Remote control authority management method and device, equipment and storage medium

Abstract

The embodiment of the invention provides a remote control authority management method and device, equipment and a storage medium, and belongs to the technical field of remote control. The method is applied to controlled equipment, and comprises the following steps: in response to a remote control permission improvement request of main control equipment, decrypting encrypted multi-modal identity information of the main control equipment to obtain multi-modal identity information of the main control equipment; performing security verification on the main control equipment according to the multi-mode identity information; under the condition that the main control equipment passes the security verification, obtaining current state information of the controlled equipment and a remote control permission improvement record of the main control equipment; and according to the state information and the remote control permission improvement record, determining whether to improve the remote control permission of the main control equipment. According to the embodiment of the invention, the security and efficiency of remote control permission improvement can be improved.

Description

Technical Field

[0001] The present application relates to the field of remote control technology, and in particular to a remote control authority management method, apparatus, device and storage medium. Background Art

[0002] In remote control scenarios, the escalation of the master device's permissions is crucial for comprehensive management and control of controlled devices. The traditional method of escalating permissions requires the master device to pop up the system management window of the controlled device and enter the corresponding account and password for verification. The response to the escalation of permissions is relatively slow, and the password is easily leaked by network attacks during transmission and storage. The single password verification method is also easy to be cracked or misused, threatening the security of the controlled device.

[0003] Therefore, how to improve the security and efficiency of remote control privilege escalation has become a technical problem that needs to be solved urgently. Summary of the invention

[0004] The main purpose of the embodiments of the present application is to propose a remote control authority management method, device, equipment and storage medium, aiming to improve the security and efficiency of remote control authority enhancement.

[0005] To achieve the above-mentioned purpose, a first aspect of an embodiment of the present application proposes a remote control authority management method, which is applied to a controlled device and includes:

[0006] In response to a remote control authority escalation request of a master control device, decrypting the encrypted multimodal identity information of the master control device to obtain the multimodal identity information of the master control device;

[0007] Performing security verification on the master control device according to the multimodal identity information;

[0008] When the master device passes the security verification, obtaining the current status information of the controlled device and the remote control authority enhancement record of the master device;

[0009] According to the state information and the remote control authority enhancement record, it is determined whether to enhance the remote control authority of the master device.

[0010] To achieve the above-mentioned purpose, a second aspect of an embodiment of the present application proposes a remote control authority management device, the device comprising:

[0011] An information decryption module, configured to, in response to a remote control authority escalation request of a master control device, decrypt the encrypted multimodal identity information of the master control device to obtain the multimodal identity information of the master control device;

[0012] A security verification module, used to perform security verification on the master control device according to the multimodal identity information;

[0013] An information acquisition module, used to acquire the current status information of the controlled device and the remote control authority enhancement record of the master device when the master device passes the security verification;

[0014] The authority enhancement module is used to determine whether to enhance the remote control authority of the master device according to the state information and the remote control authority enhancement record.

[0015] To achieve the above-mentioned purpose, the third aspect of an embodiment of the present application proposes a computer device, which includes a memory and a processor, the memory stores a computer program, and the processor implements the method described in the first aspect when executing the computer program.

[0016] To achieve the above-mentioned purpose, the fourth aspect of an embodiment of the present application proposes a computer-readable storage medium, wherein the computer-readable storage medium stores a computer program, and when the computer program is executed by a processor, the method described in the first aspect is implemented.

[0017] The remote control authority management method, apparatus, device and storage medium proposed in the present application, in the remote control authority management method, the controlled device responds to the remote control authority upgrade request of the master device, decrypts the encrypted multimodal identity information of the master device, and obtains the multimodal identity information of the master device; performs security verification on the master device based on the multimodal identity information; obtains the current status information of the controlled device and the remote control authority upgrade record of the master device when the master device passes the security verification; determines whether to upgrade the remote control authority of the master device based on the status information and the remote control authority upgrade record. In this way, on the one hand, by decrypting the multimodal identity information of the master device and using multimodal authentication, the authentication of the master device is more reliable and not easy to be forged or cracked, which reduces the risk of unauthorized devices or attackers obtaining remote control permissions, helps prevent potential security vulnerabilities or abuse of permissions, and ensures the security of the controlled devices; on the other hand, based on the current status information of the controlled device and the remote control permission escalation record of the master device, flexible, reasonable and intelligent decisions are automatically and quickly made for permission escalation, which can not only improve the efficiency of permission escalation, but also reduce the risk of permission escalation, ensuring that permission escalation is allowed only when it is really needed, thereby improving the security, controllability and rationality of permission escalation. BRIEF DESCRIPTION OF THE DRAWINGS

[0018] Figure 1 is a flow chart of a remote control authority management method provided by an embodiment of the present application;

[0019] Figure 2 is another flow chart of the remote control authority management method provided by an embodiment of the present application;

[0020] Figure 3 is another flow chart of the remote control authority management method provided in the embodiment of the present application;

[0021] Figure 4 is a schematic block diagram of a remote control authority management device provided in an embodiment of the present application;

[0022] Figure 5 It is a schematic block diagram of the structure of the computer device provided in the embodiment of the present application. DETAILED DESCRIPTION

[0023] In order to make the purpose, technical solution and advantages of the present application more clearly understood, the present application is further described in detail below in conjunction with the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are only used to explain the present application and are not used to limit the present application.

