WO2015168936A1 - Procédé pour commander une autorisation d'accès à un résultat d'agrégation de ressource et appareil d'agrégation de ressource - Google Patents

Procédé pour commander une autorisation d'accès à un résultat d'agrégation de ressource et appareil d'agrégation de ressource Download PDF

Info

Publication number
WO2015168936A1
WO2015168936A1 PCT/CN2014/077144 CN2014077144W WO2015168936A1 WO 2015168936 A1 WO2015168936 A1 WO 2015168936A1 CN 2014077144 W CN2014077144 W CN 2014077144W WO 2015168936 A1 WO2015168936 A1 WO 2015168936A1
Authority
WO
WIPO (PCT)
Prior art keywords
resource
computing
input
resources
trapdoor
Prior art date
Application number
PCT/CN2014/077144
Other languages
English (en)
Chinese (zh)
Inventor
殷佳欣
张永靖
Original Assignee
华为技术有限公司
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by 华为技术有限公司 filed Critical 华为技术有限公司
Priority to PCT/CN2014/077144 priority Critical patent/WO2015168936A1/fr
Publication of WO2015168936A1 publication Critical patent/WO2015168936A1/fr

Links

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/40—Network security protocols

Definitions

  • the present invention relates to the field of network technologies, and in particular, to a method for controlling access rights of resource aggregation results and a resource aggregation device. Background technique
  • Information aggregation refers to taking one or more resources in the system as input, and after logical calculation, the calculation result provides external access as an output resource.
  • the resource is a classifying various information transmitted in the network or stored in the server, so that the same content or the same type of information can be marked with the same identifier, so as to facilitate the classified storage or invocation of the information, and the information is aggregated.
  • Aggregate is implemented in the form of resources.
  • an M2M (Machine to Mach ine) system an M2M application aggregates one or more resources already existing in the M2M system (referred to as aggregated resources in this patent) by creating an aggregate resource. Aggregated resources can be accessed by M2M application access.
  • the aggregated resource contains: the identifier of the aggregated resource (such as UR I (Uni Form Re s ource I dent if ier) of the aggregated resource.
  • the aggregated resource is used to indicate that the process of the aggregate will input the computing resource.
  • the aggregation mode is a separate computing resource, or a connected computing resource.
  • the aggregation mode indicates that the corresponding computing process is performed on the aggregated resource, and the computing process is provided by the computing resource.
  • the aggregation result can be obtained by the calculation process.
  • the information indicating the aggregation result resource may be the aggregation result resource itself or the identifier of the aggregation result resource.
  • the foregoing aggregation mode is composed of one or more computing resources, and the computing resources are input by the aggregated resource, and the computing resource is a calculation.
  • Process which includes input resources and output resources.
  • the output resource of one computing resource can be used as an input resource of another computing resource. If the output resource of one computing resource is used as an input resource of another computing resource, the two computing resource connections are called.
  • the result of the final output after the transformation, integration, and operation of the aggregated resource is the aggregate result resource.
  • the access permission is used to specify which applications of a resource in the M2M system can be accessed by which applications. For example, access rights can be used. Constraining a certain data can only be read by application A, and can only be written by application B.
  • This role may be a classification of general users, advanced users, and administrators.
  • a role may be associated with multiple app IDs.
  • the advantage of role-based access control is that data creators only need to care about which roles their data can be accessed by, without having to care about which applications or who are using them under each role.
  • For the aggregation result resource because the aggregation result resource is generated by the M2M system according to the process defined in the aggregate resource. Since the aggregation result resource is transformed and calculated by the aggregated resource, the aggregated resource may be obtained by performing the inverse transformation and calculation on the aggregated result resource. Therefore, visitors to the aggregated result resource may be aware of the aggregated resource. If the visitor of the aggregated result resource does not have the right to access the aggregated resource, it may invade the privacy of the aggregated resource and affect the information security of the aggregated resource. Summary of the invention
  • a resource aggregation apparatus including: a receiving unit, configured to receive an aggregation resource creation request, where the aggregation resource creation request includes: An identifier of the request access authority and the computing resource of the resource, and an input resource letter of the computing resource, and output resource information of the computing resource; an obtaining unit, configured to include, according to the aggregate resource creation request received by the receiving unit The identifier of the computing resource acquires the computing resource; a computing resource determining unit, configured to determine, according to the computing resource acquired by the acquiring unit, that an input resource of the computing resource is obtainable according to an output resource of the computing resource, where the acquiring unit is further configured to: according to the receiving unit Receiving, by the information about the input resource of the computing resource included
  • the computing resource determining unit is configured to determine, according to the trapdoor condition defined in the computing resource, that the computing resource does not satisfy the trapdoor condition;
  • the permission determining unit is specifically configured to: determine an access right of the output resource of the computing resource as an intersection of the request access authority and the access authority of the input resource of the computing resource.
  • the computing resource determining unit is specifically configured to determine that the computing resource meets a trapdoor condition defined by the computing resource, or determine that the computing resource does not include a trapping a unidirectional description of the input resource according to the output resource defined by the computing resource, and determining that the output resource of the computing resource does not have unidirectionality to the input resource;
  • the privilege determining unit is specifically configured to determine The access authority of the output resource of the computing resource is an intersection of the request access right included in the aggregate resource creation request received by the receiving unit and the access authority of the input resource acquired by the acquiring unit; or
  • the computing resource determining unit is specifically configured to determine that the computing resource meets the computing resource Determining the trapdoor condition of the source, or determining that the computing resource does not include a trapdoor condition; and determining, according to the unidirectional description of the input resource defined by the computing resource, that the output resource of the computing resource has a trapping threshold for the input resource
  • the computing resource further includes a description of the trapdoor resource;
  • a resource aggregation apparatus including: a processor, a memory, a communication interface, and a bus, wherein the processor, the memory, and the communication interface are connected to each other through the bus; Receiving an aggregate resource creation request, where the aggregate resource creation request includes: a request access right to the aggregate result resource and an identifier of the computing resource, and input resource information of the computing resource and output resource information of the computing resource; And acquiring, according to the identifier of the computing resource included in the aggregate resource creation request received by the communication interface, the computing resource, and determining, according to the computing resource, an input resource of the computing resource, according to the calculating The output resource of the resource is obtained according to the information of the input resource of the computing resource included in the aggregate resource creation request received by the communication interface; the aggregate resource received according to the communication interface Create request access rights and the input funds included in the request
  • the access right of the source determines the access authority of the output resource of the computing resource; when the output resource of the computing resource is the aggregated result resource, the
  • the determining, by the processor, that the input resource of the computing resource is obtainable according to the output resource of the computing resource, according to the computing resource is: The trapdoor condition defined in the computing resource determines that the computing resource does not satisfy the trapdoor condition; Determining, by the processor, the access permission of the output resource of the computing resource according to the request access right and the access authority of the input resource that are received by the communication interface according to the communication interface: Determining an access right of an output resource of the computing resource as an intersection of the request access authority and an access authority of an input resource of the computing resource.
  • the determining, by the processor, that the input resource of the computing resource is obtainable according to the output resource of the computing resource, according to the computing resource is: The computing resource satisfies the trapdoor condition defined by the computing resource, or determines that the computing resource does not include a trapdoor condition; and determines the computing resource according to the unidirectional description of the input resource by the output resource defined by the computing resource The output resource is not unidirectional to the input resource; and the processor determines, according to the request access right included in the aggregate resource creation request received by the communication interface and the access authority of the input resource,
  • the access authority of the output resource of the computing resource is specifically: the processor determining that the access authority of the output resource of the computing resource is the requested access right and the input included in the aggregate resource creation request received by the communication interface An intersection of access rights of resources; or, the processor determines the calculation based on the computing resources
  • the input resource of the source can be obtained according to the output resource of the computing resource: the processor determines that the computing resource.
  • the third aspect provides a method for controlling access rights of resource aggregation results
  • the resource aggregation device receives an aggregate resource creation request, where the aggregate resource creation request includes: a request access right to the aggregate result resource and an identifier of the computing resource, and an input resource letter, a package, and an output of the computing resource of the computing resource Obtaining the computing resource according to the identifier of the computing resource, and determining, according to the computing resource, that the input resource of the computing resource can be obtained according to an output resource of the computing resource; according to the input resource of the computing resource Obtaining an access right of the input resource according to the request access right and an access right of the input resource, determining an access right of an output resource of the computing resource; and when an output resource of the computing resource is an aggregate result resource,
  • the access authority of the output resource of the computing resource is used as the access permission of the aggregation result resource.
  • the determining, by the computing resource, the input resource of the computing resource, according to the output resource of the computing resource is:
  • the determining, by the computing resource, that the input resource of the computing resource can be obtained according to the output resource of the computing resource is: determining that the computing resource meets Determining a trapdoor condition of the resource definition, or determining that the computing resource does not include a trapdoor condition; and determining, according to the unidirectional description of the input resource by the output resource defined by the computing resource, the output resource of the computing resource The input resource is not unidirectional; the determining the access authority of the output resource of the computing resource according to the request access right and the access authority of the input resource is specifically: determining the output resource of the computing resource The request permission is an intersection of the request access right and the access authority of the input resource; or the determining, according to the computing resource, the input resource of the computing resource can be obtained according to the output resource of the computing resource: The computing resource satisfies a trapdoor condition defined by the computing resource, or determines that the computing resource does not include a trapdoor condition; and determines an output of the
  • An embodiment of the present invention provides a method for controlling resource access result access rights and a resource aggregation device, which can determine access to an output resource of the computing resource according to a request access right of an aggregate result resource and an access right of an input resource of a computing resource. Permission, and the access authority of the output resource of the computing resource is used as the access permission of the aggregation result resource. Therefore, the access permission of the aggregated result resource can avoid the input resource being exposed by the reverse push, thereby improving the information security of the input resource.
  • FIG. 1 is a schematic structural diagram of a resource aggregation apparatus according to an embodiment of the present invention
  • FIG. 1 is a schematic structural diagram of a resource aggregation apparatus according to another embodiment of the present invention
  • FIG. 3 is a schematic flowchart of a method for controlling access rights of a resource aggregation result according to an embodiment of the present invention
  • 4 is a schematic flowchart of a method for controlling access rights of resource aggregation results according to another embodiment of the present invention
