WO2021213061A1 - 资源获取方法、系统、服务器及存储介质 - Google Patents

资源获取方法、系统、服务器及存储介质 Download PDF

Info

Publication number
WO2021213061A1
WO2021213061A1 PCT/CN2021/080239 CN2021080239W WO2021213061A1 WO 2021213061 A1 WO2021213061 A1 WO 2021213061A1 CN 2021080239 W CN2021080239 W CN 2021080239W WO 2021213061 A1 WO2021213061 A1 WO 2021213061A1
Authority
WO
WIPO (PCT)
Prior art keywords
terminal device
server
positioning
resource
location information
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Ceased
Application number
PCT/CN2021/080239
Other languages
English (en)
French (fr)
Inventor
殷佳欣
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Huawei Technologies Co Ltd
Original Assignee
Huawei Technologies Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Huawei Technologies Co Ltd filed Critical Huawei Technologies Co Ltd
Priority to US17/920,473 priority Critical patent/US12395496B2/en
Priority to EP21793517.0A priority patent/EP4131045A4/en
Publication of WO2021213061A1 publication Critical patent/WO2021213061A1/zh
Anticipated expiration legal-status Critical
Ceased legal-status Critical Current

Links

Images

Classifications

    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/60—Protecting data
    • G06F21/62—Protecting access to data via a platform, e.g. using keys or access control rules
    • G06F21/6218—Protecting access to data via a platform, e.g. using keys or access control rules to a system of files or objects, e.g. local or distributed file system or database
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/60—Protecting data
    • G06F21/604—Tools and structures for managing or administering access control systems
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/10—Network architectures or network communication protocols for network security for controlling access to devices or network resources
    • H04L63/107—Network architectures or network communication protocols for network security for controlling access to devices or network resources wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/08—Network architectures or network communication protocols for network security for authentication of entities
    • H04L63/0807—Network architectures or network communication protocols for network security for authentication of entities using tickets, e.g. Kerberos
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
    • H04W12/08—Access security
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
    • H04W12/60—Context-dependent security
    • H04W12/63—Location-dependent; Proximity-dependent
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W4/00—Services specially adapted for wireless communication networks; Facilities therefor
    • H04W4/02—Services making use of location information
    • H04W4/025—Services making use of location information using location based information parameters
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W4/00—Services specially adapted for wireless communication networks; Facilities therefor
    • H04W4/02—Services making use of location information
    • H04W4/025—Services making use of location information using location based information parameters
    • H04W4/027—Services making use of location information using location based information parameters using movement velocity, acceleration information
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F2221/00—Indexing scheme relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F2221/21—Indexing scheme relating to G06F21/00 and subgroups addressing additional information or applications relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F2221/2111—Location-sensitive, e.g. geographical location, GPS
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W4/00—Services specially adapted for wireless communication networks; Facilities therefor
    • H04W4/02—Services making use of location information
    • H04W4/025—Services making use of location information using location based information parameters
    • H04W4/026—Services making use of location information using location based information parameters using orientation information, e.g. compass

