Operation authority management method and device, medium and equipment

Abstract

The embodiment of the invention provides an operation authority management method and device, a medium and equipment, and the method comprises the steps: running a target application in a preset authority limited mode, and carrying out keyword detection operation on a current operation interface of the target application; if the target keyword is detected from the current operation interface and the current operation interface has a next-level target sub-interface, judging whether a preset association relationship exists between the target sub-interface and the target keyword or not; and if the association relationship exists between the target sub-interface and the target keyword, intercepting the target sub-interface when the target sub-interface responds to the popup window instruction. According to the method, the keyword detection operation is performed on the current operation interface, so that the target sub-page, such as a payment code page, corresponding to the target keyword can be intercepted without perception, and a managed and controlled user is prevented from obviously perceiving that the user is managed and controlled, so that the same purpose is achieved by adopting a means of installing other applications of the same type; and meanwhile, the rejection psychology of the controlled user can be weakened.

Description

Technical Field

[0001] The present application relates to the field of communication technology, and in particular to the field of operation authority management technology, and in particular to an operation authority management method, device, medium and equipment. Background Art

[0002] For user groups with weak self-control, such as minors, in order to prevent these users from abusing the payment functions of terminal devices, such as "game recharge" or "pay-on-demand programs" without the knowledge of their caregivers, thereby causing serious property losses to the caregivers, most terminal devices currently have built-in permission-restricted mode. By turning on the permission-restricted mode, you can restrict and manage the specified APPs on the terminal devices. For example, payment APPs or entertainment APPs cannot be started normally in the permission-restricted mode. Only when you exit to the normal mode can the previously restricted APPs be restored.

[0003] However, since the above approach directly restricts users from launching designated apps, users who use terminal devices in restricted permission mode will clearly feel that they are being controlled, and thus install other apps of the same type to achieve the same purpose. This control method may also trigger a sense of rejection among restricted users. Summary of the invention

[0004] The embodiment of the present application provides an operation authority management method, apparatus, medium and device. The operation authority management method provided in the embodiment of the present application is used to solve the problem of poor user experience in the existing operation authority management method.

[0005] The present application provides an operation authority management method, including:

[0006] Running the target application in a preset permission-restricted mode, and performing a keyword detection operation on the current operation interface of the target application;

[0007] If a target keyword is detected from the current operation interface, and the current operation interface has a target sub-interface at a lower level, determining whether there is a preset association relationship between the target sub-interface and the target keyword;

[0008] If the association relationship exists between the target sub-interface and the target keyword, the pop-up window instruction is intercepted when the target sub-page responds to it.

[0009] In the operation permission management method described in the embodiment of the present application, after performing a keyword detection operation on the current operation interface of the target application, the method further includes:

[0010] If the target keyword is detected from the current operation interface, and the current operation interface does not have a target sub-interface at the next level, determining whether there is a target operation control directly associated with a payment account among the operation controls on the current operation interface;

[0011] If the target operation control exists, the deduction request corresponding to the target operation control is intercepted.

[0012] In the operation permission management method described in the embodiment of the present application, after the target operation control exists, the method further includes:

[0013] An operation record for the target operation control is obtained, prompt information is generated based on the operation record, and the prompt information is sent to the administrator's client.

[0014] In the operation authority management method described in the embodiment of the present application, after sending the prompt information to the administrator's client, the method further includes:

[0015] Receiving an application operation request initiated by the client;

[0016] According to the application operation request, marking the target application as an abnormal application, so that the abnormal application is automatically intercepted when it is run next time; or

[0017] The target application is deleted according to the application operation request.

[0018] In the operation permission management method described in the embodiment of the present application, before performing the keyword detection operation on the current operation interface of the target application, the method further includes:

[0019] Identify whether the current operating user is a target user within the scope of the operation authority management, and automatically enter a preset authority restricted mode when the current operating user is identified as the target user.

[0020] In the operation permission management method described in the embodiment of the present application, after intercepting the target subpage when it responds to the pop-up window instruction, the method further includes:

[0021] A pop-up window interception release request is received, and according to the pop-up window interception release request, the interception of the target sub-page in response to the pop-up window instruction is canceled.

[0022] In the operation permission management method described in the embodiment of the present application, canceling the interception of the target subpage in response to the pop-up window instruction according to the pop-up window interception release request includes:

[0023] Extracting target password information carried in the pop-up window interception release request, where the target password information includes a character string or a gesture image;

[0024] According to the mapping relationship between the password information and the operation instruction created in advance, the target password information is converted into the corresponding target operation instruction;

[0025] The target operation instruction is executed to cancel the interception of the target sub-page when responding to the pop-up window instruction.

[0026] Correspondingly, another aspect of the embodiment of the present application further provides an operation authority management device, the operation authority management device comprising:

[0027] A target detection module, used to run a target application in a preset permission-restricted mode and perform a keyword detection operation on a current operation interface of the target application;

[0028] A first judgment module is used to judge whether there is a preset association relationship between the target sub-interface and the target keyword if a target keyword is detected from the current operation interface and the current operation interface has a target sub-interface at a lower level;

[0029] The instruction interception module is used to intercept the pop-up window instruction when the target sub-page responds to it if there is the association relationship between the target sub-interface and the target keyword.