  • FIG. 5 is a schematic diagram of a resource aggregation process according to an embodiment of the present invention
  • FIG. 6 is a schematic diagram of an application scenario of a method for controlling access rights of a resource aggregation result according to an embodiment of the present invention
  • FIG. 8 is a schematic diagram of a method for controlling a resource aggregation result access authority control method according to another embodiment of the present invention
  • FIG. 8 is a schematic diagram of an application scenario of a resource aggregation result access authority control method according to another embodiment of the present invention
  • FIG. 10 is a schematic flowchart of a method for controlling resource aggregation result access rights in the scenario shown in FIG. 8 according to an embodiment of the present invention
  • FIG. 10 is a schematic flowchart of a method for controlling resource aggregation result access rights in the scenario shown in FIG. 8 according to an embodiment of the present invention
  • FIG. 10 is a schematic flowchart of a method for controlling resource aggregation result access rights in the scenario shown in FIG. 8 according
  • FIG. 12 is a schematic flowchart of a method for controlling a resource aggregation result access right in the scenario shown in FIG. 11 according to an embodiment of the present invention.
  • An embodiment of the present invention provides a resource aggregation apparatus, which is applied to an M2M system, where the apparatus may be an Application Sercice Node (ASN) device, an intermediate node (MN, Middle Node) gateway, or an infrastructure node in an M2M system. (Infrastructure Node) platform, or a component of CSE (Common Service Entity) installed on the application service node device, intermediate node gateway or infrastructure node platform, for performing business logic flow related to information aggregation .
  • ASN Application Sercice Node
  • MN Middle Node gateway
  • CSE Common Service Entity
  • the resource aggregation apparatus includes: a receiving unit 11 , configured to receive an aggregate resource creation request, where the aggregate resource creation request includes: a request access right to an aggregate result resource and an identifier of a computing resource, and the The input resource information of the computing resource and the output resource information of the computing resource; the obtaining unit 12, configured to acquire the computing resource according to the identifier of the computing resource included in the aggregate resource creation request received by the receiving unit 11;
  • the computing resource determining unit 13 is configured to determine, according to the computing resource that is obtained by the acquiring unit 12, that an input resource of the computing resource is obtained according to an output resource of the computing resource, where the acquiring unit 12 is further configured to: The information about the input resource of the computing resource included in the aggregate resource creation request received by the receiving unit 11 acquires the access authority of the input resource; the authority determining unit 14 is configured to receive according to the receiving unit 11 The request access right and the obtaining unit included in the aggregate resource creation request The obtained access authority of the input resource determines the access authority of the output resource of the computing resource
  • the aggregated resource may be a set of aggregated resources stored in a server or a database of the M2M system, and a corresponding access right is created for each aggregated resource in the form of a list.
  • the computing resource determining unit 13 is configured to determine, according to the trapdoor condition defined in the computing resource, that the computing resource does not satisfy the trapdoor condition;
  • the authority determining unit 14 is specifically configured to determine that an access right of an output resource of the computing resource is an intersection of the request access right and an access right of an input resource of the computing resource.
  • the computing resource determining unit 13 determines that the computing resource does not meet the trapping
  • the threshold condition is specifically: the computing resource determining unit 13 determines that the trapdoor condition of the computing resource definition is false; or the computing resource determining unit 13 determines that the number of input resources of the computing resource is less than the The number of input resources defined as trapdoor resources defined in the trapdoor condition.
  • the computing resource determining unit 13 is specifically configured to determine that the computing resource satisfies a trapdoor condition defined by the computing resource, or determine that the computing resource does not include a trapping I′ 1 condition;
  • the unidirectional description of the output resource defined by the computing resource determines that the output resource of the computing resource does not have unidirectionality to the input resource;
  • the privilege determining unit 14 is specifically configured to determine the computing resource.
  • the access authority of the output resource is the intersection of the request access right included in the aggregate resource creation request received by the receiving unit 11 and the access authority of the input resource acquired by the obtaining unit 12;
  • the computing resource determining unit 13 is specifically configured to determine that the computing resource satisfies a trapdoor condition defined by the computing resource, or determine that the computing resource does not include a trapdoor condition; and input the resource according to the computing resource definition
  • the unidirectional description determines that the output resource of the computing resource has a trapdoor unidirectionality to the input resource;
  • the computing resource further includes a trap a description of the resource;
  • the authority determining unit 14 is further configured to determine an access right of the trapdoor resource according to the description of the trapdoor resource;
  • the right determining unit 14 is specifically configured to determine an access of the output resource of the computing resource
  • the rights are the sum of the request access rights included in the aggregate resource creation request received by the receiving unit 11 and the access rights of the input resources acquired by the obtaining unit 12, excluding all the trapdoors The intersection
  • the computing resource determining unit 13 determines that the number of input resources of the computing resource is greater than or equal to the number of input resources defined as the trapdoor resource in the trapdoor condition.
  • the trapdoor resource description includes a trapdoor resource identifier; the right determining unit 14 determines, according to the description of the trapdoor resource, the access right of the trapdoor resource, specifically: the permission determining unit 14 according to the trapdoor resource Identifying access rights to the trapdoor resource.
  • the computing resource input resource includes an output resource of the aggregated resource and/or other computing resource; when the computing resource inputs the resource
  • the obtaining unit 12 obtains the access authority of the input resource according to the input resource information of the computing resource included in the aggregate resource creation request received by the receiving unit 11 as follows: The unit 12 obtains the access authority of the aggregated resource as the access authority of the input resource of the computing resource according to the aggregated resource information included in the aggregated resource creation request received by the receiving unit 11.
  • the computing resource input resource is When the output resource of the computing resource is calculated, the acquiring unit 12 obtains the access authority of the input resource according to the information about the input resource of the computing resource included in the aggregated resource creation request received by the receiving unit 11 as follows: The obtaining unit 12 is created according to the aggregate resource received by the receiving unit 11 The output resource information of the other computing resources included in the request acquires the access authority of the output resource of the other computing resource as the access authority of the input resource of the computing resource.
  • An embodiment of the present invention provides a resource aggregation apparatus, which is capable of determining an access right of an output resource of the computing resource according to a request access right of an aggregation result resource and an access authority of an input resource of a computing resource, and the computing resource is The access rights of the output resource are the access rights of the aggregated result resource. Therefore, the access permission of the aggregated result resource can avoid the input resource being exposed by the reverse push, thereby improving the information security of the input resource. Further, when the input resource is an aggregated resource, the security of the aggregated resource is improved.
  • an embodiment of the present invention provides a resource aggregation apparatus, including: a processor 21, a memory 22, a communication interface 23, and a bus 24.
  • the processor 21, the memory 22, and the communication interface 23 The bus 24 is connected to each other and completes communication with each other; the bus 24 can be an I SA (Industry System) bus, PC I (Per i phera l Component) , external device interconnection) bus Or EISA (Extended Indus try Standard Architecture) bus.
  • the bus can be divided into an address bus, a data bus, a control bus, and the like. For ease of representation, only one thick line is shown in Figure 2, but it does not mean that there is only one bus or one type of bus. among them:
  • the memory 22 is for storing executable program code including computer operating instructions.
  • Memory 22 may include high speed RAM memory and may also include non-volatile memory, such as at least one disk memory.
  • the processor 21 may be a central processing unit (CPU), or an application specific integrated circuit (ASIC), or one or more configured to implement the embodiments of the present invention. integrated circuit.
  • the communication interface 23 is configured to receive an aggregate resource creation request, where the aggregate resource creation request includes: a request access right for the aggregation result resource and an identifier of the computing resource, and an input resource letter of the computing resource, and the calculating Outputting resource information of the resource; the processor 21, configured to acquire the computing resource according to the identifier of the computing resource included in the aggregate resource creation request received by the communication interface 23, and determine, according to the computing resource
  • the input resource of the computing resource can be obtained according to the output resource of the computing resource; and the accessing authority of the input resource is obtained according to the information of the input resource of the computing resource included in the aggregated resource creation request received by the communication interface 23 And determining, according to the request access right included in the aggregate resource creation request received by the communication interface 23, the access authority of the input resource, the access authority of the output resource of the computing resource; when the output resource of the computing resource is an aggregate When the resource is the result, the output resource of the computing resource is Access rights Access rights to the aggregated result resource.
  • the processor 21 is configured to determine, according to the computing resource, that the input resource of the computing resource is obtainable according to the output resource of the computing resource, where the processor 21 is configured according to the computing resource.
  • the gate condition determines that the computing resource does not satisfy the trapdoor condition;
  • the processor 21 determines, according to the request access right that is included in the aggregate resource creation request that is received by the communication interface 23, and the access authority of the input resource, that the access authority of the output resource of the computing resource is: The processor 21 determines an output of the computing resource The access rights of the resources are the intersection of the request access rights and the access rights of the input resources of the computing resources.
  • the determining, by the processor 21, that the computing resource does not satisfy the trapdoor condition is: the processor 21 determines that the trapdoor condition of the computing resource definition is false; or the processor 21 determines The number of input resources of the computing resource is less than the number of input resources defined as the trapdoor resource in the trapdoor condition.
  • the processor 21 determines, according to the computing resource, that the input resource of the computing resource is obtainable according to the output resource of the computing resource, where the processor 21 determines that the computing resource meets the calculation Determining a trapdoor condition of the resource, or determining that the computing resource does not include a trapdoor condition; and determining, according to the unidirectional description of the input resource by the output resource defined by the computing resource, the output resource of the computing resource to the input resource
  • the processor 21 determines the output resource of the computing resource according to the request access right included in the aggregate resource creation request received by the communication interface 23 and the access authority of the input resource.
  • the access authority is specifically: the processor 21 determines that the access authority of the output resource of the computing resource is the requested access right and the input resource included in the aggregate resource creation request received by the communication interface 23 An intersection of access rights; or, the processor 21 determines, according to the computing resource, an input resource of the computing resource.
  • the obtaining of the output resource according to the computing resource is specifically: the processor 2 1 determines that the computing resource satisfies a trapdoor condition defined by the computing resource, or determines that the computing resource does not include a trapping I′ 1 condition;
  • the unidirectional description of the input resource defined by the computing resource determines that the output resource of the computing resource has a trapdoor unidirectionality to the input resource; and the computing resource further includes a description of the trapdoor resource; And determining, according to the description of the trapdoor resource, the access authority of the trapdoor resource; and the processor 21 according to the aggregated resource creation request received by the communication interface 23
