CN105760746A - Authority management method, authority distribution method and equipment - Google Patents

Authority management method, authority distribution method and equipment Download PDF

Info

Publication number
CN105760746A
CN105760746A CN201610059627.3A CN201610059627A CN105760746A CN 105760746 A CN105760746 A CN 105760746A CN 201610059627 A CN201610059627 A CN 201610059627A CN 105760746 A CN105760746 A CN 105760746A
Authority
CN
China
Prior art keywords
operational order
authority
account
user
human body
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Pending
Application number
CN201610059627.3A
Other languages
Chinese (zh)
Inventor
赖永乐
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Fuzhou Rockchip Electronics Co Ltd
Original Assignee
Fuzhou Rockchip Electronics Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Fuzhou Rockchip Electronics Co Ltd filed Critical Fuzhou Rockchip Electronics Co Ltd
Priority to CN201610059627.3A priority Critical patent/CN105760746A/en
Publication of CN105760746A publication Critical patent/CN105760746A/en
Pending legal-status Critical Current

Links

Classifications

    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/30Authentication, i.e. establishing the identity or authorisation of security principals
    • G06F21/45Structures or tools for the administration of authentication
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/30Authentication, i.e. establishing the identity or authorisation of security principals
    • G06F21/31User authentication
    • G06F21/32User authentication using biometric data, e.g. fingerprints, iris scans or voiceprints
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F2221/00Indexing scheme relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F2221/21Indexing scheme relating to G06F21/00 and subgroups addressing additional information or applications relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F2221/2149Restricted operating environment

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Security & Cryptography (AREA)
  • Theoretical Computer Science (AREA)
  • Computer Hardware Design (AREA)
  • Software Systems (AREA)
  • Physics & Mathematics (AREA)
  • General Engineering & Computer Science (AREA)
  • General Physics & Mathematics (AREA)
  • Storage Device Security (AREA)

Abstract

The invention provides an authority management method, an authority distribution method and equipment and relates to the field of intelligent equipment.The authority management method comprises the steps that after a user triggers a first operation instruction, a sensor of the equipment acquires the body feature code information of the user; the account of the user is determined according to the acquired body feature code information and a body feature code database; based on default user rights, if the account is permitted to execute the first operation instruction, the first operation instruction is executed, and execution of the first operation instruction is stopped or authority verification prompt is given otherwise.Manual switching of an account is not needed when an operation instruction needing authority verification is used, the currently used account is determined through the acquired body feature code directly, the operation instruction is executed for the account, and user operation is simplified.