Definitions

  • This application relates to the technical field of access control, and in particular to a resource acquisition method, system, server and storage medium.
  • the server or target device When a user uses a terminal device for resource access, if the resource to be accessed is a protected resource, the server or target device generally needs to verify the authority of the terminal device. Only when the verification is passed, the terminal device can obtain the resource to be accessed. For example, when a user uses a mobile phone to open a door lock, he first needs to verify the authority of the mobile phone. Only after the verification is passed, the mobile phone can access the door lock, obtain the status information of the door lock, and realize unlocking.
  • Existing authorization verification methods generally verify the user identity or the distance between the terminal device and the target device. If the verification passes, the terminal device can obtain protected resources due to the user identity or the distance between the terminal device and the target device. It is easy to forge or make mistakes. Therefore, it is easy for unrelated devices to obtain protected resources, and the protected resources cannot be reasonably controlled, which affects the security of resource access.
  • the embodiments of the present application provide resource acquisition methods, systems, servers, and storage media, which can perform more reasonable management and control on protected resources and improve the security of resource access.
  • an embodiment of the present application provides a resource acquisition method, including:
  • the terminal device sends the resource access request information for accessing the target device to the server, where the resource access request information carries the user ID and the resource ID to be accessed; the server authenticates the user ID; if the authentication is passed, the server obtains The location information of the terminal device, where the location information includes geographic location information and positioning assistance information; the server verifies the location information of the terminal device; if the verification passes, the server will correspond to the resource identification to be accessed.
  • the access token is sent to the terminal device; the terminal device obtains the resource to be accessed corresponding to the resource identification to be accessed from the target device according to the access token.
  • the terminal device sends the resource access request information of the access target device to the server.
  • the server first authenticates the user identity in the resource access request information. If the authentication is passed, the server obtains the location information of the terminal device, The location information is verified; because the location information includes geographic location information and positioning assistance information, and only when the location information is verified, the server can send the access token to the terminal device, and instruct the terminal device to obtain it from the target device according to the access token.
  • the resource to be accessed corresponding to the identifier of the resource to be accessed improves the accuracy of location information verification, reduces the probability of unrelated devices acquiring the resource to be accessed, realizes reasonable management and control of the resource to be accessed, and improves the security of resource access.
  • an embodiment of the present application provides a resource acquisition method, including:
  • the server obtains the resource access request information of the access target device sent by the terminal device, wherein the resource access request information carries the user identity identifier and the resource identifier to be accessed; the server authenticates the user identity identifier; the server obtains the terminal The location information of the device; the location information includes geographic location information and positioning assistance information; the server verifies the location information of the terminal device to pass; the server sends the access token corresponding to the resource identifier to be accessed to the terminal Device to instruct the terminal device to obtain the resource to be accessed corresponding to the resource identifier to be accessed from the target device according to the access token.
  • the server when the server receives the resource access request information sent by the terminal device to access the target device, in addition to authenticating the user's identity, it also verifies the location information of the terminal device, and only the location information of the terminal device Only when the verification is passed, the terminal device is allowed to access the resource to be accessed, which reduces the probability of unrelated devices acquiring the resource to be accessed; and since the location information includes geographic location information and positioning assistance information, the server verifies the geographic location information of the terminal device In addition, the verification of positioning assistance information is added, which improves the accuracy of location information verification, and further reduces the probability of unrelated devices acquiring resources to be accessed, so that resources to be accessed can be more reasonably controlled, and resource access is improved. Security.
  • the server since the authentication of the user’s identity, the verification of the location information of the terminal device, and the sending of the access token are all performed by the server, it is convenient for the server to update the authority of the terminal device and the target device synchronously, preventing any party from failing to update in time. The usage situation further improves the security of resource access.
  • the positioning assistance information includes positioning accuracy, positioning time delay, positioning mode, moving speed, and/or moving direction.
  • the server obtains the geographic location information of the terminal device according to the actual application scenario, and the corresponding location parameter in the positioning assistance information, and verifies the geographic location information and the positioning assistance information. For example, in a scenario, the server checks the geographic location of the terminal device. Information, positioning accuracy, and positioning delay are verified; in another scenario, the server verifies the geographic location information and moving speed of the terminal device, so as to make full use of the location parameters in the location information and improve the location information verification Accuracy.
  • the server verifies the location information of the terminal device to pass, including:
  • the server determines that the terminal device is in a predetermined area according to the geographic location information, and determines that the positioning assistance information meets a preset condition. That is, if both the geographic location information and the positioning auxiliary information pass the verification, the location information verification is passed, preventing forgery or obtaining erroneous geographic location information, reducing the probability of unrelated devices acquiring the resources to be accessed, and realizing reasonable management and control of the resources to be accessed.
  • the resource to be accessed is the phase information of traffic lights
  • the positioning assistance information includes the moving direction
  • the server determines that the terminal device is in a predetermined position according to the geographic location information.
  • determining that the positioning assistance information meets a preset condition includes: the server determines that the terminal device is in a predetermined area according to the geographic location information, and determines that the moving direction of the terminal device is consistent with the preset direction .
  • the traffic light phase information corresponding to different moving directions is different. Only when the terminal device is in a predetermined area and the terminal device’s moving direction is consistent with the preset direction, can the corresponding traffic light phase information be obtained to prevent incorrect authorization of irrelevant devices. More reasonable management and control of the resources to be accessed.
  • the positioning assistance information further includes a positioning time delay
  • the determining that the positioning assistance information meets a preset condition further includes: determining that the positioning time delay is less than a preset time length. If the positioning delay exceeds the preset duration, when the server receives the geographic location information of the terminal device, the terminal device has left the current location, and the geographic location information received by the server cannot reflect the current actual location of the terminal device. By verifying the positioning delay, only the positioning delay is less than the preset duration can the verification pass, which improves the accuracy of the geographic location information obtained by the server.
  • the resource to be accessed is a navigation map
  • the positioning assistance information includes a moving speed
  • the server determines that the terminal device is in a predetermined area according to the geographic location information.
  • determining that the positioning assistance information meets a preset condition includes: the server determines that the terminal device is in a predetermined area according to the geographic location information, and determines that the moving speed of the terminal device is less than a preset speed.
  • the server verifies the location information of the terminal device to pass, including: the server determines that the terminal device is at a predetermined location according to the geographic location information and the positioning assistance information. Within the area. For example, the server determines that the terminal device is in a predetermined area based on the geographic location information, moving speed, and positioning delay of the terminal device, or determines that the terminal device is within the predetermined area based on the geographic location information and positioning accuracy of the terminal device, thereby improving the location. The accuracy of information verification reduces the probability of unrelated devices passing the location information verification.
  • the resource to be accessed is the status information of the door lock
  • the positioning assistance information includes positioning accuracy
  • the server is based on the geographic location information and the positioning
  • the auxiliary information determining that the terminal device is in a predetermined area includes: the server calculates the location range of the terminal device based on the geographic location information and the positioning accuracy, and determining that the location range of the terminal device is located in the predetermined area Inside. Since there is an error in the geographic location information obtained by the server, when the geographic location information is within a predetermined area, the actual location of the terminal device may not be in the predetermined area. According to the geographic location information and positioning accuracy, the location range of the terminal device is calculated. When it is determined that the location range of the terminal device is located in the predetermined area, the probability that the terminal device is located in the predetermined area is greater, which improves the accuracy of location information verification. , Thereby improving the safety of the door lock.
  • obtaining the location information of the terminal device by the server includes: obtaining the location information of the terminal device collected by the positioning device by the server; wherein the positioning device includes at least one of the following : A positioning device built in the terminal device, a positioning device built in the target device, a positioning device within a predetermined range from the target device, and a positioning device built in a third-party server.
  • an embodiment of the present application provides a resource acquisition device, including:
  • the first obtaining module is configured to obtain resource access request information of the access target device sent by the terminal device, wherein the resource access request information carries a user identity identifier and an identifier of the resource to be accessed;
  • the authentication module is used to authenticate the user identity identifier
  • the second acquisition module is configured to acquire location information of the terminal device, where the location information includes geographic location information and positioning assistance information;
  • the verification module is used to verify the location information of the terminal device and pass the verification
  • the sending module is configured to send the access token corresponding to the resource identifier to be accessed to the terminal device, so as to instruct the terminal device to obtain from the target device according to the access token the resource identifier corresponding to the resource to be accessed. Resources to be accessed.
  • the positioning assistance information includes positioning accuracy, positioning time delay, positioning mode, moving speed, and/or moving direction.
  • the verification module is specifically configured to:
  • the terminal device It is determined according to the geographic location information that the terminal device is in a predetermined area, and it is determined that the positioning assistance information meets a preset condition.
  • the resource to be accessed is phase information of traffic lights, and the positioning assistance information includes a moving direction;
  • the verification module is specifically used for:
  • the positioning assistance information further includes a positioning delay
  • the verification module is further configured to determine that the positioning delay is less than a preset duration.
  • the resource to be accessed is a navigation map
  • the positioning assistance information includes a moving speed
  • the verification module is specifically used for:
  • the terminal device It is determined according to the geographic location information that the terminal device is in a predetermined area, and it is determined that the moving speed of the terminal device is less than a preset speed.
  • the verification module is specifically configured to determine that the terminal device is in a predetermined area according to the geographic location information and the positioning assistance information.
  • the resource to be accessed is state information of a door lock, and the positioning assistance information includes positioning accuracy;
  • the verification module is specifically configured to calculate the location range where the terminal device is located according to the geographic location information and the positioning accuracy, and determine that the location range where the terminal device is located is within a predetermined area.
  • the second acquisition module is specifically configured to:
  • the positioning device includes at least one of the following:
  • a positioning device built in the terminal device a positioning device built in the target device, a positioning device within a predetermined range from the target device, and a positioning device built in a third-party server.
  • an embodiment of the present application provides a server, including a memory, a processor, and a computer program stored in the memory and capable of running on the processor.
  • the processor executes the computer program when the computer program is executed.
  • an embodiment of the present application provides a computer-readable storage medium, the computer-readable storage medium stores a computer program, and when the computer program is executed by a processor, the resource acquisition as described in the above-mentioned second aspect is realized method.
  • embodiments of the present application provide a computer program product, which when the computer program product runs on an electronic device, causes the electronic device to execute the resource acquisition method as described in the second aspect.
  • an embodiment of the present application provides a resource acquisition system, including: a terminal device, a target device, and the server described in the fourth aspect.
  • the resource acquisition system further includes a positioning device.
  • Fig. 1 is a schematic diagram of a resource acquisition system provided by an embodiment of the present application.
  • FIG. 2 is a schematic structural diagram of a terminal device provided by an embodiment of the present application.
  • FIG. 3 is an application scenario diagram of the resource acquisition method provided by an embodiment of the present application.
  • FIG. 4 is an application scenario diagram of the resource acquisition method provided by the embodiment of the present application.
  • FIG. 5 is another application scenario diagram of the resource acquisition method provided by the embodiment of the present application.
  • FIG. 6 is another application scenario diagram of the resource acquisition method provided by the embodiment of the present application.
  • FIG. 7 is another application scenario diagram of the resource acquisition method provided by an embodiment of the present application.
  • FIG. 8 is a schematic flowchart of a resource acquisition method provided by an embodiment of the present application.
  • FIG. 9 is another schematic flowchart of a resource acquisition method provided by an embodiment of the present application.
  • FIG. 10 is another schematic flowchart of a resource acquisition method provided by an embodiment of the present application.
  • FIG. 11 is a schematic diagram of the structure of a server provided by an embodiment of the present application.
  • the term “if” can be construed as “when” or “once” or “in response to determination” or “in response to detecting “.
  • the phrase “if determined” or “if detected [described condition or event]” can be interpreted as meaning “once determined” or “in response to determination” or “once detected [described condition or event]” depending on the context ]” or “in response to detection of [condition or event described]”.
  • FIG. 1 is a schematic diagram of a resource acquisition system provided by an embodiment of the present application.
  • the resource acquisition system includes a terminal device 100, a server 200, and a target device 300.
  • the target device 300 stores resources to be accessed.
  • the resources to be accessed may be state information of door locks, phase information of traffic lights, navigation maps, or red envelope links.
  • the terminal device 100 sends the resource access request information of the access target device to the server 200.
  • the resource access request information includes the user ID and the resource ID to be accessed.
  • the server 200 authenticates the user ID, and if the authentication is passed, obtains the location information of the terminal device 100 , Location information includes geographic location information and positioning assistance information.
  • the server 200 verifies the location information of the terminal device 100 according to the pre-acquired verification information, and if the verification passes, sends an access token corresponding to the resource identifier to be accessed to the terminal device 100.
  • the terminal device 100 sends the acquired access token to the target device 300, and the target device 300 verifies the access token. If the verification passes, the terminal device obtains the resource to be accessed corresponding to the resource identifier to be accessed.
  • the terminal device obtains the status information of the door lock corresponding to the identifier of the resource to be accessed, and controls the status information of the door lock to change to the unlocked state to open the door lock; if the resource to be accessed is For the navigation map, the terminal device can download the navigation map corresponding to the identifier of the resource to be accessed.
  • the server Before the terminal device obtains the resource to be accessed, the server not only authenticates the user identity, but also verifies the location information of the terminal device. Only when the location information is verified, the terminal device can obtain the resource to be accessed according to the access token.
  • the terminal device may be a mobile phone, a tablet computer, a notebook computer, a vehicle-mounted terminal, etc.
  • the embodiment of the present application does not impose any limitation on the specific type of the terminal device.
  • the resource acquisition system further includes a positioning device 400 for collecting location information of the terminal device.
  • the positioning device may be built into the terminal device 100 or independent of the terminal device 100.
  • the positioning device is the target.
  • the positioning apparatus 400 is a base station, and the server 300 calculates the location information of the terminal device 100 according to the location information of the base station and the coverage area of the base station registered by the terminal device 100.
  • the terminal device 100 is provided with a GPS positioning module
  • the positioning device 400 is provided with a WIFI positioning module.
  • the satellite signal is good
  • the GPS positioning module of the terminal device 100 is selected for positioning, and the position information of the terminal device 100 is calculated according to the positioning information of the GPS positioning module.
  • the WIFI positioning module of the positioning device 400 is selected for positioning, and the position information of the terminal device 100 is calculated according to the position information of the positioning device 400. Since the corresponding positioning method is selected in combination with different network environments, it is possible to obtain more accurate location information in different scenarios.
  • FIG. 2 is a schematic structural diagram of a terminal device 100 according to an embodiment of the present application.
  • the terminal device 100 may include a processor 110, an external memory interface 120, an internal memory 121, a universal serial bus (USB) interface 130, a charging management module 140, a power management module 141, a battery 142, an antenna 1, and an antenna 2.
  • Mobile communication module 150 wireless communication module 160, audio module 170, speaker 170A, receiver 170B, microphone 170C, earphone jack 170D, sensor module 180, buttons 190, motor 191, indicator 192, camera 193, display screen 194, and Subscriber identification module (subscriber identification module, SIM) card interface 195, etc.
  • SIM Subscriber identification module
  • the sensor module 180 may include a pressure sensor 180A, a gyroscope sensor 180B, an air pressure sensor 180C, a magnetic sensor 180D, an acceleration sensor 180E, a distance sensor 180F, a proximity light sensor 180G, a fingerprint sensor 180H, a temperature sensor 180J, a touch sensor 180K, and ambient light Sensor 180L, bone conduction sensor 180M, etc.
  • the structure illustrated in the embodiment of the present application does not constitute a specific limitation on the terminal device 100.
  • the terminal device 100 may include more or fewer components than shown in the figure, or combine certain components, or split certain components, or arrange different components.
  • the illustrated components can be implemented in hardware, software, or a combination of software and hardware.
  • the processor 110 may include one or more processing units.
  • the processor 110 may include an application processor (AP), a modem processor, a graphics processing unit (GPU), and an image signal processor. (image signal processor, ISP), controller, video codec, digital signal processor (digital signal processor, DSP), baseband processor, and/or neural-network processing unit (NPU), etc.
  • AP application processor
  • modem processor modem processor
  • GPU graphics processing unit
  • image signal processor image signal processor
  • ISP image signal processor
  • controller video codec
  • digital signal processor digital signal processor
  • DSP digital signal processor
  • NPU neural-network processing unit
  • the different processing units may be independent devices or integrated in one or more processors.
  • the controller can generate operation control signals according to the instruction operation code and timing signals to complete the control of fetching instructions and executing instructions.
  • a memory may also be provided in the processor 110 to store instructions and data.
  • the memory in the processor 110 is a cache memory.
  • the memory can store instructions or data that have just been used or recycled by the processor 110. If the processor 110 needs to use the instruction or data again, it can be directly called from the memory. Repeated accesses are avoided, the waiting time of the processor 110 is reduced, and the efficiency of the system is improved.
  • the processor 110 may include one or more interfaces.
  • the interface may include an integrated circuit (inter-integrated circuit, I2C) interface, an integrated circuit built-in audio (inter-integrated circuit sound, I2S) interface, a pulse code modulation (pulse code modulation, PCM) interface, and a universal asynchronous transmitter/receiver (universal asynchronous) interface.
  • I2C integrated circuit
  • I2S integrated circuit built-in audio
  • PCM pulse code modulation
  • PCM pulse code modulation
  • UART universal asynchronous transmitter/receiver
  • MIPI mobile industry processor interface
  • GPIO general-purpose input/output
  • SIM subscriber identity module
  • USB Universal Serial Bus
  • the power management module 141 is used to connect the battery 142, the charging management module 140 and the processor 110.
  • the power management module 141 receives input from the battery 142 and/or the charge management module 140, and supplies power to the processor 110, the internal memory 121, the display screen 194, the camera 193, and the wireless communication module 160.
  • the power management module 141 can also be used to monitor parameters such as battery capacity, battery cycle times, and battery health status (leakage, impedance).
  • the power management module 141 may also be provided in the processor 110.
  • the power management module 141 and the charging management module 140 may also be provided in the same device.
  • the wireless communication function of the terminal device 100 can be implemented by the antenna 1, the antenna 2, the mobile communication module 150, the wireless communication module 160, the modem processor, and the baseband processor.
  • the antenna 1 and the antenna 2 are used to transmit and receive electromagnetic wave signals.
  • Each antenna in the terminal device 100 can be used to cover a single or multiple communication frequency bands. Different antennas can also be reused to improve antenna utilization.
  • Antenna 1 can be multiplexed as a diversity antenna of a wireless local area network.
  • the antenna can be used in combination with a tuning switch.
  • the mobile communication module 150 may provide a wireless communication solution including 2G/3G/4G/5G and the like applied to the terminal device 100.
  • the mobile communication module 150 may include at least one filter, a switch, a power amplifier, a low noise amplifier (LNA), and the like.
  • the mobile communication module 150 can receive electromagnetic waves by the antenna 1, and perform processing such as filtering, amplifying and transmitting the received electromagnetic waves to the modem processor for demodulation.
  • the mobile communication module 150 can also amplify the signal modulated by the modem processor, and convert it into electromagnetic waves for radiation via the antenna 1.
  • at least part of the functional modules of the mobile communication module 150 may be provided in the processor 110.
  • at least part of the functional modules of the mobile communication module 150 and at least part of the modules of the processor 110 may be provided in the same device.
  • the wireless communication module 160 can provide applications on the terminal device 100 including wireless local area networks (WLAN) (such as wireless fidelity (WIFI) networks), Bluetooth (bluetooth, BT), and global navigation satellite systems ( Global navigation satellite system, GNSS), frequency modulation (FM), near field communication (NFC), infrared technology (infrared, IR) and other wireless communication solutions.
  • WLAN wireless local area networks
  • WIFI wireless fidelity
  • BT Bluetooth
  • GNSS global navigation satellite systems
  • FM frequency modulation
  • NFC near field communication
  • infrared technology infrared, IR
  • the wireless communication module 160 may be one or more devices integrating at least one communication processing module.
  • the wireless communication module 160 receives electromagnetic waves via the antenna 2, frequency modulates and filters the electromagnetic wave signals, and sends the processed signals to the processor 110.
  • the wireless communication module 160 may also receive a signal to be sent from the processor 110, perform frequency modulation, amplify, and convert it into electromagnetic waves to radiate through the antenna 2.
  • the antenna 1 of the terminal device 100 is coupled with the mobile communication module 150, and the antenna 2 is coupled with the wireless communication module 160, so that the terminal device 100 can communicate with the network and other devices through wireless communication technology.
  • the wireless communication technology may include global system for mobile communications (GSM), general packet radio service (GPRS), code division multiple access (CDMA), broadband Code division multiple access (wideband code division multiple access, WCDMA), time-division code division multiple access (TD-SCDMA), long term evolution (LTE), BT, GNSS, WLAN, NFC , FM, and/or IR technology, etc.
  • the GNSS may include global positioning system (GPS), global navigation satellite system (GLONASS), Beidou navigation satellite system (BDS), quasi-zenith satellite system (quasi -zenith satellite system, QZSS) and/or satellite-based augmentation systems (SBAS).
  • GPS global positioning system
  • GLONASS global navigation satellite system
  • BDS Beidou navigation satellite system
  • QZSS quasi-zenith satellite system
  • SBAS satellite-based augmentation systems
  • the display screen 194 is used to display images, videos, and the like.
  • the display screen 194 includes a display panel.
  • the display panel can use liquid crystal display (LCD), organic light-emitting diode (OLED), active matrix organic light-emitting diode or active-matrix organic light-emitting diode (active-matrix organic light-emitting diode).
  • LCD liquid crystal display
  • OLED organic light-emitting diode
  • active-matrix organic light-emitting diode active-matrix organic light-emitting diode
  • AMOLED flexible light-emitting diode (FLED), Miniled, MicroLed, Micro-oLed, quantum dot light-emitting diode (QLED), etc.
  • the terminal device 100 may include one or N display screens 194, and N is a positive integer greater than one.
  • the camera 193 is used to capture still images or videos.
  • the object generates an optical image through the lens and is projected to the photosensitive element.
  • the photosensitive element may be a charge coupled device (CCD) or a complementary metal-oxide-semiconductor (CMOS) phototransistor.
  • CMOS complementary metal-oxide-semiconductor
  • the photosensitive element converts the optical signal into an electrical signal, and then transfers the electrical signal to the ISP to convert it into a digital image signal.
  • ISP outputs digital image signals to DSP for processing.
  • DSP converts digital image signals into standard RGB, YUV and other formats of image signals.
  • the terminal device 100 may include one or N cameras 193, and N is a positive integer greater than one.
  • the internal memory 121 may be used to store computer executable program code, where the executable program code includes instructions.
  • the internal memory 121 may include a storage program area and a storage data area.
  • the storage program area can store an operating system, an application program (such as a sound playback function, an image playback function, etc.) required by at least one function, and the like.
  • the data storage area can store data (such as audio data, phone book, etc.) created during the use of the terminal device 100.
  • the internal memory 121 may include a high-speed random access memory, and may also include a non-volatile memory, such as at least one magnetic disk storage device, a flash memory device, a universal flash storage (UFS), and the like.
  • the processor 110 executes various functional applications and data processing of the terminal device 100 by running instructions stored in the internal memory 121 and/or instructions stored in a memory provided in the processor.
  • the fingerprint sensor 180H is used to collect fingerprints.
  • the terminal device 100 can use the collected fingerprint characteristics to implement fingerprint unlocking, access application locks, fingerprint photographs, fingerprint answering calls, and so on.
  • Touch sensor 180K also called “touch device”.
  • the touch sensor 180K may be disposed on the display screen 194, and the touch screen is composed of the touch sensor 180K and the display screen 194, which is also called a “touch screen”.
  • the touch sensor 180K is used to detect touch operations acting on or near it.
  • the touch sensor can pass the detected touch operation to the application processor to determine the type of touch event.
  • the visual output related to the touch operation can be provided through the display screen 194.
  • the touch sensor 180K may also be disposed on the surface of the terminal device 100, which is different from the position of the display screen 194.
  • the button 190 includes a power-on button, a volume button, and so on.
  • the button 190 may be a mechanical button. It can also be a touch button.
  • the terminal device 100 may receive key input, and generate key signal input related to user settings and function control of the terminal device 100.
  • the SIM card interface 195 is used to connect to the SIM card.
  • the terminal device 100 interacts with the network through the SIM card to implement functions such as call and data communication.
  • the terminal device 100 adopts an eSIM, that is, an embedded SIM card.
  • the eSIM card can be embedded in the terminal device 100 and cannot be separated from the terminal device 100.
  • the resource acquisition method provided by the embodiment of the present application is used to open a door lock, as shown in FIG. 3, in this scenario, the target device is a door lock, and the resource to be accessed is the state information of the door lock.
  • the terminal device sends the resource access request information to the server according to the user's operation, or the terminal device automatically triggers the sending of the resource access request information when it enters the preset area. For example, as shown in Figure 4, when the terminal device is in the unlocking interface, if a user's touch operation on the "unlocking" icon is detected, the resource access request information is sent to the server.
  • the resource access request information includes the user ID at the time of user registration and the ID of the status information of the door lock.
  • the user ID can be the user's account information, or the identification code of the terminal device bound to the user's identity, and the door lock
  • the identifier of the status information of the door lock may be a storage path of the status information of the door lock, and the identifier of the status information of the door lock corresponds to the door lock identifier.
  • the server After the server receives the resource access request information, it authenticates the user identity, for example, it verifies whether the user corresponding to the user identity has the access right to the door lock, and if the user corresponding to the user identity has the access right to the door lock, then authenticate pass through. If the authentication is passed, the server obtains the location information of the terminal device, where the server can obtain the location information of the terminal device through a positioning device, and the positioning device may be a UWB positioning device located near the door lock. Specifically, the server obtains the identification of the terminal device and the identification of the positioning device according to the user identity identification, and sends a positioning instruction to the positioning device corresponding to the identification of the positioning device. The positioning instruction includes the identification of the terminal device.
  • the positioning device obtains the relative position of the terminal device and the positioning device according to the identifier of the terminal device, that is, the position information of the terminal device, and sends the position information of the terminal device to the server.
  • the location information includes geographic location information and positioning assistance information
  • the positioning assistance information includes positioning accuracy.
  • the server After obtaining the location information of the terminal device, the server verifies the location information of the terminal device. Specifically, the server obtains the verification information corresponding to the door lock identification.
  • the verification information includes the location parameter that needs to be verified and the range corresponding to the location parameter that needs to be verified.
  • the location information is verified.
  • the location parameters that need to be verified in the verification information include geographic location information and positioning accuracy.
  • the geographic location information is the format of distance information and angle information
  • the distance information is the distance between the terminal equipment and the positioning device
  • the angle information is the angle between the terminal equipment and a preset reference line. Set the geographic location information to the format of distance information and angle information.
  • the distance information and angle information are verified separately. The verification can be passed only when it is located outside the door, and the door lock is opened, which improves the accuracy of the position information verification, thereby improving the security of the door lock.
  • the set unlocking area is centered on the positioning device M, the radius is 2 meters, and the straight line passing through the positioning device and parallel to the door is taken as the reference line, and the angle is -30° to 30°
  • the door lock can be opened, that is, the user can unlock the door only in the set area outside the door.
  • the corresponding range of the geographic location information is: an angle of -30° to 30°, and a distance of less than 2 meters.
  • the server calculates the location range where the terminal device is located according to the acquired geographic location information and positioning accuracy of the terminal device, and determines whether the location range where the terminal device is located is within a predetermined area.
  • the terminal device is located at position A, the angle between position A and the reference line is -10°, the distance from the positioning device is 1.5 meters, and the positioning accuracy is 0.05 meters; The distance of the device is between 1.45-1.55 meters, which is less than 2 meters, and the angle is between -30° and 30°, which is consistent with the range corresponding to the geographic location information. Therefore, the verification is passed. If the terminal device is located at position B, the angle between position B and the reference line is -60°, the distance from the positioning device is 1 meter, and the positioning accuracy is 0.05 meters. Since the angle of position B is not between -30° and 30°, Therefore, the verification failed.
  • the angle between position C and the reference line is 0°
  • the distance from the positioning device is 1.9 meters
  • the positioning accuracy is 0.2 meters.
  • the distance from the positioning device is calculated based on the distance from the positioning device and the positioning accuracy It is between 1.7-2.1 meters, and it may be greater than 2 meters. Therefore, it fails the verification.
  • the server can also verify the geographic location information and positioning accuracy of the terminal device respectively.
  • the calibration is performed.
  • the verification is passed, for example, the preset positioning accuracy is 10 cm. If the geographic location information of the terminal device is within a predetermined area and the positioning accuracy is 5 cm, the location information verification is passed.
  • the positioning assistance information includes the positioning method, that is, the position parameters that need to be verified in the verification information include the geographic location information and the positioning method.
  • the geographic location information of the device determines whether the terminal device is within a predetermined area, and whether the positioning method matches the preset positioning method.
