TWI418193B - Mobile station management systems and methods, and computer program products thereof - Google Patents

Description

Mobile terminal management system and method, and computer program product thereof

The present invention relates to a mobile terminal (MS) management system and method, and more particularly to a system and method for managing a mobile terminal according to the mobile behavior of the mobile terminal.

In recent years, the rapid development of wireless networks has also been integrated into people's daily lives to make people's lives more convenient. People can use the wireless network in many places without being restricted by the network route. They can also know the nearby business information through LBS (Location Based Service). The LBS provides the information needed by the mobile terminal through the positioning system. Since the transmission mode of the wireless network is transmitted by broadcasting, this also poses a great threat to the privacy of the individual's location, because a malicious attacker can use a network address that does not change, such as The network card entity location value is used to know the location of the mobile terminal. As a result, most wireless networks suffer from the threat of location privacy.

In general, to protect the location privacy of mobile terminals is mainly how to prevent attackers from obtaining current or past location information. However, when a mobile terminal needs to use the LBS, he must tell the LBS provider his current location to obtain the LBS service. Therefore, the location information of the mobile terminal is explicitly included in the frame. Since broadcast transmission is used, it is difficult to prevent an attacker from obtaining location information as long as the mobile terminal has an action of transmitting.

Most of the existing practices are intended to minimize the amount of information that is leaked. If the mobile terminal takes location privacy as his first priority, he can only provide location information that is obscured by LBS. This may be an exchange between location privacy and the correct LBS, and the mobile terminal can actively prevent the attacker from knowing his precise location. However, since the link/physical layer is broadcasted as a medium, the attacker can still monitor the RSS (Received Signal Strength) and MAC (Media Access Control) of the mobile terminal. The media access control) address is used to track the location of the mobile terminal. In addition, AOA (Angle Of Arrival) and TOA (Time Of Arrival) can be used to track the mobile terminal. If the Accurate Positioning System is adopted, the exact range may be increased to 1~10 meters, and the mobile terminal will be more accurately positioned, so the mobile terminal's location privacy will be more threatened, so protection The location privacy of mobile terminals will become an increasingly important issue.

In some conventional techniques, MSs can be prevented from being tracked by other attackers by constantly changing their MAC addresses. However, after the MS replaces the new MAC address, it must reconnect with the Access Point (AP). If the number of MAC address changes is not effectively managed, the network traffic will be greatly increased. In addition, when the update of the MAC address hides the regularity, the attacker may also track the MS by analyzing the update frequency or mode of the MAC address.

In view of this, the present invention provides a mobile terminal management system and method.

A mobile terminal management system according to an embodiment of the present invention includes an access point, at least one first mobile terminal and a second mobile terminal, and a management server. The first mobile terminal and the second mobile terminal are respectively wirelessly coupled to the access point, and detect a signal strength information at at least a first time point and a second time point respectively. The signal strength information includes a signal strength between the first mobile terminal and the second mobile terminal and a signal strength between the first mobile terminal or the second mobile terminal and the access point. The management server is coupled to the access point, and the signal strength information at the first time point and the second time point is received by the first mobile terminal and the second mobile terminal respectively through the access point. The management server calculates a distance between the first mobile terminal and the second mobile terminal and a movement vector angle between the first mobile terminal and the second mobile terminal according to the signal strength information, and determines whether the distance is less than a predetermined distance and the angle of the moving vector Whether it is less than a predetermined angle. When the distance is less than the predetermined distance and the angle of the motion vector is less than the predetermined angle, the management server causes the first mobile terminal or the second mobile terminal to perform a network address update.

