# US 2019/0319956 A1 · Permission management method and system, and related device > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 2019/0319956 A1 - Document ID: US20190319956A1 - Status: Published application - Kind: A1 - Application number: 16/468,742 - Filed: 2017-03-31 - Published: 2019-10-17 - Earliest claimed: 2016-12-12 - Assignees: Huawei Technologies Co., Ltd. - Applicants: Huawei Technologies Co., Ltd. - Inventors: Zongjun YANG - Web page: https://patentgrep.com/patent/US20190319956A1 ## CPC - H04L 63/10: {for controlling access to devices or network resources} - H04W 12/084: using delegated authorisation, e.g. open authorisation [OAuth] protocol - H04W 12/08: Access security - H04W 12/086: using security domains - H04W 4/02: Services making use of location information - H04W 12/63: Location-dependent; Proximity-dependent - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72) ## Abstract A permission management method and system, and a related device are provided. The method includes: receiving, by a management device, a first request sent by a controlled device, where the first request includes a device identifier of the controlled device and indication information of a target operation; detecting a network status of a controlling device associated with the controlled device, where when the controlling device is in different network statuses, one or more controlled devices have different permission for performing respective operations; determining, based on the network status of the controlling device, the device identifier of the controlled device, and the indication information of the target operation, permission for performing the target operation by the controlled device; and processing the first request based on the determined permission for performing the target operation by the controlled device. ## Claims ### Claim 1 A permission management method, wherein the method comprises: receiving, by a management device, a first request sent by a controlled device, wherein the first request comprises a device identifier of the controlled device and indication information of a target operation; detecting, by the management device, a network status of a controlling device associated with the controlled device, wherein when the controlling device is in different network statuses, the controlled device has different permission for performing the target operation; determining, by the management device based on the network status of the controlling device, the device identifier of the controlled device, and the indication information of the target operation, permission for performing the target operation by the controlled device; and processing, by the management device, the first request based on the determined permission for performing the target operation by the controlled device. ### Claim 2 (depends on 1) The method according to claim 1, wherein the processing, by the management device, the first request based on the determined permission for performing the target operation by the controlled device comprises: notifying, by the management device, the controlled device of the permission for performing the target operation by the controlled device. ### Claim 3 (depends on 1) The method according to claim 1, wherein the processing, by the management device, the first request based on the determined permission for performing the target operation by the controlled device comprises: sending, by the management device, a control instruction to the controlled device based on the determined permission for performing the target operation by the controlled device. ### Claim 4 (depends on 1) The method according to claim 1, wherein the determining, by the management device based on the network status of the controlling device, the device identifier of the controlled device, and the indication information of the target operation, permission for performing the target operation by the controlled device comprises: determining, by the management device based on the device identifier of the controlled device and the network status of the controlling device, permission for performing various operations by the controlled device when the controlling device is in the network status; and determining, by the management device in the permission for performing the various operations by the controlled device and based on the indication information of the target operation, the permission for performing the target operation by the controlled device when the controlling device is in the network status. ### Claim 5 (depends on 4) The method according to claim 4, wherein the target operation is a website access operation, the indication information of the target operation comprises identification information of a to-be-accessed website, and permission for performing the website access operation by the controlled device is represented by a first website list; and the determining, by the management device in the permission for performing the various operations by the controlled device and based on the indication information of the target operation, the permission for performing the target operation by the controlled device when the controlling device is in the network status comprises: determining, by the management device based on the identification information of the to-be-accessed website and the first website list, permission for accessing the to-be-accessed website by the controlled device when the controlling device is in the network status, wherein the first website list is used to indicate a website that the controlled device is allowed to access when the controlling device is in the network status, or a website that the controlled device is forbidden to access when the controlling device is in the network status. ### Claim 6 (depends on 5) The method according to claim 5, wherein the determining, by the management device based on the identification information of the to-be-accessed website and the first website list, permission for accessing the to-be-accessed website by the controlled device when the controlling device is in the network status comprises: determining that the controlled device is allowed to access the to-be-accessed website when the to-be-accessed website belongs to the first website list, wherein the first website list is used to indicate a website that the controlled device is allowed to