[0030] Correspondingly, another aspect of the embodiment of the present application further provides a storage medium, wherein the storage medium stores a plurality of instructions, wherein the instructions are suitable for loading by a processor to execute the operation permission management method as described above.

[0031] Correspondingly, another aspect of an embodiment of the present application further provides an electronic device, including a processor and a memory, wherein the memory stores a plurality of instructions, and the processor loads the instructions to execute the operation authority management method as described above.

[0032] The embodiments of the present application provide an operation permission management method, apparatus, medium and equipment. The method performs a keyword detection operation on the current operation interface of the target application by running the target application in a preset permission-restricted mode; if the target keyword is detected from the current operation interface, and there is a target sub-interface of the next level in the current operation interface, it is determined whether there is a preset association relationship between the target sub-interface and the target keyword; if there is an association relationship between the target sub-interface and the target keyword, it is intercepted when the target sub-page responds to the pop-up window instruction. By using the operation permission management method provided by the embodiments of the present application, by performing a keyword detection operation on the current operation interface, the target sub-page corresponding to the target keyword, such as the payment code page, can be imperceptibly intercepted, so as to avoid the controlled users from obviously perceiving that they are being controlled, and thus taking the means of installing other applications of the same type to achieve the same purpose, and at the same time, it can reduce the rejection psychology of the controlled users. BRIEF DESCRIPTION OF THE DRAWINGS

[0033] In order to more clearly illustrate the technical solutions in the embodiments of the present application, the following briefly introduces the drawings required for use in the description of the embodiments. Obviously, the drawings described below are only some embodiments of the present application, and those skilled in the art can obtain other drawings based on these drawings without creative work.

[0034] Figure 1 A flowchart of the operation permission management method provided in an embodiment of the present application.

[0035] Figure 2 Another flowchart of the operation authority management method provided in an embodiment of the present application.

[0036] Figure 3 A schematic diagram of the structure of the operation authority management device provided in an embodiment of the present application.

[0037] Figure 4 Another structural diagram of the operation authority management device provided in an embodiment of the present application.

[0038] Figure 5 A schematic diagram of the structure of an electronic device provided in an embodiment of the present application. DETAILED DESCRIPTION

[0039] The technical solutions in the embodiments of the present application will be described clearly and completely below in conjunction with the drawings in the embodiments of the present application. Obviously, the described embodiments are only part of the embodiments of the present application, rather than all of the embodiments. Based on the embodiments in the present application, all other embodiments obtained by those skilled in the art without creative work are within the scope of protection of the present application.

[0040] An embodiment of the present application provides an operation permission management method, which can detect keywords on the current operation interface and intercept target sub-pages corresponding to target keywords, such as payment code pages, without being noticed. This prevents the controlled users from obviously feeling that they are being controlled, thereby installing other applications of the same type to achieve the same purpose. At the same time, it can reduce the rejection of the controlled users.

[0041] The term "and / or" in this application can be a description of the association relationship of associated objects, indicating that there can be three relationships. For example, A and / or B can represent: A exists alone, A and B exist at the same time, and B exists alone. In addition, the character " / " in this application generally indicates that the associated objects before and after are in an "or" relationship.

[0042] The terms "first", "second", etc. in the specification and claims of the present application and the above-mentioned drawings are used to distinguish similar objects, and are not necessarily used to describe a specific order or sequence. It should be understood that the data used in this way can be interchangeable in appropriate circumstances, so that the embodiments described here can be implemented in a sequence other than the content illustrated or described here. In addition, the terms "including" and "having" and any of their variations are intended to cover non-exclusive inclusions, for example, the process, method, system, product or television set comprising a series of steps or modules need not be limited to the steps or modules clearly listed, but may include other steps or modules that are not clearly listed or inherent to these processes, methods, products or television sets. The naming or numbering of the steps in the present application does not mean that the steps in the method flow must be performed in the time / logic sequence indicated by the naming or numbering, and the process steps that have been named or numbered can change the execution order according to the technical purpose to be achieved, as long as the same or similar technical effects can be achieved. The division of modules in this application is a logical division. There may be other division methods when it is implemented in actual applications. For example, multiple modules can be combined or integrated into another system, or some features can be ignored or not executed. In addition, the mutual coupling or direct coupling or communication connection shown or discussed can be through some interfaces, and the indirect coupling or communication connection between modules can be electrical or other similar forms, which are not limited in this application. In addition, the modules or submodules described as separate components may or may not be physically separated, may or may not be physical modules, or may be distributed in multiple circuit modules, and some or all of the modules may be selected according to actual needs to achieve the purpose of the present application.

[0043] The operation authority management method involved in the embodiment of the present application is mainly applied to electronic devices, which may be televisions, smart phones, tablet computers, laptops, desktop computers, smart home appliances and servers, etc., which are not limited here. Optionally, the server may be an independent physical server, or a server cluster or distributed system composed of multiple physical servers, or an IoT cloud (Internet of Things cloud) that provides the ability to store, process and manage data generated by an IoT television, or a cloud server that provides cloud services, cloud databases, cloud computing, cloud functions, cloud storage, network services, cloud communications, middleware services, domain name services, security services, CDN (Content Delivery Network), and basic cloud computing services such as big data and artificial intelligence platforms, which are not limited here.

