Device operation method, device and electronic equipment

By implementing the device operation method on the cloud platform and confirming the operation permissions of the user terminal through authentication information matching, the problem of theft of firewall equipment is solved, and the security binding of user equipment and the legal use of firewall equipment is realized.

CN119766537APending Publication Date: 2025-04-04NEW H3C SECURITY TECH CO LTD
View PDF 0 Cites 0 Cited by

Patent Information

Application Number
CN202411931931.3
Authority / Receiving Office
CN · China
Patent Type
Applications(China)
Current Assignee / Owner
Filing Date
2024-12-25
Publication Date
2025-04-04

AI Technical Summary

Technical Problem

The current cloud platform lacks effective firewall device management solutions, which leads to the easy stolen firewall devices by other users.

Method used

By implementing the device operation method on the cloud platform, responding to the device operation request of the user terminal, first authentication information is obtained from the firewall device, and the user account number and device serial number are determined based on the information. At the same time, obtain the second authentication information of the user terminal to determine whether the two match. If it matches, confirm that the user terminal has operation permissions and performs the target operation.

Benefits of technology

This realizes the binding between users and firewall devices, effectively avoiding theft of firewall devices. Even if the device is stolen, other users will not be able to use the device on the cloud platform, ensuring the safety of users' property.

✦ Generated by Eureka AI based on patent content.

Smart Images

  • Figure CN119766537A_ABST
    Figure CN119766537A_ABST
Patent Text Reader

Abstract

The present application provides a device operation method, apparatus and electronic device. The method includes: in response to a device operation request sent by a user terminal, obtaining first authentication information from a firewall device and obtaining second authentication information from a user terminal, authenticating the user terminal and the firewall device based on this, and only when the cloud platform confirms that the user terminal has the operation authority for the firewall device, the cloud platform will perform the target operation on the firewall device according to the device operation request. Through this management method, the cloud platform realizes the binding between the user and the firewall device, effectively preventing the firewall device from being stolen. Even if the firewall device is stolen, other users cannot use the firewall device on the cloud platform, which ensures the property safety of the firewall device user.
Need to check novelty before this filing date? Find Prior Art

Description

Technical Field

[0001] The present application relates to the field of communication technology, and in particular to a device operation method, apparatus and electronic device. Background Art

[0002] Currently, firewall devices are increasingly being used, and current firewall devices generally support cloud management through cloud platforms. However, there is a problem. If a user accidentally loses a firewall device after purchasing it, then other users can manage and use it on the cloud platform without any hindrance after picking it up. In other words, the current cloud platform lacks an effective firewall device management solution, which makes it easy for firewall devices to be stolen by other users. Summary of the invention

[0003] In order to overcome the problems existing in the related art, the present application provides a device operation method, apparatus and electronic device.

[0004] According to a first aspect of an embodiment of the present application, a device operation method is provided, the method being applied to a cloud platform, the method comprising:

[0005] In response to a device operation request sent by a user terminal, obtaining first authentication information from a firewall device;

[0006] Determine a first user account and a first device serial number according to the first authentication information; determine a second user account and a second device serial number according to the second authentication information obtained from the user terminal;

[0007] Determine whether the first user account and the second user account are the same, and obtain a first determination result; determine whether the first device serial number and the second device serial number are the same, and obtain a second determination result;

[0008] If both the first judgment result and the second judgment result are yes, it is confirmed that the user terminal has the operation authority for the firewall device, and the target operation is performed on the firewall device according to the device operation request.

[0009] According to a second aspect of an embodiment of the present application, a device operating apparatus is provided, the device being applied to a cloud platform, the device comprising:

[0010] An acquisition module, configured to acquire first authentication information from a firewall device in response to a device operation request sent by a user terminal;

[0011] a determination module, configured to determine a first user account and a first device serial number according to the first authentication information; and determine a second user account and a second device serial number according to second authentication information obtained from the user terminal;

[0012] a judgment module, configured to judge whether the first user account and the second user account are the same, and obtain a first judgment result; and judge whether the first device serial number and the second device serial number are the same, and obtain a second judgment result;

[0013] An operation module is used to confirm that the user terminal has the operation authority for the firewall device if both the first judgment result and the second judgment result are yes, and perform a target operation on the firewall device according to the device operation request.

