Acl control method, apparatus, device, and storage medium

Abstract

The application discloses an ACL control method and device, equipment and a storage medium, and relates to the technical field of Internet of Things. The method comprises the following steps: receiving a modification instruction sent by a first management device, the target ACL is any one of the ACLs included in the ACL of the second management device, and the switch state is used for indicating whether the target ACL is valid; in the case that it is determined that the first management device has the permission to modify the switch state of the ACL, the switch state of the target ACL of the second management device is modified according to the modification instruction, the on or off state of the ACL of the management device can be changed without having the permission to modify the ACL of other management devices, the permission of the management device is limited, and therefore the safety is improved. Moreover, the on and off of all the ACLs included in the ACL can be modified by modifying the on and off of the ACL, and the operation efficiency is improved.

Description

TECHNICAL FIELD

[0001] The present application relates to the technical field of Internet of Things, and in particular to an ACL control method and device, equipment and a storage medium. BACKGROUND

[0002] With the rapid development of Internet of Things technology and the wide application of Internet of Things devices, after a management device is connected with an Internet of Things device, the management device can manage the connected Internet of Things device.

[0003] In the case where multiple management devices are connected with an Internet of Things device, the multiple management devices can not only manage the Internet of Things device, but also each management device has an ACL (Access Control List) stored in the Internet of Things device, and the Internet of Things device determines whether the control instruction sent by the management device to the physical network device is an instruction that can be recognized by itself according to the ACL stored by itself, and then determines whether to respond to the received control instruction.

[0004] However, since each management device can modify each ACL stored in the Internet of Things device, the authority of the management device is too large, and the security is poor. SUMMARY

[0005] The embodiments of the present application provide an ACL control method, device, equipment and storage medium, which can change the opening or closing state of the ACL of the management device without having the authority to modify the ACL of other management devices, thereby limiting the authority of the management device and improving the security. The technical solution is as follows:

[0006] According to an aspect of the present application, an ACL control method is provided, applied to an Internet of Things device, and the method comprises:

[0007] receiving a modification instruction sent by a first management device, the modification instruction being used to modify the switch state of a target access control list entry (ACLE) of a second management device, the target ACL being any one of the ACLEs included in the access control list (ACL) of the second management device, and the switch state being used to indicate whether the target ACL is valid;

[0008] In the case where it is determined that the first management device has the authority to modify the switch state of the ACL, the switch state of the target ACL of the second management device is modified according to the modification instruction.

[0009] According to an aspect of the present application, an ACL control method is provided, applied to a first management device, and the method comprises:

[0010] The IoT device is configured to receive the modification instruction sent by the first management device, and in a case where it is determined that the first management device has the permission to modify the switch state of the ACL, modify the switch state of the target ACL of the second management device according to the modification instruction.

[0011] The IoT device is configured to receive the modification instruction sent by the first management device, and in a case where it is determined that the first management device has the permission to modify the switch state of the ACL, modify the switch state of the target ACL of the second management device according to the modification instruction.

[0012] According to an aspect of the present application, an ACL control method is provided, which is applied to an IoT device, and the method comprises:

[0013] The IoT device is configured to receive the modification instruction sent by the first management device, and in a case where it is determined that the first management device has the permission to modify the switch state of the ACL, modify the switch state of the target ACL of the second management device according to the modification instruction.

[0014] The IoT device is configured to receive the modification instruction sent by the first management device, and in a case where it is determined that the first management device has the permission to modify the switch state of the ACL, modify the switch state of the target ACL of the second management device according to the modification instruction.

[0015] According to an aspect of the present application, an ACL control method is provided, which is applied to a first management device, and the method comprises:

[0016] The IoT device is configured to receive the modification instruction sent by the first management device, and in a case where it is determined that the first management device has the permission to modify the switch state of the ACL, modify the switch state of the target ACL of the second management device according to the modification instruction.

[0017] The IoT device is configured to receive the modification instruction sent by the first management device, and in a case where it is determined that the first management device has the permission to modify the switch state of the ACL, modify the switch state of the target ACL of the second management device according to the modification instruction.

[0018] According to an aspect of the present application, an ACL control device is provided, which is applied to an IoT device, and the device comprises:

[0019] The IoT device is configured to receive the modification instruction sent by the first management device, and in a case where it is determined that the first management device has the permission to modify the switch state of the ACL, modify the switch state of the target ACL of the second management device according to the modification instruction.

[0020] The modification module is configured to modify the switch state of the target ACL of the second management device according to the modification instruction in a case where it is determined that the first management device has the permission to modify the switch state of the ACL.

[0021] According to an aspect of the present application, there is provided an ACL control apparatus applied to a first management device, the apparatus comprising:

[0022] The sending module is configured to send a modification instruction to the IoT device, the modification instruction being used to modify a switch state of a target ACL of a second management device, the target ACL being any one of access control lists (ACLs) included by the second management device, the switch state being used to indicate whether the target ACL is valid.

[0023] The IoT device is configured to receive the modification instruction sent by the first management device, and modify the switch state of the target ACL of the second management device according to the modification instruction in a case where it is determined that the first management device has the permission to modify the switch state of the ACL.

[0024] According to an aspect of the present application, there is provided an ACL control apparatus applied to an IoT device, the apparatus comprising:

[0025] The receiving module is configured to receive a modification instruction sent by a first management device, the modification instruction being used to modify a switch state of an ACL of a second management device, the switch state being used to indicate whether the ACL is valid.

[0026] The modification module is configured to modify the switch state of the ACL of the second management device according to the modification instruction in a case where it is determined that the first management device has the permission to modify the switch state of the ACL.

[0027] According to an aspect of the present application, there is provided an ACL control apparatus applied to a first management device, the apparatus comprising:

[0028] The sending module is configured to send a modification instruction to the IoT device, the modification instruction being used to modify a switch state of an ACL of a second management device, the switch state being used to indicate whether the target ACL is valid.

[0029] The IoT device is configured to receive the modification instruction sent by the first management device, and modify the switch state of the target ACL of the second management device according to the modification instruction in a case where it is determined that the first management device has the permission to modify the switch state of the ACL.

[0030] According to an aspect of the present application, there is provided an Internet of Things device, comprising: a processor; a transceiver connected to the processor; a memory for storing executable program code of the processor; wherein the processor is configured to load and execute the executable program code to implement the ACL control method according to the above aspect.

[0031] According to an aspect of the present application, there is provided a first management device, comprising: a processor; a transceiver connected to the processor; a memory for storing executable instructions of the processor; wherein the processor is configured to load and execute the executable instructions to implement the ACL control method according to the above aspect.

[0032] According to an aspect of the present application, there is provided a computer readable storage medium, the readable storage medium storing executable program code, the executable program code being loaded and executed by the processor to implement the ACL control method according to the above aspect.

[0033] According to an aspect of the present application, there is provided a chip, comprising programmable logic circuit and / or program instructions, when the chip is running on an Internet of Things device or a first management device, for implementing the ACL control method according to the above aspect.

[0034] According to an aspect of the present application, the embodiments of the present application provide a computer program product, comprising computer instructions stored in a computer readable storage medium;

[0035] The processor of the Internet of Things device reads the computer instructions from the computer readable storage medium and executes the computer instructions, so that the Internet of Things device executes the ACL control method according to the above aspect;

[0036] The processor of the first management device reads the computer instructions from the computer readable storage medium and executes the computer instructions, so that the first management device executes the ACL control method according to the above aspect.

[0037] According to an aspect of the present application, the embodiments of the present application provide a computer program, when the computer program is executed by the processor of an Internet of Things device or a first management device, for implementing the ACL control method according to the above aspect.

[0038] The technical scheme provided by the embodiments of the present application has at least the following beneficial effects:

[0039] The method, device, equipment and storage medium provided by the embodiments of the present application, in the case that the Internet of Things device determines that the first management device has the permission to modify the switch state of the ACLE, the switch state of the ACLE of the other management device is modified based on the modification instruction sent by the first management device, so that the ACLE of the other management device is opened or closed. Without having the permission to modify the ACLE of the other management device, the opening or closing state of the ACLE of the management device can be changed, the permission of the management device is limited, and the security is improved. BRIEF DESCRIPTION OF DRAWINGS

[0040] In order to more clearly illustrate the technical solutions in the embodiments of the present application, the drawings needed in the embodiment description will be briefly introduced. Obviously, the drawings in the following description are only some embodiments of the present application, and other drawings can be obtained by those skilled in the art without creative labor.

