Equipment access method and device, electronic equipment and computer readable storage medium

Abstract

The invention discloses an equipment access method, which is applied to an equipment access platform and comprises the following steps: acquiring fingerprint data of to-be-accessed equipment; the to-be-accessed device is a network device which does not create a client in the device access platform; the fingerprint data comprises equipment information of the to-be-accessed equipment and / or an acquisition function evaluation value of the to-be-accessed equipment by the equipment access platform; verifying the fingerprint data to obtain a verification result; and when the verification result is that the verification is passed, creating a client for the to-be-accessed device so as to realize device access. By applying the technical scheme provided by the invention, the security verification of the to-be-accessed equipment can be realized on the premise of not carrying out intrusive transformation on the network equipment, so that the system security is ensured. The invention also discloses an equipment access device, electronic equipment and a computer readable storage medium, which also have the above beneficial effects.

Description

Technical Field

[0001] The present application relates to the field of network security technology, and in particular to a device access method, and also to a device access apparatus, an electronic device, and a computer-readable storage medium. Background Art

[0002] With the continuous development of Internet technology, in order to realize the interconnection between people, objects and devices, various electronic devices can be combined with the network to form a huge network. In some application scenarios, it is necessary to connect the device to the corresponding platform to realize the subsequent related business. In this process, in order to ensure the security of the system, it is necessary to first verify the security of the device to be connected. The main practice in the relevant technology is to burn the authentication-related SDK (Software Development Kit) into the device when the device leaves the factory for security authentication when the device is connected. However, this type of solution makes an intrusive modification to the device and requires the cooperation of the manufacturer. In addition, there are many types of devices and manufacturers involved. Therefore, this solution is very difficult to implement and cannot be effective for devices that are already running.

[0003] Therefore, how to implement security verification of the devices to be connected without intrusive modification of the network devices, thereby ensuring system security, is an urgent problem to be solved by those skilled in the art. Summary of the invention

[0004] The purpose of the present application is to provide a device access method, which can realize the security verification of the device to be accessed without intrusive modification of the network device, thereby ensuring the security of the system; another purpose of the present application is to provide a device access device, electronic device and computer-readable storage medium, all of which have the above-mentioned beneficial effects.

[0005] In a first aspect, the present application provides a device access method, which is applied to a device access platform, comprising:

[0006] Collect and obtain fingerprint data of the device to be accessed; the device to be accessed is a network device for which a client is not created in the device access platform; the fingerprint data includes device information of the device to be accessed and / or a collection function evaluation value of the device access platform for the device to be accessed;

[0007] Verifying the fingerprint data to obtain a verification result;

[0008] When the verification result is that the verification is passed, a client is created for the device to be connected to realize device access

[0009] Preferably, before acquiring the fingerprint data of the device to be connected, the method further includes:

[0010] Determining whether the device to be connected is configured with a device access rule;

[0011] If yes, then execute the step of acquiring the fingerprint data of the device to be connected;

[0012] If not, a client is created for the device to be connected to achieve device access.

[0013] Preferably, before acquiring the fingerprint data of the device to be connected, the method further includes:

[0014] Determine whether the historical verification result of the device to be connected is stored locally;

[0015] If not, executing the step of acquiring the fingerprint data of the device to be connected;

[0016] If so, the historical verification result is used as the verification result, and the step of creating a client for the device to be connected to achieve device access is performed when the verification result is verification passed.

[0017] Preferably, when no historical verification result of the device to be connected is stored locally, after verifying the fingerprint data and obtaining the verification result, the method further includes:

[0018] The verification result is used as the historical verification result and saved locally.

[0019] Preferably, before acquiring the fingerprint data of the device to be connected, the method further includes:

[0020] Turn off the data upload function of the device to be connected;

[0021] Correspondingly, when the verification result is that the verification is passed, after creating a client for the device to be connected to achieve device access, the method further includes:

[0022] Enable the data upload function of the device to be connected.

[0023] Preferably, when the fingerprint data is the device information of the device to be connected, the verifying the fingerprint data to obtain the verification result includes:

[0024] Determining whether the device information of the device to be connected meets the device information standard;

[0025] If yes, then determine that the verification result is verification passed;

[0026] If not, it is determined that the verification result is verification failure.