Description

A kind of right management method, distribution method and apparatus
Technical field
The present invention relates to smart machine field, particularly relate to a kind of right management method and the method for distribution, equipment.
Background technology
Rights management occurs nearly in inside any system, as long as there being the system of user and password, all can relate to rights management.Along with commonly using of smart machine, the application that people install in smart machine such as smart mobile phone also gets more and more, and for strategies such as safety, System Privileges is provided with finer classification, the level of System Privileges also gets more and more, and the management of authority also seems more and more important and complicated.
In the related, in smart machine such as Android device, the authority of equipment is roughly divided into three classes: application program authority, namely refers to the application program corresponding access rights accessing needs to android system resource.Owner's authority, namely has and installs the authority being normally applied software, using application program etc.;Namely all system file, data are arbitrarily operated by root authority.
The most representational windows of being system distinguish user by user account, the head of a family is by rights management to child's account, it is possible to limiting child uses the time length of computer and operable application.But it needs manual switching parent subscriber and child user, and to practical operation, people makes troubles.
Popularizing thus with smart machine, the head of a family uses the demand that smart machine is checked on also increasingly to highlight for child.
Summary of the invention
Simplification general introduction to one or more aspect given below is to try hard to provide the basic comprehension to this type of aspect.This summarizes the extensive overview of the not all aspect contemplated, and is both not intended to identify the key or decisive key element also non-scope attempting to define any or all aspect of all aspects.It is uniquely intended to some concepts providing one or more aspect in simplified form using as more specifically bright sequence given later.
For this reason, it may be necessary to provide method and the authority distributing method of a kind of rights management, and realize the equipment of said method, for solving the rights management demand under various application scenarios.
For achieving the above object, inventor provide a kind of right management method, including step, after user triggers the first operational order, characteristics of human body's code information of the sensor acquisition user of equipment, determines the account of user according to the characteristics of human body's code information collected in conjunction with characteristics of human body code data base;According to default user right, if account has authority and performs described first operational order, then perform the first operational order, if account does not have authority and performs described first operational order, then terminate performing described first operational order or prompting verifying authorization.
Further, described characteristics of human body's code information includes face characteristic code information or fingerprint character code information.
Further, after user triggers the first operational order, when state application program being detected switches, characteristics of human body's code information of the sensor acquisition user of equipment;
Described application program refers to the application program that the first operational order is relevant;
The state switching of application program refers to: application program creates, starts, reconfigures, is switched to foreground, is switched to backstage, stopping and destruction.
Further, the first operational order includes instruction and operation object;
Described " have authority and perform described first operational order ", for according to the user right preset, account has the authority directly performing instruction, and has the authority of directly operation operation object;
Described " do not have authority and perform described first operational order " for according to the user right preset, having the authority directly performing instruction for account, or operation object is the object needing Authority Verification.
Further, before user triggers the first operational order, also include step, preset the first operational order collection for the account in equipment respectively, the set that instruction is the operational order needing Authority Verification that first operational order is concentrated, each account is corresponding one first operational order collection respectively;
The first operational order that described " have authority and perform described first operational order " triggers for user belongs to the first operational order collection;
The first operational order that described " do not have authority and perform described first operational order " triggers for user is not belonging to the first operational order collection.
Further, described first operational order is startup or closes or switch the application program needing Authority Verification, or for accessing the file or file that need Authority Verification or being the account distribution authority in equipment.
Further, operational order belongs to the second operational order collection, then performing described first operational order and after the setting time, performing second operational order corresponding with the first operational order always according to arranging of user right, the corresponding relation of the first operational order and the second operational order is stored in authority allocation list.
Inventor also provides for another kind of authority distributing method, including step, gathers characteristics of human body's code information of user, the characteristics of human body's code collected adds characteristics of human body code data base, and the characteristics of human body's code collected is associated corresponding account;And the user right of account is set.
Further, described " gathering characteristics of human body's code information of user " is for gathering face characteristic code information, or fingerprint character code information.
Further, the first operational order includes the execution object of instruction and instruction;
Described " arranging the user right of account " includes the set arranging the instruction needing Authority Verification, and arranges the set performing object needing Authority Verification.
Further, described " arranging the user right of account " is, presets the first operational order collection, the set that instruction is the operational order needing Authority Verification that the first operational order is concentrated respectively for the account in equipment, and each account is corresponding one first operational order collection respectively;
Further, described " arranging the user right of account " also includes step, for account, the second operational order collection is set, and be that the first operational order that the second operational order is concentrated arranges the second corresponding operational order, the corresponding relation of the first operational order and the second operational order is stored in authority allocation list;
For account, if the first operational order that equipment performs belongs to the second operational order collection, then performing the first operational order and after the setting time, perform second operational order corresponding with the first operational order, the corresponding relation of the first operational order and the second operational order is stored in authority allocation list.
Inventor also provides for a kind of electronic equipment for realizing rights management and distribution method, including condition code acquisition module, authority judge module;
Described condition code acquisition module is for, after user triggers the first operational order, gathering characteristics of human body's code information of user;
Described authority judge module for determining the account of user according to the characteristics of human body's code information collected in conjunction with characteristics of human body code data base;According to default user right, if account, there is authority and perform described first operational order, then perform the first operational order, if account does not have authority and performs described first operational order, then terminate performing described first operational order or prompting verifying authorization.
Further, described " condition code acquisition module is for gathering characteristics of human body's code information of user " it is used for gathering face characteristic code information or fingerprint character code information for condition code acquisition module.
Further, described condition code acquisition module is for after user triggers the first operational order, when state application program being detected switches, and characteristics of human body's code information of the sensor acquisition user of equipment;
Described application program refers to the application program that the first operational order is relevant;
The state switching of application program refers to: application program creates, starts, reconfigures, is switched to foreground, is switched to backstage, stopping and destruction.
Further, the first operational order includes instruction and operation object;
