Cross-network management method and system, terminal equipment and storage medium
By introducing a transit server into the management network, the problem of low work efficiency under the separation strategy of office network and production network is solved, remote control and permission management of production terminals are realized, work efficiency is improved and security is enhanced.
Patent Information
- Application Number
- CN202411205641.0
- Authority / Receiving Office
- CN · China
- Patent Type
- Applications(China)
- Current Assignee / Owner
- Filing Date
- 2024-08-29
- Publication Date
- 2025-02-18
AI Technical Summary
The network separation strategy between the existing office network and the production network reduces the work efficiency of engineers, resulting in the inability to obtain production data instantly and perform remote configuration, debugging, and maintenance.
By introducing a transit server under the management network, the management terminal sends terminal user information to the transit server to obtain production terminal status information within the management authority, and sends control instructions to the production terminal through the transit server to execute the instructions.
It realizes the control of the production terminals in the production network under the management network, improves work efficiency, and avoids the risks of data leakage and network attacks through permission management.
Smart Images

Figure CN119484615A_ABST
Abstract
Description
Technical Field
[0001] The present application relates to the technical field of production management, and in particular to a cross-network management method, system, terminal device and storage medium. Background Art
[0002] In modern industrial production environments, with the rapid development of information technology, the separation of production networks and office networks has become a common security practice. This separation strategy is mainly based on information security and data protection considerations, aiming to prevent potential network attacks, data leakage or unauthorized access, thereby ensuring the stable operation of production systems and the security of sensitive data.
[0003] However, while this network separation strategy improves system security, it also brings many inconveniences to engineers' daily work. First, since engineers usually work in an office network environment, they cannot directly access the industrial computers located in the production network, resulting in engineers being unable to instantly obtain real-time data such as production data, operating status, and fault information at the production site. Secondly, due to network isolation, engineers cannot remotely configure, debug, and maintain the industrial computers, and must go to the production site in person to handle them. In other words, the existing network separation strategy between the office network and the production network reduces work efficiency.
[0004] The above contents are only used to assist in understanding the technical solution of the present application and do not constitute an admission that the above contents are prior art. Summary of the invention
[0005] The main purpose of the present application is to provide a cross-network management method, system, terminal device and storage medium, aiming to solve the technical problem that the existing network separation strategy between office network and production network reduces work efficiency.
[0006] To achieve the above object, the present application proposes a management terminal applied to a management network, and the cross-network management method includes:
[0007] Sending terminal user information to the transit server, so that the transit server feeds back terminal status information of the production terminal within the corresponding management authority according to the terminal user information;
[0008] After receiving the control instruction for the terminal status information, the control instruction is sent to the production terminal pointed to by the control instruction via the transit server, so that the production terminal pointed to by the control instruction executes the control instruction.
[0009] In one embodiment, before the step of sending the control instruction to the production terminal pointed to by the control instruction via the transit server, the step includes:
[0010] Acquire terminal attribute information of the production terminal pointed to by the control instruction from the transit server, wherein the terminal attribute information includes an IP address and a terminal password of the production terminal;
[0011] Based on the IP address and the terminal password, connect to the targeted production terminal through the transit server.
[0012] In one embodiment, the step of receiving a control instruction for the terminal status information includes:
[0013] After receiving a first operation on the terminal status information, determining a production terminal pointed to by the first operation;
[0014] Obtaining permission function information of the production terminal generated by the transit server based on the terminal user information;
[0015] The permission function control corresponding to the permission function information is displayed, and after receiving a second operation on the permission function control, a corresponding control instruction is generated.
[0016] In addition, to achieve the above purpose, the present application also proposes a cross-network management method, which is applied to a transit server. The cross-network management method includes:
[0017] After receiving the terminal user information sent by the management terminal, feeding back the terminal status information of the production terminal within the corresponding management authority to the management terminal according to the terminal user information;
[0018] After receiving the control instruction from the management terminal, the control instruction is sent to the corresponding production terminal, so that the production terminal pointed to by the control instruction executes the control instruction.
[0019] In one embodiment, after receiving the control instruction from the management terminal, before sending the control instruction to the corresponding production terminal so that the production terminal pointed to by the control instruction executes the control instruction, the step includes:
[0020] Based on the terminal user information, determining authorized function items for the production terminal, and using the authorized function items as authorized function information;
[0021] The permission function information is sent to the management terminal, so that the management terminal displays the permission function control corresponding to the permission function information.
[0022] In addition, to achieve the above purpose, the present application also proposes a cross-network management method, which is applied to a production terminal under a production network. The cross-network management method includes:
[0023] After establishing a connection with the management terminal through the transit server, obtaining the production interface information of the production terminal, and sending the production interface information to the management terminal through the transit server;
[0024] After receiving the control instruction sent by the relay server, the control instruction is executed.
