System for automatically acquiring mobile phone terminal information
By introducing authentication and permission management modules into the mobile terminal information collection system, the system lacks security mechanisms is solved, and strict verification of user identity and data access rights are realized, which significantly improves the system's security and data protection level. .
Patent Information
- Application Number
- CN202411546790.3
- Authority / Receiving Office
- CN · China
- Patent Type
- Applications(China)
- Current Assignee / Owner
- Filing Date
- 2024-11-01
- Publication Date
- 2025-02-07
- Estimated Expiration
- Not applicable · inactive patent
AI Technical Summary
The existing mobile terminal information collection system lacks a complete security mechanism and fails to carry out strict identity verification and permission control, resulting in unauthorized users who may access sensitive data, increasing the risk of data leakage.
A system that automatically obtains mobile terminal information is designed, including authentication and permission management modules. Through strict user authentication process and permission allocation, it ensures that only authenticated users can access the system and control the data scope and operations they access. Permissions.
Through the implementation of the authentication and permission management module, the security of the system is significantly improved, unauthorized access and data leakage are prevented, data protection level is enhanced, and user experience and system maintainability are optimized.
Smart Images

Figure CN119402862A_ABST
Abstract
Description
Technical Field
[0001] The present invention relates to the technical field of mobile phone terminal information collection systems, and in particular to a system for automatically acquiring mobile phone terminal information. Background Art
[0002] The mobile terminal information collection system is a software system that can automatically and remotely collect, process and analyze various types of information on smartphones or other mobile devices. It establishes a communication connection with the mobile terminal and uses preset interfaces, protocols or technical means to obtain information on the device without manual operation by the user.
[0003] Existing mobile terminal information collection systems generally read the information of mobile terminal connected by users, lack a complete security mechanism, and do not perform strict identity authentication and permission control on users who access mobile terminal information, which can easily lead to unauthorized users being able to access sensitive data, increasing the risk of data leakage.
[0004] In response to the problem that the existing mobile terminal information collection system easily allows unauthorized users to access sensitive data, increasing the risk of data leakage, the system that automatically obtains mobile terminal information sets up an authentication and permission management module. The system can ensure that only authenticated legitimate users can access the system, and allocate corresponding data access rights based on the user's role and permissions, greatly improving the security of the system and preventing unauthorized access and data leakage. Summary of the invention
[0005] In order to overcome the problem that the existing mobile terminal information collection system generally reads the mobile terminal information of the user's connection, lacks a complete security mechanism, and does not perform strict identity authentication and permission control on users accessing the mobile terminal information, it is easy for unauthorized users to access sensitive data, increasing the risk of data leakage.
[0006] The technical solution of the present invention is: a system for automatically acquiring mobile terminal information, comprising:
[0007] Terminal connection module: used to connect to the mobile phone terminal;
[0008] Data transmission module: used to transmit information of mobile phone terminals connected to the terminal connection module;
[0009] Processing and analysis module: used to pre-process the data transmitted by the data transmission module;
[0010] Information collection module: used to collect required information through mobile terminals;
[0011] Authentication and authority management module: used to authenticate and test user qualifications;
[0012] Report and visualization module: used to provide feedback on mobile terminal information;
[0013] Security audit and log recording module: used to protect the system security of mobile terminal information.
[0014] Preferably, the terminal connection module is used to connect to the user's mobile phone terminal, automatically discover and connect to the target mobile phone terminal by scanning the network environment or using a predefined connection method, and use Bluetooth, Wi-Fi Direct, ADB and other technologies to identify and establish a secure connection with the mobile phone terminal.
[0015] Preferably, the data transmission module includes a 3G information transmission module, a 4G signal transmission module, a Bluetooth transmission module and a GPS signal module. The data transmission module makes an intelligent judgment on the signal strength, uses the 3G information transmission module, the 4G signal transmission module, the Bluetooth transmission module and the GPS signal module to establish a stable signal transmission chain, and transmits the data collected by the data acquisition module to the processing and analysis module.
[0016] Preferably, the processing and analysis module includes a database management platform and data analysis tools. The processing and analysis module is used to clean, organize and analyze the collected raw data, extract valuable information and insights, and conduct in-depth analysis of the collected information through statistical analysis, machine learning and other technologies.
