Multi-terminal collaborative resource remote scheduling and transferring method and system

Abstract

The invention discloses a multi-terminal collaborative resource remote scheduling method, a transfer method and an electronic device, the electronic device is configured with an MQTT service, the electronic device is in remote connection with a server, the method comprises the steps that a resource scheduling instruction with a signature from the server is acquired through the MQTT service, and the resource scheduling instruction comprises target device information and scheduling content; and performing signature verification on the resource scheduling instruction, executing the resource scheduling instruction after the signature verification is passed, and sending a scheduling result which corresponds to the scheduling content and has a signature to the server. According to the method and the device, the scheduling instruction with an unknown source is limited through the signature, the executed scheduling instruction is ensured to be from the authorized sender, and after the scheduling instruction is executed, the scheduling result with the signature is sent, so that the server can also verify whether the electronic equipment executing the scheduling instruction has the corresponding authority through the signature; and the situation that the interaction data is stolen or replaced in the interaction process is avoided.

Description

Technical Field

[0001] This invention relates to the field of POS terminal equipment management technology, and in particular to a method and system for remote scheduling and relaying of resources in a multi-terminal collaborative manner. Background Technology

[0002] POS devices are widely used in industries such as retail, payment, and logistics, leading to a growing demand for remote operation and maintenance, troubleshooting, and debugging. These needs all require remote interaction with the POS device.

[0003] However, the relevant technologies lack effective control over remote interaction of POS devices, posing a security risk of illegal theft. Summary of the Invention

[0004] The technical problem to be solved by the present invention is to provide a method and system for remote scheduling and transfer of resources in a multi-terminal collaborative manner, so as to improve the security of remote interaction of POS devices and prevent data resources from being illegally stolen.

[0005] To solve the above-mentioned technical problems, the present invention adopts the following technical solution: A multi-terminal collaborative remote resource scheduling method is applied to an electronic device configured with MQTT service and remotely connected to a server. The method includes: The system obtains a signed resource scheduling instruction from the server via the MQTT service. The resource scheduling instruction includes target device information and scheduling content. The resource scheduling instruction is signed and verified. After the signature verification is successful, a scheduling result corresponding to the scheduling content and bearing the signature is sent to the server.

[0006] To solve the above-mentioned technical problems, another technical solution adopted by the present invention is as follows: A multi-terminal collaborative remote resource relay method is applied to a server configured with MQTT service. The server is remotely connected to electronic devices and also remotely connected to access terminals. The method includes: Obtain the resource scheduling request from the access terminal, wherein the resource scheduling request includes target device information, scheduling content, and access terminal login information; The resource scheduling request is validated for permissions, and a signed resource scheduling instruction is generated. The resource scheduling instruction is sent to the electronic device via the MQTT service, and the resource scheduling instruction is used to instruct the electronic device to return a scheduling result based on the resource scheduling instruction. The system receives the scheduling result, verifies the scheduling result, and sends the scheduling result to the access terminal after verification.

[0007] To solve the above-mentioned technical problems, another technical solution adopted by the present invention is as follows: A multi-terminal collaborative remote resource scheduling system includes an access terminal, a server, and electronic devices; Both the server and the electronic device are configured with MQTT service, and the server is remotely connected to both the access terminal and the electronic device. The electronic device is used to execute the above-described multi-terminal collaborative remote resource scheduling method, and the server is used to execute the above-described multi-terminal collaborative remote resource relay method.

