Equipment remote control authorization method, device, electronic equipment and system

Abstract

The invention discloses an equipment remote control authorization method and device, electronic equipment and a system, and belongs to the field of remote control security. When the preset event is triggered, obtaining a target detection item; executing the target detection items and obtaining the score of each target detection item; obtaining a self-inspection total score based on the score of each target detection item and the weight corresponding to each target detection item; and determining whether remote control is authorized based on the self-inspection total score. According to the scheme, remote control does not need manual operation, multiple target detection items are included, judgment can be conducted from multiple dimensions, in addition, different target detection items and corresponding weights can be adopted based on different events and scenes, on the premise that remote control safety is guaranteed, actual needs are met, particularly, re-authorization is needed after firmware upgrading, and the remote control safety is improved. And the hidden danger of malicious flashing is solved.

Description

TECHNICAL FIELD

[0001] The present application relates to the technical field of remote control security, in particular, to a device remote control authorization method, device, electronic device and system. BACKGROUND

[0002] With the development of Internet of Things and remote operation and maintenance technology, more and more devices (such as air conditioners, gateways, PLC controllers, energy storage systems, etc.) support remote control through an App or a cloud platform. To prevent unauthorized access, existing standards (such as GB / T35273, IEC 62443) require that authorization authentication must be completed before enabling remote control.

[0003] In the prior art, a typical scheme such as CN108494813A discloses a manufacturer remote device operation control system and method, which includes a manufacturer remote device operation control server, a manufacturer user access terminal for accessing the manufacturer remote device operation control server, a wireless proxy module attached to a manufacturer device, and an operation control execution device, and further includes a user-bound mobile terminal. The manufacturer remote device operation control server of the present application utilizes a public wireless communication network service to perform operation control on a remote device, thereby providing further protection for the normal performance of a business contract of a device manufacturer, and since the manufacturer remote device operation control server can provide services for different device manufacturers, the manufacturer remote device operation control server can provide services as a third party for multiple device manufacturers, which is more economical and efficient for device manufacturers. The device state is reported by the wireless proxy module, and whether remote control is allowed is determined by the cloud. However, the scheme has the following defects: Authorization depends on manual operation: the user needs to manually click to confirm, and "start and control" cannot be realized; Single security judgment dimension: only based on network connection or account binding, without comprehensive evaluation of device security; Lack of dynamic permission management: once authorized, all control permissions are opened, which has the risk of exceeding authority; Logs are easy to tamper with: authorization records are stored locally, making it difficult to audit and trace; No re-authorization mechanism after firmware upgrade: malicious flashing can still be remotely controlled, which has a security risk.

[0004] Therefore, there is an urgent need for a more intelligent, secure, and auditable device remote control authorization mechanism. SUMMARY

[0005] In order to overcome the deficiencies of the prior art, the present application provides a device remote control authorization method, device, electronic device and system to solve the problems of authorization depending on manual operation, single security judgment dimension, lack of dynamic permission management, logs being easy to tamper with, and no re-authorization mechanism after firmware upgrade in the existing device remote control authorization mechanism.

[0006] The technical scheme adopted by the present application to solve its technical problems is: In a first aspect, a device remote control authorization method is provided, comprising: When a preset event is triggered, a target detection item is obtained; The target detection item is executed and a score of each target detection item is obtained; A self-check total score is obtained based on the score of each target detection item and the weight corresponding to each target detection item; It is determined whether to authorize remote control based on the self-check total score.

[0007] As an optional implementation manner of the present application, when the preset event is triggered, the target detection item is obtained, comprising: The target detection item is determined based on the event.

[0008] As an optional implementation manner of the present application, when the preset event is triggered, the target detection item is obtained, comprising: The running scene or use scene of the device is obtained; The target detection item is determined based on the running scene or use scene.

[0009] As an optional implementation manner of the present application, further comprising: The weight corresponding to each target detection item is determined based on the event.

[0010] As an optional implementation manner of the present application, further comprising: The running scene or use scene of the device is obtained; The weight corresponding to each target detection item is determined based on the running scene or use scene.

[0011] As an optional implementation manner of the present application, it is determined whether to authorize remote control based on the self-check total score, comprising: When the self-check total score is less than a first preset score, it is determined that remote control is prohibited from being authorized; When the self-check total score is greater than or equal to the first preset score and less than a second preset score, it is determined that only monitoring type operations are authorized, the monitoring type operations including state checking and log reading; When the self-check total score is greater than or equal to the second preset score, it is determined that remote control is allowed to be authorized.

[0012] As an optional implementation manner of the present application, further comprising: When any of the following events occurs, it is determined that the preset event is triggered: The device is powered on and started; The network connection is restored; A remote control request is received; The firmware completes the OTA upgrade; Proactively request remote control.

[0013] In a second aspect, a device remote control authorization apparatus is provided, comprising: A target detection item acquisition module is configured to acquire target detection items when a preset event is triggered. A target detection item execution module is configured to execute the target detection items and obtain scores of each target detection item. A self-check total score calculation module is configured to obtain a self-check total score based on the scores of each target detection item and the weights corresponding to each target detection item. A remote control authorization module is configured to determine whether to authorize remote control based on the self-check total score.

[0014] In a third aspect, an electronic device is provided, comprising: At least one processor and at least one memory; The memory stores executable instructions of the processor; The processor is configured to execute the device remote control authorization method described in any of the above aspects.

[0015] In a fourth aspect, a device remote control authorization system is provided, which applies the device remote control authorization method described in any of the above aspects.