[0024] It should be noted that, although the functional modules are divided in the device schematic diagram and the logical order is shown in the flowchart, in some cases, the steps shown or described may be performed in a different order than the module division in the device or the order in the flowchart. The terms "first", "second", etc. in the specification, claims and the above drawings are used to distinguish similar objects, and are not necessarily used to describe a specific order or sequence.

[0025] Unless otherwise defined, all technical and scientific terms used herein have the same meaning as those commonly understood by those skilled in the art to which this application belongs. The terms used herein are only for the purpose of describing the embodiments of this application and are not intended to limit this application.

[0026] The embodiments of the present application provide a remote control authority management method, apparatus, device and storage medium, aiming to improve the security and efficiency of remote control authority enhancement.

[0027] The remote control authority management method, apparatus, device and storage medium provided in the embodiments of the present application are specifically described through the following embodiments. First, the remote control authority management method in the embodiments of the present application is described.

[0028] The remote control authority management method provided in the embodiment of the present application relates to the field of remote control technology. The remote control authority management method provided in the embodiment of the present application can be applied to a terminal, can be applied to a server side, or can be software running in a terminal or a server side. In some embodiments, the terminal can be a vehicle-mounted terminal, a smart phone, a tablet computer, a laptop computer, a desktop computer, etc.; the server side can be configured as an independent physical server, or can be configured as a server cluster or a distributed system composed of multiple physical servers, or can be configured as a cloud server that provides basic cloud computing services such as cloud services, cloud databases, cloud computing, cloud functions, cloud storage, network services, cloud communications, middleware services, domain name services, security services, CDN, and big data and artificial intelligence platforms; the software can be an application that implements the remote control authority management method, etc., but is not limited to the above forms.

[0029] The present application can be used in many general or special computer system environments or configurations. For example: personal computers, server computers, handheld or portable devices, tablet devices, multiprocessor systems, microprocessor-based systems, set-top boxes, programmable consumer computer devices, network PCs, minicomputers, mainframe computers, distributed computing environments including any of the above systems or devices, etc. The present application can be described in the general context of computer executable instructions executed by a computer, such as program modules. Generally, program modules include routines, programs, objects, components, data structures, etc. that perform specific tasks or implement specific abstract data types. The present application can also be practiced in distributed computing environments, in which tasks are performed by remote processing devices connected through a communication network. In a distributed computing environment, program modules can be located in local and remote computer storage media including storage devices.

[0030] It should be noted that in each specific implementation of the present application, when it comes to the need to perform relevant processing based on data related to user identity or characteristics such as user information, user behavior data, user historical data, and user location information, the user's permission or consent will be obtained first, and the collection, use, and processing of these data will comply with relevant laws, regulations, and standards. In addition, when the embodiment of the present application needs to obtain the user's sensitive personal information, the user's separate permission or consent will be obtained through a pop-up window or by jumping to a confirmation page. After clearly obtaining the user's separate permission or consent, the necessary user-related data for the normal operation of the embodiment of the present application will be obtained.

[0031] Figure 1 is an optional flowchart of the remote control authority management method provided in the embodiment of the present application. Figure 1 The method may include but is not limited to steps S101 to S104.

[0032] Step S101 , in response to a remote control authority escalation request of a master control device, decrypting the encrypted multimodal identity information of the master control device to obtain the multimodal identity information of the master control device.

[0033] In response to the remote control authority enhancement request of the master device, the controlled device decrypts the encrypted multimodal identity information of the master device to obtain the multimodal identity information of the master device.

[0034] It is understandable that the multimodal identity information of the master device is encrypted before being transmitted to the controlled device, which can avoid leakage of the multimodal identity information.

[0035] The multimodal identity information of the master device includes, but is not limited to, the hardware feature information of the master device, the biometric feature information of the user of the master device, and the account and password of the remote control authority of the master device.

[0036] Exemplarily, the hardware feature information of the master control device includes, but is not limited to, a unique identifier of the master control device (e.g., MAC address, CPU serial number, etc.) and hardware configuration data (e.g., detailed information of hardware components such as CPU, GPU, RAM, display, etc.). The master control device can read its hardware feature information through a corresponding interface.

[0037] Exemplarily, the biometric information of the user of the master device may be the face information of the user of the master device, the fingerprint information of the user of the master device, or the voiceprint information of the user of the master device. The master device may collect the face information of the user of the master device through an image acquisition device; the master device may also collect the fingerprint information of the user of the master device through a fingerprint acquisition device, such as a fingerprint scanner; the master device may also collect the voiceprint information of the user of the master device through a voiceprint collector.

