Control method and device of host equipment, storage medium and electronic equipment

By verifying and managing the identity information and connection information of the host device in a distributed system, ensuring that the host device legally joins the initial device link in the distributed system, solving the problem of low control efficiency of the host device and achieving more efficient and secure Equipment control.

CN119155265AActive Publication Date: 2024-12-17INSPUR SUZHOU INTELLIGENT TECH CO LTD
View PDF 8 Cites 0 Cited by

Patent Information

Application Number
CN202411194802.0
Authority / Receiving Office
CN · China
Patent Type
Applications(China)
Current Assignee / Owner
Filing Date
2024-08-28
Publication Date
2024-12-17
Estimated Expiration
2044-08-28

AI Technical Summary

Technical Problem

The control efficiency of host devices in distributed systems is low due to allow erroneous operation and overprivileged operation, and the prior art has failed to effectively solve this problem.

Method used

By setting up an initial device link in a distributed system, using the identity information of the target account and the connection information to verify the belonging relationship of the host device, ensuring that the host device joins the initial device link when allowed, thus forming a target device link and preventing Remote operation.

Benefits of technology

It improves the control efficiency of the host device, prevents remote operation caused by unauthorized host device addition, and enhances the security and transparency of the system.

✦ Generated by Eureka AI based on patent content.

Smart Images

  • Figure CN119155265A_ABST
    Figure CN119155265A_ABST
Patent Text Reader

Abstract

The embodiment of the invention provides a host equipment control method and device, a storage medium and electronic equipment, and the method comprises the steps: receiving a target joining request sent by a target account; in response to the target joining request, first identity information of the first host device is used to extract second identity information of a second host device and connection information of the second host device, and the connection information is used to indicate a connection relationship between the second host device and other host devices in the distributed system; verifying the attribution of the second host device relative to the initial device link according to the second identity information and the connection information; and under the condition that the attribution is used for indicating that the second host equipment is allowed to belong to the initial equipment link, adding the second host equipment into the initial equipment link to obtain a target equipment link. Through the method and the device, the problem that the control efficiency of the host equipment is relatively low is solved, and the effect of improving the control efficiency of the host equipment is further achieved.
Need to check novelty before this filing date? Find Prior Art

Description

Technical Field

[0001] The embodiments of the present application relate to the field of computers, and in particular, to a control method, device, storage medium and electronic device for a host device. Background Art

[0002] The user logs in to the host device in the distributed system and then controls multiple host devices by connecting the host devices. However, since the host device is allowed to be logged in by the user and connected by other host devices, accidents may occur due to misoperation, remote operation, and unauthorized operation of the host device.

[0003] In view of the problems in the related art such as low control efficiency of the host device, no effective solution has been proposed yet. Summary of the invention

[0004] Embodiments of the present application provide a control method, apparatus, storage medium, and electronic device for a host device, so as to at least solve the problem of low control efficiency of the host device in the related art.

[0005] According to an embodiment of the present application, a method for controlling a host device is provided, wherein a distributed system includes N host devices, wherein M host devices of the N host devices are connected to each other to form an initial device link, wherein the host devices in the initial device link all have identity information for indicating that the host device belongs to a target device network, and wherein the initial device link is configured to allow the M host devices to be controlled through a target account, wherein the method is applied to a first host device in the initial device link, and wherein the method includes:

[0006] receiving a target joining request sent by the target account, wherein the target joining request is used to request to join a second host device among the NM host devices to the initial device link;

[0007] In response to the target joining request, extracting the second identity information of the second host device and the connection information of the second host device using the first identity information of the first host device, wherein the connection information is used to indicate a connection relationship between the second host device and other host devices in the distributed system;

[0008] Verifying the attribution of the second host device to the initial device link according to the second identity information and the connection information;

[0009] In a case where the attribution is used to indicate that the second host device is allowed to belong to the initial device link, the second host device is added to the initial device link to obtain a target device link.

[0010] In an exemplary embodiment, the extracting the second identity information of the second host device and the connection information of the second host device using the first identity information of the first host device includes: obtaining a first registration code of the first host device in the target device network as the first identity information, wherein the first registration code is used to indicate a unique identifier of the first host device in the target device network; sending the first identity information and a first status code of the first host device to the second host device, wherein the second host device is used to search for the first identity information from first account book information of a reference device network to which the second host device belongs when the first identity information and the first status code are received, and when the first identity information is found, parse the first status code, and when the first status code is used to indicate that the first host device is allowed to connect to other host devices, extract the second registration code of the second host device as the second identity information, and extract the second status code of the second host device as the connection information of the second host device, wherein the first account book information is used to record the registration codes corresponding to the host devices included in the reference device network; and receiving the second identity information and the connection information sent by the second host device in response to the first identity information and the first status code.

[0011] In an exemplary embodiment, the verifying the attribution of the second host device relative to the initial device link based on the second identity information and the connection information includes: verifying whether the second host device belongs to the target device network based on the second identity information and second ledger information of the target device network, wherein the second identity information is a registration code of the second host device in the device network to which the second host device belongs, and the second ledger information is used to record the registration codes corresponding to the host devices included in the target device network; verifying whether the second host device is allowed to connect with other host devices based on the connection information; and when it is verified that the second host device belongs to the target device network and that the second host device is allowed to connect with other host devices, determining the attribution to indicate that the second host device is allowed to belong to the initial device link.

[0012] In an exemplary embodiment, the verifying whether the second host device belongs to the target device network according to the second identity information and the second account book information of the target device network includes: searching the second identity information from the second account book information; if the second identity information is found from the second account book information, determining and verifying that the second host device belongs to the target device network; if the second identity information is not found from the second account book information, determining and verifying that the second host device does not belong to the target device network; the verifying whether the second host device is allowed to connect with other host devices according to the connection information includes: if the connection information is used to indicate that the second host device does not have a connection relationship with other host devices in the distributed system, determining and verifying that the second host device is allowed to connect with other host devices; if the connection information is used to indicate that the second host device has a connection relationship with other host devices in the distributed system, determining and verifying that the second host device is not allowed to connect with other host devices.

[0013] In an exemplary embodiment, adding the second host device to the initial device link to obtain the target device link includes: obtaining a reference account of the second host device and an account and password corresponding to the reference account; logging into the second host device using the reference account and the account and password corresponding to the reference account; and determining that the second host device has been added to the initial device link after logging into the second host device using the reference account and the account and password corresponding to the reference account, and determining the initial device link with the second host device added as the target device link.