[0025] In one embodiment, the cross-network management method further includes:
[0026] generating a new password for the production terminal;
[0027] The new password is sent to the transit server, so that the transit server updates the stored terminal password of the production terminal based on the new password.
[0028] In addition, to achieve the above-mentioned purpose, the present application also proposes a cross-network management system, the cross-network management system comprising at least one management terminal under the management network, a transit server and at least one production terminal under the production network, the management terminal and the production terminal are respectively connected to the transit server for communication;
[0029] Management terminal, used to send terminal user information to the transit server;
[0030] The transfer server is used to feedback the terminal status information of the production terminal within the corresponding management authority according to the terminal user information;
[0031] The management terminal is further configured to send the control instruction for the terminal status information to the transfer server after receiving the control instruction;
[0032] The transfer server is further used to send the control instruction to the corresponding production terminal after receiving the control instruction from the management terminal;
[0033] The production terminal is used to execute the control instruction.
[0034] In addition, to achieve the above-mentioned purpose, the present application also proposes a terminal device, which includes: a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the computer program is configured to implement the steps of the cross-network management method as described above.
[0035] In addition, to achieve the above objectives, the present application also proposes a storage medium, which is a computer-readable storage medium, on which a computer program is stored, and when the computer program is executed by a processor, the steps of the cross-network management method described above are implemented.
[0036] In addition, to achieve the above-mentioned purpose, the present application also provides a computer program product, which includes a computer program, and when the computer program is executed by a processor, the steps of the cross-network management method described above are implemented.
[0037] One or more technical solutions proposed in this application have at least the following technical effects:
[0038] This application is applied to the management terminal under the management network, by sending the terminal user information to the relay server, so that the relay server can feedback the terminal status information of the production terminal within the corresponding management authority according to the terminal user information. Therefore, according to the terminal status information fed back by the relay server, the user of the management terminal can view the terminal status of the production terminal within its own management authority, and then after the management terminal receives the user's control instruction for the terminal status information, it can send the control instruction to the production terminal pointed to by the control instruction through the relay server, so that the production terminal pointed to by the control instruction executes the control instruction. Therefore, this application is connected to the production terminal under the production network with the help of the relay server, so that not only engineers can realize the control of the production terminal in the production network under the management network, but also effectively improve the work efficiency. And because the relay server feedbacks the terminal status information based on the management authority of the management terminal, it avoids the risks of data leakage, network attacks, etc. brought by anyone being able to access and operate all the production terminals under the production network. BRIEF DESCRIPTION OF THE DRAWINGS
[0039] The accompanying drawings, which are incorporated in and constitute a part of this specification, illustrate embodiments consistent with the present application and, together with the description, serve to explain the principles of the present application.
[0040] In order to more clearly illustrate the embodiments of the present application or the technical solutions in the prior art, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, for ordinary technicians in this field, other drawings can be obtained based on these drawings without paying any creative work.
[0041] Figure 1 A flowchart of the first embodiment of the cross-network management method of the present application is provided;
[0042] Figure 2 A flowchart of the second embodiment of the cross-network management method of the present application is provided;
[0043] Figure 3 A flowchart of the third embodiment of the cross-network management method of the present application is provided;
[0044] Figure 4A display scene diagram of the production interface information involved in the embodiment of the present application on the management terminal;
[0045] Figure 5 Another display scene diagram of the production interface information involved in the embodiment of the present application on the management terminal;
[0046] Figure 6 A schematic diagram of a scenario of a cross-network management system according to an embodiment of the present application;
[0047] Figure 7 A schematic diagram of the device structure of a terminal device involved in the cross-network management method in an embodiment of the present application.
[0048] The purpose, features and advantages of this application will be further described in conjunction with the embodiments and with reference to the accompanying drawings. DETAILED DESCRIPTION
[0049] It should be understood that the specific embodiments described herein are only used to explain the technical solutions of the present application and are not used to limit the present application.
[0050] In order to better understand the technical solution of the present application, a detailed description will be given below in conjunction with the accompanying drawings and specific implementation methods.
[0051] The main solution of the embodiment of the present application is: sending terminal user information to the relay server, so that the relay server can feedback the terminal status information of the production terminal within the corresponding management authority according to the terminal user information; after receiving the control instruction for the terminal status information, sending the control instruction via the relay server to the production terminal pointed to by the control instruction, so that the production terminal pointed to by the control instruction executes the control instruction.
[0052] Due to the consideration of information security and data protection in the existing technology, the separation strategy of production network and office network is adopted, which brings many inconveniences to the daily work of engineers. First, since engineers usually work in an office network environment, they cannot directly access the industrial computers located in the production network, resulting in engineers being unable to instantly obtain real-time data such as production data, operating status, fault information, etc. at the production site. Secondly, due to network isolation, engineers cannot remotely configure, debug, maintain and perform other operations on the industrial computers, and must go to the production site in person to handle them. That is, the existing network separation strategy of office network and production network reduces work efficiency.