A mobile terminal management system according to an embodiment of the present invention includes an access point and at least a first mobile terminal and a second mobile terminal. The first mobile terminal and the second mobile terminal are respectively wirelessly coupled to the access point, and detect a signal strength information at at least a first time point and a second time point respectively. The signal strength information includes a signal strength between the first mobile terminal and the second mobile terminal and a signal strength between the first mobile terminal or the second mobile terminal and the access point. The access point receives the signal strength information at the first time point and the second time point by the first mobile terminal and the second mobile terminal, and calculates a distance between the first mobile terminal and the second mobile terminal according to the signal strength information. One of the first mobile terminal and the second mobile terminal moves the vector angle, and determines whether the distance is less than a predetermined distance and the angle of the motion vector is less than a predetermined angle. When the distance is less than the predetermined distance and the angle of the motion vector is less than the predetermined angle, the access point causes the first mobile terminal or the second mobile terminal to perform a network address update.

A mobile terminal management method according to an embodiment of the present invention. First, at least one first mobile terminal and a second mobile terminal are respectively wirelessly coupled to an access point, and detect a signal strength information at at least a first time point and a second time point respectively. The signal strength information includes a signal strength between the first mobile terminal and the second mobile terminal and a signal strength between the first mobile terminal or the second mobile terminal and the access point. Then, calculating a distance between the first mobile terminal and the second mobile terminal and a movement vector angle between the first mobile terminal and the second mobile terminal according to the signal strength information. Thereafter, it is determined whether the distance is less than a predetermined distance and the angle of the moving vector is less than a predetermined angle. When the distance is less than the predetermined distance and the angle of the motion vector is less than the predetermined angle, the first mobile terminal or the second mobile terminal is caused to perform a network address update.

The above method of the present invention can exist in a coded manner. When the code is loaded and executed by the machine, the machine becomes the means for practicing the invention.

The above described objects, features, and advantages of the invention will be apparent from the description and appended claims appended claims

Figure 1 shows a mobile terminal management system in accordance with an embodiment of the present invention.

The mobile terminal management system 100 according to an embodiment of the present invention includes a management server AS, at least one access point (AP1, AP2), and a plurality of mobile terminals (MS1, MS2, MS3, MS4, MS5, and MS6). The access point can accept the coupling of the mobile terminal and provide related network services. The mobile terminals MS1, MS2, and MS3 are wirelessly coupled to the access point AP1, and the mobile terminals MS4, MS5, and MS6 are wirelessly coupled to the access point AP2. The access point and the individual mobile terminal each have a network address, such as a MAC address, for identifying itself when making a wireless connection. The management server AS is used to implement the mobile terminal management method of the present case. It should be noted that each access point and the mobile terminal coupled thereto can be divided into one group, and each group can independently perform its corresponding mobile terminal management operation. In order to simplify the description, only a single group of mobile terminal management jobs are discussed in this embodiment.

The reminder is that the delivered packet can be signed and/or encrypted in advance. In this embodiment, it is assumed that the public/private key of the _AS is (PK _AS , SK _AS ), and the public/private key of u _i is ( And the public/private key of AP _λ is ( ). It must be noted that in some embodiments, the delivered packet may also not be signed and/or encrypted. In this embodiment, the signature/encryption and signature judgment/decryption of the relevant packet may be performed according to the relevant signature and the encryption and decryption algorithm and the corresponding key, and the relevant details will not be specifically described.

First, the function and name used in this case will be introduced next: u _i : indicates the mobile terminal i; AP _λ : indicates the AP of the number λ; d _ij : indicates the distance between u _i and u _j ; E _k (m) : indicates that the message m is encrypted using the key K; S _k (m): indicates that the message m is signed with the key K; MAC _i : indicates the MAC address of the mobile terminal i; G _λ : indicates that all the AP _λ a collection of connected mobile terminals; : MAC address of the mobile terminal other than u _i in G _λ ; SS _i : indicates the signal strength of u _i ; : indicates the group key used by G _λ ; TS: indicates the time stamp; : indicates the motion vector of u _i ; θ _ij : indicates versus The angle of the.

FIG. 2 shows a mobile terminal management method according to an embodiment of the present invention. In this embodiment, the registration operation of the mobile terminal will be explained.