[0044] For ease of understanding, the specific process in the embodiments of the present application is described below. Figure 1 , Figure 1 A flowchart of an embodiment of the operation authority management method provided in an embodiment of the present application.

[0045] exist Figure 1 In the illustrated embodiment, taking the operation authority management device integrated in an electronic device as an example, the method may include the following steps:

[0046] S101, running a target application in a preset permission-restricted mode, and performing a keyword detection operation on a current operation interface of the target application.

[0047] It should be noted that the restricted permission mode refers to a device usage mode developed by device manufacturers for user groups with weak self-control, such as minors, such as the common "child mode" on mobile phones or TVs. Different manufacturers may have different names for the restricted permission mode. The restricted permission mode can be used to restrict and manage designated applications on electronic devices. For example, payment applications or entertainment applications cannot be started normally in the restricted permission mode. Only after exiting to the normal mode can the previously restricted applications be restored to use, so as to prevent some user groups from abusing the payment functions of electronic devices without the knowledge of the caregivers, such as "game recharge" or "on-demand paid programs", thereby causing serious property losses to the caregivers.

[0048] The target application refers to an application that is controlled in the permission restricted mode, such as a payment application, or other applications that include payment functions, which are not limited here.

[0049] In this embodiment, a keyword detection operation is performed on the current operation interface of the target application to determine whether the current operating user intends to use the restricted function (such as a paid function), or to determine whether there is a control on the currently browsed operation interface that can trigger the restricted function (such as an operation control or a paid QR code that jumps to the payment interface). Compared with the current common operation permission management method, this solution does not directly restrict a certain application completely, that is, it retains most of the daily use functions and only restricts a small number of sensitive functions. In addition, it can cover most similar applications through keyword detection, which can prevent users who use terminal devices in permission-restricted mode from being able to clearly perceive that they are being controlled, and thus take the means of installing other similar applications to achieve the same purpose.

[0050] It should be noted that keyword detection is a mature technology and will not be described in detail here. The main operation process may involve the following common algorithms:

[0051] TextRank: A graph ranking-based algorithm for discovering keywords and sentences in text.

[0052] LDA (Latent Dirichlet Allocation): A topic model used to discover hidden topics in text and identify keywords.

[0053] BERT (Bidirectional Encoder Representations from Transformers): A pre-trained language representation model that can be used for keyword extraction.

[0054] S102: If a target keyword is detected from the current operation interface, and the current operation interface has a target sub-interface at a lower level, determine whether there is a preset association relationship between the target sub-interface and the target keyword.

[0055] It should be noted that when the target application is a payment application or other application with payment functions, the corresponding target keyword may be payment-related keywords such as "payment" or "submit order". The target sub-interface may be the payment code page or payment confirmation page that is displayed in a pop-up window after the current operating user clicks a jump control (such as "next page" or "submit order" controls) on the current operating interface.

[0056] In some embodiments, the target sub-interface may also be an input interface for a payment password or a verification code.

[0057] In this embodiment, by adding corresponding target keywords to the target sub-interface that needs to be controlled in advance, when the target keyword is detected in the current operation interface, it can be automatically determined whether there is a preset association relationship between the target sub-interface and the target keyword, and then the target sub-interface that is about to pop up can be intercepted in advance, thereby achieving the purpose of permission management of some functions of the target application.

[0058] S103: If the association relationship exists between the target sub-interface and the target keyword, intercepting the target sub-page when it responds to a pop-up window instruction.

[0059] In this embodiment, when it is determined that there is an association between the target sub-interface and the target keyword detected from the current operation interface, it means that the target sub-interface at the next level of the current operation interface contains a function that the administrator prohibits the current operating user from using, such as a payment function or a payment code. In order to prevent the current operating user from performing payment operations based on the pop-up target sub-page, the target sub-page is intercepted when responding to the pop-up instruction, and the effect of imperception can be achieved.

[0060] In some embodiments, after performing a keyword detection operation on the current operation interface of the target application, the method further includes:

[0061] If the target keyword is detected from the current operation interface, and the current operation interface does not have a target sub-interface at the next level, determining whether there is a target operation control directly associated with a payment account among the operation controls on the current operation interface;

[0062] If the target operation control exists, the deduction request corresponding to the target operation control is intercepted.

[0063] Since not all current operation interfaces have a target sub-interface at the next level, for example, some applications will directly expose the interface for connecting to the payment account through controls on the main interface of the application, and provide the function of skipping the identity verification operation, so that the current operating user can skip the identity verification operation and complete the payment by simply scanning the code or clicking the control. For such application scenarios, in this embodiment, it is determined whether there is a target operation control directly associated with the payment account among the operation controls on the current operation interface; if there is a target operation control, the deduction request corresponding to the target operation control is intercepted and the payment action is canceled.

[0064] In some embodiments, after the target operation control exists, the method further includes:

[0065] An operation record for the target operation control is obtained, prompt information is generated based on the operation record, and the prompt information is sent to the administrator's client.

[0066] In this embodiment, for the above-mentioned application that provides the function of skipping identity authentication, if this function is kept enabled by default, there may be certain risks. For example, when the interception of the deduction request fails, the current operating user can successfully complete the payment action. Therefore, by obtaining the operation record for the target operation control and generating a prompt message based on the operation record, the prompt message can be sent to the administrator's client (such as a mobile phone bound to the electronic device), prompting the administrator that there is currently an xx application that has enabled the function of skipping identity authentication. In some embodiments, the function of remotely controlling the electronic device can also be provided, so that the administrator can remotely cancel the function of skipping identity authentication of the xx application through the client.

