Private cloud device access method and apparatus, electronic device, and readable storage medium

Abstract

The embodiment of the present application provides a private cloud device access method and device, electronic equipment and readable storage medium, the method comprises: obtaining private cloud device information; wherein the private cloud device information at least includes first identification information and initial configuration parameter; according to the initial configuration parameter, connect the private cloud device corresponding to the first identification information; when the user equipment and the private cloud device are connected successfully, send the user equipment information to the private cloud device; the private cloud device is used for sending the private cloud device information and the user equipment information to the private cloud server, and the private cloud server is used for generating the private cloud device address of the private cloud device according to the private cloud device information and the user equipment information; receive the private cloud device address of the private cloud device sent by the private cloud server; according to the private cloud device address, access the corresponding private cloud device through the private cloud server. The embodiment of the present application improves the user experience of the private cloud device.

Description

Technical Field

[0001] The embodiments of the present invention relate to the field of Internet technology, and in particular to a method for accessing a private cloud device, a device for accessing a private cloud device, an electronic device, and a computer-readable storage medium. Background Technology

[0002] With the development of cloud computing technology, private cloud devices are usually deployed within enterprises or in controlled environments, which makes it convenient for users to manage data and avoid data leakage and privacy risks. Therefore, more and more users or enterprises are choosing to use private cloud devices as a data storage solution.

[0003] However, current methods for binding private cloud devices have low security, resulting in a poor user experience. Summary of the Invention

[0004] This invention provides a method, apparatus, electronic device, and computer-readable storage medium for accessing private cloud devices, in order to solve the problem that current private cloud device binding methods have low security levels, resulting in a poor user experience with private cloud devices.

[0005] This invention discloses a method for accessing a private cloud device, applied to a user device, the method comprising:

[0006] Obtain private cloud device information; wherein, the private cloud device information includes at least first identification information and initial configuration parameters;

[0007] Connect to the private cloud device corresponding to the first identification information according to the initial configuration parameters;

[0008] When the user equipment successfully connects to the private cloud device, the user equipment information is sent to the private cloud device; the private cloud device is used to send the private cloud device information and the user equipment information to the private cloud server, and the private cloud server is used to generate the private cloud device address of the private cloud device based on the private cloud device information and the user equipment information.

[0009] Receive the private cloud device address of the private cloud device sent by the private cloud server;

[0010] Access the corresponding private cloud device through the private cloud server based on the private cloud device address.

[0011] Optionally, obtain private cloud device information, including:

[0012] Obtain the QR code of the private cloud device;

[0013] The user obtains information about the private cloud device by scanning the QR code using the application on the user device.

[0014] Optionally, the initial configuration parameters include at least the Bluetooth connection information of the private cloud device. Connecting to the private cloud device corresponding to the first identification information according to the initial configuration parameters includes:

[0015] Based on the Bluetooth connection information, the device corresponding to the first identification information is connected via Bluetooth.

[0016] Optionally, the private cloud server is used to establish a binding relationship between the user equipment information of the user equipment and the private cloud device information of the private cloud device based on the private cloud device address.

[0017] Optionally, accessing the corresponding private cloud device through the private cloud server based on the private cloud device address includes:

[0018] A private cloud device access instruction is sent to the private cloud server; the private cloud device access instruction includes at least the private cloud device address and user device information; the private cloud server is used to send the private cloud device access instruction to the private cloud device corresponding to the private cloud device address when the corresponding binding relationship is found based on the private cloud device address, if the user device information in the binding relationship is consistent with the user device information in the private cloud device access instruction, so that the private cloud device executes the private cloud device access instruction.

[0019] Optionally, accessing the corresponding private cloud device through the private cloud server based on the private cloud device address further includes:

[0020] Receive an access instruction execution message sent by the private cloud server; the access instruction execution message is sent to the private cloud server after the private cloud device executes the private cloud device access instruction.

[0021] Optionally, the method further includes:

[0022] If the user device information in the binding relationship is inconsistent with the user device information in the private cloud device access instruction, the system receives an unbound prompt message from the private cloud server.

[0023] Optionally, the user equipment information includes at least the basic information and token information of the user equipment; the basic information includes at least the device name, user password and second identification information corresponding to the user equipment.

[0024] Optionally, the address of the private cloud device is an IPv6 address.

[0025] This invention also discloses a private cloud device access device, applied to a user device, the device comprising:

[0026] A private cloud device information acquisition module is used to acquire private cloud device information; wherein, the private cloud device information includes at least first identification information and initial configuration parameters;

[0027] A private cloud device connection module is used to connect to the private cloud device corresponding to the first identification information according to the initial configuration parameters.

[0028] The user equipment information sending module is used to send user equipment information to the private cloud device when the user equipment successfully connects with the private cloud device; the private cloud device is used to send the private cloud device information and the user equipment information to the private cloud server; the private cloud server is used to generate the private cloud device address of the private cloud device based on the private cloud device information and the user equipment information.

[0029] A private cloud device address receiving module is used to receive the private cloud device address of the private cloud device sent by the private cloud server;

[0030] The private cloud device access module is used to access the corresponding private cloud device through the private cloud server based on the private cloud device address.

[0031] Optionally, the private cloud device information acquisition module is used for:

[0032] Obtain the QR code of the private cloud device;

[0033] The user obtains information about the private cloud device by scanning the QR code using the application on the user device.

[0034] Optionally, the initial configuration parameters include at least the Bluetooth connection information of the private cloud device, and the private cloud device connection module, used for:

[0035] Based on the Bluetooth connection information, the device corresponding to the first identification information is connected via Bluetooth.