[0053] This application provides a solution, which uses a transit server to connect to the production terminal under the production network, so that engineers can control the production terminal in the production network under the management network, effectively improving work efficiency. And because the transit server feedbacks the terminal status information based on the management authority of the management terminal, it avoids the risks of data leakage, network attacks, etc. caused by anyone being able to access and operate all the production terminals under the production network.
[0054] Based on this, the present application embodiment provides a cross-network management method, referring to Figure 1 , Figure 1 This is a flowchart of the first embodiment of the cross-network management method of the present application.
[0055] In this embodiment, the cross-network management method is applied to a management terminal in a management network, and the cross-network management method includes steps S10 to S20:
[0056] Step S10, sending the terminal user information to the transit server, so that the transit server feeds back the terminal status information of the production terminal within the corresponding management authority according to the terminal user information;
[0057] It should be noted that the management network is a network composed of multiple management terminals. The management terminals can be laptop computers, PDAs (Personal Digital Assistants), PADs (Portable Application Descriptions), and other computing service devices with data processing, network communication, and program running functions. The transit server is a server that is respectively connected to each management terminal in the management network and each production terminal in the production network. The transit server can be a cloud server, a physical server, and other types of servers. The production terminal is a terminal device used to control the production process under the production network, such as an industrial computer. The production network is a network composed of multiple production terminals.
[0058] In addition, it should be noted that the terminal user information is information used to describe the current user using the management terminal, such as account name, account password, identifying string, etc. The management authority is the authority of the current user described by the terminal user information to manage the production terminal. The terminal status information is information describing the operating status of the production terminal, such as normal operation, stopped operation, failure, etc.
[0059] The executor of this embodiment is a management terminal under the management network, and the management terminal can send terminal user information to the transit server. As a result, the transit server can obtain the management authority of the terminal user information for the production terminal in the production network based on the terminal user information, and feed back the terminal status information of the production terminal within the management authority to the management terminal. Furthermore, in order to improve the security of the system, the transit server can verify the terminal user information to determine whether the management terminal is a legal terminal. If the management terminal is a legal terminal, then execute the step: feed back the terminal status information of the production terminal within the corresponding management authority based on the terminal user information. If the management terminal is not a legal terminal, output a preset prompt message to prompt that the management terminal is illegal.
[0060] Step S20, after receiving the control instruction for the terminal status information, the control instruction is sent to the production terminal pointed to by the control instruction via the transit server, so that the production terminal pointed to by the control instruction executes the control instruction.
[0061] It should be noted that the control instruction is an instruction issued by the current user of the management terminal to control one or more production terminals within the scope of the management authority. Exemplarily, the control instruction may be an instruction to control the production process of the production terminal, an instruction to process (such as modify, add, delete, download, update, etc.) the files of the production terminal, etc.
[0062] In this embodiment, after the current user inputs a control instruction for the terminal status information to the management terminal, the control instruction is sent to the transit server. Since the transit server is in communication connection with each production terminal in the production network, the transit server can forward the control instruction to the production terminal pointed to by the control instruction. Then, the pointed production terminal can call the application interface corresponding to the control instruction to implement the operation corresponding to the control instruction.
[0063] In a feasible implementation manner, before the step of sending the control instruction to the production terminal pointed to by the control instruction via the transfer server in step S20, steps A10 to A20 may be included:
[0064] Step A10, obtaining terminal attribute information of the production terminal pointed to by the control instruction from the transit server, wherein the terminal attribute information includes an IP address and a terminal password of the production terminal;
[0065] Step A20, based on the IP address and the terminal password, connect to the targeted production terminal through the transit server.
[0066] It should be noted that the terminal attribute information is the information required to access the production terminal, and at least includes the IP (Internet Protocol) address and terminal password of the production terminal.
[0067] In order to further improve the stability of the system operation in the production network and the security of sensitive data, the production terminal in this embodiment can set a terminal password in advance, and upload the IP address and terminal password of the production terminal as the terminal attribute information of the production terminal and store it in the transit server. In this embodiment, the management terminal can obtain the terminal attribute information of the production terminal pointed to by the control instruction from the transit server, wherein the terminal attribute information includes the IP address and terminal password of the production terminal. Then, the management terminal can connect to the pointed production terminal through the transit server and perform file transfer based on the IP address and the terminal password through the preset encrypted file transfer protocol. Exemplarily, the preset encrypted file transfer protocol can be a security protocol such as SFTP (Secure File Transfer Protocol) and SSL (Secure Sockets Layer).
[0068] In this implementation, the terminal attribute information of the production terminal pointed to by the control instruction is obtained from the relay server, wherein the terminal attribute information includes the IP address and the terminal password of the production terminal; based on the IP address and the terminal password, the relay server is connected to the pointed production terminal, thereby further improving the stability of the system operation in the production network and the security of sensitive data.