[0016] Advantages: The technical solution of the present application provides a device remote control authorization method, apparatus, electronic device and system. When a preset event is triggered, target detection items are acquired. The target detection items are executed and scores of each target detection item are obtained. A self-check total score is obtained based on the scores of each target detection item and the weights corresponding to each target detection item. It is determined whether to authorize remote control based on the self-check total score. The remote control of the present application does not require manual operation, and the target detection items include multiple items, which can be judged from multiple dimensions. In addition, different target detection items and their corresponding weights can be used based on different events and scenarios. Under the premise of ensuring the safety of remote control, the actual needs are met, especially after firmware upgrade, re-authorization is required, and the hidden danger of malicious flashing is solved. BRIEF DESCRIPTION OF DRAWINGS

[0017] In order to more clearly illustrate the technical solutions of the embodiments of the present application or the prior art, the following will briefly introduce the drawings needed to be used in the embodiment or prior art description. Obviously, the drawings in the following description are only some embodiments of the present application, and those skilled in the art can obtain other drawings according to these drawings without creative labor.

[0018] Figure 1is a device remote control authorization method flowchart provided by an embodiment of the present application; Figure 2 is a first device remote control authorization method flowchart provided by an embodiment of the present application; Figure 3 is a second device remote control authorization method flowchart provided by an embodiment of the present application; Figure 4 is a third device remote control authorization method flowchart provided by an embodiment of the present application; Figure 5 is a fourth device remote control authorization method flowchart provided by an embodiment of the present application; Figure 6 is a device remote control authorization device structure schematic diagram provided by an embodiment of the present application; Figure 7 is an electronic device structure schematic diagram provided by an embodiment of the present application; Figure 8 is a device remote control authorization system architecture diagram provided by an embodiment of the present application. DETAILED DESCRIPTION

[0019] In order to make the purpose, technical scheme and advantages of the present application clearer, the technical scheme of the present application will be described in detail below in combination with the drawings and embodiments. Obviously, the described embodiments are only part of the embodiments of the present application, not all embodiments. Based on the embodiments in the present application, all other embodiments obtained by those of ordinary skill in the art without creative labor fall within the scope of the present application.

[0020] It should be noted that OTA (Over-The-Air) firmware upgrade, i.e. over-the-air firmware upgrade, is a technology that allows a device to obtain and install firmware updates from a remote server through a wireless network (such as Wi-Fi, 4G / 5G, Bluetooth, etc.). The principle is that the device sends information such as the current firmware version to the server in a networked state, and the server determines whether there is an available update firmware according to the device information. If so, the server sends the new firmware or upgrade package to the device, which receives it and performs verification and installation, completing the firmware upgrade and enabling the device to have new functions, performance optimization or bug fixes.

[0021] Taking a smart watch as an example, after the smart watch worn by the user is connected to the mobile phone through Bluetooth or directly connected to Wi-Fi, the watch system will automatically check whether there is a new firmware version on the server. If a new version is detected, the watch will prompt the user to upgrade. After the user confirms, the new firmware is downloaded from the server to the watch, and after the upgrade is completed, the smart watch may add health monitoring functions, optimize battery management, etc.

[0022] The OTA upgrade has the following advantages: Convenience: Users do not need to send devices to repair centers or use complex external devices for upgrades. They can initiate upgrades anytime and anywhere as long as the devices are connected to the network. For example, users can easily complete system firmware upgrades at home through the network without the need for professional on-site operations.

[0023] Timeliness: Device manufacturers can quickly push new features, bug fixes, and other updates to users. When security vulnerabilities are discovered, patches can be released in a timely manner to avoid users' devices being at risk for a long time and to ensure the safe and stable operation of the devices.

[0024] Cost reduction: For manufacturers, this reduces the costs of labor and logistics required for traditional upgrades, eliminating the need to recall devices or provide physical upgrade media to users. For example, car manufacturers can save a lot of money and time by recalling vehicles for software upgrades through OTA upgrades.

[0025] However, after the existing OTA firmware upgrade, the remote control authority does not change, so there is a security risk after the OTA firmware upgrade in the prior art.

[0026] To solve the above problems, the embodiments of the present application provide a device remote control authorization method.

[0027] Embodiment one: Referring to Figure 1 , the device remote control authorization method includes: S11: When a preset event is triggered, a target detection item is obtained. In the embodiments of the present application, the target detection item includes all of the following detection items: Whether the identity authentication is passed; such as security chip signature verification; Whether the firmware version is a secure version to prevent downgrading the firmware through OTA; Whether the network environment is trustworthy; such as white list SSID / IP; Whether there is a physical tampering alarm, such as a case switch sensor; Whether the system has abnormal processes or virus behavior.

[0028] That is, in the embodiments of the present application, as long as the preset event is triggered, all detection items are detected.

[0029] As a preferred implementation manner of the embodiments of the present application, when any of the following events occurs, it is determined that the preset event is triggered: The device is powered on and started; Network connection is restored; that is, the network is disconnected and then reconnected; A remote control request is received; Firmware OTA upgrade completed; Actively requesting remote control means that the user actively requests remote control on the device.

[0030] S12: Execute the target detection items and obtain a score for each target detection item; The identity authentication process involves determining whether the digital certificate is valid and whether the key has been leaked. If the digital certificate is valid and the key has not been leaked, the score for this target detection item is 100. If the digital certificate is invalid or the key has been leaked, the score for this target detection item is 0.

[0031] Whether the firmware version is a secure version is determined by checking if the current version number is on the whitelist. If it is on the whitelist, the score for this target detection item is 100; if it is not on the whitelist, the score for this target detection item is 0.

[0032] Whether the network environment is trustworthy is determined by whether it is connected to a trusted network, which is a pre-configured network. If it is connected to a trusted network, the score for this target detection item is 100; if it is not connected to a trusted network, the score for this target detection item is 0.

[0033] The alarm for physical tampering is detected by checking for unauthorized disassembly. If unauthorized disassembly is detected, the score for this target detection item is 0; if unauthorized disassembly is not detected, the score for this target detection item is 100.

[0034] The presence of abnormal processes or virus behavior in the system is determined by whether the security engine scan passes. If the security engine scan passes, the score for this target detection item is 100; if the security engine scan fails, the score for this target detection item is 0.

[0035] S13: Calculate the total self-test score based on the score of each target detection item and the weight corresponding to each target detection item; The self-assessment total score is calculated as Σ(score of each item × corresponding weight), with a maximum score of 100.