[0027] Preferably, when the fingerprint data is a collection function evaluation value of the device access platform for the device to be accessed, the verifying the fingerprint data to obtain the verification result includes:

[0028] Determine whether the acquisition function evaluation value meets a preset threshold condition;

[0029] If yes, then determine that the verification result is verification passed;

[0030] If not, it is determined that the verification result is verification failure.

[0031] In a second aspect, the present application further discloses a device access apparatus, which is applied to a device access platform, comprising:

[0032] A collection module, used to collect and obtain fingerprint data of a device to be accessed; the device to be accessed is a network device for which a client is not created in the device access platform; the fingerprint data includes device information of the device to be accessed and / or a collection function evaluation value of the device access platform for the device to be accessed;

[0033] A verification module, used to verify the fingerprint data and obtain a verification result;

[0034] The creation module is used to create a client for the device to be accessed when the verification result is verification passed, so as to realize device access.

[0035] In a third aspect, the present application further discloses an electronic device, comprising:

[0036] Memory for storing computer programs;

[0037] A processor is used to implement the steps of any one of the device access methods described above when executing the computer program.

[0038] In a fourth aspect, the present application further discloses a computer-readable storage medium, on which a computer program is stored, and when the computer program is executed by a processor, the steps of any one of the device access methods described above are implemented.

[0039] A device access method provided in the present application is applied to a device access platform, including: collecting and obtaining fingerprint data of a device to be accessed; the device to be accessed is a network device for which a client has not been created in the device access platform; the fingerprint data includes device information of the device to be accessed and / or a collection function evaluation value of the device access platform for the device to be accessed; verifying the fingerprint data to obtain a verification result; when the verification result is that the verification is passed, creating a client for the device to be accessed to achieve device access.

[0040] It can be seen that in the device access method provided by the present application, the device access platform regards the network device that has not created a client locally as the device to be accessed, collects fingerprint data for the device to be accessed, and then verifies the fingerprint data to implement security verification of the device to be accessed, and creates a client for the device to be accessed to implement device access when the verification is passed. Obviously, this implementation method does not require invasive modification of the network device, and only needs to collect its fingerprint data for verification to implement security verification, thereby effectively ensuring the security of the system. In addition, the fingerprint data may include the device information of the device to be accessed and / or the collection function evaluation value of the device access platform for the device to be accessed, wherein the device information is an immutable function item of the device to be accessed and is unique. The collection function evaluation value of the device access platform for the device to be accessed represents the device access platform's evaluation of the data collection capability of the device to be accessed. Obviously, the device access platform has poor data collection capabilities for illegal devices. Both types of information can effectively increase the difficulty of counterfeiting and tampering with devices, which helps to further improve system security.

[0041] The device access apparatus, electronic device and computer-readable storage medium provided in this application all have the above-mentioned beneficial effects, which will not be elaborated here. BRIEF DESCRIPTION OF THE DRAWINGS

[0042] In order to more clearly illustrate the technical solutions in the prior art and the embodiments of the present application, the drawings required for use in the description of the prior art and the embodiments of the present application are briefly introduced below. Of course, the drawings described below in relation to the embodiments of the present application are only part of the embodiments of the present application. For ordinary technicians in this field, other drawings can be obtained based on the provided drawings without creative work, and the obtained other drawings also belong to the protection scope of the present application.

[0043] FIG1 is a schematic diagram of the structure of a device access system provided by the present application;

[0044] FIG2 is a schematic diagram of a flow chart of a device access method provided by the present application;

[0045] FIG3 is a schematic diagram of the structure of another device access system provided by the present application;

[0046] FIG4 is a flow chart of a method for collecting data from a network device by a device access platform provided in the present application;

[0047] FIG5 is a flow chart of a method for a device access platform to create a client for a network device provided in the present application;

[0048] FIG6 is a flow chart of a method for a device access platform to verify fingerprint data of a network device provided by the present application;

[0049] FIG7 is a schematic diagram of the structure of a device access apparatus provided by the present application;

[0050] FIG8 is a schematic diagram of the structure of a device access system provided in the present application. DETAILED DESCRIPTION

[0051] The core of this application is to provide a device access method, which can realize security verification of the device to be accessed without intrusive modification of the network device, thereby ensuring system security; another core of this application is to provide a device access device, system and computer-readable storage medium, which also have the above-mentioned beneficial effects.

