Control method, control device, and display device

Abstract

The application provides a control method, a control device and a display device, and relates to the technical field of intelligent terminals. The method comprises the following steps: determining at least one control instruction, wherein the at least one control instruction is used for triggering function limitation of a terminal device; determining at least one configuration information associated with the at least one control instruction according to the at least one control instruction, wherein the at least one configuration information is used for indicating peripherals and / or applications of the terminal device, and the peripherals and / or the applications are used for realizing functions; and limiting use of at least one function of the terminal device according to the at least one configuration information. Based on the method, peripherals access or function opening of the terminal device can be flexibly controlled in different application scenarios, and the terminal device is protected in different degrees of security.

Description

Technical Field

[0001] This application relates to the field of smart terminal technology, and more specifically, to control methods, control devices, and display devices. Background Technology

[0002] As display devices become increasingly sophisticated, the same model can be used in a variety of scenarios. However, the same model of display device has different requirements for security, privacy, and functionality in different application scenarios. Therefore, it is crucial to adaptably and flexibly control the access to peripherals or the opening of functions for display devices in different application scenarios, and to provide different levels of security protection for display devices. Summary of the Invention

[0003] This application provides a control method, control device, and display device, which can flexibly control the peripheral access or function opening of terminal devices in different application scenarios and provide different levels of security protection for terminal devices.

[0004] In a first aspect, a control method is provided, the method comprising: determining at least one control instruction for triggering functional restrictions on a terminal device; determining at least one configuration information associated with the at least one control instruction, the at least one configuration information for instructing peripherals and / or applications of the terminal device for implementing functions; and restricting the use of at least one function of the terminal device according to the at least one configuration information.

[0005] In conjunction with the first aspect, in some implementations of the first aspect, the at least one control instruction includes a first control instruction, which is used to trigger communication between a peripheral device that meets the first condition and the terminal device; at least one configuration information includes first configuration information, which is used to indicate a peripheral device that meets the first condition; the first condition includes device identification information of the peripheral device and / or file identification information of a target file, the target file being stored in the peripheral device; and at least one peripheral device that does not meet the first condition is prohibited from communicating with the terminal device.

[0006] In conjunction with the first aspect, in some implementations of the first aspect, the aforementioned terminal device is connected to the first peripheral device through a first external interface. If the first peripheral device does not meet the first condition, power supply to the first peripheral device is stopped through the first external interface.

[0007] In conjunction with the first aspect, in some implementations of the first aspect, the aforementioned terminal device includes a first functional interface, which is used to implement the function of a first peripheral device. If the first peripheral device does not meet the first condition, the first functional interface of the terminal device is closed.

[0008] In conjunction with the first aspect, in some implementations of the first aspect, in response to an event of the first peripheral being inserted into the terminal device, a first control instruction is triggered; the first configuration information is read, and it is determined whether the first configuration information is empty; if the first configuration information is configured with a peripheral that meets the first condition, it is determined whether the first peripheral meets the first condition; if the first peripheral does not meet the first condition, communication between the first peripheral and the terminal device is prohibited.

[0009] In conjunction with the first aspect, in some implementations of the first aspect, the at least one control instruction includes a second control instruction, which is used to trigger a prohibition on communication between a peripheral device that meets the second condition and the terminal device; at least one configuration information includes second configuration information, which is used to indicate a peripheral device that meets the second condition; the second condition includes device identification information of the peripheral device; and at least one peripheral device that meets the second condition is prohibited from communicating with the terminal device.

[0010] In conjunction with the first aspect, in some implementations of the first aspect, the aforementioned terminal device is connected to the second peripheral device through a second external interface, and the second peripheral device meets the second condition, thus stopping the supply of power to the second peripheral device through the second external interface.

[0011] In conjunction with the first aspect, in some implementations of the first aspect, the aforementioned terminal device includes a second functional interface, which is used to implement the function of a second peripheral device. When the second peripheral device meets the second condition, the second functional interface of the terminal device is closed.

[0012] In conjunction with the first aspect, in some implementations of the first aspect, the aforementioned terminal device is connected to the second peripheral device, and in response to the startup of the terminal device, a second control command is triggered; the second configuration information is read, and it is determined whether the second configuration information is empty; if the second configuration information is configured with a peripheral device that meets the second condition, it is determined whether the second peripheral device meets the second condition; if the second peripheral device meets the second condition, communication between the second peripheral device and the terminal device is prohibited.

[0013] In conjunction with the first aspect, in some implementations of the first aspect, at least one control instruction includes a third control instruction, which is used to trigger a peripheral device that meets a third condition to execute a first service; at least one configuration information includes third configuration information, which is used to indicate a peripheral device that meets the third condition; the third condition includes the peripheral device identification information and / or the target file file identification information, the target file being stored on the peripheral device; peripheral devices that do not meet the third condition are prohibited from executing the first service.

[0014] In conjunction with the first aspect, in some implementations of the first aspect, in response to the event of the first peripheral device being inserted into the terminal device, a third control instruction is triggered; the third configuration information is read, and it is determined whether the third configuration information is empty; if the third configuration information is configured with a peripheral device that meets the third condition, it is determined whether the first peripheral device meets the third condition; if the first peripheral device does not meet the third condition, the first peripheral device is prohibited from performing the first service.

[0015] In conjunction with the first aspect, in some implementations of the first aspect, at least one control instruction includes a fourth control instruction, which is at least used to trigger a second service, and at least one configuration information includes a fourth configuration information, which is at least used to instruct a first application to complete the second service. Based on at least one control instruction and at least one configuration information, during the execution of the second service by the first application, at least one instruction unrelated to the second service is ignored.

[0016] In conjunction with the first aspect, in some implementations of the first aspect, in response to the startup of the terminal device, a fourth control instruction is triggered; fourth configuration information is read, the fourth configuration information including a first application and a second service, and the terminal device is controlled to ignore at least one instruction unrelated to the second service while the first application is executing the second service.

[0017] In a second aspect, a control device is provided, comprising a module or unit for performing a method in any possible implementation of the method design of the first aspect.

[0018] Thirdly, a control device is provided, including a processor and a memory, wherein the processor and the memory are connected, wherein the memory is used to store program code, and the processor is used to call the program code to execute the method in any possible implementation of the method design of the first aspect above.

[0019] Fourthly, a display device is provided, including any one of the control devices described in the second or third aspect above.

[0020] Fifthly, a computer-readable storage medium is provided storing a computer program that is executed by a processor to implement the method in any possible implementation of the method design of the first aspect.

[0021] In a sixth aspect, a computer program product is provided, including instructions that, when executed by a processor, cause a computer to perform any possible implementation of the method design of the first aspect described above. Attached Figure Description

[0022] Figure 1 This is a flowchart illustrating a control method 100 proposed in an embodiment of this application;

[0023] Figure 2 This is a schematic diagram of a graphical interface for determining first configuration information proposed in an embodiment of this application;

[0024] Figure 3 This is a flowchart illustrating a control method 300 proposed in an embodiment of this application;

[0025] Figure 4 This application provides a schematic diagram of the business process of a USB flash drive lock.

[0026] Figure 5 This is a schematic diagram of a graphical interface for determining second configuration information proposed in an embodiment of this application;

[0027] Figure 6 This is a flowchart illustrating a control method 600 proposed in an embodiment of this application;

[0028] Figure 7 This is a flowchart illustrating a control method 700 proposed in an embodiment of this application;

[0029] Figure 8 This is a schematic diagram illustrating the operation process of flashing a terminal device via a USB flash drive, as proposed in an embodiment of this application.

[0030] Figure 9 This is a flowchart illustrating a control method 900 proposed in an embodiment of this application;

[0031] Figure 10 This application provides a schematic diagram of the operation process for powering on a terminal device.

[0032] Figure 11 This is a schematic diagram of the button event response of the Home button according to an embodiment of this application;

[0033] Figure 12 This is a schematic block diagram of a control device 1200 provided in an embodiment of this application. Detailed Implementation

[0034] The technical solutions in this application will now be described with reference to the accompanying drawings.

[0035] This application will present various aspects, embodiments, or features relating to a system comprising multiple devices, components, modules, etc. It should be understood and appreciated that individual systems may include additional devices, components, modules, etc., and / or may not include all the devices, components, modules, etc. discussed in conjunction with the accompanying drawings. Furthermore, combinations of these approaches are also possible.

