Distributed security capability sharing method and system of equipment, terminal and medium

Abstract

The invention discloses a distributed security capability sharing method and system of equipment, a terminal and a medium, and the method comprises the steps: obtaining equipment information of first equipment when detecting that the first equipment receives a target operation demand, and connecting the first equipment with second equipment according to the equipment information; and sending a target operation of the target operation demand to the second device, receiving a target operation result sent by the second device, and sending the target operation result to the first device. According to the method and the device, the equipment with relatively low intelligent degree or relatively low operational capability can call the resources of the equipment with relatively high intelligent degree or relatively high operational capability to carry out operation processing, so that relatively complex operation is realized, problems encountered by a user are timely processed, and the operation processing efficiency is improved.

Description

Technical Field

[0001] The present invention relates to the technical field of capability sharing, and in particular to a method, system, terminal and computer-readable storage medium for sharing distributed security capabilities of devices. Background Art

[0002] At present, the existing technology can only process some simple calculations or implement some simple functions for devices with low intelligence or weak computing power, but cannot implement relatively complex calculations, resulting in users having to purchase other devices that can realize corresponding functions. This not only increases costs, but also fails to solve problems encountered by users in a timely manner, affecting user experience.

[0003] Therefore, the prior art still needs to be improved and developed. Summary of the invention

[0004] The main purpose of the present invention is to provide a method, system, terminal and medium for sharing distributed security capabilities of a device, aiming to solve the problem in the prior art that devices with low intelligence or weak computing power cannot perform relatively complex calculations, resulting in increased device use costs, and cannot handle current problems in a timely manner, resulting in low processing efficiency.

[0005] To achieve the above object, the present invention provides a method for sharing distributed security capabilities of a device, the method comprising the following steps:

[0006] When it is detected that the first device receives the target computing demand, acquiring device information of the first device, and connecting the first device with the second device according to the device information;

[0007] The target operation of the target operation requirement is sent to the second device, the target operation result sent by the second device is received, and the target operation result is sent to the first device.

[0008] Optionally, the method for sharing distributed security capabilities of devices, wherein when it is detected that the first device receives a target computing requirement, acquiring device information of the first device, and connecting the first device with a second device according to the device information, specifically includes:

[0009] When it is detected that the first device receives the target computing requirement, a computing power analysis is performed on the target computing requirement to obtain a computing power analysis result, and whether the first device can process the target computing according to the computing power analysis result;

[0010] If it is determined that the first device cannot process the target operation, a capability sharing requirement instruction is generated, and device matching is performed according to the capability sharing requirement instruction to obtain a second device, wherein the intelligence level of the first device is lower than that of the second device;

[0011] The device information of the first device is obtained, a corresponding soft bus is retrieved according to the device information, and the first device is connected to the second device according to the soft bus.

[0012] Optionally, in the method for sharing distributed security capabilities of devices, the step of judging whether the first device can process the target operation according to the computing power analysis result specifically includes:

[0013] Obtaining a corresponding target computing power according to the computing power analysis result, and numerically comparing the target computing power with the device computing power of the first device to obtain a comparison result;

[0014] If the comparison result is that the target computing power is less than or equal to the computing power of the device, it is determined that the first device can process the target operation;

[0015] If the comparison result is that the target computing power is greater than the device computing power, it is determined that the first device cannot process the target operation.

[0016] Optionally, the method for sharing distributed security capabilities of devices, wherein if it is determined that the first device cannot process the target operation, a capability sharing requirement instruction is generated, and device matching is performed according to the capability sharing requirement instruction to obtain a second device, and then the method further includes:

[0017] The device status information of the second device is obtained. If the device status information is a busy state, a device rematching instruction is generated according to the device status information, and device matching is performed again according to the device rematching instruction.

[0018] Optionally, the distributed security capability sharing method of the device, wherein the sending of the target operation of the target operation requirement to the second device, receiving the target operation result sent by the second device, and sending the target operation result to the first device, specifically includes:

[0019] Acquire a target operation corresponding to the target operation requirement, and send the target operation to the second device;

[0020] Receive the target operation result sent by the second device, and send the target operation result to the first device, wherein the target operation result is obtained by the second device performing an algorithm call on the target operation according to the trusted execution environment, obtaining a target processing algorithm, and performing operation processing on the target operation according to the target processing algorithm.