[0041] Figure 1 A flowchart of the first management device configuring a second device as a management device is shown.

[0042] Figure 2 A flowchart of the second device configuring a third device as a control device is shown.

[0043] Figure 3 A block diagram of a communication system is shown.

[0044] Figure 4 A flowchart of an ACL control method is shown.

[0045] Figure 5 A flowchart of an ACL control method is shown.

[0046] Figure 6 A flowchart of an ACL control method is shown.

[0047] Figure 7 A flowchart of an ACL control method is shown.

[0048] Figure 8 A flowchart of an ACL control method is shown.

[0049] Figure 9 A block diagram of an ACL control device is shown.

[0050] Figure 10 A block diagram of an ACL control device provided by another example embodiment of the present application is shown.

[0051] Figure 11 A block diagram of an ACL control device provided by an example embodiment of the present application is shown.

[0052] Figure 12 A block diagram of an ACL control device provided by another example embodiment of the present application is shown.

[0053] Figure 13 A block diagram of an ACL control device provided by an example embodiment of the present application is shown.

[0054] Figure 14 A block diagram of an ACL control device provided by another example embodiment of the present application is shown.

[0055] Figure 15 A block diagram of an ACL control device provided by an example embodiment of the present application is shown.

[0056] Figure 16 A block diagram of an ACL control device provided by another example embodiment of the present application is shown.

[0057] Figure 17 A block diagram of a communication device provided by an example embodiment of the present application is shown. DETAILED DESCRIPTION

[0058] For the purpose, technical solutions and advantages of the present application to be clearer, the embodiments of the present application will be further described in detail below with reference to the drawings.

[0059] First, the terms involved in the embodiments of the present application are explained:

[0060] Internet of Things CHIP (Connected Home over IP, IP-based home interconnection) technology:

[0061] In the case where the first management device is connected with the Internet of Things device, the first management device can set the second device as the management device of the Internet of Things device. For example, as shown in Figure 1 , a method of setting the second device as the management device of the Internet of Things device through the first management device is shown:

[0062] 1. The first management device triggers to start the configuration mode of the Internet of Things device.

[0063] The configuration mode is used to indicate that the Internet of Things device enters the mode of adding other devices at this time, and the first management device can set other devices as the management device of the Internet of Things device.

[0064] 2. The first management device generates a configuration token.

[0065] The configuration token includes an authenticator identifier and a random setting code.

[0066] 3. The first management device sends an instruction to start configuration to the Internet of Things device.

[0067] The instruction includes the configuration token.

[0068] 4. The Internet of Things device returns a response message to the first management device based on the received instruction.

[0069] 5. The Internet of Things device enters a configuration discovery mode.

[0070] If the Internet of Things device is in the configuration discovery mode, it can be detected by other devices.

[0071] 6. The first management device sends the configuration token to the second device.

[0072] In some embodiments, the first management device sends the configuration token to the second device by email, voice transmission, etc.

[0073] 7. The second device starts the discovery mode.

[0074] The second device narrows the scanning range based on the authenticator identifier in the received configuration token.

[0075] 8. The second device searches for the Internet of Things device.

[0076] 9. The second device establishes a connection with the Internet of Things device based on the configuration token.

[0077] 10. The second device authenticates the Internet of Things device.

[0078] 11. The second device creates a structure identifier.

[0079] 12. The Internet of Things device uses an existing operation secret key.

[0080] 13. The Internet of Things device sends a device certificate request to the second device.

[0081] 14. The second device sends the device certificate request and the structure identifier to the CA of the second device.

[0082] 15. After the CA of the second device completes the authentication, it generates a device certificate and sends the device certificate to the second device.

[0083] 16. The second device configures the device certificate and access control rights for the Internet of Things device.

[0084] The device certificate and the access control right configured by the second device are included in the ACL of the second device.

[0085] 17. The second device deletes the configuration token.

[0086] The second device can add the third device as a control device of the Internet of Things device when the second device is connected to the Internet of Things device, for example, as shown in Figure 2 The method for setting the third device as a control device of the Internet of Things device through the second device is shown as follows:

[0087] 1. The third device enters a configuration discovery mode.

[0088] 2. The second device acquires configuration information of the third device.

[0089] In some embodiments, the third device displays a graphic code, and the second device acquires the configuration information by scanning the graphic code of the third device.

[0090] 3. The second device starts a discovery mode.

[0091] 4. The second device discovers the third device.

[0092] 5. The second device establishes a secure connection with the third device.

[0093] 6. The second device authenticates with the third device.

[0094] 7. The second device uses the configured structure identifier of the second device.

[0095] 8. The third device generates an operation key and a CSR (Certificate Signing Request).

[0096] 9. The third device sends the CSR to the second device.

[0097] 10. The second device sends the CSR to a CA of the second device to request a device certificate.

[0098] 11. After the CA of the second device completes the authentication, the CA generates a device certificate and a certificate chain and sends them to the second device.

[0099] 12. The second device configures the device certificate and the certificate chain and an access control right to the third device.

[0100] Figure 3 A block diagram of a communication system provided by an exemplary embodiment of the present application is shown, which can include a first management device 31, a second management device 32 and an Internet of Things device 33.

[0101] The first management device 31 and the second management device 32 are respectively connected with the Internet of Things device 33, the Internet of Things device 33 stores the ACL of the first management device 31 and the ACL of the second management device 32, and each ACL includes at least one Access Control List Entry (ACLE), if the Internet of Things device 33 receives a control instruction sent by any management device, first determines the ACLE of the management device matched with the control instruction, and then determines whether the management device sending the control instruction has the access right of the Internet of Things device according to the ACLE, if yes, responds to the control instruction, if not, does not respond to the control instruction. Alternatively, if the Internet of Things device 33 cannot determine the ACLE matched with the control instruction, does not respond to the control instruction.

[0102] The first management device 31 or the second management device 32 is a terminal such as a mobile phone, a computer, a tablet computer, or the like, or the first management device 31 or the second management device 32 interacts through an installed application program. The application program installed in the first management device 31 or the second management device 32 is a program matched with the Internet of Things device. The Internet of Things device 33 is a device such as a refrigerator, a television, a lamp, and the like, and the embodiments of the present application are not limited thereto.

[0103] The ACL is generated by the management device and configured to the Internet of Things device 33 by the management device, and the Internet of Things device 33 stores the ACL configured by each management device. In addition, the ACL includes at least one ACLE, and each ACLE includes a plurality of attributes.

[0104] Each ACLE includes the following attributes:

[0105] (1) (mandatory) <<Privilege Enum, Enum>> Privilege - / / access right.

[0106] (2) (mandatory) AuthMode AuthMode - / / access authentication mode.

[0107] (3) (mandatory) List[SubjectId] Subjects - / / subject obtaining right.

[0108] (4) (mandatory) List[EndpointId] Endpoints - / / terminal corresponding to right.

[0109] (5) (optional) EpochTimestamp NotBefore - / / applicable start time.

[0110] (6) (Optional) EpochTimestamp NotAfter - / / Time of expiration.

[0111] (7) (Optional) WeeklySchedule Schedule - / / Applicable period.

[0112] (8) (Optional) OctetString Extension - / / Available extensions.

[0113] In addition, the management device sets an on-off state for each ACLE included in the ACL in the process of generating the ACL, and uses the on-off state to indicate whether the ACLE corresponding to the on-off state is valid.

[0114] The on-off state of the ACLE set by the management device is in an on state by default.

[0115] It should be noted that the on-off state in the embodiments of the present application is actually an on state and an off state corresponding to an enable attribute, and the on-off state involved in the embodiments of the present application can be represented by true and false of enable. Alternatively, the on-off state in the embodiments of the present application can also correspond to other attributes, which are not limited in the embodiments of the present application.

[0116] For the management device having the management right over the Internet of Things device, each management device sets an ACL on the Internet of Things device, in order to prevent the management right of the management device from being too large or too small, the present application provides Figure 4 The embodiments shown limit the right of the management device, and can also adjust the validity of the ACL of other management devices, as shown in Figure 4 The method comprises the following steps.

[0117] 401. The first management device sends a modification instruction to the Internet of Things device.

