Terminal control method and system

Abstract

The invention discloses a terminal management and control method and system, and the method comprises the steps: a management and control server carries out the authentication, the management and control server caches one or more groups of authentication vectors obtained from an authentication center, and the authentication vectors are sequentially used according to the obtaining sequence of the authentication vectors during the authentication; the authentication vector comprises a plurality of control command tokens; after the authentication succeeds, the management and control server adopts a special command or a short message to carry out strategy issuing or management and control on the terminal, and the terminal is remotely controlled; the terminal receives the command issued by the management and control server, and if the corresponding operation is successfully executed, response success is replied; if the corresponding operation is not successfully executed, the reply response fails, and an error code is carried to indicate an error reason; and the management and control server displays the successfully responded terminals through an interface or presents the successfully responded terminals in a log form, and discards the currently used management and control command tokens. According to the invention, security management and control measures of the terminal management and control server on the terminal are realized; and a management and control strategy is designed, terminal management and control means are enriched, and safety requirements of users in different scenes are met.

Description

Technical Field

[0001] This application relates to the field of computer network technology, and in particular to a method and system for terminal management. Background Technology

[0002] PDT (Point of Demand) terminals and PoC (Proof of Construction) terminals are widely used in public safety, government private networks, emergency communications, and various industries related to national welfare and people's livelihoods. The issue of preventing terminal loss of control is closely related to system security. To improve terminal security, current terminal control methods include remote stunning and remote killing. However, existing control measures are simplistic and cannot meet the terminal security requirements of users in different scenarios.

[0003] Application content

[0004] This application provides a method and system for terminal management, designs an authentication scheme for the terminal management server, designs a dedicated management signaling channel, and implements security management measures for the terminal management server by transmitting management commands in short messages; it also designs management strategies to enrich terminal management methods and meet the security needs of users in different scenarios.

[0005] The first aspect of this application proposes a method for terminal control, including the following steps:

[0006] The management server authenticates the authentication process. It caches one or more authentication vectors obtained from the authentication center and uses them sequentially in the order they were obtained during authentication. The authentication vectors include multiple management command tokens.

[0007] After successful authentication, the management server uses dedicated commands or SMS messages to issue policies or manage the terminal, and remotely control the terminal; the terminal includes single-mode terminal and dual-mode terminal.

[0008] When a terminal receives a command from the management server, it will respond with a success message if the corresponding operation is successfully executed; otherwise, it will respond with a failure message, including an error code indicating the reason for the error.

[0009] The management server displays successful responses from terminals via an interface or through logs, and then discards the currently used management command token.

[0010] Furthermore, the management server uses dedicated commands or short messages to issue or manage policies to the terminals, including: directly issuing policy instructions or pre-configuring policy instructions in the terminals; wherein, the policy instructions are mapping tables or policy codes and related parameters.

[0011] Furthermore, when the control server issues a dedicated command, it carries a control token, the control command type, and the terminal address.

[0012] Furthermore, when the control server uses SMS to issue policies or control terminals, it designs control command headers in the SMS to represent different operation meanings, and sends the SMS using data encryption or plaintext.

[0013] Furthermore, the execution process of the policy instruction is as follows: set the monitoring information threshold of the terminal, compare the monitoring information with the preset monitoring information, and if the monitoring information threshold is exceeded, execute the control action; or compare the terminal with the built-in policy, and if the monitoring information threshold is exceeded, report the threshold alarm, and the control server receives the alarm and issues the control action; the monitoring information includes, but is not limited to, location information and time information.

[0014] Furthermore, the control actions include, but are not limited to, remote stunning, remote killing, and destruction of critical data.

[0015] Furthermore, if the control server does not receive a response from the terminal within a timeout period, the control server will resend the response command.

[0016] Furthermore, if the control server's control coverage area is within the PoC range, the control service function operates in PoC mode. Control commands are sent to the dual-mode terminal, and the terminal responds with actions or makes decisions. These actions only take effect in this mode.