After a new mobile terminal u _j enters the range of AP _λ , u _j is coupled with AP _λ as in step S202. After the coupling of u _j and AP _{λ is} completed, as in step S204, AP _λ will transmit a registration packet to the AS. The format of the registration packet is as follows:

Where "║" is a delimiter symbol, and the registration packet includes the MAC address of u _j , the MAC address of AP _λ , and the time stamp of the time.

Note that the registration packet can be signed and encrypted first. In some embodiments, after receiving the registration packet, the AS may first decrypt the registration packet, and then distinguish the registration packet according to the signature of the AP _λ and the time stamp in the registration packet. Thereafter, as in step S206, the AS adds u _j to the group registry (not shown) of G _λ .

Note that the group registry of G _λ can record the name of this group, the MAC address of AP _λ , all MAC addresses currently used by mobile terminals in G _λ And the group key of this group . After the AS updates the group registry of G _λ , in step S208, the AS transmits a registration response packet to the new mobile terminal u _j through the AP _λ . The format of the registration response packet is as follows:

Wherein, the registration response packet includes a new MAC address of the mobile terminal u _j MAC address of the mobile terminal other than the new mobile terminal u _{j in} G _λ , And the time stamp of the time. After receiving the registration response packet, the mobile terminal u _j establishes its group registration table (not shown) according to the registration response packet according to step S210, and sets a new MAC address of the mobile terminal u _j as step S212. To replace the original MAC _j . The group registration table may include a MAC address of a mobile terminal other than the new mobile terminal u _{j in} G _λ , and .

On the other hand, in step S214, the AS transmits a table update packet to the mobile terminal originally in the group registry of G _λ through the AP _λ . The format of the form update packet is as follows:

The form update packet includes an instruction requesting to add new mobile terminal information, and the MAC address of the mobile terminal u _j And the time stamp of the time. After the mobile terminal in the group registry of G _λ receives the form update packet, as in step S216, the MAC address of the mobile terminal u _j is Join their group registration form.

FIG. 3 shows a mobile terminal management method according to an embodiment of the present invention. In this embodiment, the update operation of the network address of the mobile terminal will be explained.

In step S302, each mobile terminal detects signal strength information at a plurality of time points at a predetermined frequency. In some embodiments, the format of the signal strength information is as follows:

The signal strength information may include the signal strength between the mobile terminals, the signal strength between the mobile terminal and the access point AP _λ , and the time stamp at the time. Note that since each mobile terminal has its own group registration table. Therefore, other mobile terminals and the access point AP _λ can be identified according to the MAC addresses of other mobile terminals registered in the group registration table, and the signal strengths of other mobile terminals and the access point AP _λ can be detected. After the signal strength information is obtained, in step S304, each mobile terminal transmits the detected signal strength information to the management server AS through the access point AP _λ . After the management server AS receives the signal strength information, in step S306, the distance between each mobile terminal, the distance between each mobile terminal and the access point AP _λ , and each are calculated according to the signal strength information received by different mobile terminals. The angle of the motion vector between mobile terminals. The method of calculating the angle between the correlation distance and the motion vector based on the signal strength information will be described later. It is noted that the management server AS can determine the mobile terminal that needs to perform network address exchange/update according to the distance between each mobile terminal and the angle of the mobile vector. In step S308, the management server AS determines whether the distance between each mobile terminal is less than a predetermined distance and whether the angle of the motion vector between each mobile terminal is less than a predetermined angle. When the distance between the two mobile terminals is not less than the predetermined distance and the angle of the motion vector between the two mobile terminals is not less than the predetermined angle (NO in step S308), the flow is ended. When the distance between the two mobile terminals is less than the predetermined distance and the angle of the motion vector between the two mobile terminals is less than the predetermined angle (YES in step S308), it is determined that the two mobile terminals need to perform network address exchange/update, and in step S310, At least one of the mobile terminals requiring network address exchange/update is required to perform network address exchange/update.