Described " have authority and perform described first operational order ", for according to the user right preset, account has the authority directly performing instruction, and has the authority of directly operation operation object;
Described " do not have authority and perform described first operational order " is for according to the user right preset, account, having the authority directly performing instruction, or operation object is the object needing Authority Verification.
Further, described first operational order is the application program starting and needing Authority Verification, or for accessing the file or file that need Authority Verification or for distributing authority for the account in equipment.
Further, if described authority judge module belongs to the second operational order collection for the first operational order, then performing described first operational order and after the setting time, performing second operational order corresponding with the first operational order always according to arranging of user right, the corresponding relation of the first operational order and the second operational order is stored in authority allocation list.
Being different from prior art, technique scheme, when using the operational order needing Authority Verification, account need not be carried out manual switching, and determine currently used account either directly through the characteristics of human body's code collected, and perform aforesaid operations instruction for this account, simplify user operation.
And the described operational order needing Authority Verification that arranges, can support that arranging single concrete operational order is the operational order needing Authority Verification, can also be a generic operation instruction it be the operational order needing Authority Verification, enrich rights management and the authority using method based on rights management further, meet the authority user demand of different application scenarios.
For addressing relevant purpose before reaching, this one or more aspect includes the feature fully describing hereinafter and particularly pointing out in the following claims.The following description and drawings illustrate some illustrative aspects of this one or more aspect.But, these features are only indicate in the various modes of the principle that can adopt various aspect several, and this descriptions is intended to this type of aspects all and equivalent aspect thereof.
Accompanying drawing explanation
Below with reference to accompanying drawing, disclosed aspect is described, it is provided that accompanying drawing illustrates that and non-limiting disclosed aspect, label sign similar elements similar in accompanying drawing, and wherein:
Fig. 1 is the step that right management method of the present invention comprises.
Fig. 2 is the module diagram of equipment of the present invention.
Description of reference numerals:
201, condition code acquisition module;
202, authority judge module.
Detailed description of the invention
By describing the technology contents of technical scheme, structural feature in detail, being realized purpose and effect, below in conjunction with specific embodiment and coordinate accompanying drawing to be explained in detail.In the following description, elaborate that numerous details is to provide the thorough understanding to one or more aspect for explanatory purposes.It will be evident that do not have these details can put into practice this type of aspect yet.
As it is shown in figure 1, inventor provides a kind of right management method, including step:
S101, after user triggers the first operational order,
S102, equipment characteristics of human body's code information of sensor acquisition user;
Characteristics of human body's code information that S103, basis collect determines the account of user in conjunction with characteristics of human body code data base;
The user right that S104, basis are preset, it is judged that whether account has authority performs described first operational order,
Perform if account has authority,
S105, then perform the first operational order,
If account does not have authority performs described first operational order,
S106, then termination perform described first operational order or prompting verifying authorization.
Account is one of account of existence in equipment or system.
Above-mentioned first operational order can relate to the instruction of Application Status switching, for instance opens application program instructions, closes application program instructions, switching application program instructions etc.;It can also be set up applications, accesses photographic head, accessing address list, check mail, or the data etc. accessing encryption memory block need to perform the instruction of authority.
Whether accounts different in equipment can perform the setting of the first operational order can be different, the account that such as head of a family controls has the authority of execution " opening game app instruction ", and the account that child controls does not have an authority of " execution open game app instruction ", or the account that controls of child is set to have the authority of executions " opening app instruction of playing " in the period set.Namely for certain account, whether it has the authority performing a certain operational order can set.Arrange authority corresponding to different account to can be through the interface that arranges of correspondence and arrange, or configure by configuration file, or by rule generation.
In certain embodiments, after set up applications terminates, each account in equipment can be arranged the execution authority of the relevant operational order of this application program.The operational order that this application program is relevant refers to, this application program is as the instruction being performed main body, or this application program is the instruction actively initiating instruction main body;Such as after set up applications terminates, account is set there is the authority opening this application program, or account is such as set has the authority etc. being accessed file by this application program.
When judging that account has execution authority (namely account is set to have the authority performing the first operational order), then perform the first operational order.Described execution the first operational order refers to and performs the first operational order according to executive mode original in equipment.And when judging that account does not have right of execution (namely account is set to do not have the authority performing the first operational order) in limited time, terminate performing described first operational order, can also be terminate performing operational order characteristics of human body's code information of simultaneously pointing out the first operational order to need Authority Verification, suggestion content to can be through just having collected to determine that the account of user does not have the authority performing the first operational order in conjunction with characteristics of human body code data base.
Characteristics of human body's code in above-mentioned steps refers to: collect from human body, and can be used for distinguishing the feature of human individual, and namely these feature codings are obtained characteristics of human body's code, above-mentioned characteristics of human body can be facial characteristics, iris feature, fingerprint characteristic etc., development along with science and technology, it is also possible to for gene.Namely described characteristics of human body's code information can be face characteristic code information or fingerprint character code information.
And characteristics of human body code data base refers to the data base preserving above-mentioned characteristics of human body's code, data base also can preserve and analyze, from each characteristics of human body's code, the condition code drawn, for instance old people's characteristics of human body's code, adolescence's body characteristics code, child's characteristics of human body's code etc..Or in characteristics of human body code data base, also by characteristics of human body's code etc. of the characteristics of human body's code that characteristics of human body's code labeling is manager collected or characteristics of human body's code of head of a family's account or characteristics of human body's code of child account or visitor;
It is a kind of physical unit or biologic-organ for gathering the sensor of characteristics of human body's code, can detect, experience the signal in the external world, physical condition (such as light, heat, humidity) or chemical composition (such as smog), and the information found out is passed to other devices or organ.
It is understood that before gathering characteristics of human body's code information of user, it is possible to display reminding information.Information is for indicating user to coordinate characteristics of human body's code of sensor acquisition user, or is used for prompting the user whether the collection of acceptor's body characteristics code.
By said method, when using the operational order needing Authority Verification, it is not necessary to account is carried out manual switching, and determines currently used account either directly through the characteristics of human body's code collected, and perform aforesaid operations instruction for this account, simplify user operation.