[0036] In this embodiment, the weight corresponding to each target detection item is a preset default weight, meaning that the weight corresponding to each target detection item is the same regardless of the situation.

[0037] For example, the weights corresponding to each target detection item are shown in Table 1: Table 1 Detection item Pre-set default weight Whether the identity authentication is passed 30% Whether the firmware version is a secure version 25% Whether the network environment is trustworthy 20% Whether there is a physical tampering alarm 15% Whether there is abnormal process or virus behavior of the system 10% S14: Determine whether to authorize remote control based on the total self-test score.

[0038] In one embodiment, determining whether to authorize remote control based on the total self-test score includes: If the total self-test score is less than a preset score, remote control authorization will be prohibited. When the total self-test score is greater than or equal to a preset score, remote control authorization is granted.

[0039] In another embodiment, determining whether to authorize remote control based on the self-test total score includes: When the total self-test score is less than a first preset score, it is determined that authorized remote control is prohibited. When the total self-test score is greater than or equal to the first preset score and less than the second preset score, it is determined that only monitoring operations are authorized. The monitoring operations include status lookup and log reading. That is, in this application, the monitoring operations can only obtain device information, but cannot change the device information.

[0040] When the total self-test score is greater than or equal to the second preset score, remote control authorization is granted. That is, at this point, remote control has full permissions.

[0041] As a preferred implementation of the embodiments of this application, it further includes: Audit logs are uploaded to the blockchain: The following information is used to generate a structured log and written to a distributed ledger via a lightweight blockchain protocol (such as Hyperledger Fabric or IOTA Tangle): 1) Self-inspection time, device ID, and results of each test item; 2) Self-assessment total score and authorization level; 3) Authorization start and end times, operator identity (App account); 4) Firmware version change history.

[0042] It supports third-party auditing, security incident backtracking, and compliance verification.

[0043] The device remote control authorization method provided in this application embodiment acquires target detection items when a preset event is triggered; executes the target detection items and obtains a score for each target detection item; obtains a self-inspection total score based on the score of each target detection item and the weight corresponding to each target detection item; and determines whether to authorize remote control based on the self-inspection total score. This application's solution eliminates the need for manual operation for remote control, and since it includes multiple target detection items, it can be judged from multiple dimensions. Especially after firmware upgrades, when re-authorization is required, it resolves the potential risk of malicious flashing.

[0044] Example 2: Reference Figure 2 Remote control authorization methods for equipment include: When a preset event is triggered, a target detection item is determined based on the event; in this embodiment of the application, the target detection item includes at least one of the following detection items: Whether identity authentication is successful; such as security chip signature verification. Check if the firmware version is a secure version to prevent firmware downgrades via OTA. Is the network environment trustworthy? For example, is it a whitelist of SSIDs / IPs? Whether the alarm has been physically tampered with, such as the casing switch sensor; Does the system have any abnormal processes or virus behavior?

[0045] In this embodiment of the application, after a preset event is triggered, not all detection items are directly detected. Instead, the target detection items are determined based on the event. Different triggering events represent different security risk levels and usage scenarios. The system should adjust the addition or deletion of detection items accordingly to ensure security while reducing the number of items that need to be detected, thereby speeding up the detection efficiency.

[0046] In a preferred implementation of this application, a preset event is determined to be triggered when any of the following events occur: The device starts up upon power-on; Network connection restored; that is, the network reconnected after being disconnected. Received a remote control request; Firmware OTA upgrade completed; Actively requesting remote control means that the user actively requests remote control on the device.

[0047] Perform the target detection items and obtain a score for each target detection item; The identity authentication process involves determining whether the digital certificate is valid and whether the key has been leaked. If the digital certificate is valid and the key has not been leaked, the score for this target detection item is 100. If the digital certificate is invalid or the key has been leaked, the score for this target detection item is 0.

[0048] Whether the firmware version is a secure version is determined by checking if the current version number is on the whitelist. If it is on the whitelist, the score for this target detection item is 100; if it is not on the whitelist, the score for this target detection item is 0.

[0049] Whether the network environment is trustworthy is determined by whether it is connected to a trusted network, which is a pre-configured network. If it is connected to a trusted network, the score for this target detection item is 100; if it is not connected to a trusted network, the score for this target detection item is 0.

[0050] The alarm for physical tampering is detected by checking for unauthorized disassembly. If unauthorized disassembly is detected, the score for this target detection item is 0; if unauthorized disassembly is not detected, the score for this target detection item is 100.

[0051] The presence of abnormal processes or virus behavior in the system is determined by whether the security engine scan passes. If the security engine scan passes, the score for this target detection item is 100; if the security engine scan fails, the score for this target detection item is 0.

[0052] The self-test score is obtained based on the score of each target detection item and the weight corresponding to each target detection item; The self-assessment total score is calculated as Σ(score of each item × corresponding weight), with a maximum score of 100.

[0053] In this embodiment of the application, the weight corresponding to each target detection item is determined based on the event.

[0054] For example, when the triggering event is a device restart, the target detection items and their corresponding weights are shown in Table 2: Table 2 Detection item Weight adjustment Identity authentication is passed 45% Firmware version is a secure version 35% There is no physical tampering alarm 15% There is no abnormal process or virus behavior of the system 5% Alternatively, the triggering event is an OTA upgrade, and the target detection items and their corresponding weights are shown in Table 3: Table 3 Detection item Weight adjustment Identity authentication is passed 25% Firmware version is a secure version 50% Network environment is trustworthy 10% There is no physical tampering alarm 15% Whether to authorize remote control is determined based on the total self-test score.

[0055] In one embodiment, determining whether to authorize remote control based on the total self-test score includes: If the total self-test score is less than a preset score, remote control authorization will be prohibited. When the total self-test score is greater than or equal to a preset score, remote control authorization is granted.

[0056] In another embodiment, determining whether to authorize remote control based on the self-test total score includes: When the total self-test score is less than a first preset score, it is determined that authorized remote control is prohibited. When the total self-test score is greater than or equal to the first preset score and less than the second preset score, it is determined that only monitoring operations are authorized. The monitoring operations include status lookup and log reading. That is, in this application, the monitoring operations can only obtain device information, but cannot change the device information.