[0118] The modification instruction is used to modify the on-off state of the target ACLE of the second management device, and the target ACLE is any ACLE included in the ACL of the second management device, and the on-off state is used to indicate whether the target ACLE is valid.

[0119] In the embodiments of the present application, if the user determines that the second management device connected to the Internet of Things device does not need to perform the management operation on the physical network device, the user can control the first management device to send a modification instruction to the Internet of Things device, and the Internet of Things device can modify the on-off state of the target ACLE of the second management device based on the received modification instruction, so that the target ACLE is in an invalid state, and the right of the ACLE is turned off.

[0120] In some embodiments, in order to realize that the first management device can manage the validity of the ACLE of the second management device, the switch state of the ACLE can be triggered to set whether the ACLE is valid, wherein the switch state of the ACLE includes any one of the following three cases:

[0121] (1) The target ACLE includes a switch state.

[0122] Wherein, when the switch state is the first state, it is used to indicate that the target ACLE is in the open state, and when the switch state is the second state, it is used to indicate that the target ACLE is in the closed state.

[0123] For example, the switch state is represented by True to indicate that the ACLE is in the first state, and is represented by False to indicate that the ACLE is in the second state. The switch state included in the ACLE is represented by Enble.

[0124] In some embodiments, the ACLE is represented as shown in Table 1:

[0125] Table 1

[0126]

[0127]

[0128] The switch state is included in the ACLE of the second management device, and in this case, the access right of the switch state is different from the access right of the other 8 entries in the ACLE. If the permission set by the second management device for the other management device is a read-only permission, the first management device can control whether the ACLE is valid by modifying the switch state in the ACLE of the second management device. If the second management device and the first management device are in different ecosystems, the first management device can control whether the ACLE is valid by modifying the switch state in the ACLE of the second management device.

[0129] (2) The ACL of the second management device includes a switch state corresponding to each ACLE.

[0130] Wherein, the ACL of the second management device includes at least one ACLE. And the ACL of the second management device also includes a switch state corresponding to each ACLE.

[0131] For example, the ACL of the second management device is as shown in Table 2:

[0132] Table 2

[0133] Number Switch state ACLE1 True ACLE2 True ACLE3 True ACLE4 True ACLE5 True ACLE6 True ACLE7 True ACLE8 True ACLE9 True

[0134] In the embodiments of the present application, the switch state corresponding to each ACLE in the ACL is set, and whether the ACLE is valid can be controlled by the switch state of the ACLE. If the permission set by the second management device to other management devices is a read-only permission, the first management device can control whether the ACLE is valid by modifying the switch state corresponding to the ACLE in the ACL of the second management device. If the second management device and the first management device are in different ecosystems, the first management device can control whether the ACLE is valid by modifying the switch state of the ACLE in the ACL of the second management device.

[0135] (3) The Internet of Things device further stores the switch state corresponding to each ACLE included in the ACL of the second management device.

[0136] In this case, the physical network device not only stores the ACL, but also stores the switch state corresponding to each ACLE of the ACL. If the first management device needs to close the ACLE of the second management device, the switch state of the ACLE can be modified.

[0137] In some embodiments, the Internet of Things device stores the switch state corresponding to each ACLE in an object other than the ACL. The access permission of the object is different from the access permission of the ACL, and the management device can modify the switch state corresponding to the ACLE in the object, but cannot modify the ACL.

[0138] It should be noted that the switch state corresponding to each ACLE in case (3) is similar to the corresponding relationship in case (2), and will not be described here.

[0139] 402. The Internet of Things device receives the modification instruction sent by the first management device.

[0140] 403. The Internet of Things device modifies the switch state of the target ACLE of the second management device according to the modification instruction in a case where it is determined that the first management device has the permission to modify the switch state of the ACLE.

[0141] In the embodiments of the present application, after the Internet of Things device receives the modification instruction sent by the first management device, it needs to determine whether the first management device sending the modification instruction has the permission to modify the switch state of the ACLE. If it is determined that the first management device can modify the switch state of the ACLE of other management devices stored by the Internet of Things device, the Internet of Things device modifies the switch state of the target ACLE of the second management device according to the modification instruction.

[0142] For example, if the target ACLE of the second management device is currently in the first state, and the IoT device receives the modification instruction from the first management device, the IoT device sets the target ACLE of the second management device to the second state if it is determined that the first management device has the permission to modify the switch state of the ACLE.

[0143] In some embodiments, the modification instruction includes the device identifier of the first management device, and the IoT device determines that the first management device has the permission to modify the switch state of the ACLE in any of the following ways:

[0144] (1) If it is determined that the stored administrator identifier includes the device identifier of the first management device, it is determined that the first management device has the permission to modify the switch state of the ACLE.

[0145] In the embodiments of the present application, the IoT device stores administrator identifiers that have the permission to modify the ACLE, and if the IoT device receives a modification instruction, the IoT device compares the device identifier of the first management device included in the modification instruction with the stored administrator identifiers. If the IoT device determines that the device identifier of the first management device is in the stored administrator identifiers, it means that the first management device has the permission to manage the IoT device, and thus it is also determined that the first management device has the permission to modify the switch state of the ACLE.

[0146] (2) If it is determined that the device identifier of the first management device is the set primary administrator identifier, it is determined that the first management device has the permission to modify the switch state of the ACLE.

[0147] In the embodiments of the present application, the IoT device stores a plurality of administrator identifiers, but the plurality of administrator identifiers include a primary administrator identifier and a secondary administrator identifier. The primary administrator identifier has the permission to modify the switch state of the ACLE of other management devices, and the secondary administrator identifier does not have the permission to modify the switch state of the ACLE of other management devices. Therefore, if the IoT device determines that the device identifier of the first management device is the set primary administrator identifier, it means that the first management device has the permission to manage other management devices, and thus it is also determined that the first management device has the permission to modify the switch state of the ACLE.

[0148] It should be noted that the above embodiments illustrate that the first management device can modify the switch state of the ACLE of other management devices, and in another embodiment, any management device can also add the ACLE of the any management device in the IoT device.

[0149] Any management device connected with the Internet of Things device can send an ACLE adding instruction to the Internet of Things device, and the Internet of Things device adds the ACLE included in the received ACLE adding instruction in the ACL of any management device based on the ACLE adding instruction.

[0150] For example, if any management device needs to set other devices as control devices, the management device can send an ACLE adding instruction to the Internet of Things device.

[0151] It should be noted that the present embodiment only takes the first management device directly sending a modification instruction to the physical network device as an example for description. In another embodiment, the Internet of Things device needs to be controlled to enter a modification mode first, and the Internet of Things device responds to the modification instruction sent by the first management device, and before step 401, the method further includes 4011:

[0152] 4011. The Internet of Things device receives a modification mode starting instruction and enters a modification mode according to the modification mode starting instruction.

[0153] In the modification mode, the Internet of Things device has the function of responding to the modification instruction. If the Internet of Things device is in the modification mode, the Internet of Things device modifies the on-off state of the ACLE according to the modification instruction, and if the Internet of Things device is not in the modification mode, the Internet of Things device does not respond to the modification instruction and does not modify the on-off state of the ACLE according to the modification instruction.

[0154] In the present embodiment, if the first management device needs to modify the on-off state of the ACLE of other management devices stored in the Internet of Things device, the Internet of Things device needs to be controlled to enter the modification mode first, so as to prevent the Internet of Things device from triggering the modification operation in the running process and causing errors in the running of the Internet of Things device.

[0155] In some embodiments, a configuration button is arranged on the Internet of Things device. If the first management device needs to modify the on-off state of the target ACLE of the second management device stored in the Internet of Things device, the configuration button needs to be triggered first, the Internet of Things device receives a modification module starting instruction triggered by the configuration button, enters the modification mode, and then executes step 401.

[0156] In another embodiment, the first management device is connected with the Internet of Things device and has the management right of the Internet of Things device. If the first management device detects a modification mode starting operation in the application program corresponding to the Internet of Things device, the first management device sends a modification mode starting instruction to the Internet of Things device according to the modification mode starting operation, and the Internet of Things device enters the modification mode according to the modification mode starting instruction.

[0157] After step 403, the method further includes 4031:

[0158] 4031、The Internet of Things device receives a modification mode closing instruction, and exits the modification mode according to the modification mode closing instruction.