[0069] In a feasible implementation manner, the step of receiving a control instruction for the terminal status information in step S20 may include steps S21 to S23:
[0070] Step S21, after receiving a first operation for the terminal status information, determining the production terminal pointed to by the first operation;
[0071] Step S22, obtaining the authority function information of the production terminal generated by the transit server based on the terminal user information;
[0072] Step S23: displaying the permission function control corresponding to the permission function information, and generating a corresponding control instruction after receiving a second operation on the permission function control.
[0073] It should be noted that the permission function information is a description of the function items with permission for the production terminal. For example, the function items may be file reading function, file downloading function, file, production control function, etc., which are items for controlling the production terminal.
[0074] In order to further refine the permission granularity of the management terminal to improve the precision of permission management. After receiving the first operation on the terminal status information, this embodiment determines the production terminal pointed to by the first operation. The first operation is an operation input through an input device such as a mouse, keyboard, or touch screen for selecting a production terminal that is desired to be controlled. Then, the permission function information of the production terminal pointed to by the transit server based on the terminal user information can be obtained. Then, the permission function control corresponding to the permission function information can be displayed, and after receiving the second operation on the permission function control, the corresponding control instruction can be generated. The second operation is an operation on the permission function control input through an input device such as a mouse, keyboard, or touch screen.
[0075] In this implementation, after receiving the first operation on the terminal status information, the production terminal pointed to by the first operation is determined; the permission function information of the production terminal pointed to by the transit server based on the terminal user information is obtained; the permission function control corresponding to the permission function information is displayed, and after receiving the second operation on the permission function control, the corresponding control instruction is generated. Therefore, this embodiment manages the permissions of the specific functions of the production terminal on the basis of the management terminal managing the permissions of the production terminal, so that the permission granularity of the management terminal is more refined, and the precision of the permission management of the management terminal is improved.
[0076] The first embodiment of the present application provides a cross-network management method, which is applied to a management terminal under a management network, and sends terminal user information to a transit server so that the transit server can feedback the terminal status information of the production terminal within the corresponding management authority according to the terminal user information. Thus, according to the terminal status information fed back by the transit server, the user of the management terminal can view the terminal status of the production terminal within its own management authority, and then after the management terminal receives the control instruction of the user for the terminal status information, the control instruction can be sent to the production terminal pointed to by the control instruction through the transit server, so that the production terminal pointed to by the control instruction executes the control instruction. Thus, this embodiment is connected to the production terminal under the production network by means of the transit server, so that not only the engineer can realize the control of the production terminal in the production network under the management network, but also the work efficiency is effectively improved. And because the transit server feedbacks the terminal status information based on the management authority of the management terminal, it avoids the risks of data leakage, network attacks, etc. brought by anyone being able to access and operate all the production terminals under the production network.
[0077] Based on this, the present application embodiment provides a cross-network management method, referring to Figure 2 , Figure 2 This is a flow chart of the second embodiment of the cross-network management method of the present application.
[0078] In this embodiment, the cross-network management method is applied to a transit server, and the cross-network management method includes steps S30 to S40:
[0079] Step S30, after receiving the terminal user information sent by the management terminal, feeding back the terminal status information of the production terminal within the corresponding management authority to the management terminal according to the terminal user information;
[0080] Step S40, after receiving the control instruction from the management terminal, the control instruction is sent to the corresponding production terminal, so that the production terminal pointed to by the control instruction executes the control instruction.
[0081] It should be noted that the production terminal pointed to is at least one production terminal in the production network that the control instruction is expected to control.
[0082] The execution subject of this embodiment is a transit server, which stores management rights corresponding to different terminal user information, so as to facilitate the authority management of production terminals that can be controlled by the management terminal. After receiving the terminal user information sent by the management terminal, the transit server can obtain the management rights of the terminal user information for the production terminals in the production network according to the terminal user information, and feed back the terminal status information of the production terminals within the management rights to the management terminal. After receiving the control instruction of the management terminal, the control instruction is sent to the corresponding production terminal, so that the production terminal pointed to by the control instruction executes the control instruction.
[0083] In a feasible implementation manner, steps B10 to B20 are included before step S40:
[0084] Step B10, based on the terminal user information, determining authorized function items for the production terminal, and using the authorized function items as authorized function information;
[0085] Step B20: sending the permission function information to the management terminal so that the management terminal displays the permission function control corresponding to the permission function information.
[0086] It should be noted that there is a corresponding relationship between the terminal user information and the authorized functional items for the production terminal. For example, assuming that the terminal user information includes the identity of a maintenance engineer, the authorized functional items for the production terminal may include functions such as modifying, adding, deleting, downloading, and updating the system files of the production terminal to facilitate the realization of its work.