[0057] When the total self-test score is greater than or equal to the second preset score, remote control authorization is granted. That is, at this point, remote control has full permissions.

[0058] As a preferred implementation of the embodiments of this application, it further includes: Audit logs are uploaded to the blockchain: The following information is used to generate a structured log and written to a distributed ledger via a lightweight blockchain protocol (such as Hyperledger Fabric or IOTA Tangle): 1) Self-inspection time, device ID, and results of each test item; 2) Self-assessment total score and authorization level; 3) Authorization start and end times, operator identity (App account); 4) Firmware version change history.

[0059] It supports third-party auditing, security incident backtracking, and compliance verification.

[0060] The device remote control authorization method provided in this application embodiment acquires target detection items when a preset event is triggered; executes the target detection items and obtains a score for each target detection item; obtains a self-inspection total score based on the score of each target detection item and the weight corresponding to each target detection item; and determines whether to authorize remote control based on the self-inspection total score. This application's solution eliminates the need for manual operation for remote control, and includes multiple target detection items, allowing for judgment from multiple dimensions. Furthermore, different target detection items and their corresponding weights can be used based on different events. This approach meets practical needs while ensuring remote control security, especially addressing the risk of malicious flashing after firmware upgrades when re-authorization is required.

[0061] Example 3: Reference Figure 3 Remote control authorization methods for equipment include: When a preset event is triggered, the device's operating or usage scenario is retrieved; In a preferred implementation of this application, a preset event is determined to be triggered when any of the following events occur: The device starts up upon power-on; Network connection restored; that is, the network reconnected after being disconnected. Received a remote control request; Firmware OTA upgrade completed; Actively requesting remote control means that the user actively requests remote control on the device.

[0062] Each target detection item and its corresponding weight are determined based on the aforementioned operating or usage scenario; in this embodiment, the target detection item includes at least one of the following detection items: Whether identity authentication is successful; such as security chip signature verification. Check if the firmware version is a secure version to prevent firmware downgrades via OTA. Is the network environment trustworthy? For example, is it a whitelist of SSIDs / IPs? Whether the alarm has been physically tampered with, such as the casing switch sensor; Does the system have any abnormal processes or virus behavior?

[0063] In this embodiment of the application, after the preset event is triggered, not all detection items are directly detected. Instead, the target detection items are determined based on the device's operating or usage scenario. Different operating or usage scenarios of different devices represent different security risk levels. The system should adjust the addition or deletion of detection items accordingly to ensure security while reducing the number of items that need to be detected, thereby speeding up the detection efficiency.

[0064] Perform the target detection items and obtain a score for each target detection item; The identity authentication process involves determining whether the digital certificate is valid and whether the key has been leaked. If the digital certificate is valid and the key has not been leaked, the score for this target detection item is 100. If the digital certificate is invalid or the key has been leaked, the score for this target detection item is 0.

[0065] Whether the firmware version is a secure version is determined by checking if the current version number is on the whitelist. If it is on the whitelist, the score for this target detection item is 100; if it is not on the whitelist, the score for this target detection item is 0.

[0066] Whether the network environment is trustworthy is determined by whether it is connected to a trusted network, which is a pre-configured network. If it is connected to a trusted network, the score for this target detection item is 100; if it is not connected to a trusted network, the score for this target detection item is 0.

[0067] The alarm for physical tampering is detected by checking for unauthorized disassembly. If unauthorized disassembly is detected, the score for this target detection item is 0; if unauthorized disassembly is not detected, the score for this target detection item is 100.

[0068] The presence of abnormal processes or virus behavior in the system is determined by whether the security engine scan passes. If the security engine scan passes, the score for this target detection item is 100; if the security engine scan fails, the score for this target detection item is 0.

[0069] The self-test score is obtained based on the score of each target detection item and the weight corresponding to each target detection item; The self-assessment total score is calculated as Σ(score of each item × corresponding weight), with a maximum score of 100.

[0070] In this embodiment, the weight of each target detection item is determined based on the device's operating scenario or usage scenario.

[0071] For example, when the operating or usage scenario is that the device is deployed in a public area, the target detection items and their corresponding weights are shown in Table 4: Table 4 Detection item Weight adjustment Identity authentication is passed 40% Firmware version is a secure version 20% There is no physical tampering alarm 30% There is no abnormal process or virus behavior of the system 10% Alternatively, when the operating or usage scenario is that the device is deployed on an internal private local area network, the target detection items and their corresponding weights are shown in Table 5: Table 5 Detection item Weight adjustment Identity authentication is passed 10% Firmware version is a secure version 25% Network environment is trustworthy 35% There is no physical tampering alarm 15% There is no abnormal process or virus behavior of the system 15% Whether to authorize remote control is determined based on the total self-test score.

[0072] In one embodiment, determining whether to authorize remote control based on the total self-test score includes: If the total self-test score is less than a preset score, remote control authorization will be prohibited. When the total self-test score is greater than or equal to a preset score, remote control authorization is granted.

[0073] In another embodiment, determining whether to authorize remote control based on the self-test total score includes: When the total self-test score is less than a first preset score, it is determined that authorized remote control is prohibited. When the total self-test score is greater than or equal to the first preset score and less than the second preset score, it is determined that only monitoring operations are authorized. The monitoring operations include status lookup and log reading. That is, in this application, the monitoring operations can only obtain device information, but cannot change the device information.

[0074] When the total self-test score is greater than or equal to the second preset score, remote control authorization is granted. That is, at this point, remote control has full permissions.

[0075] As a preferred implementation of the embodiments of this application, it further includes: Audit logs are uploaded to the blockchain: The following information is used to generate a structured log and written to a distributed ledger via a lightweight blockchain protocol (such as Hyperledger Fabric or IOTA Tangle): 1) Self-inspection time, device ID, and results of each test item; 2) Self-assessment total score and authorization level; 3) Authorization start and end times, operator identity (App account); 4) Firmware version change history.

