Distributed terminal agent management and control method and device and computer readable storage medium

Abstract

The invention discloses a distributed terminal proxy management and control method and device and a computer readable storage medium, and the method comprises the steps: analyzing the message information of a proxy client during registration, and obtaining the identity information corresponding to the message information in a data structure storage, the identity information comprising an identification code and an address; querying client data corresponding to the identity information from a database, and determining a satisfaction relationship between the identification code and / or the address and a preset condition in combination with the client data; and returning the identification code to the proxy client according to the relationship, or registering and recording the proxy client, or registering and recording the proxy client after a new record corresponding to the proxy client is generated. According to the invention, a distributed terminal agent management and control scheme supporting the Internet of Things is realized, the security and expansibility of terminal agent management and control are improved, and stable and efficient operation of the system is effectively guaranteed.

Description

Technical Field

[0001] The present invention relates to the technical field of Internet of Things, and in particular to a management and control method, device and computer-readable storage medium of a distributed terminal agent. Background Art

[0002] At present, the management and control solutions for IoT devices have the following technical defects:

[0003] First, the massive use of IoT devices has increased the risk of information leakage and network attacks. Traditional methods are difficult to detect and handle illegal devices in real time, posing security risks.

[0004] Second, the operation and maintenance in a multi-terminal and IoT environment is complex and inefficient, especially due to the diversification of equipment and delayed configuration updates, which creates efficiency bottlenecks.

[0005] Third, as the scale of IoT devices and terminals grows exponentially, traditional methods are gradually exposed to the risk of management out of control in high-value scenarios and lack scalability;

[0006] Fourth, the dynamic access of IoT devices and frequent changes in regulations make rapid response more challenging, with high human and material costs and security risks.

[0007] Therefore, how to provide a terminal agent management and control solution that can ensure efficient and stable operation while meeting security and industry standard requirements has become a technical problem that needs to be solved urgently. Summary of the invention

[0008] In order to overcome the deficiencies in the prior art, the purpose of the present invention is to provide a distributed terminal agent management and control method, device and computer-readable storage medium to solve the problems of poor security and scalability, difficulty in stable and efficient operation, and inability to meet industry standards in current IoT device management and control solutions.

[0009] The present invention proposes a distributed terminal agent management and control method, which is applied to a proxy server. The method comprises:

[0010] Parsing the message information of the proxy client during registration, and acquiring the identity information corresponding to the message information in the data structure storage, wherein the identity information includes an identification code and an address;

[0011] querying a database for client data corresponding to the identity information, and determining, in combination with the client data, whether the identification code and / or the address satisfies a preset condition;

[0012] The identification code is returned to the proxy client according to the satisfied relationship, or the proxy client is registered and recorded, or after a new record corresponding to the proxy client is generated, the proxy client is registered and recorded.

[0013] Optionally, querying a database for client data corresponding to the identity information further includes:

[0014] Determine whether there is client data corresponding to the identity information in the database.

[0015] Optionally, the determining whether there is client data corresponding to the identity information in the database further includes:

[0016] If the client data exists in the database, receiving the identification code array returned by the database;

[0017] If the client data does not exist in the database, a new record corresponding to the proxy client is generated, and the proxy client is registered.

[0018] Optionally, the receiving of the identification code array returned by the database further comprises:

[0019] Determine whether the identification code exists in the identification code array.

[0020] Optionally, the determining whether the identification code exists in the identification code array further includes:

[0021] If the identification code does not exist in the identification code array, determining whether the identification code is empty;

[0022] If the identification code exists in the identification code array, it is determined whether the matching degree between the address and the preset value is greater than a preset threshold.

[0023] Optionally, the determining whether the identification code is empty further includes:

[0024] If the identification code is empty, a new record corresponding to the proxy client is generated, and the proxy client is registered;

[0025] If the identification code is not empty, the proxy client is registered and recorded.

[0026] Optionally, the determining whether the matching degree between the address and the preset value is greater than a preset threshold further includes:

[0027] If the matching degree is greater than the preset threshold, returning the identification code to the proxy client;

[0028] If the matching degree is less than or equal to the preset threshold, a new record corresponding to the proxy client is generated, and the proxy client is registered.

[0029] Optionally, after generating a new record corresponding to the proxy client, registering and recording the proxy client further comprises:

[0030] A new identification code is returned to the proxy client.