[0038] Exemplarily, in response to a request for remote control privilege escalation, the controlled device may pop up a remote control privilege escalation interface, prompting the user of the master device to enter the account and password of the remote control privilege of the master device in the remote control privilege escalation interface. In the process of the master device user entering the password, the strength of the password can be detected in real time, and a strength prompt (such as "weak", "medium", "strong") is displayed. If the password strength is "weak", the master device user is prompted to modify the password to improve security. In the case of incorrect password input, error feedback information is given in a timely manner (such as "wrong password, please re-enter"), and the number of incorrect inputs is limited (for example, after 5 consecutive incorrect inputs, the account is locked for a period of time) to prevent the password from being cracked by brute force.

[0039] In order to ensure the reliability of remote control privilege escalation, the master device can also perform preliminary integrity and accuracy verification of multimodal identity information.

[0040] See also Figure 2 In some embodiments, before the encrypted multimodal identity information of the master device is decrypted to obtain the multimodal identity information of the master device, the process may also include but is not limited to steps S105 to S107.

[0041] Step S105, generating an asymmetric key, wherein the asymmetric key includes a public key and a private key;

[0042] Step S106, sending the public key to the master control device, wherein the public key is used to encrypt the symmetric key of the master control device to obtain an encrypted symmetric key, and the symmetric key is used to encrypt the multimodal identity information of the master control device to obtain encrypted multimodal identity information;

[0043] Step S107, receiving the encrypted symmetric key and encrypted multimodal identity information returned by the master control device.

[0044] In order to ensure the security of the multimodal identity information of the master device, when the master device user triggers a remote control privilege escalation request, the master device can generate a random symmetric key. The symmetric key is used to encrypt the multimodal identity information of the master device to obtain the encrypted multimodal identity information. The symmetric key is also used to decrypt the encrypted multimodal identity information to obtain the multimodal identity information of the master device.

[0045] Considering that the master device and the controlled device need to share a symmetric key, in order to ensure the transmission security of the symmetric key, the controlled device can generate an asymmetric key in response to the remote control authority escalation request of the master device. The asymmetric key includes a public key and a private key. The public key is sent to the master device through a secure communication protocol pre-agreed by the master device and the controlled device, so that the master device can use the public key to encrypt its symmetric key to obtain an encrypted symmetric key. The private key is kept by the controlled device and is used to decrypt the encrypted symmetric key of the master device to obtain the symmetric key of the master device.

[0046] In this way, the master device can return the encrypted symmetric key and encrypted multimodal identity information to the controlled device through a secure communication protocol. The controlled device receives the encrypted symmetric key and encrypted multimodal identity information returned by the master device, ensuring the transmission security of the symmetric key, thereby ensuring the confidentiality and integrity of the multimodal identity information.

[0047] In some embodiments, the encrypted multimodal identity information of the master device is decrypted to obtain the multimodal identity information of the master device. The encrypted symmetric key may be decrypted using a private key to obtain a symmetric key; the encrypted multimodal identity information is decrypted using a symmetric key to obtain the multimodal identity information, wherein the multimodal information includes hardware feature information of the master device, biometric feature information of the user of the master device, and an account and password for remote control authority of the master device.

[0048] After receiving the encrypted symmetric key and encrypted multimodal identity information returned by the master device, the controlled device uses the private key to decrypt the encrypted symmetric key to obtain the symmetric key, and then uses the symmetric key to decrypt the encrypted multimodal identity information to obtain the multimodal identity information.

[0049] For example, the master device generates a random symmetric key K.

[0050] The master device encrypts its multimodal identity information using the symmetric key K and sends it to the controlled device through a secure communication protocol.

[0051] The master device encrypts the symmetric key K using the public key of the controlled device and sends it to the controlled device through a secure communication protocol.

[0052] The controlled device uses its private key to decrypt the symmetric key K, and uses the symmetric key K to decrypt the multimodal identity information.

[0053] In this way, the master control device generates a symmetric key, which makes it easier for the master control device to use the symmetric key to quickly encrypt its multimodal identity information. The encrypted multimodal identity information encrypted with the symmetric key can also be quickly transmitted to the controlled device, thereby improving the transmission speed; the controlled device generates an asymmetric key to ensure that the exchange of symmetric keys can be securely completed through asymmetric encryption, thereby reducing the risk of symmetric keys being stolen during transmission, thereby ensuring the security of the multimodal identity information of the master control device.

[0054] In some embodiments, in order to reduce the possibility of asymmetric key leakage, the controlled device can also generate a dynamic asymmetric key, which is destroyed after being used once, ensuring that the asymmetric key pair used in each remote control permission escalation is temporarily generated, avoiding the security risks that may be caused by long-term use of the same asymmetric key.

[0055] In some embodiments, in order to save computing resources and reduce the possibility of leakage of the asymmetric key, after the asymmetric key is generated, a validity period may be set for the asymmetric key.

[0056] The controlled device can set a validity period for the asymmetric key, such as one week or one month. Once the validity period expires, the asymmetric key is destroyed and a new asymmetric key is regenerated to achieve regular update of the asymmetric key, effectively reducing the risk of asymmetric key leakage or cracking.

[0057] In some embodiments, in order to protect the confidentiality and integrity of asymmetric keys, the controlled device can perform strict access control on asymmetric keys, allowing only authorized specific system components to access, use or operate asymmetric keys, thereby preventing asymmetric keys from being maliciously stolen, tampered with or abused.