[0008] The beneficial effects of this invention are as follows: It obtains signed scheduling instructions from the server via MQTT service. These instructions include target device information and scheduling content. The signature is verified before execution, thus restricting scheduling instructions from unknown sources and ensuring that only authorized senders execute the instructions. After execution, a signed scheduling result is sent, allowing the server to verify the authorization of the electronic device executing the instruction. This achieves bidirectional signature verification between the server and the electronic device, preventing the theft or replacement of interactive data during the interaction process. Attached Figure Description

[0009] Figure 1 A structural block diagram of a multi-terminal collaborative remote resource scheduling system provided in an embodiment of the present invention; Figure 2 A flowchart illustrating the steps of a multi-terminal collaborative remote resource scheduling method provided in this embodiment of the invention; Figure 3 This is an example diagram showing the result when an electronic device completes file download at the request of an access terminal in a multi-terminal collaborative remote resource scheduling method provided in an embodiment of the present invention. Figure 4 A system block diagram of a multi-terminal collaborative remote resource scheduling system for file downloading, provided in an embodiment of the present invention; Figure 5 A system block diagram of a multi-terminal collaborative remote resource scheduling system for file upload, provided in an embodiment of the present invention; Figure 6 A flowchart illustrating the steps of a multi-terminal collaborative remote resource transfer method provided in this embodiment of the invention; Figure 7 An example diagram showing the result of an access terminal uploading a file to an electronic device through a server in a multi-terminal collaborative resource transfer method provided in an embodiment of the present invention; Figure 8A schematic diagram of the internal composition of an electronic device for a multi-terminal collaborative remote resource scheduling system provided in an embodiment of the present invention; Figure 9 This is a schematic diagram of the internal composition of a server in a multi-terminal collaborative remote resource scheduling system provided in an embodiment of the present invention. Detailed Implementation

[0010] To make the technical problems, technical solutions, and beneficial effects to be solved by this application clearer, the following detailed description is provided in conjunction with the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are merely illustrative and are not intended to limit the scope of this application.

[0011] In the following description, specific details such as particular system architectures and techniques are set forth for illustrative purposes and not for limitation, in order to provide a thorough understanding of the embodiments of this application. However, those skilled in the art will understand that this application may also be implemented in other embodiments without these specific details. In other instances, detailed descriptions of well-known systems, apparatuses, circuits, and methods have been omitted so as not to obscure the description of this application with unnecessary detail.

[0012] It should be understood that, when used in this application specification and the appended claims, the term "comprising" indicates the presence of the described features, integrals, steps, operations, elements and / or components, but does not exclude the presence or addition of one or more other features, integrals, steps, operations, elements, components and / or a collection thereof.

[0013] References to "one embodiment" or "some embodiments" as described in this specification mean that one or more embodiments of this application include a specific feature, structure, or characteristic described in connection with that embodiment. Therefore, the phrases "in one embodiment," "in some embodiments," "in other embodiments," "in still other embodiments," etc., appearing in different parts of this specification do not necessarily refer to the same embodiment, but rather mean "one or more, but not all, embodiments," unless otherwise specifically emphasized. The terms "comprising," "including," "having," and variations thereof mean "including but not limited to," unless otherwise specifically emphasized.

[0014] Related technologies, such as smart water meters, cameras, POS machines, and vending machines, are characterized by their large quantity and wide distribution. Especially for POS machines and cash registers with payment functions, an operation and maintenance service platform is built for their management and maintenance. This platform then communicates remotely with each device for centralized control. However, the lack of effective control during interactions between the access terminal and the operation and maintenance service platform, or between the platform and the electronic devices, can easily lead to data theft and other security risks.

[0015] Especially for electronic devices like POS machines, which are important electronic payment terminals, the theft of data can have serious adverse effects on multiple levels, including consumer rights, merchant operations, financial institution operations, and industry market order.

[0016] To address the aforementioned problems, this application provides a multi-terminal collaborative remote resource scheduling method, a relay method, and an electronic device. The following section details a multi-terminal collaborative remote resource scheduling method from this application.

[0017] This application discloses a multi-terminal collaborative remote resource scheduling method that can be used for interaction between electronic devices and servers. The electronic devices in this application can be POS machines, cameras, or other electronic devices deployed in large quantities over a wide area.