[0036] Optionally, the private cloud device access module is used for:

[0037] A private cloud device access instruction is sent to the private cloud server; the private cloud device access instruction includes at least the private cloud device address and user device information; the private cloud server is used to send the private cloud device access instruction to the private cloud device corresponding to the private cloud device address when the corresponding binding relationship is found based on the private cloud device address, if the user device information in the binding relationship is consistent with the user device information in the private cloud device access instruction, so that the private cloud device executes the private cloud device access instruction.

[0038] Optionally, the private cloud device access module is used for:

[0039] Receive an access instruction execution message sent by the private cloud server; the access instruction execution message is sent to the private cloud server after the private cloud device executes the private cloud device access instruction.

[0040] Optionally, the private cloud device access module is used for:

[0041] If the user device information in the binding relationship is inconsistent with the user device information in the private cloud device access instruction, the system receives an unbound prompt message from the private cloud server.

[0042] This invention also discloses an electronic device, including a processor, a communication interface, a memory, and a communication bus, wherein the processor, the communication interface, and the memory communicate with each other through the communication bus;

[0043] The memory is used to store computer programs;

[0044] When the processor executes a program stored in the memory, it implements the method described in the embodiments of the present invention.

[0045] This invention also discloses a computer program product stored in a storage medium, which is executed by at least one processor to implement the method described in this invention.

[0046] This invention also discloses a computer-readable storage medium storing instructions that, when executed by one or more processors, cause the processors to perform the methods described in this invention.

[0047] The embodiments of the present invention have the following advantages:

[0048] In this embodiment of the invention, private cloud device information, including at least first identification information and initial configuration parameters, is obtained. The user device connects to the private cloud device corresponding to the first identification information according to the initial configuration parameters. When the user device successfully connects to the private cloud device, user device information is sent to the private cloud device. Thus, the private cloud device can send its private cloud device information and user device information to a private cloud server, allowing the private cloud server to generate a private cloud device address and send it to the user device. Subsequently, the user device can access the corresponding private cloud device through the private cloud server based on the private cloud device address. This embodiment of the invention allows the user device and the private cloud device to be bound via a private cloud server, significantly improving the security of the binding and enhancing the user experience. Furthermore, after successful binding, the user device accesses the private cloud device through the private cloud server, ensuring user data security. Attached Figure Description

[0049] Figure 1 This is a flowchart of the steps of a private cloud device access method provided in an embodiment of the present invention;

[0050] Figure 2 This is a schematic diagram of an application environment provided in an embodiment of the present invention;

[0051] Figure 3 This is a schematic diagram of a private cloud device binding process provided in an embodiment of the present invention;

[0052] Figure 4 This is a structural block diagram of a private cloud device access device provided in an embodiment of the present invention;

[0053] Figure 5 This is a schematic diagram of the hardware structure of an electronic device that implements various embodiments of the present invention. Detailed Implementation

[0054] To make the above-mentioned objects, features and advantages of the present invention more apparent and understandable, the present invention will be further described in detail below with reference to the accompanying drawings and specific embodiments.

[0055] Reference Figure 1 This diagram illustrates a flowchart of a private cloud device access method provided in an embodiment of the present invention, applied to a user device. The method may specifically include the following steps:

[0056] Step 101: Obtain private cloud device information; wherein, the private cloud device information includes at least first identification information and initial configuration parameters.

[0057] In this context, user devices are devices such as smartphones or computers; private cloud devices are devices deployed within a private cloud, such as servers, switches, routers, smartphones, or computers. Each private cloud device possesses corresponding private cloud device information, which may include at least first identification information and initial configuration parameters. The identification information (first identification information) is the private cloud device's code or name, and is unique globally or within a specified scope to prevent confusion between private cloud devices. The initial configuration parameters are configuration information that allows the user device and the private cloud device to connect according to a preset connection method. The preset connection method may include convenient methods such as Bluetooth or near-field communication (NFC). For example, when the preset connection method is Bluetooth, the initial configuration parameters may include the private cloud device's MAC address, connection password, encryption algorithm, etc. Based on this initial configuration information, the stability of the connection between the user device and the private cloud device and the security of information transmission can be guaranteed.

[0058] Step 102: Connect to the private cloud device corresponding to the first identification information according to the initial configuration parameters.

[0059] In this embodiment of the invention, after obtaining the private cloud device information through the user equipment, the user equipment can connect to the private cloud device corresponding to the first identification information according to the configuration parameters and a preset connection method, such as connecting to the private cloud device corresponding to the first identification information via Bluetooth.

[0060] Step 103: When the user equipment successfully connects with the private cloud device, the user equipment information is sent to the private cloud device; the private cloud device is used to send the private cloud device information and the user equipment information to the private cloud server, and the private cloud server is used to generate the private cloud device address of the private cloud device based on the private cloud device information and the user equipment information.

[0061] The user device information may include at least basic information about the user device and token information. The basic information includes at least the device name, user password, and secondary identification information. Specifically, a token is a mechanism for authentication and authorization. Its main function is to verify the legitimacy of the device, prevent unauthorized access, and authorize the device to legally access specific resources or services within a specific time period. For example, it may allow a user device to legally access a private cloud device within a specific time period, after which the user device can disconnect from the private cloud device, thus ensuring device security.

[0062] In this embodiment of the invention, when the user device and the private cloud device are successfully connected, the user device can send user device information to the private cloud device. After receiving the user device information, the private cloud device performs preliminary verification. It can use methods such as hash checking or shared keys to authenticate the user device. For example, it can authenticate the user device using a token. After the user device is successfully verified, the private cloud device sends its own private cloud device information and the user device information to the private server to complete the binding between the private cloud device and the private cloud server.

