can be stored in the storage unit 1104 or distributed and stored in other locations, such as a network.

[0173] If the judgment unit 1105 determines that the target device exists in the acquired peripheral device information, the control unit 1106 removes the access restriction of the terminal 1100.

[0174] If the judgment unit 1105 determines that the target device does not exist in the acquired peripheral device information, the control unit 1106 restricts the terminal 1100's access permissions accordingly.

[0175] Figure 11 This is merely an example of an embodiment of the present invention. The specific unit structure, the interaction between units, and the information required by the units can be added, subtracted, or changed according to the specific circumstances.

[0176] Figure 7 This is a schematic diagram of the structure of another terminal according to an embodiment of the present invention. The terminal can be of various types, such as smart TVs, set-top boxes, tablets, mobile phones, computers, smart home appliances, and other smart terminals. Terminal 700 includes a processor 701, random access memory (RAM) 707, read-only memory (ROM) 708, memory 702, power supply 703, display unit 704, communication unit 706, and input unit 705. The communication unit 706 may include a Wi-Fi module 7061 and / or a short-range communication module 7062.

[0177] The random access memory (RAM) 707 is used to store signals or data received from the outside of the terminal 700, or as memory space for operations performed by the terminal 700; the read-only memory (ROM) 708 is used to store the control program for controlling the terminal 700. The processor 701, RAM 707, and ROM 708 can be interconnected via an internal bus.

[0178] The communication unit 706 may include at least one of a Wi-Fi module 7061 and a short-range communication module 7062.

[0179] The Wi-Fi module 7061 can connect to a Wi-Fi network under the control of the processor 701 at the location where a Wi-Fi access device is installed. The Wi-Fi module 7061 supports the IEEE 802.11x WLAN standard. The short-range communication module 7062 can conduct short-range wireless communication between the terminal 700 and its peripheral devices under the control of the processor 701. Short-range communication can comply with Bluetooth, Infrared Data Association (IrDA), Wi-Fi, NFC, etc.

[0180] Display unit 704 is used to display a user interface. This display unit 704 can display information input by the user through input unit 705 or information provided to the user, as well as various menu interfaces of the terminal 700. Display unit 704 may include a display panel, optionally configured as an LCD (Liquid Crystal Display) or OLED (Organic Light-Emitting Diode). In a specific implementation, a touch panel can cover the display panel to form a touch display screen, and processor 701 provides corresponding visual output on the touch display screen according to the type of touch event. Alternatively, display unit 704 may simply be a regular display screen, with processor 701 providing corresponding visual output on the display screen according to user input via input unit 705.

[0181] The input unit 705 can be used to receive input numerical or character information, receive user operations to switch application interfaces and generate switching signals, and generate signal inputs related to user settings and function control of the terminal. Specifically, in this embodiment of the invention, the input unit 705 may include a touch panel, also known as a touch screen, which can collect touch operations on or near the user (such as the user operating on the touch panel using a finger, stylus, or any suitable object or accessory). The touch panel can be implemented using various types such as resistive, capacitive, infrared, and surface acoustic wave. In addition to the touch panel, the input unit 705 may also include other input devices, including but not limited to one or more of the following: physical keyboard, function keys (such as volume control buttons, power buttons, etc.), trackball, mouse, joystick, remote control, etc.

[0182] Power supply 703 can power the entire terminal. Different types of terminals have different power supply types, including various models of lithium batteries. Alternatively, power supply 703 can supply power to terminal 700 by receiving power from an external source via a cable; power supply 703 can also supply power to one or more batteries (not shown) installed in terminal 700 under the control of processor 701; power supply 703 can also supply power to terminal 700 by wirelessly receiving power from an external source via wireless charging technology.

[0183] The memory 702, under the control of the processor 701, can store the input / output signals or data of the terminal 700. The memory 702 can also store control programs and applications used to control the terminal 700 or the processor 701.

[0184] The term "memory" may include memory 702, RAM 707 and ROM 708 of processor 701, or a memory card (not shown) installed in terminal 700, such as a secure digital card (SD) or memory stick. Memory may include non-volatile memory, volatile memory, hard disk drive (HDD), or solid-state drive (SSD).

[0185] The processor 701 is the control center of the terminal 700. It connects to and controls various parts of the terminal through various interfaces and lines, and performs various functions and processes data of the smart terminal by running or executing data stored in its memory. Optionally, the processor 701 includes one or more processing units.