[0159] If the first management device completes the modification of the switch state of the ACLE of the other management device stored in the Internet of Things device, the Internet of Things device exits the modification mode according to the received modification mode closing instruction.

[0160] In some embodiments, if the configuration button is arranged on the Internet of Things device, if the first management device completes the modification of the switch state of the target ACLE of the second management device stored in the Internet of Things device, the configuration button is triggered again, the Internet of Things receives the modification mode closing instruction triggered by the configuration button, and exits the modification mode.

[0161] In other embodiments, the first management device is connected with the Internet of Things device and has the management right of the Internet of Things device, if the first management device completes the modification of the switch state of the target ACLE of the second management device stored in the Internet of Things device, the first management device detects the modification mode closing operation in the application program corresponding to the Internet of Things device, and sends the modification mode closing instruction to the Internet of Things device according to the modification mode closing operation, and the Internet of Things device exits the modification mode according to the modification mode closing instruction.

[0162] The embodiments of the present application set the modification mode, control the Internet of Things device to enter the modification mode when the modification of the switch state of the ACLE of the management device is needed, prevent the Internet of Things device from modifying the switch state of the ACLE in the running process, improve the stability of the modification of the switch state of the ACLE of the management device in the Internet of Things device, and improve the running effect of the Internet of Things device.

[0163] In some embodiments, in the modification mode, Figure 4 Based on the embodiments, Figure 5 A flow chart of an ACL control method provided by the embodiments of the present application is shown, referring to FIG. 1. Figure 5 The method comprises the following steps.

[0164] 501、The first management device sends an ACL acquisition request to the Internet of Things device.

[0165] 502、The Internet of Things device receives the ACL acquisition request sent by the first management device.

[0166] In the embodiments of the present application, if the first management device needs to modify the switch state of the ACLE of the second management device, it needs to acquire all the ACLEs of the management devices stored in the Internet of Things device first, and then the first management device modifies the switch state of the ACLE according to the acquired ACLE in the Internet of Things device.

[0167] 503、The Internet of Things device sends the ACL of each management device in the Internet of Things device to the first management device based on the ACL acquisition request.

[0168] 504、The first management device receives the ACL of each management device sent by the physical network device.

[0169] After the first management device sends the ACL acquisition request to the Internet of Things device, the Internet of Things device determines that the first management device needs to acquire the stored ACL of the management device according to the received ACL acquisition request, and then the Internet of Things device sends the stored ACL of each management device to the first management device based on the received ACL acquisition request.

[0170] Next, the method of the present application is described by taking the first management device, the second management device, the third management device, the Internet of Things device and the controller as examples, referring to Figure 6 , the method comprises:

[0171] 601、The first management device has the management right to the Internet of Things device, and the first management device sets the second management device and the third management device as the management device of the Internet of Things device.

[0172] 602、The second management device adds the control device as the control device of the Internet of Things device.

[0173] Among them, the ACLE 10 corresponding to the second management device is the ACLE of the control device.

[0174] 603、The control device requests to access the Internet of Things device, and the Internet of Things device finds the matching access right according to the ACLE 10, allows access and returns the result.

[0175] 604、The first management device controls the Internet of Things device to enter the modification mode.

[0176] 605、The first management device acquires the ACL of each management device stored by the Internet of Things device.

[0177] 606、The first management device selects the ACLE 10 and sets the switch state of the ACLE 10 to the second state.

[0178] 607、The Internet of Things device confirms that the first management device has the modification right to the switch state of the ACLE, and accepts the modification.

[0179] 608、The first management device controls the Internet of Things device to exit the modification mode.

[0180] 609、The control device requests to access the Internet of Things device, and the Internet of Things device determines that no matching access right is found, and refuses the access request of the control device.

[0181] 610、The third management device controls the Internet of Things device to enter the modification mode.

[0182] 611、The third management device acquires the ACL of each management device stored by the Internet of Things device.

[0183] 612、The third management device selects the ACL 10 and sets the switch state of the ACL 10 to the first state.

[0184] 613、The Internet of Things device confirms that the third management device has the modification authority of the switch state of the ACL and accepts the modification.

[0185] 614、The third management device controls the Internet of Things device to exit the modification mode.

[0186] 615、The control device requests to access the Internet of Things device, and the Internet of Things device finds the matched access authority according to the ACL 10, allows the access and returns the result.

[0187] Next, the method of the present application is described by taking the first management device, the second management device, the third management device, the Internet of Things device and the controller as examples, referring to Figure 7 , the method comprises:

[0188] 701、The first management device has the master management authority of the Internet of Things device, and the first management device sets the second management device and the third management device as the management devices of the Internet of Things device.

[0189] 702、The second management device adds the control device as the control device of the Internet of Things device.

[0190] Among them, the ACL 10 corresponding to the second management device is the ACL of the control device.

[0191] 703、The control device requests to access the Internet of Things device, and the Internet of Things device finds the matched access authority according to the ACL 10, allows the access and returns the result.

[0192] 704、The first management device controls the Internet of Things device to enter the modification mode.

[0193] 705、The first management device acquires the ACL of each management device stored by the Internet of Things device.

[0194] 706、The first management device selects the ACL 10 and sets the switch state of the ACL 10 to the second state.

[0195] 707、The Internet of Things device confirms that the device identifier of the first management device is the set master administrator identifier, has the modification authority of the switch state of the ACL and accepts the modification.

[0196] 708、The first management device controls the Internet of Things device to exit the modification mode.

[0197] 709、The control device requests to access the Internet of Things device, the Internet of Things device determines that no matching access right is found, and the access request of the control device is rejected.

[0198] 710、The third management device controls the Internet of Things device to enter the modification mode.

[0199] 711、The third management device acquires the ACL of each management device stored by the Internet of Things device.

[0200] 712、The third management device selects the ACL 10, and sets the switch state of the ACL 10 to the first state.

[0201] 713、The Internet of Things device confirms that the device identifier of the third management device is not the set master administrator identifier, does not have the modification right of the switch state of the ACL E, and rejects the modification.

[0202] 714、The third management device controls the Internet of Things device to exit the modification mode.

[0203] 715、The control device requests to access the Internet of Things device, the Internet of Things device does not find a matching access right according to the ACL 10, and the access is rejected.

[0204] The ACL control method provided by the embodiment of the application, in the case that the first management device is determined to have the right to modify the switch state of the ACL E, the switch state of the ACL E of the other management device is modified based on the modification instruction sent by the first management device, so that the ACL E of the other management device is opened or closed, without having the right to modify the ACL of the other management device, the opening or closing state of the ACL E of the management device can be changed, the right of the management device is limited, and the security is improved.

[0205] Figure 4 to Figure 6 The embodiment describes how the first management device modifies the switch state of the ACL E of the other management device. In other embodiments, the switch state corresponds to the ACL of the management device, if the switch state of any ACL is set to the closing state, all the ACL E included in the ACL is in the closing state, and below, the switch state of the ACL E of the management device is described. Figure 8 The embodiment describes the above method, and the method is described with reference to Figure 8 The method comprises the following steps.

[0206] 801、The first management device sends a modification instruction to the Internet of Things device.

[0207] 802、The Internet of Things device receives the modification instruction sent by the first management device.

[0208] The modification instruction is used to modify the switch state of the ACL of the second management device, and the switch state is used to indicate whether the ACL is valid.

[0209] In some embodiments, the Internet of Things device stores a switch state corresponding to the ACL of the second management device, and when the switch state is in a first state, the corresponding ACL is in an open state, and when the switch state is in a second state, the corresponding ACL is in a closed state.

[0210] 803. In the case where the first management device has the right to modify the switch state of the ACL, the Internet of Things device modifies the switch state of the target ACL of the second management device according to the modification instruction.

[0211] In some embodiments, in the case where the stored administrator identifier includes the device identifier of the first management device, it is determined that the first management device has the right to modify the switch state of the ACL.

[0212] In another embodiment, in the case where the device identifier of the first management device is set as the master administrator identifier, it is determined that the first management device has the right to modify the switch state of the ACL.

[0213] It should be noted that the present embodiment only takes the first management device directly sending a modification instruction to the physical network device as an example for description. In another embodiment, the Internet of Things device needs to be controlled to enter a modification mode first, and then the Internet of Things device responds to the modification instruction sent by the first management device. Therefore, before step 801, the method further includes 8011:

[0214] 8011. The Internet of Things device receives a modification mode start instruction and enters a modification mode according to the modification mode start instruction.