[0014] In an exemplary embodiment, after adding the second host device to the initial device link to obtain the target device link, the method further includes: generating a joining record for adding the second host device to the initial device link, wherein the joining record carries a timestamp for adding the second host device to the initial device link and event information for adding the second host device to the initial device link; sending the joining record to each host device included in the target device network, wherein each host device included in the target device network is configured to write the joining record into the third ledger information corresponding to each host device when receiving the joining record.

[0015] In an exemplary embodiment, the method further includes: detecting whether the first host device is the first host device in the target device link; when the first host device is the first host device in the target device link and, in the case of receiving a local operation instruction, disconnecting the connection between the first host device and the second host device, wherein the local operation instruction is an operation instruction issued by an external device on the first host device; when the first host device is not the first host device in the target device link and, in the case of receiving the local operation instruction, disconnecting the connection between the first host device and the last host device connected to the first host device, and the connection between the first host device and the second host device; when the first host device is the first host device in the target device link and, in the case of receiving a reference joining request, disconnecting the connection between the first host device and the second host device in response to the reference joining request, wherein the reference joining request The request is used to request the first host device to join other device links; when the first host device is not the first host device of the target device link and, in the case of receiving the reference joining request, responding to the reference joining request, disconnecting the connection between the first host device and the last host device connected to the first host device, and the connection between the first host device and the second host device; when the first host device is the first host device of the target device link and, in the case of exceeding a time threshold without receiving an account operation instruction issued by the target account, disconnecting the connection between the first host device and the second host device; when the first host device is not the first host device of the target device link and, in the case of exceeding the time threshold without receiving the account operation instruction issued by the target account, disconnecting the connection between the first host device and the last host device connected to the first host device, and the connection between the first host device and the second host device.

[0016] According to another embodiment of the present application, a control device for a host device is provided, wherein a distributed system includes N host devices, wherein M host devices of the N host devices are connected to each other to form an initial device link, wherein the host devices in the initial device link all have identity information for indicating that the host devices belong to a target device network, and wherein the initial device link is configured to allow the M host devices to be controlled through a target account, wherein the device is applied to a first host device in the initial device link, and wherein the device includes:

[0017] A receiving module, configured to receive a target joining request sent by the target account, wherein the target joining request is used to request to join a second host device among the NM host devices to the initial device link;

[0018] an extraction module, configured to respond to the target joining request and extract the second identity information of the second host device and the connection information of the second host device using the first identity information of the first host device, wherein the connection information is used to indicate a connection relationship between the second host device and other host devices in the distributed system;

[0019] a verification module, configured to verify the attribution of the second host device to the initial device link according to the second identity information and the connection information;

[0020] The adding module is used to add the second host device to the initial device link to obtain a target device link when the attribution attribute indicates that the second host device is allowed to belong to the initial device link.

[0021] According to another embodiment of the present application, a computer-readable storage medium is provided, in which a computer program is stored, wherein the computer program is configured to execute the steps of any of the above method embodiments when run.

[0022] According to another embodiment of the present application, an electronic device is provided, including a memory and a processor, wherein the memory stores a computer program, and the processor is configured to run the computer program to execute the steps in any one of the above method embodiments.

[0023] According to another embodiment of the present application, a computer program product is provided, including a computer program, and when the computer program is executed by a processor, the steps in any of the above method embodiments are implemented.

[0024] Through the present application, a target joining request sent by a target account is received, wherein the target joining request is used to request that a second host device among NM host devices be added to the initial device link; in response to the target joining request, the second identity information of the second host device and the connection information of the second host device are extracted using the first identity information of the first host device, wherein the connection information is used to indicate the connection relationship between the second host device and other host devices in the distributed system; the attribution of the second host device relative to the initial device link is verified according to the second identity information and the connection information; when the attribution is used to indicate that the second host device is allowed to belong to the initial device link, the second host device is added to the initial device link to obtain the target device link. Because before the second host device is added to the initial device link, it is ensured that the second host device is allowed to belong to the initial device link, and remote regulation operations are prevented when the second host device is not allowed to belong to the initial device link, the problem of low control efficiency of the host device can be solved, thereby achieving the effect of improving the control efficiency of the host device. BRIEF DESCRIPTION OF THE DRAWINGS

[0025] Figure 1 It is a hardware structure block diagram of a server device of a host device control method according to an embodiment of the present application;

[0026] Figure 2 is a flow chart of a control method of a host device according to an embodiment of the present application;

[0027] Figure 3 is a schematic diagram of a process of host A controlling host B according to an embodiment of the present application;

[0028] Figure 4 is a flow chart of disconnecting a first host device from a second host device according to an embodiment of the present application;

[0029] Figure 5 is a schematic diagram of a target device network according to an embodiment of the present application;

[0030] Figure 6 is a structural block diagram of a control device of a host device according to an embodiment of the present application;

[0031] Figure 7 It is a structural block diagram of an electronic device according to an embodiment of the present application. DETAILED DESCRIPTION

[0032] The embodiments of the present application will be described in detail below with reference to the accompanying drawings and in combination with the embodiments.

[0033] It should be noted that the terms "first", "second", etc. in the specification and claims of this application and the above-mentioned drawings are used to distinguish similar objects, and are not necessarily used to describe a specific order or sequence.

[0034] The method embodiments provided in the embodiments of the present application can be executed in a server device or a similar computing device. Taking running on a server device as an example, Figure 1 1 is a hardware structure block diagram of a server device of a host device control method according to an embodiment of the present application. Figure 1 As shown, the server device may include one or more ( Figure 1 Only one is shown in the figure) a processor 102 (the processor 102 may include but is not limited to a processing device such as a microprocessor MCU or a programmable logic device FPGA) and a memory 104 for storing data, wherein the server device may also include a transmission device 106 and an input / output device 108 for communication functions. It can be understood by those skilled in the art that Figure 1 The structure shown is only for illustration and does not limit the structure of the above server device. Figure 1 More or fewer components as shown, or with Figure 1 Different configurations are shown.

[0035] The memory 104 can be used to store computer programs, for example, software programs and modules of application software, such as the computer program corresponding to the control method of the host device in the embodiment of the present application. The processor 102 executes various functional applications and data processing by running the computer program stored in the memory 104, that is, to implement the above method. The memory 104 may include a high-speed random access memory, and may also include a non-volatile memory, such as one or more magnetic storage devices, flash memory, or other non-volatile solid-state memory. In some examples, the memory 104 may further include a memory remotely arranged relative to the processor 102, and these remote memories may be connected to the server device via a network. Examples of the above-mentioned network include, but are not limited to, the Internet, an intranet, a local area network, a mobile communication network, and combinations thereof.

