Equipment security management method and device, equipment and storage medium
By detecting changes in wireless LAN groups in electronic devices to determine location changes, the problem that GPS cannot be used in high-rise buildings or in bad weather is solved, and accurate position judgment is achieved without adding hardware circuits.
Patent Information
- Application Number
- CN202411546158.9
- Authority / Receiving Office
- CN · China
- Patent Type
- Applications(China)
- Current Assignee / Owner
- Filing Date
- 2024-10-31
- Publication Date
- 2025-02-18
AI Technical Summary
In indoor environments such as high-rise buildings or in severe weather, GPS may not be available, resulting in large positioning errors in electronic equipment, and the positioning function requires the installation of GPS hardware circuits, which increases cost and space requirements.
The specific method is to determine whether the position of the electronic device changes by adding variable values within the detection range of the electronic device. The specific method is to obtain the characterization information of the wireless LAN group and judge the position change by comparing the actual variable values with the preset threshold.
In indoor environments such as high-rise buildings or in severe weather, the location changes of electronic equipment can still be accurately judged, and there is no need to add hardware circuits, saving costs and space.
Smart Images
Figure CN119485159A_ABST
Abstract
Description
Technical Field
[0001] The present application relates to the field of information security technology, and specifically to a device security management method, apparatus, device and storage medium. Background Art
[0002] With the promotion of paperless office, more and more electronic devices are used by enterprises and users. When enterprises or users purchase new electronic devices, old electronic devices may flow into the second-hand market. These old electronic devices usually store some office documents or users' private files. If the electronic devices are moved while user data is stored, the user data may be leaked.
[0003] In the related art, electronic devices usually implement a positioning function through the Global Positioning System (GPS) to determine whether the position of the electronic device has changed.
[0004] However, GPS has high requirements on the environment. It may not be available in indoor environments such as high-rise buildings or in bad weather, resulting in large positioning errors of electronic devices. In addition, to realize the positioning function, the electronic devices must be equipped with corresponding GPS hardware circuits, which has high requirements on cost and space.
[0005] It should be pointed out that the information disclosed in the background technology section of this application is only intended to deepen the understanding of the general background technology of this application, and should not be regarded as an admission or suggestion in any form that the information constitutes prior art already known to those skilled in the art. Summary of the invention
[0006] In view of this, the present application provides a security management method to help solve the problem in the prior art that GPS may not be available in indoor environments such as high-rise buildings or in bad weather, resulting in large positioning errors of electronic devices, and the realization of the positioning function also requires the electronic devices to be equipped with corresponding GPS hardware circuits, which has high cost and space requirements.
[0007] In a first aspect, an embodiment of the present application provides a device security management method, based on an electronic device that implements a wireless networking function, comprising:
[0008] Acquire a first wireless local area network group, and extract first characterization information of the first wireless local area network group from the first wireless local area network group, where the first wireless local area network group is a set of wireless local area network detected at a current time point, and the first characterization information is a set of information of each wireless local area network in the first wireless local area network group;
[0009] Execute at least once: according to a first preset time interval, detect a second wireless local area network group, and obtain second characterization information of the second wireless local area network group, and obtain an actual variable value by comparing the second characterization information with the first characterization information, wherein the second characterization information is a collection of the wireless local area network information of each wireless local area network group in the second wireless local area network group;
[0010] If the actual variable value is greater than or equal to a preset threshold, it is determined that the position of the electronic device has changed.
[0011] In the embodiment of the present application, whether the position of the electronic device has changed is determined by a newly added variable value within the detection range of the electronic device, wherein the newly added variable value is the number of wireless LANs whose wireless LAN information of the wireless LAN detected by the electronic device is different from the wireless LAN information of the stored wireless LANs. It can be understood that the wireless LAN signal has nothing to do with the environment and weather, so even in indoor environments such as high-rise buildings or in bad weather, the method provided by the embodiment of the present application is still practical, so that it can be determined whether the position of the electronic device has changed without external interference, and the method provided by the embodiment of the present application does not need to add hardware circuits, and can judge the position change of the electronic device when the electronic device cannot be installed with GPS, which can save cost and space.
[0012] In a possible implementation manner, obtaining the actual variable value by comparing the second representation information with the first representation information includes:
[0013] The actual variable value is the number of different wireless LANs in the first wireless LAN group and the second wireless LAN group, and the wireless LAN information of each wireless LAN in the first wireless LAN group is compared with the wireless LAN information of each wireless LAN in the second wireless LAN group one by one to obtain the actual variable value.
[0014] In an embodiment of the present application, the actual variable value is obtained through the wireless LAN information of each wireless LAN to determine whether the position of the electronic device has changed. It can be understood that because each wireless LAN corresponds to a wireless LAN information, the number of wireless LAN information is the number of wireless LANs, and different wireless LAN information means different wireless LANs. By determining whether the position of the electronic device has changed through the wireless LAN information, it is possible to more quickly determine whether the position of the electronic device has changed.