[0036] Furthermore, in the embodiments of this application, the words "exemplary," "for example," etc., are used to indicate that they are examples, illustrations, or descriptions. Any embodiment or design scheme described as "exemplary" in the embodiments of this application should not be construed as being better or more advantageous than other embodiments or design schemes. Specifically, the use of the term "exemplary" is intended to present the concept in a concrete manner.

[0037] The business scenarios described in the embodiments of this application are for the purpose of more clearly illustrating the technical solutions of the embodiments of this application, and do not constitute a limitation on the technical solutions provided in the embodiments of this application. As those skilled in the art will know, with the evolution of technology and the emergence of new business scenarios, the technical solutions provided in the embodiments of this application are also applicable to similar technical problems.

[0038] References to "one embodiment" or "some embodiments" as described in this specification mean that one or more embodiments of this application include a specific feature, structure, or characteristic described in connection with that embodiment. Therefore, the phrases "in one embodiment," "in some embodiments," "in other embodiments," "in still other embodiments," etc., appearing in different parts of this specification do not necessarily refer to the same embodiment, but rather mean "one or more, but not all, embodiments," unless otherwise specifically emphasized. The terms "comprising," "including," "having," and variations thereof mean "including but not limited to," unless otherwise specifically emphasized.

[0039] In this application embodiment, "at least one" refers to one or more, and "more than one" refers to two or more. "And / or" describes the relationship between related objects, indicating that three relationships can exist. For example, A and / or B can represent: A alone, A and B simultaneously, and B alone, where A and B can be singular or plural. The character " / " generally indicates that the preceding and following related objects are in an "or" relationship. "At least one of the following" or similar expressions refer to any combination of these items, including any combination of single or plural items. For example, at least one of a, b, or c can represent: a, b, c, ab, ac, bc, or abc, where a, b, and c can be single or multiple.

[0040] As display devices become increasingly sophisticated, the same model of display device can be used in a variety of scenarios. However, in different application scenarios, the same model of display device has different requirements for security, privacy, and other functionalities.

[0041] For example, in scenarios with high privacy requirements, display devices are generally required to prevent the connection and operation of peripherals such as wireless communication (e.g., WiFi, Bluetooth), camera capture, microphone capture, and USB flash drive access. However, most standard display devices currently in production include these components and functionalities. Users typically disassemble these devices manually, a complex process that is difficult to reverse, and can introduce systemic problems, leading to instability. Furthermore, some display devices use authorization mechanisms to meet personalized user needs. After a peripheral is connected, the device requests access permissions, allowing the user to choose which peripherals are allowed. However, this authorization mechanism requires the peripheral to be electrically connected to the display device, necessitates manual intervention, and is susceptible to being bypassed. Therefore, this authorization mechanism still presents security risks.

[0042] For example, in scenarios with singular requirements, such as displaying images or video information solely through a display device, the device only needs to perform the signal source display function, and this function should not be interrupted or affected by other services. However, in most standard display devices currently in production, both in the hardware and software design phase and in the factory production phase, most display devices include multiple application functions. When the display device is performing a single function, the user needs to manually monitor it to prevent accidental touches by the display device controller, ensuring that the single function performed by the display device is not affected by the terminal or other factors.

[0043] Therefore, in order to meet the needs in the examples above, users usually need to customize the software or adjust the hardware after receiving the display device, which leads to the inability to unify the software and hardware of the same product and make it impossible to maintain and upgrade.

[0044] Furthermore, the same display device may be used in different scenarios. If the corresponding components are removed in order to meet the needs of a certain scenario, the display device may not be able to be used normally in other scenarios.

[0045] In view of this, embodiments of this application propose a control method, control device, and display device, which can flexibly control the peripheral access or function opening of terminal devices in different application scenarios and provide different levels of security protection for terminal devices.

[0046] Figure 1 This is a flowchart illustrating a control method 100 proposed in an embodiment of this application.

[0047] This method 100 can be applied to a terminal device, which can be a display device, such as a television set, monitoring screen, independent monitor, laptop computer, tablet computer, smartphone, or other device with image display and sound output functions. It can also be other types of terminal devices. This method 100 may include the following steps:

[0048] S110: Determine at least one control instruction, which is used to trigger a functional restriction on the terminal device.

[0049] In some possible embodiments, the above-mentioned functional restrictions on the terminal device may be to restrict the access of peripheral devices, such as prohibiting the access of some peripheral devices or interrupting the connection between the terminal device and some peripheral devices; or the above-mentioned functional restrictions on the terminal device may be to restrict the functions of the accessed peripheral devices, such as disabling some functions of the peripheral devices; or the above-mentioned functional restrictions on the terminal device may be to restrict the functions of the terminal device itself, such as disabling some functions of the terminal device.

[0050] The peripherals used to access the terminal device can be connected to the terminal device through a physical interface or other physical device, or they can be connected to the terminal device through a virtual interface (such as an air interface).

[0051] In some possible embodiments, the aforementioned control command can be an explicit control command, such as a control command directly input by the user to the terminal device through a control terminal; or it can be triggered implicitly, such as when a power-on command is received, the system defaults to treating the power-on command as the aforementioned control command. Therefore, the aforementioned control command can be generated internally by the terminal device, for example, through a corresponding configuration application. Based on whether the user's configuration in the configuration application restricts the corresponding functions of the terminal device, if the configuration is yes, then at least one of the aforementioned control commands is generated, thereby determining the at least one control command.

[0052] S120: Based on at least one control instruction, determine at least one configuration information associated with at least one control instruction, the at least one configuration information being used to indicate peripherals and / or applications of the terminal device, the peripherals and / or applications being used to implement functions.

[0053] In some possible embodiments, the above configuration information may be used to indicate peripherals that are allowed to access, or to indicate peripherals that are prohibited from access, or to indicate open functions, or to indicate the restricted form of functions.

[0054] In some possible embodiments, the above configuration information may be pre-configured.

[0055] In some possible embodiments, the above configuration information can be stored locally on the terminal device, or, without restricting the wireless communication function of the terminal device, the above configuration information can also be stored in a cloud server or other storage device. After triggering the above S110, the terminal device can be controlled to obtain the configuration information from the cloud server or other storage device.

[0056] Considering that different configuration information may correspond to different functional restrictions for terminal devices, this application proposes to associate different configuration information with different control commands. When a control command is determined, the configuration information associated with the control command can be searched, and then the following operations can be performed based on the configuration information.

[0057] S130: Based on at least one configuration information, restrict the use of at least one function of the terminal device.

[0058] The introduction of configuration information allows for the determination of whether a peripheral device can be allowed to connect when the terminal device connects to a peripheral device, based on the configuration information, rather than temporarily enabling an authorization mechanism and directly asking the user for authorization. This not only simplifies operation and avoids manual intervention, but also ensures that the control of peripheral device access or application function activation is based on configuration information, not on authorization requests triggered at the software level. Therefore, this control flow is a low-level system mechanism, making it difficult to bypass and highly secure.

[0059] In some possible embodiments, prior to S110, the following operation may be performed: determining at least one configuration information to ensure the normal execution of S110 to S130. The method for determining at least one configuration information is detailed in subsequent embodiments.

[0060] In some possible embodiments, when at least one control instruction is determined, the corresponding configuration information can be retrieved. If the retrieval result is that the corresponding configuration information is not found, an error message can be returned and displayed to the user through the display interface, instructing the user to determine the corresponding configuration information.

[0061] In some possible embodiments, taking the peripheral device accessing the terminal device as an example, when an event of a peripheral device accessing the terminal device is detected, it is checked whether at least one of the above-mentioned control instructions has been determined. If at least one of the above-mentioned control instructions is determined, at least one of the above-mentioned configuration information is checked, and then it is determined whether the peripheral device is allowed to access based on the at least one configuration information.

[0062] Based on the above technical solution, configuration information is introduced into the terminal device, enabling the terminal device to allow the access of specified peripherals and the opening of specified applications based on the user's personalized configuration. This allows for flexible control over the access of peripherals or the opening of functions on the terminal device, and provides different levels of security protection for the terminal device.

