End equipment grouping management and control method and device and electronic equipment

Abstract

The embodiment of the invention provides an end device grouping management and control method and device and electronic equipment, and the method comprises the steps: determining a target end device group corresponding to a target service, the target end device group comprises at least one target end device, and the target end device is an end device which passes the authentication and is successfully registered; generating device group information corresponding to the target end device group, and synchronizing the device group information to each target end device in the target end device group, so that the target end device adds other target end devices in the target end device group to a security list according to the device group information, and configuring addresses of other target end devices in the target end device group into an address list, and realizing a target service through the synchronized target end device group. According to the invention, the workload of the management server is reduced, and the management efficiency of the end equipment is improved.

Description

Technical Field

[0001] The embodiments of the present application relate to the field of data processing technology, and in particular to a method, apparatus and electronic device for grouping and controlling terminal devices. Background Art

[0002] With the development of network technology, workers often carry a variety of electronic devices, namely, terminal devices, when performing their work, and then can implement related services through the interaction between the terminal devices and the management server.

[0003] In the prior art, when implementing related services, only the structural system in which the terminal device interacts with the management server is supported, that is, the management server controls and processes the terminal device.

[0004] However, since all terminal devices need to be processed by the management server, the workload of the management server is greatly increased, and the management efficiency of the terminal devices is reduced, thereby affecting the implementation effect of related services. Summary of the invention

[0005] The embodiments of the present application provide a terminal device grouping management method, device and electronic device to improve the management efficiency of the terminal devices.

[0006] In a first aspect, an embodiment of the present application provides a terminal device grouping management and control method, which is applied to a target edge device, including:

[0007] Determine a target end device group corresponding to the target service, wherein the target end device group includes at least one target end device, and the target end device is an end device that has passed authentication and registration successfully;

[0008] Generate device group information corresponding to the target end device group;

[0009] Synchronize the device group information to each target device in the target device group, so that the target device adds other target devices in the target device group to the security list according to the device group information, and configures the addresses of other target devices in the target device group to the address list;

[0010] The target service is realized through the synchronized target end device group.

[0011] Optionally, determining a target end device group corresponding to the target service includes:

[0012] Determine the target end equipment required to achieve the target business;

[0013] A target end device group is generated according to the target end devices required to implement the target service.

[0014] Optionally, determining a target end device group corresponding to the target service includes:

[0015] Determine a target end device corresponding to the target service;

[0016] A target-end device group is determined according to the manager information contained in the target-end device, wherein the target-end devices contained in the same target-end device group correspond to the same manager information.

[0017] Optionally, the generating device group information corresponding to the target device group includes:

[0018] If all the target devices in the target device group belong to the target edge device, corresponding device group information is generated according to the target devices in the target device group, wherein the device group information includes at least one of the device group name, the IP address, MAC address, port and device level of the target devices included in the group.

[0019] Optionally, the generating device group information corresponding to the target device group includes:

[0020] If the target end device group includes a target end device that does not belong to the target edge device, sending a query request to the management server, wherein the query request includes a device identifier of the target end device that does not belong to the target edge device;

[0021] Receiving target end device information corresponding to the device identifier sent by the management server;

[0022] Corresponding device group information is generated based on the target end device information and the device information corresponding to the target end device belonging to the target edge device in the target end device group, wherein the device group information includes at least one of the device group name, the IP address, MAC address, port and device level of the target end device included in the group.

[0023] Optionally, before determining the target end device group corresponding to the target service, the method further includes:

[0024] Acquire at least one target end device within a preset range;

[0025] Perform two-way authentication with the at least one target end device, and after the two-way authentication passes, establish a connection with each target end device.

[0026] Optionally, establishing a connection with each target end device includes:

[0027] If the target edge device supports Bluetooth connection, a connection is established with each target end device through at least one connection method selected from the Bluetooth whitelist, secure local area network, NFC, USB and secure wireless communication.

[0028] Optionally, establishing a connection with each target end device includes:

[0029] If the target edge device does not support Bluetooth connection, establish a connection with each target end device through at least one connection method selected from secure local area network, NFC, USB and secure wireless communication;

[0030] If the target device only supports Bluetooth connection, a connection is established with the target device that only supports Bluetooth connection through the smart terminal.

[0031] Optionally, before determining the target end device group corresponding to the target service, the method further includes:

[0032] Receiving device information sent by the at least one target end device, and registering each target end device according to the device information;

[0033] The device information is synchronized to the management platform deployed in the management server.