[0014] According to a third aspect of an embodiment of the present application, there is provided an electronic device, comprising: a memory, and one or more processors; the memory is coupled to the processor; wherein a computer program code is stored in the memory, and the computer program code comprises computer instructions, and when the computer instructions are executed by the processor, the electronic device executes the method as described above.

[0015] According to a fourth aspect of an embodiment of the present application, there is provided a computer-readable storage medium, comprising computer instructions, which, when executed on an electronic device, enables the electronic device to execute the method as described above.

[0016] According to a fifth aspect of an embodiment of the present application, a computer program product is provided. When the computer program product is run on a computer, the computer is enabled to execute the method described above.

[0017] The technical solution provided by the embodiments of the present application may have the following beneficial effects:

[0018] In the embodiment of the present application, when the cloud platform receives a device operation request for a firewall device sent by a user terminal, it will first authenticate the user terminal and the firewall device. When and only when the cloud platform confirms that the user terminal has the operation authority for the firewall device, the cloud platform will perform the target operation on the firewall device according to the device operation request. Through this management method, the cloud platform realizes the binding between the user and the firewall device, effectively preventing the firewall device from being stolen. Even if the firewall device is stolen, other users cannot use the firewall device on the cloud platform, thus ensuring the property safety of the firewall device user.

[0019] It should be understood that the foregoing general description and the following detailed description are exemplary and explanatory only and are not restrictive of the present application. BRIEF DESCRIPTION OF THE DRAWINGS

[0020] The accompanying drawings, which are incorporated in the specification and constitute a part of this application, illustrate embodiments consistent with the application and, together with the description, serve to explain the principles of the application.

[0021] Figure 1 A schematic diagram of a flow chart of a device operation method provided in an embodiment of the present application;

[0022] Figure 2 A schematic diagram of a first decryption method of the device operation method provided in an embodiment of the present application;

[0023] Figure 3 A schematic diagram of a second decryption method of the device operation method provided in an embodiment of the present application;

[0024] Figure 4 A schematic diagram of a third decryption method of the device operation method provided in an embodiment of the present application;

[0025] Figure 5 A schematic diagram of a process of activating a device in a device operation method provided in an embodiment of the present application;

[0026] Figure 6 A schematic diagram of a process flow of a device handover process in a device operation method provided in an embodiment of the present application;

[0027] Figure 7 A specific application diagram of the device operation method provided in the embodiment of the present application;

[0028] Figure 8 A schematic diagram of a device operating apparatus provided in an embodiment of the present application;

[0029] Fig. 9 A schematic diagram of the structure of an electronic device provided in an embodiment of the present application. DETAILED DESCRIPTION

[0030] The technical solutions in the embodiments of the present application are described below in conjunction with the drawings in the embodiments of the present application. In the description of the embodiments of the present application, the terms used in the following embodiments are only for the purpose of describing specific embodiments and are not intended to be limiting of the present application.

[0031] It should be noted that in this application, "at least one" means one or more, and "more than one" means two or more than two. "And / or" describes the association relationship of associated objects, indicating that three relationships may exist. For example, A and / or B can mean: A exists alone, A and B exist at the same time, and B exists alone, where A and B can be singular or plural. The terms "first", "second", "third", etc. (if any) in the specification, claims and drawings of this application are used to distinguish similar objects, rather than to describe a specific order or sequence.

[0032] In the embodiments of the present application, words such as "exemplary" or "for example" are used to indicate examples, illustrations or descriptions. Any embodiment or design described as "exemplary" or "for example" in the embodiments of the present application should not be interpreted as being more preferred or more advantageous than other embodiments or designs. Specifically, the use of words such as "exemplary" or "for example" is intended to present related concepts in a specific way.