[0018] The following describes in detail a multi-terminal collaborative remote resource scheduling method of the present invention, with reference to the appendix. Figure 1 The system 100 shown is a multi-terminal collaborative remote resource scheduling system, which includes an access terminal 102, a server 104, and an electronic device 106. Both the server 104 and the electronic device 106 are configured with MQTT service. The server 104 is remotely connected to the access terminal 102 and the electronic device 106 respectively. This method is applied to the electronic device, specifically to the control module of the electronic device.

[0019] See attached document Figure 2 The method of this application includes steps 202 and 204.

[0020] Step 202: Obtain a signed resource scheduling instruction from server 104 via the MQTT service. The resource scheduling instruction includes target device information and scheduling content.

[0021] For example, electronic device 106 is a POS machine for a chain supermarket. It subscribes to a topic specified by server 104 via its built-in MQTT client. When headquarters maintenance personnel need to investigate the "recent transaction log anomaly" issue of the POS machine, they generate a signed resource scheduling instruction through access terminal 102 (or server 104 generates it automatically) and publish it to the aforementioned topic via the MQTT service. The POS machine obtains the signed resource scheduling instruction through the MQTT service. Since the POS machine stores a large amount of sensitive transaction data (such as bank card information and transaction records), the "signed resource scheduling instruction" mechanism ensures that only server 104, holding a legitimate private key, can issue valid instructions. This prevents hackers from forging "resource scheduling instructions" to request the POS machine to send sensitive files, such as log files, thereby stealing sensitive information from the logs (e.g., obtaining transaction logs containing complete bank card numbers through forged instructions).

[0022] Step 204: Verify the signature of the resource scheduling instruction. After the signature verification is successful, execute the resource scheduling instruction and send the scheduling result, which corresponds to the scheduling content and is signed, to the server 104.

[0023] Server 104 sends the scheduling result to client 102. Referring to the example above, after verifying the signature of the resource scheduling instruction, the POS machine of a chain supermarket confirms that the instruction originated from server 104 and has not been tampered with. Based on the scheduling content in the resource scheduling instruction, it reads key content from the local transaction log file (automatically anonymized to comply with PCI DSS requirements: the complete bank card number is hidden, only the last four digits are retained), generates a scheduling result with its own device signature, and sends it to the topic subscribed to by server 104 via MQTT service. In this way, the POS machine signs the returned scheduling result, preventing man-in-the-middle attacks (such as hackers intercepting data via public Wi-Fi) from tampering with the transaction log content (e.g., modifying the number of failed transactions, forging abnormal amounts), ensuring that server 104 obtains genuine local data from the POS machine, and providing a reliable basis for remote troubleshooting (such as "abnormal transaction failure rate").

[0024] As can be seen, the multi-terminal collaborative remote resource scheduling method of this application is applied to electronic device 106. It obtains a signed browsing instruction from server 104 through MQTT service. The browsing instruction includes browsing device information and browsing path. Then, the browsing instruction is signed to verify the signature to restrict access from other unknown sources. After verification, a browsing result corresponding to the browsing path and signed is sent to server 104. The signed browsing result allows server 104 to confirm that the browsing result comes from electronic device 106. A two-way signature verification is formed between server 104 and electronic device 106 to prevent the theft or replacement of interactive data during the interaction between the two.

[0025] In one embodiment of this application, the scheduling content in step 202 includes the file download address.

[0026] Step 204 involves sending a signed scheduling result to the server after signature verification, which corresponds to the scheduling content. Specifically, this is step 2041 to step 2042.

[0027] Step 2041: Access the file download address after signature verification.

[0028] Step 2042: Download the target file corresponding to the download address via the HTTP protocol and send the signed download result to the server.