[0036] The transmission device 106 is used to receive or send data via a network. The specific example of the above network may include a wireless network provided by a communication provider of the server device. In one example, the transmission device 106 includes a network adapter (Network Interface Controller, referred to as NIC), which can be connected to other network devices through a base station so as to communicate with the Internet. In one example, the transmission device 106 can be a radio frequency (RF) module, which is used to communicate with the Internet wirelessly.

[0037] In this embodiment, a control method for a host device is provided. A distributed system includes N host devices. M host devices of the N host devices are connected to each other to form an initial device link. The host devices in the initial device link all have identity information for indicating that the host device belongs to a target device network. The initial device link is configured to allow the M host devices to be controlled by a target account. The method is applied to a first host device in the initial device link. Figure 2 is a flow chart of a control method of a host device according to an embodiment of the present application. Figure 2 As shown, the process includes the following steps:

[0038] Step S202, receiving a target joining request sent by the target account, wherein the target joining request is used to request to join a second host device among the NM host devices to the initial device link;

[0039] Step S204, in response to the target joining request, extracting the second identity information of the second host device and the connection information of the second host device using the first identity information of the first host device, wherein the connection information is used to indicate a connection relationship between the second host device and other host devices in the distributed system;

[0040] Step S206, verifying the attribution of the second host device to the initial device link according to the second identity information and the connection information;

[0041] Step S208: When the attribution is used to indicate that the second host device is allowed to belong to the initial device link, the second host device is added to the initial device link to obtain a target device link.

[0042] Through the above steps, a target joining request sent by a target account is received, wherein the target joining request is used to request that a second host device among NM host devices be added to the initial device link; in response to the target joining request, the second identity information of the second host device and the connection information of the second host device are extracted using the first identity information of the first host device, wherein the connection information is used to indicate the connection relationship between the second host device and other host devices in the distributed system; the attribution of the second host device relative to the initial device link is verified according to the second identity information and the connection information; when the attribution is used to indicate that the second host device is allowed to belong to the initial device link, the second host device is added to the initial device link to obtain the target device link. Because before the second host device is added to the initial device link, it is ensured that the second host device is allowed to belong to the initial device link, and remote regulation operations are prevented when the second host device is not allowed to belong to the initial device link, the problem of low control efficiency of the host device can be solved, thereby achieving the effect of improving the control efficiency of the host device.

[0043] Optionally, in this embodiment, the host device control method proposed in this application is used in a wide range of scenarios, which may include but are not limited to: operation and maintenance personnel monitoring the behavior of the host device, operation and maintenance personnel controlling the host device to perform operations, etc. In the following embodiments, the usage scenarios are not limited, and the host device control method proposed in this application can be used in any scenario that requires controlling one or more host devices through a target account.

[0044] Optionally, in this embodiment, the above-mentioned distributed system includes N host devices, N is an integer greater than 1, and multiple host devices among the N host devices can be connected to each other to form one or more device links, for example: taking the distributed system including host device 1, host device 2, host device 3, host device 4 and host device 5 as an example, it can be but not limited to connecting host device 1 with host device 2 to form device link 1, connecting host device 3, host device 4 and host device 5 in sequence to form device link 2, etc.

[0045] Optionally, in this embodiment, for host devices belonging to the same initial device link, they all have identity information for indicating that the host device belongs to the target device network, and can be no less than screening P host devices from the N host devices included in the distributed system to join the target device network, and then connecting M host devices among the P host devices that have joined the target device network to each other to form an initial device link, where P is a positive integer less than or equal to N, and M is an integer less than or equal to P and greater than 1.

[0046] Optionally, in this embodiment, it is possible but not limited to installing a remote control authority management program in the N host devices included in the distributed system, and the remote control authority management program is used to add the host device with the remote control authority management program installed to the same target device network, and assign the host device that has joined the target device network its identity information in the target device network, such as: using the remote control authority management program installed in each host device to form a blockchain network with multiple host devices that have the remote control authority management program installed and are reachable through the network, and randomly generate a unique registration code for each host device as the identity information of the host device in the blockchain network. It should be noted that the registration code cannot be changed and is strongly bound to the current host device. The host device can use, but is not limited to, the private key and public key derived from the registration code to perform identity authentication between host devices in the target device network, and each host device connected to the target device network will automatically obtain all account book data in the current target device network after completing the registration and authentication.

[0047] Optionally, in this embodiment, it is possible but not limited to allow host devices belonging to the target device network to be remotely interconnected in a P2P (Peer to Peer, peer-to-peer network) format.

[0048] In the technical solution provided in the above step S202, the user can, but is not limited to, send a request to the initial device link and the host device in the initial device link through the target account, for example: the user sends a target joining request to request to add the second host device among the NM host devices to the initial device link through the target account to the host device in the initial device link, the user sends an account operation instruction to control the host device in the initial device link to perform an operation through the target account to the host device in the initial device link, etc.

[0049] In the technical solution provided in the above step S204, it is possible but not limited to that in the process of adding the first host device to the target device network, a unique identifier in the target device network is assigned to the first host device as the first identity information of the first host device, for example: the first host device is added to the target device network using a remote control authority management program installed on the first host device, and a unique registration code is randomly generated for each first host device as the first identity information of the first host device in the target device network.

[0050] Optionally, in this embodiment, the first identity information of the first host device may be sent to the second host device but is not limited to obtain the second identity information and the connection information of the second host device returned by the second host device. Alternatively, the second identity information and the connection information of the second host device may be obtained by other means.

[0051] In an exemplary embodiment, the first identity information of the first host device may be used to extract the second identity information of the second host device and the connection information of the second host device in the following manner, but is not limited to: obtaining a first registration code of the first host device in the target device network as the first identity information, wherein the first registration code is used to indicate a unique identifier of the first host device in the target device network; sending the first identity information and the first status code of the first host device to the second host device, wherein the second host device is used to search for the first identity information from the first ledger information of the reference device network to which the second host device belongs when the first identity information and the first status code are received, and when the first identity information is found, parse the first status code, and when the first status code is used to indicate that the first host device is allowed to connect to other host devices, extract the second registration code of the second host device as the second identity information, and extract the second status code of the second host device as the connection information of the second host device, wherein the first ledger information is used to record the registration codes corresponding to the host devices included in the reference device network; and receiving the second identity information and the connection information sent by the second host device in response to the first identity information and the first status code.

[0052] Optionally, in this embodiment, it is possible but not limited to generate a status code for each host device included in the target device network based on whether each host device exists in the device link, for example: when the host device exists in the device link, the status code of the host device is set to 1; when the host device does not exist in the device link, the status code of the host device is set to 0. In other words, when the status code of the host device is 1, it is considered that the host device has a connection relationship with other host devices, that is, it has been controlled to respond to requests issued by a specific account; when the status code of the host device is 0, it is considered that the host device has no connection relationship with other host devices, that is, the host device is not controlled and is allowed to join the device link. Further, the status code can also be used to indicate the position of the host device in the device link, for example: the status code of the host device is set to 1-N, N is the position of the host device in the device link, etc.