[0058] Step S102: Perform security verification on the master control device according to the multimodal identity information.

[0059] The controlled device performs security verification on the master device based on the multimodal identity information of the master device.

[0060] Exemplarily, the controlled device can compare the hardware feature information of the master device with the hardware feature information of the pre-stored legitimate device, compare the biometric information of the user of the master device with the biometric information of the pre-stored authorized user, and compare the account and password of the remote control authority of the master device with the pre-stored authorized account and password; when the hardware feature information of the master device is consistent with the hardware feature information of the pre-stored legitimate device, the biometric information of the user of the master device is consistent with the biometric information of the pre-stored authorized user, and the account and password of the remote control authority of the master device are consistent with the pre-stored authorized account and password, it is determined that the master device has passed the security verification.

[0061] In this way, the security of the master control device is verified through the multimodal identity information of the master control device, which can significantly reduce the risks brought by the vulnerabilities of a single password verification method, greatly increase the defense capability against malicious cracking or impersonation, and ensure the security of the master control device.

[0062] Step S103: when the master device passes the security verification, obtain the current status information of the controlled device and the remote control authority enhancement record of the master device.

[0063] When the master device passes the security verification, the controlled device obtains its current status information and the remote control authority enhancement record of the master device.

[0064] Exemplarily, the current status information of the controlled device includes, but is not limited to, the current CPU usage, memory usage, network available bandwidth, etc. of the controlled device.

[0065] Exemplarily, the remote control authority escalation record of the master device includes, but is not limited to, the frequency of remote control authority escalation of the master device, the most recent remote control authority escalation time, the actual operation scenario after the remote control authority escalation, etc. Among them, the actual operation scenario after the remote control authority escalation refers to the type of operation actually performed by the master device after the authority escalation, such as maintaining the system of the controlled device, etc.

[0066] In some embodiments, risk warning information of escalation of remote control authority may be generated before step S03; and the risk warning information may be displayed in a pop-up window.

[0067] Exemplarily, when the master control device passes the security verification, the master control device can also generate risk warning information related to privilege escalation, such as "Elevating privileges may have an impact on the system, please operate with caution", and can also use pop-up windows to intuitively and clearly display risk warning information based on eye-catching fonts and colors to convey the risks of privilege escalation to the user of the master control device and enhance the security of privilege escalation.

[0068] Step S104: Determine whether to upgrade the remote control authority of the master device according to the state information and the remote control authority upgrade record.

[0069] The controlled device determines whether to upgrade the remote control authority of the master device according to its current status information and the remote control authority upgrade record of the master device.

[0070] Exemplarily, the controlled device may score its current status information to obtain a current status score, thereby more intuitively measuring its current status.

[0071] For example, the CPU usage may be quantified to obtain a quantized score of the CPU usage.

[0072] Exemplarily, the CPU usage may be compared with at least two predefined CPU usage intervals. To determine which CPU usage interval the CPU usage belongs to, a value in the quantitative score range of the CPU usage interval may be taken as the quantitative score of the CPU usage.

[0073] For example, the predefined CPU usage intervals and their quantitative score ranges are:

[0074] Low CPU usage range: 0% to 30% → Quantization score range 7 to 10

[0075] Medium CPU usage range: 31% to 60% → Quantization score range 4 to 6

[0076] High CPU usage range: 61% to 100% → Quantization score range 1 to 3

[0077] If the CPU usage is 20%, which belongs to the low CPU usage range (0% to 30%), then a value of 8 may be selected from 7 to 10 as the quantitative score of the CPU usage.

[0078] It is understandable that the lower the CPU usage, the higher the quantitative score of the CPU usage. The predefined CPU usage interval and its quantitative score range are not limited to the above examples and can be flexibly defined according to actual needs.

[0079] Similarly, the memory usage is quantified to obtain a quantitative score of the memory usage.

[0080] For example, the network available bandwidth may be quantified to obtain a quantified score of the network available bandwidth. Specifically, the network available bandwidth may be compared with at least two predefined bandwidth intervals. The quantified score of the bandwidth interval to which the network available bandwidth belongs is the quantified score of the network available bandwidth. For example, the predefined bandwidth intervals and their quantified scores are:

[0081] Lower bandwidth range: 0~1Mbps→quantization score 1

[0082] Low bandwidth range: 1 to 5 Mbps → quantization score 3

[0083] Medium bandwidth range: 5 to 10 Mbps → Quantization score 5

[0084] High bandwidth range: 10-20 Mbps → quantization score 7

[0085] Higher bandwidth range: 20Mbps and above → Quantitative score 10

[0086] If the network available bandwidth is 7 Mbps, which belongs to the medium-width range (5-10 Mbps), the quantitative score of the network available bandwidth is 5.

[0087] It is understandable that the more network available bandwidth there is, the higher the quantitative score of the network available bandwidth is. The pre-bandwidth interval and its quantitative score are not limited to the above examples and can be flexibly defined according to actual needs.

[0088] In this way, the controlled device can perform weighted summation processing on the quantified score of CPU usage, the quantified score of memory usage, and the quantified score of network available bandwidth according to the corresponding weight values ​​pre-set for CPU usage, memory usage, and network available bandwidth to obtain the current status score of the controlled device.