[0017] Preferably, the information collection module is used to collect the required information from the connected mobile phone terminal, including basic information, accessory configuration, network status, application installation list and battery status. For Android devices, system information and application data can be read through ADB commands or by developing a special Android application; for iOS devices, information needs to be obtained indirectly through iTunes backup analysis, enterprise certificate deployed applications or iCloud synchronization.
[0018] Preferably, the authentication and permission management module is responsible for processing user login requests, verifying user identities, and allocating corresponding resource access rights based on user roles and permissions. It adopts identity authentication and authorization technologies such as OAuth and JWT, combined with database storage of user information and permission configuration, to achieve secure access control, ensuring that only legally authenticated and authorized users or applications can access the system, and controlling the scope of data they access and their operating permissions.
[0019] Preferably, the authentication and authority management module comprises the following steps when operating:
[0020] S11: The user enters the user name and password through the system login interface to initiate a login request;
[0021] S12: After receiving the login request, the system sends the user name and password to the authentication server, which verifies the correctness of the user name and password by comparing the user information in the database;
[0022] S13: If the username and password match, the authentication server returns an authentication success message and generates a session token. If they do not match, an authentication failure message is returned and the user is prompted to re-enter the password.
[0023] S14: After the user is successfully authenticated, the system queries and assigns corresponding permissions from the permission database according to the user's role or user group information;
[0024] S15: When a user attempts to access or operate mobile terminal information, the system first verifies whether the user has the corresponding authority;
[0025] S16: If the user has access or operation authority, further access is allowed;
[0026] S17: If the user does not have sufficient permissions, the request is rejected and an error message may be returned or the user may be prompted to contact the administrator.
[0027] Preferably, the authentication and permission management module ensures that only legitimate users can access the system through a strict user authentication process, preventing unauthorized access and data leakage. Permission management can control the user's access scope to mobile terminal information and avoid sensitive data from being obtained by unauthorized users. It not only enhances the system's security and data protection level, but also optimizes the user experience, supports multi-role and multi-level permission management, facilitates auditing and compliance, and improves system maintainability.
[0028] Preferably, the reporting and visualization module is used to generate interactive reports and dashboards using a chart library or business intelligence tools to facilitate users to understand and use the analysis results. The reporting and visualization module presents the analysis results to users in the form of reports, and intuitively displays key data such as device information, user behavior, trend analysis, etc. through visualization methods such as charts and graphs.
[0029] Preferably, the security audit and logging module is used to collect, store and analyze log data using a log management system to ensure the transparency and traceability of the system, while implementing security measures such as data encryption and access control to protect the security of log data, and record all key operations of the system, including user login, device connection, information collection, data processing, etc., in order to conduct security audits, troubleshooting and compliance checks.
[0030] Preferably, the security audit and log recording module includes the following steps when working:
[0031] S21: The application on the mobile terminal will generate various logs during operation, and the mobile operating system will also generate logs to record system-level activities;
[0032] S22: The system collects the generated log data from the mobile terminal in real time through a preset log collection mechanism. For logs that cannot be collected in real time or have a large amount of data, a scheduled task is set to collect them in batches;
[0033] S23: The collected log data needs to be parsed and converted into a standardized format for subsequent processing and analysis. According to the type and content of the log, it is classified and filed into different storage locations;
[0034] S24: Some log data is temporarily stored in the local storage device of the mobile terminal to facilitate quick access and reduce network transmission pressure;
[0035] S25: The system analyzes the collected log data in real time to detect potential security threats and abnormal behaviors;
[0036] S26: Based on the results of the log analysis, the system automatically generates an audit report. After the audit report is completed, it is distributed to relevant personnel according to the predetermined process.
[0037] Preferably, the security audit and log recording module can timely discover potential security threats and vulnerabilities by recording and analyzing log information such as user activities, system operations, abnormal events, etc. in detail, so as to take corresponding security measures for protection. At the same time, log recording provides the ability to trace back afterwards. When a security incident occurs, the source of the problem can be quickly located through the log, and emergency response and incident handling can be carried out.