[0052] In order to describe the technical solutions in the embodiments of the present application more clearly and completely, the technical solutions in the embodiments of the present application will be introduced below in conjunction with the drawings in the embodiments of the present application. Obviously, the described embodiments are only part of the embodiments of the present application, not all of the embodiments. Based on the embodiments in the present application, all other embodiments obtained by ordinary technicians in this field without making creative work are within the scope of protection of this application.

[0053] Please refer to Figure 1, which is a structural diagram of a device access system provided by the present application. The device access system may include a device access platform and one or more network devices. Each network device can serve as a device to be accessed by the device access platform. After passing the security verification of the device access platform, it can establish a connection relationship with the device access platform to achieve device access, thereby completing corresponding business operations.

[0054] An embodiment of the present application provides a device access method.

[0055] Please refer to FIG. 2 , which is a flow chart of a device access method provided in the present application. The device access method is applied to the device access platform shown in FIG. 1 , and may include the following S101 to S103 .

[0056] S101: Collect and obtain fingerprint data of the device to be connected; the device to be connected is a network device that has not created a client in the device access platform; the fingerprint data includes device information of the device to be connected and / or a collection function evaluation value of the device access platform for the device to be connected.

[0057] This step aims to collect fingerprint data of the device to be accessed. Specifically, among all network devices in the device access system, the network devices that have not established a client locally on the device access platform are the devices to be accessed on the device access platform. It can be understood that the network devices that have created a client in the device access platform are the network devices that have established a connection relationship with the device access platform, and the network devices that have not created a client in the device access platform are the network devices that have not established a connection relationship with the device access platform. Therefore, for the device access platform, the network devices that have not created a client locally can be regarded as the devices to be accessed. In the implementation process, when the device access platform receives a signal of requesting access initiated by any network device, it can first obtain the device identification (with uniqueness) of the network device, such as the device ID, the device MAC address, etc., and then determine whether the network device has a client locally based on the device identification. If not, the network device can be regarded as the device to be accessed. On the contrary, if it is determined that the corresponding network device has a client locally based on the device identification, the above signal can be ignored, or a corresponding access prompt can be given.

[0058] Among them, the fingerprint data of the device to be accessed is used to implement the security verification of the device to be accessed by the device access platform, which may specifically include the device information of the device to be accessed and / or the collection function evaluation value of the device to be accessed by the device access platform, wherein the device information is an immutable function item of the device to be accessed and is unique, for example, it may include but is not limited to the manufacturer, device model, device serial number, MAC address, operating system, firmware and other information of the device to be accessed; the collection function evaluation value of the device access platform for the device to be accessed represents the device access platform's evaluation of the data collection capability of the device to be accessed. Obviously, the device access platform has poor data collection capabilities for illegal devices, but strong data collection capabilities for legal devices. It can be understood that both of the above two types of information can effectively increase the difficulty of counterfeiting and tampering with devices, thereby improving the accuracy of the device access platform's security verification of the device to be accessed, thereby helping to further improve system security.

[0059] S102: Verify the fingerprint data and obtain a verification result.

[0060] This step aims to realize the security verification of fingerprint data. By performing security verification on the fingerprint data of the device to be accessed, the security verification of the device to be accessed can be realized. It can be understood that when the verification of the fingerprint data is passed, it can be determined that the device to be accessed is a legal device, and when the verification of the fingerprint data is not passed, it can be determined that the device to be accessed is an illegal device.

[0061] In one embodiment of the present application, when the fingerprint data is the device information of the device to be accessed, the above-mentioned verification of the fingerprint data to obtain the verification result may include: determining whether the device information of the device to be accessed meets the device information standard; if so, determining that the verification result is a passed verification; if not, determining that the verification result is a failed verification.

[0062] The embodiment of the present application provides an implementation method for verifying fingerprint data. Specifically, when the fingerprint data is the device information of the device to be accessed, the device information standard can be used to verify its security. If the device information of the device to be accessed meets the device information standard, it can be determined that the security verification of the fingerprint data has passed. If the device information of the device to be accessed does not meet the device information standard, it can be determined that the security verification of the fingerprint data has not passed. Among them, the device information standard, that is, the device information of various types of legal network devices, is pre-stored in the device access platform. It can be stored when the network device is registered, or it can be pre-counted and summarized and stored. This application does not limit this.