[0067] In some embodiments, after sending the prompt information to the administrator's client, the method further includes:

[0068] Receiving an application operation request initiated by the client;

[0069] According to the application operation request, marking the target application as an abnormal application, so that the abnormal application is automatically intercepted when it is run next time; or

[0070] The target application is deleted according to the application operation request.

[0071] In this embodiment, when it is found that a certain application has enabled the function of skipping identity authentication by default without the knowledge of the administrator, or that the current operator has downloaded an illegal application through an illegal channel, the function of skipping identity authentication provided by such illegal application cannot be forcibly closed, and such illegal application should be intercepted or deleted in a timely manner. Therefore, in this embodiment, the administrator can remotely initiate an application operation request to the electronic device through the client, so that the electronic device marks the target application as an abnormal application according to the application operation request, so that the abnormal application is automatically intercepted when it is run next time; or delete the target application according to the application operation request.

[0072] In some embodiments, before performing a keyword detection operation on the current operation interface of the target application, the method further includes:

[0073] Identify whether the current operating user is a target user within the scope of the operation authority management, and automatically enter a preset authority restricted mode when the current operating user is identified as the target user.

[0074] In this embodiment, there are multiple ways to enter the restricted permission mode, such as an administrator actively enabling it on the setting page of the electronic device. Alternatively, the user can enter the preset restricted permission mode automatically when the user currently operating is identified as a target user (i.e., a user set in advance or a user with specific facial features) through face recognition or other technologies.

[0075] In some embodiments, Figure 2 As shown, after S103, the method further includes the following steps:

[0076] S104, receiving a pop-up window interception release request, and canceling the interception of the target sub-page in response to the pop-up window instruction according to the pop-up window interception release request.

[0077] In this embodiment, a function of canceling the interception of the target sub-page is provided. This function can be used when the administrator is present. Assuming that only the administrator has the ability to cancel the pop-up window interception, the current operating user can, with the administrator's consent, cancel the interception of the target sub-page when responding to the pop-up window instruction, and then restore the pop-up window of the target sub-interface, so that the current operator can continue to use functions such as payment.

[0078] In some embodiments, the S104 specifically includes:

[0079] Extracting target password information carried in the pop-up window interception release request, where the target password information includes a character string or a gesture image;

[0080] According to the mapping relationship between the password information and the operation instruction created in advance, the target password information is converted into the corresponding target operation instruction;

[0081] The target operation instruction is executed to cancel the interception of the target sub-page when responding to the pop-up window instruction.

[0082] In order to prevent the administrator from being discovered by the target user (i.e., the user within the scope of the operation authority management) when performing the pop-up window interception cancellation operation, so that the target user knows that the administrator has controlled him, which may cause rejection psychology. In this embodiment, a pop-up window interception cancellation request carrying target password information is sent to the electronic device, so that after receiving the pop-up window interception cancellation request, the electronic device extracts the target password information carried therein, and then converts the target password information into a corresponding target operation instruction according to the mapping relationship between the pre-created password information and the operation instruction, and executes the target operation instruction to cancel the interception of the target subpage when responding to the pop-up window instruction.

[0083] In one application scenario, the target password information includes a character string or a gesture image. The administrator can initiate a pop-up window interception release request by pressing a pre-set button on the client, such as a remote control. In order to increase the complexity of the target password information, it can also be a button combination consisting of multiple buttons, such as "up, down, left, right".

[0084] All the above optional technical solutions can be arbitrarily combined to form optional embodiments of the present application, which will not be described one by one here.

[0085] In specific implementation, the present application is not limited by the execution order of the various steps described. If no conflict occurs, some steps can be performed in other orders or simultaneously.

[0086] As can be seen from the above, the operation permission management method provided by the embodiment of the present application performs a keyword detection operation on the current operation interface of the target application by running the target application in a preset permission-restricted mode; if the target keyword is detected from the current operation interface, and the current operation interface has a target sub-interface of the next level, then it is determined whether there is a preset association relationship between the target sub-interface and the target keyword; if the association relationship exists between the target sub-interface and the target keyword, then the target sub-page is intercepted when it responds to a pop-up window instruction. Utilizing the operation permission management method provided by the embodiment of the present application, by performing a keyword detection operation on the current operation interface, the target sub-page corresponding to the target keyword, such as the payment code page, can be imperceptibly intercepted, so as to prevent the controlled users from obviously perceiving that they are being controlled, thereby taking the means of installing other applications of the same type to achieve the same purpose, and at the same time, it can reduce the rejection psychology of the controlled users.

[0087] The embodiment of the present application also provides an operation authority management device, which can be integrated into an electronic device.

[0088] See also Figure 3 , Figure 3 A schematic diagram of the structure of the operation authority management device provided in the embodiment of the present application. The operation authority management device 30 may include:

[0089] The target detection module 31 is used to run the target application in a preset permission-restricted mode and perform a keyword detection operation on the current operation interface of the target application;

[0090] A first judgment module 32 is used to judge whether there is a preset association relationship between the target sub-interface and the target keyword if a target keyword is detected from the current operation interface and the current operation interface has a target sub-interface at a lower level;

[0091] The instruction interception module 33 is used to intercept the pop-up window instruction when the target sub-page responds to the pop-up window instruction if there is the association relationship between the target sub-page and the target keyword.