[0021] Optionally, the method for sharing distributed security capabilities of a device, wherein the step of obtaining a target operation corresponding to the target operation requirement and sending the target operation to the second device further comprises:

[0022] Performing security authentication on the target operation according to the rich execution environment of the second device to obtain an authentication result, and determining whether the target operation meets the security operation standard according to the authentication result;

[0023] If the authentication result is that the target operation does not contain abnormal data, determining that the target operation meets the safety operation standard, and performing operation processing on the target operation according to the trusted execution environment of the second device;

[0024] If the authentication result is that the target operation has abnormal data, it is determined that the target operation does not meet the safety operation standard, and an abnormal warning reminder is generated, and the abnormal reminder is sent to the first device.

[0025] Optionally, the method for sharing distributed security capabilities of devices, wherein the step of receiving a target operation result sent by the second device and sending the target operation result to the first device, further comprises:

[0026] An encryption detection is performed on the target operation to obtain a detection result. If the detection result is that the target operation has been encrypted, a corresponding cryptographic algorithm is called and the target operation is decrypted according to the cryptographic algorithm.

[0027] Optionally, in the distributed security capability sharing method of the device, the distributed security capability sharing system of the device includes:

[0028] A device connection module, configured to obtain device information of the first device when detecting that the first device receives a target computing requirement, and connect the first device to a second device according to the device information;

[0029] The data operation module is used to send the target operation of the target operation requirement to the second device, receive the target operation result sent by the second device, and send the target operation result to the first device.

[0030] In addition, to achieve the above-mentioned purpose, the present invention also provides a terminal, wherein the terminal includes: a memory, a processor, and a distributed security capability sharing program of a device stored on the memory and runnable on the processor, and when the distributed security capability sharing program of the device is executed by the processor, the steps of the distributed security capability sharing method of the device as described above are implemented.

[0031] In addition, to achieve the above-mentioned purpose, the present invention also provides a computer-readable storage medium, wherein the computer-readable storage medium stores a distributed security capability sharing program of a device, and when the distributed security capability sharing program of the device is executed by a processor, the steps of the distributed security capability sharing method of the device as described above are implemented.

[0032] In the present invention, a method, system, terminal and medium for sharing distributed security capabilities of devices are disclosed, and the method includes: when detecting that a first device receives a target computing requirement, obtaining device information of the first device, and connecting the first device with a second device according to the device information; sending the target computing requirement target computing to the second device, receiving the target computing result sent by the second device, and sending the target computing result to the first device. The present invention enables devices with lower intelligence or lower computing power to call the resources of devices with higher intelligence or higher computing power for computing and processing, thereby realizing relatively complex computing, and timely handling the problems encountered by users, and improving computing and processing efficiency. BRIEF DESCRIPTION OF THE DRAWINGS

[0033] Figure 1 It is a flow chart of a preferred embodiment of the method for sharing distributed security capabilities of devices in the present invention;

[0034] Figure 2 It is a structural diagram of a preferred embodiment of the distributed security capability sharing system of the device in the present invention;

[0035] Figure 3 It is a structural diagram of a preferred embodiment of the terminal of the present invention. DETAILED DESCRIPTION

[0036] In order to make the purpose, technical solution and advantages of the present invention clearer and more specific, the present invention is further described in detail below with reference to the accompanying drawings and examples. It should be understood that the specific embodiments described herein are only used to explain the present invention and are not used to limit the present invention.

[0037] It should be noted that if the embodiments of the present invention involve directional indications (such as up, down, left, right, front, back, etc.), the directional indications are only used to explain the relative position relationship, movement status, etc. between the components under a certain specific posture (as shown in the accompanying drawings). If the specific posture changes, the directional indication will also change accordingly.

[0038] In addition, if there are descriptions involving "first", "second", etc. in the embodiments of the present invention, the descriptions of "first", "second", etc. are only used for descriptive purposes and cannot be understood as indicating or suggesting their relative importance or implicitly indicating the number of the indicated technical features. Therefore, the features defined as "first" and "second" may explicitly or implicitly include at least one of the features. In addition, the technical solutions between the various embodiments can be combined with each other, but they must be based on the ability of ordinary technicians in the field to implement them. When the combination of technical solutions is contradictory or cannot be implemented, it should be deemed that such a combination of technical solutions does not exist and is not within the scope of protection required by the present invention.