[0063] The aforementioned control commands can be used to define the meaning of the content recorded in the configuration information, and different meanings can correspond to different control methods. The following further explains the control methods proposed in this application embodiment through the different contents indicated by four control commands.

[0064] In some possible embodiments, the at least one control instruction may include a first control instruction, which instructs a peripheral device that meets a first condition to communicate with the terminal device. The at least one configuration information may include first configuration information, which instructs a peripheral device that meets the first condition. The first condition includes device identification information of the peripheral device and / or file identification information of a target file stored on the peripheral device. Based on this, S130 can be implemented by prohibiting at least one peripheral device that does not meet the first condition from communicating with the terminal device.

[0065] In some possible embodiments, when the first condition includes the device identification information of the peripheral device, the first configuration information may correspondingly record the device identification information of the corresponding peripheral device; when the first condition includes the device identification information of the peripheral device and the file identification information of the target file, the first configuration information may correspondingly record the device identification information of the corresponding peripheral device and the file identification information of the target file. The device that satisfies the first condition refers to the device whose device identification information is recorded in the first configuration information, or the device whose file identification information of the stored file is recorded in the first configuration information, or the device whose device identification information and the file identification information of the stored file are both recorded in the first configuration information.

[0066] In some possible embodiments, the device identification information mentioned in the embodiments of this application may be the device number of the peripheral device, or other information that serves an identification function, and the same applies to the file identification information.

[0067] In some possible embodiments, the device identification information mentioned in the embodiments of this application can be used to indicate a type of device, such as a device of a specified model. Similarly, the file identification information can be used to indicate a type of file, such as a file of a specified type, such as text, images, or videos.

[0068] For example, the aforementioned first configuration information includes the identification information of USB flash drives 1, 2, and 3. When the received control command is the first control command, then, combining the content of the first control command and the first configuration information, it can be seen that the terminal device needs to be controlled to only allow at least one of USB flash drives 1, 2, and 3 to connect and perform corresponding function access. If the peripheral connected to the terminal device is USB flash drive 4, then based on the aforementioned method 100, USB flash drive 4 is prohibited from connecting to the terminal device, so USB flash drive 4 cannot cooperate with the terminal device to complete the corresponding basic functions, such as data transmission.

[0069] In some possible embodiments, the first condition mentioned above includes the device identification information of the peripheral device and the file identification information of the target file, which means that not only the access peripheral device itself is restricted, but also the files stored on the peripheral device are restricted.

[0070] In some possible embodiments, the device identification information included in the first condition above can be multiple, and correspondingly, one device identification information can correspond to one or more file identification information.

[0071] In some possible embodiments, a device identification information may correspond to multiple file identification information as at least part of the first condition.

[0072] For example, taking a USB flash drive as an example, the first condition includes USB flash drive 1 (device identification information) and target file 1 (file identification information). Correspondingly, the content of the first condition can be recorded in the first configuration information. This means that the current terminal device can only interact with USB flash drive 1 regarding target file 1.

[0073] In some possible embodiments, when the terminal device is connected to the first peripheral device via an external interface and the first peripheral device does not meet the first condition, the connection access of the first peripheral device to the terminal device can be prohibited by stopping the power supply to the first peripheral device via the external interface.

[0074] In some possible embodiments, when the terminal device includes a first functional interface for implementing the function of a first peripheral device, and the first peripheral device does not meet the first condition, the connection access of the first peripheral device to the terminal device can be prohibited by disabling the first functional interface of the terminal device.

[0075] In this application embodiment, the external interface can be a physical interface or a virtual interface; the first functional interface mentioned in this application embodiment can be a system interface of the terminal device.

[0076] In some possible embodiments, taking an Android-based terminal device as an example, peripherals and the Android motherboard of the terminal device can be connected via various interfaces (such as a universal serial bus interface). Simultaneously, the Android motherboard can control the power supply of the peripherals via general purpose input / output (GPIO) ports. Furthermore, peripherals used to connect to the terminal device are typically designed without independent power supplies; therefore, they rely on the terminal device's power supply to perform their functions. Based on this, when the control method 100 proposed in this application determines that the first peripheral does not meet the first condition, the power supply to the first peripheral can be turned off via the GPIO interface, thereby disconnecting the connection between the terminal device and the peripheral.

[0077] In some possible embodiments, taking an Android-based terminal device as an example, the Android system has control switches for each function of the terminal device. These control switches can be some enableable function interfaces of the Android system. If the control switch of the corresponding function is turned off, for example, by setting the field used to control the enable of the corresponding function interface to no, the terminal device will naturally be unable to execute the corresponding function during operation, and thus will not have the opportunity to interact with the peripheral device of the corresponding function, thereby achieving isolation between the terminal device and the peripheral device.

[0078] In some possible embodiments, taking an Android-based terminal device as an example, the Android system can control access to different functions through different management service modules. Taking a USB flash drive as an example, the storage management service module in the Android system can be used to manage the mounting and unmounting of storage devices, as well as storage-related notifications and other functions. Therefore, when the USB flash drive meets the first condition, after connecting to the terminal device, it can be mounted to the Android system based on the aforementioned storage management service, enabling communication between the terminal device and the USB flash drive. When the USB flash drive does not meet the first condition, after connecting to the terminal device, it will not be mounted to the Android system based on the aforementioned storage management service, preventing communication between the terminal device and the USB flash drive and effectively disabling it. Of course, for a USB flash drive already mounted to the terminal device, if it is deleted from the first configuration information at some point, thus preventing it from meeting the first condition, the aforementioned storage management service can then unmount the USB flash drive currently mounted to the Android system.

[0079] In some possible embodiments, if the first device meets the first condition, then the first device is allowed to establish communication with the terminal device and the corresponding functions of the terminal device are enabled.

[0080] Based on the above technical solutions, it is possible to flexibly control the peripheral access or function opening of terminal devices and provide different levels of security protection for terminal devices.

[0081] In some possible embodiments, the first condition described above may also include other information, such as a field for a certain permission level, which may allow peripheral devices that include the permission level field to access the terminal device, or allow peripheral devices that include a field with a higher permission level to access the terminal device.

[0082] In some possible embodiments, the first control instruction may include an identifier of the first configuration information. Therefore, after determining the first control instruction, the first configuration information can be locked, and the peripheral access control described above can be completed based on the first configuration information.

[0083] In some possible embodiments, the first configuration information can be determined by: obtaining a first configuration instruction, which is used to determine the first configuration information, the first configuration instruction including the content of a first condition, and then writing the content of the first condition into the first configuration information.

[0084] For ease of understanding, the following uses a USB flash drive as an example to illustrate one method for determining the first configuration information. Based on the control method 100 of this application embodiment, the USB flash drive lock function of the terminal device can be implemented, so the determination of the first configuration information can be achieved through the application of the USB flash drive lock function.

[0085] Figure 2 This is a graphical interface illustration of a method for determining first configuration information, as proposed in an embodiment of this application.

[0086] This embodiment assumes that the first condition includes the device identification information of the peripheral device and the file identification information of the target file. Taking a USB flash drive as an example, the device identification information is the USB flash drive name, and the file identification information is the file name. (See reference...) Figure 2 As shown, the graphical interface may include:

[0087] The USB flash drive lock status bar is used to indicate whether the USB flash drive lock is open. If it is open, it means that the Android system has enabled access restrictions on peripheral devices of the access terminal device based on the control method 100 proposed in the embodiments of this application. If it is closed, it means that the Android system does not restrict peripheral devices from accessing the terminal device.

[0088] In some possible embodiments, if the USB flash drive lock is opened, the first control command will be generated to trigger subsequent operations to restrict the functions of the terminal device; if the USB flash drive lock is closed, the first control command will not be generated.

[0089] The USB flash drive name field is used to display the USB flash drive name included in the first condition, i.e., the device identification information.

[0090] The file name field is used to display the file name included in the first condition, i.e., the file identification information. If no USB drive is currently inserted, the file name field may not display the file name.

[0091] Therefore, it can be seen that users can... Figure 2 The graphical interface shown allows you to set the first configuration information and generate the first control command.

[0092] exist Figure 2 In the example shown, the first condition includes a device identification information, namely USB flash drive 1, and includes multiple device identification information, namely file 1 to file 10.