[0029] Please refer to Figure 3 This is the display interface for access terminal 102. Combined with... Figure 4 As shown, users can click to upload target files on the display interface of access terminal 102, edit file download instructions, and send them to server 104. Server 104 creates a file download address based on the file download instructions, while electronic device 306 obtains the signed file download address from server 104 via MQTT service; it verifies the signature of the file download address, and after successful verification, accesses the file download address and downloads the target file corresponding to the file download address via HTTP protocol; this is equivalent to steps 2041 to 2042 above. For example, if a payment institution needs to push the latest security patch to 1000 POS machines, server 104 issues a signed file download instruction to the target POS machine via MQTT service; after receiving the instruction, the POS machine first verifies whether the instruction is valid, and then verifies the signature using server 104's public key. After successful verification, the POS machine downloads the patch file from the file download address and verifies the file hash value after downloading to confirm file integrity. In this way, the signed download address can prevent hackers from forging links (such as pointing to fake patches containing malicious code), avoid POS machines downloading malicious files and thus prevent payment data from being stolen. MQTT transmits lightweight download commands, and the file itself is downloaded via protocols such as HTTPS, balancing command transmission efficiency (MQTT low bandwidth) and file transmission security (HTTPS encryption), making it suitable for weak network environments in stores.

[0030] In one embodiment of this application, the scheduling content in step 202 includes the upload path.

[0031] In step 204, sending the scheduling result corresponding to the scheduling content and bearing a signature to the server is specifically step 2043: sending the resource location address corresponding to the upload path and bearing a signature to the server.

[0032] The electronic device is configured with an HTTP service, and step a is included before step 2043: after verifying the signature of the resource scheduling instruction, the target file pointed to by the upload path is uploaded to the resource location address via the HTTP service. The HTTP protocol supports SSL / TLS encrypted transmission, which can encrypt file data and instruction parameters during the upload process to prevent data from being stolen or tampered with in the transmission link.

[0033] Please refer to Figure 5 The access terminal 102 displays the upload path of the target file on its interface. After the user selects the upload path on the access terminal 102's interface, the user controls the access terminal 102 to send a file upload request to the server 104. The server 104 then creates a signed file upload instruction based on the file upload request. The electronic device 106 obtains the signed file upload instruction from the server 104 via the MQTT service. The file upload instruction includes the device information to be uploaded and the upload path. The signature of the file upload instruction is verified, and if successful, a resource location address corresponding to the file upload instruction and bearing the signature is sent to the server 104; this is equivalent to step 2043 above. The resource location address received by the access terminal 102 is as follows: Figure 6 As shown, client 102 can obtain the corresponding target file by clicking the resource location address. For example, if a supermarket POS machine experiences a "scan payment timeout" failure for three consecutive days, server 104 sends a signed file upload command via MQTT, requesting the upload of detailed communication logs. After the POS machine verifies the command signature, it generates a temporary resource location address and simultaneously signs the link with its own private key, sending it to server 104 via MQTT. In this way, the POS machine only generates a resource location address after server 104's upload command signature verification is successful, preventing unauthorized devices (such as a fake server 104 controlled by a hacker) from requesting sensitive logs.

[0034] In one embodiment of this application, step 2043 includes step b: sending the resource location address to server 104 via a preset encrypted channel. For example, after the POS machine generates a signed resource location address, it does not send it directly in plaintext via MQTT, but instead transmits the link via a "preset encrypted channel," such as an encrypted session based on TLS 1.3. The POS machine and server 104 have pre-configured a symmetric encryption key. In this way, even if a hacker intercepts the data packets transmitted via MQTT, they will not be able to decrypt and obtain the resource location address. The encrypted channel ensures that the link content is only visible to server 104, preventing the link from being misused to download logs.

[0035] In one embodiment of this application, step 201 is also included.