[0031] The present invention also proposes a distributed terminal agent management and control device, which includes a memory, a processor, and a computer program stored in the memory and executable on the processor. When the computer program is executed by the processor, the steps of the distributed terminal agent management and control method as described in any one of the above items are implemented.

[0032] The present invention also proposes a computer-readable storage medium on which a distributed terminal agent management and control program is stored. When the distributed terminal agent management and control program is executed by a processor, the steps of the distributed terminal agent management and control method as described in any of the above items are implemented.

[0033] The distributed terminal agent management and control method, device and computer-readable storage medium of the present invention are implemented by parsing the message information of the proxy client during registration, and obtaining the identity information corresponding to the message information in the data structure storage, wherein the identity information includes an identification code and an address; querying the database for the client data corresponding to the identity information, and determining the satisfaction relationship between the identification code and / or the address and a preset condition in combination with the client data; returning the identification code to the proxy client according to the satisfaction relationship, or registering and recording the proxy client, or registering and recording the proxy client after generating a new record corresponding to the proxy client. The present invention implements a distributed terminal agent management and control scheme that supports the Internet of Things, improves the security and scalability of terminal agent management and control, and effectively ensures the stable and efficient operation of the system. BRIEF DESCRIPTION OF THE DRAWINGS

[0034] The present invention will be further described below with reference to the accompanying drawings and embodiments, in which:

[0035] Figure 1 It is a first flow chart of the management and control method of the distributed terminal agent of the present invention;

[0036] Figure 2 is a second flow chart of the distributed terminal agent management and control method of the present invention;

[0037] Figure 3 is a third flow chart of the distributed terminal agent management and control method of the present invention;

[0038] Figure 4 is a fourth flow chart of the distributed terminal agent management and control method of the present invention;

[0039] Figure 5 is a fifth flow chart of the distributed terminal agent management and control method of the present invention;

[0040] Figure 6 It is a working principle diagram of the control method of the distributed terminal agent of the present invention. DETAILED DESCRIPTION

[0041] It should be understood that the specific embodiments described herein are only used to explain the present invention, and are not used to limit the present invention.

[0042] In the subsequent description, the suffixes such as "module", "component" or "unit" used to represent elements are only used to facilitate the description of the present invention, and have no specific meanings. Therefore, "module", "component" or "unit" can be used in a mixed manner.

[0043] Figure 1 This embodiment proposes a distributed terminal agent management and control method, which is applied to a proxy server. The method includes:

[0044] S1. Parsing the message information of the proxy client during registration, and acquiring the identity information corresponding to the message information in the data structure storage, wherein the identity information includes an identification code and an address;

[0045] S2, querying the database for client data corresponding to the identity information, and determining, in combination with the client data, whether the identification code and / or the address satisfies a preset condition;

[0046] S3. Return the identification code to the proxy client according to the satisfied relationship, or register and record the proxy client, or register and record the proxy client after generating a new record corresponding to the proxy client.

[0047] In this embodiment, the above-mentioned distributed terminal agent management and control method is applied to a distributed terminal agent system supporting the Internet of Things, which includes an agent-client agent, an agent agent server, a redis data structure storage and a DB database. The agent client is an intelligent device such as a mobile phone or a laptop computer.

[0048] In this embodiment, first, after the proxy client is turned on, the proxy client registers with the server. At this time, the server receives the relevant message sent by the proxy client, and determines the identity information contained in the message information; then, the server queries the database for the client data corresponding to the above identity information, and determines the satisfying relationship between the identification code and / or address in the above message information and the preset condition in combination with the client data; finally, the server makes corresponding decisions according to different types of satisfying relationships, among which, first, returning the identification code to the proxy client, second, registering and recording the proxy client, and third, registering and recording the proxy client after generating a new record corresponding to the proxy client. So far, on the one hand, when there is no relevant data of the current proxy client in the database, a new record corresponding to the proxy client is generated and registered, and on the other hand, after registering and recording the new proxy client, the newly generated or newly configured identification code is returned to the proxy client.

[0049] The beneficial effect of this embodiment is that by parsing the message information of the proxy client during registration, and obtaining the identity information corresponding to the message information in the data structure storage, wherein the identity information includes an identification code and an address; querying the database for the client data corresponding to the identity information, and determining the satisfying relationship between the identification code and / or the address and the preset conditions in combination with the client data; returning the identification code to the proxy client according to the satisfying relationship, or registering and recording the proxy client, or registering and recording the proxy client after generating a new record corresponding to the proxy client. A distributed terminal proxy management and control solution supporting the Internet of Things is implemented, which improves the security and scalability of terminal proxy management and control, and effectively ensures the stable and efficient operation of the system.