[0089] Thereby, the current status information of the controlled device is quantified into a more intuitive status score.

[0090] In this way, the current status score of the controlled device can be compared with the preset score threshold.

[0091] Exemplarily, the controlled device can count the frequency of remote control authority escalation of the master device and the most recent remote control authority escalation time to obtain the total number of authority escalations of the master device in the past period of time, for example, the master device has performed authority escalations 3 times in the past hour.

[0092] In this way, the total number of times the master device's privileges are elevated in the past period of time can be compared with the threshold of the number of times the privileges are elevated in the past period of time.

[0093] The controlled device can review the actual operation scenarios after the remote control authority is elevated to determine whether the actual operation scenarios after the authority is elevated are compliant. For example, review whether the actual operation scenarios after the authority is elevated are related to legitimate workflows or business needs. If the actual operation scenarios after the authority is elevated are related to legitimate workflows or business needs (such as system maintenance, configuration changes, etc.), it means that the actual operation scenarios after the authority is elevated are compliant; another example is to review whether the actual operation scenarios after the authority is elevated are logical. If the actual operation scenarios after the authority is elevated are not logical (such as unnecessary system restarts, access to sensitive data, etc.), it means that the actual operation scenarios after the authority is elevated may be improper behavior or malicious activities, indicating that the actual operation scenarios after the authority is elevated are not compliant.

[0094] In this way, when the current status score of the controlled device is greater than the preset score threshold, or the total number of times the master device has had its permissions elevated in the past period of time is less than the threshold number of times the permissions have been elevated in the past period of time, or the actual operation scenario after the permission elevation is compliant, the controlled device determines to enhance the remote control permissions of the master device, thereby performing the permission elevation operation.

[0095] When the current status score of the controlled device is less than the preset score threshold, or the total number of times the master device has been upgraded in the past period of time is greater than the threshold number of times the master device has been upgraded, or the actual operation scenario after the upgrade is not compliant, the controlled device determines not to upgrade the remote control authority of the master device. The controlled device can also restrict the upgrade of the remote control authority of the master device, such as delaying the upgrade of the authority, generating corresponding delay prompt information, and displaying the delay prompt information in a pop-up window. The delay prompt information is used to prompt the user of the master device to wait for a period of time before trying again or to perform more stringent verification, such as providing additional identity information or contacting the administrator of the controlled device for manual review.

[0096] Therefore, the controlled device can make flexible and intelligent decisions on the current privilege escalation from the perspective of its own status and the historical privilege escalation of the master device, and can prevent and avoid security risks brought about by the current privilege escalation in advance.

[0097] In the remote control authority management method provided by the above embodiment, the controlled device responds to the remote control authority escalation request of the master device, decrypts the encrypted multimodal identity information of the master device, and obtains the multimodal identity information of the master device; performs security verification on the master device according to the multimodal identity information; obtains the current state information of the controlled device and the remote control authority escalation record of the master device when the master device passes the security verification; determines whether to escalate the remote control authority of the master device according to the state information and the remote control authority escalation record. In this way, on the one hand, by decrypting the multimodal identity information of the master device and using the multimodal identity authentication, the identity authentication of the master device is more reliable and not easy to be forged or cracked, which reduces the risk of unauthorized devices or attackers obtaining remote control authority, helps to prevent potential security vulnerabilities or authority abuse, and ensures the security of the controlled device; on the other hand, based on the current state information of the controlled device and the remote control authority escalation record of the master device, a flexible and reasonable intelligent decision is automatically and quickly made for the authority escalation, which can not only improve the efficiency of authority escalation, but also reduce the risk of authority escalation, and ensure that the authority escalation is allowed only when it is really needed, thereby improving the security, controllability and rationality of authority escalation.

[0098] See also Figure 3 In some embodiments, step S103 may also include but is not limited to steps S201 to S203.

[0099] Step S201, obtaining a demand operation scenario for a remote control authority escalation request;

[0100] Step S202, approving the required operation scenario;

[0101] Step S203, when the required operation scenario is approved, a step of determining whether to upgrade the remote control authority of the master device is performed according to the state information and the remote control authority upgrade record.

[0102] The required operation scenario refers to the type of operation that the master device will perform after the remote control permission escalation request is executed and the permission escalation is successful, such as accessing and processing financial data.

[0103] After obtaining the current status information of the controlled device and the remote control permission escalation record of the master device, the controlled device can first obtain the required operation scenario of the remote control permission escalation request and approve the required operation scenario. If the required operation scenario fails to pass the approval, the permission escalation will not be executed. If the required operation scenario passes the approval, based on the current status information of the controlled device and the remote control permission escalation record of the master device, an intelligent decision is automatically made on the permission escalation.

[0104] For example, if the required operation scenario is to access and process financial data, the corresponding approval process will be entered, such as confirmation by the main control device administrator, review by the financial department, and so on.

[0105] In this way, more flexible, reasonable and intelligent decisions can be made for privilege escalation according to different application scenarios of privilege escalation, which can meet various complex remote control needs and improve the applicability and versatility of remote control privilege management.