[0015] In a possible implementation manner, comparing the wireless LAN information of each of the wireless LANs in the first wireless LAN group with the wireless LAN information of each of the wireless LANs in the second wireless LAN group one by one includes:
[0016] The wireless local area network information corresponding to each wireless local area network in the second wireless local area network group is stored, wherein the wireless local area network information is effective information for distinguishing each wireless local area network.
[0017] In the embodiment of the present application, the wireless LAN information corresponding to each wireless LAN in the second wireless LAN group is first stored, and then the wireless LAN information of each wireless LAN in the first wireless LAN group is compared with the wireless LAN information in the second wireless LAN group one by one. It can be understood that after the wireless LAN information is stored, the wireless LAN information corresponding to each wireless LAN can be quickly accessed, so as to quickly obtain the actual variable value and improve work efficiency.
[0018] In a possible implementation manner, obtaining the actual variable value by comparing the second representation information with the first representation information includes:
[0019] If the actual variable value is less than a preset threshold, it is determined that the position of the electronic device has not changed;
[0020] If the actual variable value is greater than or equal to the preset threshold, it is determined that the position of the electronic device has changed.
[0021] In the embodiment of the present application, the actual variable value is obtained by comparing the second characterization information with the first characterization information. If the actual variable value is less than a preset threshold, it is determined that the position of the electronic device has not changed; if the actual variable value is greater than or equal to the preset threshold, it is determined that the position of the electronic device has changed. It can be understood that when the position of the electronic device does not change, the wireless local area network around the electronic device will not remain unchanged, so the preset value can more accurately determine whether the position of the electronic device has changed.
[0022] In a possible implementation manner, the wireless local area network information further includes an acquisition time, and the method further includes:
[0023] Comparing the acquisition time in any of the wireless local area network information with the current time point;
[0024] If the time difference between the acquisition time in any of the wireless local area network information and the current time point is greater than or equal to a preset time difference threshold, then any of the wireless local area network information is deleted.
[0025] In the embodiment of the present application, in order to determine whether the wireless LAN is a short-term wireless LAN, the acquisition time in the wireless LAN information is compared with the current time. If the time difference between the acquisition time and the current time in any wireless LAN information is greater than or equal to the preset time difference threshold, the wireless LAN information is deleted. It is understandable that there may be hotspots turned on by mobile devices around electronic devices. Such short-term wireless LANs are useless for determining the location of electronic devices, and storing too much wireless LAN information may require too much memory space, so timely deletion of short-term wireless LAN information can save memory space.
[0026] In a possible implementation manner, the wireless local area network information further includes an acquisition time, and the method further includes:
[0027] Calculating the expiration time of the wireless local area network information according to the acquisition time in the wireless local area network information corresponding to each wireless local area network;
[0028] If the expiration time of any of the wireless local area network information is earlier than the current time point, any of the wireless local area network information is deleted.
[0029] In the embodiment of the present application, if there is a stored wireless LAN, the expiration time of the wireless LAN information is calculated according to the acquisition time in the wireless LAN information corresponding to each wireless LAN, and if the realization time of any wireless LAN information is earlier than the current time point, the wireless LAN information is deleted. It can be understood that the expiration time earlier than the current time can indicate that the wireless LAN is turned on for a short time, and the expiration time corresponding to each wireless LAN is calculated in advance, so that it can be determined in time whether each wireless LAN has expired.
[0030] In a possible implementation manner, detecting the second wireless local area network group according to the first preset time interval includes:
[0031] According to a first preset time interval, a wireless local area network detection module is turned on, where the wireless local area network detection module is used to detect the second wireless local area network group around the electronic device.
[0032] In an embodiment of the present application, for some electronic devices, the wireless LAN detection module may be turned off at ordinary times. At this time, if the electronic device wants to detect the surrounding wireless LAN, it is necessary to turn on the wireless LAN detection module, so that the wireless LAN detection module can detect the first wireless LAN group around the electronic device.
[0033] In a possible implementation manner, after determining that the position of the electronic device has changed, the method further includes:
[0034] Safely process the data stored in the electronic device, wherein the safe processing includes: deleting, destroying, garbled, and encrypting.
[0035] In an embodiment of the present application, after determining that the location of the electronic device has changed, the data stored in the electronic device is securely processed. It can be understood that if the location of the electronic device has changed, the data stored in the electronic device is at risk of being leaked. Securely processing the data in the electronic device can ensure the security of the user's stored data.
[0036] In a second aspect, an embodiment of the present application provides a device security management apparatus, including:
[0037] a wireless local area network detection module, configured to obtain the first wireless local area network group, extract the first characterization information of the first wireless local area network group from the first wireless local area network group, the first wireless local area network group being a set of the wireless local area network detected at a current time point, the first characterization information being a set of information of each wireless local area network in the first wireless local area network group, detecting the second wireless local area network group at the first preset time interval, and obtaining the second characterization information of the second wireless local area network group;
[0038] a wireless local area network information comparison module, which obtains the actual variable value by comparing the second characterization information with the first characterization information, wherein the second characterization information is a collection of the wireless local area network information in the second wireless local area network group;
[0039] The position change determination module determines that the position of the electronic device has changed if the actual variable value is greater than or equal to the preset threshold.