  • the preset positioning mode can be set as the UWB positioning mode.
  • the server obtains the location information sent by the terminal device and the location information sent by the UWB positioning device.
  • the location information sent by the terminal device corresponds to GPS positioning, and the verification is not passed; the location information sent by the UWB positioning device corresponds to the location If the method is UWB positioning, the geographic location information corresponding to the UWB positioning method is used as the geographic location information of the terminal device, and the geographic location information corresponding to the UWB positioning method is further verified. If the geographic location information passes the verification, the location information The verification passed. Since different positioning methods correspond to different positioning accuracy, for example, the positioning accuracy corresponding to the UWB positioning method can reach the centimeter level. If the positioning method in the position information is verified, it indicates that the positioning accuracy meets the preset requirements, thereby improving the position information obtained The accuracy of this reduces the probability of unrelated devices obtaining the status information of the door lock, and improves the security level of door lock access.
  • the positioning assistance information includes the positioning method and positioning accuracy.
  • the server determines that the current positioning method is consistent with the preset positioning method, it needs to be based on the geographic location.
  • the information and positioning accuracy determine whether the terminal device is within a predetermined area. If the terminal device is within the predetermined area, the location information verification passes.
  • the server sends the access token corresponding to the identifier of the status information of the door lock to the terminal device.
  • the terminal device After obtaining the access token, the terminal device sends the access token to the door lock, and the door lock verifies the access token. If the verification passes, the terminal device obtains the state information of the door lock and changes the state information of the door lock to unlocked state. To open the door lock.
  • the server after the user identity authentication is passed, the server also verifies the geographic location information, positioning accuracy, and positioning method of the terminal device.
  • the geographic location information, positioning accuracy, and positioning method are all verified, the terminal device Only then can the door lock be opened, thereby improving the accuracy of position information verification, reducing the probability of unrelated equipment obtaining the status information of the door lock, and improving the safety of the door lock.
  • the resource acquisition method provided by the embodiment of the present application is used to acquire the phase information of the traffic light.
  • the target device is a traffic light
  • the resource to be accessed is the phase information of the traffic light.
  • the terminal device When the terminal device enters the set range of the traffic light, it sends the resource access request information to the server according to the user's operation, or automatically triggers the sending of the resource access request information. For example, when the vehicle enters the set range of traffic lights, if it is detected that the user selects the traffic light at the current location on the navigation interface of the vehicle, the vehicle sends resource access request information to the server; for another example, when the user scans the traffic light at the current location with a mobile phone When corresponding to the QR code, the mobile phone sends resource access request information to the server.
  • the terminal device if a user's touch operation on the "traffic light" icon is detected, the terminal device sends resource access request information to the server.
  • the resource access request information includes the user identity identifier and the identifier of the traffic light phase information, where the identifier of the traffic light phase information corresponds to the traffic light identifier of the current location.
  • the server After receiving the resource access request information, the server authenticates the user identity. For example, it is verified whether the vehicle corresponding to the vehicle identification has the access authority to the traffic light phase information, and if the vehicle corresponding to the vehicle identification has the access authority to the traffic light phase information, the authentication is passed. If the authentication is passed, the server obtains the location information of the terminal device. For example, if the terminal device is a vehicle, the server obtains the vehicle identification corresponding to the user identification, sends a location information acquisition request to the vehicle corresponding to the vehicle identification, and the vehicle sends the location information To the server.
  • the location information includes geographic location information and positioning assistance information
  • the positioning assistance information includes movement direction.
  • the moving direction may be sent by the vehicle to the server, or may be determined by the server according to the geographic location information of at least two moments sent by the vehicle.
  • the server After obtaining the location information of the terminal device, the server verifies the location information of the terminal device. Specifically, the server obtains the verification information corresponding to the traffic light identifier.
  • the verification information includes the location parameter that needs to be verified and the range corresponding to the location parameter that needs to be verified.
  • the server compares the acquired location according to the range corresponding to the location parameter that needs to be verified. Information is verified.
  • the location parameter that needs to be verified in the verification information includes geographic location information and a moving direction, the range corresponding to the geographic location information is a predetermined area, and the range corresponding to the moving direction is a preset direction.
  • the server determines that the terminal device is in the predetermined area according to the geographic location information, and the moving direction of the terminal device is consistent with the preset direction, the verification is passed.
  • the geographic location information corresponds to the area P in Figure 5, and the moving direction is north to south.
  • the verification passes . Since the phases of traffic lights corresponding to vehicles traveling in different directions are inconsistent, for example, the phase information of traffic lights corresponding to vehicles traveling from east to west and from south to north are different. By verifying the geographic location information and moving direction of the terminal device, it can be avoided. Send the wrong traffic light phase information to the terminal device.
  • the positioning assistance information also includes the positioning delay.
  • the verification is passed. For example, the positioning delay in the verification information is less than 1 second, and if the positioning delay in the location information of the terminal device acquired by the server is less than 1 second, the verification is passed. Due to the fast moving speed of the vehicle, if the positioning delay is too long, when the server obtains the position information of the terminal device, the terminal device has left the current position.
  • the server indicates the traffic light according to the current position, the corresponding traffic light phase information is sent to the terminal device , Can no longer meet the actual needs of vehicles.
  • the real-time performance of the acquired geographic location information is improved, and the probability of sending wrong traffic light phase information to the terminal device is reduced.
  • the positioning assistance information also includes positioning mode and positioning accuracy.
  • the geographic location information, moving direction, positioning delay, positioning mode, positioning accuracy of the terminal device and the range corresponding to the position parameters that need to be verified are all When they are consistent, the location information can be verified, which further improves the accuracy of location information verification and reduces the probability of sending traffic light phase information to unrelated devices.
  • the vehicle is equipped with a GPS positioning device
  • the server obtains the vehicle identification corresponding to the user identity identification, and sends a request for obtaining the location information of the vehicle to the GPS positioning device corresponding to the vehicle identification and the operator base station respectively.
  • the GPS positioning device and the operator base station respectively send the acquired position information to the server, and the server verifies the position information corresponding to the two positioning methods, and the position information corresponding to any positioning method corresponds to the range of the position parameter that needs to be verified If they are consistent, the verification is passed.
  • the range of the geographic location information is the area P in Figure 5
  • the moving direction is north to south
  • the positioning delay is less than 1 second
  • the positioning method is GPS positioning and operator base station positioning
  • the positioning accuracy is 10 Meter.
  • the positioning method is GPS positioning
  • the accuracy is 5 meters
  • the time delay is 100 milliseconds
  • the geographic location information is in the area P
  • the movement direction calculated based on the geographic location information at least two moments is north to south.
  • the positioning method is the operator base station positioning
  • the accuracy is 10 meters
  • the delay is 2 seconds
  • the geographic location information is in area P
  • the movement direction is calculated based on the geographic location information at least two moments in time.
  • the position information corresponding to the GPS positioning method is consistent with the verification information in the two positioning methods, the position information verification is passed, which improves the flexibility of the position information verification and increases the use range of the product.
  • the server sends the vehicle's location information acquisition request to the GPS positioning device of the corresponding vehicle and the operator base station respectively, and then verifies the location information acquired first. If the location information acquired first is the same as If the verification information is consistent, the location information verification is passed. For example, because the positioning delay of GPS positioning method is relatively small, when the satellite signal is good, the server verifies the location information sent by the GPS positioning device acquired first. If the location information is consistent with the verification information, the verification passes . When the satellite signal is not good, the location information sent by the GPS positioning device cannot be obtained in time, and the server verifies the location information sent by the operator base station. If the location information is consistent with the verification information, the verification is passed, thereby satisfying The needs of different scenarios.
  • the server sends the access token corresponding to the identifier of the traffic light phase information to the terminal device.
  • the terminal device After obtaining the access token, the terminal device sends the access token to the traffic light, and the traffic light verifies the access token. If the verification passes, the traffic light phase information of the corresponding direction is sent to the terminal device.
  • the terminal device can calculate the duration of the remaining red light or the remaining green light based on the traffic light phase information, thereby planning the vehicle speed and itinerary, and helping to improve road traffic safety.
  • the server after the user identity authentication is passed, the server also verifies the positioning mode, positioning delay, positioning accuracy, geographic location information, and moving direction of the terminal device, thereby improving the verification accuracy of the location information. The probability of sending wrong traffic light phase information to the terminal device is reduced.
  • the resource acquisition method provided by the embodiment of the present application is used to acquire a navigation map.
  • the target device is a garage management device
  • the resource to be accessed is a navigation map.
  • the terminal device sends the resource access request information to the server according to the user's operation, or the terminal device automatically triggers the sending of the resource access request information when it enters the preset area.
  • the resource access request information includes the user identity identifier and the identifier of the navigation map, and the identifier of the navigation map corresponds to the identifier of the garage management device.
  • the server After receiving the resource access request information, the server authenticates the user identity. For example, it is verified whether the vehicle corresponding to the user identity identifier has the navigation map download authority, and if the user corresponding to the user identity identifier has the navigation map download authority, the authentication is passed. If the authentication is passed, the server obtains the location information of the terminal device. Specifically, the server acquires the identification of the terminal device according to the user identity identification, sends a location information acquisition request to the terminal device corresponding to the terminal device identification, and the terminal device sends the location information to the server. In a possible implementation manner, taking the terminal device as a vehicle as an example, since the navigation map is generally set in a garage, it is generally impossible to receive satellite signals in an underground garage.
  • the server sends a location information acquisition request to the built-in WIFI positioning module of the vehicle corresponding to the vehicle identification to ensure that the location information can be acquired in time.
  • the location information includes geographic location information and positioning assistance information
  • the positioning assistance information includes moving speed.
  • the server After obtaining the location information of the terminal device, the server verifies the location information of the terminal device. Specifically, the server obtains the verification information corresponding to the identifier of the garage management device. The verification information includes the location parameter that needs to be verified and the range corresponding to the location parameter that needs to be verified. The server compares the range corresponding to the location parameter that needs to be verified The obtained location information is verified.
  • the location parameters that need to be verified in the verification information include geographic location information and moving speed. The server determines the moving speed of the terminal device according to the geographic location information acquired at least two moments. If it is determined based on the geographic location information of the terminal device that the terminal device is within a predetermined area and the moving speed of the terminal device is less than the preset speed, the verification passes .
  • the terminal device may have left the current location when the server obtains the location information of the terminal device, so that the acquired location information cannot reflect the actual location of the terminal device.
  • the accuracy of the geographic location information obtained by the server is improved.
  • the positioning assistance information includes not only moving speed, but also positioning accuracy and positioning security.
  • the terminal device's geographic location information, moving speed, positioning accuracy, and positioning security The location information can be verified only when the range corresponding to the location parameter that needs to be verified is consistent.
  • the range corresponding to the geographic location information is the area P in Fig. 7, the positioning accuracy is sub-meter, the positioning security is medium, and the moving speed is less than 15km/h.
  • the corresponding positioning accuracy is sub-meter level
  • the positioning security is medium
  • the moving speed calculated based on the geographic location information of at least two moments is 10km/ h
  • the server sends the access token corresponding to the identification of the navigation map to the terminal device.
  • the terminal device After obtaining the access token, the terminal device sends the access token to the garage management device, and the garage management device verifies the access token. If the verification passes, the navigation map is sent to the terminal device to facilitate the user to quickly find the parking space.
  • the server after the user identity authentication is passed, the server also verifies the geographic location information, positioning accuracy, positioning security, and moving speed of the terminal device, which improves the accuracy of the acquired location information and avoids navigation maps. Send to unrelated terminal equipment.
  • the location information of the terminal device can be in other combinations.
  • the location information that the server needs to obtain includes the mobile phone’s geographic location information, positioning accuracy, and positioning.
  • the location information that the server needs to obtain includes the geographic location information of the mobile phone and the positioning method.
  • the location information is verified, the user can open the link to grab the red envelope through the mobile phone.
  • FIG. 8 shows a schematic diagram of a specific flow of a resource acquisition method provided in an embodiment of the present application. As shown in FIG. 8, the method includes:
  • the terminal device sends resource access request information for accessing the target device to the server, where the resource access request information carries a user identity identifier and an identifier of the resource to be accessed.
  • the user identity can be the user's account information, for example, a user name, mobile phone number, email address, etc., or can be an identification code of a terminal device bound to the user's identity.
  • the identifier of the resource to be accessed corresponds to the resource to be accessed.
  • the identifier of the resource to be accessed can be the uniform resource identifier (URI), the universally unique identifier (UUID) or other forms of identification of the resource to be accessed.
  • the access resources are stored on the target device, which can be the status information of the door lock, the phase information of the traffic light, the navigation map or the red envelope link.
  • the terminal device may generate resource access request information according to a user's operation on the terminal device, or may generate resource access request information when entering preset geographic location information or entering a preset state.
  • S102 The server authenticates the user identity.
  • the server authenticates the user ID according to the pre-stored authentication information, for example, searches for whether there is an ID consistent with the user ID in the authentication information, and if it exists, the authentication is passed.
  • the server obtains location information of the terminal device, where the location information includes geographic location information and positioning assistance information.
  • the server obtains the identity of the terminal device corresponding to the user identity identity, sends a location information acquisition request to the corresponding terminal device, and the terminal device sends the location information to the server.
  • the server obtains the identification of the corresponding positioning device according to the user's identity, and sends a location information acquisition request to the corresponding positioning device, and the positioning device sends the detected location information of the terminal device to the server, where:
  • the positioning device can be a built-in positioning device in a terminal device, a built-in positioning device in a target device, a positioning device within a predetermined range from the target device, or a built-in positioning device in a third-party server, so that location information can be obtained in different scenarios and products can be added The scope of use.
  • the geographic location information may be in multiple formats such as latitude and longitude, street + house number, room, etc.
  • positioning auxiliary information may be positioning accuracy, positioning delay, positioning security, positioning mode, moving speed, and/or moving direction.
  • the positioning accuracy can be at the centimeter, submeter, meter, ten meter, or hundred meter level.
  • the positioning delay is the delay from initiating positioning to obtaining location information.
  • Location security refers to whether the specified bit process may be counterfeited, attacked by a man in the middle, or forged.
  • the positioning security is related to the positioning method, which includes GPS positioning, Wi-Fi positioning, Bluetooth positioning, UWB positioning, operator base station positioning, visual positioning, radar positioning, etc. Different positioning methods have different positioning accuracy and positioning security.
  • UWB positioning has the highest security
  • GPS positioning has lower security
  • video and radar-based positioning methods have the lowest security.
  • positioning accuracy and positioning safety are also related to environmental factors. If the surrounding environmental factors are different, positioning accuracy and positioning safety are also different.
  • the GPS positioning accuracy can reach the meter level in an open environment, but it can only reach the ten meter level when there are many urban buildings.
  • the moving speed and moving direction are calculated by the terminal device based on the geographic location information at at least two moments. In other feasible implementation manners, the server calculates the moving speed or the moving direction according to the geographic location information of at least two moments sent by the terminal device.
  • the server determines whether location verification is required based on the verification information obtained in advance, and if location verification is required, obtain the location that needs to be verified from the verification information Parameter.
  • the verification information is the correspondence table shown in Table 1.
  • the correspondence table stores the corresponding relationship between the target device identifier, the resource identifier to be accessed, and the location parameter that needs to be verified.
  • the target device identifier and the The resource identifier is stored under the access resource field, and the geographic location, positioning accuracy, positioning delay, positioning mode, moving speed, moving direction, and positioning security are the location parameters that need to be verified.
  • the server obtains the location parameters that need to be verified from the corresponding relationship table according to the resource identification to be accessed. For example, in Table 1, for the access resource URI1, the location method and moving speed in the location parameters that need to be verified It is NA. The "NA" means that there is no need to verify the positioning method and moving speed.
  • the location parameters that need to be verified include geographic location information, positioning accuracy, positioning delay, moving direction, and mobile security, and the server obtains the terminal device The location information, positioning accuracy, positioning delay, moving direction and positioning security of.
  • S104 The server verifies the location information of the terminal device.
  • the server determines whether the terminal device is within a predetermined area according to the geographic location information, and determines whether the positioning assistance information meets a preset condition.
  • the verification information also includes the range corresponding to the location parameter that needs to be verified.
  • the access resource is URI2
  • the geographic location that needs to be verified The range corresponding to the information is a predetermined area, namely area 2, the range of positioning accuracy is sub-meter, the range of moving speed is ⁇ 15Km/h, and the positioning security is medium.
  • the server verifies the location information of the terminal device according to the range corresponding to the location parameter that needs to be verified, and determines whether the location information of the terminal device is consistent with the range corresponding to the location parameter that needs to be verified. For example, if the location parameters that need to be verified include geographic location information, positioning accuracy, and positioning mode, the server calculates the location range of the terminal device based on the geographic location information and positioning accuracy of the terminal device. If the location range of the terminal device is compared with the verification information If the range corresponding to the geographic location information in is consistent, and the positioning method matches the preset positioning method in the verification information, the location information verification passes.
  • the location parameter to be verified includes geographic location information and moving direction
  • the geographic location information is consistent with the range corresponding to the geographic location information in the verification information, and the moving direction is consistent with the preset direction in the verification information, then The location information is verified.
  • S106 The terminal device sends the access token to the target device.
  • the target device verifies the access token, and if the verification passes, the target device sends the resource to be accessed corresponding to the resource identifier to be accessed to the terminal device.
  • the target device compares the access token with the preset token. If the access token is consistent with the preset token, the verification passes. If the verification passes, the terminal device obtains the identification of the resource to be accessed from the target device. The corresponding resource to be accessed.
  • the server when the terminal device accesses the server for the first time, if the location information is verified, the server sends the access token to the terminal device, the terminal device stores the access token, and sends the access token to the target device;
  • the terminal device accesses the server next time, if the location information is verified, the server sends the verification pass information to the terminal device, and the terminal device sends the stored access token to the target device according to the verification pass information to reduce the server sending access
  • the number of tokens saves the space occupied by the server's resources.
  • the server When the terminal device accesses the server for a preset number of times, the server sends a new access token to the terminal device, and at the same time sends the verification information of the new access token to the target device, and the terminal device obtains the target device according to the new access token To improve the security of resource access.
  • the terminal device sends the resource access request information to the server.
  • the resource access request information carries the user ID and the resource ID to be accessed.
  • the server authenticates the user ID, and if the authentication is passed, obtains the location information of the terminal device.
  • the server authenticates the location information of the terminal device, and if the authentication is passed, it sends the access token corresponding to the resource identifier to be accessed to the terminal device, that is, in addition to authenticating the user identity, the server also authenticates the location information of the terminal device.
  • the terminal device can obtain the access token, and obtain the resource to be accessed corresponding to the resource identification of the resource to be accessed from the target device according to the access token, thereby reducing the need to send the resource to be accessed to a different phase.
  • the location information includes geographic location information and positioning assistance information, the accuracy of location information verification is improved, thereby further reducing the probability of sending resources to be accessed to different devices.
  • the authentication of the location information and the sending of the access token are performed by the server, it is convenient to update the permissions of the terminal device and the target device synchronously, and prevent the situation that any party fails to update in time and affects the use.
  • FIG. 9 shows a schematic flowchart of a resource acquisition method provided by an embodiment of the present application, and the method is executed by the terminal device 100. As shown in Figure 9, the method includes:
  • the terminal device sends resource access request information for accessing the target device to the server, where the resource access request information carries a user identity identifier and an identifier of the resource to be accessed.
  • the terminal device receives the location information acquisition request corresponding to the user identity sent by the server, and sends the location information of the terminal device to the server, where the location information includes geographic location information and positioning assistance information.
  • the terminal device receives the location information acquisition request, and sends the location information to the server.
  • the positioning assistance information includes positioning accuracy, positioning delay, positioning mode, moving speed and/or moving direction.
  • the terminal device obtains the access token corresponding to the resource identifier to be accessed sent by the server, and obtains the resource to be accessed corresponding to the resource identifier to be accessed from the target device through the access token.
  • the terminal device After obtaining the access token, the terminal device sends the access token to the target device, and the target device verifies the access token. If the verification passes, the terminal device obtains the resource to be accessed from the target device, for example, downloads the resource to be accessed. resource.
  • the terminal device when the terminal device sends the resource access request information, it sends the user ID and the resource ID to be accessed to the server, and the server authenticates the user ID. If the authentication is passed, the terminal device obtains the location information sent by the server. Request, send the location information of the terminal device to the server, and the server verifies the location information of the terminal device. If the verification passes, the terminal device receives the access token sent by the server, and obtains the resource to be accessed from the target device through the access token. Because the terminal device not only authenticates the user identity, but also verifies the location information of the terminal device before acquiring the resource to be accessed. Only when the location information is verified, the terminal device can obtain the resource to be accessed based on the access token. Improve the security of resource access. Moreover, because the location information includes geographic location information and positioning assistance information, the accuracy of location information verification is improved, and the probability of sending resources to be accessed to different devices is reduced, making the management and control of resources to be accessed more reasonable.
  • FIG. 10 shows a schematic flowchart of a resource acquisition method provided in an embodiment of the present application, and the execution body of the method is the server 200. As shown in Figure 10, the method includes:
  • the server obtains the resource access request information of the access target device sent by the terminal device, where the resource access request information carries the user identity identifier and the resource to be accessed identifier.
  • S302 The server authenticates the user identity.
  • the server authenticates the user ID according to the pre-stored authentication information, for example, searches for whether there is an ID consistent with the user ID in the authentication information, and if it exists, the authentication is passed.
  • the server obtains the location information of the terminal device.
  • the location information includes geographic location information and positioning assistance information.
  • the server obtains the location information sent by the terminal device, or obtains the location information of the terminal device collected by the positioning device.
  • the positioning assistance information includes positioning accuracy, positioning time delay, positioning mode, moving speed and/or moving direction.
  • S304 The server verifies the location information of the terminal device.
  • the server obtains verification information corresponding to the identification of the resource to be accessed.
  • the verification information includes the location parameter that needs to be verified and the range corresponding to the location parameter that needs to be verified, and the server according to the range corresponding to the location parameter that needs to be verified Verify the location information of the terminal device.
  • the server sends the access token to the terminal device to instruct the terminal device to obtain the resource to be accessed corresponding to the resource identification to be accessed from the target device according to the access token.
  • the verification is passed. If the verification is passed, the server sends the access token to the terminal device. After the terminal device obtains the access token, it sends the access token to the target device, and the target device verifies the access token. The target device obtains the resource to be accessed corresponding to the resource identifier to be accessed.
  • the server when the server obtains the resource access request information sent by the terminal device, it authenticates the resource access request information. If the authentication is passed, it obtains the location information of the terminal device and verifies the location information. The access token is sent to the terminal device, and the terminal device obtains the resource to be accessed according to the access token. In addition to authenticating the user identity, the server also verifies the location information of the terminal device. Only when the location information is verified, the terminal device is allowed to obtain the resource to be accessed, which reduces the need to send the resource to be accessed to unrelated devices. The probability of access to resources, to achieve reasonable management and control of the resources to be accessed, and to improve the security of resource access.
  • the location information includes geographic location information and positioning assistance information
  • the accuracy of location information verification is improved, and the probability of sending resources to be accessed to different devices is further reduced.
  • the authentication of the location information and the sending of the access token are performed by the server, it is convenient to update the permissions of the terminal device and the target device synchronously, and prevent the situation that any party fails to update in time and affects the use.
  • FIG. 11 is a schematic structural diagram of a server provided in an embodiment of the application.
  • the server 200 provided in this embodiment may include a processor 210, a memory 220, and a network interface 230.
  • the processor 210, the memory 220, and the network interface 230 are connected through a communication bus 240.
  • the processor 210 may be a central processing unit (Central Processing Unit, CPU), or other general-purpose processors, digital signal processors (Digital Signal Processors, DSPs), application specific integrated circuits (Application Specific Integrated Circuits, ASICs), Field-Programmable Gate Array (FPGA) or other programmable logic devices, discrete gates or transistor logic devices, discrete hardware components, etc.
  • the processor 210 may include one or more processing units.
  • the storage 220 may be an internal storage unit of the server 200, such as a hard disk or a memory of the server 200.
  • the memory 220 may also be an external storage device of the server 200, such as a plug-in hard disk equipped on the server 200, a smart memory card (Smart Media Card, SMC), a Secure Digital (SD) card, and a flash memory card (Flash). Card) and so on.
  • the storage 220 may also include both an internal storage unit of the server 200 and an external storage device.
  • the memory 220 is used to store computer programs and other programs and data required by the server 200.
  • the memory 220 can also be used to temporarily store data that has been output or will be output.
  • the network interface 230 may be used to send and receive information, and may include a wired interface and/or a wireless interface, and is generally used to establish a communication connection between the server 200 and other electronic devices.
  • the network interface 230 may receive location information sent by the terminal device 100, and send an access token to the terminal device 100.
  • the server 200 may further include a user interface 250.
  • the user interface 250 may include a display (Display) and an input unit such as a keyboard (Keyboard).
  • the optional user interface 250 may also include a standard wired interface and a wireless interface.
  • the display may be an LED display, a liquid crystal display, a touch-sensitive liquid crystal display, an OLED (Organic Light-Emitting Diode, organic light-emitting diode) touch device, etc.
  • the display can also be called a display screen or a display unit as appropriate, and is used to display the information processed in the server 200 and to display a visualized user interface.
  • FIG. 11 is only an example of a server, and does not constitute a limitation on the server, and may include more or fewer components than shown in the figure, or combine certain components, or arrange different components.
  • the server provided in this embodiment can execute the foregoing method embodiments, and its implementation principles and technical effects are similar, and will not be repeated here.
  • the integrated unit is implemented in the form of a software functional unit and sold or used as an independent product, it can be stored in a computer readable storage medium.
  • the computer program can be stored in a computer-readable storage medium. When executed by the processor, the steps of the foregoing method embodiments can be implemented.
  • the computer program includes computer program code, and the computer program code may be in the form of source code, object code, executable file, or some intermediate forms.
  • the computer-readable medium may include at least: any entity or device capable of carrying computer program code to the photographing device/electronic device, recording medium, computer memory, read-only memory (ROM, Read-Only Memory), and random access memory (RAM, Random Access Memory), electric carrier signal, telecommunications signal and software distribution medium.
  • ROM read-only memory
  • RAM random access memory
  • electric carrier signal telecommunications signal and software distribution medium.
  • U disk mobile hard disk, floppy disk or CD-ROM, etc.
  • the units described as separate components may or may not be physically separated, and the components displayed as units may or may not be physical units, that is, they may be located in one place, or they may be distributed on multiple network units. Some or all of the units may be selected according to actual needs to achieve the objectives of the solutions of the embodiments.
  • the disclosed apparatus/network equipment and method may be implemented in other ways.
  • the device/network device embodiments described above are only illustrative.
  • the division of the modules or units is only a logical function division, and there may be other divisions in actual implementation, such as multiple units.
  • components can be combined or integrated into another system, or some features can be omitted or not implemented.
  • the displayed or discussed mutual coupling or direct coupling or communication connection may be indirect coupling or communication connection through some interfaces, devices or units, and may be in electrical, mechanical or other forms.