[0036] Step 201: Verify whether the signature of the resource scheduling instruction is within its first validity period. If so, perform signature verification on the signed resource scheduling instruction; otherwise, stop processing the resource scheduling instruction. For example, a POS machine in a chain convenience store receives a signed browsing instruction (used to remotely view the daily payment anomaly log) from server 104 via MQTT service. In addition to device_info (viewing device information) and browse_path (browsing path), the instruction also includes the "first validity period" parameter set by server 104: the first validity period is, for example, valid for 300 seconds, and the instruction generation timestamp. After receiving the instruction, the POS machine first calculates the difference between the current timestamp and the instruction generation timestamp to confirm that it has not exceeded the 300-second first validity period. Then, the POS machine uses server 104's public key to verify the signature's legitimacy. If the time difference exceeds 300 seconds, processing of the instruction is stopped directly, and subsequent signature verification and browsing operations are not performed. In this way, if a hacker intercepts a legitimate browsing instruction from 5 minutes ago and attempts to replay it, the POS machine will discard it directly because it has "exceeded the first validity period," preventing expired instructions from being abused. Furthermore, verifying the validity period before verifying the signature can filter out invalid instructions in advance, reducing the computing power consumption of the POS machine.

[0037] The following describes in detail a multi-terminal collaborative remote resource transfer method of this application, applied to the control module of server 104. Server 104 is configured with MQTT service, and server 104 is remotely connected to electronic device 106, and electronic device 106 is remotely connected to server 104. (See attached diagram.) Figure 6 This includes steps 302 to 308. Server 104 can be a POS maintenance platform, monitoring platform, etc.

[0038] Step 302: Obtain the resource scheduling request from the access terminal. The resource scheduling request includes target device information, scheduling content, and access terminal login information.

[0039] Taking the "Payment Terminal Operation and Maintenance Management Server 104" of a chain restaurant as an example, server 104 needs to respond to POS machine resource scheduling requests from headquarters maintenance personnel or regional store administrators. If two POS machines in a certain regional store experience "delayed payment after WeChat Pay" for three consecutive days, the regional maintenance personnel need to initiate a resource scheduling request to server 104 through access terminal 102 to obtain the "payment communication logs" of these two POS machines to troubleshoot the problem. This method achieves a triple matching of "store-device-path," reducing invalid command issuance by server 104 and lowering bandwidth and computing power consumption.

[0040] Step 304: Verify the permissions of the resource scheduling request and generate a signed resource scheduling instruction.

[0041] Continuing with the example of a chain restaurant's "Payment Terminal Operation and Maintenance Management Server 104," server 104 has received a resource scheduling request initiated by regional operation and maintenance personnel. Server 104 will complete the authorization verification of the resource scheduling request and generate a signed resource scheduling instruction to be sent to the target POS machine. Server 104 records "Authorization Verification Log," "Instruction Generation Log," and "Issuance Log," forming a fully traceable record of "Request → Verification → Instruction → Issuance." If a data breach occurs subsequently, it can quickly locate "which visitor, at what time, what instruction was initiated, and what file was accessed," thus clarifying the responsible party.

[0042] Step 306: Send a resource scheduling instruction to the electronic device via the MQTT service. The resource scheduling instruction is used to instruct the electronic device to return the scheduling result based on the resource scheduling instruction.

[0043] Continuing with the example of a chain restaurant's "Payment Terminal Operation and Maintenance Management Server 104," server 104 has completed authorization verification and generated a signed resource scheduling instruction for the POS machine (obtaining WeChat Pay communication logs). Server 104 then precisely sends the instruction to the target POS machine via its built-in MQTT service module. In this way, leveraging the MQTT service, server 104's concurrent sending capabilities and dynamic strategies support "batch operation and maintenance" and "differentiated adaptation," meeting the needs of large-scale POS machine management.

[0044] Step 308: Receive the scheduling result and verify it. If the verification is successful, send the scheduling result to the access end.

[0045] Continuing with the example of a chain restaurant's "Payment Terminal Operation and Maintenance Management Server 104," server 104 has sent a signed resource scheduling instruction to the POS terminal via MQTT (to obtain WeChat Pay communication logs). Server 104 will receive the scheduling result returned by the POS machine, complete multi-dimensional verification, and then forward the scheduling result to the access terminal 102. In this way, server 104 performs signature verification again after receiving the returned scheduling result to ensure that the returned result originates from electronic device 106, preventing data tampering and ensuring data authenticity and validity.