[0215] In the modification mode, the Internet of Things device has the function of responding to the modification instruction.

[0216] After step 803, the method further includes 8031:

[0217] 8031. The Internet of Things device receives a modification mode stop instruction and exits the modification mode according to the modification mode stop instruction.

[0218] In some embodiments, in the case where the first management device has the right to modify the switch state of the ACL, Figure 8 On the basis of the embodiment, the first management device needs to acquire the ACL of the management device stored by the Internet of Things device, and the method includes steps 811-814:

[0219] 811. The first management device sends an ACL acquisition request to the Internet of Things device.

[0220] 812、The Internet of Things device receives the ACL obtaining request sent by the first management device.

[0221] 813、The Internet of Things device sends the ACL of each management device in the Internet of Things device to the first management device based on the ACL obtaining request.

[0222] 814、The first management device receives the ACL of each management device sent by the physical network device.

[0223] It should be noted that steps 801-803 in the embodiments of the present application are similar, Figure 8 The modification instruction in the embodiments is to modify the on-off state of the ACL of the other management device. If the on-off state of the ACL of the other management device is changed, the on-off state of all ACLEs included in the ACL will be changed in the same way as the on-off state of the ACL, and Figure 4 to Figure 6 In the embodiments, the on-off state of one ACLE is modified alone, and other processes are similar, which will not be described here.

[0224] The method provided by the embodiments of the present application, in the case that the first management device has the right to modify the on-off state of the ACL, the on-off state of the ACL of the other management device is modified based on the modification instruction sent by the first management device, so that the ACL of the other management device is turned on or off. Without having the right to modify the ACL of the other management device, the on-off state of the ACL of the management device can be changed, which limits the right of the management device and improves the security. Moreover, by modifying the on and off of the ACL, the on and off of all ACLEs included in the ACL can be modified, which improves the operation efficiency.

[0225] Figure 9 A block diagram of an ACL control device provided by an example embodiment of the present application is shown, which is applied in an Internet of Things device, and the device includes:

[0226] The receiving module 901 is configured to receive a modification instruction sent by a first management device, the modification instruction being used to modify the on-off state of a target access control list entry (ACLE) of a second management device, the target ACLE being any one of ACLEs included in an access control list (ACL) of the second management device, and the on-off state being used to indicate whether the target ACLE is valid;

[0227] The modifying module 902 is configured to modify the on-off state of the target ACLE of the second management device according to the modification instruction in the case that the first management device has the right to modify the on-off state of the ACLE.

[0228] In some embodiments, the target ACLE includes a switch state, and the switch state is in a first state to indicate that the target ACLE is in an open state, and the switch state is in a second state to indicate that the target ACLE is in a closed state.

[0229] In some embodiments, the second management device's ACL includes a switch state corresponding to each ACLE.

[0230] In some embodiments, the second management device's ACL includes a switch state corresponding to each ACLE.

[0231] In some embodiments, the modification instruction includes the device identifier of the first management device, and the apparatus further includes:

[0232] The determining module 903 is configured to determine that the first management device has the permission to modify the switch state of the ACLE if it is determined that the device identifier of the first management device is included in the stored administrator identifier; or,

[0233] The determining module 903 is further configured to determine that the first management device has the permission to modify the switch state of the ACLE if it is determined that the device identifier of the first management device is the set master administrator identifier.

[0234] In some embodiments, referring to Figure 10 , the apparatus further includes:

[0235] The receiving module 901 is configured to receive a modification mode open instruction.

[0236] The entering module 904 is configured to enter a modification mode according to the modification mode open instruction, and the Internet of Things device has a function of responding to a modification instruction in the modification mode.

[0237] The receiving module 901 is configured to receive a modification mode close instruction.

[0238] The exiting module 905 is configured to exit the modification mode according to the modification mode close instruction.

[0239] In some embodiments, referring to Figure 10 , the apparatus further includes:

[0240] The receiving module 901 is configured to receive an ACLE acquisition request sent by the first management device.

[0241] The sending module 906 is configured to send, to the first management device, an ACLE of each management device in the Internet of Things device based on the ACLE acquisition request.

[0242] In some embodiments, referring to Figure 10 , the apparatus further includes:

[0243] The receiving module 901 is configured to receive an ACLE adding instruction sent by any management device.

[0244] The adding module 907 is configured to add an ACLE included in the ACLE adding instruction in the ACL of any management device based on the ACLE adding instruction.

[0245] Figure 11 A block diagram of an ACL control apparatus provided by an example embodiment of the present application is shown, which is applied to a first management device, and the apparatus includes:

[0246] The sending module 1101 is configured to send a modification instruction to the Internet of Things device, the modification instruction being used to modify a switch state of a target ACLE of the second management device, the target ACLE being any ACLE included in an access control list (ACL) of the second management device, and the switch state being used to indicate whether the target ACLE is valid.

[0247] The Internet of Things device is configured to receive the modification instruction sent by the first management device, and in a case where it is determined that the first management device has the permission to modify the switch state of the ACLE, modify the switch state of the target ACLE of the second management device according to the modification instruction.

[0248] In some embodiments, the target ACLE includes a switch state, the switch state being in a first state to indicate that the target ACLE is in an open state, and the switch state being in a second state to indicate that the target ACLE is in a closed state.

[0249] In some embodiments, the ACL of the second management device includes a switch state corresponding to each ACLE.

[0250] In some embodiments, the Internet of Things device further stores a switch state corresponding to each ACLE included in the ACL of the second management device.

[0251] In some embodiments, the modification instruction includes a device identifier of the first management device,

[0252] The Internet of Things device determines that the device identifier of the first management device is included in the stored administrator identifier, and determines that the first management device has the permission to modify the switch state of the ACLE; or

[0253] The Internet of Things device determines that the device identifier of the first management device is the set master administrator identifier, and determines that the first management device has the permission to modify the switch state of the ACLE.

[0254] In some embodiments, referring to Figure 12 The apparatus further includes:

[0255] The sending module 1101 is configured to send an ACL acquisition request to the Internet of Things device.

[0256] The receiving module 1102 is configured to receive the ACL of each management device in the Internet of Things device sent by the Internet of Things device.

[0257] The Internet of Things device is configured to send the ACL of each management device in the Internet of Things device to the first management device based on the ACL acquisition request.

[0258] Figure 13 A block diagram of the ACL control apparatus provided by one example embodiment of the present application is shown, which is applied to an Internet of Things device, and the apparatus includes:

[0259] The receiving module 1301 is configured to receive a modification instruction sent by the first management device, and the modification instruction is used to modify the switch state of the ACL of the second management device, and the switch state is used to indicate whether the ACL is valid.

[0260] The modification module 1302 is configured to modify the switch state of the ACL of the second management device according to the modification instruction in a case where it is determined that the first management device has the permission to modify the switch state of the ACL.

[0261] In some embodiments, the Internet of Things device stores the switch state corresponding to the ACL of the second management device, and the switch state is in a first state, which is used to indicate that the corresponding ACL is in an open state, and the switch state is in a second state, which is used to indicate that the corresponding ACL is in a closed state.

[0262] In some embodiments, the modification instruction includes the device identifier of the first management device, and the apparatus further includes:

[0263] The determining module 1303 is configured to determine that the first management device has the permission to modify the switch state of the ACL in a case where it is determined that the stored administrator identifier includes the device identifier of the first management device; or

[0264] The determining module 1303 is further configured to determine that the first management device has the permission to modify the switch state of the ACL in a case where it is determined that the device identifier of the first management device is the set master administrator identifier.

[0265] In some embodiments, referring to Figure 14 , the apparatus further includes:

[0266] The receiving module 1301 is configured to receive a modification mode open instruction.

[0267] The entering module 1304 is configured to enter the modification mode according to the modification mode open instruction, and the Internet of Things device has the function of responding to the modification instruction in the modification mode.

[0268] Referring to Figure 14 , the apparatus further includes:

[0269] The receiving module 1301 is configured to receive a modification mode closing instruction.

[0270] The exiting module 1305 is configured to exit the modification mode according to the modification mode closing instruction.