[0034] In a second aspect, an embodiment of the present application provides a terminal device grouping control device, which is applied to a target edge device, including:

[0035] A determination module, used to determine a target end device group corresponding to a target service, wherein the target end device group includes at least one target end device, and the target end device is an end device that has passed authentication and registration successfully;

[0036] A processing module, used to generate device group information corresponding to the target end device group;

[0037] The processing module is further used to synchronize the device group information to each target-end device in the target-end device group, so that the target-end device adds other target-end devices in the target-end device group to the security list according to the device group information, and configures the addresses of other target-end devices in the target-end device group to the address list;

[0038] The processing module is further configured to implement the target service through the synchronized target end device group.

[0039] In a third aspect, an embodiment of the present application provides an electronic device, comprising: a processor, and a memory communicatively connected to the processor;

[0040] The memory stores computer-executable instructions;

[0041] The processor executes the computer execution instructions stored in the memory to implement the terminal device grouping management and control method described in the first aspect and various possible designs of the first aspect.

[0042] In a fourth aspect, an embodiment of the present application provides a computer-readable storage medium, in which computer execution instructions are stored. When a processor executes the computer execution instructions, the terminal device grouping control method described in the first aspect and various possible designs of the first aspect is implemented.

[0043] In a fifth aspect, an embodiment of the present application provides a computer program product, including a computer program. When the computer program is executed by a processor, it implements the terminal device grouping control method described in the first aspect and various possible designs of the first aspect.

[0044] The embodiments of the present application provide a method, apparatus and electronic device for grouping and controlling terminal devices, which can be applied to target edge devices. After adopting the above scheme, the target terminal device group corresponding to the target business can be determined first, and the target terminal device group includes at least one target terminal device that has passed authentication and successfully registered. Then, the device group information corresponding to the target terminal device group can be generated, and the device group information can also be synchronized to each target terminal device in the target terminal device group, so that the target terminal device adds other target terminal devices in the target terminal device group to the security list according to the device group information, and configures the addresses of other target terminal devices in the target terminal device group to the address list. Then, the target business can be realized through the synchronized target terminal device group. By adding the target edge device to the structural system of the terminal device and the management server, and determining the target terminal device group corresponding to the target edge device, the edge device can realize the control of the terminal device, reduce the workload of the management server, and improve the management efficiency of the terminal device. In the synchronized target terminal device group, data can be directly transmitted without verification again, thereby improving the data transmission efficiency and ensuring the implementation effect of related services. BRIEF DESCRIPTION OF THE DRAWINGS

[0045] In order to more clearly illustrate the embodiments of the present application or the technical solutions in the prior art, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present application. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative labor.

[0046] Figure 1 A schematic diagram of the architecture of an application system for the terminal device grouping control method provided in an embodiment of the present application;

[0047] Figure 2A schematic diagram of a process flow of a terminal device grouping control method provided in an embodiment of the present application;

[0048] Figure 3 It is a schematic diagram of the application of the business architecture in the prior art;

[0049] Figure 4 A schematic diagram of the application of the business architecture of the terminal device group control method provided in the embodiment of the present application;

[0050] Figure 5 A schematic diagram of the structure of the terminal device grouping control device provided in an embodiment of the present application;

[0051] Figure 6 A schematic diagram of the hardware structure of an electronic device provided in an embodiment of the present application. DETAILED DESCRIPTION

[0052] The following will be combined with the drawings in the embodiments of the present application to clearly and completely describe the technical solutions in the embodiments of the present application. Obviously, the described embodiments are only part of the embodiments of the present application, not all of the embodiments. Based on the embodiments in the present application, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of this application.

[0053] The terms "first", "second", "third", "fourth", etc. (if any) in the specification and claims of the present application and the above-mentioned drawings are used to distinguish similar objects, and are not necessarily used to describe a specific order or sequence. It should be understood that the data used in this way can be interchangeable where appropriate, so that the embodiments of the present application described herein can also include other sequential instances in addition to those illustrated or described. In addition, the terms "including" and "having" and any of their variations are intended to cover non-exclusive inclusions, for example, a process, method, system, product or device that includes a series of steps or units is not necessarily limited to those steps or units that are clearly listed, but may include other steps or units that are not clearly listed or inherent to these processes, methods, products or devices.

[0054] In the prior art, with the development of informatization and electronicization, more and more businesses are implemented through terminal devices, especially in the political and legal system. When implementing related businesses, only the structural system that supports the interaction between the terminal device and the management server is supported, that is, the management server is responsible for controlling and processing the terminal device, such as registering and logging in the terminal device. However, since all terminal devices need to be processed by the management server, the workload of the management server is greatly increased, the management efficiency of the terminal device is reduced, and the implementation effect of related businesses is affected.

[0055] Based on the above technical problems, the present application can realize the control of the edge device over the end device by adding a target edge device to the structural system of the end device and the management server, and determining the target end device group corresponding to the target edge device, thereby reducing the workload of the management server and improving the management efficiency of the end device. In the synchronized target end device group, data can be transmitted directly without the need for re-verification, thereby improving the data transmission efficiency and ensuring the technical effect of the implementation of related businesses.