It should be noted that, in step S310, the management server AS can generate and transmit the address update packet to the mobile terminal that needs to perform network address exchange/update through the access point AP _λ . Taking u _j as an example, the format of the address update packet is as follows:

The address update packet includes a new MAC address that needs to be updated, and a time stamp at that time. It is worth noting that in some embodiments, the new MAC address may be generated by the management server AS in accordance with the randomness. In some embodiments, the new MAC address can be a MAC address relative to the mobile terminal. For example, when the distance between the mobile terminals u _j and u _i is less than a predetermined distance, and the angle of the mobile vector is less than a predetermined angle, the MAC address of the mobile terminal u _j is updated to the MAC address of the mobile terminal u _i , and The MAC address of the mobile terminal u _i will be updated to the MAC address of the mobile terminal u _j . In some embodiments, when there are multiple mobile terminals that need to exchange network addresses, the management server AS can decide how to exchange the MAC addresses of these mobile terminals in a random number and transmit the address update packets to these mobile terminals. It is worth noting that in some embodiments, the mobile terminal will not be able to transmit any message while the mobile terminal is switching/updating the MAC address. It should be noted that the management server AS can update the mobile terminal that performs network address update and its new MAC address to the group registry, and the related information is also updated to the group registration table of the relevant mobile terminal. in. After the mobile terminal updates its MAC address, a subsequent wireless connection can be made based on the new MAC address. The mobile terminal can continuously detect the signal strength information and transmit the signal strength information to the management server AS through the access point AP _λ .

Next, a method of calculating the angle between the correlation distance and the motion vector based on the signal strength information will be described.

The method of calculating the distance between the mobile terminal and the distance between the mobile terminal and the access point AP _λ can be calculated according to the signal strength information and a loss signal strength model. The basic formula of the loss signal strength model is as follows: Where PL is the average loss, ψ is the index of the increase in the average loss rate, d is the distance between the sender and the receiver (between the two mobile terminals), and d ₀ is the reference distance.

After receiving the signal strength information returned by all mobile terminals, the management server AS can convert the data into distance according to the loss signal strength model, and establish a distance matrix DM to store the converted distance as follows:

The size is determined by the size of the group. When there are n mobile terminals in the group, the DM will be n × (n + 1). Where d _ij represents the distance between u _i and u _j , Then it is the distance between u _i and AP _λ . Note that if multiple mobile terminals return different data at the same time, the average value is taken. If the signal between the mobile terminals exceeds the transmission range, the corresponding matrix position will be empty.

After the DM is established, a map relative to the AP _λ can be established based on the DM. Figure 4 shows an example of relative map creation in accordance with an embodiment of the present invention. Assume that the AP _λ coordinate is (0, 0), optionally a mobile terminal, such as u _i placed on the x-axis. Therefore, the coordinate system of the mobile terminal u _i ( , 0). After that, decide the coordinates of another mobile terminal, such as u _j . Determining the coordinate position of the mobile terminal u _j can first calculate the alpha angle using the following formula:

When the angle α is obtained, it can be known that the coordinates of the mobile terminal u _j are . Similarly, the β angle and the γ angle can be calculated using the above formula, and the coordinates of the mobile terminal u _k can be calculated. among them, . Due to the Y axis The angle between the angle u and u _i can be two, one in four and two and three quadrants, so There will be a difference between the sign (such as in the first quadrant, Positive; as in the fourth quadrant, Negative). therefore, The coordinates are as follows: If γ = β + α, then ,otherwise, = .

Similarly, the relative positions of other mobile terminals can be calculated in accordance with the aforementioned method, thereby obtaining a complete relative map.

After the relative map is obtained, the mobile terminal can continuously transmit the signal strength information to the management server AS, and the management server AS can continuously update the relative map. The management server AS can learn the mobile behavior of the mobile terminal according to the relative maps at different time points. The corresponding motion vector can be calculated according to the coordinates of the mobile terminal at different time points. Assume that the original coordinates of the mobile terminal u _i are ( , ) and the new coordinates are ( , ) the mobile vector of the mobile terminal u _i system(( - ), ( - )). Thereafter, the management server AS can calculate the motion vector angle θ _ij between the two mobile terminals according to the motion vector of each mobile terminal and the following formula.