And the described operational order needing Authority Verification that arranges, can support that arranging single concrete operational order is the operational order needing Authority Verification, can also be a generic operation instruction it be the operational order needing Authority Verification, enrich rights management and the authority using method based on rights management further, meet the authority user demand of different application scenarios.
In certain embodiments, after user triggers the first operational order, when state application program being detected switches, characteristics of human body's code information of the sensor acquisition user of equipment;Described application program refers to the application program relevant to the first operational order;The state of application program switches and refers to: application program creates, starts, reconfigures, is switched to foreground, is switched to backstage, stopping and destruction.The state of such as application program switches the corresponding following event of Android system middle finger: onCreate (), onStart (), onResume (), onPause (), onStop (), onDestroy (), onRestart () etc.;Such as in Android system, after user sends the program that operational order switching foreground shows, when onReStart () or onResume () of a certain application program being detected, characteristics of human body's information of the sensor acquisition user of equipment.Carry out authority qualification when the state of application program switches, the operation of user can be managed efficiently.
In certain embodiments, the first operational order includes instruction and operation object;Such as instruction " installs certain application program ", then wherein instruction refers to " installation ", and operates object for " certain application program ", and this certain application program can be application installation kit.And above-mentioned " have authority and perform described first operational order " is for according to the user right preset, account has the authority directly performing instruction, and has the authority of directly operation operation object;Such as instruction " opening certain file ", instruction is for opening, and operation object is certain file, if then for account, if account has the authority directly performing " opening ", and has the authority accessing certain file, then account has the authority of execution operational order " opening certain file ".
Described " do not have authority and perform described first operational order " is for according to the user right preset, account, having the authority directly performing instruction, or operation object is the object needing Authority Verification.Such as instruction " opened file folder ", instruction is for opening, operation object is certain file, if then for account, if account does not have the authority directly performing " opening ", or do not have the authority accessing certain file, then account does not have the authority of execution operational order " opening certain file ".
By the instruction in operational order and operation object being separated, be conducive to user setup account authority.Such as by choosing instruction or the operation object that lack of competence performs, account authority can be set.Additionally the method arranges the authority of different instruction on demand, can distinguish again the resource arranged on demand with in protection equipment corresponding to account, and device resource refers to the file of equipment or data or hardware.
In further embodiments, need needing in equipment that the resource of authority is set less, then preferably adopt following technical proposals, reduce the operating procedure arranged: preset the first operational order collection respectively for the account in equipment, the instruction that first operational order is concentrated is the set that corresponding account needs the operational order of Authority Verification, and each account is corresponding one first operational order collection respectively;
Such as a certain account, the first operational order collection is set for it, for another account, then another the first operational order collection is set for it;First operational order collection and another the first operational order collection can have common factor.The instruction that first operational order collection or another the first operational order are concentrated can be " opened file folder ", " opening QQ program ", " opening mailer ", " closedown antivirus applet ", " deletion application program " or " elimination etc. is liked in switching display everyday " etc.;
When judging whether account has permission described first operational order of execution, judge whether the first operational order belongs to the first operational order collection that this account is corresponding, namely judge whether account has the authority performing the first operational order, for judging whether the first operational order belongs to the first corresponding operational order collection, if the first operational order is not belonging to the first operational order collection of correspondence, then account does not have the authority performing the first operational order;If the first operational order belongs to the first corresponding operational order collection, then account has the authority performing the first operational order.I.e. described " there is authority and perform described first operational order " the first operational order collection belonging to correspondence for the first operational order that user triggers;The first operational order that described " do not have authority and perform described first operational order " triggers for user is not belonging to corresponding first operational order collection.
Arranging the first operational order collection can be by the mode chosen, operational order adds the first operational order collection at permission configuration interface;It can also be first arrange the instruction in operational order, then chooses operation object.
Such as, need Authority Verification when " starting certain application program " is set, can also be arrange to access the file or file that set or for needs Authority Verification, namely stating the first operational order is start to be set to need the application program of Authority Verification, and can be the file or file opening, close or switch and be set to need Authority Verification or for the account distribution authority in equipment.
In certain embodiments, also for it, arranged execution time for the first operational order.It can be arrange execution duration for the first operational order, for instance the timeliness length arranging " opening game app " is 1 hour, then, after opening the app that arbitrarily plays, close this app after opening this game app after 1 hour;Or can be also that the first operational order arranges the executable time period, for instance the time period arranging " opening excellent cruel app " is 8 o'clock to 9 o'clock morning, then only can perform the instruction of " opening excellent cruel app " within the time period of 8 o'clock to 9 o'clock.
The realization of such scheme can be, performing described first operational order and after setting time T, performing second operational order corresponding with the first operational order always according to arranging of user right, the corresponding relation of the first operational order and the second operational order is stored in authority allocation list or data base.The timeliness length such as arranging " opening game app " is 1 hour, then, after opening the app that arbitrarily plays, the operational order performing correspondence after unlatching this game app after 1 hour closes this game app.In the present embodiment, if the first operational order and the second operational order have corresponding relation, then the first operational order belongs to the second operational order collection, and the second operational order collection can be the subset of above-mentioned first operational order collection.Namely the first operational order belongs to the second operational order collection, then performing described first operational order and after the setting time, performing the second operational order corresponding with the first operational order always according to arranging of user right.
Predeterminable multiple accounts in equipment, when arranging account or register account number, equipment gathers characteristics of human body's code information of user, the characteristics of human body's code collected adds characteristics of human body code data base, and the characteristics of human body's code collected is associated corresponding account;And the user right of account is set.
Described " gathering characteristics of human body's code information of user " is for gathering face characteristic code information, or fingerprint character code information.
Described " arranging the user right of account " includes the set arranging the instruction needing Authority Verification, and arranges the set performing object needing Authority Verification.
Arranging the first operational order collection can be by the mode chosen, operational order adds the first operational order collection at permission configuration interface;It can also be first choose the instruction in operational order, then chooses operation object.If comprising one of above-mentioned instruction chosen in operational order or operation object being one of above-mentioned operation object chosen, then this operational order is the operational order needing Authority Verification.