[0056] Figure 1 The schematic diagram of the architecture of the application system of the terminal device group control method provided in the embodiment of the present application is as follows: Figure 1 As shown, in this embodiment, a target edge device 101 and a target terminal device 102 may be included, and there may be one or more target terminal devices 102, which are terminal devices that have been authenticated and successfully registered with the target edge device 101. In addition, the target terminal device 102 may be a terminal device that has been successfully registered with a local target edge device, or may be a terminal device that has been successfully registered with other target edge devices, or may be a terminal device that has been successfully registered with a management platform deployed in a management server, which will not be limited in detail here.

[0057] In addition, a target end device group corresponding to the target business to be realized can be determined first, and the target end device group includes multiple target end devices 102, and then device group information corresponding to the target end device group can be generated, and the device group information can also be synchronized to each target end device 102 in the target end device group. The target end device 102 adds other target end devices in the target end device group to the security list according to the device group information, and configures the addresses of other target end devices in the target end device group to the address list. Then, the target business is realized through the synchronized target end device group.

[0058] The technical solution of the present application is described in detail with specific embodiments below. The following specific embodiments can be combined with each other, and the same or similar concepts or processes may not be described in detail in some embodiments.

[0059] Figure 2 This is a flow chart of a method for grouping and controlling end devices provided in an embodiment of the present application. The method of this embodiment can be executed by the target edge device 101. Figure 2 As shown, the method of this embodiment may include:

[0060] S201: Determine a target end device group corresponding to a target service, wherein the target end device group includes at least one target end device, and the target end device is an end device that has passed authentication and registration successfully.

[0061] In this embodiment, the corresponding target end device group can be determined according to the actual needs of the target business, that is, the equipment required to implement the business can be determined according to the actual needs of the target business. The target end device group includes one or more target end devices, each of which is a necessary device for implementing the target business. Optionally, the target business can be a business related to the political and legal system.

[0062] In addition, there are multiple ways to determine the target end device group corresponding to the target service.

[0063] Optionally, in an implementation manner, determining the target end device group corresponding to the target service may include:

[0064] Determine the target end equipment required to achieve the target business.

[0065] A target end device group is generated according to the target end devices required to implement the target service.

[0066] Specifically, when determining the target end device group corresponding to the target service, the devices required to implement the target service may be determined according to actual needs, and then the target end device group may be generated according to the devices required to implement the target service.

[0067] In addition, when determining the target end device required to achieve the target business, the touch operation of the operation and maintenance personnel on the device selection interface can be responded to to determine the target end device required to achieve the target business, and then generate a target end device group according to the target end device required to achieve the target business. The touch operation can be any one of a single click operation, a double click operation, a heavy press operation or a long press operation.

[0068] Optionally, in another implementation, determining the target end device group corresponding to the target service may include:

[0069] Determine a target end device corresponding to the target service.

[0070] A target-end device group is determined according to the manager information contained in the target-end device, wherein the target-end devices contained in the same target-end device group correspond to the same manager information.

[0071] Specifically, generally the same target business corresponds to the same manager information. Therefore, when determining the target end device group corresponding to the target business, you can first determine a target end device corresponding to the target business, and then you can obtain other target end devices containing the same manager information based on the manager information contained in the target end device, and determine the target end device group based on all target end devices containing the same manager information.

[0072] In summary, by adopting different methods to determine the target end device group, the flexibility and convenience of the target end device group determination method are improved.

[0073] In addition, the target end device may be an end device that has been authenticated and successfully registered. Optionally, the target end device may be an end device that has been authenticated and successfully registered on the target edge device to which it belongs, or an end device that has been authenticated and successfully registered on other edge devices (i.e., across regions), or an end device that has been authenticated and successfully registered on a management platform deployed in a management server, which will not be further limited here.

[0074] S202: Generate device group information corresponding to the target device group.

[0075] In this embodiment, after determining the target end device group corresponding to the target service, device group information corresponding to the target end device group may be generated. The device group information may include the device group name, the IP (Internet Protocol Address, Internet Protocol) address, MAC (Media Access Control, Media Access Control) address, port, and device level (used to limit the sending and receiving permissions between devices) of the target end devices included in the group.

[0076] In addition, there are multiple ways to generate device group information corresponding to the target device group. There can be two types of target devices included in the target device group. One is that all the target devices included in the target device group belong to the same edge device, and the other is that the target devices included in the target device group do not belong to the same edge device, that is, they include cross-regional target devices. Different ways can be used to generate device group information for different situations.

[0077] The end device that each edge device is responsible for is pre-set. For example, the end device that each edge device is responsible for can be determined based on the distance. The details will not be limited here.