[0053] Optionally, in this embodiment, the last host device in the device link may still be allowed to connect to the next host device. Therefore, the status code of the host device may be set to ANB, where N is the position of the host device in the device link, A is used to indicate whether there is a previous host device connected to the host device in the initial device link, and B is used to indicate whether there is a next host device connected to the host device in the initial device link. For example, taking the status code of the host device as 1-3-0, it can be seen that the host device is the third host device in the initial device link and the last host device in the initial device link.

[0054] Optionally, in this embodiment, the first registration code and the first status code of the first host device are sent to the second host device, and the second host device can be, but is not limited to, used to verify the connection status of the first host device based on the first registration code and the first status code of the first host device. For example: when it is determined according to the first registration code that the first host device and the second host device belong to the same device network, and when it is determined according to the first status code that the first host device allows the host device to be connected, the second host device determines that the connection status of the first host device is to allow the first host device to connect to the second host device.

[0055] Optionally, in this embodiment, when the second host device detects that the first status code is used to indicate that the first host device is allowed to connect to other host devices, the second host device extracts the second registration code of the second host device as the second identity information, and extracts the second status code of the second host device as the connection information of the second host device and sends it to the first host device.

[0056] In an exemplary embodiment, the first identity information of the first host device can be used, but is not limited to, in the following manner to extract the second identity information of the second host device and the connection information of the second host device: obtaining a first registration code of the first host device in the target device network as the first identity information, wherein the first registration code is used to indicate a unique identifier of the first host device in the target device network; using the first identity information and a first status code of the first host device to generate a first verification request, wherein the first verification request carries a target private key generated according to the first identity information; sending the first verification request to the second host device, wherein the second host device is used to extract the target private key from the first verification request upon receiving the first verification request, and extract the target private key from the first verification request; The method comprises: searching for a target public key corresponding to the target private key in the fourth ledger information of the reference device network to which the second host device belongs; parsing the first status code when the target public key is found; and extracting the second registration code of the second host device as the second identity information when the first status code is used to indicate that the first host device is allowed to connect to other host devices, and extracting the second status code of the second host device as the connection information of the second host device, wherein the first ledger information is used to record the registration codes corresponding to the host devices included in the reference device network, and the fourth ledger information is used to record the public keys and private keys corresponding to the host devices included in the reference device network; and receiving the second identity information and the connection information sent by the second host device in response to the first identity information and the first status code.

[0057] Optionally, in this embodiment, host devices belonging to the same device network may, but are not limited to, have the same account book information and a registration code that is unique in the device network. The host device may, but is not limited to, use a private key and a public key derived from its registration code to perform identity authentication between host devices in the device network. For example, the host device retains the private key and broadcasts the public key in the device network. The host device in the device network can parse the information sent by the host device through the public key and authenticate that the information it receives belongs to the host device corresponding to the public key.

[0058] Optionally, in this embodiment, taking the target device network as a blockchain and the initial device link as a control link constructed in the blockchain by the control method of the host device proposed in this application as an example, when the user requests to add the host device to the device link, all remote control operations will be recorded on the blockchain, providing an unalterable audit trail, improving the security of the system, reducing the risk of single point failure of the centralized authentication server, and increasing the transparency of operations.

[0059] In the technical solution provided in the above step S206, the first host device can, but is not limited to, verify whether the second host device belongs to the target device network based on the second identity information, and verify whether the second host device is allowed to connect to other host devices (be controlled by other host devices) based on the connection information. When the second host device belongs to the target device network and the second host device is allowed to connect to other host devices, determining the attribution of the second host device relative to the initial device link is used to indicate that the second host device is allowed to belong to the initial device link.

[0060] In an exemplary embodiment, the attribution of the second host device relative to the initial device link can be verified based on the second identity information and the connection information in the following manner, but is not limited to: verifying whether the second host device belongs to the target device network based on the second identity information and the second ledger information of the target device network, wherein the second identity information is the registration code of the second host device in the device network to which the second host device belongs, and the second ledger information is used to record the registration codes corresponding to the host devices included in the target device network; verifying whether the second host device is allowed to connect with other host devices based on the connection information; and when it is verified that the second host device belongs to the target device network and that the second host device is allowed to connect with other host devices, determining the attribution to indicate that the second host device is allowed to belong to the initial device link.

[0061] Optionally, in this embodiment, the registration code corresponding to the second identity information may be searched in the second account book information, but is not limited to, and when the registration code corresponding to the second identity information is found in the second account book information, it is determined that the second host device belongs to the target device network based on the second identity information and the second account book information of the target device network; or, when the registration code corresponding to the second identity information is not found in the second account book information, it is determined that the second host device does not belong to the target device network based on the second identity information and the second account book information of the target device network.

[0062] Optionally, in this embodiment, the connection information of the second host device is the status code of the second host device, and the meaning of the status code of the second host device can be parsed but is not limited to determining whether the second host device is allowed to connect with other host devices. For example, taking the status code of 0 indicating that the host device is not controlled by other hosts (i.e., the host device has not joined the device link), and the status code of 1 indicating that the host device has been controlled by other hosts (i.e., the host device has joined the device link), when the status code of the second host device is equal to 0, it is determined that the second host device is allowed to connect with other host devices.

[0063] It should be noted that, in the process of the second host device verifying the first host device, it is necessary to verify whether the first host device is allowed to control other host devices, that is, the first host device is not a host device that has joined the device link, or the first host device is the last host device in the device link before it is determined to allow the first host device to connect with other host devices; in the process of the first host device verifying the second host device, it is necessary to verify that the second host device is not a host device that has joined the device link before it is determined to allow the second host device to connect with other host devices. This is to ensure that when the second host device is added to the initial device link, it will not interfere with the working process of the device link where the second host device is originally located. Therefore, only when the second host device is a host device that has not joined the device link, it is allowed to join the initial device link.

[0064] In an exemplary embodiment, the following method may be used to verify whether the second host device belongs to the target device network according to the second identity information and the second account book information of the target device network, including: searching the second identity information from the second account book information; when the second identity information is found from the second account book information, determining to verify that the second host device belongs to the target device network; when the second identity information is not found from the second account book information, determining to verify that the second host device does not belong to the target device network; the following method may be used to verify whether the second host device is allowed to connect with other host devices according to the connection information, but not limited to: when the connection information is used to indicate that the second host device does not have a connection relationship with other host devices in the distributed system, determining to verify that the second host device is allowed to connect with other host devices; when the connection information is used to indicate that the second host device has a connection relationship with other host devices in the distributed system, determining to verify that the second host device is not allowed to connect with other host devices.