[0093] Since the number of files is greater than one, users can choose to restrict the use of certain files. Therefore, there is a selection control in the file name field. Lighting up this control indicates that the control terminal device can establish a communication connection with the USB drive containing the file corresponding to the lit control.

[0094] So, based on Figure 2 As shown, under the current configuration, it means that the control terminal device can only establish a communication connection with USB flash drive 1, which includes file 4.

[0095] Furthermore, the graphical interface also includes a confirmation control. Upon detecting a click event of this confirmation control, the content indicated by the graphical interface is used as a first condition to obtain the aforementioned first configuration instruction. If first configuration information is detected, the content of the first configuration information is updated based on the first configuration instruction, replacing it with the currently configured content. If no first configuration information is detected, first configuration information is created, and the content of the current first configuration instruction is written into the first configuration information. In this example, the first configuration information includes USB flash drive 1 and file 4. When a USB flash drive containing file 4 and with device identification information of USB flash drive 1 is connected to the terminal device, the USB flash drive is allowed to establish a communication connection with the terminal device.

[0096] In some possible embodiments, the graphical interface described above may also include a keypad for verifying the operation of disabling the USB drive lock; the USB drive lock can only be disabled after successful verification.

[0097] For example, when the USB drive lock is enabled, if no USB drive name or file name is configured, the USB drive lock can be directly deactivated when it is disabled. If a USB drive name or file name has been set, when it is disabled, if the USB drive currently inserted into the terminal device is USB drive 1 containing file 4, the USB drive lock can be deactivated. If USB drive 1 containing file 4 is not currently inserted into the terminal device, a password can be entered via the keypad. After successful password verification, the USB drive lock can be deactivated.

[0098] For example, the USB drive lock can be enabled without configuring a USB drive name or file name. In this state, any USB drive subsequently inserted into the terminal device will not be allowed access. If a USB drive name is configured, only USB drives with that specified name can establish a communication connection with the terminal device. If a USB drive name is configured along with a file name, only USB drives with the specified name including the specified file can establish a communication connection with the terminal device.

[0099] In some possible embodiments, based on the first control command and the first configuration file described above, the functional control of the terminal device regarding the first peripheral can be achieved through the following detailed operations.

[0100] Figure 3 This is a flowchart illustrating a control method 300 proposed in an embodiment of this application. The control method 300 is implemented based on the control method 100 described above and is one implementation of step S130.

[0101] S310: In response to the event of the first peripheral device being inserted into the terminal device, determine whether the first control instruction is triggered; if the first control instruction is not triggered, proceed to S315; if the first control instruction is triggered, proceed to S320.

[0102] Specifically, if the terminal device generates a first control command based on the user's configuration, the first control command can be triggered; otherwise, if the terminal device does not generate a first control command, the first control command cannot be triggered.

[0103] S315: Allow the first peripheral device to communicate with the terminal device. Process ends.

[0104] S320: Read the first configuration information and determine whether the first configuration information is empty; if the first configuration information is empty, proceed to S325; if the first configuration information is configured with a peripheral that meets the first condition, proceed to S330.

[0105] S325: Communication between the first peripheral device and the terminal device is prohibited. Process ends.

[0106] S330: Determine whether the first peripheral device meets the first condition; if the first peripheral device does not meet the first condition, proceed to S325; if the first peripheral device meets the first condition, proceed to S315.

[0107] For ease of understanding, the following uses a USB flash drive as the first peripheral device and an Android system as the terminal device as an example to describe in detail the control method proposed in the embodiments of this application.

[0108] In some possible embodiments, by Figure 2The initial configuration information determined by the graphical interface shown can serve as a system attribute of the USB flash drive lock configuration information. Therefore, in the Android system's storage management service, the subsequent functional modules that take over USB flash drive access can be determined based on the system attributes of the USB flash drive lock configuration information. For example, if the USB flash drive lock is not configured or is disabled, the original Android USB flash drive mounting process (i.e., allowing the USB flash drive to communicate with the terminal device) is executed. If the system attributes of the USB flash drive lock configuration information indicate that the USB flash drive lock is enabled, then the USB flash drive lock processing module will handle the process.

[0109] In some possible embodiments, the USB flash drive lock processing module described above can implement the USB flash drive lock function based on the information recorded in the system attributes of the USB flash drive lock configuration information. This USB flash drive lock processing module can be used as a functional module in the storage management service, and the processing flow is as follows:

[0110] Figure 4 This is a schematic diagram of the business process of a USB flash drive lock proposed in an embodiment of this application.

[0111] S410: The insertion event of the first USB flash drive has been detected.

[0112] S420: System properties for reading USB flash drive lock configuration information.

[0113] The system attributes of the USB flash drive lock configuration information can be understood as the first configuration information mentioned above, and the content of the system attributes corresponds to the first condition mentioned above.

[0114] S430: Determine whether the USB drive lock is enabled based on system properties. If it is not enabled, proceed to S435; if it is enabled, proceed to S440.

[0115] When the USB drive lock is enabled, it is equivalent to triggering the first control command; when the USB drive lock is disabled, it is equivalent to being unable to trigger the first control command.

[0116] S435: Android system that allows the first USB flash drive to be mounted to the terminal device.

[0117] At this time, any USB flash drive currently inserted into the terminal device is allowed to be mounted to the terminal device's Android system, which means that the terminal device is allowed to communicate with any USB flash drive.

[0118] S440: Based on system properties, determine whether to configure the USB drive name and / or file name. If not configured, proceed to S445; if configured, proceed to S450.

[0119] S445: Prevent the first USB drive from being mounted to the Android system of the terminal device.

[0120] At this time, any USB flash drive currently inserted into the terminal device is not allowed to be mounted to the terminal device's Android system, that is, communication between the terminal device and any USB flash drive is prohibited.

[0121] S450: Based on system properties, determine whether the first USB drive meets the first condition. If not, proceed to S455; if so, proceed to S460.

[0122] S455: Prevent the first USB drive from being mounted to the Android system of the terminal device.

[0123] S460: An Android system that allows the first USB flash drive to be mounted to the terminal device.

[0124] Based on the above processing flow, it can be seen that the USB flash drive lock can be divided into three control levels. The first level controls all USB flash drives to be mounted to the Android system of the terminal device. The second level controls USB flash drives with user-specified names to be mounted to the Android system of the terminal device. The third level controls USB flash drives with user-specified names and corresponding files to be mounted to the Android system of the terminal device.

[0125] The USB flash drive lock mechanism obtained by the control method 100 proposed in this application makes the operation of USB flash drive access terminal device more secure, and also ensures the security of USB flash drive lock activation and deactivation.

[0126] In some possible embodiments, the at least one control instruction may include a second control instruction for instructing that communication between a peripheral device that meets a second condition and the terminal device be prohibited, and the at least one configuration information may include second configuration information for instructing that a peripheral device that meets a second condition be provided, wherein the second condition includes the device identification information of the peripheral device.

[0127] For example, taking device identification information used to indicate device type as an example, the aforementioned second configuration information includes identification information for Bluetooth, camera, and microphone. When the received control command is the second control command, then combining the content of the second control command and the second configuration information, it can be seen that the terminal device needs to be controlled to prohibit communication with the camera and microphone, and to prohibit communication with peripherals via Bluetooth. If the peripheral connected to the terminal device is a USB flash drive, then the USB flash drive is allowed to be connected to the terminal device and mounted to the Android system.

[0128] In some possible embodiments, when the terminal device and the second peripheral are connected via a second external interface, and the second peripheral meets a second condition, the connection access of the second peripheral to the terminal device can be prohibited by stopping the supply of power to the second peripheral through the second external interface. The second external interface can be the same as the first external interface in the above embodiments.

[0129] In some possible embodiments, when the terminal device includes a second functional interface for implementing the function of the second peripheral device, and the second peripheral device meets a second condition, the second functional interface of the terminal device is closed.

[0130] The aforementioned second functional interface can be a system interface of the terminal device.

[0131] Based on the above technical solutions, it is possible to flexibly control the peripheral access or function opening of terminal devices and provide different levels of security protection for terminal devices.

[0132] In some possible embodiments, the second condition described above may also include other information, such as a field for a certain permission level, which may allow peripheral devices that include that permission level field to access the terminal device, or allow peripheral devices that include a field with a higher permission level to access the terminal device.