[0063] In some alternative embodiments, the private cloud device address is an IPv6 address. Specifically, IPv6 stands for Internet Protocol Version 6, and it is the next-generation IP protocol designed by the Internet Engineering Task Force (IETF) to replace IPv4. It is said to have enough addresses to assign an address to every grain of sand on Earth.

[0064] Specifically, the private server generates a unique IPv6 address based on the received private cloud device information and user device information, which serves as the external IP address for the private cloud device. This IPv6 address ensures the global uniqueness and accessibility of the private cloud device.

[0065] Private cloud devices register on a private server using the generated IPv6 address. Specifically, after the private cloud server generates the IPv6 address for the private cloud device, it can establish a binding relationship between the user device information and the private cloud device information to achieve binding and authorization between the user device and the private cloud device. One user device can be bound to multiple private cloud devices, and one private cloud device can also be bound to multiple user devices. Once the user device and the private cloud device are successfully bound on the private cloud server, the private cloud device is considered to have successfully registered on the private cloud server.

[0066] Step 104: Receive the private cloud device address of the private cloud device sent by the private cloud server.

[0067] Step 105: Access the corresponding private cloud device through the private cloud server based on the private cloud device address.

[0068] In this embodiment of the invention, after a private cloud device successfully registers with a private cloud server, the private cloud server can send the IPv6 address of the private cloud device to the user device, so that the user device can access the corresponding private cloud device through the private cloud server based on the IPv6 address, such as performing remote management and data transmission operations on the private cloud device.

[0069] Reference Figure 2This is a schematic diagram of an application environment provided in an embodiment of the present invention, including a user device 201, a private cloud device 202, and a private cloud server 203. The private server maintains a mapping table containing the binding relationship between the private cloud device and the user device. The private cloud server can use the mapping table to find out whether the user device accessing the private cloud device is a bound authorized user device. After determining that the user device is a bound authorized user device, the private cloud server allows the user device to connect to the private server and then access the private cloud device through the private cloud server.

[0070] It should be noted that the embodiments of the present invention may involve the use of user data. In practical applications, user-specific personal data may be used in the scheme described herein within the scope permitted by applicable laws and regulations, provided that it complies with the applicable laws and regulations of the country (e.g., with the user's explicit consent, with the user being properly notified, etc.).

[0071] In this embodiment of the invention, private cloud device information, including at least first identification information and initial configuration parameters, is obtained. The user device connects to the private cloud device corresponding to the first identification information according to the initial configuration parameters. When the user device successfully connects to the private cloud device, user device information is sent to the private cloud device. Thus, the private cloud device can send its private cloud device information and user device information to a private cloud server, allowing the private cloud server to generate a private cloud device address and send it to the user device. Subsequently, the user device can access the corresponding private cloud device through the private cloud server based on the private cloud device address. This embodiment of the invention allows the user device and the private cloud device to be bound via a private cloud server, significantly improving the security of the binding and enhancing the user experience. Furthermore, after successful binding, the user device accesses the private cloud device through the private cloud server, ensuring user data security.

[0072] In one embodiment of the present invention, obtaining private cloud device information may include:

[0073] Obtain the QR code of the private cloud device;

[0074] The user obtains information about the private cloud device by scanning the QR code using the application on the user device.

[0075] In this embodiment of the invention, the user device may have a mobile application (App, Application) or other application with QR code scanning function installed. The user can scan the QR code provided by the private cloud device through the user device. The QR code is a globally unique QR code corresponding to the private cloud device. The QR code contains the identification information (first identification information) of the private cloud device and the initial configuration parameters, so that the user device can connect to the private cloud device corresponding to the first identification information according to the initial configuration parameters.

[0076] In one embodiment of the present invention, the initial configuration parameters include at least the Bluetooth connection information of the private cloud device, and connecting to the private cloud device corresponding to the first identification information according to the initial configuration parameters includes:

[0077] Based on the Bluetooth connection information, the device corresponding to the first identification information is connected via Bluetooth.

[0078] In this embodiment of the invention, the user equipment and the private cloud device can be connected via Bluetooth or near-field communication. For example, when the user equipment and the private cloud device can be connected via Bluetooth, the initial configuration parameters include at least the Bluetooth connection information of the private cloud device, such as the MAC address, connection password, and encryption algorithm of the private cloud device. The user equipment can connect to the private cloud device corresponding to the first identification information via Bluetooth based on the Bluetooth connection information, and then send the user equipment information of the user equipment to the private cloud device. This allows the private cloud device to further obtain the private cloud device address (i.e., the IPv6 address) from the private cloud server based on the user equipment information and the private cloud device information, for the user equipment to access the private cloud device.

[0079] In one embodiment of the present invention, accessing the corresponding private cloud device through the private cloud server based on the private cloud device address includes:

[0080] A private cloud device access instruction is sent to the private cloud server; the private cloud device access instruction includes at least the private cloud device address and user device information; the private cloud server is used to send the private cloud device access instruction to the private cloud device corresponding to the private cloud device address when the corresponding binding relationship is found based on the private cloud device address, if the user device information in the binding relationship is consistent with the user device information in the private cloud device access instruction, so that the private cloud device executes the private cloud device access instruction.