[0017] Furthermore, if the control server's control coverage area is within the PDT range, the control service function operates in PDT private network mode. Control commands are sent to dual-mode terminals, and the terminals respond with actions or make decisions. These actions only take effect in this mode.

[0018] On the other hand, this application also proposes a system for implementing the above-mentioned terminal management method, including a terminal, a core network, and a management server, wherein the terminal is communicatively connected to the management server through the core network, wherein:

[0019] The terminal is a single-mode terminal or a dual-mode terminal, used to receive, execute and respond to management commands issued by the management server;

[0020] The core network is used to transmit control commands or response information between the control server and the terminal. The transmission channels include a dedicated control command channel and a short message channel. The core network includes, but is not limited to, SMS servers, dispatch consoles, and base stations.

[0021] The control server is used to issue policies or manage terminals using dedicated commands or short messages, and to remotely control the terminals.

[0022] The above-described technical solutions adopted in the embodiments of this application can achieve the following beneficial effects:

[0023] 1. Design a dedicated control signaling channel to implement security control measures for terminals by the terminal control server;

[0024] 2. Design a short message format to transmit control commands in short messages, thereby enabling the terminal control server to implement security control measures on the terminal;

[0025] 3. Design control strategies and enrich terminal control methods to meet users' security needs in different scenarios;

[0026] 4. Design an authentication scheme for the terminal management server to improve system security. Attached Figure Description

[0027] The accompanying drawings, which are included to provide a further understanding of this application and form part of this application, illustrate exemplary embodiments and are used to explain this application, but do not constitute an undue limitation of this application. In the drawings:

[0028] Figure 1 This is a schematic diagram of the single-mode terminal control and communication network structure of this application;

[0029] Figure 2 This is a schematic diagram of the dual-mode terminal control and communication network structure of this application;

[0030] Figure 3 This is a flowchart of the authentication process for the control server in this application;

[0031] Figure 4 This is a flowchart illustrating the overall communication process between the terminal and the management server in this application.

[0032] Figure 5 A flowchart illustrating the process of using dedicated commands to issue or manage policies for the control server in this application;

[0033] Figure 6 This is a flowchart illustrating how the management server in this application uses SMS to distribute or manage policies. Detailed Implementation

[0034] To make the objectives, technical solutions, and advantages of this application clearer, the technical solutions of this application will be clearly and completely described below in conjunction with specific embodiments and corresponding drawings. Obviously, the described embodiments are only a part of the embodiments of this application, and not all of them. Based on the embodiments in this application, all other embodiments obtained by those skilled in the art without creative effort are within the scope of protection of this application.

[0035] The technical solutions provided by the various embodiments of this application are described in detail below with reference to the accompanying drawings.

[0036] Example 1

[0037] This application proposes a method for terminal management, including the following steps:

[0038] Step 1, as follows Figure 3 As shown, authentication is first performed by the management server. The management server caches one or more authentication vectors obtained from the authentication center, and these vectors are used sequentially during authentication in the order they were obtained. Each authentication vector includes multiple management command tokens. Once any token in a set of authentication vectors is used, all tokens in that set become invalid. A new set of authentication vectors must be used if a new management operation is required.

[0039] Step 2, as follows Figure 4 As shown, after successful authentication, the management server uses dedicated commands or SMS messages to issue policies or manage the terminal, enabling remote control of the terminal; the terminal includes single-mode and dual-mode terminals. Policy commands are either directly issued or pre-configured in the terminal; these policy commands are mapping tables or policy codes and related parameters, such as location control and time control. Table 1 is used as an example of a mapping table.

[0040] Table 1 Mapping Table

[0041] Mapping Number meaning 1 Authorized activity areas, such as electronic fences. 2 For example, turn on the computer at 7 a.m. and turn it off at midnight.