[0087] This embodiment can determine the functional items that the management terminal has permission to use for the production terminal based on the terminal user information, and use the functional items that have permission as permission function information; the permission function information can then be sent to the management terminal so that the management terminal displays the permission function control corresponding to the permission function information. Thus, the transit server can assign corresponding functional items to users with different permissions based on the terminal user information, so as to enable the management terminal to manage the permissions of specific functions of the production terminal, thereby making the permission granularity of the management terminal more refined and improving the precision of permission management of the management terminal.
[0088] The second embodiment of the present application, after receiving the terminal user information sent by the management terminal, according to the terminal user information, the terminal status information of the production terminal within the corresponding management authority is fed back to the management terminal; after receiving the control instruction of the management terminal, the control instruction is sent to the corresponding production terminal, so that the production terminal pointed to by the control instruction executes the control instruction. This embodiment manages the authority of the management terminal based on the terminal user information with the help of a transit server, thereby avoiding the risks of data leakage, network attacks, etc. caused by anyone being able to access and operate all the production terminals under the production network.
[0089] Based on this, the present application embodiment provides a cross-network management method, referring to Figure 3 , Figure 3 This is a flowchart of the third embodiment of the cross-network management method of the present application.
[0090] In this embodiment, the cross-network management method is applied to a production terminal in a production network, and the cross-network management method includes steps S50 to S60:
[0091] Step S50, after establishing a connection with the management terminal via the transit server, obtaining the production interface information of the production terminal, and sending the production interface information to the management terminal via the transit server;
[0092] Step S60: After receiving the control instruction sent by the transit server, execute the control instruction.
[0093] It should be noted that the production interface information may be a real-time image of the desktop currently displayed by the production terminal, a real-time image of the operation interface of the production terminal, and other interface-related information displayed by the production terminal.
[0094] The management terminal obtains the terminal attribute information of the production terminal pointed to by the control instruction from the relay server, and connects to the production terminal through the relay server based on the IP address and terminal password in the terminal attribute information. Then, the production terminal establishes a connection with the management terminal through the relay server. The production terminal can then obtain the production interface information of the production terminal, and send the production interface information to the management terminal through the relay server, so that the management terminal can display the interface information of the production terminal in the current production process. After receiving the control instruction issued by the current user for the terminal status information, the management terminal sends the control instruction to the production terminal pointed to by the control instruction through the relay server. After receiving the control instruction sent by the relay server, the pointed production terminal can call the application interface corresponding to the control instruction to implement the corresponding operation of the control instruction. See. Figure 4 and Figure 5 , Figure 4 This is a display scene diagram of the production interface information involved in the embodiment of the present application on the management terminal. Figure 5 This is another display scene diagram of the production interface information involved in the embodiment of the present application on the management terminal.
[0095] In a feasible embodiment, the cross-network management method further includes steps C10 to C20:
[0096] Step C10, generating a new password for the production terminal;
[0097] Step C20: sending the new password to the transit server, so that the transit server updates the stored terminal password of the production terminal based on the new password.
[0098] In order to prevent the management terminal from obtaining the IP address and terminal password of the production terminal from the transit server, the IP address and terminal password of the production terminal are used to bypass the authority management of the transit server and directly communicate with the production terminal. In this embodiment, a character string is generated by a predetermined character generation algorithm regularly (such as every 8 hours, every 12 hours, etc.) or irregularly (such as after each access), and the character string is used as the new password of the production terminal. The predetermined character string generation algorithm is an algorithm pre-set to generate a character string as a new password. Exemplarily, the predetermined character string generation algorithm can be a hash algorithm, such as after generating a random number, performing a hash calculation on the random number to obtain a character string. The new password is then sent to the transit server so that the transit server updates the stored terminal password of the production terminal based on the new password.
[0099] The third embodiment of the present application obtains the production interface information of the production terminal after establishing a connection with the management terminal through the transit server, and sends the production interface information to the management terminal through the transit server; after receiving the control instruction sent by the transit server, the control instruction is executed. This embodiment uses the transit server to connect to the production terminal under the production network, so that not only engineers can control the production terminals in the production network under the management network, but also work efficiency is effectively improved. And by sending the production interface information to the management terminal through the transit server, the current user of the management terminal can issue more accurate control instructions based on the interface information of the production terminal.
[0100] It should be noted that the above examples are only used to understand the present application and do not constitute a limitation on the cross-network management method of the present application. More simple transformations based on this technical concept are all within the scope of protection of the present application.
[0101] This application also provides a cross-network management system, please refer to Figure 6The cross-network management system includes at least one management terminal 11 under the management network 10, a transit server 20 and at least one production terminal 31 under the production network 30, and the management terminal 11 and the production terminal 31 are respectively connected to the transit server 20 for communication;
[0102] The management terminal 11 is used to send terminal user information to the transfer server 20;
[0103] The transfer server 20 is used to feedback the terminal status information of the production terminal within the corresponding management authority according to the terminal user information;
[0104] The management terminal 11 is further configured to send the control instruction for the terminal status information to the transfer server 20 after receiving the control instruction;
[0105] The transfer server 20 is further configured to send the control instruction to the corresponding production terminal 31 after receiving the control instruction from the management terminal 11;
[0106] The production terminal 31 is used to execute the control instruction.