[0078] Optionally, in an implementation manner, generating the device group information corresponding to the target end device group may specifically include:

[0079] If all the target devices in the target device group belong to the target edge device, corresponding device group information is generated according to the target devices in the target device group, wherein the device group information includes at least one of the device group name, the IP address, MAC address, port and device level of the target devices included in the group.

[0080] Specifically, if all target devices in the target device group belong to target edge devices, that is, all target devices in the target device group belong to the same edge device, the target edge device can directly determine the relevant parameters required for the device group information, and then generate the device group information according to the relevant parameters.

[0081] The IP address, MAC address, port and device level of the target device in the group included in the device group information can be pre-stored in the target edge device or obtained from the corresponding target device in real time. The device group name can be randomly generated or pre-defined.

[0082] Optionally, in another implementation, generating the device group information corresponding to the target device group may specifically include:

[0083] If the target end device group includes a target end device that does not belong to the target edge device, a query request is sent to the management server, wherein the query request includes a device identifier of the target end device that does not belong to the target edge device.

[0084] Receive the target end device information corresponding to the device identification sent by the management server.

[0085] Corresponding device group information is generated based on the target end device information and the device information corresponding to the target end device belonging to the target edge device in the target end device group, wherein the device group information includes at least one of the device group name, the IP address, MAC address, port and device level of the target end device included in the group.

[0086] Specifically, if the target device group includes a target device that does not belong to the target edge device, that is, the target devices in the target device group do not belong to the same edge device and include target devices across edge devices, then the target edge device can first send a query request to the management server, wherein the query request includes the device identifier of the target device that does not belong to the target edge device. After receiving the query request, the management server can obtain the target device information corresponding to the device identifier included in the query request (that is, the information corresponding to the target device that does not belong to the target edge device), and then can send the target device information to the target edge device.

[0087] In addition, after receiving the target end device information corresponding to the device identifier sent by the management server, the target edge device can generate corresponding device group information according to the target end device information and the device information corresponding to the target end device belonging to the target edge device in the target end device group. The device group information may include the device group name, the IP address, MAC address, port and device level of the target end device included in the group.

[0088] S203: Synchronize the device group information to each target device in the target device group, so that the target device adds other target devices in the target device group to the security list according to the device group information, and configures the addresses of other target devices in the target device group to the address list.

[0089] In this embodiment, after the target end device group is created, the device group information can be synchronized to each target end device in the target end device group, that is, the target edge device synchronizes the device group information (device group name, IP address, MAC address, port, device level, etc. of each member in the group) to all device members in the group.

[0090] In addition, after receiving the device group information, the target device can add other target devices corresponding to the device group information to the security list, and can also configure the addresses of other target devices in the target device group to the address list (also known as the IP Table whitelist). The links between the devices in the configured group can be directly transmitted, and other devices outside the group cannot be directly interconnected.

[0091] S204: Implement the target service through the synchronized target end device group.

[0092] In this embodiment, the target-end devices in the synchronized target-end device group can directly communicate with each other, that is, the target service can be realized through the synchronized target-end device group.

[0093] Exemplarily, in the process of realizing the target business through the synchronized target end device group, the target business can be realized through the interaction between the target end devices and the target end devices, or through the interaction between the target end devices and the target edge devices, or through the interaction between the target end devices and the target edge devices, or through interaction with the management platform in the management server, which is not limited in detail here.

[0094] After adopting the above scheme, the target end device group corresponding to the target business can be determined first, and the target end device group contains at least one target end device that has passed the authentication and successfully registered. Then, the device group information corresponding to the target end device group can be generated, and the device group information can also be synchronized to each target end device in the target end device group, so that the target end device can add other target end devices in the target end device group to the security list according to the device group information, and configure the addresses of other target end devices in the target end device group to the address list. Then, the target business can be realized through the synchronized target end device group. By adding the target edge device to the structural system of the end device and the management server, and determining the target end device group corresponding to the target edge device, the edge device can realize the management and control of the end device, reduce the workload of the management server, and improve the management efficiency of the end device. In the synchronized target end device group, data can be transmitted directly without verification again, thereby improving the data transmission efficiency and ensuring the implementation effect of related services.

[0095] based on Figure 2 The method, the examples of this specification also provide some specific implementation plans of the method, which are described below.

[0096] In addition, in another embodiment, before determining the target end device group corresponding to the target service, the following method may be further included:

[0097] Acquire at least one target end device within a preset range.

[0098] Perform two-way authentication with the at least one target end device, and after the two-way authentication passes, establish a connection with each target end device.

[0099] In this embodiment, before grouping the target end devices, a connection may be established between the target end devices and the corresponding target edge devices.