[0076] It supports third-party auditing, security incident backtracking, and compliance verification.

[0077] The device remote control authorization method provided in this application embodiment acquires target detection items when a preset event is triggered; executes the target detection items and obtains a score for each target detection item; obtains a self-inspection total score based on the score of each target detection item and the weight corresponding to each target detection item; and determines whether to authorize remote control based on the self-inspection total score. This application's solution eliminates the need for manual operation for remote control, and includes multiple target detection items, allowing for judgment from multiple dimensions. Furthermore, different target detection items and their corresponding weights can be used based on different scenarios, ensuring remote control security while meeting practical needs, especially addressing the risk of malicious flashing after firmware upgrades when re-authorization is required.

[0078] Example 4: Reference Figure 4 Remote control authorization methods for equipment include: When a preset event is triggered, the device's operating or usage scenario is retrieved; In a preferred implementation of this application, a preset event is determined to be triggered when any of the following events occur: The device starts up upon power-on; Network connection restored; that is, the network reconnected after being disconnected. Received a remote control request; Firmware OTA upgrade completed; Actively requesting remote control means that the user actively requests remote control on the device.

[0079] If the operating scenario or usage scenario can be obtained, then each target detection item is determined based on the operating scenario or usage scenario; if the operating scenario or usage scenario cannot be obtained, then the target detection item is determined according to the scheme in Embodiment 1; in this embodiment of the application, the target detection item includes at least one of the following detection items: Whether identity authentication is successful; such as security chip signature verification. Check if the firmware version is a secure version to prevent firmware downgrades via OTA. Is the network environment trustworthy? For example, is it a whitelist of SSIDs / IPs? Whether the alarm has been physically tampered with, such as the casing switch sensor; Does the system have any abnormal processes or virus behavior?

[0080] In this embodiment of the application, after the preset event is triggered, not all detection items are detected directly. Instead, the operating scenario or usage scenario is first obtained. If it can be obtained, the target detection items and their corresponding weights are determined based on the device's operating scenario or usage scenario, i.e., according to the scheme in Embodiment 3. If it cannot be obtained, the calculation is performed based on the default target detection items and their corresponding weights, i.e., according to the scheme in Embodiment 1. Different device operating scenarios or usage scenarios represent different security risk levels. The system should adjust the addition and deletion of detection items accordingly to ensure security while reducing the number of items that need to be detected, thereby speeding up the detection efficiency.

[0081] The device remote control authorization method provided in this application embodiment acquires target detection items when a preset event is triggered; executes the target detection items and obtains a score for each target detection item; obtains a self-inspection total score based on the score of each target detection item and the weight corresponding to each target detection item; and determines whether to authorize remote control based on the self-inspection total score. This application's solution eliminates the need for manual operation for remote control, and includes multiple target detection items, allowing for judgment from multiple dimensions. Furthermore, different target detection items and their corresponding weights can be used based on different scenarios, ensuring remote control security while meeting practical needs, especially addressing the risk of malicious flashing after firmware upgrades when re-authorization is required.

[0082] Example 5: Reference Figure 5 Remote control authorization methods for equipment include: When a preset event is triggered, the device's operating or usage scenario is retrieved; In a preferred implementation of this application, a preset event is determined to be triggered when any of the following events occur: The device starts up upon power-on; Network connection restored; that is, the network reconnected after being disconnected. Received a remote control request; Firmware OTA upgrade completed; Actively requesting remote control means that the user actively requests remote control on the device.

[0083] If the operating scenario or usage scenario can be obtained, then each target detection item and its corresponding weight are determined based on the operating scenario or usage scenario and the event; if the operating scenario or usage scenario cannot be obtained, then the target detection item and its corresponding weight are determined based on the event as in Embodiment 2; in this embodiment, the target detection item includes at least one of the following detection items: Whether identity authentication is successful; such as security chip signature verification. Check if the firmware version is a secure version to prevent firmware downgrades via OTA. Is the network environment trustworthy? For example, is it a whitelist of SSIDs / IPs? Whether the alarm has been physically tampered with, such as the casing switch sensor; Does the system have any abnormal processes or virus behavior?

[0084] In this embodiment of the application, after a preset event is triggered, not all detection items are directly detected. Instead, the operating scenario or usage scenario is first obtained. If it can be obtained, the target detection item and its corresponding weight are determined based on the device's operating scenario or usage scenario and the event. Specifically, the first detection item and its corresponding first weight are determined based on the device's operating scenario or usage scenario (refer to the scheme in Embodiment 3), and the second detection item and its corresponding second weight are determined based on the event (refer to the scheme in Embodiment 2). The union of the first detection item and the second detection item is taken as the target detection item. The weight corresponding to the target detection item is calculated as follows: If the target detection item has only a first weight or only a second weight, then the first weight or the second weight is used as the weight corresponding to the target detection item; if the target detection item has both a first weight and a second weight, then the average or weighted average of the first weight and the second weight is used as the corresponding weight (the weighted average is determined based on actual needs).

[0085] If the target detection item and its corresponding weight cannot be obtained, the calculation is performed based on the event to determine the target detection item and its corresponding weight, which is the solution in Example 2. Different operating scenarios or usage scenarios of different devices represent different security risk levels. The system should adjust the addition or deletion of detection items accordingly to ensure security while reducing the number of items that need to be detected, thereby speeding up the detection efficiency.

[0086] The device remote control authorization method provided in this application embodiment acquires target detection items when a preset event is triggered; executes the target detection items and obtains a score for each target detection item; obtains a self-inspection total score based on the score of each target detection item and the weight corresponding to each target detection item; and determines whether to authorize remote control based on the self-inspection total score. This application's solution eliminates the need for manual operation for remote control, and includes multiple target detection items, allowing for judgment from multiple dimensions. Furthermore, different target detection items and their corresponding weights can be used based on different events and scenarios, meeting practical needs while ensuring remote control security, especially addressing the risk of malicious flashing after firmware upgrades when re-authorization is required.