[0063] In one embodiment of the present application, when the fingerprint data is the collection function evaluation value of the device access platform for the device to be connected, the above-mentioned verification of the fingerprint data to obtain the verification result may include: determining whether the collection function evaluation value meets the preset threshold condition; if so, determining that the verification result is passed; if not, determining that the verification result is failed.

[0064] The embodiment of the present application provides another implementation method for verifying fingerprint data. Specifically, when the fingerprint data is the collection function evaluation value of the device access platform for the device to be connected, it can be verified for security using a pre-set threshold condition. If the collection function evaluation value meets the preset threshold condition, it can be determined that the security verification of the fingerprint data has passed. If the collection function evaluation value does not meet the preset threshold condition, it can be determined that the security verification of the fingerprint data has not passed. Among them, the value of the preset threshold condition does not affect the implementation of the present technical solution, and can be set by technical personnel according to actual conditions, and this application does not limit this.

[0065] In a possible implementation, the collection function evaluation value can be specifically the collection failure rate of the device access platform for the device to be connected. Then, when the collection failure rate exceeds the preset threshold condition, it can be determined that the security verification of the fingerprint data has not passed. For example, taking a network device with 100 points (100 data items need to be collected) as an example, if the tolerance of the collection failure rate is set to 10%, that is, at least 90 data items must be successfully collected each time, and less than 90 items are considered as device abnormalities. Of course, this implementation method is suitable for network devices with more collection items. If an illegal device wants to simulate the network device, it needs to simulate at least 90 collection points, and the data type needs to be completely correct. Obviously, this verification method can greatly increase the difficulty of counterfeiting devices.

[0066] S103: When the verification result is that the verification is passed, a client is created for the device to be connected to achieve device access.

[0067] This step aims to achieve device access. When the device access platform successfully verifies the fingerprint data of the device to be accessed, a corresponding client can be created locally for the device to be accessed, thereby establishing a connection between the device to be accessed and the device access platform and completing device access.

[0068] It can be seen that in the device access method provided by the present application, the device access platform regards the network device that has not created a client locally as the device to be accessed, collects fingerprint data for the device to be accessed, and then verifies the fingerprint data to implement security verification of the device to be accessed, and creates a client for the device to be accessed to implement device access when the verification is passed. Obviously, this implementation method does not require invasive modification of the network device, and only needs to collect its fingerprint data for verification to implement security verification, thereby effectively ensuring the security of the system. In addition, the fingerprint data may include the device information of the device to be accessed and / or the collection function evaluation value of the device access platform for the device to be accessed, wherein the device information is an immutable function item of the device to be accessed and is unique. The collection function evaluation value of the device access platform for the device to be accessed represents the device access platform's evaluation of the data collection capability of the device to be accessed. Obviously, the device access platform has poor data collection capabilities for illegal devices. Both types of information can effectively increase the difficulty of counterfeiting and tampering with devices, which helps to further improve system security.

[0069] Based on the above embodiments:

[0070] In one embodiment of the present application, before the above-mentioned collection and acquisition of fingerprint data of the device to be accessed, it may also include: determining whether the device to be accessed is configured with device access rules; if so, executing the step of collecting and acquiring fingerprint data of the device to be accessed; if not, creating a client for the device to be accessed to achieve device access.

[0071] The device access method provided in the embodiment of the present application can implement a device access solution that meets the actual needs of users. Specifically, users can customize whether to perform a legality check before device access, and this process can be achieved by configuring device access rules. Specifically, according to the actual needs of users, for some network devices, device access rules can be configured for them, and for other network devices, device access rules can not be configured for them. Among them, network devices configured with device access rules need to perform fingerprint data verification, and network devices not configured with device access rules do not need to perform fingerprint data verification. Therefore, before collecting fingerprint data for the device to be accessed, it can be determined whether the device to be accessed is configured with device access rules. If so, the fingerprint data collection operation can be continued. Otherwise, a client can be directly created for the device to be accessed to achieve device access.

[0072] In one embodiment of the present application, before the above-mentioned collection and acquisition of fingerprint data of the device to be accessed, it may also include: determining whether historical verification results of the device to be accessed are stored locally; if not, executing the step of collecting and acquiring fingerprint data of the device to be accessed; if so, taking the historical verification result as the verification result, and executing the step of creating a client for the device to be accessed when the verification result is verification passed, so as to realize device access.