[0038] Beneficial effects of the present invention:
[0039] 1. Compared with the traditional system of automatically obtaining mobile terminal information, which generally reads the mobile terminal information of the user, lacks a complete security mechanism, and does not perform strict identity authentication and permission control on users who access mobile terminal information, which easily leads to unauthorized users being able to access sensitive data and increases the risk of data leakage. The system of automatically obtaining mobile terminal information sets up an authentication and permission management module. The system can ensure that only legitimate users who have passed identity authentication can access the system, and allocate corresponding data access rights according to the user's role and permission, which greatly improves the security of the system and prevents unauthorized access and data leakage;
[0040] 2. The authentication and permission management module ensures that only legitimate users can access the system through a strict user authentication process, preventing unauthorized access and data leakage. Permission management can control the scope of user access to mobile terminal information and prevent sensitive data from being obtained by unauthorized users. It not only enhances the security and data protection level of the system, but also optimizes the user experience, supports multi-role and multi-level permission management, facilitates auditing and compliance, and improves system maintainability;
[0041] 3. The security audit and log recording module can timely discover potential security threats and vulnerabilities by recording and analyzing log information such as user activities, system operations, and abnormal events in detail, so as to take corresponding security measures for protection. At the same time, log recording provides the ability to trace back afterwards. When a security incident occurs, the source of the problem can be quickly located through the log, and emergency response and event handling can be carried out. BRIEF DESCRIPTION OF THE DRAWINGS
[0042] Figure 1 Shown is a schematic diagram of the workflow of a system authentication and authority management module for automatically acquiring mobile terminal information of the present invention;
[0043] Figure 2 Shown is a schematic diagram of the workflow of a system security audit and log recording module for automatically acquiring mobile terminal information of the present invention. DETAILED DESCRIPTION
[0044] The present invention will be further described below in conjunction with the accompanying drawings and embodiments.
[0045] See also Figure 1-2 The present invention provides an embodiment: a system for automatically acquiring mobile terminal information, comprising:
[0046] Terminal connection module: used to connect to the mobile phone terminal;
[0047] Data transmission module: used to transmit information of mobile phone terminals connected to the terminal connection module;
[0048] Processing and analysis module: used to pre-process the data transmitted by the data transmission module;
[0049] Information collection module: used to collect required information through mobile terminals;
[0050] Authentication and authority management module: used to authenticate and test user qualifications;
[0051] Report and visualization module: used to provide feedback on mobile terminal information;
[0052] Security audit and log recording module: used to protect the system security of mobile terminal information.
[0053] Preferably, the terminal connection module is used to connect to the user's mobile phone terminal, automatically discover and connect to the target mobile phone terminal by scanning the network environment or using a predefined connection method, and use Bluetooth, Wi-Fi Direct, ADB and other technologies to identify and establish a secure connection with the mobile phone terminal.
[0054] Preferably, the data transmission module includes a 3G information transmission module, a 4G signal transmission module, a Bluetooth transmission module and a GPS signal module. The data transmission module makes an intelligent judgment on the signal strength, uses the 3G information transmission module, the 4G signal transmission module, the Bluetooth transmission module and the GPS signal module to establish a stable signal transmission chain, and transmits the data collected by the data acquisition module to the processing and analysis module.
[0055] Preferably, the processing and analysis module includes a database management platform and data analysis tools. The processing and analysis module is used to clean, organize and analyze the collected raw data, extract valuable information and insights, and conduct in-depth analysis of the collected information through statistical analysis, machine learning and other technologies.
[0056] Preferably, the information collection module is used to collect the required information from the connected mobile phone terminal, including basic information, accessory configuration, network status, application installation list and battery status. For Android devices, system information and application data can be read through ADB commands or by developing a special Android application; for iOS devices, information needs to be obtained indirectly through iTunes backup analysis, enterprise certificate deployed applications or iCloud synchronization.
[0057] Preferably, the authentication and permission management module is responsible for processing user login requests, verifying user identities, and allocating corresponding resource access rights based on user roles and permissions. It adopts identity authentication and authorization technologies such as OAuth and JWT, combined with database storage of user information and permission configuration, to achieve secure access control, ensuring that only legally authenticated and authorized users or applications can access the system, and controlling the scope of data they access and their operating permissions.