[0050] Figure 2 is a second flow chart of the management and control method of the distributed terminal agent of the present invention. Based on the above embodiment, in this embodiment, the querying the database for the client data corresponding to the identity information further includes:

[0051] S20, determining whether there is client data corresponding to the identity information in the database;

[0052] S21, if the client data exists in the database, receiving an identification code array returned by the database;

[0053] S22: If the client data does not exist in the database, a new record corresponding to the proxy client is generated, and the proxy client is registered.

[0054] In this embodiment, first, it is determined whether there is client data corresponding to the identity information in the database. Then, if the client data exists in the database, it is determined that there is record information corresponding to the current proxy client in the database. However, at this stage, it is still uncertain whether the record information corresponds to the current proxy client. At this time, the identification code array returned by the database is further received for further judgment.

[0055] In this embodiment, based on the above determination, if the client data does not exist in the database, it can be directly determined that there is no record information corresponding to the current proxy client in the database. At this time, a new record corresponding to the proxy client is generated and the proxy client is registered.

[0056] The beneficial effect of this embodiment is that by judging whether there is client data corresponding to the identity information in the database, if the client data exists in the database, receiving the identification code array returned by the database, if the client data does not exist in the database, generating a new record corresponding to the proxy client, and registering the proxy client, the access security of the proxy client is effectively improved.

[0057] Figure 3 3 is a flow chart of the distributed terminal agent management method of the present invention. Based on the above embodiment, in this embodiment, the receiving of the identification code array returned by the database further includes:

[0058] S210, determining whether the identification code exists in the identification code array;

[0059] S211, if the identification code does not exist in the identification code array, determining whether the identification code is empty;

[0060] S212: If the identification code exists in the identification code array, determine whether the matching degree between the address and the preset value is greater than a preset threshold.

[0061] In this embodiment, first, it is determined whether the identification code exists in the identification code array. Then, if the identification code does not exist in the identification code array, it is determined whether the record information corresponding to the current proxy client exists in the database. However, at this stage, it is still uncertain whether the record information remains corresponding to the current proxy client. Then, it is determined whether the identification code is empty, thereby determining the validity of the identification code.

[0062] In this embodiment, if the identification code exists in the identification code array, it is also impossible to ensure whether the current record information remains corresponding to the current proxy client, and therefore, further judgment is made on the address in the record information.

[0063] The beneficial effect of this embodiment is that by judging whether the identification code exists in the identification code array, if the identification code does not exist in the identification code array, judging whether the identification code is empty, and if the identification code exists in the identification code array, judging whether the matching degree between the address and the preset value is greater than a preset threshold, the validity judgment logic and access security of the proxy client are enhanced.

[0064] Figure 4 4 is a flow chart of the method for managing and controlling a distributed terminal agent of the present invention. Based on the above embodiment, in this embodiment, S211, determining whether the identification code is empty, further includes:

[0065] S31. If the identification code is empty, generate a new record corresponding to the proxy client, and register the proxy client;

[0066] S32: If the identification code is not empty, register and record the proxy client.

[0067] In this embodiment, first, it is determined whether the identification code is empty. Then, when the identification code is empty, it is determined that the record information does not correspond to the current proxy client. Therefore, a new record corresponding to the proxy client is generated and the proxy client is registered.

[0068] In this embodiment, when the identification code is not empty, it is determined that there is no need to create a new record entry, and only the new proxy client needs to be registered.

[0069] The beneficial effect of this embodiment is that by judging whether the identification code is empty, if the identification code is empty, a new record corresponding to the proxy client is generated and the proxy client is registered and recorded; if the identification code is not empty, the proxy client is registered and recorded, so that the new registration of the proxy client is more in line with the current actual needs, and the efficiency of device registration and the flexibility of management and control are improved.

[0070] Figure 5 It is a fifth flow chart of the management and control method of the distributed terminal agent of the present invention. Based on the above embodiment, in this embodiment, S212, judging whether the matching degree between the address and the preset value is greater than the preset threshold, further includes:

[0071] S33, if the matching degree is greater than the preset threshold, returning the identification code to the proxy client;

[0072] S34: If the matching degree is less than or equal to the preset threshold, a new record corresponding to the proxy client is generated, and the proxy client is registered.