  • the access authority of the input resource determines that the access authority of the output resource of the computing resource
  • the determining, by the processor 21, that the computing resource meets the trapdoor condition is: the processor 21 determines that the trapdoor condition defined by the computing resource is true; or the processor 21 determines the calculating The number of input resources of the resource is greater than or equal to the number of input resources defined as the trapdoor resource in the trapdoor condition.
  • the trapdoor resource description includes a trapdoor resource identifier; the processor 21 determines, according to the description of the trapdoor resource, the access permission of the trapdoor resource, that is, the processor 21 obtains according to the trapdoor resource identifier. The access rights of the trapdoor resource.
  • the computing resource input resource includes an output resource of the aggregated resource and/or other computing resource; when the computing resource inputs the resource When the resource is aggregated, the processor 21 obtains the access authority of the input resource according to the information about the input resource of the computing resource included in the aggregate resource creation request received by the communication interface 23, which is specifically: The processor 21 acquires access rights of the aggregated resource as access rights of the input resource of the computing resource according to the aggregated resource information included in the aggregated resource creation request received by the communication interface 23; the computing resource When the input resource is an output resource of another computing resource, the processor 21 acquires the input resource according to the information of the input resource of the computing resource included in the aggregate resource creation request received by the communication interface 23
  • the access authority is specifically: the processor 21 creates the aggregated resource according to the communication interface 23
  • the output resource information of the other computing resources included in the request acquires the access authority of the output resource of the other computing resource as the access authority of the input resource of the computing resource.
  • An embodiment of the present invention provides a resource aggregation apparatus, which is capable of determining an access right of an output resource of the computing resource according to a request access right of an aggregation result resource and an access authority of an input resource of a computing resource, and the computing resource is The access rights of the output resource are the access rights of the aggregated result resource. Therefore, the access permission of the aggregated result resource can avoid the input resource being exposed by the reverse push, thereby improving the information security of the input resource. Further, When the input resource is an aggregated resource, the security of the aggregated resource is improved.
  • an embodiment of the present invention provides a method for controlling access rights of a resource aggregation result, which is implemented by the foregoing resource aggregation apparatus, and specifically includes the following steps:
  • the resource aggregation device receives an aggregate resource creation request.
  • the aggregate resource creation request includes: a request access right to the aggregate result resource, an identifier of the calculation resource, and an input resource letter, a package, and an output resource information of the computing resource.
  • the identifier of the computing resource is used to obtain a corresponding computing resource in the computing resource set of the M2M system, where the aggregated resource is used as an input resource of the computing resource, and the output resource of the computing resource is used as an aggregation result resource.
  • the input resource of the computing resource included in the aggregate resource creation request is specifically: an output resource of the aggregated resource and/or other computing resource
  • the output resource of the computing resource may be used as an input resource or an aggregate result resource of other computing resources; the aggregate resource creation request may be from an application connected to the resource aggregation device in the M2M system.
  • the resource aggregation device obtains the computing resource according to the identifier of the computing resource, and determines, according to the computing resource, that the input resource of the computing resource can be obtained according to the output resource of the computing resource.
  • the resource aggregation device acquires the access authority of the input resource according to the information of the input resource of the computing resource.
  • the input resource of the computing resource may be an aggregated resource, or may be an output resource of other computing resources. It is worth noting that there is no strict sequence between steps 1 02 and 03.
  • the resource aggregation device determines the access authority of the output resource of the computing resource according to the request access right and the access right of the input resource.
  • the resource aggregation device uses the access authority of the output resource of the computing resource as the access permission of the aggregation result resource.
  • the access permission of the output resource output by the computing resource is the aggregation result resource.
  • the aggregation device feeds the access rights of the aggregated result resource to the connected application in the M2M system in response to the packet, in the form of a packet, so that the application accesses the aggregated level resource under the access authority of the aggregated result resource.
  • the method for controlling the access rights of the resource aggregation result provided by the embodiment of the present invention is capable of accessing the output resource of the computing resource determined according to the request access right of the aggregation result resource and the access authority of each input resource (including the aggregated resource).
  • an embodiment of the present invention provides a method for controlling access rights of a resource aggregation result, including the following process:
  • the resource aggregation device receives the aggregate resource creation request.
  • the aggregation resource creation request includes: a request access right Q for the aggregation result resource, an identifier of the calculation resource, input resource information and output resource information of the calculation resource; wherein, at least one calculation resource and input resource information of the calculation resource
  • the output resource information constitutes an aggregation mode; and the information of the input resource may be information of the aggregated resource, such as an identifier of the aggregated resource, a URL, or the like, and may also be information of an output resource of other computing resources.
  • the input resource is an output resource of another computing resource
  • the input resource information of the other computing resource is the input resource information of the computing resource
  • the aggregate resource creation request may be considered to include only the input resource of the computing resource.
  • Information An optional case is that the aggregate resource creation request further includes output resource information; the aggregate resource creation request may be from an application connected to the resource aggregation device in the M2M system.
  • at least two computing resources may be included in the aggregation mode, where each computing resource includes respective input resource information and output resource information.
  • the input resource of the computing resource may be an output resource of the aggregated resource and/or other computing resources; the output resource of the computing resource may be used as an input resource or an aggregated result resource of other computing resources. As shown in FIG.
  • the computing resource E defines the input resources of the aggregated resources A and B as the computing resource E, and the output resource that defines the computing resource E as the input resource of the computing resource H; and the aggregated resource C as the computing resource.
  • the input resource of F, and the output resource of the computing resource F is used as an input resource of the computing resource H.
  • the output resource of the computing resource H is used as a computing aggregate result resource. Such as If the aggregation mode has only one computing resource, all the aggregated resources are the input resources of the computing resource, and the output resource of the computing resource is the aggregation result resource.
  • the input resource information, the packet, and the output resource information of the computing resource included in the aggregate resource creation request are specifically: Input resource information, and output resource information of each computing resource.
  • step 202 Determine whether a computing resource satisfies a trapdoor condition.
  • a trapdoor condition is defined in the computing resource.
  • the resource aggregation device determines whether the computing resource includes a trapdoor condition. If the trapdoor condition is included, go to step 2 02, otherwise, go directly to step 2 05. Specifically, in step 202, the resource aggregation device determines that the computing resource meets the trapping condition, and continues to perform step 205; otherwise, performs step 203.
  • the computing resource satisfies the trapdoor condition indicating that the trapdoor condition of the computing resource definition is true, or the number of input resources of the computing resource is greater than or equal to the number of input resources defined as the trapdoor resource in the trapdoor condition.
  • Calculating the resource does not satisfy the trapdoor condition indicates that the trapdoor condition of the computing resource definition is false; or, the number of input resources of the computing resource is less than the number of input resources defined as the trapdoor resource in the trapdoor condition.
  • the true (t ure ) or false ( false ) of the trapdoor condition is a boolean type (boo l ) for determining whether the trapdoor condition is true, wherein the trap condition is true to indicate that the trapdoor condition is satisfied that the immediate computing resource is satisfied.
  • the trapping condition if the condition is false, it means that the trapping condition is not immediately calculated.
  • the resource does not satisfy the trapping condition; it can be understood that the use of other expressions of true or false should also belong to the scope of protection of this application, for example: correct or Errors, right or wrong, yes or no, etc. are no longer here - enumeration.
  • the quantity of the input resource of the computing resource is greater than or equal to the input resource defined as the trapdoor resource in the trapdoor condition.
  • the quantity, or the number of input resources of the computing resource is less than the number of input resources defined as the trapdoor resource in the trapdoor condition.
  • the output resource of the computing resource has access rights, and the computing resource in the initial state receives the request access right received in step 201 as an access right; the initial state means that the computing resource has not been processed by the following process; all the input resources at this time Access rights can be determined, if the input resource of the computing resource is the aggregated resource itself, then the access rights It can be obtained from the system server or database; if the input resource of the computing resource is the output resource of other computing resources, this indicates that other computing resources have been processed by the following processes, so the access rights of the input resources of the computing resource can also be determined. of. For example, in the example shown in FIG.
  • each computing resource includes two input resources, and the access resources of the computing resources are accessed.
  • the process of determining the rights is in units of each computing resource.
  • the output resource of the resource updates the unidirectionality of the input resource with specific reference to the subsequent steps.
  • the resource aggregation device acquires access rights of the input resource that is the computing resource according to the input resource information of the computing resource, and then performs step 204.
  • the input resource of a computing resource may be an aggregated resource or an output resource of other computing resources.
  • the resource aggregation device acquires the input resource.
  • the access permission is specifically: obtaining the access permission of the aggregated resource according to the identifier of the aggregated resource.
  • the resource aggregation device sends a permission acquisition request to the aggregated resource according to the aggregated resource identifier (such as UR I ) to obtain a description of the aggregated resource including the access right of the aggregated resource.
  • the description of the access rights may be the identity of the access rights resource.
  • the resource aggregation device further acquires access rights of the aggregated resource according to the access rights resource identification.
  • the accessing authority of the resource aggregation device to obtain the input resource is specifically: acquiring the output resource information according to other computing resources
  • the access authority of the output resource of the other computing resource of the input resource of the computing resource refers to the obtaining method of the access rights of the output resources of the computing resources provided after the step 204 of the embodiment.
  • the creation request of the aggregated resource includes an identifier of the computing resource (such as UR I ), and input resource information and output resource information of each computing resource. And describe the relationship of each computing resource in the aggregation mode by using xm l or other means, where the specific input resource of the computing resource is specifically referred to herein. Source information and output resource information.
  • the resource aggregation device obtains the computing resource by calculating the resource identifier such as UR I, wherein the computing resource may be stored in a server or a database of the M2M system.
  • the method for obtaining the computing resource by the resource aggregation device belongs to the prior art, and is not described in detail in the embodiment of the present invention.
  • step 204 Determine an access right of the output resource of the computing resource according to the access permission of the input resource of the computing resource and the requesting access right, and then perform step 212.
  • the access permission of the output resource of the computing resource is a requesting access right.