[0081] In this embodiment of the invention, when a user device performs access operations such as storing data or backing up data on a private cloud device, the user device can send a private cloud device access instruction to the private cloud server. The private cloud device access instruction can include at least an IPv6 address and user device information. The private cloud server can look up the binding relationship between the private cloud device corresponding to the IPv6 address and the user device in the mapping table based on the IPv6 address. If the user device information in the binding relationship is consistent with the user device information in the private cloud device access instruction, the user device authentication is successful, and the private cloud server sends the private cloud device access instruction to the private cloud device corresponding to the IPv6 address, so that it executes the private cloud device access instruction.

[0082] In one embodiment of the present invention, accessing the corresponding private cloud device through the private cloud server based on the private cloud device address may further include:

[0083] Receive an access instruction execution message sent by the private cloud server; the access instruction execution message is sent to the private cloud server after the private cloud device executes the private cloud device access instruction.

[0084] In this embodiment of the invention, when a private cloud device receives a private cloud device access instruction relayed by a private cloud server, it performs the corresponding operation and sends the result of the operation back to the private cloud server as an access instruction execution message. The private cloud server then relays the message to the user device, enabling the user device to determine the access result of its access to the private cloud device and then perform corresponding processing based on the access result.

[0085] In one embodiment of the present invention, the method may further include:

[0086] If the user device information in the binding relationship is inconsistent with the user device information in the private cloud device access instruction, the system receives an unbound prompt message from the private cloud server.

[0087] In this embodiment of the invention, the private cloud server can look up the binding relationship between the private cloud device corresponding to the IPv6 address and the user device in the mapping table based on the IPv6 address. If the user device information in the binding relationship is inconsistent with the user device information in the private cloud device access instruction, it means that the user device is an unauthorized user device. In this case, the user device authentication fails, and the private cloud server can send an unbound prompt message to the user device to remind the user device that it has no right to access the private cloud device.

[0088] In an optional embodiment of the present invention, an access control policy for private cloud devices can be deployed in the private cloud server. Specifically, the access control policy may include user device information of user devices allowed to access the private cloud devices, access permissions corresponding to the user device information (e.g., whether to allow modification, addition, or deletion of data stored in the private cloud devices, or whether to allow user devices to control the private cloud devices, whether to allow user devices to control the private cloud devices in conjunction with other devices, whether to allow access to important storage devices, etc.), access roles (administrator role, ordinary role, guest role, etc.), access attributes (geographical location of the user device, current time, current status of the device, type of device accessed (e.g., smart home device or important storage device), etc.). When the private cloud server receives a private cloud device access instruction sent by the user device, it will control the user device's access to the private cloud devices according to the binding relationship and access control policy to ensure data security and meet different business needs and application scenarios.

[0089] In an optional embodiment of the present invention, the private cloud device can be a smart home device or an important storage device, such as an air conditioner, refrigerator, lighting equipment, humidifier, and audio equipment. User devices can access the private cloud device to control and execute corresponding operations. In this embodiment of the present invention, the private cloud device can determine whether it can be linked to other private cloud devices not directly accessed by user devices based on the user device's access command to the private cloud device and in conjunction with access control policies. For example, if the user device's access role is a normal role, the user device can be allowed to link and control the private cloud device. However, if the user device's geographical location is not near the private cloud device and the time period is not within the preset allowed time period for link control, then the user device will be prohibited from linking and controlling the private cloud device.

[0090] For example, suppose user device A sends a private cloud device access command to a private cloud device through a private cloud server, requesting the air conditioner to adjust the temperature to 25℃. In this case, the air conditioner can detect the surrounding environment and determine that adjusting the humidifier to 50% humidity will achieve a more comfortable effect. If user device A is a regular user with access permissions allowing control of the private cloud device, but its access attribute is that its geographical location is in Beijing and it is not near the private cloud device, then it can only control the air conditioner to adjust the temperature to 25℃. If user device A is an administrator with access permissions allowing control of the private cloud device, even if its access attribute is that its geographical location is in Beijing and it is not near the private cloud device, it can control the air conditioner to adjust the temperature to 25℃ and also coordinate with the humidifier to adjust the humidity to 50%. Through the above access control strategy, reasonably controlling user device access to the private cloud device for smart home devices can ensure the efficient, secure, and reliable operation of smart home devices, meet users' management and control needs for smart home devices, and provide users with a better user experience.

[0091] In one optional embodiment of the present invention, certain device types are allowed to communicate directly with user devices or through a private cloud server, while other device types are not allowed to communicate directly with user devices. Specifically, the private cloud device can be a smart home device or an important storage device, such as air conditioners, refrigerators, lighting equipment, humidifiers, and audio equipment. Smart home devices can communicate directly with user devices, while storage devices need to communicate through a private cloud server. This embodiment of the present invention can differentiate communication methods between private cloud devices and user devices by distinguishing the communication methods of different device types. It allows for flexible switching of communication methods when the user device needs to access different device types, improving the user's control efficiency over the private cloud device while ensuring user data security.

[0092] To enable those skilled in the art to better understand the embodiments of the present invention, specific examples are used for illustration below, with reference to Figure 3 This is a schematic diagram of a private cloud device binding process provided in an embodiment of the present invention, and the specific steps include:

[0093] 1. The user device logs into the application app and connects via Bluetooth after scanning a QR code. Specifically, the user scans the QR code provided by the private cloud device within the application app to access the private cloud. The QR code contains the private cloud device's identification information and initial configuration parameters, among other private cloud device information. Then, a Bluetooth connection is established, with the private cloud device connecting to the application app via Bluetooth. During this process, it is crucial to verify the stability of the Bluetooth connection and ensure the security of information transmission. Bluetooth encryption technology can be used to encrypt transmitted data to ensure user privacy and security.