[0100] In addition, before establishing a connection between the target end device and the corresponding target edge device, the target end device to be connected can be determined first. Optionally, in order to improve data transmission efficiency, at least one target end device within a preset range centered on the target edge device can be obtained, and then the obtained at least one target end device can be connected to the target edge device.

[0101] In addition, before establishing a connection, the target edge device can also be bidirectionally authenticated with at least one target end device obtained, and after the authentication is passed, the target edge device can establish a connection with each target end device. Among them, the authentication can be performed by means of a trusted PKI device certificate issued by the political and legal system. Correspondingly, the management platform, the target edge device, and the target end device can all have a trusted PKI device certificate issued by the political and legal system, and then they can be replaced through the existing air-issuing method of the political and legal system.

[0102] In addition, there may be multiple ways to establish a connection between the target edge device and each target end device.

[0103] Optionally, in one implementation, establishing a connection with each target end device may include:

[0104] If the target edge device supports Bluetooth connection, a connection is established with each target end device through at least one connection method selected from the Bluetooth whitelist, secure local area network, NFC, USB and secure wireless communication.

[0105] Specifically, there are two types of target edge devices, one that supports Bluetooth connection and the other that does not support Bluetooth connection. If the target edge device supports Bluetooth connection, when establishing a connection with the target end device, it can establish a connection with each target end device through at least one connection method selected from the Bluetooth whitelist, secure LAN, NFC (Near Field Communication), USB (Universal Serial Bus) and secure wireless communication.

[0106] Optionally, in another implementation, establishing a connection with each target end device may include:

[0107] If the target edge device does not support Bluetooth connection, a connection is established with each target terminal device through at least one connection method selected from secure local area network, NFC, USB and secure wireless communication.

[0108] If the target device only supports Bluetooth connection, a connection is established with the target device that only supports Bluetooth connection through the smart terminal.

[0109] Specifically, if the target edge device does not support Bluetooth connection, it means that when the target end device only supports Bluetooth connection, it cannot directly establish a connection with the target edge device. The target edge device can establish a connection with the target end device that only supports Bluetooth connection through a smart terminal that supports both Bluetooth connection and non-Bluetooth connection methods.

[0110] In addition, for other target-end devices, a connection can be established with each target-end device through at least one connection method selected from a secure local area network, NFC, USB, and secure wireless communication.

[0111] In addition, each target edge device can also establish a connection with the management platform deployed in the management server.

[0112] Figure 3 This is a schematic diagram of the application of the business architecture in the existing technology, which can be applied to the political and legal system, such as Figure 3 As shown, in the prior art, the end device can be a tablet, recorder, smart phone, smart screen or computer and other devices that support wired or wireless transmission. Smart watches that only support Bluetooth transmission cannot be connected to the link, and all end devices interact directly with the management platform, which greatly increases the workload of the management platform.

[0113] Figure 4 The application diagram of the business architecture of the terminal device group control method provided in the embodiment of the present application can also be applied to the political and legal system, such as Figure 4 As shown, in this embodiment, an edge device (also called an edge device, i.e., an intelligent gateway or a gateway-type terminal) is added to the transmission link between the management platform and the terminal device. Different edge devices correspond to different terminal devices, and some edge devices support Bluetooth connection while others do not. For edge devices that do not support Bluetooth connection, transmission can be performed through a smartphone that supports Bluetooth connection and other transmission methods, and the addition of edge devices can improve the management efficiency of the terminal device.

[0114] In addition, end devices can also be grouped according to the business. For example, the target end device group required can be selected according to the business, that is, the group can be created by the edge administrator. For more convenient use, the edge device can automatically establish a device group, that is, an automatic group, for the devices of the same user according to the information of the device user carried in the information reported by the end-side device, and the management policy of the automatic device group is the same as the device group created by the administrator, that is, members in the group can access each other, and devices outside the group cannot communicate with each other. The platform administrator can also see all the end devices that have successfully registered and logged in on the platform, and manually select the required end-side devices according to the work scenario to create a cross-edge trusted device group. After the cross-edge device group is successfully created, the management platform will send the device group information (device group name, IP address, MAC address, port, device level, etc. of each member in the group) to each edge device, and the edge device will send the device group information to each end device. After the end-side device receives the cross-edge group information, it will add other members in the group to the security access list and configure the addresses of the group members to the IP Table whitelist. Only members in the group can transmit links to communicate with each other, and other devices outside the group cannot communicate with each other.

[0115] In summary, within the political and legal system, by adding edge devices, namely smart gateways or gateway-type terminals, security management and control can be performed directly on the proximal devices, and multiple communication methods are supported for access, thereby improving the flexibility and efficiency of end device management and control.

[0116] In addition, for some terminal devices, the screen is relatively small or there is no screen, which makes it inconvenient to operate. Based on the safe and reliable device grouping management method, after the target terminal device group is created, the data can flow within the group. There is no need to operate the small-screen or screenless devices in each group separately. You only need to perform corresponding business processing on the large screen corresponding to the target terminal device group, thereby improving work efficiency.