[0058] Preferably, the authentication and authority management module comprises the following steps when operating:
[0059] S11: The user enters the user name and password through the system login interface to initiate a login request;
[0060] S12: After receiving the login request, the system sends the user name and password to the authentication server, which verifies the correctness of the user name and password by comparing the user information in the database;
[0061] S13: If the username and password match, the authentication server returns an authentication success message and generates a session token. If they do not match, an authentication failure message is returned and the user is prompted to re-enter the password.
[0062] S14: After the user is successfully authenticated, the system queries and assigns corresponding permissions from the permission database according to the user's role or user group information;
[0063] S15: When a user attempts to access or operate mobile terminal information, the system first verifies whether the user has the corresponding authority;
[0064] S16: If the user has access or operation authority, further access is allowed;
[0065] S17: If the user does not have sufficient permissions, the request is rejected and an error message may be returned or the user may be prompted to contact the administrator.
[0066] Preferably, the authentication and permission management module ensures that only legitimate users can access the system through a strict user authentication process, preventing unauthorized access and data leakage. Permission management can control the user's access scope to mobile terminal information and avoid sensitive data from being obtained by unauthorized users. It not only enhances the system's security and data protection level, but also optimizes the user experience, supports multi-role and multi-level permission management, facilitates auditing and compliance, and improves system maintainability.
[0067] Preferably, the reporting and visualization module is used to generate interactive reports and dashboards using a chart library or business intelligence tools to facilitate users to understand and use the analysis results. The reporting and visualization module presents the analysis results to users in the form of reports, and intuitively displays key data such as device information, user behavior, trend analysis, etc. through visualization methods such as charts and graphs.
[0068] Preferably, the security audit and logging module is used to collect, store and analyze log data using a log management system to ensure the transparency and traceability of the system, while implementing security measures such as data encryption and access control to protect the security of log data, and record all key operations of the system, including user login, device connection, information collection, data processing, etc., in order to conduct security audits, troubleshooting and compliance checks.
[0069] Preferably, the security audit and log recording module includes the following steps when working:
[0070] S21: The application on the mobile terminal will generate various logs during operation, and the mobile operating system will also generate logs to record system-level activities;
[0071] S22: The system collects the generated log data from the mobile terminal in real time through a preset log collection mechanism. For logs that cannot be collected in real time or have a large amount of data, a scheduled task is set to collect them in batches;
[0072] S23: The collected log data needs to be parsed and converted into a standardized format for subsequent processing and analysis. According to the type and content of the log, it is classified and filed into different storage locations;
[0073] S24: Some log data is temporarily stored in the local storage device of the mobile terminal to facilitate quick access and reduce network transmission pressure;
[0074] S25: The system analyzes the collected log data in real time to detect potential security threats and abnormal behaviors;
[0075] S26: Based on the results of the log analysis, the system automatically generates an audit report. After the audit report is completed, it is distributed to relevant personnel according to the predetermined process.
[0076] Preferably, the security audit and log recording module can timely discover potential security threats and vulnerabilities by recording and analyzing log information such as user activities, system operations, abnormal events, etc. in detail, so as to take corresponding security measures for protection. At the same time, log recording provides the ability to trace back afterwards. When a security incident occurs, the source of the problem can be quickly located through the log, and emergency response and incident handling can be carried out.
[0077] The embodiments of the present invention are described in detail above with reference to the accompanying drawings, but the present invention is not limited to the above embodiments, and various changes can be made within the knowledge scope of those skilled in the art without departing from the spirit of the present invention.
Claims
1. A system for automatically acquiring mobile terminal information; characterized in that: Included are: Terminal connection module: used to connect to the mobile phone terminal; Data transmission module: used to transmit information of mobile phone terminals connected to the terminal connection module; Processing and analysis module: used to pre-process the data transmitted by the data transmission module; Information collection module: used to collect required information through mobile terminals; Authentication and authority management module: used to authenticate and test user qualifications; Report and visualization module: used to provide feedback on mobile terminal information; Security audit and log recording module: used to protect the system security of mobile terminal information.
2. A system for automatically acquiring mobile terminal information according to claim 1, characterized in that: The terminal connection module is used to connect to the user's mobile phone terminal. It automatically discovers and connects to the target mobile phone terminal by scanning the network environment or using a predefined connection method, and uses Bluetooth, Wi-Fi Direct, ADB and other technologies to identify and establish a secure connection with the mobile phone terminal.