[0042] (1) As Figure 5 As shown, when the management server uses dedicated commands to issue policies or perform management, the management commands carry a management token, the management command type (e.g., destroy data), and the terminal address (which can be a single device address, a group device address, or a broadcast address). Application layer commands can be modified with reference to the existing PDT interconnection standard pSIP protocol.

[0043] The air interface control commands between the terminal and the PDT base station can be expanded or redesigned based on the existing PDT C_STUNKILL command. Each control command can be designed separately or similar commands can be designed as a whole.

[0044] Taking PDT as an example, the following table shows the command format. Any changes made based on this format are also within the scope of this patent protection.

[0045] Table 2

[0046]

[0047] (2) Figure 6 As shown, when the control server and terminal issue commands based on the existing SMS method, a control command header is designed in the SMS to represent different operation meanings. The control commands can be issued to the terminal using either data encryption or plaintext methods.

[0048] Taking the air interface between the terminal and the PDT network as an example, control action commands are designed in the UDT data packets (UDTDD1 and UDTD2). For example, in UDTD, 4 bits are specified to represent the control command GKcmd, and the other bits follow the existing standard PDT protocol. To provide reliable transmission, the control server can retransmit, for example, three times.

[0049] Step 3: Upon receiving the command from the management server, if the terminal successfully executes the corresponding operation, it replies with a success response; if the operation fails, it replies with a failure response, carrying an error code indicating the reason for the error, such as invalid request or invalid user. Furthermore, if no response is received within a timeout period, the management server can resend the command, for example, three times. If the command is sent to a group address, the management server will still send the command according to the group address and record and store the terminals that have responded.

[0050] The execution flow of the policy instructions is as follows: A monitoring information threshold is set for the terminal. The management server compares this threshold with pre-set monitoring information. If the threshold is exceeded, a control action is executed. Alternatively, the terminal compares its location with a built-in policy. If the threshold is exceeded, an alarm is reported. The management server receives the alarm and issues a control action. Monitoring information includes, but is not limited to, location and time information. For example, the policy may require each terminal to operate only within a designated area; exceeding this area triggers an action from the management server. The terminal reports its location based on the existing PDT standard. The terminal management server compares this location with pre-set monitoring information. If the location exceeds the out-of-area threshold, a control action is executed. Alternatively, the terminal can compare its location with a built-in policy. If the location exceeds the activity range, an out-of-area location alarm is reported. The management server receives the alarm and issues a control action. Control actions include, but are not limited to, remote stunning, remote killing, and destruction of critical data.

[0051] Step 4: The management server displays the successful response terminal through the interface or in the form of logs, and discards the currently used management command token.

[0052] Additionally, if the management server's coverage area is within the PoC (Proof of Concept) range, the management service function operates in PoC mode. Management commands are issued to dual-mode terminals, and the terminals respond with actions or make decisions, which only take effect in this mode. If the management server's coverage area is within the PDT (Private Domain) range, the management service function operates in PDT private network mode. Management commands are issued to dual-mode terminals, and the terminals respond with actions or make decisions, which only take effect in this mode. The interaction between the terminal and the management server is similar to that of a single-mode PDT terminal.

[0053] Example 2

[0054] like Figure 1 , 2As shown, this application proposes a system for implementing the above-described terminal management method, comprising a terminal, a core network, and a management server. The terminal is communicatively connected to the management server through the core network, wherein:

[0055] The terminal can be a single-mode terminal or a dual-mode terminal, used to receive, execute, and respond to management commands issued by the management server;

[0056] The core network is used to transmit control commands or response information between the control server and the terminal. The transmission channels include dedicated control command channels and short message channels. The core network includes, but is not limited to, SMS servers, dispatch consoles, and base stations.

[0057] A management server is used to issue policies or manage terminals remotely using dedicated commands or short messages.