[0117] In addition, in another embodiment, before determining the target end device group corresponding to the target service, the following method may be further included:

[0118] The device information sent by the at least one target end device is received, and registration of each target end device is implemented according to the device information.

[0119] The device information is synchronized to the management platform deployed in the management server.

[0120] In this embodiment, after the target edge device establishes a connection with the target end device, the target edge device can also receive device information sent by at least one target end device, and register the corresponding target end device according to the device information. The registered device information can also be synchronized to the management platform deployed in the management server.

[0121] In addition, in another embodiment, a secure data link system for implementing target services related to the political and legal system may include a management platform, edge devices (intelligent gateways or gateway-type terminals) and end devices (terminals, recorders, tablets, watches and other end-type devices used by the political and legal system). The management platform, edge devices and end devices all have trusted PKI (Public Key Infrastructure) device certificates issued by the political and legal system, which can be replaced through the existing air-to-air certification method of the political and legal system. For edge devices that support Bluetooth connections, the edge devices support end devices to access through various wired or secure wireless communication methods such as Bluetooth whitelists, secure LANs, NFC, USB, etc. For edge devices that do not support Bluetooth access, Bluetooth devices can be accessed through smartphones that support Bluetooth whitelists. When establishing a connection, the edge device and the end device need to perform two-way authentication. After the two-way certificate authentication is passed, the edge device and the end device are mutually trusted devices. The authenticated edge device and the end device can use DTLS (Datagram Transport Layer Security) to establish an encrypted transmission channel. The end device can report all device information (SN (Serial No, product serial number), device owner information, IP address, MAC address, port, device level, etc.) to the edge device on this channel to complete registration and login. The edge device can decide whether to report the registration and login information to the management platform according to work needs.

[0122] The edge administrator can see all the end devices that have passed the two-way trusted authentication and successfully registered and logged in on the edge device. According to the work scenario, manually select the required end devices from the trusted device list to create a trusted device group (i.e., the target end device group). After the device group is successfully created, the edge device can synchronize the device group information (device group name, IP address, MAC address, port, device level, etc. of each member in the group) to all device members in the group. After receiving the group information, the end device adds other members in the group to the security access list and configures the address of the group member to the IP Table. Only members in the group can transmit links to each other, and other devices outside the group cannot communicate with each other. The platform administrator can see all the end devices that have successfully registered and logged in on the platform. According to the work scenario, manually select the required end-side devices to create a cross-edge trusted device group. After the cross-edge device group is successfully created, the management platform sends the device group information (device group name, IP address, MAC address, port, device level, etc. of each member in the group) to each edge device, and the edge device then sends the device group information to each end device. After receiving the cross-edge group information, the end device adds other group members to the security access list and configures the addresses of the group members to the IP Table whitelist. Only members within the group can communicate with each other through transmission links, and other devices outside the group cannot communicate with each other. For easier use, the edge device can automatically create a device group, i.e., an automatic group, for the devices of the same user based on the information of the device user carried in the information reported by the end device. The management policy of the automatic device group is the same as that of the device group created by the administrator, i.e., members within the group can access each other, and devices outside the group cannot communicate with each other.

[0123] The target edge device is any device among the edge devices.

[0124] Based on the same idea, the embodiments of this specification also provide a device corresponding to the above method. Figure 5 A schematic diagram of the structure of the terminal device grouping control device provided in the embodiment of the present application, such as Figure 5 As shown, the device provided in this embodiment, applied to a target edge device, may include:

[0125] The determination module 501 is used to determine a target end device group corresponding to a target service, wherein the target end device group includes at least one target end device, and the target end device is an end device that has passed authentication and registration successfully.

[0126] In this embodiment, in one implementation, the determining module 501 is further configured to:

[0127] Determine the target end equipment required to achieve the target business.

[0128] A target end device group is generated according to the target end devices required to implement the target service.

[0129] In another implementation, the determining module 501 is further configured to:

[0130] Determine a target end device corresponding to the target service.

[0131] A target-end device group is determined according to the manager information contained in the target-end device, wherein the target-end devices contained in the same target-end device group correspond to the same manager information.

[0132] The processing module 502 is used to generate device group information corresponding to the target end device group.

[0133] In this embodiment, in one implementation, the processing module 502 is further configured to:

[0134] If all the target devices in the target device group belong to the target edge device, corresponding device group information is generated according to the target devices in the target device group, wherein the device group information includes at least one of the device group name, the IP address, MAC address, port and device level of the target devices included in the group.

[0135] In another implementation, the processing module 502 is further configured to:

[0136] If the target end device group includes a target end device that does not belong to the target edge device, a query request is sent to the management server, wherein the query request includes a device identifier of the target end device that does not belong to the target edge device.