[0046] In this manner, the multi-terminal collaborative remote resource relay method of this application provides a process in which the server 104 interacts with the access terminal 102 and the electronic device 106 when the access terminal 102 needs to perform resource scheduling. After the server 104 verifies the access terminal 102's resource scheduling command and confirms that the access terminal 102's identity is legitimate and the access is valid, the electronic device 106 performs two-way signature verification to avoid the theft or replacement of interactive data during the interaction process, which can effectively ensure data security during the interaction process.

[0047] In one embodiment of this application, the scheduling content includes a file download address, and step 304 of generating a signed resource scheduling instruction further includes: setting the resource scheduling instruction to include a file download address and target device information; In step 306, the resource scheduling instruction is used to instruct the electronic device to return a scheduling result based on the resource scheduling instruction. Specifically, the resource scheduling instruction is used to instruct the electronic device to download the target file based on the file download address and return the download result.

[0048] For example, a user can edit a file download command on the display interface of access terminal 102 and send it to server 104. Server 104 receives the file download command from access terminal 102, which includes information about the device to be downloaded, the download path, and login information of access terminal 102. Server 104 verifies the permissions of the file download command, generates a signed file download address, specifically encapsulated into a URL (Uniform Resource Locator). Server 104 then sends the file download address to electronic device 106 via MQTT service, instructing electronic device 106 to access the URL and download the target file from the file download address via HTTP. For instance, if a chain restaurant's POS machine needs to update with a "WeChat Pay security patch" (to fix a QR code payment vulnerability), access terminal 102 initiates a file download command to server 104 through the "Operation and Maintenance Management Platform," and server 104 completes the entire process. In this way, the file download address contains a device-specific token, and only the target POS machine can verify the signature, preventing hackers from intercepting the link and downloading malicious files (such as Trojans disguised as patches) for other POS machines. This complies with the PCI DSS security requirements for "Payment Terminal File Transfer."

[0049] In one embodiment of this application, the scheduling content includes the upload path, and step 304, which generates a signed resource scheduling instruction, further includes step 3041: setting the resource scheduling instruction to include the upload path and target device information.

[0050] In step 306, the resource scheduling instruction is used to instruct the electronic device to return the scheduling result based on the resource scheduling instruction, specifically in steps 3061 to 3062.

[0051] Step 3061: The resource scheduling instruction is used to instruct the electronic device to return the resource location address based on the upload path.

[0052] Step 3062: Receive the resource location address and verify it. If the verification is successful, send the resource location address to the access terminal.

[0053] Combination Figure 5As shown, the process involves obtaining a file upload request from access terminal 102, which includes information about the device to be uploaded, the upload path, and login information for access terminal 102; verifying the upload request's permissions and generating a signed file upload instruction, i.e., a temporary token; sending the file upload instruction to electronic device 106 via the MQTT service, which instructs electronic device 106 to return a resource location address based on the file upload instruction; receiving the resource location address, verifying it, and then sending the resource location address back to access terminal 102 after successful verification; and receiving the result from access terminal 102 as shown in the figure. Figure 7 As shown, client 102 can obtain the corresponding target file by clicking the resource location address. For example, if a store POS machine experiences a "card payment white screen" fault, the regional maintenance team needs to obtain the POS machine's "system crash log" (highly sensitive, containing memory snapshots), initiate a file upload request, and server 104 verifies the file upload request's permissions. If the login_token is confirmed to be valid, server 104 generates a signed file upload command and sends it via MQTT. It waits for the POS machine to return the resource location address, receives and verifies the resource location address, and forwards it to client 102. This method, combining permission verification and signature verification mechanisms, prevents hackers from intercepting the link and downloading sensitive logs containing memory snapshots, complying with the payment industry's requirement for "encrypted sensitive data transmission."