[0073] In this embodiment, first, it is determined whether the matching degree between the address and the preset value is greater than a preset threshold. Then, when the matching degree is greater than the preset threshold, it is determined that the current proxy client is a registered legitimate client. At this time, the identification code is directly returned to the current proxy client.

[0074] In this embodiment, when the matching degree is less than or equal to the preset threshold, it is determined that the current proxy client does not match the registered legal client. At this time, a new record corresponding to the proxy client is generated and the proxy client is registered.

[0075] The beneficial effect of this embodiment is that, by determining the matching degree between the above-mentioned address and the preset value, the legitimacy verification of the current proxy client is further standardized, the verification path of the current proxy client is expanded, and access security is guaranteed.

[0076] In this embodiment, after generating a new record corresponding to the proxy client, registering and recording the proxy client further includes:

[0077] S35. Return a new identification code to the proxy client.

[0078] In this embodiment, after the legitimacy verification of the current proxy client is further confirmed, a new identification code may be returned to the proxy client to confirm that the new proxy client is allowed to access securely.

[0079] In this embodiment, please refer to Figure 6 The working principle diagram of the distributed terminal agent control method is shown. The specific working principle is as follows:

[0080] First, the laptop acts as a proxy client and registers with the server when it is turned on. At this time, the server will receive the registration message sent by the laptop, extract the identification code from it, and obtain the corresponding identification code and address information in the data structure storage in combination with the identification code;

[0081] Then, the server queries the database for the client data corresponding to the above identity information, and determines the relationship between the identification code and / or address in the above message information and the preset condition in combination with the client data; specifically, the processing logic includes the following four judgment combinations: first, judging whether there is client data corresponding to the identity information in the database, and then, if the client data exists in the database, it is determined that there is record information corresponding to the current proxy client in the database, and if the client data does not exist in the database, it can be directly determined that there is no record information corresponding to the current proxy client in the database, at this time, a new record corresponding to the proxy client is generated, and the proxy client is registered; second, judging whether there is an identification code in the identification code array, and then, if the identification code does not exist in the identification code array, it is determined that there is record information corresponding to the current proxy client in the database, but at this stage, it is still uncertain whether the record information remains corresponding to the current proxy client, and then, it is judged whether the identification code is empty. Thus, the validity of the identification code is determined. If the identification code exists in the identification code array, it is also impossible to ensure whether the current record information keeps corresponding to the current proxy client. Therefore, the address in the record information is further judged. Third, it is judged whether the identification code is empty. Then, when the identification code is empty, it is determined that the above record information does not keep corresponding to the current proxy client. Therefore, a new record corresponding to the proxy client is generated, and the proxy client is registered. When the identification code is not empty, it is determined that there is no need to create a new record entry, and only a new proxy client needs to be registered. Fourth, it is judged whether the matching degree between the address and the preset value is greater than a preset threshold. Then, when the matching degree is greater than the preset threshold, it is determined that the current proxy client is a registered legal client. At this time, the identification code can be directly returned to the current proxy client. When the matching degree is less than or equal to the preset threshold, it is determined that the current proxy client does not match the registered legal client. At this time, a new record corresponding to the proxy client is generated, and the proxy client is registered.

[0082] Finally, after registering and recording the proxy client, a new identification code is returned to the proxy client. So far, on the one hand, when there is no relevant data of the current proxy client in the database, a new record corresponding to the proxy client is generated and registered, and on the other hand, after registering and recording the new proxy client, a newly generated or newly configured identification code is returned to the proxy client.

[0083] Based on the above embodiments, the present invention also proposes a distributed terminal agent management and control device, which includes a memory, a processor, and a computer program stored on the memory and executable on the processor. When the computer program is executed by the processor, the steps of the distributed terminal agent management and control method as described in any one of the above items are implemented.

[0084] It should be noted that the above-mentioned device embodiment and method embodiment belong to the same concept, and the specific implementation process is detailed in the method embodiment, and the technical features in the method embodiment are correspondingly applicable in the device embodiment, which will not be repeated here.

[0085] Based on the above embodiments, the present invention also proposes a computer-readable storage medium, which stores a distributed terminal agent management and control program. When the distributed terminal agent management and control program is executed by a processor, the steps of the distributed terminal agent management and control method as described in any of the above items are implemented.