[0065] Optionally, in the present embodiment, the first host device and the second host device realize mutual authentication through the above process, ensuring that both the first host device and the second host device establishing the connection are verified legal entities, reducing the risk of being impersonated by a malicious third party, and preventing man-in-the-middle attacks by verifying the identity of the other party, ensuring that the data subsequently transmitted through the link is directly transmitted between the intended communicating parties. After the communicating parties verify their identities with each other, a trust relationship can be established, laying the foundation for further communication and data exchange, and mutual authentication can strengthen access control policies to ensure that only authorized hosts can access sensitive resources.

[0066] In the technical solution provided in the above step S208, the first host device can, but is not limited to, establish a connection with the second host device to add the second host device to the initial device link to obtain the target device link.

[0067] In an exemplary embodiment, the second host device can be added to the initial device link to obtain the target device link in the following manner, but is not limited to: obtaining a reference account of the second host device and the account password corresponding to the reference account; logging into the second host device using the reference account and the account password corresponding to the reference account; after logging into the second host device using the reference account and the account password corresponding to the reference account, determining that the second host device has been added to the initial device link, and determining the initial device link that has added the second host device as the target device link.

[0068] In an exemplary embodiment, after the second host device is added to the initial device link to obtain the target device link, the following method may be used but is not limited to: generating a joining record for adding the second host device to the initial device link, wherein the joining record carries a timestamp for adding the second host device to the initial device link and event information for adding the second host device to the initial device link; sending the joining record to each host device included in the target device network, wherein each host device included in the target device network is used to write the joining record into the third ledger information corresponding to each host device when receiving the joining record.

[0069] In an exemplary embodiment, an example of a process in which host A controls host B is provided. Figure 3 is a schematic diagram of a process of host A controlling host B according to an embodiment of the present application, such as Figure 3 As shown, taking the first host device as host A and the second host device as host B as an example, host A can obtain the control right of host B through but not limited to the following methods to achieve remote control of host B:

[0070] When host A attempts to remotely connect to host B, host A sends its own authentication information (first registration code) and status code to host B, and tries to connect to host B; host B determines that host A and host B belong to the same device network based on host A's own authentication information, and determines that host A is allowed to connect to the host device based on host A's status code; after host B passes the identity authentication of host A, it feedbacks its own authentication information (second registration code) and status code to host A; host A verifies host B based on host B's own authentication information and status code; after host A passes the identity authentication of host B, it logs in to host B using the account and password; if host B verifies the account and password, host A is allowed to remotely control host B, and host A obtains control of host B. When the user password verification is passed, host B changes its own status code to 1 and broadcasts the current new control chain to the target device network based on the control chain existing in host A plus itself, and host A will also broadcast the current new control chain to the target device network based on host B's response. The account host in the target device network will confirm the information of this remote control based on the public information of host A and host B and record it in the data account book.

[0071] Moreover, during the mutual verification process between host A and host B, if either party fails to verify the other party, the other party's IP and other information will be broadcast and recorded in the log.

[0072] In an exemplary embodiment, Figure 4 is a flow chart of disconnecting a first host device from a second host device according to an embodiment of the present application, such as Figure 4 As shown, disconnection between the first host device and the second host device can be achieved by, but not limited to, the following steps:

[0073] Step S402: Detect whether the first host device is the first host device in the target device link; Step S404: If the first host device is the first host device in the target device link and, in the case where a local operation instruction is received, disconnect the connection between the first host device and the second host device, wherein the local operation instruction is an operation instruction issued by an external device on the first host device; If the first host device is not the first host device in the target device link and, in the case where the local operation instruction is received, disconnect the connection between the first host device and the last host device connected to the first host device, and disconnect the connection between the first host device and the second host device;

[0074] Step S406: when the first host device is the first host device of the target device link and, in the case of receiving a reference joining request, responding to the reference joining request, disconnecting the connection between the first host device and the second host device, wherein the reference joining request is used to request the first host device to join other device links; when the first host device is not the first host device of the target device link and, in the case of receiving the reference joining request, responding to the reference joining request, disconnecting the connection between the first host device and the last host device connected to the first host device, and the connection between the first host device and the second host device;

[0075] Step S408: When the first host device is the first host device of the target device link and the account operation instruction issued by the target account is not received within a time threshold, disconnect the connection between the first host device and the second host device; when the first host device is not the first host device of the target device link and the account operation instruction issued by the target account is not received within the time threshold, disconnect the connection between the first host device and the previous host device connected to the first host device, and disconnect the connection between the first host device and the second host device.

[0076] Optionally, in this embodiment, the above processes can be executed simultaneously in the control method of the host device proposed in this application, but are not limited to, and step S404, step S406 and step S408 can be executed in parallel, that is, when any situation in step S404, step S406 and step S408 is detected, the corresponding step can be executed.

[0077] In the technical solution provided in the above step S404, when the first host device receives a local IO control device (local operation instruction) such as a mouse or keyboard, the connection between the first host device and the second host device is disconnected. Furthermore, when the first host device has a host device at the upper level connected, the connection with the upper level host device continues to be disconnected.

[0078] In the technical solution provided in the above step S406, when other host devices attempt to connect to the first host device, the first host device disconnects from the second host device, and further, when the first host device has a host device connected to the upper level, the connection with the upper level host device continues to be disconnected.

[0079] In the technical solution provided in the above step S408, when the time for the first host device not to receive the account operation instruction (which may include but is not limited to including a join request and a control instruction to the host device in the target device link, etc.) issued by the target account exceeds a time threshold, the first host device disconnects from the second host device, and further, when the first host device has a host device at the upper level connected, the connection with the upper level host device continues to be disconnected.

[0080] Optionally, in this embodiment, when the target device link changes, the host device that has changed may, but is not limited to, actively modify its own status code and broadcast it to the host device at the next level.

[0081] Optionally, in this embodiment, taking the target device network as a blockchain network as an example, the control method of the host device proposed in this application provides a distributed remote control authority management system based on blockchain. The method and system provide a safe, reliable and transparent remote control authority management system through blockchain technology, which effectively prevents unauthorized operations and improves the authority control capability of the host device. The control chain integrity protection mechanism ensures the security of multi-level remote control. In addition, all operations are recorded on the blockchain, providing real-time auditing and tracking capabilities, which helps to quickly discover and respond to security incidents.

[0082] Optionally, in this embodiment, in order to better understand the above-mentioned target device network in the control method of the host device proposed in this application, the above-mentioned process is described below in conjunction with an optional embodiment, but is not used to limit the technical solution of the embodiment of this application.