[0094] 2. Sending User Device Information to the Private Cloud Device. After the user device connects to the private cloud device via Bluetooth, the user device's application (App) generates a token for the user device and sends user device information (basic information and token) to the private cloud device via Bluetooth. The basic information includes the device name, user password, and identification information; the token is used to verify the user device's identity and prevent unauthorized user devices from accessing the private cloud device.

[0095] 3. Private Cloud Device Binding to Private Cloud Server. After receiving user device information, the private cloud device performs preliminary verification, using hash checking or shared keys for user device authentication. Upon successful verification, the private cloud device sends its own private cloud device information and the user device information to the private server, completing the binding between the two. Specifically, the private server generates a unique IPv6 address based on the received private cloud device and user device information, which serves as the private cloud device's external IP address. This IPv6 address ensures the global uniqueness and accessibility of the private cloud device. Next, the private cloud device registers with the private server using the generated IPv6 address. After successful registration, the user device can remotely manage and transmit data through the private cloud device using this IPv6 address. The private server maintains a mapping table containing the binding relationships between private cloud devices and user devices. This mapping table ensures the security of user devices accessing the private cloud device. By switching the user device's application (App) to the private server, it can access the private cloud device through the private cloud server.

[0096] 4. User devices log in to the private cloud server to access private cloud devices. User devices authenticate their identity using the login interface provided by the private server, thereby enabling the user device's application (App) to log in to the private cloud server. After successful login, the user device can manage and operate the private cloud device through the private server. All access operations by the user device to the private cloud device are relayed through the private server, avoiding the risk of information theft during transmission and ensuring data security and integrity.

[0097] In summary, this invention provides a private cloud storage solution that uses QR code scanning and Bluetooth connection to make the configuration and binding process more convenient. Based on the token verification mechanism and identification information, it further ensures that only authorized user devices can access the private cloud device, preventing unauthorized access. Furthermore, when a user device accesses the private cloud device, it uses the private cloud server as an intermediary, effectively avoiding the risk of information theft during transmission and resulting in higher information security.

[0098] It should be noted that, for the sake of simplicity, the method embodiments are all described as a series of actions. However, those skilled in the art should understand that the embodiments of the present invention are not limited to the described order of actions, because according to the embodiments of the present invention, some steps can be performed in other orders or simultaneously. Furthermore, those skilled in the art should also understand that the embodiments described in the specification are preferred embodiments, and the actions involved are not necessarily essential to the embodiments of the present invention.

[0099] Reference Figure 4This diagram illustrates a structural block diagram of a private cloud device access device provided in an embodiment of the present invention. Applied to a user device, it may specifically include the following modules:

[0100] Private cloud device information acquisition module 401 is used to acquire private cloud device information; wherein, the private cloud device information includes at least first identification information and initial configuration parameters;

[0101] Private cloud device connection module 402 is used to connect to the private cloud device corresponding to the first identification information according to the initial configuration parameters;

[0102] User equipment information sending module 403 is used to send user equipment information to the private cloud device when the user equipment successfully connects with the private cloud device; the private cloud device is used to send the private cloud device information and the user equipment information to the private cloud server; the private cloud server is used to generate the private cloud device address of the private cloud device based on the private cloud device information and the user equipment information.

[0103] Private cloud device address receiving module 404 is used to receive the private cloud device address of the private cloud device sent by the private cloud server;

[0104] The private cloud device access module 405 is used to access the corresponding private cloud device through the private cloud server based on the private cloud device address.

[0105] In one embodiment of the present invention, the private cloud device information acquisition module 401 is used for:

[0106] Obtain the QR code of the private cloud device;

[0107] The user obtains information about the private cloud device by scanning the QR code using the application on the user device.

[0108] In one embodiment of the present invention, the initial configuration parameters include at least the Bluetooth connection information of the private cloud device, and the private cloud device connection module 402 is used for:

[0109] Based on the Bluetooth connection information, the device corresponding to the first identification information is connected via Bluetooth.

[0110] In one embodiment of the present invention, the private cloud device access module 405 is used for:

[0111] A private cloud device access instruction is sent to the private cloud server; the private cloud device access instruction includes at least the private cloud device address and user device information; the private cloud server is used to send the private cloud device access instruction to the private cloud device corresponding to the private cloud device address when the corresponding binding relationship is found based on the private cloud device address, if the user device information in the binding relationship is consistent with the user device information in the private cloud device access instruction, so that the private cloud device executes the private cloud device access instruction.

[0112] In one embodiment of the present invention, the private cloud device access module 405 is used for:

[0113] Receive an access instruction execution message sent by the private cloud server; the access instruction execution message is sent to the private cloud server after the private cloud device executes the private cloud device access instruction.

[0114] In one embodiment of the present invention, the private cloud device access module 405 is used for:

[0115] If the user device information in the binding relationship is inconsistent with the user device information in the private cloud device access instruction, the system receives an unbound prompt message from the private cloud server.

[0116] In this embodiment of the invention, private cloud device information, including at least first identification information and initial configuration parameters, is obtained. The user device connects to the private cloud device corresponding to the first identification information according to the initial configuration parameters. When the user device successfully connects to the private cloud device, user device information is sent to the private cloud device. Thus, the private cloud device can send its private cloud device information and user device information to a private cloud server, allowing the private cloud server to generate a private cloud device address and send it to the user device. Subsequently, the user device can access the corresponding private cloud device through the private cloud server based on the private cloud device address. This embodiment of the invention allows the user device and the private cloud device to be bound via a private cloud server, significantly improving the security of the binding and enhancing the user experience. Furthermore, after successful binding, the user device accesses the private cloud device through the private cloud server, ensuring user data security.