[0033] In the case that user A loses the firewall device, how does the cloud platform confirm that the firewall device belongs to user A rather than user B? That is, how to determine the usage rights of the firewall device to prevent the firewall device from being misused by others and ensure the property safety of the firewall device user? This is a technical problem that needs to be urgently solved in this field.

[0034] In response to the above technical problems, there is currently a solution, which is to let user A create an account and password for the firewall device on the cloud platform. After that, when the user requests to use the firewall device, the cloud platform first authenticates based on the account and password. Only after the authentication is passed can the user be allowed to use the firewall device. Since user B cannot know the account and password set by user A for the firewall device, user B cannot use the firewall device through the cloud platform.

[0035] However, the above solution has the following defects: first, user B can obtain the right to use the firewall device by resetting the firewall device; second, if user A wants to modify the account password of the firewall device, he needs to make synchronous modifications on the cloud platform, which is troublesome; third, in the above solution, the cloud platform needs to record the account password set by user A for the firewall device, that is, sensitive information needs to be stored in the cloud platform, which poses compliance issues.

[0036] In response to the above technical problems, the present application provides a device operating method, an apparatus and an electronic device, a computer-readable storage medium, and a computer program product.

[0037] Next, the embodiments of the present application are described in detail.

[0038] The present application embodiment provides a device operation method, which is applied to a cloud platform, such as Figure 1 As shown, the method may include the following steps:

[0039] Step 110: In response to the device operation request sent by the user terminal, obtain first authentication information from the firewall device;

[0040] Step 120: Determine a first user account and a first device serial number based on the first authentication information; determine a second user account and a second device serial number based on the second authentication information obtained from the user terminal;

[0041] Step 130: determine whether the first user account and the second user account are the same, and obtain a first determination result; determine whether the first device serial number and the second device serial number are the same, and obtain a second determination result;

[0042] Step 140: If both the first judgment result and the second judgment result are yes, confirm that the user terminal has the operation authority for the firewall device, and perform the target operation on the firewall device according to the device operation request.

[0043] Specifically, whenever a user wants to use, manage, or perform other operations on a firewall device through a user terminal and a cloud platform, the cloud platform will obtain first authentication information from the firewall device, and compare the first authentication information with the second authentication information obtained from the user terminal. If and only if the two are the same, the authentication is considered to be successful, confirming that the user terminal has the authority to operate the firewall device.

[0044] When and only when the cloud platform confirms that the user terminal has the operation authority to the firewall device, the cloud platform will perform the target operation on the firewall device according to the device operation request. Through this management method, the cloud platform can prevent the firewall device from being stolen.

[0045] Among them, the above-mentioned second authentication information can be obtained by the cloud platform from the user terminal after receiving the device operation request sent by the user terminal; or the device operation request may carry the second authentication information, and the cloud platform determines the second authentication information according to the device operation request.

[0046] Specifically, the authentication information of this embodiment includes a user account and a device serial number. For example, the first authentication information includes a first user account and a first device serial number, and the second authentication information includes a second user account and a second device serial number. The user account may be account information such as an account ID and an account password, and the device serial number refers to the Serial Number of the device, referred to as the SN code.

[0047] The above-mentioned first authentication information and second authentication information are the same, which is specifically achieved through the following steps: determining the first user account and the first device serial number based on the first authentication information; determining the second user account and the second device serial number based on the second authentication information obtained from the user terminal; judging whether the first user account and the second user account are the same to obtain a first judgment result; judging whether the first device serial number and the second device serial number are the same to obtain a second judgment result; if both the first judgment result and the second judgment result are yes, then it is determined that the first authentication information and the second authentication information are the same.

[0048] It is understandable that, to ensure security, both the first authentication information sent from the firewall device to the cloud platform and the second authentication information sent from the user terminal to the cloud platform can be encrypted authentication information. This embodiment does not limit the encryption method of the authentication information. As a specific implementation method, encryption can be performed using a public key and a private key pair.