  • An intersection of Q and access rights of all input resources of the computing resource; all input resources of the computing resource may all be aggregated resources, or output resources including aggregated resources and other computing resources.
  • the process of determining the access authority of the input resource is different according to the type of the input resource, and details are not described herein again in step 203.
  • step 203 access to all input resources of the computing resource of the step is obtained.
  • Permissions for example, the access permission for the first input resource is S 1 , the access permission for the second input resource is S2, and the access permission for the third input resource is S 3 .
  • step 205a And obtaining a unidirectional type by using the step 205a, wherein if the output resource of the computing resource has complete unidirectionality to the input resource, performing step 208; if the output resource of the computing resource has a trap for the input resource After the step 209 is performed, the step 209 is performed; the output resource of the computing resource is not unidirectional to the input resource, and the step 206 is performed after the step 206 is performed; wherein the computing resource includes the calculating A unidirectional description of the input resource of the resource's output resource.
  • the computing resource includes an input resource description, an output resource description, a calculation process description, and a unidirectional description of the input resource of the computing resource to the input resource; the input resource description is used to describe the element as the input resource of the computing resource. Data;
  • the unidirectional description of the input resource of the computing resource includes whether the output resource of the computing resource has unidirectionality to the input resource, and whether it is completely unidirectional or trapped.
  • the number of elements of the input resource includes the resource type of the input resource, the data structure and/or the resource deployment, etc.; the output resource description is used to describe the metadata of the output resource; the calculation process description refers to the description of the calculation process defined in the computing resource.
  • the unidirectionality of the output resource of the computing resource to the input resource includes complete unidirectionality or trapdoor unidirectionality.
  • the fully unidirectional representation indicates that the input resource of the computing resource cannot be derived from the output resource of the computing resource.
  • the computing resource does not include the trapdoor resource.
  • the trapdoor unidirectional representation can calculate the input resource according to the output resource and other specific resources (the specific resource is the input resource of the computing resource), therefore, the resource that can be used to derive the input resource by using the output resource and other specific resources is called Trap resources. Therefore, when the computing resource has a trapdoor one-way, the computing resource also needs to define the trapped I'1 resource.
  • the output resource of the computing resource does not have unidirectionality to any one of the input resources. For example: If the computing resource is an average of three input resources (such as input input resource A, input resource B, and input resource C), then the computing resource inputs any one of the three input resources (assumed to be input resource A).
  • the trapdoor unidirectionality is that the input resource A can be derived based on the average of the output and the remaining two input resources (input resources B and C). The remaining two input resources (input resources B and C) become trapdoor resources.
  • the trapping condition indicates the number of input resources, and only when the input resource is not less than two, The computing resource has unidirectionality for any of its input resources.
  • the resource aggregation device acquires access rights of the input resource of the computing resource according to the input resource information of the computing resource, and then performs step 207.
  • step 203 access rights of all input resources of the computing resource are directly acquired.
  • the unidirectional judgment of the output resource of the computing resource is performed sequentially for each input resource, so in step 207, when the access authority of the output resource of the computing resource is determined according to the access authority of the first input resource, The intersection of the request access authority Q and the access authority S 1 of the first input resource is used as the access authority T; and when the access authority of the output resource of the computing resource is updated according to the access authority of the other input resource, the input resource according to the previous input resource is Access rights determine the access rights of the output resources of the computing resource T' and the access rights of the other input resources to intersect the update access rights of the output resources of the computing resource, which are considered
  • the unidirectionality of the output resource to the computing resource may be different for each input resource, so the access authority of the output resource of the computing resource determined according to the access authority of the previous input resource may be step 207 or step 208 or step 210 Any method.
  • step 208 If the output resource of the computing resource has complete unidirectionality to the input resource, use the request access permission as an access permission of an output resource of the computing resource, and then perform step 211. It can be understood that the unidirectional judgment of the output resource of the computing resource is performed sequentially for each input resource, so in step 208, when the access authority of the output resource of the computing resource is determined according to the access authority of the first input resource, Request access rights Q as access rights T. As an alternative, since the unidirectionality of the output resource of the computing resource may be different for each input resource, the access authority of the output resource of the computing resource determined according to the access authority of the previous input resource may be step 207 or Any of the methods of step 208 or step 210.
  • step 209 Acquire an access right of the input resource according to the input resource information of the computing resource, and determine an access right of the trapdoor resource according to the description of the trapdoor resource, and then perform step 210.
  • the access permission of the trapdoor resource is determined according to the description of the trapdoor resource, so the description of the resource further including the trapdoor resource is calculated; as two alternative manners, the first type: the trapdoor resource is When one or more of the input resources of the resource are calculated, according to the description of the trapdoor resource, the access permission of the input resource may be directly obtained as the access permission method of the trapdoor resource. Referring to step 202, the access mode of the input resource is obtained.
  • the method further includes: the trapdoor resource description includes a trapdoor resource identifier (UR I ), and the access authority of the trapdoor resource is obtained according to the trapdoor resource identifier.
  • UR I trapdoor resource identifier
  • the specific method refers to the access authority acquisition method of the input resource, and is not described in detail.
  • T is the access authority of the output resource of the computing resource
  • X is the intersection of the access rights of all trapdoor resources
  • Q is the requested access right
  • S is the access authority of the input resource.
  • step 21 Determine whether the computing resource has other input resources; if otherwise, execute step 212, if yes, perform step 205 on the next input resource of the computing resource; that is, determine the output resource of the computing resource to the next input. Whether the resource is unidirectional.
  • the specific step 212 is to determine, according to the output resource information, an output resource of the computing resource as an aggregation result resource, and if the output resource of the computing resource is used as an input resource of another computing resource, determining that the output resource of the computing resource is not As an aggregation result resource, performing step 202 on the computing resource that uses the output resource of the computing resource as its input resource, and traversing all the computing resources; if the resource is the aggregation result, the access authority of the output resource of the computing resource is used. As access rights of the aggregation result resource, step 21 3 is performed. Referring to FIG.
  • the foregoing traversal process refers to obtaining a computing resource E according to a computing resource, an access right of the aggregated computing resource, an access right of the aggregated resource B, and a requesting access right to the output resource of the computing resource E.
  • the access authority of the output resource F is obtained by the access authority of the output resource, and the access authority of the output resource of the computing resource F is obtained according to the access authority of the aggregated resource C and the requested access right of the output resource of the computing resource F,
  • the access authority for obtaining the output resource of the computing resource E and the access authority for obtaining the output resource of the computing resource F are not in a specific order; finally, according to the access authority of the output resource of the computing resource E and the access authority of the output resource of the computing resource F and
  • the request access right of the output resource of the computing resource H acquires the access authority of the output resource of the computing resource H, and the access authority of the output resource of the computing resource H is used as the access right of the aggregation result resource J, where for each
  • the last computing resource is an aggregate resource creation request
  • the output resource information of the computing resource is an aggregation result resource.
  • Step 2 1 2 specifically refers to looping all the computing resources to step 2 0 3 to step 2 1 1 until the aggregation resource of the aggregate resource creation request is calculated.
  • the last computing resource of the computing resource set is calculated to obtain the access of the output resource of the last computing resource. Permissions are the access rights to the aggregated result resource.
  • Differentiating resources when the computing resources have sequentiality on the aggregated computing of the input resources, the first, second, ... can be understood as the order in which the computing resources are aggregated for the input resources, when computing resources When there is no order for the aggregate calculation of the input resources, the first, second, ... can only be understood as the distinction of the input resources; and the calculation is performed on whether the output resources of the computing resources are used as the input resources of other computing resources.
  • the resource is the standard of the last computing resource in the aggregation mode, and the computing resource in the same aggregation mode is based on the relationship between the input resource and the output resource (described in step 2 01).
  • the computing resource of the input resource is first, and the computing resource that outputs the aggregated result resource is arranged in the following manner.
  • this is only a description of the embodiment to explain embodiments of the present invention provides, to achieve the other object of the embodiments described embodiment alternative embodiment of the present invention should be within the scope of the present disclosure.
  • An embodiment of the present invention provides a method for controlling access rights of a resource aggregation result, which is capable of accessing an access resource according to a request for an aggregated result resource and an access authority of an input resource of a computing resource. Determining an access right of the output resource of the computing resource, and using an access right of the output resource of the computing resource as an access right of the aggregation result resource. Therefore, the access permission of the aggregated result resource can avoid the input resource being exposed by the reverse push, thereby improving the information security of the input resource. When the input resource is an aggregated resource, the security of the aggregated resource is improved.
  • the resource aggregation device determines, according to the computing resource, that the input resource of the computing resource can be obtained according to the output resource of the computing resource, and may include the steps in the embodiment corresponding to FIG. 202, step 205, and a description of step 205a. Specifically, the resource aggregating device determines, according to the computing resource, that the input resource of the computing resource can be obtained according to the output resource of the computing resource, in the step 202, determining that the computing resource meets the computing resource definition.
  • the resource aggregation device determines, according to the computing resource, that the input resource of the computing resource can be obtained according to the output resource of the computing resource according to the computing resource: Determining that the computing resource satisfies a trapdoor condition of the computing resource definition, or determining in step 202 that the computing resource does not include a trapdoor condition; and in step 205, determining a one-way input resource according to the computing resource Determining that the output resource of the computing resource has a trapdoor unidirectionality to the input resource (as a The method further includes determining, according to the unidirectional description of the input resource defined by the computing resource, that the output resource of the computing resource has complete unidirectionality to the input resource; or the
  • Example 1 The calculation of the average power consumption of the cell family is taken as an example, as shown in FIG.
  • power companies, residential households, and municipalities are all M2M systems. Registered user.
  • the smart meter reading service deployed by the power company, the electricity meter reading value of the residential households is stored in the M2M platform, and the community residents can only have access to the meter reading value of their own electricity.
  • Xiao Liu Because of the cooperation between the municipal department staff Xiao Liu and the households B, C and D, Xiao Liu has access to the electricity meter reading values of households B, C and D to help them analyze the electricity consumption and give advice. Suggest. However, Xiao Liu did not have access to the meter reading value of household A. In this scenario, the excellent energy-saving community selection team of the municipal department needs to average the electricity consumption of each community, and evaluate the most economical cells among multiple cells.