[0058] If the terminal type is a dual-mode terminal, such as a PDT+PoC terminal, the terminal management server can be a converged server, or it can be divided into a PDT management server and a PoC management server. The PDT and PoC core networks can be a converged core network or a PDT core network and a PoC core network. The dual-mode terminal management message flow is the same as that for single-mode terminals. The terminal management server realizes information exchange with the dispatch console through the X1 interface, which can be based on the existing pSIP interface.

[0059] The above are merely embodiments of this application and are not intended to limit the scope of this application. Various modifications and variations can be made to this application by those skilled in the art. Any modifications, equivalent substitutions, improvements, etc., made within the spirit and principles of this application should be included within the scope of the claims of this application.

Claims

1. A method for terminal management and control, characterized by, The method comprises the following steps: The management and control server authenticates, caches one or more authentication vectors obtained from an authentication center, and uses the authentication vectors in the order of acquisition when authenticating; the authentication vector comprises a plurality of management and control command tokens; After successful authentication, the management and control server uses a special command or a short message to issue a policy or perform management and control on the terminal, and remotely controls the terminal; the terminal comprises a single-mode terminal and a dual-mode terminal; After receiving the command issued by the management and control server, the terminal replies with a successful response if the corresponding operation is successfully executed, or replies with a failed response and carries an error code to indicate the error reason if the corresponding operation is not successfully executed; The management and control server displays the terminal with a successful response through an interface or presents it in the form of a log, and discards the currently used management and control command token.

2. The method of claim 1, wherein, The management and control server uses a special command or a short message to issue a policy or perform management and control on the terminal, which comprises directly issuing a policy instruction or pre-configuring a policy instruction in the terminal; the policy instruction is a mapping table or a policy code and related parameters.

3. The method of claim 1 or 2, wherein, When the management and control server issues a special command, it carries a management and control token, a management and control command type, and a terminal address.

4. The method of claim 1 or 2, wherein, When the management and control server uses a short message to issue a policy or perform management and control on the terminal, it designs a management and control command data header in the short message to represent different operation meanings, and sends the short message in a data encryption mode or a plaintext mode.

5. The method of claim 2, wherein, The execution process of the policy instruction is specifically setting a monitoring information threshold of the terminal, comparing the monitoring information of the management and control server with the preset monitoring information, executing a management and control action if the monitoring information threshold is exceeded, or comparing the terminal with the built-in policy, reporting an alarm if the monitoring information threshold is exceeded, and the management and control server receiving the alarm and issuing a management and control action; the monitoring information includes but is not limited to location information and time information.

6. The method of claim 5, wherein, The management and control action includes but is not limited to remote stun, remote kill, and destruction of key data.

7. The method of claim 1, wherein, If the management and control server does not receive a reply from the terminal within a timeout period, the management and control server repeatedly sends a response command.

8. The method of claim 1, wherein, If the management and control server management and control coverage area is within the PoC range, the management and control service function works in the PoC mode, the management and control command is issued to the dual-mode terminal, the terminal responds to the action, or the terminal makes a decision that only works in this mode.

9. The method of claim 1, wherein, If the management and control server management and control coverage area is within the PDT range, the management and control service function works in the PDT private network mode, the management and control command is issued to the dual-mode terminal, the terminal responds to the action, or the terminal makes a decision that only works in this mode.

10. A system for implementing the method of terminal management according to any one of claims 1 to 9, characterized in that, The method comprises a terminal, a core network, and a management and control server, wherein the terminal is connected to the core network and the management and control server in communication; The terminal is a single-mode terminal or a dual-mode terminal, and is used to receive, execute, and respond to the management and control command issued by the management and control server; The core network is used to transmit the management and control command or response information between the management and control server and the terminal, and the transmission channel comprises a special management and control command channel and a short message channel; the core network includes but is not limited to a short message server, a dispatching station, and a base station; The management and control server is used to issue a policy or perform management and control on the terminal using a special command or a short message, and remotely controls the terminal.

Images