[0117] As the device embodiment is basically similar to the method embodiment, the description is relatively simple, and relevant parts can be found in the description of the method embodiment.

[0118] In addition, this invention also provides an electronic device, including: a processor, a memory, and a computer program stored in the memory and executable on the processor. When the computer program is executed by the processor, it implements the various processes of the above-described private cloud device access method embodiments and achieves the same technical effect. To avoid repetition, it will not be described again here.

[0119] This invention also provides a computer-readable storage medium storing a computer program. When executed by a processor, the computer program implements the various processes of the above-described private cloud device access method embodiments and achieves the same technical effects. To avoid repetition, it will not be described again here. The computer-readable storage medium may be a read-only memory (ROM), a random access memory (RAM), a magnetic disk, or an optical disk.

[0120] This invention also provides a computer program product, which is stored in a storage medium and executed by at least one processor to implement the various processes of the above-described private cloud device access method embodiments, and can achieve the same technical effect. To avoid repetition, it will not be described again here.

[0121] Figure 5 A schematic diagram of the hardware structure of an electronic device for implementing various embodiments of the present invention.

[0122] The electronic device 500 includes, but is not limited to, components such as: a radio frequency unit 501, a network module 502, an audio output unit 503, an input unit 504, a sensor 505, a display unit 506, a user input unit 507, an interface unit 508, a memory 509, a processor 510, and a power supply 511. Those skilled in the art will understand that... Figure 5 The electronic device structures shown are not intended to limit the electronic device. An electronic device may include more or fewer components than shown, or combine certain components, or have different component arrangements. In embodiments of the present invention, the electronic device includes, but is not limited to, mobile phones, tablet computers, laptops, PDAs, in-vehicle terminals, wearable devices, and pedometers.

[0123] It should be understood that, in this embodiment of the invention, the radio frequency unit 501 can be used for receiving and transmitting signals during information transmission or calls. Specifically, it receives downlink data from the base station and processes it with the processor 510; additionally, it transmits uplink data to the base station. Typically, the radio frequency unit 501 includes, but is not limited to, an antenna, at least one amplifier, a transceiver, a coupler, a low-noise amplifier, a duplexer, etc. Furthermore, the radio frequency unit 501 can also communicate with networks and other devices through a wireless communication system.

[0124] The electronic device provides users with wireless broadband internet access through the network module 502, such as helping users send and receive emails, browse web pages, and access streaming media.

[0125] The audio output unit 503 can convert audio data received by the radio frequency unit 501 or the network module 502 or stored in the memory 509 into audio signals and output them as sound. Furthermore, the audio output unit 503 can also provide audio output related to specific functions performed by the electronic device 500 (e.g., call signal reception sound, message reception sound, etc.). The audio output unit 503 includes a speaker, a buzzer, and a receiver, etc.

[0126] Input unit 504 is used to receive audio or video signals. Input unit 504 may include a graphics processing unit (GPU) 5041 and a microphone 5042. The GPU 5041 processes image data of still images or videos acquired by an image capture device (such as a camera) in video capture mode or image capture mode. The processed image frames can be displayed on display unit 506. The image frames processed by GPU 5041 can be stored in memory 509 (or other storage medium) or transmitted via radio frequency unit 501 or network module 502. Microphone 5042 can receive sound and process such sound into audio data. The processed audio data can be converted into a format that can be transmitted to a mobile communication base station via radio frequency unit 501 in telephone call mode.

[0127] The electronic device 500 also includes at least one sensor 505, such as a light sensor, a motion sensor, and other sensors. Specifically, the light sensor includes an ambient light sensor and a proximity sensor. The ambient light sensor can adjust the brightness of the display panel 5061 according to the ambient light level, and the proximity sensor can turn off the display panel 5061 and / or backlight when the electronic device 500 is moved to the ear. As a type of motion sensor, an accelerometer sensor can detect the magnitude of acceleration in various directions (generally three axes). When stationary, it can detect the magnitude and direction of gravity and can be used to identify the posture of the electronic device (such as landscape / portrait switching, related games, magnetometer posture calibration), vibration recognition related functions (such as pedometer, tapping), etc. The sensor 505 may also include a fingerprint sensor, pressure sensor, iris sensor, molecular sensor, gyroscope, barometer, hygrometer, thermometer, infrared sensor, etc., which will not be described in detail here.

[0128] The display unit 506 is used to display information input by the user or information provided to the user. The display unit 506 may include a display panel 5061, which may be configured in the form of a liquid crystal display (LCD), an organic light-emitting diode (OLED), or the like.

[0129] User input unit 507 can be used to receive input numerical or character information, and to generate key signal inputs related to user settings and function control of electronic devices. Specifically, user input unit 507 includes a touch panel 5071 and other input devices 5072. Touch panel 5071, also known as a touch screen, can collect touch operations performed by the user on or near it (such as operations performed by the user using a finger, stylus, or any suitable object or accessory on or near touch panel 5071). Touch panel 5071 may include two parts: a touch detection device and a touch controller. The touch detection device detects the user's touch position and the signal generated by the touch operation, and transmits the signal to the touch controller; the touch controller receives touch information from the touch detection device, converts it into touch point coordinates, and sends it to the processor 510, which receives and executes commands from the processor 510. In addition, touch panel 5071 can be implemented using various types such as resistive, capacitive, infrared, and surface acoustic wave. Besides touch panel 5071, user input unit 507 may also include other input devices 5072. Specifically, other input devices 5072 may include, but are not limited to, physical keyboards, function keys (such as volume control buttons, power buttons, etc.), trackballs, mice, joysticks, etc., which will not be described in detail here.