[0083] In one exemplary embodiment, an example of a target device network is provided. Figure 5 is a schematic diagram of a target device network according to an embodiment of the present application, such as Figure 5 As shown, taking the target device network including host device A, host device B, host device C and host device D as an example of a blockchain network, the network-reachable host devices A, host device B, host device C and host device D form a blockchain network by installing a remote control authority management program, and the host devices A, host device B, host device C and host device D have unique identities in the blockchain network and are remotely interconnected in a P2P form. In other words, for host devices A, host device B, host device C and host device D, they are all allowed to authenticate each other and establish a connection to form a device link.

[0084] After installation, the remote control permission management program will randomly generate a unique registration code for the current host device. The registration code cannot be changed and is strongly bound to the current host device. The private key and public key derived from the registration code are used for identity authentication between host devices in the blockchain network.

[0085] Each host device connected to the blockchain network will automatically obtain all the ledger data in the current blockchain after completing the registration and authentication. Each host device connected to the blockchain network has a status code. The default is 0, indicating that it is not controlled by other hosts. When other host devices remotely control it, the status code will be set to 1, indicating that it is in a remotely controlled state.

[0086] The remote control rights of the host device are protected by the registration code and status code, and only other authenticated host devices in the blockchain network are allowed to remotely control it, and remote control of hosts outside the blockchain network authentication is isolated and rejected. In addition, when the current host device is identified as being under remote control, and the local IO control devices such as the mouse and keyboard have input (when the local operation is identified), the upper and lower connections in the control chain will be actively disconnected.

[0087] When remote control is required between host devices, the unique signature information sent by the other party in the blockchain is used for authentication. The signature in the broadcast information is also used to confirm whether the sender is a legitimate host in the blockchain. When communication is required between host devices in the blockchain network, the communication data transmission between hosts is encrypted to achieve encrypted transmission of communication data between different hosts in the entire system.

[0088] By logging events in the blockchain network, it records the event information of establishing connections, disconnecting connections, success or failure of authentication, etc. directly controlled by different hosts according to the timestamp. In addition, it can, but is not limited to, hash the log information and other data in the target device network to generate the hash code of the current block, receive and process the broadcast information of other hosts in the blockchain, broadcast the event information of this host, execute blockchain contracts, etc. In addition, it is also responsible for completing the storage and update of the host status code.

[0089] In the control method of the host device proposed in the present application, the immutability and decentralization characteristics of the blockchain are used to enhance the security and transparency of remote control, and then distributed authentication of user identity and authority is performed through the blockchain network to ensure that only authorized users can perform remote control operations. The host devices perform mutual authentication before establishing a remote control session, which increases security. The use of smart contracts to automatically perform permission checks and operation log records reduces manual intervention and improves efficiency and security. The system maintains complete control chain records to ensure that each link of multi-level remote control is authorized and verified. If any host in the control chain is controlled by an unauthorized user, the system will automatically disconnect the control chain of the host and all subsequent hosts, and require the user to re-authenticate. All remote control operations will be recorded on the blockchain, providing an unalterable audit trail. Through the above mechanism, the system can effectively prevent unauthorized operations and unauthorized access, thereby enhancing the security of the jump server.

[0090] Through the description of the above implementation methods, those skilled in the art can clearly understand that the method according to the above embodiment can be implemented by means of software plus a necessary general hardware platform, and of course by hardware, but in many cases the former is a better implementation method. Based on this understanding, the technical solution of the present application, or the part that contributes to the relevant technology, can be embodied in the form of a software product, which is stored in a storage medium (such as ROM / RAM, disk, CD), and includes a number of instructions for a terminal device (which can be a mobile phone, computer, server, or network device, etc.) to execute the methods described in each embodiment of the present application.

[0091] In this embodiment, a control device for a host device is also provided, the distributed system includes N host devices, M host devices of the N host devices are interconnected to form an initial device link, the host devices in the initial device link all have identity information for indicating that the host device belongs to the target device network, the initial device link is configured to allow the M host devices to be controlled by the target account, the device is applied to the first host device in the initial device link, the device is used to implement the above-mentioned embodiments and preferred implementation modes, and those that have been explained will not be repeated. As used below, the term "module" can implement a combination of software and / or hardware for a predetermined function. Although the devices described in the following embodiments are preferably implemented in software, implementation in hardware, or a combination of software and hardware, is also possible and conceivable.

[0092] Figure 6 is a structural block diagram of a control device of a host device according to an embodiment of the present application, such as Figure 6 As shown, the device comprises:

[0093] A receiving module 62, configured to receive a target joining request sent by the target account, wherein the target joining request is used to request to join a second host device among the NM host devices to the initial device link;

[0094] an extraction module 64, configured to respond to the target joining request and extract the second identity information of the second host device and the connection information of the second host device using the first identity information of the first host device, wherein the connection information is used to indicate a connection relationship between the second host device and other host devices in the distributed system;

[0095] A verification module 66, configured to verify the attribution of the second host device to the initial device link according to the second identity information and the connection information;

[0096] The adding module 68 is configured to add the second host device to the initial device link to obtain a target device link when the attribution attribute indicates that the second host device is allowed to belong to the initial device link.

[0097] Through the above-mentioned device, a target joining request sent by a target account is received, wherein the target joining request is used to request that a second host device among NM host devices be added to the initial device link; in response to the target joining request, the second identity information of the second host device and the connection information of the second host device are extracted using the first identity information of the first host device, wherein the connection information is used to indicate the connection relationship between the second host device and other host devices in the distributed system; the attribution of the second host device relative to the initial device link is verified according to the second identity information and the connection information; when the attribution is used to indicate that the second host device is allowed to belong to the initial device link, the second host device is added to the initial device link to obtain the target device link. Because before the second host device is added to the initial device link, it is ensured that the second host device is allowed to belong to the initial device link, and remote regulation operations are prevented when the second host device is not allowed to belong to the initial device link, the problem of low control efficiency of the host device can be solved, thereby achieving the effect of improving the control efficiency of the host device.

[0098] In an exemplary embodiment, the extraction module comprises:

[0099] A first acquiring unit, configured to acquire a first registration code of the first host device in the target device network as the first identity information, wherein the first registration code is used to indicate a unique identifier of the first host device in the target device network;

[0100] a sending unit, configured to send the first identity information and the first status code of the first host device to the second host device, wherein the second host device is configured to search for the first identity information from the first account book information of the reference device network to which the second host device belongs when the first identity information and the first status code are received, and to parse the first status code when the first identity information is found, and to extract the second registration code of the second host device as the second identity information and the second status code of the second host device as the connection information of the second host device when the first status code is used to indicate that the first host device is allowed to connect to other host devices, and the first account book information is used to record the registration codes corresponding to the host devices included in the reference device network;

[0101] A receiving unit is used to receive the second identity information and the connection information sent by the second host device in response to the first identity information and the first status code.