  • the municipal excellent energy-saving community selection team creates an aggregation resource M in the M2M platform through the M2M application, and calculates the average value of the electricity consumption of the community households, and specifies the access rights of the aggregation result resources as the ID of the selection team member and the municipal department staff.
  • Xiao Liu's ID The access permission of the aggregation result resource specified in the request is the request access authority.
  • the created aggregation resource M includes the following information: The aggregated resource: Each cell resident ID.
  • Aggregation method Contains a computing resource, average is used to average.
  • Aggregation result resource The average power consumption of the cell.
  • Request access to the aggregated result resource ⁇ ID of the selection panel member, Xiao Liu's ID ⁇ .
  • the specific example of the aggregation resource M is:
  • the URI of the aggregate resource M is: hUp: ⁇ baseURI/Mashup_M.
  • Aggregated resources of aggregated resources M including: MeterA, MeterB, MeterC, and MeterD.
  • Aggregate resource M contains the computing resource average.
  • the input resource Input of the computing resource is: MashupResources is the aggregated resource.
  • the output resource output of the computing resource is: MashupResult , which is the aggregate result resource.
  • the URI of the aggregate result resource is: http: ⁇ baseURI/averge_meter ⁇ /MashupResult>.
  • the access URI is: http: / /baseURI/accessRightA ⁇ /ResultAccessRight>, where AccessRightA describes the municipal consulting company with read access.
  • Input resource The meter reading value of the numeric type.
  • the expression of the computing resource average is as follows:
  • the name of the computing resource is: average
  • the storage address is: http: //baseURI /compute-average
  • the resource aggregation device can obtain the computing resource according to the address (URI).
  • the type Input type of the computing resource input resource is: NUMERIC, which means that the input resource is required to be numeric.
  • the number of input resources is: unlimited, that is, there is no limit to the number of input resources.
  • the unidirectional type of the computing resource is: Trap, that is, the output resource of the computing resource is trapdoor unidirectional to the input resource.
  • the trapdoor resource is: all other inputs, that is, other aggregated resources other than the protected aggregated resource.
  • the trapdoor resource is the meter reading value of the resident BCD.
  • the conditions are: number of input no less than 2, that is, the number of input resources is not less than 2. Because for the averaging computing resources, if there is only one input resource, which is very straightforward, the average value is the specific value of the aggregated resource. Therefore, it is meaningful to talk about unidirectionality only when the number of input resources is greater than or equal to 2.
  • the type NUMERIC of the computing resource output resource is: a numeric value.
  • the access permission determination process of the aggregation result resource is as follows:
  • the aggregate resource creation request includes an identifier (such as a URL) of the two aggregated resources, and a request access right Q to the aggregated result resource is:
  • the ID of the municipal consulting company that is, the municipal consulting company has read permission, and the identifier of the computing resource ( For example: http: //baseURI/compute-average), the input resource information and the output resource information of the computing resource.
  • the input resource information is: MeterA, MeterB, MeterC and MeterD.
  • the output resource information is: http: I /baseURI/averge_meter ⁇ /MashupResul t>.
  • the last computing resource is a computing resource whose input resource is not defined as an input resource of another computing resource in the aggregate resource creation request.
  • an aggregate resource creation request only one The output resource of the computing resource is used as the aggregate result resource. Therefore, in this embodiment, the input resource of the calculation source is the aggregated resource, and the output resource is the aggregated result resource.
  • the input resource information and the output resource information of the at least one computing resource and the computing resource are included in the aggregation mode, and the computing resources included in the aggregation mode are averaged.
  • step 302 Determine that the computing resource is averaged to satisfy the trapdoor condition. Before step 302, an analysis of the average value average is also included, and it is determined that the calculation resource averaging average includes a trapdoor condition. Therefore, step 302 is directly executed. Specifically, in this step, because there are four input resources, and the number of input resources is greater than two, the trapdoor condition that the average value of the computing resources is averaged is satisfied.
  • the unidirectional type of the average computing resource is: Trap, that is, the output resource of the computing resource is trapdoor unidirectional to the input resource. Therefore, the average output resource has a trapping unidirectionality for the household A's meter reading value as the first input resource, and the household A's meter reading value is the first input resource (ie, the first aggregated resource); The resource is: all other input, which is the meter reading value of the household BCD.
  • step 102 wherein the resource aggregation device determines, according to the computing resource, that the input resource of the computing resource can be obtained according to the output resource of the computing resource. Specifically, it is determined in step 202 that the computing resource meets the trapdoor condition defined by the computing resource; and in step 205, the output resource of the computing resource is determined according to the unidirectional description of the input resource defined by the computing resource.
  • the input resource has a trapdoor unidirectionality, and the corresponding step 202 in this embodiment specifically determines that the computing resource averaging meets the trapdoor condition; corresponding step 205 in this embodiment, step 303 specifically determines the output resource of average.
  • the meter reading value for the household A is unidirectional as the first input resource, and the one-way type is trapdoor unidirectional.
  • XA is the intersection of the access rights of the meter reading values of the trapdoor resource households B, C, and D. Therefore, in addition to Xiao Liu, the power company that has access to the meter reading values of the trapdoor resources B, C, and D also has the authority for A. Since others other than the power company want to obtain the meter reading value of A, they need to know the aggregation method.
  • the access authority of the output resource whose calculation resource is averaged is ⁇ the ID of the member of the selection panel ⁇ .
  • the access rights process for the output resources includes:
  • the unidirectional type of the average computing resource is: Trap, that is, the output resource of the computing resource is trapdoor unidirectional to the input resource. Therefore, the average output resource has a trapping unidirectionality as the first input resource for the meter reading value of the household B, and the meter reading value of the household B is the first input resource (ie, the first aggregated resource); The resource is: all other input, that is, the trapdoor resource is the meter reading value of the resident ACD.
  • the corresponding step 205 in the embodiment is specifically determining that the output resource of the average is unidirectional as the second input resource, and the one-way type is the trapping order. Directional.
  • step 304a determining access rights to the meter reading value of the household B and access rights of the meter reading value of the trapping resource household ACD.
  • XB is the intersection of the access rights of the meter reading values of the trapdoor resources A, C, and D. Therefore, in addition to Xiao Liu, the power company that has access to the meter reading values of the trapdoor resources A, C, and D also has the authority to B. Since others other than the power company want to obtain the meter reading value of B, it is necessary to know the aggregation method. The calculation resource average and the meter reading values of the trapping resources A, C, and D are used.
  • the computing resource average has input resources other than the meter reading values of the households A and B.
  • the access authority process for updating the output resource of the computing resource average according to the third input resource user C includes:
  • the unidirectional type of the average computing resource is: Trap, that is, the output resource of the computing resource is trapdoor unidirectional to the input resource. Therefore, the average output resource has a trapping unidirectionality as the first input resource for the meter reading value of the household C, and the meter reading value of the household C is the first input resource (ie, the first aggregated resource);
  • the resource is: all other input, that is, the trapdoor resource is the meter reading value of the resident ABD.
  • step 303b specifically determines that the output resource of the average is the unidirectionality of the meter reading value of the household C as the third input resource, and the unidirectional type is the trapping order.
  • Directional. 304b determine access rights to the meter reading value of the household C and copy the household ABD of the trapping resource Access to table values.
  • XC is the intersection of the access rights of the meter reading values of the trapdoor resources A, B, and D. Therefore, in addition to Xiao Liu, power companies that have access to the meter reading values of trapdoor resources A, B, and D also have authority over C, because others other than the power company want to obtain the meter reading value of C.
  • the calculation resource average and the meter reading values of the trapping resources A, B, and D, so the output resource of the computing resource has a unidirectionality to C other than the power company, that is, the SingleWay type defined in the computing resource average "Trap", at this time, the access authority TC of the output resource for calculating the resource averaging is ⁇ the ID of the member of the selection panel ⁇ . Since the computing resource average also has the meter reading value of the input resource D in addition to the meter reading values of the households A, B, and C, the following steps are specifically included: The output of the computing resource average is updated according to the fourth input resource user D.
  • the process of accessing resources includes: 303c: Determine the output resource of average to have the unidirectionality of the meter reading value of the household D as the third input resource.
  • the unidirectional type of the average computing resource is: Trap, that is, the output resource of the computing resource is trapdoor unidirectional to the input resource. Therefore, the average output resource has a trapping unidirectionality as the first input resource for the meter reading value of the household D, and the meter reading value of the household D is the first input resource.
  • the trapdoor resource is: all other input, that is, the trapdoor resource is the meter reading value of the household ABC, referring to the description of step 303, the corresponding step 205 is specifically determined in step 303c in the embodiment.
  • the average output resource has a unidirectionality as the third input resource for the meter reading value of the household D, and the unidirectional type is trapdoor unidirectional.
  • step 304c determine the access rights to the meter reading value of the household D and the copy of the household resource ABC Access to table values.
  • XD is the intersection of the access rights of the meter reading values of the trapdoor resources A, B, and C. Therefore, in addition to Xiao Liu, the power company that can access the meter reading values of the trapdoor resources A, B, and C also has the authority to D. Since others other than the power company want to obtain the meter reading value of D, it is necessary to know the aggregation method.
  • the output resource information of the computing resource average in the aggregate resource creation request is a Marshup result
  • Example 2 The residential household electricity distribution analysis is taken as an example for description. The example is based on multiple computing resources and each computing resource has complete unidirectionality or no single item property of the input resource, as follows: As shown in Figure 8, the municipal consulting company needs to calculate the monthly power consumption of the residential households. Therefore, the M2M application creates aggregated resources in the M2M platform to obtain this result. In this embodiment, the meter reading data of the cell resident ABCD is saved in the M2M platform. The municipal consulting company creates the aggregation resource J in the M2M platform through the M2M application to obtain the percentage of the monthly household electricity consumption of the residential households greater than 1 billion joules, and the specified aggregation result resources can only be accessed by the municipal consulting company.
  • the aggregated resource J is used to calculate the distribution of monthly power consumption.
  • the created aggregated resource J includes the following information:
  • Aggregation result resource The power consumption distribution of the cell.
  • the URI of the aggregate resource J is: http: ⁇ baseURI/Mashup_J.
  • the aggregate resource J contains the calculation resource convert , the calculation resource compare, and the calculation resource analyse. And input resources and output resources for each computing resource.
  • the input resource input of the computing resource convert is: MashupResources, that is, the aggregated resource; and the output resource output is: InputOfComputCompare, that is, the input resource of the computing resource compare; the number of repetitions of the computing resource is: OneForEachMa shupResource, for each aggregated resource , another 'J to perform a conversion.
  • the input resource input of the computing resource compare is: Out utOf ComputeConver t , which is the output resource of the computing resource convert; the output of the compare output resource is: InputOfComputAnalyse, which is the input resource of the computing resource Analyse; the number of repetitions of the computing resource is: OneForEachComputeConver t , that is, a comparison is performed separately for each Convert's output resource.
  • the input resource input of the computing resource Analyse is: Out utOfComputeCompare, which is the output resource of the computing resource Compare.