[0130] Furthermore, the touch panel 5071 can cover the display panel 5061. When the touch panel 5071 detects a touch operation on or near it, it transmits the information to the processor 510 to determine the type of touch event. Subsequently, the processor 510 provides corresponding visual output on the display panel 5061 based on the type of touch event. Although in Figure 5 In this embodiment, the touch panel 5071 and the display panel 5061 are two independent components to realize the input and output functions of the electronic device. However, in some embodiments, the touch panel 5071 and the display panel 5061 can be integrated to realize the input and output functions of the electronic device. The specific implementation is not limited here.

[0131] Interface unit 508 serves as an interface for connecting external devices to electronic device 500. For example, external devices may include a wired or wireless headphone port, an external power supply (or battery charger) port, a wired or wireless data port, a memory card port, a port for connecting a device with an identification module, an audio input / output (I / O) port, a video I / O port, a headphone port, and so on. Interface unit 508 can be used to receive input from external devices (e.g., data, power, etc.) and transmit the received input to one or more components within electronic device 500, or it can be used to transmit data between electronic device 500 and external devices.

[0132] The memory 509 can be used to store software programs and various data. The memory 509 may primarily include a program storage area and a data storage area. The program storage area may store the operating system, applications required for at least one function (such as sound playback, image playback, etc.), etc.; the data storage area may store data created based on the use of the mobile phone (such as audio data, phonebook, etc.). Furthermore, the memory 509 may include high-speed random access memory, and may also include non-volatile memory, such as at least one disk storage device, flash memory device, or other volatile solid-state storage device.

[0133] The processor 510 is the control center of the electronic device. It connects various parts of the electronic device via various interfaces and lines. By running or executing software programs and / or modules stored in the memory 509, and by calling data stored in the memory 509, it performs various functions and processes data, thereby providing overall monitoring of the electronic device. The processor 510 may include one or more processing units; preferably, the processor 510 may integrate an application processor and a modem processor. The application processor mainly handles the operating system, user interface, and applications, while the modem processor mainly handles wireless communication. It is understood that the modem processor may not be integrated into the processor 510.

[0134] The electronic device 500 may also include a power supply 511 (such as a battery) for supplying power to various components. Preferably, the power supply 511 can be logically connected to the processor 510 through a power management system, thereby enabling functions such as managing charging, discharging, and power consumption through the power management system.

[0135] In addition, the electronic device 500 includes some functional modules not shown, which will not be described in detail here.

[0136] It should be noted that, in this document, the terms "comprising," "including," or any other variations thereof are intended to cover non-exclusive inclusion, such that a process, method, article, or apparatus that comprises a list of elements includes not only those elements but also other elements not expressly listed, or elements inherent to such a process, method, article, or apparatus. Unless otherwise specified, an element defined by the phrase "comprising one..." does not exclude the presence of other identical elements in the process, method, article, or apparatus that includes that element.

[0137] Through the above description of the embodiments, those skilled in the art can clearly understand that the methods of the above embodiments can be implemented by means of software plus necessary general-purpose hardware platforms. Of course, they can also be implemented by hardware, but in many cases the former is a better implementation method. Based on this understanding, the technical solution of the present invention, in essence, or the part that contributes to the prior art, can be embodied in the form of a software product. This computer software product is stored in a storage medium (such as ROM / RAM, magnetic disk, optical disk), and includes several instructions to cause a terminal (which may be a mobile phone, computer, server, air conditioner, or network device, etc.) to execute the methods described in the various embodiments of the present invention.

[0138] The embodiments of the present invention have been described above with reference to the accompanying drawings. However, the present invention is not limited to the specific embodiments described above. The specific embodiments described above are merely illustrative and not restrictive. Those skilled in the art can make many other forms under the guidance of the present invention without departing from the spirit and scope of the claims, and all of these forms are within the protection scope of the present invention.

[0139] Those skilled in the art will recognize that the units and algorithm steps of the various examples described in conjunction with the embodiments disclosed in this invention can be implemented in electronic hardware, or a combination of computer software and electronic hardware. Whether these functions are implemented in hardware or software depends on the specific application and design constraints of the technical solution. Those skilled in the art can use different methods to implement the described functions for each specific application, but such implementations should not be considered beyond the scope of this invention.

[0140] Those skilled in the art will understand that, for the sake of convenience and brevity, the specific working processes of the systems, devices, and units described above can be referred to the corresponding processes in the foregoing method embodiments, and will not be repeated here.

[0141] In the embodiments provided in this application, it should be understood that the disclosed apparatus and methods can be implemented in other ways. For example, the apparatus embodiments described above are merely illustrative. For instance, the division of units is only a logical functional division, and in actual implementation, there may be other division methods. For example, multiple units or components may be combined or integrated into another system, or some features may be ignored or not executed. Furthermore, the coupling or direct coupling or communication connection shown or discussed may be through some interfaces; the indirect coupling or communication connection between apparatuses or units may be electrical, mechanical, or other forms.

[0142] The units described as separate components may or may not be physically separate. The components shown as units may or may not be physical units; that is, they may be located in one place or distributed across multiple network units. Some or all of the units can be selected to achieve the purpose of this embodiment according to actual needs.

[0143] In addition, the functional units in the various embodiments of the present invention can be integrated into one processing unit, or each unit can exist physically separately, or two or more units can be integrated into one unit.