[0086] It should be noted that the above-mentioned medium embodiment and method embodiment belong to the same concept, and the specific implementation process is detailed in the method embodiment, and the technical features in the method embodiment are correspondingly applicable in the medium embodiment, which will not be repeated here.

[0087] Through the description of the above implementation methods, those skilled in the art can clearly understand that the above-mentioned embodiment methods can be implemented by means of software plus a necessary general hardware platform, and of course by hardware, but in many cases the former is a better implementation method. Based on such an understanding, the technical solution of the present invention, or the part that contributes to the prior art, can be embodied in the form of a software product, which is stored in a storage medium (such as ROM / RAM, a magnetic disk, or an optical disk), and includes a number of instructions for enabling a terminal (which can be a mobile phone, a computer, a server, an air conditioner, or a network device, etc.) to execute the methods described in each embodiment of the present invention.

[0088] It should be noted that, in this article, the terms "include", "comprises" or any other variations thereof are intended to cover non-exclusive inclusion, so that a process, method, article or device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, article or device. In the absence of further restrictions, an element defined by the sentence "comprises a ..." does not exclude the existence of other identical elements in the process, method, article or device including the element.

[0089] The embodiments of the present invention are described above in conjunction with the accompanying drawings, but the present invention is not limited to the above-mentioned specific implementation modes, which are merely illustrative rather than restrictive. Under the guidance of the present invention, ordinary technicians in this field can also make many forms without departing from the scope of protection of the present invention and the claims, all of which are within the protection of the present invention.

Claims

1. A distributed terminal agent management and control method, applied to a proxy server, characterized in that: The method comprises: Parsing the message information of the proxy client during registration, and acquiring the identity information corresponding to the message information in the data structure storage, wherein the identity information includes an identification code and an address; querying a database for client data corresponding to the identity information, and determining, in combination with the client data, whether the identification code and / or the address satisfies a preset condition; The identification code is returned to the proxy client according to the satisfied relationship, or the proxy client is registered and recorded, or after a new record corresponding to the proxy client is generated, the proxy client is registered and recorded.

2. The distributed terminal agent management and control method according to claim 1, characterized in that: The querying the database for the client data corresponding to the identity information further includes: Determine whether there is client data corresponding to the identity information in the database.

3. The method for managing and controlling a distributed terminal agent according to claim 2, characterized in that: The determining whether there is client data corresponding to the identity information in the database further includes: If the client data exists in the database, receiving the identification code array returned by the database; If the client data does not exist in the database, a new record corresponding to the proxy client is generated, and the proxy client is registered.

4. The method for managing and controlling a distributed terminal agent according to claim 3, characterized in that: The receiving of the identification code array returned by the database further comprises: Determine whether the identification code exists in the identification code array.

5. The method for managing and controlling a distributed terminal agent according to claim 4, characterized in that: The determining whether the identification code exists in the identification code array further includes: If the identification code does not exist in the identification code array, determining whether the identification code is empty; If the identification code exists in the identification code array, it is determined whether the matching degree between the address and the preset value is greater than a preset threshold.

6. The method for managing and controlling a distributed terminal agent according to claim 5, characterized in that: The determining whether the identification code is empty further comprises: If the identification code is empty, a new record corresponding to the proxy client is generated, and the proxy client is registered; If the identification code is not empty, the proxy client is registered and recorded.

7. The method for managing and controlling a distributed terminal agent according to claim 5, characterized in that: The determining whether the matching degree between the address and the preset value is greater than a preset threshold further includes: If the matching degree is greater than the preset threshold, returning the identification code to the proxy client; If the matching degree is less than or equal to the preset threshold, a new record corresponding to the proxy client is generated, and the proxy client is registered.

8. The method for managing and controlling a distributed terminal agent according to claim 1, characterized in that: After generating a new record corresponding to the proxy client, registering and recording the proxy client further comprises: A new identification code is returned to the proxy client.

9. A distributed terminal agent management and control device, characterized in that: The device includes a memory, a processor, and a computer program stored in the memory and executable on the processor. When the computer program is executed by the processor, the steps of the distributed terminal agent management and control method as described in any one of claims 1 to 8 are implemented.

10. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores a distributed terminal agent management and control program, and when the distributed terminal agent management and control program is executed by the processor, the steps of the distributed terminal agent management and control method according to any one of claims 1 to 8 are implemented.

Images