[0271] In some embodiments, referring to Figure 14 , the apparatus further includes:

[0272] The receiving module 1301 is configured to receive an ACL obtaining request sent by the first management device.

[0273] The sending module 1306 is configured to send, to the first management device, an ACL of each management device in the Internet of Things device based on the ACL obtaining request.

[0274] In some embodiments, referring to Figure 14 , the apparatus further includes:

[0275] The receiving module 1301 is configured to receive an ACLE adding instruction sent by any management device.

[0276] The adding module 1307 is configured to add, in the ACL of any management device, an ACLE included in the ACLE adding instruction based on the ACLE adding instruction.

[0277] Figure 15 A block diagram of an ACL control apparatus provided by an example embodiment of the present application is shown, which is applied to a first management device, and the apparatus includes:

[0278] The sending module 1501 is configured to send a modification instruction to an Internet of Things device, the modification instruction being used to modify a switch state of an ACL of a second management device, and the switch state being used to indicate whether a target ACLE is valid.

[0279] The Internet of Things device is configured to receive the modification instruction sent by the first management device, and in a case where it is determined that the first management device has the authority to modify the switch state of the ACL, modify the switch state of the target ACLE of the second management device according to the modification instruction.

[0280] In some embodiments, the Internet of Things device stores a switch state corresponding to the ACL of the second management device, and the second object includes a corresponding relationship between an ACLE and the switch state, the switch state being in a first state, and being used to indicate that the corresponding ACLE is in an open state, and the switch state being in a second state, and being used to indicate that the corresponding ACLE is in a closed state.

[0281] In some embodiments, the modification instruction includes a device identifier of the first management device,

[0282] The Internet of Things device determines that the first management device has the permission to modify the switch state of the ACL in a case where it is determined that the device identifier of the first management device is included in the stored administrator identifier.

[0283] The Internet of Things device determines that the first management device has the permission to modify the switch state of the ACL in a case where it is determined that the device identifier of the first management device is the set master administrator identifier.

[0284] In some embodiments, referring to Figure 16 , the apparatus further includes:

[0285] The sending module 1501 is configured to send an ACL acquisition request to the Internet of Things device.

[0286] The receiving module 1502 is configured to receive the ACL of each management device in the Internet of Things device sent by the Internet of Things device.

[0287] The Internet of Things device is configured to send the ACL of each management device in the Internet of Things device to the first management device based on the ACL acquisition request.

[0288] Figure 17 A structural diagram of a communication device provided by an example embodiment of the present application is shown, and the communication device includes a processor 1701, a receiver 1702, a transmitter 1703, a memory 1704, and a bus 1705.

[0289] The processor 1701 includes one or more processing cores, and the processor 1701 performs various functional applications and information processing by running software programs and modules.

[0290] The receiver 1702 and the transmitter 1703 can be implemented as a communication component, which can be a communication chip.

[0291] The memory 1704 is connected to the processor 1701 through the bus 1705.

[0292] The memory 1704 can be used to store at least one instruction, and the processor 1701 is configured to execute the at least one instruction to implement each step in the above method embodiments.

[0293] The communication device is the Internet of Things device or the first management device.

[0294] In addition, the memory 1704 can be implemented by any type of volatile or nonvolatile storage devices or a combination thereof, including but not limited to a magnetic disk or optical disk, an electrically erasable programmable read-only memory (EEPROM), an erasable programmable read-only memory (EPROM), a static random access memory (SRAM), a read-only memory (ROM), a magnetic memory, a flash memory, a programmable read-only memory (PROM).

[0295] In an example embodiment, a computer readable storage medium is also provided, the readable storage medium has stored therein executable program code which is loaded and executed by a processor to implement the ACL control method performed by a communication device provided by each of the above-mentioned method embodiments.

[0296] In an example embodiment, a chip is also provided, the chip includes programmable logic circuitry and / or program instructions, when the chip is running on an Internet of Things device or a first management device, for implementing the above-mentioned ACL control method.

[0297] In an example embodiment, a computer program product is also provided, the computer program product includes computer instructions stored in a computer readable storage medium;

[0298] The processor of the Internet of Things device reads the computer instructions from the computer readable storage medium and executes the computer instructions, so that the Internet of Things device performs the ACL control method as described in the above-mentioned aspects;

[0299] The processor of the first management device reads the computer instructions from the computer readable storage medium and executes the computer instructions, so that the first management device performs the ACL control method as described in the above-mentioned aspects.

[0300] In an example embodiment, a computer program is also provided, when the computer program is executed by the processor of the Internet of Things device or the first management device, for implementing the above-mentioned ACL control method.

[0301] Those of ordinary skill in the art can understand that all or part of the steps of the above-mentioned embodiments can be completed by hardware, or by program instructions instructing related hardware, and the program instructions can be stored in a computer readable storage medium, and the above-mentioned storage medium can be a read-only memory, a magnetic disk or an optical disk, etc.

[0302] The above-mentioned is only an optional embodiment of the present application, and does not limit the present application, any modification, equivalent replacement, improvement, etc. made within the spirit and principle of the present application shall be included in the protection scope of the present application.

Claims

1. An ACL control method characterized by, The method is applied to an Internet of Things device, and comprises the following steps: receiving a modification instruction sent by a first management device, the modification instruction being used to modify a switch state of a target access control list entry (ACLE) of a second management device, the target ACLE being any one of ACLEs included in an access control list (ACL) of the second management device, and the switch state being used to indicate whether the target ACLE is valid; in a case where it is determined that the first management device has the permission to modify the switch state of the ACLE, modifying the switch state of the target ACLE of the second management device according to the modification instruction; wherein the second management device has a read-only permission to other management devices, or the second management device and the first management device are in different ecosystems; wherein, before the receiving of the modification instruction sent by the first management device, the method further comprises: receiving an ACL acquisition request sent by the first management device; based on the ACL acquisition request, sending, to the first management device, an ACL of each management device in the Internet of Things device, wherein the ACL of each management device includes an ACL of the first management device and an ACL of the second management device; wherein the modification instruction sent by the first management device is sent by the first management device after selecting an ACLE from the ACL of each management device; wherein, before the receiving of the modification instruction sent by the first management device, the method further comprises: receiving a modification mode start instruction, and entering a modification mode according to the modification mode start instruction, wherein the Internet of Things device has a function of responding to a modification instruction in the modification mode; after the modifying of the switch state of the target ACLE of the second management device based on the modification instruction in a case where it is determined that the first management device has the permission to modify, the method further comprises: receiving a modification mode stop instruction, and exiting the modification mode according to the modification mode stop instruction.

2. The method of claim 1, wherein, the switch state in the target ACLE is a first state, indicating that the target ACLE is in an open state, or the switch state is a second state, indicating that the target ACLE is in a closed state.

3. The method of claim 1, wherein, the ACL of the second management device includes the switch state corresponding to each ACLE.

4. The method of claim 1, wherein, the Internet of Things device further stores the switch state corresponding to each ACLE included in the ACL of the second management device.

5. The method according to any one of claims 1 to 4, characterized in that, the modification instruction includes a device identifier of the first management device, and the method further comprises: in a case where it is determined that the device identifier of the first management device is included in the stored administrator identifier, determining that the first management device has the permission to modify the switch state of the ACLE; or in a case where it is determined that the device identifier of the first management device is a set master administrator identifier, determining that the first management device has the permission to modify the switch state of the ACLE.

6. The method according to any one of claims 1 to 4, characterized in that, the method further comprises: receiving an ACLE addition instruction sent by any management device; based on the ACLE addition instruction, adding the ACLE included in the ACLE addition instruction in the ACL of the any management device.