[0087] It should be noted that any process or method description in the flowchart or otherwise described herein can be understood as representing a module, segment, or portion of code comprising one or more executable instructions for implementing a particular logical function or process, and the scope of the preferred embodiments of this application includes additional implementations in which functions may be performed not in the order shown or discussed, including substantially simultaneously or in reverse order according to the functions involved, as should be understood by those skilled in the art to which the embodiments of this application pertain.

[0088] Furthermore, in the description of this specification, the references to terms such as "one embodiment," "some embodiments," "example," "specific example," or "some examples," etc., indicate that a specific feature, structure, material, or characteristic described in connection with that embodiment or example is included in at least one embodiment or example of this application. In this specification, the illustrative expressions of the above terms do not necessarily refer to the same embodiment or example. Moreover, the specific features, structures, materials, or characteristics described may be combined in any suitable manner in one or more embodiments or examples.

[0089] Based on the same inventive concept, embodiments of this application provide a computer-readable storage medium storing a computer program, which, when executed by a processor, implements the steps of the device remote control authorization method provided in any of the above embodiments.

[0090] It should be understood that various parts of this application can be implemented using hardware, software, firmware, or a combination thereof. In the above embodiments, multiple steps or methods can be implemented using software or firmware stored in memory and executed by a suitable instruction execution system. For example, if implemented in hardware, as in another embodiment, it can be implemented using any one or a combination of the following techniques known in the art: discrete logic circuits having logic gates for implementing logical functions on data signals, application-specific integrated circuits (ASICs) having suitable combinational logic gates, programmable gate arrays (PGAs), field-programmable gate arrays (FPGAs), etc.

[0091] Those skilled in the art will understand that all or part of the steps of the methods in the above embodiments can be implemented by a program instructing related hardware. The program can be stored in a computer-readable storage medium, and when executed, the program includes one or a combination of the steps of the method embodiments.

[0092] Furthermore, the functional units in the various embodiments of this application can be integrated into a processing module, or each unit can exist physically separately, or two or more units can be integrated into a module. The integrated module can be implemented in hardware or as a software functional module. If the integrated module is implemented as a software functional module and sold or used as an independent product, it can also be stored in a computer-readable storage medium.

[0093] The storage media mentioned above can be read-only memory, disk, or optical disk, etc.

[0094] The computer-readable storage medium provided in this application embodiment stores a computer program. When executed by a processor, the computer program implements the steps of the device remote control authorization method provided in any of the above embodiments. Thus, upon triggering a preset event, target detection items are acquired; the target detection items are executed and a score is obtained for each target detection item; a self-check total score is obtained based on the score of each target detection item and its corresponding weight; and a decision on whether to authorize remote control is made based on the self-check total score. The remote control solution of this application does not require manual operation, and the target detection items include multiple items, allowing for judgment from multiple dimensions. Furthermore, different target detection items and their corresponding weights can be used based on different events and scenarios. This meets practical needs while ensuring remote control security, especially when re-authorization is required after firmware upgrades, thus resolving the risk of malicious flashing.

[0095] Based on the same inventive concept, such as Figure 6 As shown, this application also provides a device remote control authorization device 60, comprising: The target detection item acquisition module 61 is used to acquire target detection items when a preset event is triggered; The target detection items include at least one of the following: Whether identity authentication is successful; such as security chip signature verification. Check if the firmware version is a secure version to prevent firmware downgrades via OTA. Is the network environment trustworthy? For example, is it a whitelist of SSIDs / IPs? Whether the alarm has been physically tampered with, such as the casing switch sensor; Does the system have any abnormal processes or virus behavior?

[0096] As a preferred implementation of the embodiments of this application, it further includes: The preset event will be triggered when any of the following events occur: The device starts up upon power-on; Network connection restored; Received a remote control request; Firmware OTA upgrade completed; Actively request remote control.

[0097] In one embodiment, the target detection item is a pre-set detection item, and the pre-set detection item will be used as the target detection item in all cases.

[0098] In another embodiment, the target detection item is determined based on the event, meaning that different events may use different target detection items.

[0099] In another embodiment, the operating scenario or usage scenario of the device is obtained; The target detection items are determined based on the aforementioned operating or usage scenario. That is, in this embodiment, different target detection items may be used in different scenarios.

[0100] The target detection item execution module 62 is used to execute the target detection items and obtain a score for each target detection item; The identity authentication process involves determining whether the digital certificate is valid and whether the key has been leaked. If the digital certificate is valid and the key has not been leaked, the score for this target detection item is 100. If the digital certificate is invalid or the key has been leaked, the score for this target detection item is 0.

[0101] Whether the firmware version is a secure version is determined by checking if the current version number is on the whitelist. If it is on the whitelist, the score for this target detection item is 100; if it is not on the whitelist, the score for this target detection item is 0.

[0102] Whether the network environment is trustworthy is determined by whether it is connected to a trusted network, which is a pre-configured network. If it is connected to a trusted network, the score for this target detection item is 100; if it is not connected to a trusted network, the score for this target detection item is 0.

[0103] The alarm for physical tampering is detected by checking for unauthorized disassembly. If unauthorized disassembly is detected, the score for this target detection item is 0; if unauthorized disassembly is not detected, the score for this target detection item is 100.

[0104] The presence of abnormal processes or virus behavior in the system is determined by whether the security engine scan passes. If the security engine scan passes, the score for this target detection item is 100; if the security engine scan fails, the score for this target detection item is 0.

[0105] The self-inspection total score calculation module 63 is used to obtain the self-inspection total score based on the score of each target detection item and the weight corresponding to each target detection item; In one embodiment, the weight corresponding to each target detection item is fixed, that is, the weight corresponding to each target detection item is the same regardless of the situation.

[0106] In another embodiment, the weight corresponding to each target detection item is determined based on the event. That is, the weight of the same target detection item may be different for different events.

[0107] In another embodiment, the operating scenario or usage scenario of the device is obtained; The weight of each target detection item is determined based on the aforementioned operating or usage scenario. That is, the weight of the same target detection item may be different in different scenarios.