  • the output of the output of Analyse is: MashupResul t, which is the result of the aggregation; the number of repetitions of the calculation resource is: OneForAl IComputeCompare, which performs an analysis on all output resources of Compar e.
  • the computing resource has only one input resource (where the input resource is an aggregated resource) and one output resource.
  • Input resource The meter reading value of the kWh unit.
  • Output Resources The meter reading value of the Joule unit. Unidirectional: None. This linear transformation makes it easy to convert the input from the result.
  • the second computing resource is expressed as follows:
  • the resource aggregation device can obtain the computing resource based on the address (URI).
  • the type Input type of the computing resource input resource is: NUMERIC, which means that the input resource is required to be numeric.
  • the number of input resources is: one, that is, only one input resource is converted at a time.
  • the unidirectional type SingleWay type of the computing resource is: none, that is, the computing resource does not satisfy the unidirectional requirement.
  • the computing resource output resource The type NUMERIC is: numeric.
  • the second computing resource compare (comparison calculation): used to calculate whether the monthly power consumption is greater than 1 billion joules.
  • Input resource output resource of the first computing resource convert: The meter reading value of the Joule unit.
  • Output resources 0 or 1, greater than 1 billion joules of output 1, less than 1 billion joules of output 0.
  • the name of the computing resource is: compare
  • the storage address is: http: //baseURI /compute-compare
  • the resource aggregation device can obtain the computing resource according to the address (URI).
  • the type Input type of the computing resource input resource is: NUMERIC, which means that the input resource is required to be numeric.
  • the number of input resources is: one, that is, only one input resource is compared at a time.
  • the unidirectional type SingleWay type of the computing resource is: true, that is, the output resource of the computing resource is unidirectional to the input resource, and since compare is comparing whether the monthly power consumption is greater than 1 billion joules, and the output result is logic (B00L)
  • the variable 0 or 1 therefore, according to the output resource 0 or 1, the monthly power consumption of each user cannot be directly obtained, so the output resource of the computing resource has unidirectionality to the input resource, where the unidirectional type is true.
  • the type B00L of the computing resource output resource is: a logical variable.
  • the trapping condition of the computing resource true, that is, the computing resource requires a trapdoor condition.
  • Third Computational Resource Calculates the percentage of 1 of all input resources. Input resource (output resource of the second computing resource): 0 or 1.
  • the name of the computing resource is: analyse
  • the storage address is: http: //baseURI /compute-analyse
  • the resource aggregation device can obtain the computing resource according to the address (URI).
  • the type of input resource of the computing resource Input type is: NUMERIC, which means that the input resource is required to be numeric.
  • the number of input resources number is: unlimited, that is, the number of unlimited input resources is calculated at one time.
  • the type of NUMERIC for this computing resource output resource is: a numeric value.
  • the aggregation resource creation request includes an identifier of at least two aggregated resources (such as an ID of each community resident), a request access right Q (such as an ID of a municipal consulting company), and an identifier of a computing resource (such as ht tp) : //baseURI/compute- convert , ht tp: / /baseURI/ compute-compare and http: ⁇ baseURI/compute- analyse ), and input resource information and output resource information for each of the computing resources.
  • the input resource of the computing resource hUp: //baseURI /compute-convert includes the aggregated resource, such as the ID of each community resident.
  • the aggregation method includes the computing resources, the input resource information of each computing resource, and the output resource information.
  • the aggregation mode includes descriptions of three computing resources, such as conversion (ie, unit conversion), comparison, and analysis.
  • conversion ie, unit conversion
  • comparison ie, unit conversion
  • analysis the output resource of the unit conversion is the input resource of the comparison
  • the output resource of the comparison is the input resource of the analysis
  • the output resource of the analysis is the aggregate result resource.
  • Step 402. Determine a computing resource unit conversion convert meets a trapdoor condition.
  • the resource aggregation device obtains the description of the computing resource unit conversion convert according to the identifier of the computing resource included in the aggregate resource creation request, such as ht tp: //baseURI/compute- convert .
  • Step 402 is then performed according to the description of the obtained convert. Specifically, from the above analysis of the unit conversion convert, the computing resource does not include a trapdoor condition. Therefore, the computing resource convert has no trapdoor condition, that is, the trapdoor condition is satisfied. Go directly to step 403.
  • the resource aggregation device confirms that the trapdoor condition is not included in the convert. Therefore, the resource aggregating device may directly execute step 403 without executing step 402.
  • step 102 wherein the steps 402 and 403 are implemented according to step 102, wherein the resource aggregation device determines, according to the computing resource, that the input resource of the computing resource can be obtained according to the output resource of the computing resource. Specifically, it is determined in step 202 that the computing resource satisfies the trapdoor condition of the computing resource definition; and in step 205, determining, according to the unidirectional description of the input resource by the output resource defined by the computing resource, determining the computing resource.
  • the output resource is not unidirectional to the input resource;
  • step 402 of the embodiment specifically determining that the computing resource unit conversion conver t satisfies the trapping condition; in step 403, in step 403, specifically determining the output resource of the unit conversion conver t to the aggregated resource A (The value of the meter reading of the aggregated resource A, that is, the household A kWh unit, is not unidirectional.
  • the input resource in this step is the aggregated resource A, so this step is to determine the access rights of the aggregated resource A.
  • the access authority of the aggregated resource is obtained according to the identifier of the aggregated resource A, and the aggregated resource A is taken as an example, that is, the meter reading value of the kWh unit of the household A.
  • Step 405 Determine the access right of the output resource of the unit conversion is T ⁇ Q fl SAl a. Specifically, based on the determination result of step 403, that is, the output resource of convert is not unidirectional to the input resource of convert, then convert is for the input resource.
  • the access authority of the output resource of the aggregated resource A is the intersection of the request access authority Q and the access authority SA1 of the aggregated resource A.
  • Q is the request access right to the aggregate result resource included in the aggregate resource creation request.
  • the output resource of the unit conversion included in the aggregate resource creation request is the input resource of the comparison calculation.
  • the above 403-407 is the processing of the unit conversion to the resident A. Because the unit conversion calculation corresponding to households B, C, and D has not been completed, the households B, C, and D are converted according to steps 403-407, and the households are converted to households B, C, and D.
  • the access rights of the output resources of B, C, and D, and the access rights of the output resources of the unit conversion A, B, C, and D computing resources are all 0.
  • the next calculation resource to be processed is returned to the comparison calculation of the household A.
  • Step 408 is performed to determine the characteristics of the computing resource compare.
  • the unit conversion A calculates the power consumption value of the resource output Joule unit, and the comparison calculation A compares whether the power consumption exceeds the threshold value of 1 billion joules.
  • household A and household B are 800 million and 900 million, respectively, and household C and household D are 1.1 billion and 1.2 billion, respectively.
  • step 408 Determine the comparison calculation compare satisfies the trap condition.
  • the resource aggregation device obtains a description of the computing resource comparison calculation compare according to the identifier of the computing resource included in the aggregate resource creation request, such as ht tp: //baseURI/compute- compare.
  • step 408 is performed according to the obtained comparison calculation comparison description.
  • the computing resource unidirectional type SingleWay type is: true, that is, the computing resource has a unidirectional requirement.
  • the method further includes: determining whether the compare includes a trapdoor condition, and if the trapdoor condition is included, performing step 408, according to the analysis of the compare, the trapdoor condition of the computing resource is: true, true, that is, the computing resource Requires trap conditions.
  • the input resource is converted by unit conversion to the output resource of the input resource A as an example.
  • the comparison calculation is performed.
  • the output resource of c ompa re is completely unidirectional to the output resource of the unit conversion convert.
  • step 102 wherein the resource aggregation device determines, according to the computing resource, that the input resource of the computing resource can be obtained according to the output resource of the computing resource. Specifically, it is determined in step 202 that the computing resource meets the trapdoor condition defined by the computing resource; and in step 205, the output resource of the computing resource is determined according to the unidirectional description of the input resource defined by the computing resource. Fully unidirectional to the input resource;
  • step 408 of the embodiment specifically determining that the comparison calculation meets the trapdoor condition; corresponding step 205 in step 409 of the embodiment is specifically determining that the output resource of the comparative calculation compare has unidirectionality to the input resource, and the single The directional type is completely unidirectional.
  • step 408 may be performed before step 403, and in step 409, when the resource aggregation device determines that the computing resource has complete unidirectionality to the input resource, the resource aggregation device does not need to perform steps 403-407. And step 408 is directly executed.
  • step 411 is more than calculate compare ⁇ input resource, corpse, output resource with one unit conversion A (calculation type of resource output resource B00L is: Logical variable), since the comparison calculation compare has only one input resource (ie, convert to the output resource of input resource A), the next step 412 is directly executed.
  • the output resource of the comparison calculation included in the aggregate resource creation request is an input resource of the distribution calculation.
  • the above 408-412 is the processing procedure for the output resource of compare for input resource A (the meter reading value of the resident A kWh unit).
  • the calculation of the next computing resource to be processed is calculated.
  • the four input resources of the distribution calculation are the comparatively calculated output resources corresponding to the households A, B, C, and D, respectively.
  • Step 413 Determine the distribution calculation analyse does not contain trapdoor conditions.
  • the resource aggregation device obtains a description of the computing resource distribution calculation analyse according to the identifier of the computing resource included in the aggregate resource creation request, such as http: //baseURI/compute- analyse.
  • Step 413 is then performed by calculating the description of the analyse based on the acquired distribution. From the above analysis of the distribution calculation for the distribution, the computational resource does not contain a trapdoor condition. Therefore, the distribution calculates the absence of trapdoor conditions, ie, satisfies the trapdoor condition. Go directly to step 414.
  • the resource aggregation device confirms that the trapdoor condition is not included in the analyse. Therefore, the resource aggregating device may directly execute step 414 without performing step 413.
  • the analyse is not unidirectional to the input resource (for example, the output resource of the resident A with the aggregated resource being compare). From the above analysis of the distribution calculation for the analysis, the computing resource does not contain a one-way property, that is, the distribution calculation has no unidirectionality for all input resources.
  • step 102 wherein the resource aggregation device determines, according to the computing resource, that the input resource of the computing resource can be obtained according to the output resource of the computing resource. Specifically, it is determined in step 202 that the computing resource does not include a trapdoor condition; and in step 205, according to the computing resource definition The unidirectional description of the output resource to the input resource determines that the output resource of the computing resource is not unidirectional to the input resource;
  • step 202 in step 413 of the embodiment specifically determining that the trapping condition is not included in the distribution calculation, that is, satisfying the trapping condition; corresponding step 205 in step 414 in this embodiment specifically determining the distribution to calculate the input resource (in The output resource of the resident A is a case where the aggregated resource is compare. There is no unidirectionality.
  • the type of the input resource input resource Input type is: NUMERIC, that is, the input resource is required to be a numeric type.
  • the number of input resources is: unlimited, that is, the number of input resources is not calculated at one time.
  • the input resources of the distributed calculation also have comparatively calculated output resources for the aggregated resources B, C, and D, according to steps 413-416.
  • step 417 is performed.
  • the output resource of the distributed calculation is used as the aggregate result resource, that is, the distribution is calculated as the last computing resource.
  • the access authority of the output resource of the distribution calculation is used as the access permission of the aggregation result resource.