[0107] In some embodiments, the management terminal 11 is further used to:
[0108] Obtaining terminal attribute information of the production terminal pointed to by the control instruction from the transit server 20, wherein the terminal attribute information includes an IP address and a terminal password of the production terminal;
[0109] Based on the IP address and the terminal password, the connection is made to the targeted production terminal 31 via the transit server 20 .
[0110] In some embodiments, the management terminal 11 is further used to:
[0111] After receiving a first operation on the terminal status information, determining a production terminal pointed to by the first operation;
[0112] The transfer server 20 generates permission function information of the production terminal based on the terminal user information;
[0113] The permission function control corresponding to the permission function information is displayed, and after receiving a second operation on the permission function control, a corresponding control instruction is generated.
[0114] In some embodiments, the transit server 20 is further configured to:
[0115] Based on the terminal user information, determining authorized function items for the production terminal, and using the authorized function items as authorized function information;
[0116] The permission function information is sent to the management terminal 11, so that the management terminal 11 displays the permission function control corresponding to the permission function information.
[0117] In some embodiments, the production terminal 31 is further used to:
[0118] After establishing a connection with the management terminal through the transit server, obtaining the production interface information of the production terminal, and sending the production interface information to the management terminal through the transit server;
[0119] After receiving the control instruction sent by the relay server, the control instruction is executed.
[0120] In some embodiments, the production terminal 31 is further used to:
[0121] generating a new password for the production terminal;
[0122] The new password is sent to the transit server, so that the transit server updates the stored terminal password of the production terminal based on the new password.
[0123] The cross-network management system provided by the present application adopts the cross-network management method in the above embodiment, which can solve the technical problem that the network separation strategy of the existing office network and the production network reduces the work efficiency. Compared with the prior art, the beneficial effects of the cross-network management system provided by the present application are the same as the beneficial effects of the cross-network management method provided by the above embodiment, and the other technical features in the cross-network management system are the same as the features disclosed in the above embodiment method, which will not be repeated here.
[0124] The present application provides a terminal device, which includes: at least one processor; and a memory that is communicatively connected to the at least one processor; wherein the memory stores instructions that can be executed by the at least one processor, and the instructions are executed by the at least one processor so that the at least one processor can execute the cross-network management method in the above-mentioned embodiment one.
[0125] Reference below Figure 7 , which shows a schematic diagram of the structure of a terminal device suitable for implementing the embodiments of the present application. The terminal device in the embodiments of the present application may include but is not limited to mobile terminals such as laptop computers, PDAs (Personal Digital Assistants), PADs (Portable Application Descriptions: tablet computers), and fixed terminals such as industrial computers, servers, and desktop computers. Figure 7 The terminal device shown is merely an example and should not bring any limitation to the functions and scope of use of the embodiments of the present application.
[0126] like Figure 7 As shown, the terminal device may include a processing device 1001 (e.g., a central processing unit, a graphics processor, etc.), which can perform various appropriate actions and processes according to a program stored in a read-only memory (ROM: Read Only Memory) 1002 or a program loaded from a storage device 1003 to a random access memory (RAM: Random Access Memory) 1004. In RAM1004, various programs and data required for the operation of the terminal device are also stored. The processing device 1001, ROM1002, and RAM1004 are connected to each other through a bus 1005. An input / output (I / O) interface 1006 is also connected to the bus. Generally, the following systems can be connected to the I / O interface 1006: an input device 1007 including, for example, a touch screen, a touch pad, a keyboard, a mouse, an image sensor, a microphone, an accelerometer, a gyroscope, etc.; an output device 1008 including, for example, a liquid crystal display (LCD: Liquid Crystal Display), a speaker, a vibrator, etc.; a storage device 1003 including, for example, a magnetic tape, a hard disk, etc.; and a communication device 1009. The communication device 1009 can allow the terminal device to communicate with other devices wirelessly or by wire to exchange data. Although the figure shows a terminal device with various systems, it should be understood that it is not required to implement or have all the systems shown. More or fewer systems can be implemented or provided instead.
[0127] In particular, according to the embodiments disclosed in the present application, the process described above with reference to the flowchart can be implemented as a computer software program. For example, the embodiments disclosed in the present application include a computer program product, which includes a computer program carried on a computer-readable medium, and the computer program includes a program code for executing the method shown in the flowchart. In such an embodiment, the computer program can be downloaded and installed from a network through a communication device, or installed from a storage device 1003, or installed from a ROM 1002. When the computer program is executed by the processing device 1001, the above-mentioned functions defined in the method of the embodiment disclosed in the present application are executed.