[0133] In some possible embodiments, the second control instruction may include an identifier of the second configuration information. Therefore, after the second control instruction is determined, the second configuration information can be locked, and the peripheral access control described above can be completed based on the second configuration information.

[0134] In some possible embodiments, the second configuration information can be determined by: obtaining a second configuration instruction, which is used to determine the second configuration information, the second configuration instruction including the content of a second condition, and writing the content of the second condition into the second configuration information.

[0135] For ease of understanding, the following example uses Wi-Fi, Bluetooth, camera, and microphone, typically equipped in terminal devices, as peripherals to illustrate one method for determining the second configuration information. In this embodiment, the mode in which peripherals accessing the terminal device are restricted based on control method 100 is referred to as the private mode.

[0136] Figure 5 This is a graphical interface illustration of a method for determining second configuration information, as proposed in an embodiment of this application.

[0137] This embodiment assumes that the device identification information included in the second condition is used to indicate the Wi-Fi module and the Bluetooth module, refer to Figure 2 As shown, the graphical interface may include:

[0138] The private mode status bar is used to indicate whether private mode is enabled, that is, whether at least one peripheral device is prohibited from accessing. If enabled, it means that the Android system has enabled access restrictions on peripheral devices accessing the terminal device based on the control method 100 proposed in the embodiments of this application. If disabled, it means that the Android system does not restrict peripheral devices from accessing the terminal device.

[0139] In some possible embodiments, if the aforementioned private mode is enabled, the aforementioned second control command will be generated to trigger subsequent operations related to limiting the functions of the terminal device; if the aforementioned private mode is disabled, the aforementioned second control command will not be generated.

[0140] The device list displays device identification information. In this example, it shows the type of device: Wi-Fi module, Bluetooth module, camera, and microphone.

[0141] Since there are multiple types of devices, users can choose to restrict the access of devices. Therefore, there is also a selection control in the device list. Lighting up this control means that the control terminal device can establish a communication connection with the device corresponding to the lit control, while the device corresponding to the unlit control is a device that meets the second condition.

[0142] Therefore, it can be seen that users can... Figure 5 The graphical interface shown allows you to set the second configuration information and generate the second control command.

[0143] So, based on Figure 5 As shown, under the current configuration, it means that the control terminal device needs to be able to establish communication connections with the peripheral's Wi-Fi module and Bluetooth module.

[0144] Furthermore, the graphical interface also includes a confirmation control. Upon detecting a click event on this confirmation control, the content indicated by the graphical interface is used as a second condition to obtain the aforementioned second configuration instruction. If second configuration information is detected, its content is updated based on the second configuration instruction, replacing it with the currently configured content. If no second configuration information is detected, it is created, and the current second configuration instruction content is written into the second configuration information. In this example, the second configuration information includes device identification information for the Wi-Fi module and Bluetooth module. When the peripheral's Bluetooth module or Wi-Fi module requests to connect to the terminal device, a communication connection is established between the peripheral's Bluetooth module or Wi-Fi module and the terminal device.

[0145] In some possible embodiments, the graphical interface described above may also include a password disk for verifying the operation of disabling the private mode; the private mode can only be disabled after successful verification.

[0146] For example, when private mode is enabled, if no device identification information is configured, then when it is disabled, private mode can be directly switched to normal mode. In normal mode, the terminal device can establish a communication connection with any peripheral device. If device identification information has been set, then when it is disabled, a password can be entered via a password pad. After successful password verification, private mode can be switched to normal mode.

[0147] In some possible embodiments, the above-mentioned privacy mode may be enabled without configuring device identification information. In this state, any peripherals subsequently inserted into the terminal device are not allowed to access it.

[0148] In some possible embodiments, considering that some peripherals are connected to the terminal device for extended periods, and the peripherals are not disconnected even after the terminal device is turned off, the aforementioned privacy mode configuration can be automatically triggered when the terminal device's Android system boots up. That is, when the terminal device is powered off, the privacy mode settings configured by the user during the current boot can be automatically triggered. Figure 5 The privacy mode switch information set in the graphical interface is stored. When the terminal device is turned on again, the privacy mode switch information will be read directly. If the privacy mode switch information indicates that the privacy mode was on when the device was turned off last time, a second control command will be automatically generated.

[0149] Figure 6 This is a flowchart illustrating a control method 600 proposed in an embodiment of this application. The control method 600 is implemented based on the control method 100 described above and is one implementation of step S130.

[0150] S610: In response to the startup of the terminal device, determine whether the second control command is triggered; if the second control command is not triggered, proceed to S615; if the second control command is triggered, proceed to S620.

[0151] Specifically, if the terminal device generates a second control command based on the user's configuration, the second control command can be triggered. However, if the terminal device does not generate a second control command, the second control command cannot be determined, and therefore cannot be triggered.

[0152] S615: Allows the second peripheral device to communicate with the terminal device. Process ends.

[0153] The second peripheral device can be a microphone, camera, Wi-Fi module, Bluetooth module, USB flash drive, or other peripheral devices mentioned in the previous embodiments.

[0154] In some possible embodiments, the terminal device may also enable the above-mentioned private mode by default when it is powered on, that is, it will directly enter the following S620 after the terminal device is started.

[0155] S620: Read the second configuration information and determine whether the second configuration information is empty; if the second configuration information is empty, go to S615; if the second configuration information has a peripheral device that meets the second condition, go to S630.

[0156] In some possible embodiments, when the terminal device is based on the Android system, the aforementioned second configuration information can be written into the system attributes of the Android system.

[0157] S630: Determine whether the second peripheral device meets the second condition; if the second peripheral device does not meet the second condition, proceed to S615; if the second peripheral device meets the second condition, proceed to S635.

[0158] S635: Communication between the second peripheral device and the terminal device is prohibited. Process ends.

[0159] In some possible embodiments, with Figure 2 Taking the scenario shown as an example, assuming that after the private mode is enabled, the microphone is connected to the terminal device via a USB interface. Since the microphone is disabled when the device is powered on, the enable fields of the microphone-related function interfaces have been set to no. The terminal device cannot perform microphone-related function operations, thus achieving the disabling of the microphone.

[0160] In some possible embodiments, since the second configuration information is stored in the system properties of the Android system, the configured second configuration information can still be obtained after the device is powered off and restarted.

[0161] The control method 100 proposed in this application can realize the private mode of the Android system, and can control the functional modules without disassembling the hardware. It can also dynamically select and prohibit peripherals from accessing the terminal device, so that even if the peripheral is connected to the terminal device, it cannot communicate with the terminal device, and the terminal device cannot perform functions related to the peripheral.

[0162] In some possible embodiments, the above-mentioned at least one control instruction includes a third control instruction, which is used to instruct a peripheral device that meets a third condition to perform a first service. At least one configuration information includes third configuration information, which is used to instruct a peripheral device that meets a third condition. The third condition includes the device identification information of the peripheral device and / or the file identification information of the target file, which is stored in the peripheral device. Based on this, the above-mentioned S130 can be implemented by the following operation: prohibiting peripheral devices that do not meet the third condition from performing the first service.

[0163] While prohibiting peripherals that do not meet the third condition from performing the first service is a service restriction on peripherals, the first service is performed on terminal devices and requires the cooperation of the terminal devices to be completed. Therefore, restricting the service on peripherals is equivalent to restricting the functionality of terminal devices.

[0164] It should be understood that the content included in the third configuration information may be the same as the content included in the first configuration information. However, since the content indicated by the third control instruction is different from that of the first control instruction, the result of combining the third control instruction with the third configuration information further restricts the services that the device that meets the third condition can perform compared to the result of combining the first control instruction with the first configuration information.

[0165] Taking a USB flash drive as an example, the USB flash drive can store corresponding flashing firmware, which is used to flash terminal devices. This flashing firmware can be the target file recorded in the third configuration information. Therefore, only when both the device identification information of the USB flash drive and the file identification information of the flashing firmware are recorded in the third configuration information can the USB flash drive be allowed to perform flashing operations on the terminal device based on the flashing firmware. As for USB flash drives indicated by other device identification information, even if they store the aforementioned flashing firmware, they will not be allowed to perform flashing operations on the terminal device.

[0166] Based on the above technical solution, devices that do not meet the third condition can be prevented from performing the first service on the terminal device, thereby further improving the security of the terminal device.