The moving vector angle θ _ij between the two mobile terminals can be stored to an angle

Matrix AM, as follows:

It can be calculated that the distance d _ij between the two mobile terminals and the moving vector angle θ _ij can be used to determine whether the two mobile terminals need to exchange/update the MAC address.

FIG. 5 shows a mobile terminal management method according to an embodiment of the present invention. In this embodiment, the leaving operation of the mobile terminal will be explained.

After the mobile terminal u _j leaves the range of the AP _λ , as in step S502, u _j is aborted with the AP _λ . After the coupling of u _j and AP _{λ is} suspended, in step S504, the mobile terminal u _j sets the network address back to the original MAC address MAC _j for subsequent wireless connection. After u _j leaves AP _λ , as in step S506, AP _λ will transmit an leaving packet to the AS. The format of leaving the packet is as follows:

Wherein, the leaving packet includes a MAC address of u _j , MAC address of AP _λ And the time stamp of the time.

Similarly, leaving a packet can be signed and encrypted first. In some embodiments, after receiving the leaving packet, the AS may first decrypt the leaving packet, and then distinguish whether the leaving packet is convincable according to the signature and time stamp of the AP _λ leaving the packet. After that, in step S508, the AS will correspond to the mobile terminal u _j And the MAC _j is deleted by the group registry, and in step S510, a form update packet is transmitted through the AP _λ to the mobile terminal still in the group to notify the mobile terminal that u _j has left the group, and a new one . After the mobile terminal receives the form update packet, the mobile terminal will move the mobile terminal u _j as in step S512. Deleted by its group registration form. Mobile terminal can be used Used for subsequent encryption jobs.

In some embodiments, when a mobile terminal proposes to protect location privacy, the AS checks in the DM which mobile terminals are within a predetermined range of the mobile terminal, and then checks these in the AM. Whether the angle between the mobile terminal and the mobile terminal motion vector is less than a predetermined angle. If the angle is smaller than the predetermined angle, the mobile terminals will join the group that exchanges/updates the MAC address. If the angle is greater than the predetermined angle, the mobile terminals will not be in the group that exchanges/updates the MAC address. After deciding which mobile terminals need to exchange/update the MAC address, the AS decides the new MAC address or decides how to exchange the MAC address in the group in random numbers, and transmits the address update packet to these mobile terminals.

For example, Figure 6 shows an example of mobile terminal management in accordance with an embodiment of the present invention. As shown in Figure 6, the blackpoint can ask the AS for the privacy of the protection location, and the AS will select the points within the established range (the distance from the blackpoint is less than the predetermined distance) and detect the movement of these points. The angle between the vector and the black point. If the angle is less than the predetermined angle, these points, such as dark gray points, are added to the exchange group. If the angle is greater than the predetermined angle, these points, such as light gray points, are not added to the group of this exchange. Finally, the AS transport address updates the packet to black dots and dark gray dots. After the mobile terminal exchanges/updates the MAC address, it can enter another cycle. It must be noted that since the AS checks which mobile terminals exist within a given range, these mobile terminals may also propose protection of location privacy at this point in time. When more than two mobile terminals request the privacy of the protection location at the same time, the AS can separately make relevant decisions on the mobile terminals, so the relevant mobile terminals that meet the conditions and need to exchange/update the MAC address are added to the switching group, and Remove duplicate mobile terminals. In some embodiments, when no mobile terminal meets the relevant conditions within a predetermined range, the AS may notify the mobile terminal that proposes the protection location privacy requirement that the MAC address is not exchanged/updated to avoid unnecessary network. Address swap/update, which reduces network performance.

It should be noted that the above embodiment performs related mobile terminal management, such as distance and motion vector angle calculation, through the management server AS. However, in some embodiments, the access point AP also replaces the management server AS for the associated mobile terminal management of the present case.