  • Example 3 The municipal department selects the annual energy-saving model of the family as an example. It is necessary to determine the percentage of households whose monthly electricity consumption is less than the corresponding monthly average household electricity consumption in the whole city. In this embodiment, the meter reading data of the cell resident ABCD is saved in the M2M platform.
  • the municipal consulting company creates a converged resource PowerConsume in the M2M platform through the M2M application to obtain the percentage of the monthly household electricity consumption in the household within one year, which is lower than the corresponding monthly average household electricity consumption in the city.
  • the created aggregate resource PowerConsume includes the following information:
  • the aggregated resource includes the meter reading power ID of the household A in the current month; the average household electricity consumption ID of the city in the current month; the household electricity consumption of the household in the past 11 months and the monthly average electricity consumption of the whole city in the corresponding month.
  • Aggregation method Contains two computing resources. The first comparison calculates compare, which is used to analyze the comparison calculation (that is, compare the monthly meter reading power with the average household electricity consumption in the whole city); the second statistical calculation is used to analyze the distribution of the comparison calculation results.
  • the relationship between the two computing resources is as follows: The output resource of the comparison conversion is the input resource of the statistical calculation, as shown in Figure 12.
  • the monthly electricity consumption of households is lower than the monthly average electricity consumption of the whole city in the corresponding month.
  • the request access permission for the aggregate result resource is: ⁇ Improvement company ID ⁇ .
  • Http //baseURI/historyCompareData/Meter-A-201402
  • Http //baseURI/historyCompareData/Meter-A-201403, ... http: I /baseURI/hi s toryCompareDa ta /Met er-A-20141 K/MashupRe sour ces> ⁇ MashupMethod>
  • Http I /bas eUR I/hi s tor yCompareDa ta /Meter -A- 201401,
  • Http I /bas eUR I/hi s tor yCompareDa ta /Meter -A- 201402,
  • Http I /bas eUR I/hi s tor yCompareDa ta /Meter -A- 201403, -..
  • Http I /bas eUR I/hi s tor yCompareDa ta /Meter -A-20141K/input>
  • Http I /baseURI/ /Meter-A-Anua lConsume ⁇ /MashupResul t>
  • the URI of the aggregate resource PowerConsume is: ht tp: //baseURI/Mashup_PowerConsume.
  • the aggregated resources of the aggregate resource PowerConsume including: Meter-A, averagePowerConsume, Meter-A-201401 Meter_A_201411.
  • Aggregate resource PowerConsum contains calculations The resource compare, the computing resource analyze.
  • the URI of the aggregate result resource is: http: //baseURI//Meter-A-AnualConsume, where the aggregate result resource is the result of statistical calculation.
  • the request access permission URI for the aggregate result resource is http: //baseURI/accessRightB, that is, the request access right for the aggregate result resource is stored in the URI, wherein the AccessRightB describes the municipal consulting company having the read permission.
  • the input resource input of the computing resource compare is: Ma shupResources (Meter-A, aver a gePower Consume), which are all aggregated resources; and the output resource output is: Inpu tOfCompu t Ana lyse, that is, the input resource of the statistical resource ana 1 yse
  • the number of repetitions of the computing resource is: Once, that is, a comparison calculation is performed for all the aggregated resources.
  • the input resource input of the statistical resource Ana lyse is: OutputOf ComputeCompare, http: //baseURI/his tor yCompareData/Meter-A-201401,
  • Http //baseURI/historyCompareData/Meter-A-201402
  • Http //baseURI/historyCompareData/Meter-A-201403, ... http: //baseURI/historyCompareData/Meter-A-201411 , that is, the output resource of the computing resource compare, and the household A used in the past 11 months
  • the comparison between the power consumption and the average monthly household electricity consumption in the corresponding month; and the output output of Analyse is: MashupResult, that is, the aggregation result resource; the number of repetitions of the calculation resource is: once, that is, the output resource of compare and all others Enter the resource to perform an analysis.
  • the specific first computing resource, the description of the comparative computing resource is as follows: Used to compare users
  • the name of the computing resource is: compare
  • the storage address is: http: //baseURI/compute-compare
  • the resource aggregation device can obtain the computing resource according to the address (URI).
  • the type of the input resource of the computing resource Input type is: NUMERIC, which means that the input resource is required to be numeric.
  • SingleWay type is: true, that is, the computing resource has a unidirectional requirement for the first input resource.
  • the SingleWay type is: false, that is, the computing resource has no unidirectional requirement for the second input resource.
  • the trapping condition of the computing resource true, that is, the computing resource requires a trapdoor condition.
  • the type of computing resource output resource is: Logical variable High, Low, Medium (that is, greater than, less than or equal to).
  • Second computing resource Calculate the percentage of Low in all input resources, as follows: Input resource (output resource of the first computing resource): High, Low or Medium, and household A used electricity for the past 11 months The comparison between the amount and the monthly average electricity consumption of the city in the corresponding month.
  • Output resource The percentage of Low. Trapdoor conditions: None. Unidirectional: None.
  • the type of input resource of the computing resource Input type is: NUMERIC, which means that the input resource is required to be numeric.
  • the number of input resources number is: unlimited, that is, the number of unlimited input resources is calculated at one time.
  • the type of NUMERIC for this computing resource output resource is: a numeric value.
  • the trapdoor condition is: FALSE, which is false, that is, no trapdoor condition.
  • the access authority determination process of the aggregation result resource with reference to FIG. 12 is as follows:
  • the aggregation resource creation request includes the identifier of the aggregated resource (eg, the meter reading power ID of the household A in the current month; the average household electricity consumption ID of the city in the current month; the household electricity consumption of the household in the past 11 months and the average monthly household price of the city in the corresponding month)
  • the comparison result ID of the electricity quantity, the request access right Q of the aggregation result resource (such as the ID of the municipal consulting company), the identification of the computing resource (http: //ba seURI /compute-conver t , http: / /baseURI/ compute -compare and http: //baseURI/compute-analyse), the input resource and output resource of the computing resource.
  • the input resource and the output resource of the at least one computing resource and the computing resource constitute an aggregation mode, and the aggregation mode includes two computing resources: a comparison calculation and a statistical calculation, wherein.
  • the output resource of the comparison calculation is the input resource of the statistical calculation, and the output resource of the statistical calculation resource is Aggregate result resources.
  • step 502. Determine that the computing resource compare satisfies the trapdoor condition.
  • the resource aggregation device creates an identifier of the computing resource included in the request according to the aggregate resource, such as comparing the description of compare.
  • step 402 is performed according to the description of the obtained compare.
  • the computational resource trap condition: true is true.
  • the first input resource of compare household A's monthly electricity consumption
  • the first input resource and the second can be known by knowing the output of compare and the second input resource of compare (the average household electricity consumption in the city). The size of the input resource. Therefore, the computing resource compare satisfies the trapping condition and directly executes step 503.
  • step 502 it is determined whether the compare includes a trapdoor condition, and if the trap condition is included, step 502 is performed, and according to the analysis of the compare, the trapdoor condition of the computing resource is known: true, true, that is, the computing resource Requires trap conditions.
  • step 202 it is determined in step 202 that the computing resource satisfies the trapdoor condition of the computing resource definition; and in step 205, determining, according to the unidirectional description of the input resource by the output resource defined by the computing resource, determining the computing resource.
  • the output resource is unidirectional to the input resource, and the unidirectional type is completely unidirectional;
  • step 202 in step 502 is specifically determining that the computing resource compare satisfies the trapping condition;
  • step 205 is in the implementation
  • step 503 specifically determines that the output resource of the computing resource comparison compare has unidirectionality to the Meter-A aggregated resource, and the unidirectional type is completely unidirectional.
  • step 506 is implemented according to step 102, wherein the resource aggregation device determines, according to the computing resource, that the input resource of the computing resource can be obtained according to the output resource of the computing resource. Determining, in step 205, the unidirectional description of the input resource according to the output resource defined by the computing resource, that the output resource of the computing resource does not have unidirectionality to the input resource;
  • step 506 the output resource of the computing resource comparison compare is not unidirectional to the second input resource (the average household power consumption averagePowerConsume).
  • the specific acquisition method is to send an acquisition request to the aggregated resource identifier (such as a URI), and find the accessRightld attribute from the returned aggregated resource, where the attribute is an access authority resource identifier.
  • the URI stored in the accessRightld attribute is further sent to obtain the request, and the returned result is the access permission of the corresponding resource.
  • the steps in 503-508 can also calculate compare ⁇ second inbound resource based on t ⁇ , calculate calculate comp ⁇ resources, ⁇ Access rights, and then calculate the access rights of the output resource of the comparison calculation compare according to the first input resource of the comparison calculation; in the step, only 503-504 and 506-508 are replaced in order, and the comparison is calculated to finally The access rights of the resulting output resources have no effect.
  • step 510 Determine a computing resource comparison compare an output resource of the second input resource as an input resource of other computing resources.
  • steps 503-508 are used to calculate and compare the access rights of the output resources of the compare according to the second input resource of the comparison calculation, and then calculate the access rights of the output resources of the comparison calculation compare according to the first input resource of the comparison calculation.
  • step 510 specifically, it is determined whether the comparison calculation compares the output resource of the first input resource as an input resource of another computing resource.
  • the compared output resource included in the aggregate resource creation request is an input resource of the statistical calculation.
  • the statistical input resources are the comparatively calculated output resources and the comparison of the electricity consumption of households A in the past 11 months and the monthly average electricity consumption of the city in the corresponding month (Meter-A-201401, Meter-A- 201411).
  • step 511 Determine that the computing resource statistics analyze does not satisfy the trapdoor condition. From the above analysis of the distribution statistics for the analysis, the computational resource trap condition: FALSE, is false. Therefore, the statistical calculation analyze does not satisfy the trapdoor condition, and proceeds to step 512.
  • the step 511 is implemented, according to the resource aggregation device in step 102, determining, according to the computing resource, that the input resource of the computing resource can be obtained according to the output resource of the computing resource: The determining, in the step 202, that the computing resource does not meet the trapdoor condition of the computing resource definition; in step 511, the corresponding step 202 is specifically determining that the computing resource statistics analyze does not satisfy the trapdoor condition. 512.
  • the input resources of the statistical calculation include: comparing the calculated output resources (the access rights have already obtained T' in step 508), the comparison results of the household electricity consumption of the households in the past 11 months and the monthly average electricity consumption of the whole city in the corresponding month,
  • the address of the comparison between household A's electricity consumption in the past 11 months and the average monthly household electricity consumption in the corresponding month is http: //baseURI/his tor yCompareData/Meter-A-201401,
  • Http //baseURI/historyCompareData/Meter-A-201402
  • the method of authority is the same as that described in 507 and will not be described again.
  • the output resource of the computing resource statistics is used as an access permission of the aggregation result resource.
  • the statistical output resource is used as the aggregation result resource, so the access permission of the aggregated result resource is ⁇ the ID of the municipal consulting company ⁇ .
  • various aspects or features of the present invention can be implemented as an apparatus or as an article of manufacture using standard programming and/or engineering techniques.
  • the term "article of manufacture” as used in this application encompasses a computer program accessible from any computer-readable device, carrier, or media.
  • a computer readable medium may include, but is not limited to, a magnetic storage device (eg, a hard disk, a floppy disk, or a magnetic tape, etc.), an optical disk (eg, a CD (Compact Disk), a DVD (Digital Versatile Disk) Etc.), smart cards and flash devices (eg, EPR0M (Erasable Programmable Read-Only Memory), cards, sticks or key drives, etc.).
  • various storage media described herein can represent one or more devices and/or other machine readable media for storing information.
  • the term "machine-readable medium” may include, but is not limited to, a wireless channel and various other mediums capable of storing, containing, and/or carrying instructions and/or data.