[0040] In a third aspect, an embodiment of the present application provides an electronic device, including:
[0041] processor;
[0042] Memory;
[0043] And a computer program, wherein the computer program is stored in the memory, and the computer program includes instructions, and when the instructions are executed by the processor, the electronic device executes any one of the methods described in the first aspect.
[0044] In a fourth aspect, an embodiment of the present application provides a computer-readable storage medium, wherein the computer-readable storage medium includes a stored program, wherein when the program is running, the device where the computer-readable storage medium is located is controlled to execute any one of the methods described in the first aspect.
[0045] It is understandable that the device security management apparatus provided in the second aspect, the electronic device provided in the third aspect, and the computer-readable storage medium provided in the fourth aspect are used to execute the method provided in this application. Therefore, the beneficial effects that can be achieved can refer to the beneficial effects in the corresponding method, and will not be repeated here. BRIEF DESCRIPTION OF THE DRAWINGS
[0046] In order to more clearly illustrate the technical solutions of the embodiments of the present application, the drawings required for use in the embodiments will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present application. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative labor.
[0047] Figure 1 A schematic diagram of an application scenario provided in an embodiment of the present application;
[0048] Figure 2 A schematic diagram of a process flow of a device security management method provided in an embodiment of the present application;
[0049] Figure 3 A flowchart of another device security management method provided in an embodiment of the present application;
[0050] Figure 4 A schematic diagram of the structure of a device security management device provided in an embodiment of the present application;
[0051] Figure 5 A schematic diagram of the structure of an electronic device provided in an embodiment of the present application. DETAILED DESCRIPTION
[0052] In order to better understand the technical solution of the present application, the embodiments of the present application are described in detail below with reference to the accompanying drawings.
[0053] It should be clear that the described embodiments are only part of the embodiments of the present application, rather than all the embodiments. Based on the embodiments in the present application, all other embodiments obtained by ordinary technicians in the field without creative work are within the scope of protection of the present application.
[0054] The terms used in the embodiments of the present application are only for the purpose of describing specific embodiments, and are not intended to limit the present application. The singular forms "a", "said" and "the" used in the embodiments of the present application and the appended claims are also intended to include plural forms, unless the context clearly indicates other meanings.
[0055] It should be understood that the term "and / or" used in this article is only a description of the association relationship of associated objects, indicating that there can be three relationships. For example, A and / or B can represent: A exists alone, A and B exist at the same time, and B exists alone. In addition, the character " / " in this article generally indicates that the associated objects before and after are in an "or" relationship.
[0056] With the promotion of paperless office, more and more electronic devices are used by enterprises and users. When enterprises or users purchase new electronic devices, old electronic devices may flow into the second-hand market. These old electronic devices usually store some office documents or users' private files. If the electronic devices are moved while user data is stored, the user data stored in these electronic devices may be leaked.
[0057] The stored data includes user data and cached data stored in the electronic device. In the field of image formation, the data stored in the image forming device includes stored jobs, scheduled jobs, job caches, and other data stored in the image forming device.
[0058] To facilitate understanding, an embodiment of the present application provides a structural diagram of an application scenario.
[0059] See also Figure 1 , is a schematic diagram of a structure of an application scenario provided by an embodiment of the present application. Figure 1 As shown, in this application scenario, an image forming apparatus 101 and a wireless local area network device 102 are shown. The image forming apparatus 101 and the wireless local area network device 102 are connected via a wired or wireless communication network to perform information transmission.
[0060] but, Figure 1 The electronic device (image forming device 101) and wireless LAN device 102 shown in the figure are only an exemplary description and should not be used as a limitation on the protection scope of this application. The electronic device in the embodiment of this application can be an image forming device or other electronic devices, and the image forming device includes but is not limited to a printer, a copier, a fax machine, a scanner, and a multifunction machine integrating printing, copying, faxing, scanning and other functions and any other similar device, whose function is to print images or texts on imaging media. In addition, in addition to a router, the wireless LAN device 102 can also be a mobile terminal such as a mobile phone or a portable wireless LAN, and the number of wireless LAN devices 102 can be any number, and the number of wireless LAN devices should not be used as a limitation on the protection scope of this application.
[0061] Wireless Local Area Network (WLAN) refers to the use of wireless communication technology to interconnect electronic devices to form a network system that can communicate with each other and share resources. It includes Internet access modes such as WAPI and Wi-Fi. Wireless LAN can cover from tens of meters to several kilometers and can be used in public places such as office buildings and shopping malls.
[0062] In the related art, electronic devices usually implement a positioning function through the Global Positioning System (GPS) to determine whether the position of the electronic device has changed.