[0108] The remote control authorization module 64 is used to determine whether to authorize remote control based on the total self-test score.

[0109] As a preferred implementation of this application, the step of determining whether to authorize remote control based on the self-test total score includes: When the total self-test score is less than a first preset score, it is determined that authorized remote control is prohibited. When the total self-test score is greater than or equal to the first preset score and less than the second preset score, it is determined that only monitoring operations are authorized, including status lookup and log reading. When the total self-test score is greater than or equal to the second preset score, remote control authorization is granted.

[0110] This application provides a device remote control authorization device. Upon triggering a preset event, it acquires target detection items; executes the target detection items and obtains a score for each; calculates a self-check total score based on the score and weight of each target detection item; and determines whether to authorize remote control based on the self-check total score. This application's solution eliminates the need for manual operation for remote control, and includes multiple target detection items, allowing for multi-dimensional judgment. Furthermore, different target detection items and their corresponding weights can be used based on different events and scenarios. This approach meets practical needs while ensuring remote control security, especially addressing the risk of malicious flashing after firmware upgrades when re-authorization is required.

[0111] Based on the same inventive concept, such as Figure 7 As shown, this application also provides an electronic device 70, comprising: At least one processor 71 and at least one memory 72; The memory stores the executable instructions of the processor; The processor is configured to execute the device remote control authorization method provided in the above embodiments.

[0112] The electronic device provided in this application stores executable instructions of the processor in a memory. When the executable instructions are executed, the processor can acquire target detection items when a preset event is triggered; execute the target detection items and obtain a score for each target detection item; obtain a self-test total score based on the score of each target detection item and the weight corresponding to each target detection item; and determine whether to authorize remote control based on the self-test total score. The remote control solution of this application does not require manual operation, and the target detection items include multiple items, allowing for judgment from multiple dimensions. Furthermore, different target detection items and their corresponding weights can be used based on different events and scenarios. This meets practical needs while ensuring the security of remote control, especially when re-authorization is required after firmware upgrades, thus resolving the risk of malicious flashing.

[0113] Based on the same inventive concept, this application also provides a device remote control authorization system, which applies the device remote control authorization method provided in any of the above embodiments.

[0114] The following provides a specific device remote control authorization system, the architecture of which is as follows: Figure 8 As shown, it includes: Self-testing engine module: integrates multi-dimensional detection units to perform local security assessments; Scoring and decision-making module: Calculates the total self-inspection score based on a weighted algorithm and outputs authorization suggestions; Access control module: Dynamically opens or restricts remote control interfaces based on scoring results; OTA linkage module: listens for firmware update events and triggers the re-authorization process; Blockchain interface module: encrypts the authorization logs before uploading them to the blockchain to ensure they cannot be tampered with; Communication and storage module: Supports secure interaction with Apps and cloud platforms, local caching strategies and logs.

[0115] The job inflow is as follows: 1. Trigger self-check process: The local self-test process will be actively triggered by the device's main control unit when any of the following events occur: The device starts up upon power-on; Network connection restored; Received a remote control request; Firmware OTA upgrade completed; The user actively requests remote control.

[0116] 2. Perform multi-dimensional security checks and assign weighted scores: In one embodiment, the following security checks are performed on the device, and a preset weight is assigned to each check to calculate a comprehensive security score, as shown in Table 7: Table 7 Detection item Pre-set default weight Judgment standard Whether the identity authentication is passed (such as security chip signature verification) 30% Digital certificate is valid and key is not leaked. Whether the firmware version is a secure version (anti-downgrade) 25% Version number is in the whitelist and matches. Whether the network environment is trustworthy (such as whitelist SSID / IP) 20% Connected to a pre-set trustworthy network. Whether there is a physical tampering alarm (such as a case switch sensor) 15% No illegal disassembly is detected. Whether there is abnormal process or virus behavior of the system 10% Security engine scanning is passed Self-assessment total score = Σ(score of individual test × weight), with a maximum score of 100.

[0117] In another embodiment, an event-driven self-checking strategy: Self-checking is not a static process, but a security response mechanism that is initiated on demand and customized according to events. Different triggering events represent different security risk levels and usage scenarios, and the system should adjust the weight of detection items accordingly; add or delete detection items.

[0118] Example: After device reboot, the system focuses on verifying identity and firmware, ignoring network trustworthiness.

[0119] Triggering event: The device starts up for the first time after a power outage, malfunction, or manual restart. The detection items and weights are shown in Table 8. Table 8 Detection item Whether to execute Weight adjustment Reason explanation Identity authentication is passed Execute 45% Prevent illegal device impersonation; identity is most easily tampered with after restart. Firmware version is a secure version Execute 35% Prevent recovery after malicious flashing. There is no physical tampering alarm Execute 15% Check whether it is illegally disassembled. There is no abnormal process or virus behavior of the system Execute 5% There is no running data at the beginning of restart, so it is not evaluated temporarily. Alternatively, after the OTA upgrade is complete, force firmware and identity verification, and reduce the weight of other functions.

[0120] Triggering event: The firmware is downloaded and installed via OTA, and the device enters the "post-upgrade self-test" phase. The test items and their corresponding weights are shown in Table 9. Table 9 Detection item Whether to execute Weight adjustment Reason explanation Identity authentication is passed Execute 25% Verify whether the new firmware is a legal signature. Firmware version is a secure version Execute 50% Core detection item, prevent malicious firmware running. Network environment is trustworthy Execute 10% Used to judge whether to connect to a trustworthy upgrade channel. There is no physical tampering alarm Execute 15% Prevent physical interference during the upgrade process. In another embodiment, a scene-aware security policy The self-inspection process is not a fixed template with a "one-size-fits-all" approach, but rather dynamically adjusts the test items and weights based on the device's "operating scenario" or "usage environment." This mechanism achieves: matching security policies with actual risks; optimizing resource utilization; and maximizing response efficiency.

[0121] Example: Devices deployed in public areas → Enhance physical security and identity authentication, weaken network trust.