3. A system for automatically acquiring mobile terminal information according to claim 2, characterized in that: The data transmission module includes a 3G information transmission module, a 4G signal transmission module, a Bluetooth transmission module and a GPS signal module. The data transmission module makes an intelligent judgment on the signal strength, uses the 3G information transmission module, the 4G signal transmission module, the Bluetooth transmission module and the GPS signal module to establish a stable signal transmission chain, and transmits the data collected by the data acquisition module to the processing and analysis module.
4. A system for automatically acquiring mobile terminal information according to claim 3, characterized in that: The processing and analysis module includes a database management platform and data analysis tools. The processing and analysis module is used to clean, organize and analyze the collected raw data, extract valuable information and insights, and conduct in-depth analysis of the collected information through statistical analysis, machine learning and other technologies.
5. A system for automatically acquiring mobile terminal information according to claim 4, characterized in that: The information collection module is used to collect the required information from the connected mobile terminal, including basic information, accessory configuration, network status, application installation list and battery status. For Android devices, system information and application data can be read through ADB commands or by developing a dedicated Android application; for iOS devices, information needs to be obtained indirectly through iTunes backup analysis, enterprise certificate deployed applications or iCloud synchronization.
6. A system for automatically acquiring mobile terminal information according to claim 5, characterized in that: The authentication and permission management module is responsible for processing user login requests, verifying user identities, and allocating corresponding resource access rights based on user roles and permissions. It adopts identity authentication and authorization technologies such as OAuth and JWT, combined with database storage of user information and permission configuration, to achieve secure access control, ensuring that only legally authenticated and authorized users or applications can access the system, and controlling the data scope and operation permissions they can access.
7. A system for automatically acquiring mobile terminal information according to claim 6, characterized in that: The authentication and authority management module includes the following steps when working: S11: The user enters the user name and password through the system login interface to initiate a login request; S12: After receiving the login request, the system sends the user name and password to the authentication server, which verifies the correctness of the user name and password by comparing the user information in the database; S13: If the username and password match, the authentication server returns an authentication success message and generates a session token. If they do not match, an authentication failure message is returned and the user is prompted to re-enter the password. S14: After the user is successfully authenticated, the system queries and assigns corresponding permissions from the permission database according to the user's role or user group information; S15: When a user attempts to access or operate mobile terminal information, the system first verifies whether the user has the corresponding authority; S16: If the user has access or operation authority, further access is allowed; S17: If the user does not have sufficient permissions, the request is rejected and an error message may be returned or the user may be prompted to contact the administrator.
8. A system for automatically acquiring mobile terminal information according to claim 7, characterized in that: The reporting and visualization module is used to generate interactive reports and dashboards using chart libraries or business intelligence tools to facilitate users to understand and use analysis results. The reporting and visualization module presents the analysis results to users in the form of reports, and intuitively displays key data such as device information, user behavior, trend analysis, etc. through visualization methods such as charts and graphs.
9. A system for automatically acquiring mobile phone terminal information according to claim 8, characterized in that: The security audit and log recording module is used to collect, store and analyze log data using the log management system to ensure the transparency and traceability of the system. At the same time, it implements security measures such as data encryption and access control to protect the security of log data and record all key operations of the system, including user login, device connection, information collection, data processing, etc., in order to conduct security audits, troubleshooting and compliance checks.
10. A system for automatically acquiring mobile phone terminal information according to claim 9, characterized in that: The security audit and logging module works by: S21: The application on the mobile terminal will generate various logs during operation, and the mobile operating system will also generate logs to record system-level activities; S22: The system collects the generated log data from the mobile terminal in real time through a preset log collection mechanism. For logs that cannot be collected in real time or have a large amount of data, a scheduled task is set to collect them in batches; S23: The collected log data needs to be parsed and converted into a standardized format for subsequent processing and analysis. According to the type and content of the log, it is classified and archived to different storage locations; S24: Some log data is temporarily stored in the local storage device of the mobile terminal to facilitate quick access and reduce network transmission pressure; S25: The system analyzes the collected log data in real time to detect potential security threats and abnormal behaviors; S26: Based on the results of the log analysis, the system automatically generates an audit report. After the audit report is completed, it is distributed to relevant personnel according to the predetermined process.