[0073] The device access method provided in the embodiment of the present application can achieve more efficient device access. For any network device, after it successfully accesses the device access platform for the first time, its verification result can be saved locally on the device access platform as the historical verification result of the network device. Therefore, after the device access platform determines the device to be accessed, before collecting fingerprint data for the device to be accessed, it can first determine whether the historical verification result of the device to be accessed is stored locally. If so, the historical verification result can be directly used as the verification result of this device access, without the need to perform fingerprint data collection and verification operations, which effectively improves the device access efficiency. On the contrary, if there is no historical verification result of the device to be accessed locally, it means that the device to be accessed is accessed for the first time. At this time, it is sufficient to continue to perform subsequent fingerprint data collection and verification operations.

[0074] In one embodiment of the present application, when no historical verification result of the device to be connected is stored locally, the above-mentioned verification of the fingerprint data, after obtaining the verification result, may also include: taking the verification result as a historical verification result and saving it locally.

[0075] As mentioned above, when there is no historical verification result of the device to be accessed locally, it means that the device to be accessed is accessed for the first time and needs to continue to perform subsequent fingerprint data collection and verification operations. On this basis, after collecting and obtaining the fingerprint data and completing the fingerprint data verification, the verification result can be further used as the historical verification result of the current device to be accessed and saved locally on the device access platform to provide a reference for the device to be accessed when it accesses the device again later.

[0076] In one embodiment of the present application, before acquiring the fingerprint data of the device to be connected, the method may further include: closing the data upload function of the device to be connected;

[0077] Correspondingly, when the verification result is that the verification is passed, after creating a client for the device to be connected to achieve device access, the method may further include: enabling a data upload function of the device to be connected.

[0078] In an embodiment of the present application, during the process of collecting and verifying the fingerprint data of the device to be accessed by the device access platform, the data upload function of the device to be accessed can be set to a closed state, and the function can be turned on again after the fingerprint data verification is completed. Among them, the data upload function refers to the function of the device to be accessed uploading business data (different from fingerprint data) to the device access platform. It can be seen that in an embodiment of the present application, by configuring the data upload function, the collection of fingerprint data and business data can be avoided at the same time, and then the situation that the device to be accessed uploads its own business data to the device access platform without completing the fingerprint data verification can be effectively avoided, thereby further ensuring the security of the system.

[0079] Based on the above embodiments, the embodiments of the present application take device access to the Internet of Things as an example and provide another device access method.

[0080] First, please refer to Figure 3, which is a structural diagram of another device access system provided by this application. The device access system includes a device access platform and an Internet of Things device (IoT device), wherein the device access platform includes a device access service agent Agent, a device admission service Device Admission, and a device service Device Service, and the access of IoT devices can be achieved through the collaborative work of three functional modules. Among them, the device service Device Service is used to communicate and interact with IoT devices; the device admission service Device Admission is used to implement the legitimacy verification of IoT devices; the device admission service agent Agent is used to execute instructions sent by the device admission service Device Admission at a specific node.

[0081] Next, please refer to FIG. 4 , which is a flow chart of a method for collecting data from a network device by a device access platform provided in the present application. The process is implemented by the device service Device Service, and the implementation process is as follows:

[0082] 1. Collect business data of IoT devices regularly. Each type of business data will have a data collection cycle, and data collection will be triggered when the collection time is reached;

[0083] 2. Check whether the IoT device has the data upload function enabled (this function is enabled by default and is disabled when the device identity fingerprint fails authentication). If it is not enabled, the data collection fails and the collection ends.

[0084] 3. If the data upload function is enabled, obtain the device Client (the device client is created only when the device identity fingerprint data is successfully verified). If the acquisition fails, the data collection fails and ends.

[0085] 4. If the Client is successfully obtained, data collection will be performed;

[0086] 5. End data collection.

[0087] Further, please refer to FIG. 5, which is a flow chart of a method for a device access platform provided in the present application to create a client for a network device. The process is implemented by the device service Device Service, and the implementation process is as follows:

[0088] 1. Regularly check the device that has not created a client locally and try to create one for it;

[0089] 2. Request to create a Client;

[0090] 3. Check whether the device access rules of the current IoT device are configured. If not, go to step 8 to directly create a Client, and then you can directly collect business data;

[0091] 4. If device access rules are configured, close the data upload function. This is because when performing device identity fingerprint authentication, you need to create a temporary client to collect identity fingerprint data. This prevents business data collection from being initiated while collecting identity fingerprint data, which can cause illegal data to enter the system.