Described " arranging the user right of account " is, presets the first operational order collection, the set that instruction is the operational order needing Authority Verification that the first operational order is concentrated respectively for the account in equipment, and each account is corresponding one first operational order collection respectively;Such as a certain account, then the first operational order collection is set for it, for another account, then another the first operational order collection is set for it;First operational order collection and another the first operational order collection can have common factor.The instruction that first operational order collection or another the first operational order are concentrated can be " opened file folder ", " opening QQ program ", " opening mailer ", " closedown antivirus applet ", " deletion application program " or " elimination etc. is liked in switching display everyday " etc.;
In certain embodiments, described " arranging the user right of account " also includes step, for account, the second operational order collection is set, and be that arbitrary first operational order that the second operational order is concentrated arranges the second corresponding operational order, the corresponding relation of the first operational order and the second operational order is stored in authority allocation list;Allocation list can be stored in data base or text in some cases.
Arranging the second operational order collection for account can be arrange in arranging the interface that the first operational order collection is identical, and it can also be arrange at different interfaces or mode.
For current account, if the first operational order that equipment performs belongs to the second operational order collection, then perform the first operational order and after the setting time, performing threeth operational order corresponding with the first operational order, the corresponding relation of the first operational order and the 3rd operational order is stored in authority allocation list.
Inventor also provides for a kind of electronic equipment for realizing rights management and distribution method, for performing above-mentioned rights management and distribution method, referring to Fig. 2, the described electronic equipment for realizing rights management and distribution method includes condition code acquisition module 201, authority judge module 202;
Described condition code acquisition module is for, after user triggers the first operational order, gathering characteristics of human body's code information of user;
Described authority judge module for determining the account of user according to the characteristics of human body's code information collected in conjunction with characteristics of human body code data base;According to default user right, if account has authority and performs described first operational order, then perform the first operational order, if account does not have authority and performs described first operational order, then terminate performing described first operational order or prompting verifying authorization.
Described " condition code acquisition module is for gathering characteristics of human body's code information of user " is used for gathering face characteristic code information or fingerprint character code information for condition code acquisition module.
Described condition code acquisition module is for after user triggers the first operational order, when state application program being detected switches, and characteristics of human body's code information of the sensor acquisition user of equipment;
Described application program refers to the application program relevant to the first operational order;
The state of application program switches and refers to: application program creates, starts, reconfigures, is switched to foreground, is switched to backstage, stopping and destruction.
In certain embodiments, the first operational order includes instruction and operation object;
Described " have authority and perform described first operational order ", for according to the user right preset, account has the authority directly performing instruction, and has the authority of directly operation operation object;
Described " do not have authority and perform described first operational order " is for according to the user right preset, account a, having the authority directly performing instruction, or operation object is the object needing Authority Verification.
In certain embodiments, described first operational order is the application program starting and being set to need Authority Verification, or for accessing the file or file that are set to need Authority Verification or for distributing authority for the account in equipment.
In certain embodiments, if described authority judge module belongs to the second operational order collection for the first operational order, then performing described first operational order and after the setting time, performing second operational order corresponding with the first operational order always according to arranging of user right, the corresponding relation of the first operational order and the second operational order is stored in authority allocation list.It should be noted that, in this article, the relational terms of such as first and second or the like is used merely to separate an entity or operation with another entity or operating space, and not necessarily requires or imply the relation that there is any this reality between these entities or operation or sequentially.And, term " includes ", " comprising " or its any other variant are intended to comprising of nonexcludability, so that include the process of a series of key element, method, article or terminal unit not only include those key elements, but also include other key elements being not expressly set out, or also include the key element intrinsic for this process, method, article or terminal unit.When there is no more restriction, statement " including ... " or " comprising ... " key element limited, it is not excluded that there is also other key element in including the process of described key element, method, article or terminal unit.Additionally, in this article, " more than ", " less than ", " exceeding " etc. be interpreted as not including this number;" more than ", " below ", " within " etc. be interpreted as including this number.
Those skilled in the art are it should be appreciated that the various embodiments described above can be provided as method, device or computer program.These embodiments can adopt the form of complete hardware embodiment, complete software implementation or the embodiment in conjunction with software and hardware aspect.All or part of step in the method that the various embodiments described above relate to can be completed by the hardware that program carrys out instruction relevant, described program can be stored in the storage medium that computer equipment can read, for performing all or part of step described in the various embodiments described above method.Described computer equipment, includes but not limited to: personal computer, server, general purpose computer, special-purpose computer, the network equipment, embedded device, programmable device, intelligent mobile terminal, intelligent home device, wearable intelligent equipment, vehicle intelligent equipment etc.;Described storage medium, includes but not limited to: the storage of RAM, ROM, magnetic disc, tape, CD, flash memory, USB flash disk, portable hard drive, storage card, memory stick, the webserver, network cloud storage etc..
The various embodiments described above are that flow chart and/or block diagram with reference to the method according to embodiment, equipment (system) and computer program describe.It should be understood that can by the combination of the flow process in each flow process in computer program instructions flowchart and/or block diagram and/or square frame and flow chart and/or block diagram and/or square frame.These computer program instructions can be provided to produce a machine to the processor of computer equipment so that the instruction performed by the processor of computer equipment is produced for realizing the device of function specified in one flow process of flow chart or multiple flow process and/or one square frame of block diagram or multiple square frame.
These computer program instructions may be alternatively stored in the computer equipment readable memory that computer equipment can be guided to work in a specific way, the instruction making to be stored in this computer equipment readable memory produces to include the manufacture of command device, and this command device realizes the function specified in one flow process of flow chart or multiple flow process and/or one square frame of block diagram or multiple square frame.
These computer program instructions also can be loaded on computer equipment, make to perform sequence of operations step on a computing device to produce computer implemented process, thus the instruction that performs on a computing device provides for realizing the step of function specified in one flow process of flow chart or multiple flow process and/or one square frame of block diagram or multiple square frame.
Although the various embodiments described above being described; but those skilled in the art are once know basic creative concept; then these embodiments can be made other change and amendment; so the foregoing is only embodiments of the invention; not thereby the scope of patent protection of the present invention is limited; every equivalent structure utilizing description of the present invention and accompanying drawing content to make or equivalence flow process conversion; or directly or indirectly it is used in other relevant technical fields, all in like manner include within the scope of patent protection of the present invention.