[0039] The distributed security capability sharing method of the device described in the preferred embodiment of the present invention is as follows: Figure 1 As shown, the distributed security capability sharing method of the device includes the following steps:

[0040] Step S10: When it is detected that the first device receives a target computing requirement, the device information of the first device is obtained, and the first device is connected to the second device according to the device information.

[0041] The step S10 comprises:

[0042] Step S11: when it is detected that the first device receives a target computing requirement, a computing power analysis is performed on the target computing requirement to obtain a computing power analysis result, and whether the first device can process the target computing is determined according to the computing power analysis result;

[0043] Step S12: if it is determined that the first device cannot process the target operation, a capability sharing requirement instruction is generated, and device matching is performed according to the capability sharing requirement instruction to obtain a second device, wherein the intelligence level of the first device is lower than that of the second device;

[0044] Step S13: Acquire device information of the first device, call a corresponding soft bus according to the device information, and connect the first device to the second device according to the soft bus.

[0045] Specifically, in an embodiment of the present invention, when a user inputs a target operation to the first device, for example, the user inputs a high-order mathematical operation to a device, a computing power analysis is performed on the target operation requirement to obtain a computing power analysis result, and the first device is judged whether it can process the target operation according to the computing power analysis result, in order to judge whether it is necessary to call a device with a higher intelligence level than the first device for processing, so as to improve the subsequent operation efficiency; the specific judgment process is to obtain the corresponding target computing power according to the computing power analysis result, and compare the target computing power with the device computing power of the first device numerically to obtain a comparison result; if the comparison result is that the target computing power is less than or equal to the device computing power, it is determined that the first device can process the target operation; if the comparison result is that the target computing power is greater than the device computing power, it is determined that the first device cannot process the target operation. After determining that the first device cannot process the target operation, a corresponding capability sharing requirement instruction is generated, and device matching is performed according to the capability sharing requirement instruction to obtain a second device, wherein the intelligence level of the first device is lower than that of the second device. Afterwards, after matching the second device, the first device needs to be connected to the second device, specifically, obtaining the device information of the first device, calling the corresponding soft bus according to the device information, and connecting the first device to the second device according to the soft bus.

[0046] Furthermore, before connecting the first device with the second device, it is necessary to determine the current state of the second device. Specifically, obtain the device status information of the second device. If the device status information is in an idle state, perform corresponding connection operations on the first device and the second device; if the device status information is in a busy state, it means that the second device is currently unable to handle the target computing requirement and needs to be connected to a new device for processing, that is, generate a device re-matching instruction according to the device status information, and perform device matching again according to the device re-matching instruction, thereby avoiding long waiting times and improving computing processing efficiency.

[0047] Step S20: Send the target operation of the target operation requirement to the second device, receive the target operation result sent by the second device, and send the target operation result to the first device.

[0048] The step S20 comprises:

[0049] Step S21, obtaining a target operation corresponding to the target operation requirement, and sending the target operation to the second device;

[0050] Step S22, receiving the target operation result sent by the second device, and sending the target operation result to the first device, wherein the target operation result is obtained by the second device performing an algorithm call on the target operation according to the trusted execution environment, obtaining a target processing algorithm, and performing operation processing on the target operation according to the target processing algorithm.

[0051] Specifically, in an embodiment of the present invention, after the first device is connected to the second device, the target operation requirement needs to be processed by the second device. The corresponding processing process is to obtain the target operation corresponding to the target operation requirement and send the target operation to the second device; after the second device receives the target operation, REE (Rich Execution Environment, which refers to the operating environment of the mobile terminal system) is called to perform security authentication, that is, the target operation is securely authenticated according to the rich execution environment of the second device to obtain an authentication result, and whether the target operation meets the security operation standard is determined according to the authentication result; if the authentication result is that the target operation has abnormal data, it is determined that the target operation does not meet the security operation standard, and an abnormal warning reminder is generated, and the abnormal reminder is sent to the first device, and a corresponding abnormal warning is issued by the first device, so as to remind the user to handle it in time; if the authentication result is that the target operation does not have abnormal data, it is determined that the target operation meets the security operation standard, and the target operation is processed according to the trusted execution environment of the second device, specifically, the TEE (Trusted execution environment) of the second device environment, a trusted execution environment, refers to an area on the CPU of a mobile device (for example, a smart phone, a tablet computer, and a smart TV, etc.), which provides a more secure space for the execution of data and code, and ensures the confidentiality and integrity of the data and code) to perform an algorithm call on the target operation to obtain a target processing algorithm; then, the target operation is processed according to the target processing algorithm to obtain a target operation result, and the target operation result is sent to the first device, so that the first device completes the processing of the target operation demand, and promptly handles the problems encountered by the user, thereby improving the operation processing efficiency.