[0049] For example, a public key and a private key pair are generated on the firewall device, recorded as the first public key and the first private key. The device serial number of the firewall device is bound to the first public key and stored in the cloud platform. The firewall device specifically sends the first authentication information encrypted by the first private key to the cloud platform. After receiving the first authentication information, the cloud platform obtains the target device serial number from the firewall device; determines the first public key that matches the target device serial number; and uses the first public key to decrypt the first authentication information to obtain the first user account and the first device serial number.

[0050] For another example, a public key and private key pair is generated on the user terminal, recorded as the second public key and the second private key. The user account of the user terminal is bound to the second public key and stored in the cloud platform. The user terminal specifically sends the second authentication information encrypted by the second private key to the cloud platform. After receiving the second authentication information, the cloud platform obtains the target user account from the user terminal; determines the second public key that matches the target user account; and uses the second public key to decrypt the second authentication information to obtain the second user account and the second device serial number.

[0051] This embodiment does not limit the relationship between the encryption means of the first authentication information and the encryption means of the second authentication information, and the two may be the same or different.

[0052] In the case where both use a public key and a private key pair for encryption and decryption, this embodiment specifically provides the following three methods to implement the above step 120:

[0053] like Figure 2 As shown, the above step 120 is specifically implemented by the following steps:

[0054] Step 210: Obtain the target device serial number from the firewall device;

[0055] Step 220, determine the first public key in the target device serial number match;

[0056] Step 230: Decrypt the first authentication information using the first public key to obtain the first user account and the first device serial number;

[0057] Step 240: Obtain the target user account from the user terminal;

[0058] Step 250: Determine the second public key in the target user account match;

[0059] Step 260: Decrypt the second authentication information obtained from the user terminal using the second public key to obtain the second user account and the second device serial number.

[0060] like Figure 3 As shown, the above step 120 is specifically implemented by the following steps:

[0061] Step 310: Obtain the target device serial number from the firewall device;

[0062] Step 320, determine the first public key in the target device serial number match;

[0063] Step 330: Decrypt the first authentication information using the first public key to obtain the first user account and the first device serial number;

[0064] Step 340: Use the first public key to decrypt the second authentication information obtained from the user terminal to obtain the second user account and the second device serial number.

[0065] like Figure 4 As shown, the above step 120 is specifically implemented by the following steps:

[0066] Step 410: Decrypt the second authentication information obtained from the user terminal using the first public key to obtain a second user account and a second device serial number;

[0067] Step 420: Determine the second public key in the target user account match;

[0068] Step 430: Decrypt the second authentication information obtained from the user terminal using the second public key to obtain the second user account and the second device serial number.

[0069] Step 440: Decrypt the first authentication information using the second public key to obtain the first user account and the first device serial number.

[0070] The above describes in detail the authentication process between the user terminal and the firewall device every time the user wants to operate the firewall device through the user terminal and the cloud platform. The following describes the process of the user activating the firewall device on the cloud platform through the user terminal, and the process of the user handing over the firewall device to other users through the user terminal on the cloud platform.

[0071] like Figure 5 As shown, this embodiment activates the firewall device through the following steps:

[0072] Step 510: In response to the device activation request sent by the user terminal, determine whether the device serial number of the firewall device to be activated is in the local activated device serial number list; if the determination result is no, proceed to step 520;

[0073] Step 520: determining a third device serial number according to third authentication information obtained from the user terminal, wherein the third authentication information is generated by the user terminal according to a third user account and a third device serial number;

[0074] Step 530: determine whether the third device serial number is the same as the device serial number of the firewall device to be activated; if the determination result is yes, proceed to step 540;

[0075] Step 540: Store the third authentication information in the firewall device to be activated to activate the device.

[0076] like Figure 6 As shown, after confirming that the user terminal has the operation authority for the firewall device, this embodiment transfers the firewall device through the following steps:

[0077] Step 610: In response to the device transfer request sent by the user terminal, the first authentication information on the firewall device is replaced with the fourth authentication information obtained from the user terminal to transfer the operation authority of the firewall device from the first user account to the fourth user account.