[0092] In some embodiments, the device also includes a second judgment module, which is used to determine whether there is a target operation control directly associated with the payment account among the operation controls on the current operation interface if a target keyword is detected from the current operation interface and there is no target sub-interface of the next level in the current operation interface; if the target operation control exists, the deduction request corresponding to the target operation control is intercepted.

[0093] In some embodiments, the device further includes a prompt module for obtaining an operation record for the target operation control, generating prompt information based on the operation record, and sending the prompt information to an administrator's client.

[0094] In some embodiments, the device also includes an operation module for receiving an application operation request initiated by the client; marking the target application as an abnormal application based on the application operation request so that the abnormal application is automatically intercepted the next time it runs; or deleting the target application based on the application operation request.

[0095] In some embodiments, the device further includes an identification module for identifying whether the currently operating user is a target user within the scope of operation authority management, and automatically enters a preset authority restricted mode when the currently operating user is identified as the target user.

[0096] In some embodiments, the device further includes an interception release module, which is used to receive a pop-up window interception release request, and cancel the interception of the target sub-page in response to the pop-up window instruction according to the pop-up window interception release request.

[0097] In some embodiments, the interception release module is used to extract the target password information carried in the pop-up window interception release request, and the target password information includes a character string or a gesture image; according to a mapping relationship between pre-created password information and operation instructions, the target password information is converted into a corresponding target operation instruction; and the target operation instruction is executed to cancel the interception of the target sub-page when responding to the pop-up window instruction.

[0098] In specific implementation, the above modules can be implemented as independent entities, or can be arbitrarily combined to be implemented as the same entity or several entities.

[0099] As can be seen from the above, the operation permission management device 30 provided in the embodiment of the present application, wherein the target detection module 31 is used to run the target application in a preset permission restricted mode, and perform a keyword detection operation on the current operation interface of the target application; the first judgment module 32 is used to judge whether there is a preset association relationship between the target sub-interface and the target keyword if a target keyword is detected from the current operation interface, and there is a target sub-interface of the next level in the current operation interface; the instruction interception module 33 is used to intercept the target sub-page when it responds to a pop-up instruction if there is the association relationship between the target sub-interface and the target keyword.

[0100] See also Figure 4 , Figure 4 Another structural diagram of the operation authority management device provided in the embodiment of the present application, the operation authority management device 30 includes a memory 120, one or more processors 180, and one or more applications, wherein the one or more applications are stored in the memory 120 and configured to be executed by the processor 180; the processor 180 may include a target detection module 31, a first judgment module 32, and an instruction interception module 33. For example, the structure and connection relationship of the above components may be as follows:

[0101] The memory 120 can be used to store applications and data. The applications stored in the memory 120 include executable codes. The applications can be composed of various functional modules. The processor 180 executes various functional applications and data processing by running the applications stored in the memory 120. In addition, the memory 120 may include a high-speed random access memory and may also include a non-volatile memory, such as at least one disk storage device, a flash memory device, or other volatile solid-state storage devices. Accordingly, the memory 120 may also include a memory controller to provide the processor 180 with access to the memory 120.

[0102] The processor 180 is the control center of the device, and uses various interfaces and lines to connect various parts of the entire terminal, and executes various functions of the device and processes data by running or executing applications stored in the memory 120, and calling data stored in the memory 120, so as to monitor the device as a whole. Optionally, the processor 180 may include one or more processing cores; preferably, the processor 180 may integrate an application processor and a modem processor, wherein the application processor mainly processes the operating system, user interface, and application programs.

[0103] Specifically in this embodiment, the processor 180 will load the executable code corresponding to the process of one or more application programs into the memory 120 according to the following instructions, and the processor 180 will run the application programs stored in the memory 120 to implement various functions:

[0104] A target detection instruction is used to run a target application in a preset permission-restricted mode and perform a keyword detection operation on the current operation interface of the target application;

[0105] A first judgment instruction is used to judge whether there is a preset association relationship between the target sub-interface and the target keyword if a target keyword is detected from the current operation interface and the current operation interface has a target sub-interface at a lower level;

[0106] The instruction interception instruction is used to intercept the pop-up window instruction when the target sub-page responds to the pop-up window instruction if there is the association relationship between the target sub-interface and the target keyword.

[0107] In some embodiments, the program also includes a second judgment instruction, which is used to determine whether there is a target operation control directly associated with the payment account among the operation controls on the current operation interface if a target keyword is detected from the current operation interface and there is no target sub-interface of the next level in the current operation interface; if the target operation control exists, the deduction request corresponding to the target operation control is intercepted.

[0108] In some embodiments, the program further includes a prompt instruction for obtaining an operation record for the target operation control, generating prompt information based on the operation record, and sending the prompt information to the administrator's client.

[0109] In some embodiments, the program also includes operation instructions for receiving an application operation request initiated by the client; marking the target application as an abnormal application based on the application operation request so that the abnormal application is automatically intercepted the next time it runs; or deleting the target application based on the application operation request.

[0110] In some embodiments, the program further includes an identification instruction for identifying whether the currently operating user is a target user within the scope of the operating authority management, and automatically entering a preset authority restricted mode when the currently operating user is identified as the target user.