7. An ACL control method characterized by, The method applied to the first management device comprises: sending a modification instruction to the Internet of Things device, the modification instruction being used to modify a switch state of a target ACE of a second management device, the target ACE being any ACE included in an access control list (ACL) of the second management device, the switch state being used to indicate whether the target ACE is valid; the Internet of Things device is used to receive the modification instruction sent by the first management device, and in a case where it is determined that the first management device has the permission to modify the switch state of the ACE, the switch state of the target ACE of the second management device is modified according to the modification instruction; wherein the permission set by the second management device to other management devices is a read-only permission, or the second management device and the first management device are in different ecosystems; wherein, before the modification instruction is sent to the Internet of Things device, the method further comprises: sending an ACL acquisition request to the Internet of Things device; receiving the ACL of each management device in the Internet of Things device sent by the Internet of Things device; the Internet of Things device is used to send the ACL of each management device in the Internet of Things device to the first management device based on the ACL acquisition request, wherein the ACL of each management device includes the ACL of the first management device and the ACL of the second management device; wherein, the modification instruction sent to the Internet of Things device is sent by the first management device after selecting the ACE from the ACL of each management device; wherein, before the modification instruction is sent to the Internet of Things device, the method further comprises: sending a modification mode start instruction to the Internet of Things device, so that the Internet of Things device enters a modification mode according to the modification mode start instruction, and the Internet of Things device has the function of responding to the modification instruction in the modification mode; the method further comprises: sending a modification mode stop instruction to the Internet of Things device, so that the Internet of Things device exits the modification mode according to the modification mode stop instruction.

8. The method of claim 7, wherein, The switch state in the target ACE is in a first state, which is used to indicate that the target ACE is in an open state, and the switch state is in a second state, which is used to indicate that the target ACE is in a closed state.

9. The method of claim 7, wherein, The ACL of the second management device includes the switch state corresponding to each ACE.

10. The method of claim 7, wherein, The Internet of Things device further stores the switch state corresponding to each ACE included in the ACL of the second management device.

11. The method according to any one of claims 7-10, characterized in that, The device identifier of the first management device is included in the modification instruction; the Internet of Things device determines that the first management device has the permission to modify the switch state of the ACE by determining that the device identifier of the first management device is included in the stored administrator identifier; or, the Internet of Things device determines that the first management device has the permission to modify the switch state of the ACE by determining that the device identifier of the first management device is the set master administrator identifier.

12. An ACL control method characterized by comprising: The method applied to the Internet of Things device comprises: receive a modification instruction sent by the first management device, the modification instruction being used to modify a switch state of an ACL of the second management device, the switch state being used to indicate whether the ACL is valid; in a case where it is determined that the first management device has the permission to modify the switch state of the ACL, modify the switch state of the ACL of the second management device according to the modification instruction; wherein the second management device has a read-only permission to other management devices, or the second management device and the first management device are in different ecosystems; wherein, before the receiving the modification instruction sent by the first management device, the method further comprises: receiving an ACL obtaining request sent by the first management device; sending, to the first management device, an ACL of each management device in the Internet of Things device based on the ACL obtaining request, wherein the ACL of each management device includes the ACL of the first management device and the ACL of the second management device; wherein the modification instruction sent by the first management device is sent by the first management device after selecting an ACL from the ACL of each management device; wherein, before the receiving the modification instruction sent by the first management device, the method further comprises: receiving a modification mode start instruction, and entering a modification mode according to the modification mode start instruction, wherein the Internet of Things device has a function of responding to a modification instruction in the modification mode; after the modifying the switch state of the target ACL of the second management device based on the modification instruction in a case where it is determined that the first management device has the permission to modify, the method further comprises: receiving a modification mode stop instruction, and exiting the modification mode according to the modification mode stop instruction.

13. The method of claim 12, wherein, The Internet of Things device stores a switch state corresponding to the ACL of the second management device, wherein the switch state in a first state is used to indicate that the corresponding ACL is in an open state, and the switch state in a second state is used to indicate that the corresponding ACL is in a closed state.

14. The method of any of claims 12-13, wherein, The modification instruction includes a device identifier of the first management device, and the method further comprises: in a case where it is determined that the device identifier of the first management device is included in the stored administrator identifier, it is determined that the first management device has the permission to modify the switch state of the ACL; or in a case where it is determined that the device identifier of the first management device is a set master administrator identifier, it is determined that the first management device has the permission to modify the switch state of the ACL.

15. The method of any of claims 12-13, wherein, The method further comprises: receiving an ACL addition instruction sent by any management device; based on the ACL addition instruction, adding an ACL included in the ACL addition instruction in the ACL of the any management device.

16. An ACL control method characterized by comprising: Applied to the first management device, the method comprises: sending a modification instruction to the Internet of Things device, the modification instruction being used to modify a switch state of an ACL of the second management device, the switch state being used to indicate whether a target ACL is valid; The Internet of Things device is configured to receive a modification instruction sent by the first management device, and modify the switch state of a target access control list entry (ACLE) of the second management device according to the modification instruction in a case where it is determined that the first management device has the authority to modify the switch state of the ACL; wherein the authority of the second management device to other management devices is a read-only authority, or the second management device and the first management device are in different ecosystems. Before the modification instruction is sent to the Internet of Things device, the method further comprises: sending an ACL acquisition request to the Internet of Things device; receiving the ACL of each management device in the Internet of Things device sent by the Internet of Things device, wherein the ACL of each management device includes the ACL of the first management device and the ACL of the second management device; the Internet of Things device is configured to send the ACL of each management device in the Internet of Things device to the first management device based on the ACL acquisition request; wherein the modification instruction sent to the Internet of Things device is sent by the first management device after selecting the ACL from the ACL of each management device; Before the modification instruction is sent to the Internet of Things device, the method further comprises: sending a modification mode start instruction to the Internet of Things device, so that the Internet of Things device enters a modification mode according to the modification mode start instruction, and the Internet of Things device has a function of responding to the modification instruction in the modification mode; the method further comprises: sending a modification mode stop instruction to the Internet of Things device, so that the Internet of Things device exits the modification mode according to the modification mode stop instruction.

17. The method of claim 16, wherein, The Internet of Things device stores the switch state corresponding to the ACL of the second management device, and the second object includes the correspondence between the ACLE and the switch state, the switch state is the first state, and the corresponding ACLE is in the open state, and the switch state is the second state, and the corresponding ACLE is in the closed state.

18. The method of any of claims 16-17, wherein, The modification instruction includes the device identifier of the first management device; The Internet of Things device determines that the first management device has the authority to modify the switch state of the ACL in a case where it is determined that the device identifier of the first management device is included in the stored administrator identifier; Or, The Internet of Things device determines that the first management device has the authority to modify the switch state of the ACL in a case where it is determined that the device identifier of the first management device is the set master administrator identifier.

19. An ACL control device, characterized by Applied to an Internet of Things device, the device comprises: a receiving module configured to receive a modification instruction sent by a first management device, the modification instruction being used to modify the switch state of a target access control list entry (ACLE) of a second management device, the target ACLE being any one of access control list (ACL) entries included in the ACL of the second management device, and the switch state being used to indicate whether the target ACLE is valid; The modification module is configured to modify the switch state of the target ACL of the second management device according to the modification instruction in a case where it is determined that the first management device has the permission to modify the switch state of the ACL; wherein the permission of the second management device to other management devices is a read-only permission, or the second management device and the first management device are in different ecosystems. The receiving module is further configured to receive an ACL obtaining request sent by the first management device. The device further includes: The sending module is configured to send, to the first management device, an ACL of each management device in the Internet of Things device based on the ACL obtaining request, wherein the ACL of each management device includes an ACL of the first management device and an ACL of the second management device. The modification instruction sent by the first management device is selected from the ACL of each management device. The device further includes: The receiving module is configured to receive a modification mode start instruction. The entering module is configured to enter a modification mode according to the modification mode start instruction, and the Internet of Things device has a function of responding to a modification instruction in the modification mode. The receiving module is configured to receive a modification mode stop instruction. The exiting module is configured to exit the modification mode according to the modification mode stop instruction.

20. The apparatus of claim 19, wherein, The target ACL includes a switch state, and the switch state in a first state indicates that the target ACL is in an open state, and the switch state in a second state indicates that the target ACL is in a closed state.

21. The apparatus of claim 19, wherein, The ACL of the second management device includes a switch state corresponding to each ACL.

22. The apparatus of claim 19, wherein, The Internet of Things device further stores a switch state corresponding to each ACL included in the ACL of the second management device.

23. The apparatus of any of claims 19-22, wherein, The modification instruction includes a device identifier of the first management device, and the device further includes: The determining module is configured to determine that the first management device has the permission to modify the switch state of the ACL in a case where it is determined that the stored administrator identifier includes the device identifier of the first management device; or The determining module is further configured to determine that the first management device has the permission to modify the switch state of the ACL in a case where it is determined that the device identifier of the first management device is a set primary administrator identifier.