[0092] 5. Request Device Admission for identity fingerprint data verification;

[0093] 6. Check the identity fingerprint comparison result, and return directly if the comparison fails;

[0094] 7. Identity fingerprint comparison is successful, and the data upload function is enabled;

[0095] 8. Client is created successfully.

[0096] Finally, please refer to FIG. 6 , which is a flow chart of a method for verifying fingerprint data of a network device by a device access platform provided by the present application. The process is implemented by the device admission service Device Admission, and the implementation process is as follows:

[0097] 1. Determine whether the current device is configured with device access rules. If not, it means that no authentication is required and it passes directly;

[0098] 2. If device access rules are configured, check whether the current device has an identity fingerprint comparison result. If yes, determine whether the authentication is successful based on the result;

[0099] 3. If no identity fingerprint comparison result is found, fingerprint data is collected;

[0100] 4. Fingerprint data comparison;

[0101] 5. Make the comparison results persistent;

[0102] 6. Determine the fingerprint comparison result;

[0103] 7. If the comparison results are consistent, the authentication is successful, otherwise the ban rules are issued and the authentication fails.

[0104] It can be seen that in the device access method provided in the embodiment of the present application, the device access platform regards the network device that has not created a client locally as the device to be accessed, collects fingerprint data for the device to be accessed, and then verifies the fingerprint data to implement security verification of the device to be accessed, and creates a client for the device to be accessed to implement device access when the verification is passed. Obviously, this implementation method does not require invasive modification of the network device, and only needs to collect its fingerprint data for verification to implement security verification, thereby effectively ensuring system security. In addition, the fingerprint data may include the device information of the device to be accessed and / or the collection function evaluation value of the device access platform for the device to be accessed, wherein the device information is an immutable function item of the device to be accessed and is unique. The collection function evaluation value of the device access platform for the device to be accessed represents the device access platform's evaluation of the data collection capability of the device to be accessed. Obviously, the device access platform has poor data collection capabilities for illegal devices. Both types of information can effectively increase the difficulty of counterfeiting and tampering with devices, which helps to further improve system security.

[0105] The present application also provides a device access device. Please refer to FIG. 7 , which is a schematic diagram of the structure of a device access device provided by the present application. The device access device is applied to a device access platform and may include:

[0106] The collection module 1 is used to collect and obtain the fingerprint data of the device to be accessed; the device to be accessed is a network device that has not created a client in the device access platform; the fingerprint data includes the device information of the device to be accessed and / or the collection function evaluation value of the device access platform for the device to be accessed;

[0107] Verification module 2, used to verify the fingerprint data and obtain the verification result;

[0108] The creation module 3 is used to create a client for the device to be connected when the verification result is verification passed, so as to realize device access.

[0109] It can be seen that in the device access apparatus provided in the embodiment of the present application, the device access platform regards the network device that has not created a client locally as the device to be accessed, collects fingerprint data for the device to be accessed, and then verifies the fingerprint data to implement security verification of the device to be accessed, and creates a client for the device to be accessed to implement device access when the verification is passed. Obviously, this implementation method does not require invasive modification of the network device, and only needs to collect its fingerprint data for verification to implement security verification, thereby effectively ensuring the security of the system. In addition, the fingerprint data may include the device information of the device to be accessed and / or the collection function evaluation value of the device access platform for the device to be accessed, wherein the device information is an immutable function item of the device to be accessed and is unique. The collection function evaluation value of the device access platform for the device to be accessed represents the device access platform's evaluation of the data collection capability of the device to be accessed. Obviously, the device access platform has poor data collection capabilities for illegal devices. Both types of information can effectively increase the difficulty of counterfeiting and tampering with devices, which helps to further improve the security of the system.

[0110] In one embodiment of the present application, the device access device may also include a first judgment module, which is used to determine whether the device to be accessed is configured with device access rules before the fingerprint data of the device to be accessed is collected; if so, execute the step of collecting and obtaining the fingerprint data of the device to be accessed; if not, create a client for the device to be accessed to achieve device access.

[0111] In one embodiment of the present application, the device access device may also include a second judgment module, which is used to determine whether historical verification results of the device to be accessed are stored locally before the fingerprint data of the device to be accessed is collected; if not, the step of collecting and obtaining the fingerprint data of the device to be accessed is executed; if so, the historical verification result is used as the verification result, and when the verification result is verification passed, a client is created for the device to be accessed to achieve device access.