[0137] Receive the target end device information corresponding to the device identification sent by the management server.

[0138] Corresponding device group information is generated based on the target end device information and the device information corresponding to the target end device belonging to the target edge device in the target end device group, wherein the device group information includes at least one of the device group name, the IP address, MAC address, port and device level of the target end device included in the group.

[0139] The processing module 502 is also used to synchronize the device group information to each target device in the target device group, so that the target device adds other target devices in the target device group to the security list according to the device group information, and configures the addresses of other target devices in the target device group to the address list.

[0140] The processing module 502 is further configured to implement the target service through the synchronized target end device group.

[0141] In addition, in another embodiment, the processing module 502 is further configured to:

[0142] Acquire at least one target end device within a preset range.

[0143] Perform two-way authentication with the at least one target end device, and after the two-way authentication passes, establish a connection with each target end device.

[0144] In this embodiment, the processing module 502 is further used for:

[0145] If the target edge device supports Bluetooth connection, a connection is established with each target end device through at least one connection method selected from the Bluetooth whitelist, secure local area network, NFC, USB and secure wireless communication.

[0146] In addition, the processing module 502 is further used for:

[0147] If the target edge device does not support Bluetooth connection, a connection is established with each target terminal device through at least one connection method selected from secure local area network, NFC, USB and secure wireless communication.

[0148] If the target device only supports Bluetooth connection, a connection is established with the target device that only supports Bluetooth connection through the smart terminal.

[0149] In addition, in another embodiment, the processing module 502 is further configured to:

[0150] The device information sent by the at least one target end device is received, and registration of each target end device is implemented according to the device information.

[0151] The device information is synchronized to the management platform deployed in the management server.

[0152] The device provided in the embodiment of the present application can realize the above-mentioned Figure 2 The implementation principle and technical effect of the method in the embodiment shown are similar and will not be described in detail here.

[0153] Figure 6 A schematic diagram of the hardware structure of an electronic device provided in an embodiment of the present application is shown in FIG. Figure 6 As shown, the device 600 provided in this embodiment includes: a processor 601 and a memory connected to the processor in communication. The processor 601 and the memory 602 are connected via a bus 603 .

[0154] In a specific implementation process, the processor 601 executes the computer execution instructions stored in the memory 602, so that the processor 601 executes the method in the above method embodiment.

[0155] The specific implementation process of the processor 601 can be found in the above method embodiment, and its implementation principle and technical effect are similar, so this embodiment will not be repeated here.

[0156] In the above Figure 6 In the illustrated embodiment, it should be understood that the processor may be a central processing unit (CPU), or other general-purpose processors, digital signal processors (DSP), application-specific integrated circuits (ASIC), etc. A general-purpose processor may be a microprocessor or any conventional processor. The steps of the method disclosed in the invention may be directly implemented as being executed by a hardware processor, or may be executed by a combination of hardware and software modules in the processor.

[0157] The memory may include a high-speed RAM memory, and may also include a non-volatile storage NVM, such as at least one disk storage.

[0158] The bus may be an Industry Standard Architecture (ISA) bus, a Peripheral Component Interconnect (PCI) bus, or an Extended Industry Standard Architecture (EISA) bus, etc. The bus may be divided into an address bus, a data bus, a control bus, etc. For ease of representation, the bus in the drawings of the present application is not limited to only one bus or one type of bus.

[0159] An embodiment of the present application also provides a computer-readable storage medium, in which computer execution instructions are stored. When a processor executes the computer execution instructions, the terminal device grouping control method of the above method embodiment is implemented.

[0160] An embodiment of the present application also provides a computer program product, including a computer program, which, when executed by a processor, implements the terminal device grouping management and control method as described above.

[0161] The computer-readable storage medium mentioned above can be implemented by any type of volatile or non-volatile storage device or a combination thereof, such as static random access memory (SRAM), electrically erasable programmable read-only memory (EEPROM), erasable programmable read-only memory (EPROM), programmable read-only memory (PROM), read-only memory (ROM), magnetic memory, flash memory, magnetic disk or optical disk. The readable storage medium can be any available medium that can be accessed by a general or special-purpose computer.

[0162] An exemplary readable storage medium is coupled to a processor so that the processor can read information from the readable storage medium and write information to the readable storage medium. Of course, the readable storage medium can also be a component of the processor. The processor and the readable storage medium can be located in an application specific integrated circuit (Application Specific Integrated Circuits, referred to as: ASIC). Of course, the processor and the readable storage medium can also exist in the device as discrete components.