[0078] The fourth authentication information is generated by the user terminal according to the fourth user account and the second device serial number.

[0079] Combine the following Figure 7 , taking practical application as an example, the device operation method of this application is explained:

[0080] After the firewall device is delivered to the user for the first time, the user can enter the user account and device serial number through the mobile client of the cloud platform (i.e. the above-mentioned user terminal), which can be specifically prompted to enter the user account and device serial number by scanning the code through the mobile client; then, the mobile client generates authentication information based on the user account and device serial number, and saves the authentication information to the firewall device, thus realizing the activation of the firewall device. The authentication information here can specifically be the authentication information encrypted by the user's private key.

[0081] When the current user needs to operate the firewall device through the mobile client and the cloud platform, the user needs to provide authentication information A to the cloud platform through the mobile client. The cloud platform uses the current user's public key to decrypt the authentication information A and obtain the user account A1 and the device serial number A2. The cloud platform will also obtain authentication information B from the firewall device to be operated, and determine the user account B1 and the device serial number B2 based on the obtained authentication information B. If A1 and B1 are the same and A2 and B2 are the same, it is determined that the user terminal has the right to operate the firewall device. Otherwise, it is determined that the user terminal does not have the right to operate the firewall device.

[0082] When the user needs to transfer the firewall device on the cloud platform, he can choose to delete the authentication information on the firewall device, create new authentication information and store it on the firewall device.

[0083] It can be seen from the above technical solution that an embodiment of the present application provides a device operation method, which is applied to a cloud platform. When the cloud platform receives a device operation request for a firewall device sent by a user terminal, the cloud platform will first authenticate the user terminal and the firewall device. When and only when the cloud platform confirms that the user terminal has the operation authority for the firewall device, the cloud platform will perform the target operation on the firewall device according to the device operation request.

[0084] Through this management method, the cloud platform realizes the binding between users and firewall devices, effectively preventing the firewall devices from being stolen. Even if the firewall device is stolen, other users will not be able to use the firewall device on the cloud platform, thus ensuring the property safety of the firewall device users.

[0085] In addition, this embodiment also realizes the legal transfer of the firewall device. The user can transfer the operation authority of the firewall device on the cloud platform to a new user to realize the transfer of the device.

[0086] Based on the same inventive concept, the present application also provides a device operating apparatus, which is applied to a cloud platform, and its structural diagram is as follows: Figure 8 As shown, specifically including:

[0087] The acquisition module 810 is used to obtain the first authentication information from the firewall device in response to the device operation request sent by the user terminal;

[0088] A determination module 820 is used to determine a first user account and a first device serial number according to the first authentication information; and to determine a second user account and a second device serial number according to the second authentication information obtained from the user terminal;

[0089] The judgment module 830 is used to judge whether the first user account and the second user account are the same, and obtain a first judgment result; judge whether the first device serial number and the second device serial number are the same, and obtain a second judgment result;

[0090] The operation module 840 is used to confirm that the user terminal has the operation authority for the firewall device if both the first judgment result and the second judgment result are yes, and perform a target operation on the firewall device according to the device operation request.

[0091] As a specific implementation, the device further includes:

[0092] A first determination module, configured to respond to a device activation request sent by a user terminal and determine whether the device serial number of the firewall device to be activated is located in a local list of activated device serial numbers;

[0093] a serial number determination module, configured to determine a third device serial number according to third authentication information obtained from the user terminal if the judgment result is no, wherein the third authentication information is generated by the user terminal according to a third user account and a third device serial number;

[0094] A second judgment module is used to judge whether the third device serial number is the same as the device serial number of the firewall device to be activated;

[0095] The activation module is used to store the third authentication information in the firewall device to be activated if the judgment result is yes, so as to realize device activation.