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Security & Cryptography (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Computer Hardware Design (AREA)
  • General Engineering & Computer Science (AREA)
  • Computing Systems (AREA)
  • Theoretical Computer Science (AREA)
  • Health & Medical Sciences (AREA)
  • Bioethics (AREA)
  • General Health & Medical Sciences (AREA)
  • Software Systems (AREA)
  • Physics & Mathematics (AREA)
  • General Physics & Mathematics (AREA)
  • Automation & Control Theory (AREA)
  • Databases & Information Systems (AREA)
  • Mobile Radio Communication Systems (AREA)

Abstract

一种资源获取方法、系统、服务器及存储介质，所述资源访问方法包括：终端设备向服务器发送资源访问请求信息（S101），资源访问请求信息中携带有用户身份标识和待访问资源标识；服务器对用户身份标识进行认证（S102），若认证通过，服务器获取终端设备的位置信息（S103），位置信息包括地理位置信息以及定位辅助信息；服务器对终端设备的位置信息进行校验（S104）；若校验通过，服务器将与待访问资源标识对应的访问令牌发送至终端设备（S105）；终端设备根据访问令牌获取待访问资源（S106）。由于在终端设备获取待访问资源前，需要对用户身份标识、地理位置信息以及定位辅助信息进行验证，降低了将待访问资源发送至不相关设备的几率，从而提高了资源访问的安全性。