24. The apparatus of any of claims 19-22, wherein, The device further includes: The receiving module is configured to receive an ACL adding instruction sent by any management device. The adding module is configured to add an ACL included in the ACL adding instruction in the ACL of the any management device based on the ACL adding instruction.

25. An ACL control device, characterized by The device is applied to a first management device, and includes: The sending module is configured to send a modification instruction to an Internet of Things device, wherein the modification instruction is used to modify a switch state of a target ACL of a second management device, the target ACL is any ACL included in an access control list (ACL) of the second management device, and the switch state is used to indicate whether the target ACL is valid. The Internet of Things device is configured to receive a modification instruction sent by the first management device, and modify the switch state of the target ACL of the second management device according to the modification instruction in a case where it is determined that the first management device has the permission to modify the switch state of the ACL; wherein the permission set by the second management device for other management devices is a read-only permission, or the second management device and the first management device are in different ecosystems. The sending module is further configured to send an ACL acquisition request to the Internet of Things device. The apparatus further includes: a receiving module configured to receive the ACL of each management device in the Internet of Things device sent by the Internet of Things device; The Internet of Things device is configured to send the ACL of each management device in the Internet of Things device to the first management device based on the ACL acquisition request, wherein the ACL of each management device includes the ACL of the first management device and the ACL of the second management device; The sending module sends the modification instruction to the Internet of Things device from the selected ACL of each management device. The sending module is further configured to: send a modification mode start instruction to the Internet of Things device, so that the Internet of Things device enters a modification mode according to the modification mode start instruction, and the Internet of Things device has the function of responding to the modification instruction in the modification mode; The sending module is further configured to: send a modification mode stop instruction to the Internet of Things device, so that the Internet of Things device exits the modification mode according to the modification mode stop instruction.

26. The apparatus of claim 25, wherein, The switch state in the target ACL is in a first state, indicating that the target ACL is in an open state, and the switch state is in a second state, indicating that the target ACL is in a closed state.

27. The apparatus of claim 25, wherein, The ACL of the second management device includes the switch state corresponding to each ACL.

28. The apparatus of claim 25, wherein, The Internet of Things device further stores the switch state corresponding to each ACL included in the ACL of the second management device.

29. The apparatus of any of claims 25-28, wherein, The modification instruction includes the device identifier of the first management device. The Internet of Things device determines that the device identifier of the first management device is included in the stored administrator identifier, and determines that the first management device has the permission to modify the switch state of the ACL. The Internet of Things device determines that the device identifier of the first management device is the set master administrator identifier, and determines that the first management device has the permission to modify the switch state of the ACL. The apparatus is applied to an Internet of Things device, and includes:

30. An ACL control device, characterized by a receiving module configured to receive a modification instruction sent by a first management device, the modification instruction being used to modify the switch state of an ACL of a second management device, the switch state being used to indicate whether the ACL is valid; ​ The modification module is configured to modify the on-off state of the ACL of the second management device according to the modification instruction in a case where it is determined that the first management device has the permission to modify the on-off state of the ACL; wherein the permission set by the second management device for other management devices is a read-only permission, or the second management device and the first management device are in different ecosystems. The receiving module is further configured to receive an ACL acquisition request sent by the first management device. The apparatus comprises: The sending module is configured to send, to the first management device, an ACL of each management device in the Internet of Things device based on the ACL acquisition request, wherein the ACL of each management device comprises the ACL of the first management device and the ACL of the second management device. The modification instruction sent by the first management device is selected from the ACL of each management device. The apparatus further comprises: The receiving module is configured to receive a modification mode start instruction. The entering module is configured to enter a modification mode according to the modification mode start instruction, wherein the Internet of Things device has a function of responding to a modification instruction in the modification mode. The apparatus further comprises: The receiving module is configured to receive a modification mode stop instruction. The exiting module is configured to exit the modification mode according to the modification mode stop instruction.

31. The apparatus of claim 30, wherein, The Internet of Things device stores an on-off state corresponding to the ACL of the second management device, wherein the on-off state in a first state indicates that the corresponding ACL is in an open state, and the on-off state in a second state indicates that the corresponding ACL is in a closed state.

32. The apparatus of any of claims 30-31, wherein, The modification instruction comprises a device identifier of the first management device, and the apparatus further comprises: The determining module is configured to determine that the first management device has the permission to modify the on-off state of the ACL in a case where it is determined that the stored administrator identifier comprises the device identifier of the first management device; or The determining module is further configured to determine that the first management device has the permission to modify the on-off state of the ACL in a case where it is determined that the device identifier of the first management device is a set primary administrator identifier.

33. The apparatus of any of claims 30-31, wherein, The apparatus further comprises: The receiving module is configured to receive an ACL addition instruction sent by any management device. The adding module is configured to add an ACL included in the ACL addition instruction in the ACL of the any management device based on the ACL addition instruction.

34. An ACL control device, characterized by The apparatus is applied to a first management device, and the apparatus comprises: The sending module is configured to send a modification instruction to an Internet of Things device, wherein the modification instruction is used to modify an on-off state of an ACL of a second management device, and the on-off state is used to indicate whether a target ACL is valid. The Internet of Things device is configured to receive a modification instruction sent by the first management device, and modify the switch state of the target ACL of the second management device according to the modification instruction in a case where it is determined that the first management device has the authority to modify the switch state of the ACL; wherein the authority of the second management device to other management devices is a read-only authority, or the second management device and the first management device are in different ecosystems. The sending module is further configured to send an ACL acquisition request to the Internet of Things device. The apparatus further includes: A receiving module configured to receive the ACL of each management device in the Internet of Things device sent by the Internet of Things device; The Internet of Things device is configured to send the ACL of each management device in the Internet of Things device to the first management device based on the ACL acquisition request, wherein the ACL of each management device includes the ACL of the first management device and the ACL of the second management device; The sending module sends the modification instruction to the Internet of Things device from the selected ACL of each management device. The sending module is further configured to: Send a modification mode start instruction to the Internet of Things device, so that the Internet of Things device enters a modification mode according to the modification mode start instruction, and the Internet of Things device has the function of responding to the modification instruction in the modification mode. The sending module is further configured to: Send a modification mode stop instruction to the Internet of Things device, so that the Internet of Things device exits the modification mode according to the modification mode stop instruction.

35. The apparatus of claim 34, wherein, The Internet of Things device stores the switch state corresponding to the ACL of the second management device, and the second object includes the correspondence between the ACL and the switch state, wherein the switch state in the first state indicates that the corresponding ACL is in the open state, and the switch state in the second state indicates that the corresponding ACL is in the closed state.

36. The apparatus of any of claims 34-35, wherein, The modification instruction includes the device identifier of the first management device. The Internet of Things device determines that the first management device has the authority to modify the switch state of the ACL in a case where it is determined that the device identifier of the first management device is included in the stored administrator identifier. Alternatively, The Internet of Things device determines that the first management device has the authority to modify the switch state of the ACL in a case where it is determined that the device identifier of the first management device is the set master administrator identifier.

37. An Internet of Things device comprising: The Internet of Things device includes: A processor; A transceiver connected to the processor; A memory for storing executable program codes of the processor; The processor is configured to load and execute the executable program codes to implement the ACL control method of any one of claims 1-6 or 12-15.

38. A first management device, comprising: The first management device includes: A processor; A transceiver connected to the processor; A memory for storing executable program codes of the processor; The processor is configured to load and execute the executable program codes to implement the ACL control method of any one of claims 7-11 or 16-18.

39. A computer-readable storage medium, characterized in that, The computer readable storage medium stores executable program code, which is loaded and executed by the processor to implement the ACL control method according to any one of claims 1-18.

40. A chip, comprising: The chip comprises programmable logic circuit and / or program instructions, and when the chip is running on the Internet of Things device or the first management device, is used to implement the ACL control method according to any one of claims 1-18.

41. A computer program product, characterised in that, The computer program product comprises computer instructions stored in a computer readable storage medium; The processor of the Internet of Things device reads the computer instructions from the computer readable storage medium and executes the computer instructions, so that the Internet of Things device executes the ACL control method according to any one of claims 1-6 or 12-15; The processor of the first management device reads the computer instructions from the computer readable storage medium and executes the computer instructions, so that the first management device executes the ACL control method according to any one of claims 7-11 or 16-18.

Images