[0063] However, GPS has high requirements on the environment. It may not be available in indoor environments such as high-rise buildings or in bad weather, resulting in large positioning errors of electronic devices. In addition, to realize the positioning function, the electronic devices must be equipped with corresponding GPS hardware circuits, which has high requirements on cost and space.
[0064] In response to the above problems, the present application provides a device security management method, apparatus, equipment and storage medium, which determines whether the location of the electronic device has changed by adding a new variable value within the detection range of the electronic device, wherein the new variable value is the number of wireless LANs whose wireless LAN information of the wireless LAN detected by the electronic device is different from the wireless LAN information of the stored wireless LAN. It can be understood that the wireless LAN signal is independent of the environment and weather, so even in indoor environments such as high-rise buildings or in bad weather, the method provided by the embodiment of the present application is still practical, so that it can eliminate external interference to determine whether the location of the electronic device has changed, and the method provided by the embodiment of the present application does not require the addition of hardware circuits, and can judge the location change of the electronic device when the electronic device cannot be installed with GPS, which can save cost and space. Specifically, it is described in detail below in conjunction with the accompanying drawings and specific embodiments.
[0065] See also Figure 2 , is a flow chart of a device security management method provided in an embodiment of the present application. The method can be applied to Figure 1 The application scenario shown in Figure 1. Figure 2 As shown, it mainly includes the following steps.
[0066] Step S201: Acquire a first wireless local area network group, and extract first characterization information of the first wireless local area network group from the first wireless local area network group.
[0067] Specifically, the equipment security management device obtains the first wireless LAN group detected by the electronic device, and extracts the first characterization information of the first wireless LAN group from the first wireless LAN group, wherein the first wireless LAN group is a set of wireless LANs detected at the current time point, and the first characterization information is a set of wireless LAN information in the first wireless LAN group.
[0068] In actual applications, when the device security management device detects the surrounding wireless LAN devices, if it detects only once, the detection result may be different from the actual situation. Therefore, in order to eliminate the slight differences between the detection results each time, in the embodiment of the present application, when obtaining the first wireless LAN group detected by the electronic device, the device security management device obtains the first wireless LAN group detected by the electronic device multiple times within a preset time period, and merges the multiple obtained results into one result. At this time, the first time interval can be a shorter time, and it is executed at least once, and the wireless LAN group is detected according to the first preset time interval.
[0069] In a possible implementation, the preset time period is 5 minutes, and the first wireless local area network group is obtained 5 times within the preset time period. Of course, those skilled in the art can set the preset time period to any time period and the number of detections to any number according to actual needs, and the embodiment of the present application does not impose specific restrictions on this.
[0070] Exemplarily, the device security management device obtains the first wireless LAN group detected by the electronic device once every hour. When the device security management device obtains the first wireless LAN group, it obtains the first wireless LAN group five times in five minutes and combines the five acquisition results into one acquisition result.
[0071] Exemplarily, the security management device obtains the first wireless LAN group 5 times in 5 minutes. The first time, 3 wireless LANs are obtained, x1, x2, and x3. The second time, 3 wireless LANs are obtained, x1, x3, and x4. The third time, 4 wireless LANs are obtained, x1, x2, x3, and x4. The fourth time, 4 wireless LANs are obtained, x1, x2, x3, and x5. The fifth time, 4 wireless LANs are obtained, x1, x2, x5, and x6. The results of the above five times are combined into one acquisition result. The first wireless LAN group includes 6 wireless LANs: x1, x2, x3, x4, x5, and x6.
[0072] In actual applications, in addition to fixed wireless LAN devices, there may also be some hotspots turned on by mobile phones or other terminal devices around the electronic device. This short-time turned-on wireless LAN has no effect on determining the location of the electronic device, and storing too much wireless LAN information may require too much memory space. Therefore, in order to delete useless wireless LAN information, in the embodiment of the present application, each wireless LAN information also includes the acquisition time of the wireless LAN. After the device security management device stores the wireless LAN information corresponding to each wireless LAN in the first wireless LAN group, it is also necessary to determine whether the time difference between the acquisition time and the current time in each wireless LAN information in the first wireless LAN group is greater than or equal to the preset time difference threshold. If the time difference between the acquisition time and the current time in any wireless LAN information is greater than or equal to the preset time difference threshold, the wireless LAN information is deleted. In a possible implementation, the preset time difference threshold is 24 hours. Of course, those skilled in the art can set the preset time difference threshold to any value according to actual needs, and the embodiment of the present application does not make specific restrictions on this.
[0073] In a possible implementation, the acquisition time in the wireless local area network information is compared with the current time according to the second preset time interval. In a possible implementation, the second preset time interval is 1 hour. Of course, those skilled in the art can set the second preset time interval to other durations according to actual needs, and the embodiment of the present application does not impose specific restrictions on this. It can be understood that by determining whether each wireless local area network has expired according to the preset time interval, the expired wireless local area network information can be deleted in time, thereby ensuring that the memory of the electronic device is sufficient.