Description

资源获取方法、系统、服务器及存储介质
本申请要求于2020年4月23日提交国家知识产权局、申请号为202010327138.8、申请名称为“资源获取方法、系统、服务器及存储介质”的中国专利申请的优先权，其全部内容通过引用结合在本申请中。
技术领域
本申请涉及访问控制技术领域，尤其涉及一种资源获取方法、系统、服务器及存储介质。
背景技术
用户在使用终端设备进行资源访问时，若待访问的资源是受保护的资源，服务器或者目标设备一般需要对终端设备的权限进行验证，只有验证通过，终端设备才可以获取待访问资源。例如，用户在使用手机打开门锁时，首先需要对手机的权限进行验证，只有验证通过，手机才可以访问门锁，获取门锁的状态信息，实现开锁。现有的权限验证方法一般是对用户身份标识或者对终端设备与目标设备的距离进行验证，若验证通过，终端设备即可获取受保护的资源，由于用户身份标识或者终端设备与目标设备的距离容易伪造或者出现错误，因此，容易使不相关的设备获取受保护的资源，不能对受保护资源进行合理管控，影响了资源访问的安全性。
发明内容
本申请实施例提供了资源获取方法、系统、服务器及存储介质，可以对受保护资源进行更合理的管控，提高资源访问的安全性。
第一方面，本申请实施例提供了一种资源获取方法，包括：
终端设备向服务器发送访问目标设备的资源访问请求信息，其中，所述资源访问请求信息中携带有用户身份标识和待访问资源标识；服务器对所述用户身份标识进行认证；若认证通过，服务器获取所述终端设备的位置信息,所述位置信息包括地理位置信息以及定位辅助信息；服务器对所述终端设备的位置信息进行校验；若校验通过，服务器将与所述待访问资源标识对应的访问令牌发送至所述终端设备；终端设备根据所述访问令牌从所述目标设备获取与所述待访问资源标识对应的待访问资源。
上述实施例中，终端设备向服务器发送访问目标设备的资源访问请求信息，服务器首先对资源访问请求信息中的用户身份标识进行认证，若认证通过，服务器获取终端设备的位置信息，对终端设备的位置信息进行校验；由于位置信息包括地理位置信息以及定位辅助信息，且只有位置信息校验通过时，服务器才可以将访问令牌发送至终端设备，指示终端设备根据访问令牌从目标设备获取与待访问资源标识对应的待访问资源，从而提高了位置信息校验的准确度，降低了不相关设备获取待访问资源的几率，实现对待访问资源的合理管控，提高了资源访问的安全性。
第二方面，本申请实施例提供了一种资源获取方法，包括：
服务器获取终端设备发送的访问目标设备的资源访问请求信息，其中，所述资源访问请求信息中携带有用户身份标识和待访问资源标识；服务器对所述用户身份标识 认证通过；服务器获取所述终端设备的位置信息；所述位置信息包括地理位置信息以及定位辅助信息；服务器对所述终端设备的位置信息校验通过；服务器将与所述待访问资源标识对应的访问令牌发送至所述终端设备，以指示所述终端设备根据所述访问令牌从目标设备获取与所述待访问资源标识对应的待访问资源。
上述实施例中，服务器在接收到终端设备发送的访问目标设备的资源访问请求信息时，除了对用户的身份标识进行认证外，还对终端设备的位置信息进行校验，只有终端设备的位置信息校验通过，才允许终端设备访问待访问资源，降低了不相关设备获取待访问资源的几率；且由于位置信息包括地理位置信息以及定位辅助信息，服务器除了对终端设备的地理位置信息进行校验外，还增加了对定位辅助信息的校验，提高了位置信息校验的准确度，进一步降低了不相关设备获取待访问资源的几率，使得待访问资源得到更合理的管控，提高了资源访问的安全性。且由于用户身份标识的认证、终端设备位置信息的校验、访问令牌的发送均由服务器执行，方便服务器对终端设备和目标设备同步进行权限更新，防止出现由于任一方未能及时更新，影响使用的情况，进一步提高了资源访问的安全性。
在第二方面的一种可能的实现方式中，所述定位辅助信息包括定位精度、定位时延、定位方式、移动速度和/或移动方向。服务器根据实际应用场景获取终端设备的地理位置信息，以及定位辅助信息中相应的位置参量，对地理位置信息和定位辅助信息进行校验，例如，在一种场景中，服务器对终端设备的地理位置信息、定位精度、定位时延进行校验；在另一种场景中，服务器对终端设备的地理位置信息、移动速度进行校验，从而充分利用位置信息中的位置参量，提高了位置信息校验的准确度。
对应地，服务器对所述终端设备的位置信息校验通过，包括：
服务器根据所述地理位置信息确定所述终端设备在预定的区域内，且确定所述定位辅助信息符合预设条件。即地理位置信息和定位辅助信息均校验通过，则位置信息校验通过，防止伪造或者获取错误的地理位置信息，降低了不相关设备获取待访问资源的几率，实现对待访问资源的合理管控。
在第二方面的一种可能的实现方式中，所述待访问资源为红绿灯的相位信息，所述定位辅助信息包括移动方向；相应的，服务器根据所述地理位置信息确定所述终端设备在预定的区域内，且确定所述定位辅助信息符合预设条件，包括：服务器根据所述地理位置信息确定所述终端设备在预定的区域内，且确定所述终端设备的移动方向与预设方向一致。不同的移动方向对应的红绿灯相位信息不同，只有终端设备在预定的区域内，且终端设备的移动方向与预设方向一致，才能获取对应的红绿灯相位信息，防止对不相关设备进行错误授权，从而对待访问资源进行更合理的管控。
可选地，所述定位辅助信息还包括定位时延，所述确定所述定位辅助信息符合预设条件，还包括：确定所述定位时延小于预设时长。若定位时延超过预设时长，当服务器接收到终端设备的地理位置信息时，终端设备已经离开当前位置，服务器接收到的地理位置信息不能反映终端设备当前的实际位置。通过对定位时延进行校验，只有定位时延小于预设时长，才能校验通过，提高了服务器获取的地理位置信息的准确度。
在第二方面的一种可能的实现方式中，所述待访问资源为导航地图，所述定位辅助信息包括移动速度；相应的，服务器根据所述地理位置信息确定所述终端设备在预 定的区域内，且确定所述定位辅助信息符合预设条件，包括：服务器根据所述地理位置信息确定所述终端设备在预定的区域内，且确定所述终端设备的移动速度小于预设速度。由于当终端设备移动速度过快时，在服务器检测到终端设备的位置信息时，终端设备已经离开发送位置信息的位置，导致获取的终端设备的位置信息不准确，通过对终端设备的移动速度进行校验，提高了服务器获取的位置信息的准确度。
在第二方面的一种可能的实现方式中，所述服务器对所述终端设备的位置信息校验通过，包括：服务器根据所述地理位置信息和所述定位辅助信息确定所述终端设备在预定的区域内。例如，服务器根据终端设备的地理位置信息、移动速度和定位时延确定终端设备在预定的区域内，或者根据终端设备的地理位置信息和定位精度确定终端设备在预定的区域内，从而提高了位置信息校验的准确度，降低了不相关设备通过位置信息校验的几率。
在第二方面的一种可能的实现方式中，所述待访问资源为门锁的状态信息，所述定位辅助信息包括定位精度；相应的，所述服务器根据所述地理位置信息和所述定位辅助信息确定所述终端设备在预定的区域内，包括：服务器根据所述地理位置信息和所述定位精度计算所述终端设备所在的位置范围，确定所述终端设备所在的位置范围位于预定的区域内。由于服务器获取的地理位置信息存在误差，因此，地理位置信息在预定的区域内时，终端设备的实际位置可能不在预定的区域。而根据地理位置信息和定位精度计算终端设备所在的位置范围，确定终端设备所在的位置范围位于预定的区域内时，终端设备位于预定的区域的几率更大，提高了位置信息校验的准确度，进而提高了门锁的安全性。
在第二方面的一种可能的实现方式中，服务器获取所述终端设备的位置信息，包括：服务器获取定位装置采集的所述终端设备的位置信息；其中，所述定位装置包括以下至少一项：所述终端设备内置的定位装置、所述目标设备内置的定位装置、距离所述目标设备预定范围内的定位装置以及第三方服务器中内置的定位装置。
第三方面，本申请实施例提供了一种资源获取装置，包括：
第一获取模块，用于获取终端设备发送的访问目标设备的资源访问请求信息，其中，所述资源访问请求信息中携带有用户身份标识和待访问资源标识；
认证模块，用于对所述用户身份标识认证通过；
第二获取模块，用于获取所述终端设备的位置信息，所述位置信息包括地理位置信息以及定位辅助信息；
校验模块，用于对所述终端设备的位置信息校验通过；
发送模块，用于将与所述待访问资源标识对应的访问令牌发送至所述终端设备，以指示所述终端设备根据所述访问令牌从目标设备获取与所述待访问资源标识对应的待访问资源。
在第三方面的一种可能的实现方式中，所述定位辅助信息包括定位精度、定位时延、定位方式、移动速度和/或移动方向。
在第三方面的一种可能的实现方式中，所述校验模块具体用于：
根据所述地理位置信息确定所述终端设备在预定的区域内，且确定所述定位辅助信息符合预设条件。
在第三方面的一种可能的实现方式中，所述待访问资源为红绿灯的相位信息，所述定位辅助信息包括移动方向；
相应的，所述校验模块具体用于：
根据所述地理位置信息确定所述终端设备在预定的区域内，且确定所述终端设备的移动方向与预设方向一致。
在第三方面的一种可能的实现方式中，所述定位辅助信息还包括定位时延，所述校验模块还用于：确定所述定位时延小于预设时长。
在第三方面的一种可能的实现方式中，所述待访问资源为导航地图，所述定位辅助信息包括移动速度；
相应的，所述校验模块具体用于：
根据所述地理位置信息确定所述终端设备在预定的区域内，且确定所述终端设备的移动速度小于预设速度。
在第三方面的一种可能的实现方式中，所述校验模块具体用于：根据所述地理位置信息和所述定位辅助信息确定所述终端设备在预定的区域内。
在第三方面的一种可能的实现方式中，所述待访问资源为门锁的状态信息，所述定位辅助信息包括定位精度；
相应的，所述校验模块具体用于：根据所述地理位置信息和所述定位精度计算所述终端设备所在的位置范围，确定所述终端设备所在的位置范围位于预定的区域内。
在第三方面的一种可能的实现方式中，所述第二获取模块具体用于：
获取定位装置采集的所述终端设备的位置信息；其中，所述定位装置包括以下至少一项：
所述终端设备内置的定位装置、所述目标设备内置的定位装置、距离所述目标设备预定范围内的定位装置以及第三方服务器中内置的定位装置。
第四方面，本申请实施例提供了一种服务器，包括存储器、处理器以及存储在所述存储器中并可在所述处理器上运行的计算机程序，所述处理器执行所述计算机程序时实现如上述第二方面所述的资源获取方法。
第五方面，本申请实施例提供了一种计算机可读存储介质，所述计算机可读存储介质存储有计算机程序，所述计算机程序被处理器执行时实现如上述第二方面所述的资源获取方法。
第六方面，本申请实施例提供了一种计算机程序产品，当计算机程序产品在电子设备上运行时，使得电子设备执行如上述第二方面所述的资源获取方法。
第七方面，本申请实施例提供了一种资源获取系统，包括：终端设备、目标设备以及上述第四方面所述的服务器。
在第七方面的一种可能的实现方式中，所述资源获取系统还包括定位装置。
可以理解的是，上述第三方面至第七方面的有益效果可以参见上述第二方面中的相关描述，在此不再赘述。
附图说明
图1是本申请实施例提供的资源获取系统的示意图；
图2是本申请实施例提供的终端设备的结构示意图；
图3是本申请实施例提供的资源获取方法的一种应用场景图；
图4是本申请实施例提供的资源获取方法的一种应用场景图；
图5是本申请实施例提供的资源获取方法的另一种应用场景图；
图6是本申请实施例提供的资源获取方法的另一种应用场景图；
图7是本申请实施例提供的资源获取方法的又一种应用场景图；
图8是本申请实施例提供的资源获取方法的流程示意图；
图9是本申请实施例提供的资源获取方法的另一流程示意图；
图10是本申请实施例提供的资源获取方法的又一流程示意图；
图11是本申请实施例提供的服务器的结构示意图。
具体实施方式
以下描述中，为了说明而不是为了限定，提出了诸如特定系统结构、技术之类的具体细节，以便透彻理解本申请实施例。然而，本领域的技术人员应当清楚，在没有这些具体细节的其它实施例中也可以实现本申请。在其它情况中，省略对众所周知的系统、装置、电路以及方法的详细说明，以免不必要的细节妨碍本申请的描述。
应当理解，当在本申请说明书和所附权利要求书中使用时，术语“包括”指示所描述特征、整体、步骤、操作、元素和/或组件的存在，但并不排除一个或多个其它特征、整体、步骤、操作、元素、组件和/或其集合的存在或添加。
还应当理解，在本申请说明书和所附权利要求书中使用的术语“和/或”是指相关联列出的项中的一个或多个的任何组合以及所有可能组合，并且包括这些组合。
如在本申请说明书和所附权利要求书中所使用的那样，术语“如果”可以依据上下文被解释为“当...时”或“一旦”或“响应于确定”或“响应于检测到”。类似地，短语“如果确定”或“如果检测到[所描述条件或事件]”可以依据上下文被解释为意指“一旦确定”或“响应于确定”或“一旦检测到[所描述条件或事件]”或“响应于检测到[所描述条件或事件]”。
在本申请说明书中描述的参考“一个实施例”或“一些实施例”等意味着在本申请的一个或多个实施例中包括结合该实施例描述的特定特征、结构或特点。由此，在本说明书中的不同之处出现的语句“在一个实施例中”、“在一些实施例中”、“在其他一些实施例中”、“在另外一些实施例中”等不是必然都参考相同的实施例，而是意味着“一个或多个但不是所有的实施例”，除非是以其他方式另外特别强调。术语“包括”、“包含”、“具有”及它们的变形都意味着“包括但不限于”，除非是以其他方式另外特别强调。
图1是本申请实施例提供的资源获取系统的示意图，如图1所示，资源获取系统包括终端设备100、服务器200以及目标设备300。其中，目标设备300中存储待访问资源，待访问资源可以是门锁的状态信息、红绿灯的相位信息、导航地图或抢红包链接等。终端设备100发送访问目标设备的资源访问请求信息至服务器200，资源访问请求信息包括用户身份标识和待访问资源标识，服务器200对用户身份标识进行认证，若认证通过，获取终端设备100的位置信息，位置信息包括地理位置信息以及定位辅助信息。服务器200根据预先获取的校验信息对终端设备100的位置信息进行校验，若检验通过，向终端设备100发送与待访问资源标识对应的访问令牌。终端设备100 将获取的访问令牌发送至目标设备300，目标设备300对访问令牌进行校验，若检验通过，终端设备获取与待访问资源标识对应的待访问资源。例如，若待访问资源为门锁的状态信息，终端设备获取与待访问资源标识对应的门锁的状态信息，控制门锁的状态信息变为开锁状态，以打开门锁；若待访问资源为导航地图，终端设备可以下载与待访问资源标识对应的导航地图。由于在终端设备获取待访问资源前，服务器除了对用户身份标识进行认证，还对终端设备的位置信息进行校验，只有当位置信息校验通过，终端设备才能根据访问令牌获取待访问资源，降低了不相关的设备获取待访问资源的几率，从而提高了资源访问的安全性，且由于位置信息包括地理位置信息以及定位辅助信息，进一步降低了不相关的设备获取待访问资源的几率，从而可以对待访问资源进行更合理的管控。
本实施例中，终端设备可以是手机、平板电脑、笔记本电脑、车载终端等，本申请实施例对终端设备的具体类型不作任何限制。
在一种可能的实现方式中，资源获取系统还包括用于采集终端设备的位置信息的定位装置400，定位装置可以内置于终端设备100，也可以独立于终端设备100，例如，定位装置是目标设备300内置的定位装置、距离目标设备预定范围内的定位装置或者第三方服务器中内置的定位装置。若定位装置内置于终端设备100，定位装置的位置信息即为终端设备100的位置信息。若定位装置400和终端设备100是两个独立的设备，服务器200根据终端设备100的位置信息和/或定位装置400的位置信息对终端设备100进行定位。例如，在一种应用场景中，定位装置400为基站，服务器300根据基站的位置信息以及终端设备100注册的基站覆盖范围计算终端设备100的位置信息。在另一种应用场景中，终端设备100上设有GPS定位模块，定位装置400上设有WIFI定位模块。在卫星信号较好时，选择终端设备100的GPS定位模块进行定位，根据GPS定位模块的定位信息计算终端设备100的位置信息。而在没有卫星信号时，选择定位装置400的WIFI定位模块进行定位，根据定位装置400的位置信息计算终端设备100的位置信息。由于结合不同的网络环境选择对应的定位方式，因此，能够使得不同场景都能获取更准确的位置信息。
为了便于理解，首先介绍本申请实施例所涉及的终端设备。请参阅图2，图2是本申请实施例提供的终端设备100的结构示意图。
终端设备100可以包括处理器110，外部存储器接口120，内部存储器121，通用串行总线(universal serial bus，USB)接口130，充电管理模块140，电源管理模块141，电池142，天线1，天线2，移动通信模块150，无线通信模块160，音频模块170，扬声器170A，受话器170B，麦克风170C，耳机接口170D，传感器模块180，按键190，马达191，指示器192，摄像头193，显示屏194，以及用户标识模块(subscriber identification module，SIM)卡接口195等。其中传感器模块180可以包括压力传感器180A，陀螺仪传感器180B，气压传感器180C，磁传感器180D，加速度传感器180E，距离传感器180F，接近光传感器180G，指纹传感器180H，温度传感器180J，触摸传感器180K，环境光传感器180L，骨传导传感器180M等。
可以理解的是，本申请实施例示意的结构并不构成对终端设备100的具体限定。在本申请另一些实施例中，终端设备100可以包括比图示更多或更少的部件，或者组 合某些部件，或者拆分某些部件，或者不同的部件布置。图示的部件可以以硬件，软件或软件和硬件的组合实现。
处理器110可以包括一个或多个处理单元，例如：处理器110可以包括应用处理器(application processor，AP)，调制解调处理器，图形处理器(graphics processing unit，GPU)，图像信号处理器(image signal processor，ISP)，控制器，视频编解码器，数字信号处理器(digital signal processor，DSP)，基带处理器，和/或神经网络处理器(neural-network processing unit，NPU)等。其中，不同的处理单元可以是独立的器件，也可以集成在一个或多个处理器中。
控制器可以根据指令操作码和时序信号，产生操作控制信号，完成取指令和执行指令的控制。
处理器110中还可以设置存储器，用于存储指令和数据。在一些实施例中，处理器110中的存储器为高速缓冲存储器。该存储器可以保存处理器110刚用过或循环使用的指令或数据。如果处理器110需要再次使用该指令或数据，可从所述存储器中直接调用。避免了重复存取，减少了处理器110的等待时间，因而提高了系统的效率。
在一些实施例中，处理器110可以包括一个或多个接口。接口可以包括集成电路(inter-integrated circuit，I2C)接口，集成电路内置音频(inter-integrated circuit sound，I2S)接口，脉冲编码调制(pulse code modulation，PCM)接口，通用异步收发传输器(universal asynchronous receiver/transmitter，UART)接口，移动产业处理器接口(mobile industry processor interface，MIPI)，通用输入输出(general-purpose input/output，GPIO)接口，用户标识模块(subscriber identity module，SIM)接口，和/或通用串行总线(universal serial bus，USB)接口等。