Claims (18)

1. a right management method, it is characterised in that include step,
After user triggers the first operational order, characteristics of human body's code information of the sensor acquisition user of equipment;
Determine the account of user in conjunction with characteristics of human body code data base according to the characteristics of human body's code information collected;
According to default user right, if account has authority and performs described first operational order, then perform the first operational order, if account does not have authority and performs described first operational order, then terminate performing described first operational order or prompting verifying authorization.
2. a kind of right management method according to claim 1, it is characterised in that described characteristics of human body's code information includes face characteristic code information or fingerprint character code information.
3. a kind of right management method according to claim 1, it is characterised in that after user triggers the first operational order, when state application program being detected switches, characteristics of human body's code information of the sensor acquisition user of equipment;
Described application program refers to the application program that the first operational order is relevant;
The state switching of application program refers to: application program creates, starts, reconfigures, is switched to foreground, is switched to backstage, stopping and destruction.
4. a kind of right management method according to claim 1, it is characterised in that the first operational order includes instruction and operation object;
Described " have authority and perform described first operational order ", for according to the user right preset, account has the authority directly performing instruction, and has the authority of directly operation operation object;
Described " do not have authority and perform described first operational order " for according to the user right preset, having the authority directly performing instruction for account, or operation object is the object needing Authority Verification.
5. a kind of right management method according to claim 1, it is characterized in that, before user triggers the first operational order, also include step, the first operational order collection is preset respectively for the account in equipment, the set that instruction is the operational order needing Authority Verification that first operational order is concentrated, each account is corresponding one first operational order collection respectively;
The first operational order that described " have authority and perform described first operational order " triggers for user belongs to the first operational order collection;
The first operational order that described " do not have authority and perform described first operational order " triggers for user is not belonging to the first operational order collection.
6. a kind of right management method according to claim 1, it is characterized in that, described first operational order is startup or closes or switch the application program being required Authority Verification, or for accessing the file or file that need Authority Verification or being the account distribution authority in equipment.
7. a kind of right management method according to claim 1, it is characterized in that, operational order belongs to the second operational order collection, then performing described first operational order and after the setting time, performing second operational order corresponding with the first operational order always according to arranging of user right, the corresponding relation of the first operational order and the second operational order is stored in authority allocation list.
8. an authority distributing method, it is characterised in that include step, gathers characteristics of human body's code information of user, the characteristics of human body's code collected adds characteristics of human body code data base, and the characteristics of human body's code collected is associated corresponding account;And the user right of account is set.
9. a kind of authority distributing method according to claim 8, it is characterised in that described " gathering characteristics of human body's code information of user " is for gathering face characteristic code information, or fingerprint character code information.
10. a kind of authority distributing method according to claim 8, it is characterised in that the first operational order includes the execution object of instruction and instruction;
Described " arranging the user right of account " includes the set arranging the instruction needing Authority Verification, and arranges the set performing object needing Authority Verification.
11. a kind of authority distributing method according to claim 8, it is characterized in that, described " arranging the user right of account " is, the first operational order collection is preset respectively for the account in equipment, the set that instruction is the operational order needing Authority Verification that first operational order is concentrated, each account is corresponding one first operational order collection respectively.
12. a kind of authority distributing method according to claim 8, it is characterized in that, described " arranging the user right of account " also includes step, for account, the second operational order collection is set, and be that the first operational order that the second operational order is concentrated arranges the second corresponding operational order, the corresponding relation of the first operational order and the second operational order is stored in authority allocation list;
For account, if the first operational order that equipment performs belongs to the second operational order collection, then performing the first operational order and after the setting time, perform second operational order corresponding with the first operational order, the corresponding relation of the first operational order and the second operational order is stored in authority allocation list.
13. one kind for realizing the electronic equipment of rights management and distribution method, it is characterised in that includes condition code acquisition module, authority judge module;
Described condition code acquisition module is for, after user triggers the first operational order, gathering characteristics of human body's code information of user;
Described authority judge module for determining the account of user according to the characteristics of human body's code information collected in conjunction with characteristics of human body code data base;According to default user right, if account, there is authority and perform described first operational order, then perform the first operational order, if account does not have authority and performs described first operational order, then terminate performing described first operational order or prompting verifying authorization.
14. a kind of electronic equipment for realizing rights management and distribution method according to claim 13, it is characterized in that, described " condition code acquisition module is for gathering characteristics of human body's code information of user " is used for gathering face characteristic code information or fingerprint character code information for condition code acquisition module.
15. a kind of electronic equipment for realizing rights management and distribution method according to claim 13, it is characterized in that, described condition code acquisition module is for after user triggers the first operational order, when state application program being detected switches, characteristics of human body's code information of the sensor acquisition user of equipment;
Described application program refers to the application program that the first operational order is relevant;
The state switching of application program refers to: application program creates, starts, reconfigures, is switched to foreground, is switched to backstage, stopping and destruction.
16. a kind of electronic equipment for realizing rights management and distribution method according to claim 12, it is characterised in that the first operational order includes instruction and operation object;
Described " have authority and perform described first operational order ", for according to the user right preset, account has the authority directly performing instruction, and has the authority of directly operation operation object;
Described " do not have authority and perform described first operational order " is for according to the user right preset, account, having the authority directly performing instruction, or operation object is the object needing Authority Verification.
17. a kind of electronic equipment for realizing rights management and distribution method according to claim 12, it is characterized in that, described first operational order is the application program starting and needing Authority Verification, or for accessing the file or file that need Authority Verification or for distributing authority for the account in equipment.
18. a kind of electronic equipment for realizing rights management and distribution method according to claim 12, it is characterized in that, if described authority judge module belongs to the second operational order collection for the first operational order, then performing described first operational order and after the setting time, performing second operational order corresponding with the first operational order always according to arranging of user right, the corresponding relation of the first operational order and the second operational order is stored in authority allocation list.
CN201610059627.3A 2016-01-28 2016-01-28 Authority management method, authority distribution method and equipment Pending CN105760746A (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN201610059627.3A CN105760746A (en) 2016-01-28 2016-01-28 Authority management method, authority distribution method and equipment