[0186] A program stored in memory can be executed after receiving instructions from processor 701. Figure 1 , Figure 8 , Figure 9 The method shown.

[0187] In this embodiment of the invention, the presence or absence of the target device near the terminal serves as an indicator of whether the terminal is within the monitoring range of the personnel in charge, thereby determining whether to restrict or remove access permissions for the terminal. This embodiment of the invention provides convenient and effective access permission management for the terminal, eliminating the need for repeated manual settings. Access restrictions are removed once the target device and the managed terminal are connected to the same local area network (LAN). Access restrictions are promptly re-imposed once the target device leaves the LAN. This avoids the problems of existing technologies that require remembering and manually entering passwords to remove restrictions, or the inability to remove restrictions if the password is forgotten, or the need to manually re-set access restrictions each time the user leaves.

[0188] Finally, it should be noted that the above embodiments are only used to illustrate the technical solutions of the present invention, and not to limit them; although the present invention has been described in detail with reference to the foregoing embodiments, those skilled in the art should understand that modifications can still be made to the technical solutions described in the foregoing embodiments, or equivalent substitutions can be made to some or all of the technical features; and these modifications or substitutions do not cause the essence of the corresponding technical solutions to deviate from the scope of the technical solutions of the embodiments of the present invention.

Claims

1. A terminal access right control method, characterized by, The method comprises: In a first state, when the terminal access permission control function is determined to be turned on, the device information around the terminal is acquired by establishing a point-to-point Bluetooth connection; the first state comprises a screen lock state or an unlock trigger state; If the target device exists in the acquired device information, the access permission restriction on the terminal is released.

2. The method of claim 1, wherein, The target device is determined according to the acquired device information, comprising: The target device information list comprising one or more target devices is stored in the terminal, and whether the target device exists in the acquired device information is determined according to the acquired device information and the target device information list stored in the terminal.

3. The method of claim 1 or 2, wherein, The method further comprises: If the target device does not exist in the acquired device information, the access permission of the terminal is restricted.

4. The method of claim 1, wherein, Before the device information around the terminal is acquired, the method further comprises: determining whether the access permission control function is turned on in the first state of the terminal, and the first state is a power-on trigger.

5. The method of claim 1, wherein, Before the device information around the terminal is acquired, the method further comprises: determining whether the access permission control function is turned on in the first state of the terminal, and the first state is a screen unlock trigger.

6. A terminal, characterized by comprising: The terminal comprises: A communication unit, which is used to determine the device information around the terminal by establishing a point-to-point Bluetooth connection when the terminal access permission control function is determined to be turned on in a first state; the first state comprises a screen lock state or an unlock trigger state; A determination unit, which is used to determine whether a target device exists in the device information acquired by the communication unit; A control unit, which is used to determine whether to release the access permission restriction of the terminal according to the determination result of the determination unit.

7. The terminal of claim 6, wherein, The terminal further comprises: A storage unit, which is used to store the target device information comprising one or more target devices; the determination unit determines whether a target device exists in the device information acquired by the communication unit and the target device information list stored in the storage unit.

8. The terminal of claim 6, wherein, The terminal further comprises: A determination unit, which is used to determine whether the access permission control function is in an on state in the first state of the terminal; a communication unit, which is used to acquire the device information around the terminal when the access permission control function is in the on state; the first state is a power-on trigger state.

9. The terminal of claim 6, wherein, The terminal is a smart television or a set-top box.

10. A terminal, characterized by comprising: The terminal comprises: A processor and a readable storage medium, the readable storage medium is used to store a program, and the processor is used to execute the program; when the program is executed, the following steps are performed: in a first state, when the terminal access permission control function is determined to be turned on, the device information around the terminal is acquired by establishing a point-to-point Bluetooth connection; the first state comprises a screen lock state or an unlock trigger state; whether a target device exists in the acquired device information is determined; and whether to release the access permission restriction of the terminal is determined according to the determination result.

11. A method of access right control of a terminal, characterized by, The method comprises: Displaying a menu icon for turning on or off the access permission control function on the display screen; The access permission control function is started or stopped by detecting a touch input to a menu icon for starting the access permission control function or a menu icon for stopping the access permission control function; identifying a first state, the first state including at least one of an application execution state, an action execution state, a screen lock state, an unlock trigger state, a restart or boot trigger state; if it is determined that the terminal access permission control function is stopped in the first state, not performing terminal access permission control.

Images