[0111] In some embodiments, the program further includes an interception release instruction for receiving a pop-up window interception release request, and canceling the interception of the target sub-page in response to the pop-up window instruction according to the pop-up window interception release request.

[0112] In some embodiments, the interception release instruction is used to extract the target password information carried in the pop-up window interception release request, and the target password information includes a character string or a gesture image; according to a mapping relationship between the pre-created password information and the operation instruction, the target password information is converted into a corresponding target operation instruction; and the target operation instruction is executed to cancel the interception of the target sub-page when responding to the pop-up window instruction.

[0113] The present application also provides an electronic device. Figure 5 , Figure 5 The electronic device 1200 is a schematic diagram of the structure of an electronic device provided in an embodiment of the present application, and the electronic device can be used to implement the operation authority management method provided in the above embodiment. The electronic device 1200 can be a television, a smart phone, or a tablet computer.

[0114] like Figure 5 As shown, the electronic device 1200 may include an RF (Radio Frequency) circuit 110, a memory 120 including one or more (only one is shown in the figure) computer-readable storage media, an input unit 130, a display unit 140, a sensor 150, an audio circuit 160, a transmission module 170, a processor 180 including one or more (only one is shown in the figure) processing cores, and a power supply 190. Those skilled in the art will understand that Figure 5 The structure of the electronic device 1200 shown in the figure does not constitute a limitation on the electronic device 1200, and may include more or fewer components than shown in the figure, or combine certain components, or arrange the components differently.

[0115] The RF circuit 110 is used to receive and send electromagnetic waves, realize the mutual conversion between electromagnetic waves and electrical signals, and thus communicate with a communication network or other televisions. The RF circuit 110 may include various existing circuit elements for performing these functions, such as an antenna, a radio frequency transceiver, a digital signal processor, an encryption / decryption chip, a user identity module (SIM) card, a memory, etc. The RF circuit 110 can communicate with various networks such as the Internet, an intranet, a wireless network, or communicate with other televisions via a wireless network.

[0116] The memory 120 can be used to store software programs and modules, such as the program instructions / modules corresponding to the operation authority management method in the above embodiment. The processor 180 executes various functional applications and data processing by running the software programs and modules stored in the memory 120. The vibration reminder mode can be automatically selected according to the current scene of the electronic device to perform operation authority management, which can not only ensure that scenes such as meetings are not disturbed, but also ensure that users can perceive incoming calls, thereby improving the intelligence of the electronic device. The memory 120 may include a high-speed random access memory, and may also include a non-volatile memory, such as one or more magnetic storage devices, flash memory, or other non-volatile solid-state memory. In some instances, the memory 120 may further include a memory remotely arranged relative to the processor 180, and these remote memories may be connected to the electronic device 1200 via a network. Examples of the above-mentioned network include, but are not limited to, the Internet, an intranet, a local area network, a mobile communication network, and a combination thereof.

[0117] The input unit 130 can be used to receive input digital or character information, and generate keyboard, mouse, joystick, optical or trackball signal input related to user settings and function control. Specifically, the input unit 130 may include a touch-sensitive surface 131 and other input devices 132. The touch-sensitive surface 131, also known as a touch display screen or touch pad, can collect user touch operations on or near it (such as operations performed by users using fingers, styluses, or any other suitable objects or accessories on or near the touch-sensitive surface 131), and drive corresponding connection devices according to a pre-set program. Optionally, the touch-sensitive surface 131 may include a touch detection device and a touch controller. Among them, the touch detection device detects the user's touch position, detects the signal brought by the touch operation, and transmits the signal to the touch controller; the touch controller receives the touch information from the touch detection device, converts it into touch point coordinates, and then sends it to the processor 180, and can receive and execute commands sent by the processor 180. In addition, the touch-sensitive surface 131 may be implemented in various types such as resistive, capacitive, infrared, and surface acoustic wave. In addition to the touch-sensitive surface 131, the input unit 130 may further include other input devices 132. Specifically, the other input devices 132 may include, but are not limited to, one or more of a physical keyboard, a function key (such as a volume control key, a switch key, etc.), a trackball, a mouse, a joystick, and the like.

[0118] The display unit 140 can be used to display information input by the user or information provided to the user and various graphical user interfaces of the electronic device 1200, which can be composed of graphics, text, icons, videos and any combination thereof. The display unit 140 may include a display panel 141. Optionally, the display panel 141 may be configured in the form of LCD (Liquid Crystal Display), OLED (Organic Light-Emitting Diode), etc. Further, the touch-sensitive surface 131 may cover the display panel 141. When the touch-sensitive surface 131 detects a touch operation on or near it, it is transmitted to the processor 180 to determine the type of touch event. Subsequently, the processor 180 provides corresponding visual output on the display panel 141 according to the type of touch event. Although in Figure 5 In the embodiment, the touch-sensitive surface 131 and the display panel 141 are implemented as two independent components to realize the input and output functions. However, in some embodiments, the touch-sensitive surface 131 and the display panel 141 can be integrated to realize the input and output functions.