access when the controlling device is in the network status; or determining that the controlled device is allowed to access the to-be-accessed website when the to-be-accessed website does not belong to the first website list, wherein the first website list is used to indicate a website that the controlled device is forbidden to access when the controlling device is in the network status. ### Claim 7 (depends on 4) The method according to claim 4, wherein the target operation is an application program control operation, the indication information of the target operation comprises identification information of a to-be-controlled application program, and permission for performing the application program control operation by the controlled device is represented by a first application program list; and the determining, by the management device in the permission for performing the various operations by the controlled device and based on the indication information of the target operation, the permission for performing the target operation by the controlled device when the controlling device is in the network status comprises: determining, by the management device based on the identification information of the to-be-controlled application program and the first application program list, permission for controlling the to-be-controlled application program by the controlled device when the controlling device is in the network status, wherein the first application program list is used to indicate an application program that the controlled device is allowed to control when the controlling device is in the network status, or an application program that the controlled device is forbidden to control when the controlling device is in the network status. ### Claim 8 (depends on 7) The method according to claim 7, wherein the determining, by the management device based on the identification information of the to-be-controlled application program and the first application program list, permission for controlling the to-be-controlled application program by the controlled device when the controlling device is in the network status comprises: determining that the controlled device is allowed to control the to-be-controlled application program when the to-be-controlled application program belongs to the first application program list, wherein the first application program list is used to indicate an application program that the controlled device is allowed to control when the controlling device is in the network status; or determining that the controlled device is allowed to control the to-be-controlled application program when the to-be-controlled application program does not belong to the first application program list, wherein the first application program list is used to indicate an application program that the controlled device is forbidden to control when the controlling device is in the network status. ### Claim 9 (depends on 4) The method according to claim 4, wherein the target operation is a device function control operation, and the indication information of the target operation comprises identification information of a to-be-controlled device function; and the determining, by the management device in the permission for performing the various operations by the controlled device and based on the indication information of the target operation, the permission for performing the target operation by the controlled device when the controlling device is in the network status comprises: determining, by the management device based on the identification information of the to-be-controlled device function and permission for various functions corresponding to the controlled device, permission for controlling the to-be-controlled device function by the controlled device when the controlling device is in the network status. ### Claim at position 10 10-12. (canceled) ### Claim 13 A management device, wherein the management device comprises a receiver, a transmitter, a memory and a processor, wherein the memory comprises instructions that when executed by the processor, cause the management device to perform the following: receiving a first request sent by a controlled device, wherein the first request comprises a device identifier of the controlled device and indication information of a target operation; obtaining a network status of a controlling device associated with the controlled device, wherein when the controlling device is in different network statuses, the controlled device has different permission for performing the target operation; determining, based on the network status of the controlling device, the device identifier of the controlled device, and the indication information of the target operation, permission for performing the target operation by the controlled device; and processing the first request based on the determined permission for performing the target operation by the controlled device. ### Claim 14 (depends on 13) The management device according to claim 13, wherein after determining the permission for performing the target operation by the controlled device, the instructions further cause the management device to perform the following: notifying the controlled device of the permission for performing the target operation by the controlled device. ### Claim 15 (depends on 13) The management device according to claim 13, wherein after determining the permission for performing the target operation by the controlled device, the instructions further cause the management device to perform the following: sending a control instruction to the controlled device based on the determined permission for performing the target operation by the controlled device. ### Claim 16 A readable non-volatile storage medium for storing a computer instruction, wherein the computer instruction is executed by a terminal device to perform the following steps: receiving a first request sent by a controlled device, wherein the first request comprises a device identifier of the controlled device and indication information of a target operation; detecting a network status of a controlling device associated with the controlled device; and detecting a network status of a controlling device associated with the controlled device, wherein when the controlling device is in different network statuses, the controlled device has different