[0052] Furthermore, before performing operation processing on the target operation according to the target processing algorithm, it is necessary to perform encryption detection on the target operation, specifically, performing encryption detection on the target operation through a trusted execution environment to obtain a detection result. If the detection result is that the target operation is not encrypted, the target operation is processed through the target processing algorithm; if the detection result is that the target operation is encrypted, it is necessary to decrypt the target operation by calling a corresponding cryptographic algorithm and decrypting the target operation according to the cryptographic algorithm; after the target operation is decrypted, the decrypted target operation is processed again through the target processing algorithm to obtain the corresponding target operation result.

[0053] The present invention enables devices with lower intelligence or lower computing power to call on the resources of devices with higher intelligence or higher computing power to perform computing and processing, thereby achieving relatively complex computing and promptly processing problems encountered by users, thereby improving computing and processing efficiency.

[0054] Furthermore, if Figure 2 As shown, based on the above-mentioned distributed security capability sharing method of the device, the present invention also provides a distributed security capability sharing system of the device, and the distributed security capability sharing system of the device includes:

[0055] The device connection module 51 is used to obtain device information of the first device when it is detected that the first device receives the target computing demand, and connect the first device with the second device according to the device information;

[0056] The data operation module 52 is used to send the target operation of the target operation requirement to the second device, receive the target operation result sent by the second device, and send the target operation result to the first device.

[0057] Furthermore, if Figure 3 As shown, based on the distributed security capability sharing method of the above-mentioned device, the present invention also provides a terminal accordingly, and the terminal includes a processor 10, a memory 20 and a display 30. Figure 3 Only some components of the terminal are shown, but it should be understood that it is not required to implement all of the components shown, and more or fewer components may be implemented instead.

[0058] In some embodiments, the memory 20 may be an internal storage unit of the terminal, such as a hard disk or memory of the terminal. In other embodiments, the memory 20 may also be an external storage device of the terminal, such as a plug-in hard disk, a smart memory card (Smart Media Card, SMC), a secure digital (SecureDigital, SD) card, a flash card (Flash Card), etc. equipped on the terminal. Further, the memory 20 may also include both an internal storage unit of the terminal and an external storage device. The memory 20 is used to store application software and various types of data installed on the terminal, such as the program code of the installation terminal. The memory 20 may also be used to temporarily store data that has been output or is to be output. In one embodiment, a distributed security capability sharing program 40 of a device is stored on the memory 20, and the distributed security capability sharing program 40 of the device can be executed by the processor 10, thereby realizing the distributed security capability sharing method of the device in the present application.

[0059] In some embodiments, the processor 10 may be a central processing unit (CPU), a microprocessor or other data processing chip, used to run the program code or process data stored in the memory 20, such as executing the distributed security capability sharing method of the device.

[0060] In some embodiments, the display 30 may be an LED display, a liquid crystal display, a touch-sensitive liquid crystal display, an OLED (Organic Light-Emitting Diode) touch device, etc. The display 30 is used to display information on the terminal and to display a visual user interface. The components 10-30 of the terminal communicate with each other via a system bus.

[0061] In one embodiment, when the processor 10 executes the distributed security capability sharing program 40 of the device in the memory 20, the following steps are implemented:

[0062] When it is detected that the first device receives the target computing demand, acquiring device information of the first device, and connecting the first device with the second device according to the device information;

[0063] The target operation of the target operation requirement is sent to the second device, the target operation result sent by the second device is received, and the target operation result is sent to the first device.