电源管理模块141用于连接电池142，充电管理模块140与处理器110。电源管理模块141接收电池142和/或充电管理模块140的输入，为处理器110，内部存储器121，显示屏194，摄像头193，和无线通信模块160等供电。电源管理模块141还可以用于监测电池容量，电池循环次数，电池健康状态(漏电，阻抗)等参数。在其他一些实施例中，电源管理模块141也可以设置于处理器110中。在另一些实施例中，电源管理模块141和充电管理模块140也可以设置于同一个器件中。
终端设备100的无线通信功能可以通过天线1，天线2，移动通信模块150，无线通信模块160，调制解调处理器以及基带处理器等实现。
天线1和天线2用于发射和接收电磁波信号。终端设备100中的每个天线可用于覆盖单个或多个通信频带。不同的天线还可以复用，以提高天线的利用率。例如：可以将天线1复用为无线局域网的分集天线。在另外一些实施例中，天线可以和调谐开关结合使用。
移动通信模块150可以提供应用在终端设备100上的包括2G/3G/4G/5G等无线通信的解决方案。移动通信模块150可以包括至少一个滤波器，开关，功率放大器，低噪声放大器(low noise amplifier，LNA)等。移动通信模块150可以由天线1接收电磁波，并对接收的电磁波进行滤波，放大等处理，传送至调制解调处理器进行解调。移动通信模块150还可以对经调制解调处理器调制后的信号放大，经天线1转为电磁波辐射出去。在一些实施例中，移动通信模块150的至少部分功能模块可以被设置于处理器 110中。在一些实施例中，移动通信模块150的至少部分功能模块可以与处理器110的至少部分模块被设置在同一个器件中。
无线通信模块160可以提供应用在终端设备100上的包括无线局域网(wireless local area networks，WLAN)(如无线保真(wireless fidelity，WIFI)网络)，蓝牙(bluetooth，BT)，全球导航卫星系统(global navigation satellite system，GNSS)，调频(frequency modulation，FM)，近距离无线通信技术(near field communication，NFC)，红外技术(infrared，IR)等无线通信的解决方案。无线通信模块160可以是集成至少一个通信处理模块的一个或多个器件。无线通信模块160经由天线2接收电磁波，将电磁波信号调频以及滤波处理，将处理后的信号发送到处理器110。无线通信模块160还可以从处理器110接收待发送的信号，对其进行调频，放大，经天线2转为电磁波辐射出去。
在一些实施例中，终端设备100的天线1和移动通信模块150耦合，天线2和无线通信模块160耦合，使得终端设备100可以通过无线通信技术与网络以及其他设备通信。所述无线通信技术可以包括全球移动通讯系统(global system for mobile communications，GSM)，通用分组无线服务(general packet radio service，GPRS)，码分多址接入(code division multiple access，CDMA)，宽带码分多址(wideband code division multiple access，WCDMA)，时分码分多址(time-division code division multiple access，TD-SCDMA)，长期演进(long term evolution，LTE)，BT，GNSS，WLAN，NFC，FM，和/或IR技术等。所述GNSS可以包括全球卫星定位系统(global positioning system，GPS)，全球导航卫星系统(global navigation satellite system，GLONASS)，北斗卫星导航系统(beidou navigation satellite system，BDS)，准天顶卫星系统(quasi-zenith satellite system，QZSS)和/或星基增强系统(satellite based augmentation systems，SBAS)。
显示屏194用于显示图像，视频等。显示屏194包括显示面板。显示面板可以采用液晶显示屏(liquid crystal display，LCD)，有机发光二极管(organic light-emitting diode，OLED)，有源矩阵有机发光二极体或主动矩阵有机发光二极体(active-matrix organic light emitting diode的，AMOLED)，柔性发光二极管(flex light-emitting diode，FLED)，Miniled，MicroLed，Micro-oLed，量子点发光二极管(quantum dot light emitting diodes，QLED)等。在一些实施例中，终端设备100可以包括1个或N个显示屏194，N为大于1的正整数。
摄像头193用于捕获静态图像或视频。物体通过镜头生成光学图像投射到感光元件。感光元件可以是电荷耦合器件(charge coupled device，CCD)或互补金属氧化物半导体(complementary metal-oxide-semiconductor，CMOS)光电晶体管。感光元件把光信号转换成电信号，之后将电信号传递给ISP转换成数字图像信号。ISP将数字图像信号输出到DSP加工处理。DSP将数字图像信号转换成标准的RGB，YUV等格式的图像信号。在一些实施例中，终端设备100可以包括1个或N个摄像头193，N为大于1的正整数。
内部存储器121可以用于存储计算机可执行程序代码，所述可执行程序代码包括指令。内部存储器121可以包括存储程序区和存储数据区。其中，存储程序区可存储操作系统，至少一个功能所需的应用程序(比如声音播放功能，图像播放功能等)等。存储数据区可存储终端设备100使用过程中所创建的数据(比如音频数据，电话本等) 等。此外，内部存储器121可以包括高速随机存取存储器，还可以包括非易失性存储器，例如至少一个磁盘存储器件，闪存器件，通用闪存存储器(universal flash storage，UFS)等。处理器110通过运行存储在内部存储器121的指令，和/或存储在设置于处理器中的存储器的指令，执行终端设备100的各种功能应用以及数据处理。
指纹传感器180H用于采集指纹。终端设备100可以利用采集的指纹特性实现指纹解锁，访问应用锁，指纹拍照，指纹接听来电等。
触摸传感器180K，也称“触控器件”。触摸传感器180K可以设置于显示屏194，由触摸传感器180K与显示屏194组成触摸屏，也称“触控屏”。触摸传感器180K用于检测作用于其上或附近的触摸操作。触摸传感器可以将检测到的触摸操作传递给应用处理器，以确定触摸事件类型。可以通过显示屏194提供与触摸操作相关的视觉输出。在另一些实施例中，触摸传感器180K也可以设置于终端设备100的表面，与显示屏194所处的位置不同。
按键190包括开机键，音量键等。按键190可以是机械按键。也可以是触摸式按键。终端设备100可以接收按键输入，产生与终端设备100的用户设置以及功能控制有关的键信号输入。
SIM卡接口195用于连接SIM卡。终端设备100通过SIM卡和网络交互，实现通话以及数据通信等功能。在一些实施例中，终端设备100采用eSIM，即：嵌入式SIM卡。eSIM卡可以嵌在终端设备100中，不能和终端设备100分离。
下面结合具体的应用场景介绍本申请实施例提供的资源获取方法。
在一种应用场景下，本申请实施例提供的资源获取方法用于打开门锁，如图3所示，在该场景下，目标设备为门锁，待访问资源为门锁的状态信息。
终端设备根据用户的操作向服务器发送资源访问请求信息，或者终端设备在进入预设区域时自动触发资源访问请求信息的发送。例如，如图4所示，终端设备处于开锁界面时，若检测到用户对“开锁”图标的触摸操作，发送资源访问请求信息至服务器。其中，资源访问请求信息包括用户注册时的用户身份标识以及门锁的状态信息的标识，用户身份标识可以是用户的帐号信息，也可以是与用户身份绑定的终端设备的识别码，门锁的状态信息的标识可以是门锁的状态信息的存储路径，门锁的状态信息的标识与门锁标识对应。
服务器接收到资源访问请求信息后，对用户身份标识进行认证，例如，验证用户身份标识对应的用户是否具有该门锁的访问权限，若用户身份标识对应的用户具有该门锁访问权限，则认证通过。若认证通过，服务器获取终端设备的位置信息，其中，服务器可以通过定位装置获取终端设备的位置信息，定位装置可以是位于门锁附近的UWB定位装置。具体地，服务器根据用户身份标识获取终端设备的标识和定位装置的标识，向与定位装置的标识对应的定位装置发送定位指令，定位指令中包括终端设备的标识。定位装置根据终端设备的标识获取终端设备与定位装置的相对位置，即终端设备的位置信息，将终端设备的位置信息发送至服务器。其中，位置信息包括地理位置信息和定位辅助信息，定位辅助信息包括定位精度。
服务器获取终端设备的位置信息后，对终端设备的位置信息进行校验。具体地，服务器获取与门锁标识对应的校验信息，校验信息包括需要校验的位置参量以及需要 校验的位置参量对应的范围，服务器根据需要校验的位置参量对应的范围对获取的位置信息进行校验。本实施例中，校验信息中需要校验的位置参量包括地理位置信息和定位精度。其中，地理位置信息为距离信息和角度信息的格式，距离信息是终端设备与定位装置的距离，角度信息是终端设备与预设的基准线之间的角度。将地理位置信息设定为距离信息和角度信息的格式，在位置校验时，对距离信息和角度信息分别进行验证，例如，角度信息对应的范围位于门外的设定区域，则终端设备只有位于门外时才能校验通过，打开门锁，提高了位置信息校验的准确度，进而提高了门锁的安全性。
示例性地，如图3所示，设定的开锁区域是以定位装置M为圆心，半径为2米，以经过定位装置且与门平行的直线为基准线，角度为-30°至30°的扇形区域P内，当终端设备位于该开锁区域时，才可以打开门锁，即用户在门外的设定区域内才可以开锁。则需要校验的位置参量中，地理位置信息对应的范围为：角度-30°至30°，距离小于2米。服务器根据获取的终端设备的地理位置信息和定位精度计算终端设备所在的位置范围，确定终端设备所在的位置范围是否位于预定的区域内。
例如，若终端设备位于位置A，位置A与基准线的角度为-10°，与定位装置的距离为1.5米，定位精度为0.05米；根据与定位装置的距离和定位精度计算出的与定位装置的距离是1.45-1.55米之间，小于2米，且角度位于-30°至30°之间，与地理位置信息对应的范围一致，因此，通过校验。若终端设备位于位置B，位置B与基准线的角度为-60°，与定位装置的距离为1米，定位精度为0.05米，由于位置B所在的角度不在-30°至30°之间，因此，未通过校验。若终端设备位于位置C，位置C与基准线的角度为0°，与定位装置的距离为1.9米，定位精度为0.2米，根据与定位装置的距离和定位精度计算出的与定位装置的距离是1.7-2.1米之间，有可能大于2米，因此，未通过校验。
需要说明的是，服务器也可以分别对终端设备的地理位置信息和定位精度进行验证，当根据地理位置信息确定终端设备在预定的区域内，且定位精度与预设的定位精度匹配时，即校验通过，例如，预设的定位精度为10厘米，若终端设备的地理位置信息在预定的区域内，且定位精度为5厘米，则位置信息校验通过。
在另一种可能的实现方式中，若待访问资源为门锁的状态信息，定位辅助信息包括定位方式，即校验信息中需要校验的位置参量包括地理位置信息和定位方式，服务器根据终端设备的地理位置信息确定终端设备是否在预定的区域内，且确定定位方式是否与预设定位方式匹配。其中，预设定位方式可以设为UWB定位方式。例如，服务器获取到终端设备发送的位置信息和UWB定位装置发送的位置信息，终端设备发送的位置信息对应的定位方式为GPS定位，则未校验通过；UWB定位装置发送的位置信息对应的定位方式为UWB定位方式，则将UWB定位方式对应的地理位置信息作为终端设备的地理位置信息，对UWB定位方式对应的地理位置信息进行进一步地校验，若地理位置信息校验通过，则位置信息校验通过。由于不同的定位方式对应的定位精度不同，例如，UWB定位方式对应的定位精度可以达到厘米级，若位置信息中的定位方式校验通过，说明定位精度满足预设要求，从而提高获取的位置信息的准确度，降低了不相关设备获取门锁的状态信息的几率，提高了门锁访问的安全等级。
在其它可能的实现方式中，若待访问资源为门锁的状态信息，定位辅助信息包括定位方式和定位精度，服务器在确定出当前的定位方式与预设定位方式一致时，还需要根据地理位置信息和定位精度确定终端设备是否在预定的区域内，若终端设备预定的区域内，则位置信息校验通过。
若位置信息检验通过，服务器将与门锁的状态信息的标识对应的访问令牌发送至终端设备。终端设备获取访问令牌后，将访问令牌发送至门锁，门锁对访问令牌进行校验，若校验通过，终端设备获取门锁的状态信息，改变门锁的状态信息为开锁状态，从而打开门锁。
上述实施例中，在用户身份标识认证通过后，服务器还对终端设备的地理位置信息、定位精度和定位方式进行校验，当地理位置信息、定位精度和定位方式均校验通过时，终端设备才可以打开门锁，从而提高了位置信息校验的准确度，降低了不相关设备获取门锁的状态信息的几率，提高了门锁的安全性。
在另一种应用场景中，本申请实施例提供的资源获取方法用于获取红绿灯的相位信息，如图5所示，目标设备为红绿灯，待访问资源为红绿灯的相位信息。
终端设备在进入红绿灯的设定范围内时，根据用户的操作向服务器发送资源访问请求信息，或者自动触发资源访问请求信息的发送。例如，当车辆进入红绿灯的设定范围时，若检测到用户在车辆的导航界面选择当前位置的红绿灯，则车辆向服务器发送资源访问请求信息；又例如，当用户用手机扫描当前位置的红绿灯上对应的二维码时，手机向服务器发送资源访问请求信息。如图6所示，以终端设备是车辆为例，在当前导航界面，若检测到用户对“红绿灯”图标的触摸操作，终端设备向服务器发送资源访问请求信息。其中，资源访问请求信息包括用户身份标识以及红绿灯相位信息的标识，其中，红绿灯相位信息的标识与当前位置的红绿灯标识对应。
服务器接收到资源访问请求信息后，对用户身份标识进行认证。例如，验证车辆标识对应的车辆是否具有红绿灯相位信息的访问权限，若车辆标识对应的车辆具有红绿灯相位信息的访问权限，则认证通过。若认证通过，服务器获取终端设备的位置信息，例如，若终端设备为车辆，服务器获取与用户身份标识对应的车辆标识，向与车辆标识对应的车辆发送位置信息的获取请求，车辆将位置信息发送至服务器。其中，位置信息包括地理位置信息和定位辅助信息，定位辅助信息包括移动方向。其中，移动方向可以是车辆发送至服务器的，也可以是服务器根据车辆发送的至少两个时刻的地理位置信息确定出的。
服务器获取终端设备的位置信息后，对终端设备的位置信息进行校验。具体地，服务器获取与红绿灯标识对应的校验信息，校验信息包括需要校验的位置参量以及需要校验的位置参量对应的范围，服务器根据需要校验的位置参量对应的范围对获取的位置信息进行校验。本实施例中，校验信息中需要校验的位置参量包括地理位置信息和移动方向，地理位置信息对应的范围为预定的区域，移动方向对应的范围为预设方向。若服务器根据地理位置信息确定终端设备在预定的区域内，且终端设备的移动方向与预设方向一致，则校验通过。例如，校验信息中，地理位置信息对应的范围为图5中的区域P，移动方向为北向南，当根据地理位置信息确定终端设备位于区域P，且移动方向为北向南时，校验通过。由于不同方向行驶的车辆对应的红绿灯相位不一致， 例如，从东向西和从南向北行驶的车辆对应的红绿灯相位信息不同，通过对终端设备的地理位置信息和移动方向进行校验，可以避免发送错误的红绿灯相位信息至终端设备。
在其他可行的实施方式中，若待访问资源为红绿灯的相位信息，定位辅助信息还包括定位时延，当服务器根据地理位置信息确定终端设备在预定的区域内，且终端设备的移动方向与预设方向一致时，还需要校验位置信息中的定位时延是否小于预设时长，若定位时延小于预设时长，则校验通过。例如，校验信息中定位时延为小于1秒，若服务器获取的终端设备的位置信息中的定位时延小于1秒，则校验通过。由于车辆的移动速度较快，若定位时延太长，当服务器获取到终端设备的位置信息时，终端设备已经离开当前位置，若服务器根据当前位置指示红绿灯将对应的红绿灯相位信息发送至终端设备，已经不能满足车辆的实际需求。通过对定位时延进行校验，提高了获取的地理位置信息的实时性，降低了将错误的红绿灯相位信息发送至终端设备的几率。
在其他可能的实现方式中，定位辅助信息还包括定位方式和定位精度，当终端设备的地理位置信息、移动方向、定位时延、定位方式、定位精度与需要校验的位置参量对应的范围均一致时，位置信息才能校验通过，从而进一步提高了位置信息校验的准确度，降低了将红绿灯相位信息发送至不相关设备的几率。
在一种可能的实现方式中，车辆上设有GPS定位装置，服务器获取与用户身份标识对应的车辆标识，分别向与车辆标识对应的GPS定位装置和运营商基站发送车辆的位置信息的获取请求。GPS定位装置和运营商基站分别将获取的位置信息发送至服务器，服务器对两种定位方式对应的位置信息进行校验，任意一种定位方式对应的位置信息与需要校验的位置参量对应的范围一致，则校验通过。例如，校验信息中，地理位置信息的范围为图5中的区域P，移动方向为北向南，定位时延小于1秒，定位方式为GPS定位方式和运营商基站定位方式，定位精度为10米。GPS发送的位置信息中，定位方式为GPS定位，精度为5米，时延为100毫秒，地理位置信息在区域P内，根据至少两个时刻的地理位置信息计算出的移动方向为北向南，与校验信息一致。运营商基站发送的位置信息中，定位方式为运营商基站定位，精度为10米，时延为2秒，地理位置信息在区域P内，根据至少两个时刻的地理位置信息计算出的移动方向为北向南，由于时延大于1秒，与校验信息不一致。由于两种定位方式中，GPS定位方式对应的位置信息与校验信息一致，则位置信息校验通过，从而提高了位置信息校验的灵活性，增加产品的使用范围。
在其他可行的实现方式中，服务器分别向对应车辆的GPS定位装置和运营商基站发送车辆的位置信息的获取请求后，对最先获取的位置信息进行校验，若最先获取的位置信息与校验信息一致，则位置信息校验通过。例如，由于GPS定位方式的定位延时较小，在卫星信号较好时，服务器对最先获取的GPS定位装置发送的位置信息进行校验，若位置信息与校验信息一致，则校验通过。在卫星信号不好时，不能及时获取GPS定位装置发送的位置信息，则服务器对获取的运营商基站发送的位置信息进行校验，若位置信息与校验信息一致，则校验通过，从而满足不同场景的需要。
若位置信息校验通过，服务器将与红绿灯相位信息的标识对应的访问令牌发送至终端设备。终端设备获取访问令牌后，将访问令牌发送至红绿灯，红绿灯对访问令牌 进行校验，若校验通过，将对应方向的红绿灯相位信息发送至终端设备。终端设备可以根据红绿灯相位信息计算剩余红灯或者剩余绿灯的时长，从而规划车速和行程，有助于提升道路交通安全性。
上述实施例中，在用户身份标识认证通过后，服务器还对终端设备的定位方式、定位时延、定位精度、地理位置信息和移动方向进行校验，从而提高了位置信息的校验准确度，降低了将错误的红绿灯相位信息发送至终端设备的几率。
在又一种应用场景中，本申请实施例提供的资源获取方法用于获取导航地图，如图7所示，目标设备为车库管理设备，待访问资源为导航地图。
终端设备根据用户的操作向服务器发送资源访问请求信息，或者终端设备在进入预设区域时自动触发资源访问请求信息的发送。资源访问请求信息包括用户身份标识以及导航地图的标识，导航地图的标识与车库管理设备的标识对应。
服务器接收到资源访问请求信息后，对用户身份标识进行认证。例如，验证用户身份标识对应的车辆是否具有导航地图下载权限，若用户身份标识对应的用户具有导航地图下载权限，则认证通过。若认证通过，服务器获取终端设备的位置信息。具体地，服务器根据用户身份标识获取终端设备的标识，向与终端设备标识对应的终端设备发送位置信息获取请求，终端设备将位置信息发送至服务器。在一种可能的实现方式中，以终端设备是车辆为例，由于导航地图一般设置于车库内，在地下车库内，一般无法接收卫星信号。服务器向与车辆标识对应的车辆的内置WIFI定位模块发送位置信息获取请求，以保证可以及时获取位置信息。其中，位置信息包括地理位置信息和定位辅助信息，定位辅助信息包括移动速度。