[0106] In some embodiments, after step S104, feedback information of remote control authority enhancement may be generated, wherein the feedback information is used to indicate whether the remote control authority of the master device is successfully enhanced; and the feedback information is displayed in a pop-up window.

[0107] After the controlled device makes an intelligent decision on the privilege escalation, regardless of whether the privilege escalation is successfully executed based on the intelligent decision result, corresponding detailed feedback information is generated, and the feedback information is used to indicate whether the remote control privilege of the master device is successfully elevated.

[0108] For example, if the privilege escalation is successful, the feedback information is "Privilege escalation is successful, you can now perform related operations", and the feedback information can also include additional precautions and suggestions for the operation; if the privilege escalation fails, the feedback information can clearly state the reason for the failure, such as "wrong password", "biometric verification failed", "the system currently does not allow privilege escalation", etc., and the feedback information can also include additional corresponding solutions to guide the user of the master device to take, such as re-entering the password, re-performing multi-modal identity authentication, or contacting the controlled device administrator to understand the system status of the controlled device, etc.

[0109] The controlled device can display the feedback information of the remote control privilege escalation intuitively and clearly through pop-up windows with eye-catching fonts and colors, so that the user of the master device can promptly understand the status of the privilege escalation based on the feedback information and deal with possible problems accordingly.

[0110] See also Figure 4 , Figure 4It is a schematic block diagram of a remote control authority management device provided in an embodiment of the present application. The remote control authority management device can be configured in a computer device to execute the aforementioned remote control authority management method.

[0111] like Figure 4 As shown, the remote control authority management device 400 includes: an information decryption module 401 , a security verification module 402 , an information acquisition module 403 and an authority enhancement module 404 .

[0112] The information decryption module 401 is used to decrypt the encrypted multimodal identity information of the master control device in response to the remote control authority escalation request of the master control device to obtain the multimodal identity information of the master control device;

[0113] A security verification module 402, configured to perform security verification on the master control device according to the multimodal identity information;

[0114] The information acquisition module 403 is used to acquire the current status information of the controlled device and the remote control authority enhancement record of the master device when the master device passes the security verification;

[0115] The authority enhancement module 404 is used to determine whether to enhance the remote control authority of the master device according to the state information and the remote control authority enhancement record.

[0116] In one embodiment, the remote control authority management device 400 further includes a key generation module, a public key sending module and an information receiving module.

[0117] The key generation module is used to generate an asymmetric key, wherein the asymmetric key includes a public key and a private key;

[0118] The public key sending module is used to send the public key to the master control device, wherein the public key is used to encrypt the symmetric key of the master control device to obtain an encrypted symmetric key, and the symmetric key is used to encrypt the multimodal identity information of the master control device to obtain encrypted multimodal identity information;

[0119] The information receiving module is used to receive the encrypted symmetric key and the encrypted multimodal identity information returned by the main control device.

[0120] In one embodiment, the information decryption module 401 is further used to:

[0121] Decrypting the encrypted symmetric key using the private key to obtain the symmetric key;

[0122] The encrypted multimodal identity information is decrypted using the symmetric key to obtain the multimodal identity information, wherein the multimodal information includes hardware feature information of the master control device, biometric feature information of the user of the master control device, and an account and password for remote control authority of the master control device.

[0123] In one embodiment, the remote control authority management device 400 further includes a validity period setting module, and the validity period setting module is used to:

[0124] A validity period is set for the asymmetric key.

[0125] In one embodiment, the remote control authority management device 400 further includes an operation scenario approval module, and the operation scenario approval module is used to:

[0126] Obtaining the required operation scenario of the remote control authority escalation request;

[0127] Approving the required operation scenario;

[0128] In the case where the required operation scenario is approved, the step of determining whether to upgrade the remote control authority of the master device according to the state information and the remote control authority upgrade record is performed.

[0129] In one embodiment, the remote control authority management device 400 further includes an information processing module, and the information processing module is used to:

[0130] Generate risk warning information for remote control privilege escalation;

[0131] The risk warning information is displayed in a pop-up window.

[0132] In one embodiment, the information processing module is further used to:

[0133] Generate feedback information of remote control authority enhancement, wherein the feedback information is used to indicate whether the remote control authority of the master control device is successfully enhanced;

[0134] The feedback information is displayed in a pop-up window.

[0135] Among them, each module in the above-mentioned remote control authority management device 400 corresponds to each step in the above-mentioned remote control authority management method embodiment, and its function and implementation process are not repeated here one by one.

[0136] The remote control authority management device 400 can execute the remote control authority management method provided in the embodiment of the present application, and therefore can achieve the beneficial effects that can be achieved by the remote control authority management method provided in the embodiment of the present application. For details, please refer to the previous embodiment and will not be repeated here.

[0137] The method and apparatus of the present application can be used in many general or special computer system environments or configurations. For example: personal computers, server computers, handheld or portable devices, tablet devices, multiprocessor systems, microprocessor-based systems, set-top boxes, programmable consumer electronic devices, network PCs, minicomputers, mainframe computers, distributed computing environments including any of the above systems or devices, etc. The present application can be described in the general context of computer-executable instructions executed by a computer, such as program modules. Generally, program modules include routines, programs, objects, components, data structures, etc. that perform specific tasks or implement specific abstract data types. The present application can also be practiced in distributed computing environments, in which tasks are performed by remote processing devices connected through a communication network. In a distributed computing environment, program modules can be located in local and remote computer storage media including storage devices.