[0119] The electronic device 1200 may also include at least one sensor 150, such as a light sensor, a motion sensor, and other sensors. Specifically, the light sensor may include an ambient light sensor and a proximity sensor, wherein the ambient light sensor may adjust the brightness of the display panel 141 according to the brightness of the ambient light, and the proximity sensor may turn off the display panel 141 and / or the backlight when the electronic device 1200 is moved to the ear. As a type of motion sensor, the gravity acceleration sensor can detect the magnitude of acceleration in each direction (generally three axes), and can detect the magnitude and direction of gravity when stationary. It can be used for applications that identify the posture of the mobile phone (such as horizontal and vertical screen switching, related games, magnetometer posture calibration), vibration recognition related functions (such as pedometer, tapping), etc.; as for other sensors such as gyroscopes, barometers, hygrometers, thermometers, infrared sensors, etc. that can also be configured in the electronic device 1200, they will not be repeated here.

[0120] The audio circuit 160, the speaker 161, and the microphone 162 can provide an audio interface between the user and the electronic device 1200. The audio circuit 160 can transmit the received audio data to the speaker 161 after converting the received audio data into an electrical signal, which is converted into a sound signal for output by the speaker 161; on the other hand, the microphone 162 converts the collected sound signal into an electrical signal, which is received by the audio circuit 160 and converted into audio data, and then the audio data is processed by the output processor 180, and then sent to another terminal through the RF circuit 110, or the audio data is output to the memory 120 for further processing. The audio circuit 160 may also include an earplug jack to provide communication between an external headset and the electronic device 1200.

[0121] The electronic device 1200 can help users send and receive emails, browse web pages, and access streaming media through the transmission module 170 (such as a Wi-Fi module), which provides users with wireless broadband Internet access. Figure 5 The transmission module 170 is shown, but it is understandable that it is not an essential component of the electronic device 1200 and can be omitted as needed without changing the essence of the invention.

[0122] The processor 180 is the control center of the electronic device 1200. It uses various interfaces and lines to connect various parts of the entire mobile phone. By running or executing software programs and / or modules stored in the memory 120, and calling data stored in the memory 120, it executes various functions of the electronic device 1200 and processes data, thereby monitoring the mobile phone as a whole. Optionally, the processor 180 may include one or more processing cores; in some embodiments, the processor 180 may integrate an application processor and a modem processor, wherein the application processor mainly processes the operating system, user interface, and application programs, etc., and the modem processor mainly processes wireless communications. It is understandable that the above-mentioned modem processor may not be integrated into the processor 180.

[0123] The electronic device 1200 also includes a power supply 190 for supplying power to various components. In some embodiments, the power supply can be logically connected to the processor 180 through a power management system, so that the power management system can realize functions such as managing discharge and power consumption. The power supply 190 can also include any components such as one or more DC or AC power supplies, recharging systems, power failure detection circuits, power converters or inverters, and power status indicators.

[0124] Although not shown, the electronic device 1200 may also include a camera (such as a front camera, a rear camera), a Bluetooth module, etc., which will not be described in detail here. Specifically in this embodiment, the display unit 140 of the electronic device 1200 is a touch screen display, and the electronic device 1200 also includes a memory 120, and one or more programs, wherein one or more programs are stored in the memory 120, and are configured to be executed by one or more processors 180. One or more programs include instructions for performing the following operations:

[0125] A target detection instruction is used to run a target application in a preset permission-restricted mode and perform a keyword detection operation on the current operation interface of the target application;

[0126] A first judgment instruction is used to judge whether there is a preset association relationship between the target sub-interface and the target keyword if a target keyword is detected from the current operation interface and the current operation interface has a target sub-interface at a lower level;

[0127] The instruction interception instruction is used to intercept the pop-up window instruction when the target sub-page responds to the pop-up window instruction if there is the association relationship between the target sub-interface and the target keyword.

[0128] In some embodiments, the program also includes a second judgment instruction, which is used to determine whether there is a target operation control directly associated with the payment account among the operation controls on the current operation interface if a target keyword is detected from the current operation interface and there is no target sub-interface of the next level in the current operation interface; if the target operation control exists, the deduction request corresponding to the target operation control is intercepted.

[0129] In some embodiments, the program further includes a prompt instruction for obtaining an operation record for the target operation control, generating prompt information based on the operation record, and sending the prompt information to the administrator's client.

[0130] In some embodiments, the program also includes operation instructions for receiving an application operation request initiated by the client; marking the target application as an abnormal application based on the application operation request so that the abnormal application is automatically intercepted the next time it runs; or deleting the target application based on the application operation request.

[0131] In some embodiments, the program further includes an identification instruction for identifying whether the currently operating user is a target user within the scope of the operating authority management, and automatically entering a preset authority restricted mode when the currently operating user is identified as the target user.

[0132] In some embodiments, the program further includes an interception release instruction for receiving a pop-up window interception release request, and canceling the interception of the target sub-page in response to the pop-up window instruction according to the pop-up window interception release request.

[0133] In some embodiments, the interception release instruction is used to extract the target password information carried in the pop-up window interception release request, and the target password information includes a character string or a gesture image; according to a mapping relationship between the pre-created password information and the operation instruction, the target password information is converted into a corresponding target operation instruction; and the target operation instruction is executed to cancel the interception of the target sub-page when responding to the pop-up window instruction.

[0134] The embodiment of the present application also provides an electronic device, which may be a smart phone, a television, a computer, or other device.