[0064] When it is detected that the first device receives the target computing demand, acquiring device information of the first device, and connecting the first device with the second device according to the device information specifically includes:

[0065] When it is detected that the first device receives the target computing requirement, a computing power analysis is performed on the target computing requirement to obtain a computing power analysis result, and whether the first device can process the target computing according to the computing power analysis result;

[0066] If it is determined that the first device cannot process the target operation, a capability sharing requirement instruction is generated, and device matching is performed according to the capability sharing requirement instruction to obtain a second device, wherein the intelligence level of the first device is lower than that of the second device;

[0067] The device information of the first device is obtained, a corresponding soft bus is retrieved according to the device information, and the first device is connected to the second device according to the soft bus.

[0068] The determining, according to the computing power analysis result, whether the first device can process the target operation specifically includes:

[0069] Obtaining a corresponding target computing power according to the computing power analysis result, and numerically comparing the target computing power with the device computing power of the first device to obtain a comparison result;

[0070] If the comparison result is that the target computing power is less than or equal to the computing power of the device, it is determined that the first device can process the target operation;

[0071] If the comparison result is that the target computing power is greater than the device computing power, it is determined that the first device cannot process the target operation.

[0072] If it is determined that the first device cannot process the target operation, a capability sharing requirement instruction is generated, and device matching is performed according to the capability sharing requirement instruction to obtain a second device, and then the method further includes:

[0073] The device status information of the second device is obtained. If the device status information is a busy state, a device rematching instruction is generated according to the device status information, and device matching is performed again according to the device rematching instruction.

[0074] The step of sending the target operation of the target operation requirement to the second device, receiving the target operation result sent by the second device, and sending the target operation result to the first device specifically includes:

[0075] Acquire a target operation corresponding to the target operation requirement, and send the target operation to the second device;

[0076] Receive the target operation result sent by the second device, and send the target operation result to the first device, wherein the target operation result is obtained by the second device performing an algorithm call on the target operation according to the trusted execution environment, obtaining a target processing algorithm, and performing operation processing on the target operation according to the target processing algorithm.

[0077] The step of obtaining a target operation corresponding to the target operation requirement and sending the target operation to the second device further includes:

[0078] Performing security authentication on the target operation according to the rich execution environment of the second device to obtain an authentication result, and determining whether the target operation meets the security operation standard according to the authentication result;

[0079] If the authentication result is that the target operation does not contain abnormal data, determining that the target operation meets the safety operation standard, and performing operation processing on the target operation according to the trusted execution environment of the second device;

[0080] If the authentication result is that the target operation has abnormal data, it is determined that the target operation does not meet the safety operation standard, and an abnormal warning reminder is generated, and the abnormal reminder is sent to the first device.

[0081] The receiving the target operation result sent by the second device and sending the target operation result to the first device further includes:

[0082] An encryption detection is performed on the target operation to obtain a detection result. If the detection result is that the target operation has been encrypted, a corresponding cryptographic algorithm is called and the target operation is decrypted according to the cryptographic algorithm.

[0083] The present invention also provides a computer-readable storage medium, wherein the computer-readable storage medium stores a distributed security capability sharing program of a device, and when the distributed security capability sharing program of the device is executed by a processor, the steps of the distributed security capability sharing method of the device as described above are implemented.

[0084] It should be noted that, in this article, the terms "include", "comprises" or any other variations thereof are intended to cover non-exclusive inclusion, so that a process, method, article or device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, article or device. In the absence of further restrictions, an element defined by the sentence "comprises a ..." does not exclude the existence of other identical elements in the process, method, article or device including the element.

[0085] Of course, those skilled in the art can understand that all or part of the processes in the above-mentioned embodiments can be implemented by instructing related hardware (such as a processor, a controller, etc.) through a computer program, and the program can be stored in a computer-readable storage medium that can be read by a computer, and the program can include the processes of the above-mentioned method embodiments when executed. The computer-readable storage medium can be a memory, a disk, an optical disk, etc.

[0086] It should be understood that the application of the present invention is not limited to the above examples. For ordinary technicians in this field, improvements or changes can be made based on the above description. All these improvements and changes should fall within the scope of protection of the claims attached to the present invention.

Claims

1. A method for sharing distributed security capabilities of a device, characterized in that: The distributed security capability sharing method of the device includes: When it is detected that the first device receives the target computing demand, acquiring device information of the first device, and connecting the first device with the second device according to the device information; The target operation of the target operation requirement is sent to the second device, the target operation result sent by the second device is received, and the target operation result is sent to the first device.