[0122] Scenario Description: Smart air conditioners are installed in public open areas such as shopping malls and subway stations. The equipment is exposed to the public eye and is easily touched or tampered with. The corresponding detection items and weights are shown in Table 10. Table 10 Detection item Whether to execute Weight adjustment Reason explanation Identity authentication is passed Execute 40% Prevent illegal device impersonation; identity is most easily forged in public areas. Firmware version is a secure version Execute 20% Prevent malicious flashing. There is no physical tampering alarm Execute 30% Focus on preventing the case from being illegally opened or the sensor from being disturbed. There is no abnormal process or virus behavior of the system Execute 10% Used to identify abnormal operation modes (such as frequent restarts). The equipment is deployed on a dedicated network within the factory → weakening identity authentication and strengthening network and behavioral analysis.

[0123] Scenario Description: The industrial PLC controller is deployed on a private local area network within the factory. The device is managed by designated personnel, and physical access is restricted. The corresponding detection items and weights are shown in Table 11. Table 11 Detection item Whether to execute Weight adjustment Reason explanation Identity authentication is passed Execute 10% The internal network has passed the firewall and access control, and identity authentication is not the primary risk. Firmware version is a secure version Execute 25% Still need to prevent malicious firmware injection. Network environment is trustworthy Execute 35% Focus on verifying whether it is connected to a factory special network (whitelist SSID / IP). There is no physical tampering alarm Execute 15% Still need to prevent illegal disassembly by internal personnel. There is no abnormal process or virus behavior of the system Execute 15% Used to detect abnormal instruction sequences (such as frequent start-stop during non-working hours). 3. Determine whether authorization is granted and the level of authorization: Multiple scoring thresholds can be set to correspond to different remote control permission levels, as shown in Table 6.

[0124] The authorization status can be set to have an expiration period (e.g., 24 hours), and a self-check is required after the expiration date.

[0125] 4. OTA upgrade linkage: After the firmware upgrade is completed, a full self-test process is forcibly triggered. If the test fails, remote control is prohibited to prevent unauthorized access after malicious flashing.

[0126] 5. Audit logs are uploaded to the blockchain: The following information is used to generate a structured log and written to a distributed ledger via a lightweight blockchain protocol (such as Hyperledger Fabric or IOTA Tangle): 1) Self-inspection time, device ID, and results of each test item; 2) Self-assessment total score and authorization level; 3) Authorization start and end times, operator identity (App account); 4) Firmware version change history.

[0127] It supports third-party auditing, security incident backtracking, and compliance verification.

[0128] The device remote control authorization system provided in this application upgrades the traditional "self-check" mechanism used for startup security to a "dynamic security gateway for remote control authorization," and introduces weighted scoring, hierarchical permission levels, OTA linkage, and blockchain evidence storage to form a closed-loop, intelligent, and auditable authorization decision system. It aims to solve the problems of low security, poor automation, coarse-grained permissions, and unreliable logs in existing remote control authorization mechanisms. It provides a remote control automatic authorization method and system based on multi-dimensional scoring of device self-checks, hierarchical permission levels, OTA linkage, and blockchain evidence storage, achieving an intelligent control experience of "security equals authorization, hierarchical execution, and process traceability" while meeting security and compliance requirements.

[0129] It is understood that the same or similar parts in the above embodiments can be referred to each other, and the contents not described in detail in some embodiments can be referred to the same or similar contents in other embodiments.

[0130] It should be noted that in the description of this application, the terms "first," "second," etc., are used for descriptive purposes only and should not be construed as indicating or implying relative importance. Furthermore, in the description of this application, unless otherwise stated, "a plurality of" means at least two.

[0131] Although embodiments of this application have been shown and described above, it is understood that the above embodiments are exemplary and should not be construed as limiting this application. Those skilled in the art can make changes, modifications, substitutions and variations to the above embodiments within the scope of this application.

Claims

1. A device remote control authorization method, characterized by, Comprising: acquiring target detection items when a preset event is triggered; executing the target detection items and obtaining a score of each target detection item; obtaining a self-check total score based on the score of each target detection item and a weight corresponding to each target detection item; determining whether to authorize remote control based on the self-check total score.

2. The method of claim 1, wherein: The acquiring target detection items when a preset event is triggered comprises: determining target detection items based on the event.

3. The method of claim 1, wherein: The acquiring target detection items when a preset event is triggered comprises: acquiring a running scenario or a use scenario of the device; determining target detection items based on the running scenario or the use scenario.

4. The method of claim 1, wherein, Further comprising: determining the weight corresponding to each target detection item based on the event.

5. The method of claim 1, wherein, Further comprising: acquiring a running scenario or a use scenario of the device; determining the weight corresponding to each target detection item based on the running scenario or the use scenario.

6. The method of claim 1, wherein: The determining whether to authorize remote control based on the self-check total score comprises: determining to prohibit authorizing remote control when the self-check total score is less than a first preset score; determining to authorize only monitoring type operations when the self-check total score is greater than or equal to the first preset score and less than a second preset score, the monitoring type operations comprising state checking and log reading; determining to allow authorizing remote control when the self-check total score is greater than or equal to the second preset score.

7. The method of claim 1, wherein, Further comprising: determining that a preset event is triggered when any of the following events occurs: the device is powered on; network connection is restored; a remote control request is received; firmware completes OTA upgrade; active request for remote control.

8. A device remote control authorization apparatus characterized by comprising: Comprising: a target detection item acquisition module, configured to acquire target detection items when a preset event is triggered; a target detection item execution module, configured to execute the target detection items and obtain a score of each target detection item; a self-check total score calculation module, configured to obtain a self-check total score based on the score of each target detection item and a weight corresponding to each target detection item; a remote control authorization module, configured to determine whether to authorize remote control based on the self-check total score.

9. An electronic device, comprising: Comprising: at least one processor and at least one memory; the memory stores executable instructions of the processor; the processor is configured to execute the method of any one of claims 1-7.

10. A device remote control authorization system, characterized by Comprising: applying the method of any one of claims 1-7.

Images