[0167] In some possible embodiments, the third control instruction may include an identifier of the third configuration information. Therefore, after the third control instruction is determined, the third configuration information can be locked, and the peripheral access control described above can be completed based on the third configuration information.

[0168] In some possible embodiments, the third configuration information can be determined by: obtaining a third configuration instruction, which is used to determine the third configuration information, the third configuration instruction including the content of a third condition, and writing the content of the third condition into the third configuration information.

[0169] In some possible embodiments, the determination of the third configuration information can be carried out in the same way as the determination of the first configuration information. The specific determination method and related extended embodiments will not be repeated here.

[0170] In some possible embodiments, based on the aforementioned third control command and third configuration file, the functional control of the terminal device regarding the first peripheral can be achieved through the following detailed operations.

[0171] Figure 7This is a flowchart illustrating a control method 700 proposed in an embodiment of this application. The control method 700 is implemented based on the control method 100 described above and is one implementation of step S130.

[0172] S710: In response to the event of the first peripheral device being inserted into the terminal device, determine whether a third control instruction is triggered; if the third control instruction is not triggered, proceed to S715; if the third control instruction is triggered, proceed to S720.

[0173] Specifically, if the terminal device generates a third control command based on the user's configuration, the third control command can be triggered; otherwise, it cannot be triggered if no third control command is generated in the terminal device.

[0174] S715: Allow the first peripheral device to execute the first service. Process ends.

[0175] S720: Read the third configuration information and determine whether the third configuration information is empty; if the third configuration information is empty, go to S725; if the third configuration information has a peripheral that meets the third condition, go to S730.

[0176] S725: Prohibit the first peripheral device from executing the first service. Process ends.

[0177] S730: Determine whether the first peripheral meets the third condition; if the first peripheral does not meet the third condition, proceed to S725; if the first peripheral meets the first condition, proceed to S715.

[0178] For ease of understanding, the following example uses a USB flash drive as the first peripheral device, an Android-based terminal device, and a first service that involves flashing the terminal device via the USB flash drive as an example to illustrate the control method proposed in this application.

[0179] In some possible embodiments, the operation of limiting the functionality of the terminal device based on the third configuration information can be accomplished in conjunction with the universal boot loader (Uboot) module in the Android system, and the operation process is as follows:

[0180] Figure 8 This is a schematic diagram illustrating the operation process of flashing a terminal device using a USB flash drive, as proposed in an embodiment of this application.

[0181] S810: The insertion event of the first USB flash drive has been detected.

[0182] S820: System properties for reading USB flash drive lock configuration information.

[0183] The system attribute of the USB flash drive lock configuration information can be understood as the third configuration information mentioned above, and the content of the system attribute corresponds to the third condition mentioned above.

[0184] S830: Determine whether the USB drive lock is enabled based on system properties. If it is not enabled, proceed to S835; if it is enabled, proceed to S840.

[0185] When the USB drive lock is enabled, it is equivalent to triggering a third control command; when the USB drive lock is disabled, it is equivalent to being unable to trigger a third control command.

[0186] S835: Allows the first USB flash drive to perform flashing operations on the terminal device based on the flashing firmware.

[0187] At this time, any USB flash drive currently inserted into the terminal device can be used to flash the terminal device based on the flashing firmware stored on it.

[0188] S840: Determine whether to configure a USB drive name or file name based on system properties. If not configured, proceed to S845; if configured, proceed to S850.

[0189] S845: Prevent the first USB flash drive from flashing the terminal device based on the firmware.

[0190] At this time, no USB flash drive currently inserted into the terminal device is allowed to perform flashing operations on the terminal device based on the flashing firmware stored on it.

[0191] S850: Based on system properties, determine whether the first USB drive meets the third condition. If not, proceed to S855; if so, proceed to S860.

[0192] S855: Prevent the first USB flash drive from flashing the terminal device based on the firmware.

[0193] S860: Allows the first USB flash drive to perform flashing operations on the terminal device based on the flashing firmware.

[0194] Based on the above operating procedures, not only can restrictions be placed on peripheral device access, but also the services that are allowed to be executed by the peripheral devices can be further restricted, thereby further improving the security of terminal devices.

[0195] In some possible embodiments, the at least one control instruction may include a fourth control instruction, which is at least used to indicate a second service, and at least one configuration information includes fourth configuration information associated with the fourth control instruction, which is at least used to indicate a first application, which is used to complete the second service.

[0196] In some possible embodiments, when the fourth control instruction is received and the fourth configuration information is determined, the function restriction of the terminal device can be implemented by the following operation: during the execution of the second service by the first application, instructions unrelated to the second service are ignored.

[0197] In some possible embodiments, the fourth control instruction may include an identifier of the fourth configuration information. Therefore, after the fourth control instruction is determined, the fourth configuration information can be locked, and the functional limitations of the terminal device can be completed based on the fourth configuration file.

[0198] Taking the second service as video display as an example, the first application could be a video player application. Upon receiving the fourth control command and confirming the fourth configuration information, it means that only signal source input display and signal source-related settings are supported at this time. The signal source can refer to the aforementioned video player application. Other functions of the terminal device and other services of the video player application (such as screen mirroring) cannot be accessed by the user. Based on this, the video or image content to be displayed on the terminal device can be better protected to prevent the displayed content from being accidentally closed.

[0199] Based on the above technical solution, it is possible to restrict the terminal device to perform only a single service and ignore the control of other functional services of the terminal device, thereby ensuring that the terminal device can continuously perform a single service without interruption.

[0200] In some possible embodiments, the fourth configuration information can be determined by: obtaining a fourth configuration instruction, which is used to determine the fourth configuration information, the fourth configuration instruction including the application identifier information of the first application, and writing the application identifier information of the first application into the fourth configuration information.

[0201] In some possible embodiments, the content of the fourth configuration information described above can be stored in the system properties of the Android system. Therefore, after the terminal device restarts, the system properties stored before the last shutdown can be reused to restrict the functions of the current terminal device.

[0202] In some possible embodiments, taking the second service mentioned above as a video display service as an example, the operation of limiting the function of the terminal device based on the fourth control instruction and the fourth configuration information can be understood as converting the working mode of the terminal device into a pure display mode, that is, only displaying the screen of a single service; in contrast, the working mode of the terminal device when it is not in a pure display mode can be called a full-function mode or a normal mode.

[0203] In some possible embodiments, the above-mentioned pure display mode can also be disabled through the password verification method mentioned in the previous embodiments, which will not be repeated here.

[0204] In some possible embodiments, considering that some terminal devices have a single function and their business logic will not change even after the terminal device is restarted, for example, the above-mentioned pure display mode configuration can be automatically triggered when the terminal device's Android system starts.

[0205] Figure 9 This is a flowchart illustrating a control method 900 proposed in an embodiment of this application. The control method 900 is implemented based on the control method 100 described above and is one implementation of step S130.

[0206] S910: In response to the startup of the terminal device, determine whether the fourth control command is triggered. If the fourth control command is not triggered, proceed to S915; if the fourth control command is triggered, proceed to S920.

[0207] Specifically, if the terminal device generates a fourth control command based on the user's configuration, the fourth control command can be triggered; otherwise, it cannot be triggered if no fourth control command is generated in the terminal device.

[0208] S915: Allows a terminal device to execute at least one instruction unrelated to the second service while the first application is performing the second service.

[0209] S920: During the execution of a second service by a first application, the control terminal device ignores at least one instruction that is unrelated to the second service.

[0210] When the aforementioned fourth control command is triggered, the fourth configuration information can also be read to determine that the service to be executed is the second service, and the application used to execute the second service is the first application.

[0211] For ease of understanding, the following is a detailed explanation of the process of implementing pure display mode on an Android system terminal device.

[0212] Figure 10 This is a schematic diagram of the operation process for powering on a terminal device according to an embodiment of this application.

[0213] S1010: Terminal device detected to be running.

[0214] S1020: Reads the information about the fourth configuration stored in the system properties of the Android system.

[0215] The above-mentioned fourth configuration information can be understood as configuration information regarding pure display mode, and the content of this configuration information corresponds to the fourth condition mentioned above.

[0216] For example, if the fourth configuration information is not read, it means that pure display mode is not currently enabled. If the fourth configuration information does not record the relevant service, it means that pure display mode is not currently enabled.