[0135] As can be seen from the above, the embodiment of the present application provides an electronic device 1200, and the electronic device 1200 performs the following steps:

[0136] Running the target application in a preset permission-restricted mode, and performing a keyword detection operation on the current operation interface of the target application;

[0137] If a target keyword is detected from the current operation interface, and the current operation interface has a target sub-interface at a lower level, determining whether there is a preset association relationship between the target sub-interface and the target keyword;

[0138] If the association relationship exists between the target sub-interface and the target keyword, the pop-up window instruction is intercepted when the target sub-page responds to it.

[0139] An embodiment of the present application further provides a storage medium, in which a computer program is stored. When the computer program runs on a computer, the computer executes the operation authority management method described in any of the above embodiments.

[0140] It should be noted that, for the operation permission management method described in this application, ordinary testers in this field can understand that all or part of the process of implementing the operation permission management method described in the embodiment of this application can be completed by controlling the relevant hardware through a computer program, and the computer program can be stored in a computer-readable storage medium, such as stored in the memory of an electronic device, and executed by at least one processor in the electronic device, and the execution process may include the process of the embodiment of the operation permission management method. Among them, the storage medium can be a disk, an optical disk, a read-only memory (ROM), a random access memory (RAM), etc.

[0141] For the operation authority management device of the embodiment of the present application, each functional module can be integrated into a processing chip, or each module can exist physically separately, or two or more modules can be integrated into one module. The above-mentioned integrated module can be implemented in the form of hardware or in the form of a software functional module. If the integrated module is implemented in the form of a software functional module and sold or used as an independent product, it can also be stored in a computer-readable storage medium, such as a read-only memory, a disk or an optical disk.

[0142] The above is a detailed introduction to the operation authority management method, device, medium and equipment provided in the embodiments of the present application. Specific examples are used herein to illustrate the principles and implementation methods of the present application. The description of the above embodiments is only used to help understand the method and core idea of ​​the present application. At the same time, for those skilled in the art, according to the idea of ​​the present application, there will be changes in the specific implementation method and application scope. In summary, the content of this specification should not be understood as a limitation on the present application.

Claims

1. An operation authority management method, characterized in that: include: Running the target application in a preset permission-restricted mode, and performing a keyword detection operation on the current operation interface of the target application; If a target keyword is detected from the current operation interface, and the current operation interface has a target sub-interface at a lower level, determining whether there is a preset association relationship between the target sub-interface and the target keyword; If the association relationship exists between the target sub-interface and the target keyword, the pop-up window instruction is intercepted when the target sub-page responds to it.

2. The operation authority management method according to claim 1, characterized in that: After performing the keyword detection operation on the current operation interface of the target application, the method further includes: If the target keyword is detected from the current operation interface, and the current operation interface does not have a target sub-interface at the next level, determining whether there is a target operation control directly associated with a payment account among the operation controls on the current operation interface; If the target operation control exists, the deduction request corresponding to the target operation control is intercepted.

3. The operation authority management method according to claim 2, characterized in that: After the target operation control exists, the method further includes: An operation record for the target operation control is obtained, prompt information is generated based on the operation record, and the prompt information is sent to the administrator's client.

4. The operation authority management method according to claim 3, characterized in that: After sending the prompt information to the administrator's client, the method further includes: Receiving an application operation request initiated by the client; According to the application operation request, marking the target application as an abnormal application, so that the abnormal application is automatically intercepted when it is run next time; or The target application is deleted according to the application operation request.

5. The operation authority management method according to claim 1, characterized in that: Before performing the keyword detection operation on the current operation interface of the target application, the method further includes: Identify whether the current operating user is a target user within the scope of the operation authority management, and automatically enter a preset authority restricted mode when the current operating user is identified as the target user.

6. The operation authority management method according to claim 1, characterized in that: After intercepting the target subpage when it responds to the pop-up window instruction, the method further includes: A pop-up window interception release request is received, and according to the pop-up window interception release request, the interception of the target sub-page in response to the pop-up window instruction is canceled.

7. The operation authority management method according to claim 6, characterized in that: The canceling the interception of the target subpage in response to the pop-up window instruction according to the pop-up window interception release request includes: Extracting target password information carried in the pop-up window interception release request, where the target password information includes a character string or a gesture image; According to the mapping relationship between the password information and the operation instruction created in advance, the target password information is converted into the corresponding target operation instruction; The target operation instruction is executed to cancel the interception of the target sub-page when responding to the pop-up window instruction.

8. An operation authority management device, characterized in that: The operation authority management device comprises: A target detection module, used to run a target application in a preset permission-restricted mode and perform a keyword detection operation on a current operation interface of the target application; A first judgment module is used to judge whether there is a preset association relationship between the target sub-interface and the target keyword if a target keyword is detected from the current operation interface and the current operation interface has a target sub-interface at a lower level; The instruction interception module is used to intercept the pop-up window instruction when the target sub-page responds to it if there is the association relationship between the target sub-interface and the target keyword.

9. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores a plurality of instructions, and the instructions are suitable for being loaded by a processor to execute the operation authority management method according to any one of claims 1 to 7.

10. An electronic device, characterized in that: It comprises a processor and a memory, wherein the memory stores a plurality of instructions, and the processor loads the instructions to execute the operation authority management method according to any one of claims 1 to 7.

Images