[0163] Those skilled in the art can understand that all or part of the steps of implementing the above-mentioned method embodiments can be completed by hardware related to program instructions. The aforementioned program can be stored in a computer-readable storage medium. When the program is executed, the steps of the above-mentioned method embodiments are executed; and the aforementioned storage medium includes: ROM, RAM, disk or optical disk and other media that can store program codes.

[0164] Finally, it should be noted that the above embodiments are only used to illustrate the technical solutions of the present application, rather than to limit it. Although the present application has been described in detail with reference to the aforementioned embodiments, those skilled in the art should understand that they can still modify the technical solutions described in the aforementioned embodiments, or replace some or all of the technical features therein with equivalents. However, these modifications or replacements do not cause the essence of the corresponding technical solutions to deviate from the scope of the technical solutions of the embodiments of the present application.

Claims

1. A method for controlling terminal devices in groups, characterized in that: Applied to target edge devices, including: Determine a target end device group corresponding to the target service, wherein the target end device group includes at least one target end device, and the target end device is an end device that has passed authentication and registration successfully; Generate device group information corresponding to the target device group; Synchronize the device group information to each target device in the target device group, so that the target device adds other target devices in the target device group to the security list according to the device group information, and configures the addresses of other target devices in the target device group to the address list; The target service is realized through the synchronized target end device group.

2. The method according to claim 1, characterized in that The step of determining a target end device group corresponding to the target service includes: Determine the target end equipment required to achieve the target business; A target end device group is generated according to the target end devices required to implement the target service.

3. The method according to claim 1, characterized in that The step of determining a target end device group corresponding to the target service includes: Determine a target end device corresponding to the target service; A target-end device group is determined according to the manager information contained in the target-end device, wherein the target-end devices contained in the same target-end device group correspond to the same manager information.

4. The method according to claim 1, characterized in that The generating device group information corresponding to the target end device group includes: If all the target devices in the target device group belong to the target edge device, corresponding device group information is generated according to the target devices in the target device group, wherein the device group information includes at least one of the device group name, the IP address, MAC address, port and device level of the target devices included in the group.

5. The method according to claim 1, characterized in that The generating device group information corresponding to the target end device group includes: If the target end device group includes a target end device that does not belong to the target edge device, sending a query request to the management server, wherein the query request includes a device identifier of the target end device that does not belong to the target edge device; Receiving target end device information corresponding to the device identifier sent by the management server; Corresponding device group information is generated based on the target end device information and the device information corresponding to the target end device belonging to the target edge device in the target end device group, wherein the device group information includes at least one of the device group name, the IP address, MAC address, port and device level of the target end device included in the group.

6. The method according to any one of claims 1 to 5, characterized in that: Before determining the target end device group corresponding to the target service, the method further includes: Acquire at least one target end device within a preset range; Perform two-way authentication with the at least one target end device, and after the two-way authentication passes, establish a connection with each target end device.

7. The method according to claim 6, characterized in that The step of establishing a connection with each target end device includes: If the target edge device supports Bluetooth connection, a connection is established with each target end device through at least one connection method selected from the Bluetooth whitelist, secure local area network, NFC, USB and secure wireless communication.

8. The method according to claim 6, characterized in that The step of establishing a connection with each target end device includes: If the target edge device does not support Bluetooth connection, establish a connection with each target end device through at least one connection method selected from secure local area network, NFC, USB and secure wireless communication; If the target device only supports Bluetooth connection, a connection is established with the target device that only supports Bluetooth connection through the smart terminal.

9. The method according to any one of claims 1 to 5, characterized in that: Before determining the target end device group corresponding to the target service, the method further includes: Receiving device information sent by the at least one target end device, and implementing registration of each target end device according to the device information; The device information is synchronized to a management platform deployed in a management server.

10. A terminal device group control device, characterized in that: Applied to target edge devices, including: A determination module, used to determine a target end device group corresponding to a target service, wherein the target end device group includes at least one target end device, and the target end device is an end device that has passed authentication and registration successfully; A processing module, used to generate device group information corresponding to the target end device group; The processing module is further used to synchronize the device group information to each target-end device in the target-end device group, so that the target-end device adds other target-end devices in the target-end device group to the security list according to the device group information, and configures the addresses of other target-end devices in the target-end device group to the address list; The processing module is further configured to implement the target service through the synchronized target end device group.

11. An electronic device, characterized in that: include: A processor, and a memory communicatively connected to the processor; The memory stores computer-executable instructions; The processor executes the computer-executable instructions stored in the memory to implement the terminal device grouping management and control method as described in any one of claims 1 to 9.

12. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores computer-executable instructions. When the processor executes the computer-executable instructions, the terminal device grouping management and control method as described in any one of claims 1 to 9 is implemented.

13. A computer program product, comprising a computer program, characterized in that When the computer program is executed by a processor, the terminal device grouping control method as described in any one of claims 1 to 9 is implemented.

Images