2. The distributed security capability sharing method of a device according to claim 1, characterized in that: When it is detected that the first device receives the target computing demand, acquiring device information of the first device, and connecting the first device with the second device according to the device information, specifically includes: When it is detected that the first device receives the target computing requirement, a computing power analysis is performed on the target computing requirement to obtain a computing power analysis result, and whether the first device can process the target computing according to the computing power analysis result; If it is determined that the first device cannot process the target operation, a capability sharing requirement instruction is generated, and device matching is performed according to the capability sharing requirement instruction to obtain a second device, wherein the intelligence level of the first device is lower than that of the second device; The device information of the first device is obtained, a corresponding soft bus is retrieved according to the device information, and the first device is connected to the second device according to the soft bus.

3. The distributed security capability sharing method of a device according to claim 2, characterized in that: The determining, according to the computing power analysis result, whether the first device can process the target operation specifically includes: Obtaining a corresponding target computing power according to the computing power analysis result, and numerically comparing the target computing power with the device computing power of the first device to obtain a comparison result; If the comparison result is that the target computing power is less than or equal to the computing power of the device, it is determined that the first device can process the target operation; If the comparison result is that the target computing power is greater than the device computing power, it is determined that the first device cannot process the target operation.

4. The method for sharing distributed security capabilities of a device according to claim 2, characterized in that: If it is determined that the first device cannot process the target operation, a capability sharing requirement instruction is generated, and device matching is performed according to the capability sharing requirement instruction to obtain a second device, and then the method further includes: The device status information of the second device is obtained. If the device status information is a busy state, a device rematching instruction is generated according to the device status information, and device matching is performed again according to the device rematching instruction.

5. The method for sharing distributed security capabilities of devices according to claim 1, characterized in that: The sending the target operation of the target operation requirement to the second device, receiving the target operation result sent by the second device, and sending the target operation result to the first device specifically includes: Acquire a target operation corresponding to the target operation requirement, and send the target operation to the second device; Receive the target operation result sent by the second device, and send the target operation result to the first device, wherein the target operation result is obtained by the second device performing an algorithm call on the target operation according to the trusted execution environment, obtaining a target processing algorithm, and performing operation processing on the target operation according to the target processing algorithm.

6. The method for sharing distributed security capabilities of devices according to claim 5, characterized in that: The step of obtaining a target operation corresponding to the target operation requirement and sending the target operation to the second device further includes: Performing security authentication on the target operation according to the rich execution environment of the second device to obtain an authentication result, and determining whether the target operation meets the security operation standard according to the authentication result; If the authentication result is that the target operation does not contain abnormal data, determining that the target operation meets the safety operation standard, and performing operation processing on the target operation according to the trusted execution environment of the second device; If the authentication result is that the target operation has abnormal data, it is determined that the target operation does not meet the safety operation standard, and an abnormal warning reminder is generated, and the abnormal reminder is sent to the first device.

7. The distributed security capability sharing method of a device according to claim 6, characterized in that: The step of receiving the target operation result sent by the second device and sending the target operation result to the first device further includes: An encryption detection is performed on the target operation to obtain a detection result. If the detection result is that the target operation has been encrypted, a corresponding cryptographic algorithm is called and the target operation is decrypted according to the cryptographic algorithm.

8. A distributed security capability sharing system for devices, characterized in that: The distributed security capability sharing system of the device includes: A device connection module, configured to obtain device information of the first device when detecting that the first device receives a target computing requirement, and connect the first device to a second device according to the device information; The data operation module is used to send the target operation of the target operation requirement to the second device, receive the target operation result sent by the second device, and send the target operation result to the first device.

9. A terminal, characterized in that: The terminal includes a memory, a processor, and a distributed security capability sharing program of the device stored in the memory and executable on the processor. When the distributed security capability sharing program of the device is executed by the processor, the steps of the distributed security capability sharing method of the device as described in any one of claims 1 to 7 are implemented.

10. A computer-readable storage medium, characterized in that: A computer program is stored thereon, and the computer-readable storage medium stores a distributed security capability sharing program of a device. When the distributed security capability sharing program of the device is executed by a processor, the steps of the distributed security capability sharing method of the device as described in any one of claims 1 to 7 are implemented.

Images