[0128] The terminal device provided by the present application adopts the cross-network management method in the above embodiment, which can solve the technical problem that the network separation strategy of the existing office network and the production network reduces the work efficiency. Compared with the prior art, the beneficial effects of the terminal device provided by the present application are the same as the beneficial effects of the cross-network management method provided by the above embodiment, and the other technical features in the terminal device are the same as the features disclosed in the method of the previous embodiment, which will not be repeated here.
[0129] It should be understood that the various parts disclosed in this application can be implemented by hardware, software, firmware or a combination thereof. In the description of the above embodiments, specific features, structures, materials or characteristics can be combined in any one or more embodiments or examples in a suitable manner.
[0130] The above is only a specific implementation of the present application, but the protection scope of the present application is not limited thereto. Any person skilled in the art who is familiar with the present technical field can easily think of changes or substitutions within the technical scope disclosed in the present application, which should be included in the protection scope of the present application. Therefore, the protection scope of the present application should be based on the protection scope of the claims.
[0131] The present application provides a computer-readable storage medium having computer-readable program instructions (ie, computer programs) stored thereon, and the computer-readable program instructions are used to execute the cross-network management method in the above-mentioned embodiment.
[0132] The computer-readable storage medium provided in the present application may be, for example, a USB flash drive, but is not limited to electrical, magnetic, optical, electromagnetic, infrared, or semiconductor systems or devices, or any combination of the above. More specific examples of computer-readable storage media may include, but are not limited to: an electrical connection with one or more wires, a portable computer disk, a hard disk, a random access memory (RAM: Random Access Memory), a read-only memory (ROM: Read Only Memory), an erasable programmable read-only memory (EPROM: Erasable Programmable Read Only Memory or flash memory), an optical fiber, a portable compact disk read-only memory (CD-ROM: CD-Read Only Memory), an optical storage device, a magnetic storage device, or any suitable combination of the above. In this embodiment, the computer-readable storage medium may be any tangible medium containing or storing a program that can be used by or in combination with an instruction execution system or device. The program code contained on the computer-readable storage medium may be transmitted using any appropriate medium, including but not limited to: wires, optical cables, RF (Radio Frequency: Radio Frequency), etc., or any suitable combination of the above.
[0133] The computer-readable storage medium may be included in the terminal device; or may exist independently without being installed in the terminal device.
[0134] The above-mentioned computer-readable storage medium carries one or more programs. When the above-mentioned one or more programs are executed by the terminal device, the terminal device: sends terminal user information to the relay server, so that the relay server can feedback the terminal status information of the production terminal within the corresponding management authority according to the terminal user information; after receiving the control instruction for the terminal status information, send the control instruction via the relay server to the production terminal pointed to by the control instruction, so that the production terminal pointed to by the control instruction executes the control instruction.
[0135] Alternatively, after receiving terminal user information sent by the management terminal, the terminal status information of the production terminal within the corresponding management authority is fed back to the management terminal based on the terminal user information; after receiving the control instruction from the management terminal, the control instruction is sent to the corresponding production terminal so that the production terminal pointed to by the control instruction executes the control instruction.
[0136] Alternatively, after establishing a connection with the management terminal through the relay server, the production interface information of the production terminal is obtained, and the production interface information is sent to the management terminal via the relay server; after receiving the control instruction sent by the relay server, the control instruction is executed.
[0137] Computer program code for performing the operations of the present application may be written in one or more programming languages or a combination thereof, including object-oriented programming languages such as Java, Smalltalk, C++, and conventional procedural programming languages such as "C" or similar programming languages. The program code may be executed entirely on the user's computer, partially on the user's computer, as a separate software package, partially on the user's computer and partially on a remote computer, or entirely on a remote computer or server. In the case of a remote computer, the remote computer may be connected to the user's computer through any type of network, including a local area network (LAN) or a wide area network (WAN), or may be connected to an external computer (e.g., via the Internet using an Internet service provider).
[0138] The flow chart and block diagram in the accompanying drawings illustrate the possible architecture, function and operation of the system, method and computer program product according to various embodiments of the present application. In this regard, each square box in the flow chart or block diagram can represent a module, a program segment or a part of a code, and the module, the program segment or a part of the code contains one or more executable instructions for realizing the specified logical function. It should also be noted that in some alternative implementations, the functions marked in the square box can also occur in a sequence different from that marked in the accompanying drawings. For example, two square boxes represented in succession can actually be executed substantially in parallel, and they can sometimes be executed in the opposite order, depending on the functions involved. It should also be noted that each square box in the block diagram and / or flow chart, and the combination of the square boxes in the block diagram and / or flow chart can be implemented with a dedicated hardware-based system that performs a specified function or operation, or can be implemented with a combination of dedicated hardware and computer instructions.