[0112] In one embodiment of the present application, the device access apparatus may further include a storage module for verifying the fingerprint data when no historical verification result of the device to be accessed is stored locally, and after obtaining the verification result, the verification result is used as a historical verification result and saved locally.

[0113] In one embodiment of the present application, the device access device may also include a control module for closing the data upload function of the device to be accessed before the fingerprint data of the device to be accessed is obtained; when the verification result is passed, a client is created for the device to be accessed to achieve device access, and then the data upload function of the device to be accessed is enabled.

[0114] In one embodiment of the present application, when the fingerprint data is the device information of the device to be accessed, the above-mentioned verification module 3 can be specifically used to determine whether the device information of the device to be accessed meets the device information standard; if so, the verification result is determined to be verification passed; if not, the verification result is determined to be verification failed.

[0115] In one embodiment of the present application, when the fingerprint data is the collection function evaluation value of the device access platform for the device to be connected, the above-mentioned verification module 3 can be specifically used to determine whether the collection function evaluation value meets the preset threshold condition; if so, the verification result is determined to be verification passed; if not, the verification result is determined to be verification failed.

[0116] For an introduction to the device provided in this application, please refer to the above method embodiment, and this application will not go into details here.

[0117] The present application also provides an electronic device. Please refer to FIG8 , which is a schematic diagram of the structure of an electronic device provided by the present application. The electronic device may include:

[0118] Memory for storing computer programs;

[0119] A processor, which is used to implement the steps of any one of the above-mentioned device access methods when executing a computer program.

[0120] As shown in Fig. 8, it is a schematic diagram of the composition structure of an electronic device, which may include: a processor 10, a memory 11, a communication interface 12 and a communication bus 13. The processor 10, the memory 11 and the communication interface 12 all communicate with each other through the communication bus 13.

[0121] In the embodiment of the present application, the processor 10 may be a central processing unit (CPU), an application specific integrated circuit, a digital signal processor, a field programmable gate array or other programmable logic devices, etc.

[0122] The processor 10 may call a program stored in the memory 11. Specifically, the processor 10 may execute operations in an embodiment of the device access method.

[0123] The memory 11 is used to store one or more programs, which may include program codes, and the program codes include computer operation instructions. In the embodiment of the present application, the memory 11 at least stores programs for implementing the following functions:

[0124] Collect and obtain fingerprint data of the device to be accessed; the device to be accessed is a network device for which a client has not been created in the device access platform; the fingerprint data includes device information of the device to be accessed and / or a collection function evaluation value of the device access platform for the device to be accessed;

[0125] Verify the fingerprint data and obtain the verification result;

[0126] When the verification result is passed, a client is created for the device to be connected to enable device access.

[0127] In a possible implementation, the memory 11 may include a program storage area and a data storage area, wherein the program storage area may store an operating system and an application required for at least one function, etc.; the data storage area may store data created during use.

[0128] In addition, the memory 11 may include a high-speed random access memory, and may also include a non-volatile memory, such as at least one disk storage device or other volatile solid-state storage device.

[0129] The communication interface 12 may be an interface of a communication module, and is used to connect to other devices or systems.

[0130] Of course, it should be noted that the structure shown in FIG. 8 does not constitute a limitation on the electronic device in the embodiment of the present application. In actual applications, the electronic device may include more or fewer components than those shown in FIG. 8 , or combine certain components.

[0131] The present application also provides a computer-readable storage medium, on which a computer program is stored. When the computer program is executed by a processor, the steps of any of the above-mentioned device access methods can be implemented.

[0132] The computer-readable storage medium may include: a USB flash drive, a mobile hard disk, a read-only memory (ROM), a random access memory (RAM), a magnetic disk or an optical disk, and other media that can store program codes.

[0133] For an introduction to the computer-readable storage medium provided in this application, please refer to the above method embodiment, and this application will not go into details here.

[0134] The various embodiments in the specification are described in a progressive manner, and each embodiment focuses on the differences from other embodiments. The same or similar parts between the various embodiments can be referred to each other. For the device disclosed in the embodiment, since it corresponds to the method disclosed in the embodiment, the description is relatively simple, and the relevant parts can be referred to the method part description.