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Security & Cryptography (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Storage Device Security (AREA)

Abstract

L'invention concerne un procédé pour commander une autorisation d'accès à un résultat d'agrégation de ressource et un appareil d'agrégation de ressource, qui se rapportent au domaine technique des réseaux et peuvent améliorer la sécurité d'informations d'une ressource d'agrégation. Le procédé consiste à : recevoir une requête de création de ressource d'agrégation, la requête de création de ressource d'agrégation comprenant une autorisation d'accès à une requête d'une ressource de résultat d'agrégation et un identifiant d'une ressource informatique et des informations de ressource d'entrée concernant la ressource informatique ; acquérir la ressource informatique selon l'identifiant de la ressource informatique, et selon la ressource informatique, déterminer qu'une ressource d'entrée de la ressource informatique peut être acquise selon une ressource de sortie de la ressource informatique ; acquérir une autorisation d'accès de la ressource d'entrée selon les informations de ressource d'entrée concernant la ressource informatique ; déterminer une autorisation d'accès de la ressource de sortie de la ressource informatique selon l'autorisation d'accès à une requête et une autorisation d'accès de la ressource d'entrée ; et utiliser l'autorisation d'accès de la ressource de sortie de la ressource informatique en tant qu'autorisation d'accès de la ressource de résultat d'agrégation. Les modes de réalisation de la présente invention sont utilisés pour commander une autorisation d'accès à un résultat d'agrégation de ressource.
PCT/CN2014/077144 2014-05-09 2014-05-09 Procédé pour commander une autorisation d'accès à un résultat d'agrégation de ressource et appareil d'agrégation de ressource WO2015168936A1 (fr)

Priority Applications (1)

Application Number Priority Date Filing Date Title
PCT/CN2014/077144 WO2015168936A1 (fr) 2014-05-09 2014-05-09 Procédé pour commander une autorisation d'accès à un résultat d'agrégation de ressource et appareil d'agrégation de ressource

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
PCT/CN2014/077144 WO2015168936A1 (fr) 2014-05-09 2014-05-09 Procédé pour commander une autorisation d'accès à un résultat d'agrégation de ressource et appareil d'agrégation de ressource

Publications (1)

Publication Number Publication Date
WO2015168936A1 true WO2015168936A1 (fr) 2015-11-12

Family

ID=54392017

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/CN2014/077144 WO2015168936A1 (fr) 2014-05-09 2014-05-09 Procédé pour commander une autorisation d'accès à un résultat d'agrégation de ressource et appareil d'agrégation de ressource

Country Status (1)

Country Link
WO (1) WO2015168936A1 (fr)

Citations (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN103400067A (zh) * 2013-03-29 2013-11-20 青岛海信电器股份有限公司 权限管理方法、***及服务器
CN103716326A (zh) * 2013-12-31 2014-04-09 华为技术有限公司 一种资源访问方法及用户资源网关

Patent Citations (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN103400067A (zh) * 2013-03-29 2013-11-20 青岛海信电器股份有限公司 权限管理方法、***及服务器
CN103716326A (zh) * 2013-12-31 2014-04-09 华为技术有限公司 一种资源访问方法及用户资源网关

Similar Documents

Publication Publication Date Title
CN108092979B (zh) 一种防火墙策略处理方法及装置
US9165031B2 (en) Retrieving stored data using a web service
TW202016761A (zh) 資料的處理方法、裝置及設備
US20160267144A1 (en) Collecting and generating geo-tagged social media data through a network router interface
Noor et al. Managing trust in the cloud: State of the art and research challenges
US9471665B2 (en) Unified system for real-time coordination of content-object action items across devices
US10282461B2 (en) Structure-based entity analysis
WO2020040801A1 (fr) Système de gestion d'adresse
US20160149854A1 (en) Framework for Application to Application Interworking in the M2M World
AU2020202605A1 (en) User data sharing method and device
US20170195410A1 (en) System and method of assigning resource consumers to resources using constraint programming
US20180081894A1 (en) Method and apparatus for clearing data in cloud storage system
CN106470150A (zh) 关系链存储方法及装置
US10387407B2 (en) Preventing abuse in content sharing system
Myneni et al. Intelligent Hybrid Cloud Data Hosting Services with Effective Cost and High Availability.
CN110602215B (zh) 基于联盟区块链的资源处理方法及联盟区块链***
US20190325061A1 (en) Temporal Resolution of an Entity
US20220232076A1 (en) Method and system for cache data analysis for enterprise content management systems
Lu et al. On Kalman smoothing for wireless sensor networks systems with multiplicative noises
EP2736002A1 (fr) Méthode, système et produit programme d'ordinateur pour faire respecter l'accès aux attributs d'événements de flux d'événements dans un système de traitement d'événements complexes
Rong‐na et al. Provenance‐based data flow control mechanism for Internet of things
Kaushik et al. Multi-level trust agreement in cloud environment
US20170024187A1 (en) Automated approval
Zhang Cloud Trust‐Driven Hierarchical Sharing Method of Internet of Things Information Resources
US20190050438A1 (en) System and method for updating information

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 14891301

Country of ref document: EP

Kind code of ref document: A1

NENP Non-entry into the national phase

Ref country code: DE

122 Ep: pct application non-entry in european phase

Ref document number: 14891301

Country of ref document: EP

Kind code of ref document: A1