[0217] S1030: Determine whether pure display mode is enabled based on system properties. If not enabled, proceed to S1035; if enabled, proceed to S1040.

[0218] When pure display mode is enabled, it is equivalent to triggering the fourth control command; when pure display mode is disabled, it is equivalent to being unable to trigger the fourth control command.

[0219] S1035: Allows the terminal device to respond to at least one instruction that is not related to video display services.

[0220] S1040: Control the terminal device to ignore at least one instruction that is unrelated to video display services.

[0221] For example, taking the command issued by the Home button in the Android system to exit an application as an example, and assuming the Home button has high privileges, it will hide all applications in the system background and display the default program interface. Assuming the second service is a video display service, the corresponding first application could be a video player application. However, the video player application is not the default program in the Android system, so after responding to the Home button's key event, it will naturally cause the Android system to exit the first application, thereby interrupting the second service. In this scenario, the control method proposed in this application embodiment can be implemented by modifying the key value of the Home button in the Android system's key value processing service. The modified Home button key event response flow is as follows:

[0222] Figure 11 This is a schematic diagram of the button event response of the Home button according to an embodiment of this application.

[0223] In this example, the second service is the video display service, which implements the signal source input display function, and the first application is the video player application.

[0224] S1110: Receives key press events from the Home button.

[0225] S1120: Reads the information about the fourth configuration stored in the system properties of the Android system.

[0226] S1130: Determine whether pure display mode is enabled based on system properties. If not enabled, proceed to S1135; if enabled, proceed to S1140.

[0227] S1135: Exit the video player application and display the default program interface of the Android system.

[0228] S1140: Ignore the Home button's key press event and perform no control operations.

[0229] The control method 100 proposed in this application embodiment can realize the pure display mode of the Android system, thereby ensuring that the terminal device can continuously execute a single video display service without interruption.

[0230] It should be noted that the button response processing for USB flash drive lock, terminal device privacy mode, and terminal device Home button given in the embodiments of this application is only one way to implement the control method proposed in the embodiments of this application in a specific application scenario, and is not limited to the specific way of implementing the control method proposed in the embodiments of this application.

[0231] In some possible embodiments, at least one control instruction in the control method 100 described above may include one or more of the first control instruction, the second control instruction, the third control instruction, and the fourth control instruction. Of course, other control instructions may also be derived from the at least one control instruction to represent functional limitations different from the four control instructions proposed in the embodiments of this application, for application in other corresponding scenarios.

[0232] In some possible embodiments, the scheme for limiting the function of the terminal device according to the embodiments of this application can be defined as a security mode of the Android system. Accordingly, the embodiments of this application further propose three functional modes that can be introduced into the Android system to implement the control method proposed in the embodiments of this application: USB lock mode, private mode, and pure display mode. These three functional modes can be used as three sub-modes of the security mode. These three sub-modes can be entered individually or multiple sub-modes can be entered simultaneously.

[0233] Furthermore, embodiments of this application also provide an apparatus for implementing any of the above methods. For example, a control device is provided, which includes a unit (or means) for implementing any of the above control methods.

[0234] Figure 12 This is a schematic block diagram of a control device 1200 provided in an embodiment of this application. The control device 1200 includes:

[0235] The control device 1200 is applied to a terminal device, and the control device 1200 includes:

[0236] The first determining unit 1210 is configured to determine at least one control instruction, which is used to trigger a functional restriction on the terminal device.

[0237] The second determining unit 1220 is configured to determine at least one configuration information associated with at least one control instruction, based on at least one control instruction. The at least one configuration information is used to indicate peripherals and / or applications of the terminal device, which are used to implement functions.

[0238] The control unit 1230 is used to restrict the use of at least one function of the terminal device according to at least one control command and at least one configuration information.

[0239] The functions of the first determining unit 1210 and the second determining unit 1220 can be integrated into one determining unit.

[0240] In some possible embodiments, the at least one control instruction includes a first control instruction, which is used to instruct that a peripheral device that meets a first condition is allowed to communicate with the terminal device. The at least one configuration information includes first configuration information, which is used to instruct a peripheral device that meets the first condition. The first condition includes the device identification information of the peripheral device and / or the file identification information of the target file, and the target file is stored in the peripheral device. The control unit 1230 is specifically used to: prohibit at least one peripheral device that does not meet the first condition from communicating with the terminal device.

[0241] In some possible embodiments, the terminal device is connected to the first peripheral device through a first external interface, and the first peripheral device does not meet the first condition. The control unit 1230 is specifically used to: stop supplying power to the first peripheral device through the first external interface.

[0242] In some possible embodiments, the terminal device includes a first functional interface for implementing the function of a first peripheral device, and the first peripheral device does not meet a first condition. Specifically, the control unit 1230 is used to: close the first functional interface of the terminal device.

[0243] In some possible embodiments, the control unit 1230 is specifically configured to: trigger a first control command in response to an event of a first peripheral device being inserted into a terminal device; read first configuration information and determine whether the first configuration information is empty; if the first configuration information is configured with a peripheral device that meets the first condition, determine whether the first peripheral device meets the first condition; if the first peripheral device does not meet the first condition, prohibit the first peripheral device from communicating with the terminal device.

[0244] In some possible embodiments, the at least one control instruction includes a second control instruction, which is used to instruct that communication between a peripheral device that meets the second condition and the terminal device be prohibited; at least one configuration information includes second configuration information, which is used to instruct that communication between a peripheral device that meets the second condition be prohibited; the second condition includes device identification information of the peripheral device; the control unit 1230 is specifically used to: prohibit communication between at least one peripheral device that meets the second condition and the terminal device.

[0245] In some possible embodiments, the terminal device is connected to the second peripheral device via a second external interface, the second peripheral device satisfying a second condition, and the control unit 1230 is specifically used to: stop supplying power to the second peripheral device via the external interface.

[0246] In some possible embodiments, the terminal device includes a second functional interface for implementing the function of a second peripheral device, and the second peripheral device satisfies a second condition. Specifically, the control unit 1230 is used to: close the second functional interface of the terminal device.

[0247] In some possible embodiments, the at least one control instruction mentioned above includes a third control instruction, which is used to instruct a peripheral device that meets a third condition to perform a first service. At least one configuration information includes third configuration information, which is used to instruct a peripheral device that meets a third condition. The third condition includes the device identification information of the peripheral device, or the third condition includes the device identification information of the peripheral device and the file identification information of a target file, the target file being stored on the peripheral device. The control unit 1230 is specifically used to: close the second functional interface of the terminal device.

[0248] In some possible embodiments, the control unit 1230 is specifically configured to: trigger a third control instruction in response to an event of the first peripheral device being inserted into the terminal device; read third configuration information and determine whether the third configuration information is empty; if the third configuration information is configured with a peripheral device that meets the third condition, determine whether the first peripheral device meets the third condition; if the first peripheral device does not meet the third condition, prohibit the first peripheral device from performing the first service.

[0249] In some possible embodiments, the at least one control instruction mentioned above includes a fourth control instruction, which is at least used to indicate a second service, and at least one configuration information includes a fourth configuration information, which is at least used to indicate a first application, which is used to complete the second service. The control unit 1230 is specifically used to: ignore at least one instruction unrelated to the second service while the first application is performing the second service.

[0250] In some possible embodiments, the control unit 1230 is specifically configured to: trigger a fourth control command in response to the startup of the terminal device; read fourth configuration information, which includes a first application and a second service, and control the terminal device to ignore at least one command unrelated to the second service while the first application is executing the second service.

[0251] In some possible embodiments, the second determining unit 1220 is further configured to: obtain a first configuration instruction, the first configuration instruction being used to determine first configuration information, the first configuration instruction including the content of a first condition, and write the content of the first condition into the first configuration information; or, obtain a second configuration instruction, the second configuration instruction being used to determine second configuration information, the second configuration instruction including the content of a second condition, and write the content of the second condition into the second configuration information; or, obtain a third configuration instruction, the third configuration instruction being used to determine third configuration information, the third configuration instruction including the content of a third condition, and write the content of the third condition into the third configuration information; or, obtain a fourth configuration instruction, the fourth configuration instruction being used to determine fourth configuration information, the fourth configuration instruction including the application identifier information of a first application, and write the application identifier information of the first application into the fourth configuration information.