[0135] Professionals may further appreciate that the units and algorithm steps of each example described in conjunction with the embodiments disclosed herein can be implemented in electronic hardware, computer software, or a combination of the two. In order to clearly illustrate the interchangeability of hardware and software, the composition and steps of each example have been generally described in the above description according to function. Whether these functions are performed in hardware or software depends on the specific application and design constraints of the technical solution. Professionals and technicians may use different methods to implement the described functions for each specific application, but such implementation should not be considered to be beyond the scope of this application.

[0136] The steps of the method or algorithm described in conjunction with the embodiments disclosed herein may be implemented directly using hardware, a software module executed by a processor, or a combination of the two. The software module may be placed in a random access memory (RAM), a memory, a read-only memory (ROM), an electrically programmable ROM, an electrically erasable programmable ROM, a register, a hard disk, a removable disk, a CD-ROM, or any other form of storage medium known in the art.

[0137] The technical solution provided by the present application is described in detail above. The principle and implementation method of the present application are described in detail using specific examples herein, and the description of the above embodiments is only used to help understand the method and core idea of ​​the present application. It should be pointed out that for ordinary technicians in this technical field, without departing from the principle of the present application, several improvements and modifications can be made to the present application, and these improvements and modifications also fall within the scope of protection of the present application.

Claims

1. A device access method, characterized in that: Applied to device access platform, including: Collect and obtain fingerprint data of the device to be accessed; the device to be accessed is a network device for which a client is not created in the device access platform; the fingerprint data includes device information of the device to be accessed and / or a collection function evaluation value of the device access platform for the device to be accessed; Verifying the fingerprint data to obtain a verification result; When the verification result is that the verification is passed, a client is created for the device to be accessed to achieve device access.

2. The device access method according to claim 1, characterized in that: Before acquiring the fingerprint data of the device to be connected, the method further includes: Determining whether the device to be connected is configured with a device access rule; If yes, then execute the step of acquiring the fingerprint data of the device to be connected; If not, a client is created for the device to be connected to achieve device access.

3. The device access method according to claim 1, characterized in that: Before acquiring the fingerprint data of the device to be connected, the method further includes: Determine whether the historical verification result of the device to be connected is stored locally; If not, executing the step of acquiring the fingerprint data of the device to be connected; If so, the historical verification result is used as the verification result, and the step of creating a client for the device to be connected to achieve device access is performed when the verification result is verification passed.

4. The device access method according to claim 3, characterized in that: When no historical verification result of the device to be connected is stored locally, the verifying the fingerprint data and obtaining the verification result further includes: The verification result is used as the historical verification result and saved locally.

5. The device access method according to claim 1, characterized in that: Before acquiring the fingerprint data of the device to be connected, the method further includes: Turn off the data upload function of the device to be connected; Correspondingly, when the verification result is that the verification is passed, after creating a client for the device to be connected to achieve device access, the method further includes: Enable the data upload function of the device to be connected.

6. The device access method according to claim 1, characterized in that: When the fingerprint data is the device information of the device to be connected, the verifying the fingerprint data to obtain the verification result includes: Determining whether the device information of the device to be connected meets the device information standard; If yes, then determine that the verification result is verification passed; If not, it is determined that the verification result is verification failure.

7. The device access method according to claim 1, characterized in that: When the fingerprint data is the collection function evaluation value of the device access platform for the device to be accessed, the verifying the fingerprint data to obtain the verification result includes: Determine whether the acquisition function evaluation value meets a preset threshold condition; If yes, then determine that the verification result is verification passed; If not, it is determined that the verification result is verification failure.

8. A device access apparatus, characterized in that: Applied to device access platform, including: A collection module, used to collect and obtain fingerprint data of a device to be accessed; the device to be accessed is a network device for which a client is not created in the device access platform; the fingerprint data includes device information of the device to be accessed and / or a collection function evaluation value of the device access platform for the device to be accessed; A verification module, used to verify the fingerprint data and obtain a verification result; The creation module is used to create a client for the device to be accessed when the verification result is verification passed, so as to realize device access.

9. An electronic device, characterized in that: include: Memory for storing computer programs; A processor, configured to implement the steps of the device access method according to any one of claims 1 to 7 when executing the computer program.

10. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores a computer program, and when the computer program is executed by a processor, the steps of the device access method according to any one of claims 1 to 7 are implemented.

Images