permission for performing the target operation; determining, based on a network status of the controlling device, the device identifier of the controlled device, and the indication information of the target operation, permission for performing the target operation by the controlled device; and processing the first request based on the determined permission for performing the target operation by the controlled device. ### Claim at position 15 17-25. (canceled) ### Claim 26 (depends on 13) The management device according to claim 13, wherein for determining permission for performing the target operation by the controlled device, the instructions cause the management device to perform the following: determining, based on the device identifier of the controlled device and the network status of the controlling device, permission for performing various operations by the controlled device when the controlling device is in the network status; and determining, in the permission for performing the various operations by the controlled device and based on the indication information of the target operation, the permission for performing the target operation by the controlled device when the controlling device is in the network status. ### Claim 27 (depends on 26) The management device according to claim 26, wherein the target operation is a website access operation, the indication information of the target operation comprises identification information of a to-be-accessed website, and permission for performing the website access operation by the controlled device is represented by a first website list; and wherein for determining the permission for performing the target operation by the controlled device when the controlling device is in the network status, the instructions cause the management device to perform the following: determining, based on the identification information of the to-be-accessed website and the first website list, permission for accessing the to-be-accessed website by the controlled device when the controlling device is in the network status, wherein the first website list is used to indicate a website that the controlled device is allowed to access when the controlling device is in the network status, or a website that the controlled device is forbidden to access when the controlling device is in the network status. ### Claim 28 (depends on 27) The management device according to claim 27, wherein for determining permission for accessing the to-be-accessed website by the controlled device when the controlling device is in the network status, the instructions cause the management device to perform the following: determining that the controlled device is allowed to access the to-be-accessed website when the to-be-accessed website belongs to the first website list, wherein the first website list is used to indicate a website that the controlled device is allowed to access when the controlling device is in the network status; or determining that the controlled device is allowed to access the to-be-accessed website when the to-be-accessed website does not belong to the first website list, wherein the first website list is used to indicate a website that the controlled device is forbidden to access when the controlling device is in the network status. ### Claim 29 (depends on 26) The management device according to claim 26, wherein the target operation is an application program control operation, the indication information of the target operation comprises identification information of a to-be-controlled application program, and permission for performing the application program control operation by the controlled device is represented by a first application program list; and wherein for determining the permission for performing the target operation by the controlled device when the controlling device is in the network status comprises: determining, based on the identification information of the to-be-controlled application program and the first application program list, permission for controlling the to-be-controlled application program by the controlled device when the controlling device is in the network status, wherein the first application program list is used to indicate an application program that the controlled device is allowed to control when the controlling device is in the network status, or an application program that the controlled device is forbidden to control when the controlling device is in the network status. ### Claim 30 (depends on 29) The management device according to claim 29, wherein for determining permission for controlling the to-be-controlled application program by the controlled device when the controlling device is in the network status, the instructions cause the management device to perform the following: determining that the controlled device is allowed to control the to-be-controlled application program when the to-be-controlled application program belongs to the first application program list, wherein the first application program list is used to indicate an application program that the controlled device is allowed to control when the controlling device is in the network status; or determining that the controlled device is allowed to control the to-be-controlled application program when the to-be-controlled application program does not belong to the first application program list, wherein the first application program list is used to indicate an application program that the controlled device is forbidden to control when the controlling device is in the network status. ### Claim 31 (depends on 26) The management device according to claim 26, wherein the target operation is a device function control operation, and the indication information of the target operation comprises identification information of a to-be-controlled device function; and wherein for determining permission for performing the target operation by the controlled device when the controlling device is in the network status, the instructions cause the management device to perform the following: determining, based on the identification information of the to-be-controlled device function and permission for various functions corresponding to the controlled device, permission for controlling the to-be-controlled device function by the controlled device when the controlling device is in the network status.