[0054] In one embodiment of this application, a second validity period is set on the resource location address to restrict the access terminal 102 to access the resource location address only during the second validity period. For example, after receiving the resource location address of the POS machine, the server 104 adds a second validity period through the "link processing module" before forwarding; the second validity period is set to "300 seconds" to ensure that the access terminal 102 can only access it within a narrow window. In this way, by setting a second validity period, even if the link is stolen by a hacker, it will be inaccessible due to timeout, thus preventing the long-term abuse of highly sensitive logs.

[0055] In one embodiment of this application, server 104 creates a task log to record data such as the creation and distribution process of each browsing instruction, file download instruction, and file upload request, as well as the processing results of electronic device 106, so as to facilitate traceability in the future.

[0056] Please refer to Figure 8Another embodiment of this application provides an electronic device 400, including a memory 402, a processor 404, and a computer program stored on the memory 402 and running on the processor 404. When the processor 402 executes the computer program, it implements the various steps in the aforementioned file remote scheduling method. The electronic device 400 obtains a signed resource scheduling instruction from a server via an MQTT service. The resource scheduling instruction includes target device information and scheduling content. The device then performs signature verification on the resource scheduling instruction to restrict access from unknown sources. After successful verification, the device executes the resource scheduling instruction and sends a signed scheduling result corresponding to the scheduling content to the server. The signed scheduling result allows the server to confirm that the scheduling result originates from the electronic device 400. A two-way signature verification is established between the server and the electronic device 400 to prevent the theft or replacement of interactive data during their interaction.

[0057] Please refer to Figure 9 Another embodiment of this application provides a server 500, including a memory 502, a processor 504, and a computer program stored on the memory 502 and running on the processor 504. When the processor 502 executes the computer program, it implements the various steps in the above-described remote file transfer method. The server 500 obtains a resource scheduling request from the accessing end, verifies the access permission of the resource scheduling request to confirm the identity information of the accessing end, processes the resource scheduling request after granting access, sends a resource scheduling instruction to the electronic device through the MQTT service, and verifies the return result when obtaining the return result from the electronic device. After verification, the return result is sent to the accessing end. Multiple verifications are formed during the process of the accessing end controlling the electronic device to perform resource scheduling to ensure the security of interaction.

[0058] In summary, this invention provides a multi-terminal collaborative remote resource scheduling method, relay method, and system. The server and electronic devices are configured with MQTT services. When an access terminal issues a resource scheduling request or instruction, the server verifies the permission of the request or instruction to restrict access from unknown sources. Simultaneously, a signed resource scheduling instruction is generated and sent to the electronic device via the MQTT service. The electronic device verifies the signature of the resource scheduling instruction and, upon successful verification, sends a corresponding signed scheduling result to the server. The server verifies the returned scheduling result, establishing a two-way signature verification between the server and the electronic device. This prevents the theft or replacement of interactive data during their interaction. Combining the lightweight nature of the MQTT service and the advantages of remote communication, the convenience of electronic device access management and data security are improved. Furthermore, the server provides unified scheduling and distribution, with a comprehensive log recording and status feedback mechanism, enabling full-process observation and traceability of tasks. This provides higher controllability and stability for remote file management. An expiration mechanism is added to the aforementioned instructions or requests. If a hacker intercepts legitimate data before the expiration date and attempts to replay it, the electronic device may discard it directly due to "expiration," preventing the abuse of expired instructions. Furthermore, verifying the validity period before verifying the signature can filter out invalid instructions in advance, reducing the computing power consumption of electronic devices.

[0059] The above are merely embodiments of the present invention and do not limit the patent scope of the present invention. Any equivalent modifications made based on the content of the present invention's specification and drawings, or direct or indirect applications in related technical fields, are similarly included within the patent protection scope of the present invention.