[0102] In an exemplary embodiment, the verification module includes:

[0103] a first verification unit, configured to verify whether the second host device belongs to the target device network according to the second identity information and second account book information of the target device network, wherein the second identity information is a registration code of the second host device in the device network to which the second host device belongs, and the second account book information is used to record the registration codes corresponding to the host devices included in the target device network;

[0104] a second verification unit, configured to verify whether the second host device is allowed to connect to other host devices according to the connection information;

[0105] The first determining unit is used to determine that the attribution is used to indicate that the second host device is allowed to belong to the initial device link when it is verified that the second host device belongs to the target device network and the second host device is allowed to connect to other host devices.

[0106] In an exemplary embodiment, the first verification unit is further used to: search for the second identity information from the second account book information; if the second identity information is found from the second account book information, determine and verify that the second host device belongs to the target device network; if the second identity information is not found from the second account book information, determine and verify that the second host device does not belong to the target device network; the second verification unit is further used to: if the connection information is used to indicate that the second host device does not have a connection relationship with other host devices in the distributed system, determine and verify that the second host device is allowed to connect with other host devices; if the connection information is used to indicate that the second host device has a connection relationship with other host devices in the distributed system, determine and verify that the second host device is not allowed to connect with other host devices.

[0107] In an exemplary embodiment, the joining module comprises:

[0108] A second acquiring unit, configured to acquire a reference account of the second host device and an account password corresponding to the reference account;

[0109] A login unit, configured to log in to the second host device using the reference account and the account password corresponding to the reference account;

[0110] The second determination unit is used to determine that the second host device has been added to the initial device link when the second host device is logged in using the reference account and the account password corresponding to the reference account, and determine the initial device link with the second host device as the target device link.

[0111] In an exemplary embodiment, after adding the second host device to the initial device link to obtain the target device link, the apparatus further includes:

[0112] a generating module, configured to generate a joining record of adding the second host device to the initial device link, wherein the joining record carries a timestamp of adding the second host device to the initial device link and event information of adding the second host device to the initial device link;

[0113] A sending module is used to send the joining record to each host device included in the target device network, wherein each host device included in the target device network is used to write the joining record into the third account book information corresponding to each host device when receiving the joining record.

[0114] In an exemplary embodiment, the apparatus further comprises:

[0115] A detection module, used to detect whether the first host device is the first host device in the target device link;

[0116] a first disconnection module, configured to disconnect the connection between the first host device and the second host device when the first host device is the first host device of the target device link and receives a local operation instruction, wherein the local operation instruction is an operation instruction issued by an external device on the first host device; a second disconnection module, configured to disconnect the connection between the first host device and the last host device connected to the first host device, and the connection between the first host device and the second host device when the first host device is not the first host device of the target device link and receives the local operation instruction;

[0117] a third disconnection module, configured to disconnect the connection between the first host device and the second host device in response to a reference joining request when the first host device is the first host device of the target device link and receives the reference joining request, wherein the reference joining request is used to request the first host device to join other device links; a fourth disconnection module, configured to disconnect the connection between the first host device and the last host device connected to the first host device, and the connection between the first host device and the second host device in response to the reference joining request when the first host device is not the first host device of the target device link and receives the reference joining request;

[0118] a fifth disconnection module, for disconnecting the connection between the first host device and the second host device when the first host device is the first host device of the target device link and the account operation instruction issued by the target account is not received within a time threshold; a sixth disconnection module, for disconnecting the connection between the first host device and the previous host device connected to the first host device, and the connection between the first host device and the second host device when the first host device is not the first host device of the target device link and the account operation instruction issued by the target account is not received within the time threshold.

[0119] It should be noted that the above modules can be implemented by software or hardware. For the latter, it can be implemented in the following ways, but not limited to: the above modules are all located in the same processor; or the above modules are located in different processors in any combination.

[0120] An embodiment of the present application further provides a computer-readable storage medium, in which a computer program is stored, wherein the computer program is configured to execute the steps of any of the above method embodiments when running.

[0121] In an exemplary embodiment, the computer-readable storage medium may include, but is not limited to, various media that can store computer programs, such as a USB flash drive, a read-only memory (ROM), a random access memory (RAM), a mobile hard disk, a magnetic disk or an optical disk.

[0122] An embodiment of the present application further provides an electronic device, Figure 7 is a structural block diagram of an electronic device according to an embodiment of the present application, such as Figure 7 As shown, the electronic device includes a memory and a processor, the memory stores a computer program, and the processor is configured to run the computer program to execute the steps in any one of the method embodiments described above.

[0123] In an exemplary embodiment, the electronic device may further include a transmission device and an input / output device, wherein the transmission device is connected to the processor, and the input / output device is connected to the processor.

[0124] An embodiment of the present application further provides a computer program product, which includes a computer program. When the computer program is executed by a processor, the steps in any one of the above method embodiments are implemented.

[0125] An embodiment of the present application further provides another computer program product, including a non-volatile computer-readable storage medium, wherein the non-volatile computer-readable storage medium stores a computer program, and when the computer program is executed by a processor, the steps in any of the above method embodiments are implemented.

[0126] The embodiments of the present application also provide a computer program, which includes computer instructions stored in a computer-readable storage medium; a processor of a computer device reads the computer instructions from the computer-readable storage medium, and the processor executes the computer instructions, so that the computer device performs the steps of any one of the above method embodiments.

[0127] For specific examples in this embodiment, reference may be made to the examples described in the above embodiments and exemplary implementation modes, and this embodiment will not be described in detail herein.

[0128] Obviously, those skilled in the art should understand that the above modules or steps of the present application can be implemented by a general computing device, they can be concentrated on a single computing device, or distributed on a network composed of multiple computing devices, they can be implemented by a program code executable by a computing device, so that they can be stored in a storage device and executed by the computing device, and in some cases, the steps shown or described can be executed in a different order from that herein, or they can be made into individual integrated circuit modules, or multiple modules or steps therein can be made into a single integrated circuit module for implementation. Thus, the present application is not limited to any specific combination of hardware and software.

[0129] The above description is only the preferred embodiment of the present application and is not intended to limit the present application. For those skilled in the art, the present application may have various modifications and variations. Any modification, equivalent replacement, improvement, etc. made within the principles of the present application shall be included in the protection scope of the present application.