[0074] In a possible implementation, the useless wireless LAN information can also be deleted in another way. Specifically, the expiration time of the wireless LAN information is calculated according to the acquisition time in the wireless LAN information corresponding to each wireless LAN. The expiration time refers to the time when the electronic device first receives the acquisition time of this wireless LAN, plus the preset time difference, which is the expiration time. If the expiration time of any wireless LAN information is earlier than the current time, the wireless LAN information is deleted. In a possible implementation, the expiration time of the wireless LAN information is calculated by adding the acquisition time of the wireless LAN information to the expiration time threshold (i.e., the preset time difference), thereby obtaining the expiration time of the wireless LAN information.
[0075] For example, the acquisition time of certain wireless LAN information is 8:00 on October 17, and the expiration time threshold is 24 hours. When the wireless LAN information is acquired, it can be calculated that the expiration time of the wireless LAN information is 8:00 on October 18. If the current time is 18:00 on October 17, it can be determined that the wireless LAN information has not expired; if the current time is 9:00 on October 18, it can be determined that the wireless LAN information has expired, and the wireless LAN information is deleted.
[0076] It is understandable that the expiration time earlier than the current time may indicate that the wireless LAN is enabled for a shorter time. By calculating the expiration time corresponding to each wireless LAN in advance, it is possible to determine in time whether each wireless LAN has expired.
[0077] The wireless LAN detection module in the device security management device is used to detect the first wireless LAN group around the electronic device. For some electronic devices, the wireless LAN detection module will be turned on by default, but for some electronic devices, the wireless LAN detection module can be controlled to be turned on or off. For electronic devices whose wireless LAN detection module can be turned off, the device security management device turns on the wireless LAN detection module according to the first preset time interval, so that the wireless LAN detection module can obtain the first wireless LAN group detected by the electronic device. Of course, the device security management device turns on the wireless LAN detection module only to detect nearby wireless LANs, and is not used to connect to any router hotspots.
[0078] It can be understood that by periodically obtaining the first wireless LAN group and the corresponding wireless LAN information, the electronic device can timely obtain changes in the surrounding wireless LAN information. The first preset time interval can be customized by the user to meet the needs of the user, facilitate user operation, increase the availability of the electronic device, and periodically delete invalid wireless LAN information to save storage space of the electronic device.
[0079] Step S202: Detect the second wireless local area network group at a first preset time interval, obtain second characterization information of the second wireless local area network group, and obtain the actual variable value by comparing the second characterization information with the first characterization information.
[0080] Specifically, when wireless LAN information exists in the first wireless LAN group, the second wireless LAN group is detected according to the first preset time interval, and the second characterization information of the second wireless LAN group is obtained, and after the wireless LAN information of each wireless LAN in the first wireless LAN group is compared with the wireless LAN information of each wireless LAN in the second wireless LAN group one by one, the number of wireless LANs whose wireless LAN information in the first wireless LAN group is different from that in the second wireless LAN group is recorded as the actual variable value. The second characterization information is a collection of the wireless LAN information of each wireless LAN in the second wireless LAN group.
[0081] In a possible implementation, the first preset time interval is 1 hour. Of course, those skilled in the art can set the first preset time interval to any time period according to actual needs, for example, 24 hours, that is, to detect the first wireless local area network group around the electronic device at regular intervals every day. The embodiment of the present application does not impose specific restrictions on this. The wireless local area network information (i.e., valid information) includes: wireless local area network name, wireless local area network address, acquisition time and other wireless local area network attribute information.
[0082] Exemplarily, it is assumed that there are 15 wireless LAN information in the first wireless LAN group, namely x1, x2...x15, and there are 10 wireless LAN information in the second wireless LAN group, namely y1, y2...y10. The equipment security management device compares the wireless LAN information of each wireless LAN in the first wireless LAN group with the wireless LAN information of each wireless LAN in the second wireless LAN group one by one, specifically, the wireless LAN information of x1 is compared with the wireless LAN information of each wireless LAN in y1, y2...y10; and the wireless LAN information of x2 is compared with the wireless LAN information of each wireless LAN in y1, y2...y10; and so on, the wireless LAN information of x15 is compared with the wireless LAN information of each wireless LAN in y1, y2...y10. If the number of differences between y1, y2, ..., y10 and x1, x2, ..., x15 is 6, then the actual variable value is 6.
[0083] In a possible implementation, the wireless LAN information includes address information corresponding to the wireless LAN, and each wireless LAN corresponds to one piece of address information, so the address information of each wireless LAN in the two groups of wireless LANs can be compared. Specifically, the address information of each wireless LAN in the first wireless LAN group is compared one by one with the address information of each wireless LAN in the second wireless LAN group. Similarly, the first wireless LAN group is the stored wireless LAN and the wireless LAN information corresponding to each wireless LAN.