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN201610059627.3A CN105760746A (en) 2016-01-28 2016-01-28 Authority management method, authority distribution method and equipment

Publications (1)

Publication Number Publication Date
CN105760746A true CN105760746A (en) 2016-07-13

Family

ID=56342698

Family Applications (1)

Application Number Title Priority Date Filing Date
CN201610059627.3A Pending CN105760746A (en) 2016-01-28 2016-01-28 Authority management method, authority distribution method and equipment

Country Status (1)

Country Link
CN (1) CN105760746A (en)

Cited By (7)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN106599663A (en) * 2016-12-14 2017-04-26 广东欧珀移动通信有限公司 Information security protecting method and mobile terminal
CN107741701A (en) * 2017-11-16 2018-02-27 广东乐心医疗电子股份有限公司 Intelligent wearable household control method and system for children
CN108197497A (en) * 2018-03-23 2018-06-22 维沃移动通信有限公司 A kind of browser access method and mobile terminal
WO2018233255A1 (en) * 2017-06-19 2018-12-27 格力电器(武汉)有限公司 Application usage permission assignment method and device
CN109711198A (en) * 2018-12-28 2019-05-03 努比亚技术有限公司 Application management method, mobile terminal and storage medium
CN110501996A (en) * 2019-08-30 2019-11-26 北京起重运输机械设计研究院有限公司 Stereo garage monitoring system operating right management method and system
CN113313350A (en) * 2021-04-23 2021-08-27 武汉瑞安科技发展有限公司 Internet of things data acquisition, analysis and management system

Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20140157436A1 (en) * 2012-12-04 2014-06-05 Fujitsu Limited Information processing apparatus and method of controlling same
CN104281797A (en) * 2013-07-09 2015-01-14 英业达科技有限公司 Application program execution system and method
CN105160217A (en) * 2015-07-28 2015-12-16 广东欧珀移动通信有限公司 Application control method for intelligent watch and intelligent watch
CN105243322A (en) * 2015-10-10 2016-01-13 深圳市金立通信设备有限公司 Application program control method and terminal

Patent Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20140157436A1 (en) * 2012-12-04 2014-06-05 Fujitsu Limited Information processing apparatus and method of controlling same
CN104281797A (en) * 2013-07-09 2015-01-14 英业达科技有限公司 Application program execution system and method
CN105160217A (en) * 2015-07-28 2015-12-16 广东欧珀移动通信有限公司 Application control method for intelligent watch and intelligent watch
CN105243322A (en) * 2015-10-10 2016-01-13 深圳市金立通信设备有限公司 Application program control method and terminal

Cited By (10)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN106599663A (en) * 2016-12-14 2017-04-26 广东欧珀移动通信有限公司 Information security protecting method and mobile terminal
WO2018233255A1 (en) * 2017-06-19 2018-12-27 格力电器(武汉)有限公司 Application usage permission assignment method and device
US11372961B2 (en) 2017-06-19 2022-06-28 Gree Electric Appliances (Wuhan) Co., Ltd Method and device for assigning application usage permission
CN107741701A (en) * 2017-11-16 2018-02-27 广东乐心医疗电子股份有限公司 Intelligent wearable household control method and system for children
CN108197497A (en) * 2018-03-23 2018-06-22 维沃移动通信有限公司 A kind of browser access method and mobile terminal
CN108197497B (en) * 2018-03-23 2019-12-06 维沃移动通信有限公司 browser access method and mobile terminal
CN109711198A (en) * 2018-12-28 2019-05-03 努比亚技术有限公司 Application management method, mobile terminal and storage medium
CN109711198B (en) * 2018-12-28 2023-08-11 努比亚技术有限公司 Application management method, mobile terminal and storage medium
CN110501996A (en) * 2019-08-30 2019-11-26 北京起重运输机械设计研究院有限公司 Stereo garage monitoring system operating right management method and system
CN113313350A (en) * 2021-04-23 2021-08-27 武汉瑞安科技发展有限公司 Internet of things data acquisition, analysis and management system

Similar Documents

Publication Publication Date Title
CN105760746A (en) Authority management method, authority distribution method and equipment
CN102768717B (en) Malicious file detection method and malicious file detection device
CN102170495B (en) Mobile phone application classification management method and device
CN103581187B (en) Method and system for controlling access rights
CN106325915A (en) Systems, methods, and computer-readable storage media for updating a computer firmware
CN104375836A (en) Method and device for showing lock screen window
US20200342093A1 (en) Application program starting method and apparatus and computer readable storage medium
CN103366107A (en) Method, device and mobile phone for protecting access permission of application program
KR101404888B1 (en) Method for personalizing an electronic device, associated data processing method and device
CN106127077B (en) A kind of method and terminal for protecting user privacy information
CN102880484A (en) Method and system for performing start registration, characteristic extraction and login information binding of software login window on intelligent equipment
CN105320595A (en) Application test method and device
CN107704849A (en) The face identification method and system of double verification function
CN104268462B (en) A kind of partition protecting method and apparatus of Android system
CN106815503A (en) A kind of operating system method for managing user right and system
CN105556534B (en) For suggesting the electronic equipment and method of response guide when refusing
CN101833496B (en) Detection device based on host anti-object reusability of hard disk and detection method thereof
CN109558187A (en) A kind of user interface rendering method and device
CN107506721A (en) A kind of more method for collecting iris and system
CN105871840B (en) A kind of certificate management method and system
CN107526612B (en) Program activation method and system, readable storage medium and intelligent device
CN102301369B (en) Data storage device access method and device
CN103685259A (en) Method and device for account logging in
CN106991307A (en) Using time slot scrambling and device
CN112017330A (en) Intelligent lock parameter configuration method and device, intelligent lock and storage medium

Legal Events

Date Code Title Description
C06 Publication
PB01 Publication
C10 Entry into substantive examination
SE01 Entry into force of request for substantive examination
RJ01 Rejection of invention patent application after publication
RJ01 Rejection of invention patent application after publication

Application publication date: 20160713