服务器获取终端设备的位置信息后，对终端设备的位置信息进行校验。具体地，服务器获取与车库管理设备的标识对应的校验信息，校验信息包括需要校验的位置参量以及需要校验的位置参量对应的范围，服务器根据需要校验的位置参量对应的范围对获取的位置信息进行校验。本实施例中，校验信息中需要校验的位置参量包括地理位置信息和移动速度。服务器根据至少两个时刻获取的地理位置信息确定终端设备的移动速度，若根据终端设备的地理位置信息确定终端设备在预定的区域内，且终端设备的移动速度小于预设速度，则校验通过。当终端设备的移动速度较大时，在服务器获取到终端设备的位置信息时，终端设备可能已经离开当前位置，从而使得获取的位置信息不能够反映终端设备的实际位置。通过对终端设备的移动速度进行校验，提高了服务器获取的地理位置信息的准确度。
在其他可行的实施方式中，若待访问资源为导航地图，定位辅助信息除了包括移动速度外，还包括定位精度和定位安全性，当终端设备的地理位置信息、移动速度、定位精度和定位安全性与需要校验的位置参量对应的范围均一致时，位置信息才能校验通过。例如，校验信息中，地理位置信息对应的范围为图7中的区域P，定位精度为亚米级，定位安全性为中等，移动速度为小于15km/h。若当前车辆的地理位置信息位于区域P，定位方式为WIFI定位，则对应的定位精度为亚米级，定位安全性为中等，根据至少两个时刻的地理位置信息计算出的移动速度为10km/h，则校验通过。通过对终端设备的地理位置信息、移动速度、定位精度和定位安全性进行校验，进一步提高了位置信息校验的准确度。
若位置信息校验通过，服务器将与导航地图的标识对应的访问令牌发送至终端设备。终端设备获取访问令牌后，将访问令牌发送至车库管理设备，车库管理设备对访问令牌进行校验，若校验通过，将导航地图发送至终端设备，以方便用户快速找到车位。
上述实施例中，在用户身份标识认证通过后，服务器还对终端设备的地理位置信息、定位精度、定位安全性和移动速度进行校验，提高了获取的位置信息的准确度，避免将导航地图发送至不相关的终端设备。
在其他应用场景中，终端设备的位置信息可以是其他的组合方式，例如，对于共享汽车通过手机打开共享汽车车锁的场景，服务器需要获取的位置信息包括手机的地理位置信息、定位精度、定位方式，当位置信息校验通过时，用户才可以通过手机打开共享汽车车锁；对于用户通过手机参加商场活动抢红包的场景，服务器需要获取的位置信息包括手机的地理位置信息和定位方式，当位置信息校验通过时，用户才可以通过手机打开抢红包的链接。
请参见图8，图8示出了本申请实施例中提供的资源获取方法的具体流程示意图，如图8所示，该方法包括：
S101：终端设备向服务器发送访问目标设备的资源访问请求信息，其中，资源访问请求信息中携带有用户身份标识和待访问资源标识。
其中，用户身份标识可以是用户的帐号信息，例如，用户名、手机号、邮箱地址等，也可以是与用户身份绑定的终端设备的识别码。待访问资源标识与待访问资源对应，待访问资源标识可以是待访问资源的统一资源标识符(Uniformed Resource Identifier，URI)、通用唯一识别码(Universally Unique Identifier，UUID)或者其他形式的标识，待访问资源存储于目标设备上，可以是门锁的状态信息、红绿灯的相位信息、导航地图或抢红包链接等。终端设备可以是根据用户在终端设备上的操作生成资源访问请求信息，也可以是在进入预设地理位置信息或者进入预设状态时生成资源访问请求信息。
S102：服务器对用户身份标识进行认证。
具体地，服务器根据预先存储的认证信息对用户身份标识进行认证，例如，查找认证信息中是否存在与用户身份标识一致的标识，若存在，则认证通过。
S103：若认证通过，服务器获取终端设备的位置信息,所述位置信息包括地理位置信息以及定位辅助信息。
具体地，若用户身份信息认证通过，服务器获取与用户身份标识对应的终端设备的标识，向对应的终端设备发送位置信息的获取请求，终端设备将位置信息发送至服务器。在其它可能的实现方式中，服务器根据用户的身份标识获取对应的定位装置的标识，向对应的定位装置发送位置信息的获取请求，定位装置将检测的终端设备的位置信息发送至服务器，其中，定位装置可以是终端设备内置的定位装置、目标设备内置的定位装置、距离目标设备预定范围内的定位装置或者第三方服务器中内置的定位装置，从而可以在不同的场景下获取位置信息，增加产品的使用范围。
其中，地理位置信息可以是经纬度、街道+门牌号、房间等多种格式，定位辅助信息可以是定位精度、定位时延、定位安全性、定位方式、移动速度和/或移动方向。其 中，定位精度可以是厘米、亚米、米、十米、百米级别。定位时延是从发起定位到获得位置信息的时延。定位安全性是指定位过程是否可能被仿冒、被中间人攻击、被伪造等。而定位安全性与定位方式有关，定位方式包括GPS定位、Wi-Fi定位、蓝牙定位、UWB定位、运营商基站定位、视觉定位、雷达定位等。定位方式不同，定位精度和定位安全性也不同，例如，UWB定位的安全性最高，GPS定位的安全性较低，基于视频和雷达的定位方式的安全性最低。此外，定位精度和定位安全性与环境因素也有关，若周围的环境因素不同，定位精度和定位安全性也不同。例如，在空旷环境中GPS的定位精度可以达到米级，但是在城市楼宇较多时只能达到十米级。移动速度和移动方向是终端设备根据至少两个时刻的地理位置信息计算出的。在其他可行的实现方式中，服务器根据终端设备发送的至少两个时刻的地理位置信息计算出移动速度或移动方向。
在一种可能的实现方式中，若用户身份标识认证通过，服务器根据预先获取的校验信息判断是否需要进行位置校验，若需要进行位置校验，从校验信息中获取需要校验的位置参量。例如，校验信息为如表1所示的对应关系表，对应关系表中存储目标设备标识、待访问资源标识和需要校验的位置参量的对应关系，表1中，目标设备标识和待访问资源标识存储于访问资源字段下，地理位置、定位精度、定位时延、定位方式、移动速度、移动方向、定位安全性为需要校验的位置参量。当用户身份标识认证通过，服务器根据待访问资源标识从对应关系表中获取需要校验的位置参量，例如，表1中，对于访问资源URI1，需要校验的位置参量中的定位方式和移动速度为NA，该“NA”表示不需要对定位方式和移动速度进行校验，需要校验的位置参量包括地理位置信息、定位精度、定位时延、移动方向和移动安全性，则服务器获取终端设备的地理位置信息、定位精度、定位时延、移动方向和定位安全性。
表1
Figure PCTCN2021080239-appb-000001
S104：服务器对终端设备的位置信息进行校验。
具体地，服务器根据地理位置信息确定终端设备是否在预定的区域内，且确定定位辅助信息是否符合预设条件。示例性地，校验信息中除了包括需要校验的位置参量外，还包括与需要校验的位置参量对应的范围，例如，表1中，当访问资源为URI2时，需要校验的地理位置信息对应的范围为预定的区域，即区域2，定位精度的范围为亚米级，移动速度的范围为<15Km/h，定位安全性为中。服务器根据需要校验的位置参量对应的范围对终端设备的位置信息进行校验，确定终端设备的位置信息与需要校验的位置参量对应的范围是否一致。例如，若需要校验的位置参量包括地理位置信息、定位精度和定位方式，服务器根据终端设备的地理位置信息和定位精度计算终端设备所在的位置范围，若终端设备所在的位置范围与校验信息中的地理位置信息对应 的范围一致，且定位方式与校验信息中的预设定位方式匹配，则位置信息校验通过。又例如，若需要校验的位置参量包括地理位置信息和移动方向，若地理位置信息与校验信息中地理位置信息对应的范围一致，且移动方向与校验信息中的预设方向一致，则位置信息校验通过。
S105：若校验通过，服务器将与待访问资源标识对应的访问令牌发送至终端设备。
S106：终端设备将访问令牌发送至目标设备。
S107：目标设备对访问令牌进行校验，若校验通过，目标设备将与待访问资源标识对应的待访问资源发送至终端设备。
例如，目标设备将访问令牌与预设的令牌进行对比，若访问令牌与预设的令牌一致，则校验通过，若校验通过，终端设备从目标设备获取与待访问资源标识对应的待访问资源。
在一种可能的实现方式中，终端设备初次访问服务器时，若位置信息校验通过，服务器将访问令牌发送至终端设备，终端设备存储访问令牌，并将访问令牌发送至目标设备；当终端设备下一次访问服务器时，若位置信息校验通过，服务器将校验通过信息发送至终端设备，终端设备根据校验通过信息将存储的访问令牌发送至目标设备，以减少服务器发送访问令牌的次数，节省服务器的资源占用空间。当终端设备访问服务器达到预设次数时，服务器将新的访问令牌发送至终端设备，同时将新的访问令牌的校验信息发送至目标设备，终端设备根据新的访问令牌获取目标设备上的待访问资源，从而提高资源访问的安全性。
上述实施例中，终端设备将资源访问请求信息发送至服务器，资源访问请求信息中携带有用户身份标识和待访问资源标识，服务器对用户身份标识进行认证，若认证通过，获取终端设备的位置信息，服务器对终端设备的位置信息进行认证，若认证通过，将与待访问资源标识对应的访问令牌发送至终端设备，即服务器除了对用户身份标识进行认证外，还对终端设备的位置信息进行校验，只有位置信息校验通过时，终端设备才可以获取访问令牌，根据访问令牌从目标设备获取与待访问资源标识对应的待访问资源，从而降低了将待访问资源发送至不相设备的几率，实现对待访问资源的合理管控。且由于位置信息包括地理位置信息以及定位辅助信息，提高了位置信息校验的准确度，从而进一步降低了将待访问资源发送至不相设备的几率。且由于位置信息的认证和访问令牌的发送均是由服务器执行，方便对终端设备和目标设备同步进行权限更新，防止出现由于任一方未能及时更新，影响使用的情况。
请参见图9，图9示出了本申请实施例提供的资源获取方法的流程示意图，该方法执行主体为终端设备100。如图9所示，该方法包括：
S201：终端设备向服务器发送访问目标设备的资源访问请求信息，其中，资源访问请求信息中携带有用户身份标识和待访问资源标识。
S202：终端设备接收服务器发送的与用户身份标识对应的位置信息获取请求，将终端设备的位置信息发送至服务器，所述位置信息包括地理位置信息以及定位辅助信息。
具体地，若用户身份标识认证通过，终端设备接收到位置信息获取请求，将位置信息发送至服务器。其中，定位辅助信息包括定位精度、定位时延、定位方式、移动 速度和/或移动方向。
S203：终端设备获取服务器发送的与待访问资源标识对应的访问令牌，通过访问令牌从目标设备获取与待访问资源标识对应的待访问资源。
具体地，终端设备获取访问令牌后，将访问令牌发送至目标设备，目标设备对访问令牌进行校验，若校验通过，终端设备从目标设备获取待访问资源，例如，下载待访问资源。
上述实施例中，终端设备在发送资源访问请求信息时，将用户身份标识和待访问资源标识发送至服务器，服务器对用户身份标识进行认证，若认证通过，终端设备获取到服务器发送的位置信息获取请求，将终端设备的位置信息发送至服务器，服务器对终端设备的位置信息进行校验，若校验通过，终端设备接收服务器发送的访问令牌，通过访问令牌从目标设备获取待访问资源。由于终端设备在获取待访问资源前，除了对用户身份标识进行认证，还对终端设备的位置信息进行校验，只有当位置信息校验通过，终端设备才能根据访问令牌获取待访问资源，从而提高资源访问的安全性。且由于位置信息包括地理位置信息以及定位辅助信息，提高了位置信息校验的准确度，降低了将待访问资源发送至不相设备的几率，使得对待访问资源的管控更加合理。
请参见图10，图10示出了本申请实施例中提供的资源获取方法的流程示意图，该方法执行主体为服务器200。如图10所示，该方法包括：
S301：服务器获取终端设备发送的访问目标设备的资源访问请求信息，其中，资源访问请求信息中携带有用户身份标识和待访问资源标识。
S302：服务器对用户身份标识进行认证。
具体地，服务器根据预先存储的认证信息对用户身份标识进行认证，例如，查找认证信息中是否存在与用户身份标识一致的标识，若存在，则认证通过。
S303：若认证通过，服务器获取终端设备的位置信息，位置信息包括地理位置信息以及定位辅助信息。
具体地，服务器获取终端设备发送的位置信息，或者获取定位装置采集的终端设备的位置信息。其中，定位辅助信息包括定位精度、定位时延、定位方式、移动速度和/或移动方向。
S304：服务器对终端设备的位置信息进行校验。
具体地，服务器获取与待访问资源标识对应的校验信息，校验信息中包括需要校验的位置参量以及与需要校验的位置参量对应的范围，服务器根据需要校验的位置参量对应的范围对终端设备的位置信息进行校验。
S305：若校验通过，服务器将访问令牌发送至终端设备，以指示终端设备根据访问令牌从目标设备获取与待访问资源标识对应的待访问资源。
具体地，若终端设备的位置信息与需要校验的位置参量对应的范围一致，则校验通过。若校验通过，服务器将访问令牌发送至终端设备，终端设备获取访问令牌后，将访问令牌发送至目标设备，目标设备对访问令牌进行校验，若校验通过，终端设备从目标设备获取与待访问资源标识对应的待访问资源。
上述实施例中，服务器在获取终端设备发送的资源访问请求信息时，对资源访问请求信息进行认证，若认证通过，获取终端设备的位置信息，对位置信息进行校验， 若校验通过，服务器将访问令牌发送至终端设备，终端设备根据访问令牌获取待访问资源。由于服务器除了对用户身份标识认证外，还对终端设备的位置信息进行校验，只有当位置信息校验通过时，才允许终端设备获取待访问资源，降低了将待访问资源发送至不相关设备的几率，实现对待访问资源的合理管控，提高了资源访问的安全性。且由于位置信息包括地理位置信息以及定位辅助信息，提高了位置信息校验的准确度，进一步降低了将待访问资源发送至不相设备的几率。且由于位置信息的认证和访问令牌的发送均是由服务器执行，方便对终端设备和目标设备同步进行权限更新，防止出现由于任一方未能及时更新，影响使用的情况。
在上述实施例中，对各个实施例的描述都各有侧重，某个实施例中没有详述或记载的部分，可以参见其它实施例的相关描述。
基于同一发明构思，本申请实施例还提供了一种服务器。图11为本申请实施例提供的服务器的结构示意图，如图11所示，本实施例提供的服务器200可以包括：处理器210、存储器220、网络接口230。处理器210、存储器220和网络接口230通过通信总线240相连。
所述处理器210可以是中央处理单元(Central Processing Unit，CPU)，还可以是其他通用处理器、数字信号处理器(Digital Signal Processor，DSP)、专用集成电路(Application Specific Integrated Circuit，ASIC)、现场可编程门阵列(Field-Programmable Gate Array，FPGA)或者其他可编程逻辑器件、分立门或者晶体管逻辑器件、分立硬件组件等。可选的，处理器210可包括一个或多个处理单元。
所述存储器220可以是服务器200的内部存储单元，例如服务器200的硬盘或内存。所述存储器220也可以是服务器200的外部存储设备，例如服务器200上配备的插接式硬盘，智能存储卡(Smart Media Card,SMC)，安全数字(Secure Digital,SD)卡，闪存卡(Flash Card)等。进一步地，所述存储器220还可以既包括服务器200的内部存储单元也包括外部存储设备。所述存储器220用于存储计算机程序以及服务器200所需的其他程序和数据。所述存储器220还可以用于暂时地存储已经输出或者将要输出的数据。
网络接口230可以用于收发信息，可以包括有线接口和/或无线接口，通常用于在该服务器200与其他电子设备之间建立通信连接。例如，本申请中，网络接口230可以接收终端设备100发送的位置信息，向终端设备100发送访问令牌等。
可选地，该服务器200还可以包括用户接口250，用户接口250可以包括显示器(Display)、输入单元比如键盘(Keyboard)，可选的用户接口250还可以包括标准的有线接口、无线接口。可选地，在一些实施例中，显示器可以是LED显示器、液晶显示器、触控式液晶显示器以及OLED(Organic Light-Emitting Diode，有机发光二极管)触摸器等。其中，显示器也可以适当的称为显示屏或显示单元，用于显示在服务器200中处理的信息以及用于显示可视化的用户界面。
本领域技术人员可以理解，图11仅仅是服务器的举例，并不构成对服务器的限定，可以包括比图示更多或更少的部件，或者组合某些部件，或者不同的部件布置。
本实施例提供的服务器可以执行上述方法实施例，其实现原理与技术效果类似，此处不再赘述。
所属领域的技术人员可以清楚地了解到，为了描述的方便和简洁，仅以上述各功能单元、模块的划分进行举例说明，实际应用中，可以根据需要而将上述功能分配由不同的功能单元、模块完成，即将所述装置的内部结构划分成不同的功能单元或模块，以完成以上描述的全部或者部分功能。实施例中的各功能单元、模块可以集成在一个处理单元中，也可以是各个单元单独物理存在，也可以两个或两个以上单元集成在一个单元中，上述集成的单元既可以采用硬件的形式实现，也可以采用软件功能单元的形式实现。另外，各功能单元、模块的具体名称也只是为了便于相互区分，并不用于限制本申请的保护范围。上述系统中单元、模块的具体工作过程，可以参考前述方法实施例中的对应过程，在此不再赘述。
所述集成的单元如果以软件功能单元的形式实现并作为独立的产品销售或使用时，可以存储在一个计算机可读取存储介质中。基于这样的理解，本申请实现上述实施例方法中的全部或部分流程，可以通过计算机程序来指令相关的硬件来完成，所述的计算机程序可存储于一计算机可读存储介质中，该计算机程序在被处理器执行时，可实现上述各个方法实施例的步骤。其中，所述计算机程序包括计算机程序代码，所述计算机程序代码可以为源代码形式、对象代码形式、可执行文件或某些中间形式等。所述计算机可读介质至少可以包括：能够将计算机程序代码携带到拍照装置/电子设备的任何实体或装置、记录介质、计算机存储器、只读存储器(ROM，Read-Only Memory)、随机存取存储器(RAM，Random Access Memory)、电载波信号、电信信号以及软件分发介质。例如U盘、移动硬盘、磁碟或者光盘等。
所述作为分离部件说明的单元可以是或者也可以不是物理上分开的，作为单元显示的部件可以是或者也可以不是物理单元，即可以位于一个地方，或者也可以分布到多个网络单元上。可以根据实际的需要选择其中的部分或者全部单元来实现本实施例方案的目的。
在本申请所提供的实施例中，应该理解到，所揭露的装置/网络设备和方法，可以通过其它的方式实现。例如，以上所描述的装置/网络设备实施例仅仅是示意性的，例如，所述模块或单元的划分，仅仅为一种逻辑功能划分，实际实现时可以有另外的划分方式，例如多个单元或组件可以结合或者可以集成到另一个系统，或一些特征可以忽略，或不执行。另一点，所显示或讨论的相互之间的耦合或直接耦合或通讯连接可以是通过一些接口，装置或单元的间接耦合或通讯连接，可以是电性，机械或其它的形式。
本领域普通技术人员可以意识到，结合本文中所公开的实施例描述的各示例的单元及算法步骤，能够以电子硬件、或者计算机软件和电子硬件的结合来实现。这些功能究竟以硬件还是软件方式来执行，取决于技术方案的特定应用和设计约束条件。专业技术人员可以对每个特定的应用来使用不同方法来实现所描述的功能，但是这种实现不应认为超出本申请的范围。
最后应说明的是：以上所述，仅为本申请的具体实施方式，但本申请的保护范围并不局限于此，任何在本申请揭露的技术范围内的变化或替换，都应涵盖在本申请的保护范围之内。因此，本申请的保护范围应以所述权利要求的保护范围为准。