Therefore, the mobile terminal management system and method of the present invention can perform related management on the mobile terminal according to the mobile behavior of the mobile terminal, thereby reducing unnecessary network address exchange/update.

The method of the invention, or a particular type or portion thereof, may exist in the form of a code. The code may be included in a physical medium such as a floppy disk, a CD, a hard disk, or any other machine readable (such as computer readable) storage medium, or is not limited to an external computer program product, wherein When the code is loaded and executed by a machine, such as a computer, the machine becomes a device for participating in the present invention. The code can also be transmitted via some transmission medium, such as a wire or cable, fiber optics, or any transmission type, where the machine becomes part of the program when it is received, loaded, and executed by a machine, such as a computer. Invented device. When implemented in a general purpose processing unit, the code combination processing unit provides a unique means of operation similar to application specific logic.

While the present invention has been described in its preferred embodiments, the present invention is not intended to limit the invention, and the present invention may be modified and modified without departing from the spirit and scope of the invention. The scope of protection is subject to the definition of the scope of the patent application.

100. . . Mobile terminal management system

AS. . . Management server

AP1, AP2, AP _λ . . . Access point

MS1, MS2, MS3, MS4, MS5, MS6, u _j , u _j , u _k , G _λ -{u _i }. . . Mobile terminal

S202, S204, ..., S216. . . step

S302, S304, ..., S310. . . step

S502, S504, ..., S512. . . step

1 is a schematic diagram showing a mobile terminal management system in accordance with an embodiment of the present invention.

2 is a flow chart showing a mobile terminal management method according to an embodiment of the present invention.

FIG. 3 is a flow chart showing a mobile terminal management method according to an embodiment of the present invention.

Figure 4 is a schematic diagram showing an example of relative map creation in accordance with an embodiment of the present invention.

Figure 5 is a flow chart showing a mobile terminal management method according to an embodiment of the present invention.

Figure 6 is a diagram showing an example of management of a mobile terminal according to an embodiment of the present invention.

S302, S304, ..., S310. . . step

Claims (22)