[0084] In a possible implementation, the address information corresponding to the wireless local area network may be a MAC address. Those skilled in the art may set the address information to other addresses according to actual needs, and the embodiments of the present application do not impose any specific restrictions on this.
[0085] In a possible implementation, if there is no wireless LAN information in the first wireless LAN group, the wireless LAN information in the second wireless LAN group is stored in the first wireless LAN group. In addition, after acquiring the second wireless LAN group, the wireless LAN information in the second wireless LAN group is stored in the first wireless LAN group, thereby updating the wireless LAN information in the first wireless LAN group, and the updated first wireless LAN group information includes all wireless LANs in the first wireless LAN group and the second wireless LAN group and the corresponding wireless LAN information.
[0086] It can be understood that timely updating the wireless LAN information in the second wireless LAN group to the wireless LAN information in the first wireless LAN group can make the wireless LAN information in the first wireless LAN group always the latest wireless LAN information, thereby ensuring that the second wireless LAN group is always compared with the latest first wireless LAN group to ensure the timeliness of the wireless LAN information.
[0087] Step S203: If the actual variable value is greater than or equal to the preset threshold, it is determined that the position of the electronic device has changed.
[0088] Specifically, a threshold is preset, and the actual variable value is compared with the preset threshold. If the actual variable value is greater than the preset threshold, it is determined that the position of the electronic device has changed: after comparing the wireless LAN information of each wireless LAN in the first wireless LAN group with the wireless LAN information of each wireless LAN in the second wireless LAN group one by one, the wireless LANs in the first wireless LAN group whose wireless LAN information is different from that in the second wireless LAN group are recorded as newly added wireless LANs, and the number of newly added wireless LANs is compared with the preset threshold, so as to determine whether the position of the electronic device has changed.
[0089] In a possible implementation, the wireless local area network information includes the address information of the corresponding wireless local area network, and the number of wireless local area networks whose address information in the first wireless local area network group is different from that in the second wireless local area network group (i.e., the actual variable value) is compared with a preset threshold value, so as to determine whether the position of the electronic device has changed. The preset threshold value is the maximum value of the number of different wireless local area networks in the first wireless local area network group and the first wireless local area network group set by the user. In a possible implementation, if the number of newly added wireless local area networks is less than the preset value, it is determined that the position of the electronic device has not changed; if the number of newly added wireless local area networks is greater than or equal to the preset value, it is determined that the position of the electronic device has changed. It can be understood that when the position of the electronic device remains unchanged, the wireless local area networks around the electronic device will not remain unchanged, so the preset value difference threshold can more accurately determine whether the position of the electronic device has changed, avoid the electronic device from making a wrong judgment when the number of newly added wireless local area networks is less than the preset value difference threshold, and mistakenly delete the stored data, thereby improving the accuracy of the position change judgment. In order to protect the privacy of the user, if the position of the electronic device changes, the data stored in the electronic device is securely processed. In a possible implementation, the secure processing includes: deletion, destruction, garbled, and encryption. It can be understood that if the location of an electronic device changes, it can be determined that the electronic device no longer belongs to the previous user. In order to protect the privacy of the previous user and securely process the data stored by the previous user, the user's data can be deleted in time when the electronic device is moved, thereby protecting the user's data security, avoiding data leakage to others, and improving the security of printed data.
[0090] Taking the image forming device as an example, if the location of the image forming device changes, the stored jobs and scheduled jobs in the image forming device will be deleted. It can be understood that if the user sets a scheduled job, the image forming device will execute the image forming job for the scheduled job according to the preset time. If the image forming device no longer belongs to the previous user at this time, the content in the scheduled job will be leaked.
[0091] In a possible implementation, when clearing data in the electronic device, a prompt message indicating that the electronic device is clearing data is outputted at the same time. It is understandable that outputting the prompt message allows the user to determine the current working state of the electronic device to prevent the electronic device from affecting the execution of the job issued by the user.
[0092] Corresponding to the above embodiment, the present application also provides another device security management method.
[0093] See also Figure 3 , is a flow chart of another device security management method provided in an embodiment of the present application. Figure 3 As shown, this method can be applied to Figure 1 The application scenario shown mainly includes the following steps.
[0094] Step S301: Start the wireless local area network detection module.
[0095] Step S302: acquiring a first wireless local area network group detected by the electronic device at a first preset time interval.
[0096] Step S303: determine whether the actual variable value of the difference between the address information in the first wireless LAN group and the address information in the second wireless LAN group is greater than or equal to a preset threshold, if so, execute step S304; if not, execute step S305.
[0097] Step S304: Control the security management module to securely process the stored data.
[0098] Specifically, the security management module in the device security management apparatus is used to clear data in the electronic device when the location of the electronic device changes.
[0099] Step S305: Update the second wireless local area network group.
[0100] Specifically, the second wireless local area network group is updated according to the wireless local area network information in the first wireless local area network group.