[0144] If the aforementioned functions are implemented as software functional units and sold or used as independent products, they can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of this invention, essentially, or the part that contributes to the prior art, or a portion of the technical solution, can be embodied in the form of a software product. This computer software product is stored in a storage medium and includes several instructions to cause a computer device (which may be a personal computer, server, or network device, etc.) to execute all or part of the steps of the methods described in the various embodiments of this invention. The aforementioned storage medium includes various media capable of storing program code, such as USB flash drives, portable hard drives, ROM, RAM, magnetic disks, or optical disks.

[0145] The above description is merely a specific embodiment of the present invention, but the scope of protection of the present invention is not limited thereto. Any variations or substitutions that can be easily conceived by those skilled in the art within the technical scope disclosed in the present invention should be included within the scope of protection of the present invention. Therefore, the scope of protection of the present invention should be determined by the scope of the claims.

Claims

1. A private cloud device access method, characterized by, The method is applied to a user equipment, and comprises: obtaining private cloud equipment information, wherein the private cloud equipment information at least comprises first identification information and initial configuration parameters; connecting the private cloud equipment corresponding to the first identification information according to the initial configuration parameters; when the user equipment and the private cloud equipment are successfully connected, sending user equipment information to the private cloud equipment; the private cloud equipment is configured to send the private cloud equipment information and the user equipment information to a private cloud server, and the private cloud server is configured to generate a private cloud equipment address of the private cloud equipment according to the private cloud equipment information and the user equipment information; the user equipment information comprises token information of the user equipment, and the token information is used for identity authentication of the user equipment and authorization of the user equipment to access specific resources or services for a specific time period; receiving the private cloud equipment address of the private cloud equipment sent by the private cloud server; accessing the corresponding private cloud equipment through the private cloud server according to the private cloud equipment address; the private cloud server comprises an access control policy for the private cloud equipment, and the access control policy comprises user equipment information of a user equipment allowed to access the private cloud equipment and an access attribute corresponding to the user equipment information; the access attribute corresponding to the user equipment information comprises at least one of a geographical position where the user equipment is located, a current time, a current state of the equipment, and a device type of the access.

2. The method of claim 1, wherein, obtaining private cloud equipment information, comprising: obtaining a two-dimensional code of the private cloud equipment; scanning the two-dimensional code through an application program of the user equipment to obtain the private cloud equipment information.

3. The method of claim 1, wherein, The initial configuration parameters at least comprise Bluetooth connection information of the private cloud equipment, and the private cloud equipment corresponding to the first identification information is connected according to the initial configuration parameters, comprising: connecting the private cloud equipment corresponding to the first identification information in a Bluetooth mode according to the Bluetooth connection information.

4. The method of claim 1, wherein, The private cloud server is configured to establish a binding relationship between the user equipment information of the user equipment and the private cloud equipment information of the private cloud equipment according to the private cloud equipment address.

5. The method of claim 4, wherein, Accessing the corresponding private cloud equipment through the private cloud server according to the private cloud equipment address, comprising: sending a private cloud equipment access instruction to the private cloud server; the private cloud equipment access instruction at least comprises the private cloud equipment address and user equipment information; the private cloud server is configured to, when the corresponding binding relationship is found according to the private cloud equipment address, if the user equipment information in the binding relationship is consistent with the user equipment information in the private cloud equipment access instruction, send the private cloud equipment access instruction to the private cloud equipment corresponding to the private cloud equipment address, so that the private cloud equipment executes the private cloud equipment access instruction.

6. The method of claim 5, wherein, Accessing the corresponding private cloud equipment through the private cloud server according to the private cloud equipment address, further comprising: receive an access instruction execution message sent by the private cloud server; the access instruction execution message is sent to the private cloud server after the private cloud device executes the private cloud device access instruction.

7. The method of claim 5, wherein, The method further comprises: if the user device information in the binding relationship is inconsistent with the user device information in the private cloud device access instruction, receive unbound prompt information sent by the private cloud server.

8. The method of claim 1, wherein, The user device information at least includes basic information and token information of the user device; the basic information at least includes a device name, a user password and second identification information corresponding to the user device.

9. The method of claim 1, wherein, The private cloud device address is an IPv6 address.

10. A private cloud device access apparatus, characterized by, The device is applied to a user device and comprises: a private cloud device information acquisition module, configured to acquire private cloud device information; wherein the private cloud device information at least includes first identification information and initial configuration parameters; a private cloud device connection module, configured to connect a private cloud device corresponding to the first identification information according to the initial configuration parameters; a user device information sending module, configured to send user device information to the private cloud device when the user device and the private cloud device are successfully connected; the private cloud device is configured to send the private cloud device information and the user device information to a private cloud server; the private cloud server is configured to generate a private cloud device address of the private cloud device according to the private cloud device information and the user device information; the user device information includes token information of the user device, which is used for identity authentication of the user device and authorization of the user device to access specific resources or services for a specific time period; a private cloud device address receiving module, configured to receive the private cloud device address of the private cloud device sent by the private cloud server; a private cloud device access module, configured to access the corresponding private cloud device through the private cloud server according to the private cloud device address; the private cloud server includes an access control policy for the private cloud device, the access control policy includes user device information of a user device allowed to access the private cloud device and an access attribute corresponding to the user device information; the access attribute corresponding to the user device information includes at least one of a geographical location where the user device is located, a current time, a current state of the device and a device type of the access.

11. An electronic device, comprising: comprise a processor, a communication interface, a memory and a communication bus, wherein the processor, the communication interface and the memory complete mutual communication through the communication bus; the memory is used to store a computer program; the processor is used to execute the program stored on the memory, and implement the method in any one of claims 1-9.

12. A computer readable storage medium having instructions stored thereon, which when executed by one or more processors, cause the processors to perform the method in any one of claims 1-9.

Images