[0138] Exemplarily, the above method and apparatus may be implemented in the form of a computer program. The computer program may be implemented in Figure 5 Runs on the computer device shown.

[0139] See also Figure 5 , Figure 5 It is a schematic block diagram of the structure of a computer device provided in an embodiment of the present application.

[0140] See also Figure 5 The computer device includes a processor and a memory connected via a system bus, wherein the memory may include a non-volatile storage medium and an internal memory.

[0141] The processor is used to provide computing and control capabilities and support the operation of the entire computer equipment.

[0142] The internal memory provides an environment for the operation of the computer program in the non-volatile storage medium. When the computer program is executed by the processor, the processor can execute any remote control authority management method.

[0143] It should be understood that the processor may be a central processing unit (CPU), and the processor may also be other general-purpose processors, digital signal processors (DSP), application-specific integrated circuits (ASIC), field-programmable gate arrays (FPGA) or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components, etc. Among them, the general-purpose processor may be a microprocessor or the processor may also be any conventional processor, etc.

[0144] In one embodiment, the processor is used to run a computer program stored in the memory to implement the following steps:

[0145] In response to a remote control authority escalation request of a master control device, decrypting the encrypted multimodal identity information of the master control device to obtain the multimodal identity information of the master control device;

[0146] Performing security verification on the master control device according to the multimodal identity information;

[0147] When the master device passes the security verification, obtaining the current status information of the controlled device and the remote control authority enhancement record of the master device;

[0148] According to the state information and the remote control authority enhancement record, it is determined whether to enhance the remote control authority of the master device.

[0149] In one embodiment, before the processor implements the decryption processing of the encrypted multimodal identity information of the master control device to obtain the multimodal identity information of the master control device, it is further used to implement:

[0150] Generate an asymmetric key, wherein the asymmetric key includes a public key and a private key;

[0151] Sending the public key to the master control device, wherein the public key is used to encrypt the symmetric key of the master control device to obtain an encrypted symmetric key, and the symmetric key is used to encrypt the multimodal identity information of the master control device to obtain encrypted multimodal identity information;

[0152] Receive the encrypted symmetric key and the encrypted multimodal identity information returned by the master control device.

[0153] In one embodiment, when the processor implements the decryption processing of the encrypted multimodal identity information of the master control device to obtain the multimodal identity information of the master control device, it is used to implement:

[0154] Decrypting the encrypted symmetric key using the private key to obtain the symmetric key;

[0155] The encrypted multimodal identity information is decrypted using the symmetric key to obtain the multimodal identity information, wherein the multimodal information includes hardware feature information of the master control device, biometric feature information of the user of the master control device, and an account and password for remote control authority of the master control device.

[0156] In one embodiment, after implementing the generating of the asymmetric key, the processor is further configured to implement:

[0157] A validity period is set for the asymmetric key.

[0158] In one embodiment, after the processor obtains the current state information of the controlled device and the remote control authority escalation record of the master device when the master device passes the multimodal identity authentication, it is further used to implement:

[0159] Obtaining the required operation scenario of the remote control authority escalation request;

[0160] Approving the required operation scenario;

[0161] In the case where the required operation scenario is approved, the step of determining whether to upgrade the remote control authority of the master device according to the state information and the remote control authority upgrade record is performed.

[0162] In one embodiment, before implementing the acquiring of the current status information of the controlled device and the remote control authority enhancement record of the master device, the processor is further configured to implement:

[0163] Generate risk warning information for remote control privilege escalation;

[0164] The risk warning information is displayed in a pop-up window.

[0165] In one embodiment, after the processor determines whether to upgrade the remote control authority of the master device according to the state information and the remote control authority upgrade record, it is further configured to:

[0166] Generate feedback information of remote control authority enhancement, wherein the feedback information is used to indicate whether the remote control authority of the master control device is successfully enhanced;

[0167] The feedback information is displayed in a pop-up window.

[0168] The computer device can execute the remote control authority management method provided in the embodiment of the present application, and therefore can achieve the beneficial effects that can be achieved by the remote control authority management method provided in the embodiment of the present application. For details, please refer to the previous embodiment and will not be repeated here.

[0169] An embodiment of the present application also provides a computer-readable storage medium.

[0170] The computer-readable storage medium of the present application stores a computer program, and when the computer program is executed by a processor, the steps of the remote control authority management method as described above are implemented.

[0171] The computer-readable storage medium may be an internal storage unit of the remote control authority management device or computer device described in the aforementioned embodiment, such as a hard disk or memory of the remote control authority management device or computer device. The computer-readable storage medium may also be an external storage device of the remote control authority management device or computer device, such as a plug-in hard disk, a smart memory card (Smart Media Card, SMC), a secure digital card (Secure Digital Card, SD Card), a flash card (FlashCard), etc., provided on the remote control authority management device or computer device.