[0101] For specific contents involved in the embodiments of this application, please refer to the above Figure 2 For the sake of brevity, the description in the illustrated embodiment will not be repeated here.
[0102] Corresponding to the above embodiments, the present application also provides a device security management apparatus.
[0103] See also Figure 4 , is a schematic diagram of the structure of a device security management device provided in an embodiment of the present application, such as Figure 4 As shown, the device security management apparatus may include: a wireless local area network detection module 401 , a wireless local area network information comparison module 402 , a location change determination module 403 and a data clearing module 404 .
[0104] Among them, the wireless LAN detection module 401 is used to obtain a first wireless LAN group, extract first characterization information of the first wireless LAN group from the first wireless LAN group, the first wireless LAN group is a set of wireless LANs detected at a current time point, the first characterization information is a set of information of each wireless LAN in the first wireless LAN group, detect a second wireless LAN group according to a first preset time interval, and obtain second characterization information of the second wireless LAN group;
[0105] A wireless local area network information comparison module 402, configured to obtain an actual variable value by comparing the second characterization information with the first characterization information, wherein the second characterization information is a collection of information of each wireless local area network in the second wireless local area network group;
[0106] The location change determination module 403 is configured to determine whether the location of the electronic device has changed if the actual variable value is greater than or equal to the preset threshold.
[0107] Corresponding to the above embodiments, the present application also provides an electronic device.
[0108] See also Figure 5 , is a schematic diagram of the structure of an electronic device provided in an embodiment of the present application. Figure 5 As shown, the electronic device 500 may include: a processor 501, a memory 502 and a communication unit 503. These components communicate via one or more buses. Those skilled in the art will appreciate that the structure of the electronic device shown in the figure does not limit the embodiments of the present application, and it may be a bus structure or a star structure, and may include more or fewer components than shown in the figure, or combine certain components, or arrange components differently.
[0109] The communication unit 503 is used to establish a communication channel so that the electronic device can communicate with other devices, receive user data sent by other devices or send user data to other devices.
[0110] The processor 501 is the control center of the electronic device. It uses various interfaces and lines to connect various parts of the entire electronic device. It runs or executes software programs, instructions, and / or modules stored in the memory 502, and calls data stored in the memory to perform various functions of the electronic device and / or process data. The processor can be composed of an integrated circuit (IC), for example, it can be composed of a single packaged IC, or it can be composed of a plurality of packaged ICs with the same or different functions. For example, the processor 501 can include only a central processing unit (CPU). In the embodiment of the present application, the CPU can be a single computing core or multiple computing cores.
[0111] The memory 502 is used to store the execution instructions of the processor 501. The memory 502 can be implemented by any type of volatile or non-volatile storage device or a combination thereof, such as static random access memory (SRAM), electrically erasable programmable read-only memory (EEPROM), erasable programmable read-only memory (EPROM), programmable read-only memory (PROM), read-only memory (ROM), magnetic memory, flash memory, magnetic disk or optical disk.
[0112] When the execution instruction in the memory 502 is executed by the processor 501, the electronic device 500 can execute Figure 1 Some or all of the steps in the illustrated embodiments.
[0113] In a specific implementation, the embodiment of the present application further provides a computer storage medium, wherein the computer storage medium may store a program, and when the program is executed, the program may include some or all of the steps in each embodiment of the simulation scene generation method provided in the embodiment of the present application. The storage medium may be a disk, an optical disk, a read-only memory (ROM) or a random access memory (RAM), etc.
[0114] In a specific implementation, an embodiment of the present application also provides a computer program product, wherein the computer program product includes executable instructions, and when the executable instructions are executed on a computer, the computer executes part or all of the steps in each embodiment of the simulation scene generation method provided in the embodiment of the present application.
[0115] In the embodiments of the present application, "at least one" refers to one or more, and "plurality" refers to two or more. "And / or" describes the association relationship of associated objects, indicating that three relationships may exist. For example, A and / or B can represent the existence of A alone, the existence of A and B at the same time, and the existence of B alone. Among them, A and B can be singular or plural. The character " / " generally indicates that the previous and subsequent associated objects are in an "or" relationship. "At least one of the following" and similar expressions refer to any combination of these items, including any combination of single or plural items. For example, at least one of a, b and c can be represented by: a, b, c, ab, ac, bc, or abc, where a, b, c can be single or multiple.
[0116] Those of ordinary skill in the art will appreciate that the various units and algorithm steps described in the embodiments disclosed herein can be implemented in a combination of electronic hardware, computer software, and electronic hardware. Whether these functions are performed in hardware or software depends on the specific application and design constraints of the technical solution. Professional and technical personnel can use different methods to implement the described functions for each specific application, but such implementation should not be considered to be beyond the scope of this application.
[0117] Those skilled in the art can clearly understand that, for the convenience and brevity of description, the specific working processes of the systems, devices and units described above can refer to the corresponding processes in the aforementioned method embodiments and will not be repeated here.