[0252] Furthermore, this application also proposes another control device, which includes a processor and a memory connected together. The memory is used to store program code, and the processor is used to call the program code to execute any of the control methods proposed in this application.

[0253] Those skilled in the art will recognize that the units and algorithm steps of the various examples described in conjunction with the embodiments disclosed herein can be implemented in electronic hardware, or a combination of computer software and electronic hardware. Whether these functions are implemented in hardware or software depends on the specific application and design constraints of the technical solution. Those skilled in the art can use different methods to implement the described functions for each specific application, but such implementation should not be considered beyond the scope of this application.

[0254] Those skilled in the art will understand that, for the sake of convenience and brevity, the specific working processes of the systems, devices, and units described above can be referred to the corresponding processes in the foregoing method embodiments, and will not be repeated here.

[0255] In the several embodiments provided in this application, it should be understood that the disclosed systems, apparatuses, and methods can be implemented in other ways. For example, the apparatus embodiments described above are merely illustrative; for instance, the division of units is only a logical functional division, and in actual implementation, there may be other division methods. For example, multiple units or components may be combined or integrated into another system, or some features may be ignored or not executed. Furthermore, the coupling or direct coupling or communication connection shown or discussed may be through some interfaces; the indirect coupling or communication connection between apparatuses or units may be electrical, mechanical, or other forms.

[0256] The units described as separate components may or may not be physically separate. The components shown as units may or may not be physical units; that is, they may be located in one place or distributed across multiple network units. Some or all of the units can be selected to achieve the purpose of this embodiment according to actual needs.

[0257] In addition, the functional units in the various embodiments of this application can be integrated into one processing unit, or each unit can exist physically separately, or two or more units can be integrated into one unit.

[0258] If the aforementioned functions are implemented as software functional units and sold or used as independent products, they can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of this application, in essence, or the part that contributes to the prior art, or a portion of the technical solution, can be embodied in the form of a software product. This computer software product is stored in a storage medium and includes several instructions to cause a computer device (which may be a personal computer, server, or network device, etc.) to execute all or part of the steps of the methods described in the various embodiments of this application. The aforementioned storage medium includes various media capable of storing program code, such as USB flash drives, portable hard drives, read-only memory (ROM), random access memory (RAM), magnetic disks, or optical disks.

[0259] The above description is merely a specific embodiment of this application, but the scope of protection of this application is not limited thereto. Any variations or substitutions that can be easily conceived by those skilled in the art within the scope of the technology disclosed in this application should be included within the scope of protection of this application. Therefore, the scope of protection of this application should be determined by the scope of the claims.

Claims

1. A control method, characterized in that, The control method, applied to terminal devices, includes: Determine at least one control instruction, the at least one control instruction being used to trigger a functional restriction on the terminal device; Based on the at least one control instruction, at least one configuration information associated with the at least one control instruction is determined, the at least one configuration information being used to indicate the peripherals and / or applications of the terminal device, the peripherals and / or the applications being used to implement the function; Based on the at least one configuration information, the use of at least one function of the terminal device is restricted.

2. The control method according to claim 1, characterized in that, The at least one control instruction includes a first control instruction, which is used to trigger a peripheral device that meets a first condition to communicate with the terminal device. The at least one configuration information includes first configuration information, which is used to indicate a peripheral device that meets the first condition. The first condition includes device identification information of the peripheral device and / or file identification information of a target file, wherein the target file is stored on the peripheral device. The restriction on the use of at least one function of the terminal device includes: At least one peripheral device that does not meet the first condition is prohibited from communicating with the terminal device.

3. The control method according to claim 2, characterized in that, The terminal device is connected to the first peripheral device via a first external interface. If the first peripheral device does not meet the first condition, prohibiting communication between the terminal device and at least one peripheral device that does not meet the first condition includes: Stop supplying power to the first peripheral device through the first external interface.

4. The control method according to claim 2 or 3, characterized in that, The terminal device includes a first functional interface, which is used to implement the function of a first peripheral device. If the first peripheral device does not meet the first condition, prohibiting communication between at least one peripheral device that does not meet the first condition and the terminal device includes: The first functional interface of the terminal device is closed.

5. The control method according to any one of claims 2 to 4, characterized in that, The method further includes: In response to an event that the first peripheral device is inserted into the terminal device, the first control command is triggered; Read the first configuration information. If the first configuration information configures a peripheral device that meets the first condition, determine whether the first peripheral device meets the first condition. If the first peripheral device does not meet the first condition, prohibit the first peripheral device from communicating with the terminal device.

6. The control method according to any one of claims 1 to 5, characterized in that, The at least one control instruction includes a second control instruction, which is used to trigger a prohibition on communication between the peripheral device that meets the second condition and the terminal device; the at least one configuration information includes second configuration information, which is used to indicate the peripheral device that meets the second condition; the second condition includes the device identification information of the peripheral device. The restriction on the use of at least one function of the terminal device includes: At least one peripheral device that meets the second condition is prohibited from communicating with the terminal device.

7. The control method according to claim 6, characterized in that, The terminal device is connected to the second peripheral device via a second external interface, and the second peripheral device satisfies the second condition. The prohibition of communication between the terminal device and at least one peripheral device satisfying the second condition includes: Stop supplying power to the second peripheral device through the second external interface.

8. The control method according to claim 6 or 7, characterized in that, The terminal device includes a second functional interface for implementing the function of a second peripheral device, the second peripheral device satisfying the second condition, and prohibiting at least one peripheral device satisfying the second condition from communicating with the terminal device includes: The second functional interface of the terminal device is closed.

9. The control method according to claim 6, characterized in that, The terminal device is connected to a second peripheral device, and the method further includes: In response to the startup of the terminal device, the second control command is triggered; Read the second configuration information and determine whether the second configuration information is empty; if the second configuration information configures a peripheral that meets the second condition, determine whether the second peripheral meets the second condition; if the second peripheral meets the second condition, prohibit the second peripheral from communicating with the terminal device.

10. The control method according to any one of claims 1 to 9, characterized in that, The at least one control instruction includes a third control instruction, which is used to trigger a peripheral device that meets a third condition to perform a first service. The at least one configuration information includes third configuration information, which is used to indicate a peripheral device that meets the third condition. The third condition includes the device identification information of the peripheral device and / or the file identification information of a target file, wherein the target file is stored in the peripheral device. The restriction on the use of at least one function of the terminal device includes: Peripherals that do not meet the third condition are prohibited from executing the first service.

11. The control method according to claim 10, characterized in that, The method further includes: In response to an event that the first peripheral device is inserted into the terminal device, the third control command is triggered; Read the third configuration information and determine whether the third configuration information is empty; if the third configuration information configures a peripheral that meets the third condition, determine whether the first peripheral meets the third condition; if the first peripheral does not meet the third condition, prohibit the first peripheral from executing the first service.

12. The control method according to any one of claims 1 to 11, characterized in that, The at least one control instruction includes a fourth control instruction, which is at least used to trigger a second service. The at least one configuration information includes fourth configuration information, which is at least used to instruct a first application to complete the second service. The step of restricting the use of at least one function of the terminal device based on the at least one control instruction and the at least one configuration information includes: During the execution of the second service by the first application, at least one instruction unrelated to the second service is ignored.

13. The control method according to claim 12, characterized in that, The method further includes: triggering the fourth control command in response to the startup of the terminal device; The fourth configuration information is read, which includes the first application and the second service. The terminal device is controlled to ignore at least one instruction unrelated to the second service while the first application is executing the second service.

14. A control device, characterized in that, Includes a module or unit for performing the control method as described in any one of claims 1 to 13.

15. A control device, characterized in that, It includes a processor and a memory, wherein the processor and the memory are connected together, wherein the memory is used to store program code, and the processor is used to call the program code to execute the control method as described in any one of claims 1 to 13.

16. A display device, characterized in that, Includes the control device as described in claim 14 or 15.

17. A computer-readable storage medium, characterized in that, It stores instructions that, when executed by a processor, cause the processor to implement the control method as described in any one of claims 1 to 13.

18. A computer program product, characterized in that, The computer program product includes computer program code that, when run on a computer, causes the computer to implement the control method as described in any one of claims 1 to 13.

Images