Claims

1. A control method for a host device, characterized in that: A distributed system includes N host devices, M host devices of the N host devices are connected to each other to form an initial device link, the host devices in the initial device link all have identity information for indicating that the host device belongs to a target device network, the initial device link is configured to allow the M host devices to be controlled by a target account, the method is applied to a first host device in the initial device link, and the method includes: receiving a target joining request sent by the target account, wherein the target joining request is used to request to join a second host device among the NM host devices to the initial device link; In response to the target joining request, extracting the second identity information of the second host device and the connection information of the second host device using the first identity information of the first host device, wherein the connection information is used to indicate a connection relationship between the second host device and other host devices in the distributed system; Verifying the attribution of the second host device to the initial device link according to the second identity information and the connection information; In a case where the attribution is used to indicate that the second host device is allowed to belong to the initial device link, the second host device is added to the initial device link to obtain a target device link.

2. The method according to claim 1, characterized in that The extracting the second identity information of the second host device and the connection information of the second host device by using the first identity information of the first host device includes: Acquire a first registration code of the first host device in the target device network as the first identity information, wherein the first registration code is used to indicate a unique identifier of the first host device in the target device network; sending the first identity information and the first status code of the first host device to the second host device, wherein the second host device is used to search for the first identity information from the first account book information of the reference device network to which the second host device belongs when receiving the first identity information and the first status code, and parse the first status code when the first identity information is found, and extract the second registration code of the second host device as the second identity information when the first status code is used to indicate that the first host device is allowed to connect to other host devices, and extract the second status code of the second host device as the connection information of the second host device, wherein the first account book information is used to record the registration codes corresponding to the host devices included in the reference device network; The second identity information and the connection information are received, which are sent by the second host device in response to the first identity information and the first status code.

3. The method according to claim 1, characterized in that The verifying the attribution of the second host device relative to the initial device link according to the second identity information and the connection information includes: Verifying whether the second host device belongs to the target device network according to the second identity information and the second account book information of the target device network, wherein the second identity information is a registration code of the second host device in the device network to which the second host device belongs, and the second account book information is used to record the registration codes corresponding to the host devices included in the target device network; Verifying whether the second host device is allowed to connect to other host devices according to the connection information; When it is verified that the second host device belongs to the target device network and the second host device is allowed to connect with other host devices, the attribution is determined to indicate that the second host device is allowed to belong to the initial device link.

4. The method according to claim 3, characterized in that The verifying whether the second host device belongs to the target device network according to the second identity information and the second account book information of the target device network includes: searching the second identity information from the second account book information; if the second identity information is found from the second account book information, determining and verifying that the second host device belongs to the target device network; if the second identity information is not found from the second account book information, determining and verifying that the second host device does not belong to the target device network; The verifying whether the second host device is allowed to connect with other host devices based on the connection information includes: when the connection information is used to indicate that the second host device does not have a connection relationship with other host devices in the distributed system, determining and verifying that the second host device is allowed to connect with other host devices; when the connection information is used to indicate that the second host device has a connection relationship with other host devices in the distributed system, determining and verifying that the second host device is not allowed to connect with other host devices.

5. The method according to claim 1, characterized in that The step of adding the second host device to the initial device link to obtain a target device link includes: Obtaining a reference account of the second host device and an account password corresponding to the reference account; using the reference account and the account password corresponding to the reference account to log in to the second host device; When the second host device is logged in using the reference account and the account password corresponding to the reference account, it is determined that the second host device has been added to the initial device link, and the initial device link with the second host device is determined as the target device link.

6. The method according to claim 1, characterized in that After adding the second host device to the initial device link to obtain the target device link, the method further includes: Generate a join record of adding the second host device to the initial device link, wherein the join record carries a timestamp of adding the second host device to the initial device link and event information of adding the second host device to the initial device link; The joining record is sent to each host device included in the target device network, wherein each host device included in the target device network is used to write the joining record into the third account book information corresponding to each host device when receiving the joining record.

7. The method according to claim 1, characterized in that The method further comprises: Detecting whether the first host device is the first host device in the target device link; When the first host device is the first host device of the target device link and receives a local operation instruction, disconnect the connection between the first host device and the second host device, wherein the local operation instruction is an operation instruction issued by an external device on the first host device; when the first host device is not the first host device of the target device link and receives the local operation instruction, disconnect the connection between the first host device and the last host device connected to the first host device, and disconnect the connection between the first host device and the second host device; When the first host device is the first host device of the target device link and, in the case where a reference joining request is received, responding to the reference joining request, disconnecting the connection between the first host device and the second host device, wherein the reference joining request is used to request the first host device to join other device links; when the first host device is not the first host device of the target device link and, in the case where the reference joining request is received, responding to the reference joining request, disconnecting the connection between the first host device and the last host device connected to the first host device, and the connection between the first host device and the second host device; When the first host device is the first host device of the target device link and the account operation instruction issued by the target account is not received within a time threshold, the connection between the first host device and the second host device is disconnected; when the first host device is not the first host device of the target device link and the account operation instruction issued by the target account is not received within the time threshold, the connection between the first host device and the last host device connected to the first host device, as well as the connection between the first host device and the second host device are disconnected.

8. A control device for a host device, characterized in that: A distributed system includes N host devices, M host devices of the N host devices are connected to each other to form an initial device link, the host devices in the initial device link all have identity information for indicating that the host device belongs to a target device network, the initial device link is configured to allow the M host devices to be controlled by a target account, the apparatus is applied to a first host device in the initial device link, and the apparatus includes: A receiving module, configured to receive a target joining request sent by the target account, wherein the target joining request is used to request to join a second host device among the NM host devices to the initial device link; an extraction module, configured to respond to the target joining request and extract the second identity information of the second host device and the connection information of the second host device using the first identity information of the first host device, wherein the connection information is used to indicate a connection relationship between the second host device and other host devices in the distributed system; a verification module, configured to verify the attribution of the second host device to the initial device link according to the second identity information and the connection information; The adding module is used to add the second host device to the initial device link to obtain a target device link when the attribution attribute indicates that the second host device is allowed to belong to the initial device link.

9. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores a computer program, wherein the computer program implements the steps of the method described in any one of claims 1 to 7 when executed by a processor.

10. An electronic device comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, characterized in that: When the processor executes the computer program, the steps of the method described in any one of claims 1 to 7 are implemented.

Citation Information

Patent Citations

  • Host Identity Protocol Method and Apparatus

    US20080271132A1

  • Network intrusion detection with distributed correlation

    US20110173699A1

  • Secure access method, and associated apparatus, for accessing a private IP network

    US6061346A

  • A method and device for notifying, searching the communication address and a method and device for detecting, resuming communication

    WO2009003405A1

  • Mobile network access authentication method, device, storage medium and block chain node

    WO2019104690A1