[0118] In several embodiments provided in the present application, any function can be stored in a computer-readable storage medium if it is implemented in the form of a software functional unit and sold or used as an independent product. Based on this understanding, the technical solution of the present application can be essentially or partly embodied in the form of a software product that contributes to the prior art. The computer software product is stored in a storage medium, including several instructions for a computer device (which can be a personal computer, a server, or a network device, etc.) to perform all or part of the steps of the method described in each embodiment of the present application. The aforementioned storage medium includes: U disk, mobile hard disk, read-only memory (ROM), random access memory (RAM), disk or optical disk, etc., and other media that can store program codes.
[0119] In this specification, the same or similar parts between the various embodiments can be referred to each other. In particular, for the device embodiment and the terminal embodiment, since they are basically similar to the method embodiment, the description is relatively simple, and the relevant parts can be referred to the description in the method embodiment.
Claims
1. A device safety management method, characterized in that: Electronic devices based on wireless networking functions, including: Acquire a first wireless local area network group, and extract first characterization information of the first wireless local area network group from the first wireless local area network group, where the first wireless local area network group is a set of wireless local area network detected at a current time point, and the first characterization information is a set of information of each wireless local area network in the first wireless local area network group; Execute at least once: according to a first preset time interval, detect a second wireless local area network group, and obtain second characterization information of the second wireless local area network group, and obtain an actual variable value by comparing the second characterization information with the first characterization information, wherein the second characterization information is a collection of the wireless local area network information of each wireless local area network group in the second wireless local area network group; If the actual variable value is greater than or equal to a preset threshold, it is determined that the position of the electronic device has changed.
2. The method according to claim 1, characterized in that The obtaining the actual variable value by comparing the second characterization information with the first characterization information includes: The actual variable value is the number of different wireless LANs in the first wireless LAN group and the second wireless LAN group, and the wireless LAN information of each wireless LAN in the first wireless LAN group is compared with the wireless LAN information of each wireless LAN in the second wireless LAN group one by one to obtain the actual variable value.
3. The method according to claim 2, characterized in that The step of comparing the wireless LAN information of each wireless LAN in the first wireless LAN group with the wireless LAN information of each wireless LAN in the second wireless LAN group one by one includes: The wireless local area network information corresponding to each wireless local area network in the second wireless local area network group is stored, wherein the wireless local area network information is effective information for distinguishing each wireless local area network.
4. The method according to claim 1, characterized in that: The obtaining the actual variable value by comparing the second characterization information with the first characterization information includes: If the actual variable value is less than the preset threshold, it is determined that the position of the electronic device has not changed; If the actual variable value is greater than or equal to the preset threshold, it is determined that the position of the electronic device has changed.
5. The method according to claim 1, characterized in that The wireless local area network information also includes an acquisition time, and the method further includes: Comparing the acquisition time in any of the wireless local area network information with the current time point; If the time difference between the acquisition time in any of the wireless local area network information and the current time point is greater than or equal to a preset time difference threshold, then any of the wireless local area network information is deleted.
6. The method according to claim 1, characterized in that The wireless local area network information also includes an acquisition time, and the method further includes: Calculating the expiration time of the wireless local area network information according to the acquisition time in the wireless local area network information corresponding to each wireless local area network; If the expiration time of any of the wireless local area network information is earlier than the current time point, any of the wireless local area network information is deleted.
7. The method according to claim 1, characterized in that The detecting the second wireless local area network group according to the first preset time interval includes: According to a first preset time interval, a wireless local area network detection module is turned on, where the wireless local area network detection module is used to detect the second wireless local area network group around the electronic device.
8. The method according to claim 1, characterized in that: After determining that the position of the electronic device has changed, the method further includes: Safely process the data stored in the electronic device, wherein the safe processing includes: deleting, destroying, garbled, and encrypting.
9. A device safety management device, characterized in that: include: a wireless local area network detection module, configured to obtain the first wireless local area network group, extract the first characterization information of the first wireless local area network group from the first wireless local area network group, the first wireless local area network group being a set of the wireless local area network detected at a current time point, the first characterization information being a set of information of each wireless local area network in the first wireless local area network group, detecting the second wireless local area network group at the first preset time interval, and obtaining the second characterization information of the second wireless local area network group; a wireless local area network information comparison module, configured to obtain the actual variable value by comparing the second characterization information with the first characterization information, wherein the second characterization information is a collection of the wireless local area network information in the second wireless local area network group; The position change determination module is used to determine whether the position of the electronic device has changed if the actual variable value is greater than or equal to the preset threshold.
10. An electronic device, characterized in that: include: processor; Memory; And a computer program, wherein the computer program is stored in the memory, and the computer program includes instructions, and when the instructions are executed by the processor, the electronic device executes the method according to any one of claims 1 to 8.
11. A computer-readable storage medium, characterized in that: The computer-readable storage medium includes a stored program, wherein when the program is executed, the device where the computer-readable storage medium is located is controlled to execute the method according to any one of claims 1 to 8.