Claims

1. A multi-terminal collaborative remote resource scheduling method, characterized in that, Applied to an electronic device configured with an MQTT service, the electronic device is remotely connected to a server, the method includes: The system obtains a signed resource scheduling instruction from the server via the MQTT service. The resource scheduling instruction includes target device information and scheduling content. The resource scheduling instruction is signed and verified. After the signature verification is successful, the resource scheduling instruction is executed, and a scheduling result corresponding to the scheduling content and bearing the signature is sent to the server.

2. The multi-terminal collaborative remote resource scheduling method according to claim 1, characterized in that, The scheduling content includes the file download address. After signature verification, a scheduling result corresponding to the scheduling content and bearing the signature is sent to the server. Specifically, this process is as follows: Access the file download address after signature verification; Download the target file corresponding to the file download address via the HTTP protocol, and send the signed download result to the server.

3. The multi-terminal collaborative remote resource scheduling method according to claim 1, characterized in that, The scheduling content includes the upload path. After approval, a scheduling result corresponding to the scheduling content and bearing a signature is sent to the server. Specifically: After passing the request, a resource location address corresponding to the upload path and bearing a signature is sent to the server.

4. The multi-terminal collaborative remote resource scheduling method according to claim 3, characterized in that, The electronic device is configured with an HTTP service, and before sending the signed resource location address corresponding to the upload path to the server after successful transmission, the process further includes: After verifying the signature of the resource scheduling instruction, the target file pointed to by the upload path is uploaded to the resource location address via the HTTP service.

5. The multi-terminal collaborative remote resource scheduling method according to claim 3, characterized in that, The step of sending a signed resource location address corresponding to the upload path to the server after successful upload includes: The resource location address is sent to the server through a preset encrypted channel.

6. The multi-terminal collaborative remote resource scheduling method according to claim 1, characterized in that, Also includes: Verify whether the signature of the resource scheduling instruction is within the first validity period. If it is, perform signature verification on the signed resource scheduling instruction; otherwise, stop processing the resource scheduling instruction.

7. A multi-terminal collaborative remote resource transfer method, characterized in that, Applied to a server configured with MQTT service, the server is remotely connected to an electronic device and also remotely connected to an access terminal. The method includes: Obtain the resource scheduling request from the access terminal, wherein the resource scheduling request includes target device information, scheduling content, and access terminal login information; The resource scheduling request is validated for permissions, and a signed resource scheduling instruction is generated. The resource scheduling instruction is sent to the electronic device via the MQTT service, and the resource scheduling instruction is used to instruct the electronic device to return a scheduling result based on the resource scheduling instruction. The system receives the scheduling result, verifies the scheduling result, and sends the scheduling result to the access terminal after verification.

8. A multi-terminal collaborative remote resource transfer method according to claim 7, characterized in that, The scheduling content includes the file download address, and the generation of the signed resource scheduling instruction further includes: The resource scheduling instruction is set to include the file download address and the target device information; The resource scheduling instruction is used to instruct the electronic device to return a scheduling result based on the resource scheduling instruction, specifically as follows: The resource scheduling instruction is used to instruct the electronic device to download the target file based on the file download address and return the download result.

9. A multi-terminal collaborative remote resource transfer method according to claim 7, characterized in that, The scheduling content includes the upload path, and the generation of the signed resource scheduling instruction further includes: The resource scheduling instruction is set to include the upload path and the target device information; The resource scheduling instruction is used to instruct the electronic device to return a scheduling result based on the resource scheduling instruction, specifically as follows: The resource scheduling instruction is used to instruct the electronic device to return a resource location address based on the upload path; The system receives the resource location address, verifies the resource location address, and sends the resource location address to the access terminal after verification.

10. A multi-terminal collaborative remote resource scheduling system, characterized in that, This includes the access point, server, and electronic devices; Both the server and the electronic device are configured with MQTT service, and the server is remotely connected to both the access terminal and the electronic device. The electronic device is used to execute a multi-terminal collaborative remote resource scheduling method according to any one of claims 1 to 6, and the server is used to execute a multi-terminal collaborative remote resource relay method according to any one of claims 7 to 9.

Images