Claims (14)

  1. 一种资源获取方法，其特征在于，包括：
    终端设备向服务器发送访问目标设备的资源访问请求信息，其中，所述资源访问请求信息中携带有用户身份标识和待访问资源标识；
    服务器对所述用户身份标识认证通过；
    服务器获取所述终端设备的位置信息,所述位置信息包括地理位置信息以及定位辅助信息；
    服务器对所述终端设备的位置信息校验通过；
    服务器将与所述待访问资源标识对应的访问令牌发送至所述终端设备；
    终端设备根据所述访问令牌从所述目标设备获取与所述待访问资源标识对应的待访问资源。
  2. 一种资源获取方法，其特征在于，包括：
    服务器获取终端设备发送的访问目标设备的资源访问请求信息，其中，所述资源访问请求信息中携带有用户身份标识和待访问资源标识；
    服务器对所述用户身份标识认证通过；
    服务器获取所述终端设备的位置信息，所述位置信息包括地理位置信息以及定位辅助信息；
    服务器对所述终端设备的位置信息校验通过；
    服务器将与所述待访问资源标识对应的访问令牌发送至所述终端设备，以指示所述终端设备根据所述访问令牌从目标设备获取与所述待访问资源标识对应的待访问资源。
  3. 如权利要求1或2所述的资源获取方法，其特征在于，所述定位辅助信息包括定位精度、定位时延、定位方式、移动速度和/或移动方向。
  4. 如权利要求3所述的资源获取方法，其特征在于，所述服务器对所述终端设备的位置信息校验通过，包括：
    服务器根据所述地理位置信息确定所述终端设备在预定的区域内，且确定所述定位辅助信息符合预设条件。
  5. 如权利要求4所述的资源获取方法，其特征在于，所述待访问资源为红绿灯的相位信息，所述定位辅助信息包括移动方向；
    相应的，所述服务器根据所述地理位置信息确定所述终端设备在预定的区域内，且确定所述定位辅助信息符合预设条件，包括：
    服务器根据所述地理位置信息确定所述终端设备在预定的区域内，且确定所述终端设备的移动方向与预设方向一致。
  6. 如权利要求5所述的资源获取方法，其特征在于，所述定位辅助信息还包括定位时延，所述确定所述定位辅助信息符合预设条件，还包括：
    确定所述定位时延小于预设时长。
  7. 如权利要求4所述的资源获取方法，其特征在于，所述待访问资源为导航地图，所述定位辅助信息包括移动速度；
    相应的，所述服务器根据所述地理位置信息确定所述终端设备在预定的区域内， 且确定所述定位辅助信息符合预设条件，包括：
    服务器根据所述地理位置信息确定所述终端设备在预定的区域内，且确定所述终端设备的移动速度小于预设速度。
  8. 如权利要求3所述的资源获取方法，其特征在于，所述服务器对所述终端设备的位置信息校验通过，包括：
    服务器根据所述地理位置信息和所述定位辅助信息确定所述终端设备在预定的区域内。
  9. 如权利要求8所述的资源获取方法，其特征在于，所述待访问资源为门锁的状态信息，所述定位辅助信息包括定位精度；
    相应的，所述服务器根据所述地理位置信息和所述定位辅助信息确定所述终端设备在预定的区域内，包括：
    服务器根据所述地理位置信息和所述定位精度计算所述终端设备所在的位置范围，确定所述终端设备所在的位置范围位于预定的区域内。
  10. 如权利要求1至9任一项所述的资源获取方法，其特征在于，所述服务器获取所述终端设备的位置信息，包括：
    服务器获取定位装置采集的所述终端设备的位置信息；其中，所述定位装置包括以下至少一项：
    所述终端设备内置的定位装置、所述目标设备内置的定位装置、距离所述目标设备预定范围内的定位装置以及第三方服务器中内置的定位装置。
  11. 一种服务器，其特征在于，包括存储器、处理器以及存储在所述存储器中并可在所述处理器上运行的计算机程序，其特征在于，所述处理器执行所述计算机程序时实现如权利要求2至10任一项所述的资源获取方法。
  12. 一种计算机可读存储介质，所述计算机可读存储介质存储有计算机程序，其特征在于，所述计算机程序被处理器执行时实现如权利要求2至10任一项所述的资源获取方法。
  13. 一种资源获取系统，其特征在于，包括终端设备、目标设备以及如权利要求11所述的服务器。
  14. 如权利要求13所述的资源获取系统，其特征在于，所述资源获取系统还包括定位装置。
PCT/CN2021/080239 2020-04-23 2021-03-11 资源获取方法、系统、服务器及存储介质 Ceased WO2021213061A1 (zh)

Priority Applications (2)

Application Number Priority Date Filing Date Title
US17/920,473 US12395496B2 (en) 2020-04-23 2021-03-11 Resource obtaining method and system, server, and storage medium
EP21793517.0A EP4131045A4 (en) 2020-04-23 2021-03-11 RESOURCE COLLECTION METHOD AND SYSTEM, SERVER AND STORAGE MEDIUM

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
CN202010327138.8A CN113553600B (zh) 2020-04-23 2020-04-23 资源获取方法、系统、服务器及存储介质
CN202010327138.8 2020-04-23

Publications (1)

Publication Number Publication Date
WO2021213061A1 true WO2021213061A1 (zh) 2021-10-28

Family

ID=78101082

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/CN2021/080239 Ceased WO2021213061A1 (zh) 2020-04-23 2021-03-11 资源获取方法、系统、服务器及存储介质

Country Status (4)

Country Link
US (1) US12395496B2 (zh)
EP (1) EP4131045A4 (zh)
CN (1) CN113553600B (zh)
WO (1) WO2021213061A1 (zh)

Cited By (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN115242775A (zh) * 2022-07-04 2022-10-25 中国银联股份有限公司 资源文件获取方法、装置、设备、介质及产品
WO2023151005A1 (en) 2022-02-11 2023-08-17 Zte Corporation Systems and methods for location verfication

Families Citing this family (10)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US11736466B2 (en) * 2019-09-18 2023-08-22 Bioconnect Inc. Access control system
CN114051249B (zh) * 2022-01-06 2022-04-15 杭州筋斗腾云科技有限公司 基于移动设备的数字化办公系统及方法
CN114969805B (zh) * 2022-04-18 2023-09-19 中移互联网有限公司 服务查询方法、装置、电子设备及存储介质
CN115343726A (zh) * 2022-08-15 2022-11-15 中国联合网络通信集团有限公司 无人机定位方法、无人机机载终端和定位服务器
CN119967033B (zh) * 2023-10-30 2026-01-23 荣耀终端股份有限公司 管理IoT设备的系统、方法及相关装置
CN118803975B (zh) * 2024-02-04 2025-11-04 中国移动通信集团浙江有限公司 一种通信哑资源位置校准方法和装置
CN118741428A (zh) * 2024-06-13 2024-10-01 中国联合网络通信集团有限公司 一种位置校验方法及装置
WO2026063866A1 (en) * 2024-09-19 2026-03-26 Dyna.Ai Technology Pte. Ltd. Server apparatus, system and method for processing requests for resources
CN119729501B (zh) * 2024-12-23 2025-11-25 支付宝(杭州)信息技术有限公司 基于近场通信的资源获取、发送及信息发送方法和装置
CN120896794B (zh) * 2025-09-29 2026-01-06 贵州省电子认证科技有限公司 一种安全的mcp协议认证方法及系统

Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN102546648A (zh) * 2012-01-18 2012-07-04 Ut斯达康通讯有限公司 一种资源访问授权的方法
CN107222485A (zh) * 2017-06-14 2017-09-29 腾讯科技（深圳）有限公司 一种授权方法以及相关设备
US20180198775A1 (en) * 2007-09-04 2018-07-12 Phillip Volini Controlled token distribution to protect against malicious data and resource access
CN110121873A (zh) * 2017-10-23 2019-08-13 华为技术有限公司 一种访问令牌管理方法、终端和服务器

Family Cites Families (25)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US4961224A (en) * 1989-03-06 1990-10-02 Darby Yung Controlling access to network resources
GB0021067D0 (en) * 2000-08-25 2000-10-11 Tendotcom Ltd Data communications
WO2010032207A1 (en) 2008-09-17 2010-03-25 International Business Machines Corporation Authorization of server operations
CN102457507B (zh) * 2010-10-29 2016-06-08 中兴通讯股份有限公司 云计算资源安全共享方法、装置及系统
CN102457509B (zh) * 2010-11-02 2015-09-16 中兴通讯股份有限公司 云计算资源安全访问方法、装置及系统
US20120169461A1 (en) 2010-12-31 2012-07-05 Schneider Electric Buildings Ab Electronic physical access control with remote authentication
EP2642778B1 (en) * 2012-03-22 2016-03-16 BlackBerry Limited Authentication server and methods for granting tokens comprising location data
US9256722B2 (en) * 2012-07-20 2016-02-09 Google Inc. Systems and methods of using a temporary private key between two devices
EP2738996A1 (en) * 2012-11-30 2014-06-04 Gemalto SA Method, device and system for accessing a server
CN104767717B (zh) 2014-01-03 2019-01-29 腾讯科技（深圳）有限公司 身份验证方法及装置
CN105100007A (zh) * 2014-05-08 2015-11-25 国际商业机器公司 用于控制资源访问的方法和装置
US9641522B1 (en) * 2014-11-11 2017-05-02 Amazon Technologies, Inc. Token management in a managed directory service
EP3029960A1 (en) * 2014-12-05 2016-06-08 Greenspider gmbh Resource control apparatus, server apparatus and method for controlling a resource
CN106921636B (zh) * 2015-12-28 2020-05-08 华为技术有限公司 身份认证方法及装置
CN107452095B (zh) 2016-03-18 2020-08-11 阿里巴巴集团控股有限公司 一种用于开启门锁的方法和设备
CN106570421A (zh) * 2016-10-28 2017-04-19 努比亚技术有限公司 权限控制装置和方法
US10547965B2 (en) * 2016-11-21 2020-01-28 Beijing DIDI Infinity Technology and Development Co., Ltd Systems and methods for performing location-based actions
GB2558589A (en) * 2017-01-09 2018-07-18 Jaguar Land Rover Ltd Vehicle entry system
US10148668B2 (en) * 2017-01-25 2018-12-04 Ca, Inc. Geolocation-based authentication credentials
CN106686538B (zh) 2017-02-24 2020-04-03 金华市兴飞机器人有限公司 一种基于定位、蓝牙以及网络的验证方法
CN106973082B (zh) * 2017-03-07 2020-02-18 广州酷狗计算机科技有限公司 资源标识分享方法及装置
KR102383792B1 (ko) * 2017-03-16 2022-04-08 삼성전자주식회사 도어락 장치 및 도어락 장치의 제어 방법
US20190043359A1 (en) * 2017-08-03 2019-02-07 Laird Technologies, Inc. Sensor-equipped traffic safety message systems and related methods
KR102499917B1 (ko) 2017-12-07 2023-02-16 삼성전자주식회사 측위를 수행하는 전자 장치 및 전자 장치의 제어 방법
CN109902499A (zh) * 2019-03-13 2019-06-18 广州市网星信息技术有限公司 一种资源授权和访问方法、装置、系统、设备和存储介质

Patent Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20180198775A1 (en) * 2007-09-04 2018-07-12 Phillip Volini Controlled token distribution to protect against malicious data and resource access
CN102546648A (zh) * 2012-01-18 2012-07-04 Ut斯达康通讯有限公司 一种资源访问授权的方法
CN107222485A (zh) * 2017-06-14 2017-09-29 腾讯科技（深圳）有限公司 一种授权方法以及相关设备
CN110121873A (zh) * 2017-10-23 2019-08-13 华为技术有限公司 一种访问令牌管理方法、终端和服务器

Cited By (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
WO2023151005A1 (en) 2022-02-11 2023-08-17 Zte Corporation Systems and methods for location verfication
EP4397098A4 (en) * 2022-02-11 2024-10-23 ZTE Corporation LOCATION VERIFICATION SYSTEMS AND METHODS
CN115242775A (zh) * 2022-07-04 2022-10-25 中国银联股份有限公司 资源文件获取方法、装置、设备、介质及产品

Also Published As

Publication number Publication date
US20230208850A1 (en) 2023-06-29
CN113553600B (zh) 2024-06-14
EP4131045A4 (en) 2023-09-13
US12395496B2 (en) 2025-08-19
CN113553600A (zh) 2021-10-26
EP4131045A1 (en) 2023-02-08

Similar Documents

Publication Publication Date Title
CN113553600B (zh) 资源获取方法、系统、服务器及存储介质
US12052357B2 (en) Smart lock unlocking method and related device
CN113132962B (zh) 蓝牙扫描方法和电子设备
CN113225690B (zh) 蓝牙连接方法、系统和电子设备
CN113015161B (zh) 认证方法及其介质和电子设备
US9445267B2 (en) Bump or close proximity triggered wireless technology
CN111465536B (zh) 一种业务处理方法及设备
EP4102927B1 (en) Dual wifi connection
JP2023527408A (ja) 検証方法および装置
CN114510178B (zh) 一种共享数据分发方法及电子设备
WO2022135196A1 (zh) 终端定位的方法及终端
WO2021147419A1 (zh) 一种数据传输方法、电子设备及存储介质
CN119452353A (zh) 共享文件的方法、电子设备及计算机可读存储介质
US20230400592A1 (en) Positioning method and related apparatus
CN106028284A (zh) 识别智能设备之间相对位置的方法及智能设备
WO2024093857A1 (zh) 一种定位方法及相关装置
CN115761938A (zh) 车辆解锁的方法、装置、设备、存储介质和程序产品
US11640453B2 (en) User authentication facilitated by an additional device
CN116486513B (zh) 开锁方法、电子设备及系统
US20250016732A1 (en) Collaborative ranging method and apparatus, communication device and storage medium
CN115884072A (zh) 一种基于uwb的定位寻车方法和系统
CN114077732B (zh) 资源访问控制方法、终端设备及计算机可读存储介质
CN120234071A (zh) 设备登录方法、电子设备及车辆
CN119342137A (zh) 接续导航的方法和装置
WO2021135659A1 (zh) 车辆信息的推送方法、装置、用户账号服务器和用户设备

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 21793517

Country of ref document: EP

Kind code of ref document: A1

WWE Wipo information: entry into national phase

Ref document number: 202217061229

Country of ref document: IN

ENP Entry into the national phase

Ref document number: 2021793517

Country of ref document: EP

Effective date: 20221025

NENP Non-entry into the national phase

Ref country code: DE

WWG Wipo information: grant in national office

Ref document number: 17920473

Country of ref document: US

WWG Wipo information: grant in national office

Ref document number: 202217061229

Country of ref document: IN