[0172] Since the computer program stored in the computer-readable storage medium can execute any remote control authority management method provided in the embodiments of the present application, the beneficial effects that can be achieved by any remote control authority management method provided in the embodiments of the present application can be achieved. Please refer to the previous embodiments for details and will not be repeated here.

[0173] Furthermore, the computer-readable storage medium may mainly include a program storage area and a data storage area, wherein the program storage area may store an operating system, an application required for at least one function, etc.; the data storage area may store data created according to the use of the blockchain node, etc.

[0174] The blockchain referred to in this application is a new application model of computer technologies such as distributed data storage, peer-to-peer transmission, consensus mechanism, encryption algorithm, etc. Blockchain is essentially a decentralized database, a string of data blocks generated by cryptographic methods. Each data block contains a batch of network transaction information, which is used to verify the validity of its information (anti-counterfeiting) and generate the next block. Blockchain can include the underlying blockchain platform, platform product service layer, and application service layer.

[0175] It should be noted that, in this article, the terms "include", "comprises" or any other variations thereof are intended to cover non-exclusive inclusion, so that a process, method, article or system including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, article or system. In the absence of further restrictions, an element defined by the sentence "comprises a ..." does not exclude the existence of other identical elements in the process, method, article or system including the element.

[0176] The above description is only a specific implementation mode of the present application, but the protection scope of the present application is not limited thereto. Any technician familiar with the technical field can easily think of various equivalent modifications or substitutions within the technical scope disclosed in the present application, and these modifications or substitutions should be included in the protection scope of the present application.

Claims

1. A remote control authority management method, characterized in that: The method is applied to a controlled device, and the method comprises: In response to a remote control authority escalation request of a master control device, decrypting the encrypted multimodal identity information of the master control device to obtain the multimodal identity information of the master control device; Performing security verification on the master control device according to the multimodal identity information; When the master device passes the security verification, obtaining the current status information of the controlled device and the remote control authority enhancement record of the master device; According to the state information and the remote control authority enhancement record, it is determined whether to enhance the remote control authority of the master device.

2. The method according to claim 1, characterized in that Before decrypting the encrypted multimodal identity information of the master control device to obtain the multimodal identity information of the master control device, the method further includes: Generate an asymmetric key, wherein the asymmetric key includes a public key and a private key; Sending the public key to the master control device, wherein the public key is used to encrypt the symmetric key of the master control device to obtain an encrypted symmetric key, and the symmetric key is used to encrypt the multimodal identity information of the master control device to obtain encrypted multimodal identity information; Receive the encrypted symmetric key and the encrypted multimodal identity information returned by the master control device.

3. The method according to claim 2, characterized in that The decrypting the encrypted multimodal identity information of the master control device to obtain the multimodal identity information of the master control device includes: Decrypting the encrypted symmetric key using the private key to obtain the symmetric key; The encrypted multimodal identity information is decrypted using the symmetric key to obtain the multimodal identity information, wherein the multimodal information includes hardware feature information of the master control device, biometric feature information of the user of the master control device, and an account and password for remote control authority of the master control device.

4. The method according to claim 2, characterized in that: After the asymmetric key is generated, the method further includes: A validity period is set for the asymmetric key.

5. The method according to claim 1, characterized in that After obtaining the current status information of the controlled device and the remote control authority enhancement record of the master device when the master device passes the multi-modal identity authentication, the method further includes: Obtaining the required operation scenario of the remote control authority escalation request; Approving the required operation scenario; In the case where the required operation scenario is approved, the step of determining whether to upgrade the remote control authority of the master device according to the state information and the remote control authority upgrade record is performed.

6. The method according to claim 1, characterized in that Before obtaining the current status information of the controlled device and the remote control authority enhancement record of the master device, the method further includes: Generate risk warning information for remote control privilege escalation; The risk warning information is displayed in a pop-up window.

7. The method according to any one of claims 1 to 6, characterized in that: After determining whether to upgrade the remote control authority of the master device according to the state information and the remote control authority upgrade record, the method further includes: Generate feedback information of remote control authority enhancement, wherein the feedback information is used to indicate whether the remote control authority of the master control device is successfully enhanced; The feedback information is displayed in a pop-up window.

8. A remote control authority management device, characterized in that: The device comprises: An information decryption module, configured to, in response to a remote control authority escalation request of a master control device, decrypt the encrypted multimodal identity information of the master control device to obtain the multimodal identity information of the master control device; A security verification module, used to perform security verification on the master control device according to the multimodal identity information; An information acquisition module, used to acquire the current status information of the controlled device and the remote control authority enhancement record of the master device when the master device passes the security verification; The authority enhancement module is used to determine whether to enhance the remote control authority of the master device according to the state information and the remote control authority enhancement record.

9. A computer device, characterized in that: The computer device includes a memory and a processor, the memory stores a computer program, and the processor implements the remote control authority management method according to any one of claims 1 to 7 when executing the computer program.

10. A computer-readable storage medium storing a computer program, characterized in that: When the computer program is executed by a processor, the remote control authority management method according to any one of claims 1 to 7 is implemented.

Images