[0139] The modules involved in the embodiments described in this application may be implemented by software or hardware, wherein the name of the module does not constitute a limitation on the unit itself in some cases.
[0140] The readable storage medium provided by the present application is a computer-readable storage medium, which stores computer-readable program instructions (i.e., computer programs) for executing the above-mentioned cross-network management method, and can solve the technical problem that the network separation strategy of the existing office network and the production network reduces the work efficiency. Compared with the prior art, the beneficial effects of the computer-readable storage medium provided by the present application are the same as the beneficial effects of the cross-network management method provided by the above-mentioned embodiment, and will not be repeated here.
[0141] The present application also provides a computer program product, including a computer program, which implements the steps of the above-mentioned cross-network management method when executed by a processor.
[0142] The computer program product provided by the present application can solve the technical problem that the existing network separation strategy of office network and production network reduces work efficiency. Compared with the prior art, the beneficial effects of the computer program product provided by the present application are the same as the beneficial effects of the cross-network management method provided by the above embodiment, which will not be repeated here.
[0143] The above descriptions are only some embodiments of the present application, and are not intended to limit the patent scope of the present application. All equivalent structural changes made using the contents of the present application specification and drawings under the technical concept of the present application, or direct / indirect applications in other related technical fields are included in the patent protection scope of the present application.
Claims
1. A cross-network management method, characterized in that: Applied to a management terminal under a management network, the cross-network management method includes: Sending terminal user information to the transit server, so that the transit server feeds back terminal status information of the production terminal within the corresponding management authority according to the terminal user information; After receiving the control instruction for the terminal status information, the control instruction is sent to the production terminal pointed to by the control instruction via the transit server, so that the production terminal pointed to by the control instruction executes the control instruction.
2. The cross-network management method according to claim 1, characterized in that: Before the step of sending the control instruction to the production terminal pointed to by the control instruction via the transfer server, the method includes: Acquire terminal attribute information of the production terminal pointed to by the control instruction from the transit server, wherein the terminal attribute information includes an IP address and a terminal password of the production terminal; Based on the IP address and the terminal password, connect to the targeted production terminal through the transit server.
3. The cross-network management method according to any one of claims 1 to 2, characterized in that: The step of receiving a control instruction for the terminal status information comprises: After receiving a first operation on the terminal status information, determining a production terminal pointed to by the first operation; Obtaining permission function information of the production terminal generated by the transit server based on the terminal user information; The permission function control corresponding to the permission function information is displayed, and after receiving a second operation on the permission function control, a corresponding control instruction is generated.
4. A cross-network management method, characterized in that: Applied to the transit server, the cross-network management method includes: After receiving the terminal user information sent by the management terminal, feeding back the terminal status information of the production terminal within the corresponding management authority to the management terminal according to the terminal user information; After receiving the control instruction from the management terminal, the control instruction is sent to the corresponding production terminal, so that the production terminal pointed by the control instruction executes the control instruction.
5. The cross-network management method according to claim 4, characterized in that: After receiving the control instruction from the management terminal, before the step of sending the control instruction to the corresponding production terminal so that the production terminal pointed to by the control instruction executes the control instruction, the method includes: Based on the terminal user information, determining authorized function items for the production terminal, and using the authorized function items as authorized function information; The permission function information is sent to the management terminal, so that the management terminal displays the permission function control corresponding to the permission function information.
6. A cross-network management method, characterized in that: Applied to a production terminal in a production network, the cross-network management method includes: After establishing a connection with the management terminal through the transit server, obtaining the production interface information of the production terminal, and sending the production interface information to the management terminal through the transit server; After receiving the control instruction sent by the relay server, the control instruction is executed.
7. The cross-network management method according to claim 6, characterized in that: The cross-network management method further includes: generating a new password for the production terminal; The new password is sent to the transit server, so that the transit server updates the stored terminal password of the production terminal based on the new password.
8. A cross-network management system, characterized in that: The cross-network management system includes at least one management terminal under the management network, a transit server and at least one production terminal under the production network, and the management terminal and the production terminal are respectively connected to the transit server for communication; Management terminal, used to send terminal user information to the transit server; The transfer server is used to feedback the terminal status information of the production terminal within the corresponding management authority according to the terminal user information; The management terminal is further configured to send the control instruction for the terminal status information to the transfer server after receiving the control instruction; The transfer server is further used to send the control instruction to the corresponding production terminal after receiving the control instruction from the management terminal; The production terminal is used to execute the control instruction.
9. A terminal device, characterized in that: The terminal device comprises: a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the computer program is configured to implement the steps of the cross-network management method as described in any one of claims 1 to 3 or 4 to 5 or 6 to 7.
10. A storage medium, characterized in that: The storage medium is a computer-readable storage medium, and a computer program is stored on the storage medium. When the computer program is executed by a processor, the steps of the cross-network management method as described in any one of claims 1 to 3 or 4 to 5 or 6 to 7 are implemented.