[0096] As a specific implementation, the device further includes:

[0097] A replacement module is used to replace the first authentication information on the firewall device with fourth authentication information obtained from the user terminal in response to a device transfer request sent by the user terminal after confirming that the user terminal has the operating authority to the firewall device, so as to transfer the operating authority of the firewall device from the first user account to the fourth user account, wherein the fourth authentication information is generated by the user terminal based on the fourth user account and the second device serial number.

[0098] The present application embodiment provides an electronic device, which may include: a memory and one or more processors. The memory is used to store computer program code, and the computer program code includes computer instructions. When the processor executes the computer instructions, the electronic device can perform various functions or steps of the above method embodiment. The structure of the electronic device can refer to Fig. 9 The structure of the electronic device 100 is shown.

[0099] The above-mentioned processor can be a general-purpose processor, including a central processing unit (CPU), a network processor (NP), etc.; it can also be a digital signal processor (DSP), an application specific integrated circuit (ASIC), a field programmable gate array (FPGA) or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components.

[0100] An embodiment of the present application also provides a computer-readable storage medium, which includes computer instructions. When the computer instructions are executed on an electronic device, the electronic device executes each function or step of the above method embodiment.

[0101] The computer-readable storage medium includes but is not limited to any one of the following: a USB flash drive, a mobile hard disk, a read-only memory (ROM), a random access memory (RAM), a magnetic disk or an optical disk, and other media that can store program codes.

[0102] The embodiment of the present application also provides a computer program product. When the computer program product is run on a computer, the computer is enabled to perform each function or step of the above method embodiment.

[0103] Among them, the electronic device, computer-readable storage medium, and computer program product provided in the embodiments of the present application are all used to execute the corresponding methods provided above. Therefore, the beneficial effects that can be achieved can refer to the beneficial effects in the corresponding methods provided above, and will not be repeated here.

[0104] Through the description of the above implementation methods, technical personnel in the relevant field can clearly understand that for the convenience and simplicity of description, only the division of the above-mentioned functional modules is used as an example. In actual applications, the above-mentioned functions can be assigned to different functional modules as needed, that is, the internal structure of the device can be divided into different functional modules to complete all or part of the functions described above.

[0105] In the several embodiments provided in the present application, it should be understood that the disclosed method can be implemented in other ways. The device embodiments described above are merely schematic. For example, the division of the modules or units is only a logical function division, and there may be other division methods in actual implementation; for example, multiple units or components can be combined or integrated into another system, or some features can be ignored or not executed. In addition, the mutual coupling or direct coupling or communication connection shown or discussed can be through some interfaces, indirect coupling or communication connection of modules or units, which can be electrical, mechanical or other forms.

[0106] In addition, each functional unit in each embodiment of the present application may be integrated into one processing unit, or each unit may exist physically separately, or two or more units may be integrated into one unit. The above-mentioned integrated unit may be implemented in the form of hardware or in the form of software functional units.

[0107] The above is only a specific implementation of the present application, but the protection scope of the present application is not limited thereto. Any changes or substitutions within the technical scope disclosed in the present application should be included in the protection scope of the present application. Therefore, the protection scope of the present application should be based on the protection scope of the claims.

Claims

1. A device operation method, characterized in that: The method is applied to a cloud platform, and the method comprises: In response to a device operation request sent by a user terminal, obtaining first authentication information from a firewall device; Determine a first user account and a first device serial number according to the first authentication information; determine a second user account and a second device serial number according to the second authentication information obtained from the user terminal; Determine whether the first user account and the second user account are the same, and obtain a first determination result; determine whether the first device serial number and the second device serial number are the same, and obtain a second determination result; If both the first judgment result and the second judgment result are yes, it is confirmed that the user terminal has the operation authority for the firewall device, and the target operation is performed on the firewall device according to the device operation request.