A mobile terminal management system includes: an access point; at least one first mobile terminal and a second mobile terminal are respectively coupled to the access point wirelessly, and respectively at at least a first time point At a second time point, detecting a signal strength information, wherein the signal strength information measured at the first time point includes a signal strength between the first mobile terminal and the second mobile terminal, and the first The signal strength between the mobile terminal and the access point, the signal strength information measured at the second time point includes the signal strength between the first mobile terminal and the second mobile terminal, and the second mobile terminal and a signal strength between the access points; and a management server for coupling with the access point, and the first mobile terminal and the second mobile terminal are respectively received by the access point at the first time The signal strength information measured at the point and the signal strength information measured at the second time point are calculated according to the signal strength information measured at the first time point and the second time point First shift a distance between the terminal and the second mobile terminal and an angle of movement between the first mobile terminal and the second mobile terminal, determining whether the distance is less than a predetermined distance and the angle of the motion vector is less than a predetermined angle. When the distance is less than the predetermined distance and the angle of the motion vector is less than the predetermined angle, the first mobile terminal or the second mobile terminal performs a network address update. The mobile terminal management system of claim 1, wherein the method for calculating the distance by the management server is based on a loss signal strength model and one of the first time point and the second time point. The measured signal strength information calculates the distance between the first mobile terminal and the second mobile terminal. The mobile terminal management system of claim 1, wherein the method for the management server to calculate the angle of the motion vector is based on a loss signal strength model and one of the first time point and the second time point. The measured signal strength information calculates the distance between the first mobile terminal and the second mobile terminal, and the distance between the first mobile terminal and the second mobile terminal and the access point respectively, according to the Calculating the access point, the first mobile terminal, and the first distance between a mobile terminal and the second mobile terminal, and the distance between the first mobile terminal and the second mobile terminal and the access point respectively The location of the mobile terminal is calculated according to the location of the first mobile terminal and the second mobile terminal at the first time point and the second time point, and the motion vector of the first mobile terminal and the second mobile terminal is calculated, And calculating, according to the motion vector of the first mobile terminal and the second mobile terminal, a motion vector angle between the first mobile terminal and the second mobile terminal. The mobile terminal management system of claim 1, wherein the management server transmits a first network through the access point when the distance is less than the predetermined distance and the angle of the motion vector is less than the predetermined angle. Addressing the first mobile terminal, and the first mobile terminal performs a subsequent wireless connection according to the first network address, or transmits a second network address to the second mobile terminal through the access point, And the second mobile terminal performs a subsequent wireless connection according to the second network address. The mobile terminal management system of claim 1, wherein when the first mobile terminal is coupled to the access point, the first mobile terminal transmits one of the first mobile terminals through the access point. Triple network address Up to the management server, and the management server transmits a fourth network address to the first mobile terminal to replace the third network address for subsequent wireless connection. The mobile terminal management system of claim 5, wherein the management server further transmits a fifth network address of the second mobile terminal to the first mobile terminal, and the first mobile terminal is configured according to the first mobile terminal The five network addresses identify the second mobile terminal and detect the signal strength between the first mobile terminal and the second mobile terminal. The mobile terminal management system of claim 5, wherein the management server further transmits the fourth network address to the second mobile terminal, and the second mobile terminal identifies the fourth network address according to the fourth network address The first mobile terminal detects the signal strength between the second mobile terminal and the first mobile terminal. The mobile terminal management system of claim 7, wherein the access point notifies the management server to delete the fourth network of the first mobile terminal when the first mobile terminal leaves the access point And the management server further notifies the second mobile terminal to delete the fourth network address of the first mobile terminal. The mobile terminal management system of claim 5, wherein the first mobile terminal replaces the fourth network address with the third network address when the first mobile terminal leaves the access point For subsequent wireless connections. The mobile terminal management system of claim 1, wherein the first mobile terminal or the second mobile terminal further signs or encrypts the measured signal strength information, and then signs or encrypts The signal strength information is transmitted to the management server through the access point. A mobile terminal management method includes the following steps: at least a first mobile terminal and a second mobile terminal are respectively wirelessly coupled to an access point; the first mobile terminal and the second mobile terminal are respectively at least one Detecting a signal strength information at a time point and a second time point, wherein the signal strength information measured at the first time point includes a signal strength between the first mobile terminal and the second mobile terminal The signal strength between the first mobile terminal and the access point, the signal strength information measured at the second time point includes the signal strength between the first mobile terminal and the second mobile terminal, and the second a signal strength between the mobile terminal and the access point; calculating a distance between the first mobile terminal and the second mobile terminal according to the measured signal strength information at the first time point and the second time point And a movement vector angle between the first mobile terminal and the second mobile terminal; determining whether the distance is less than a predetermined distance and the angle of the motion vector is less than a predetermined angle; Distance is less than the predetermined distance and the motion vector angle is less than the predetermined angle, so that the first mobile terminal or the second mobile