2. The method according to claim 1, characterized in that The method further comprises: In response to a device activation request sent by a user terminal, determining whether a device serial number of the firewall device to be activated is located in a local list of activated device serial numbers; If the judgment result is no, determining the third device serial number according to the third authentication information obtained from the user terminal, wherein the third authentication information is generated by the user terminal according to the third user account and the third device serial number; Determining whether the third device serial number is the same as the device serial number of the firewall device to be activated; If the judgment result is yes, the third authentication information is stored in the firewall device to be activated to realize device activation.

3. The method according to claim 1, characterized in that After confirming that the user terminal has the operation authority for the firewall device, the method further includes: In response to the device handover request sent by the user terminal, the first authentication information on the firewall device is replaced with the fourth authentication information obtained from the user terminal to transfer the operation authority of the firewall device from the first user account to the fourth user account, wherein the fourth authentication information is generated by the user terminal based on the fourth user account and the second device serial number.

4. The method according to claim 1, characterized in that: The method specifically determines the first user account and the first device serial number by: Obtaining a target device serial number from the firewall device; Determining a first public key in a match of the target device serial number; The first authentication information is decrypted using the first public key to obtain a first user account and a first device serial number.

5. The method according to claim 4, characterized in that The method specifically determines the second user account and the second device serial number by: The second authentication information obtained from the user terminal is decrypted using the first public key to obtain a second user account and a second device serial number.

6. The method according to claim 1, characterized in that The method specifically determines the second user account and the second device serial number by: Acquire a target user account from the user terminal; Determine a second public key in the target user account match; The second authentication information obtained from the user terminal is decrypted using the second public key to obtain a second user account and a second device serial number.

7. The method according to claim 6, characterized in that The method specifically determines the first user account and the first device serial number by: The first authentication information is decrypted using the second public key to obtain a first user account and a first device serial number.

8. An equipment operating device, characterized in that: The device is applied to a cloud platform, and comprises: An acquisition module, configured to acquire first authentication information from a firewall device in response to a device operation request sent by a user terminal; a determination module, configured to determine a first user account and a first device serial number according to the first authentication information; and determine a second user account and a second device serial number according to the second authentication information obtained from the user terminal; a judgment module, configured to judge whether the first user account and the second user account are the same, and obtain a first judgment result; and judge whether the first device serial number and the second device serial number are the same, and obtain a second judgment result; An operation module is used to confirm that the user terminal has the operation authority for the firewall device if both the first judgment result and the second judgment result are yes, and perform a target operation on the firewall device according to the device operation request.

9. The device according to claim 8, characterized in that The device also includes: A first determination module, configured to respond to a device activation request sent by a user terminal and determine whether the device serial number of the firewall device to be activated is located in a local list of activated device serial numbers; a serial number determination module, configured to determine a third device serial number according to third authentication information obtained from the user terminal if the judgment result is no, wherein the third authentication information is generated by the user terminal according to a third user account and a third device serial number; A second judgment module is used to judge whether the third device serial number is the same as the device serial number of the firewall device to be activated; The activation module is used to store the third authentication information in the firewall device to be activated if the judgment result is yes, so as to realize device activation.

10. The device according to claim 8, characterized in that The device also includes: A replacement module is used to replace the first authentication information on the firewall device with fourth authentication information obtained from the user terminal in response to a device transfer request sent by the user terminal after confirming that the user terminal has the operating authority to the firewall device, so as to transfer the operating authority of the firewall device from the first user account to the fourth user account, wherein the fourth authentication information is generated by the user terminal based on the fourth user account and the second device serial number.

11. An electronic device, characterized in that: include: A memory and one or more processors; the memory is coupled to the processor; wherein the memory stores computer program code, the computer program code includes computer instructions, and when the computer instructions are executed by the processor, the electronic device executes the method as described in any one of claims 1-7.

12. A computer-readable storage medium comprising computer instructions, characterized in that: When the computer instructions are executed on an electronic device, the electronic device is caused to execute the method according to any one of claims 1 to 7.

13. A computer program product, characterized in that When the computer program product is executed on a computer, the computer is caused to execute the method according to any one of claims 1 to 7.