terminal performs a network address update. The mobile terminal management method according to claim 11, wherein the method for calculating the distance is based on a loss signal strength model and the one of the first time point and the second time point. The signal strength information calculates the distance between the first mobile terminal and the second mobile terminal. The mobile terminal management party as described in claim 11 The method for calculating the angle of the motion vector calculates the first mobile terminal and the first according to a loss signal strength model and the signal strength information measured when the first time point and the second time point are measured The distance between the mobile terminal and the distance between the first mobile terminal and the second mobile terminal and the access point, according to the distance between the first mobile terminal and the second mobile terminal, and the Calculating the location of the access point, the first mobile terminal, and the second mobile terminal by the distance between the mobile terminal and the second mobile terminal and the access point respectively, according to the first time point and the second time Calculating the motion vector of the first mobile terminal and the second mobile terminal by the location of the first mobile terminal and the second mobile terminal, and according to the motion vector of the first mobile terminal and the second mobile terminal Calculating an angle of a motion vector between the first mobile terminal and the second mobile terminal. The mobile terminal management method of claim 11, further comprising transmitting a first network address to the first mobile terminal when the distance is less than the predetermined distance and the angle of the mobile vector is less than the predetermined angle, The first mobile terminal performs a subsequent wireless connection according to the first network address, or transmits a second network bit through the access point when the distance is less than the predetermined distance and the angle of the motion vector is less than the predetermined angle Addressing the second mobile terminal, and the second mobile terminal performs subsequent wireless connection according to the second network address. The method for managing a mobile terminal according to claim 11, further comprising: when the first mobile terminal is coupled to the access point, the first mobile terminal receives a fourth network address to replace the first Three network addresses for subsequent wireless connections. The method for managing a mobile terminal according to claim 15, further comprising transmitting a fifth network address of the second mobile terminal to the first a mobile terminal, the first mobile terminal identifies the second mobile terminal according to the fifth network address, and detects the signal strength between the first mobile terminal and the second mobile terminal. The mobile terminal management method of claim 15, further comprising transmitting the fourth network address to the second mobile terminal, the second mobile terminal identifying the first mobile according to the fourth network address And detecting, by the terminal, the signal strength between the second mobile terminal and the first mobile terminal. The method for managing a mobile terminal according to claim 17, further comprising: when the first mobile terminal leaves the access point, notifying the second mobile terminal to delete the fourth network address of the first mobile terminal . The mobile terminal management method of claim 15, further comprising: when the first mobile terminal leaves the access point, the first mobile terminal replaces the fourth network address with the third network address Address for subsequent wireless connections. The mobile terminal management method according to claim 11, wherein the first mobile terminal or the second mobile terminal further signs or encrypts the measured signal strength information, and then signs or encrypts The signal strength information is transmitted through the access point. A mobile terminal management system includes: an access point; at least one first mobile terminal and a second mobile terminal are respectively coupled to the access point wirelessly, and respectively at at least a first time point At a second time point, detecting a signal strength information, wherein the signal strength information measured at the first time point includes a signal strength between the first mobile terminal and the second mobile terminal, and the first The signal strength between the mobile terminal and the access point, the signal measured at the second time point The strength information includes a signal strength between the first mobile terminal and the second mobile terminal, and a signal strength between the second mobile terminal and the access point; wherein the access point is respectively configured by the first mobile terminal and the first Receiving, by the mobile terminal, the signal strength information measured at the first time point and the signal strength information measured at the second time point, according to the first time point and the second time point The signal strength information is used to calculate a distance between the first mobile terminal and the second mobile terminal and a movement vector between the first mobile terminal and the second mobile terminal, and determine whether the distance is less than a predetermined distance. And if the angle of the motion vector is less than a predetermined angle, when the distance is less than the predetermined distance and the angle of the motion vector is less than the predetermined angle, the first mobile terminal or the second mobile terminal is caused to perform a network address update. A computer program product for loading and executing a mobile terminal management method by a machine, wherein the mobile terminal management method is applicable to at least one first mobile terminal and a second wirelessly coupled to an access point respectively a mobile terminal, wherein the first mobile terminal and the second mobile terminal detect a signal strength information at least at a first time point and a second time point, wherein the second time point is measured The signal strength information includes the signal strength of the first mobile terminal and the second mobile terminal and the signal strength between the first mobile terminal and the access point, and the measured signal strength information at the second time point includes The signal strength between the first mobile terminal and the second mobile terminal and the signal strength between the second mobile terminal and the access point, the computer program product includes: a first code for using the first time Calculating the distance between the first mobile terminal and the second mobile terminal and the first mobile terminal and the second by calculating the signal strength information measured at the second time point a moving vector angle between the mobile terminals; a second code for determining whether the distance is less than a predetermined distance and the angle of the moving vector is less than a predetermined angle; and a third code for when the distance is less than the When the predetermined distance and the angle of the mobile vector are less than the predetermined angle, the first mobile terminal or the second mobile terminal is caused to perform a network address update.