WO2009033431A1 - A method to erase terminal data and terminal device - Google Patents

Abstract

A method to erase terminal data and terminal device are disclosed. Said method includes the following steps. Terminal receives erasing instruction and erasing scope information from manage server. Local data is erased correspondingly based on said erasing scope information.

Description

 Method for erasing terminal data and terminal device

 This application claims priority to Chinese Patent Application No. 200710145695.2, titled "Method and Terminal Equipment for Erasing Terminal Data", filed on September 13, 2007, and the requirements of January 1, 2008 The priority of the Chinese Patent Application No. 200810003919.0, the entire disclosure of which is hereby incorporated by reference in its entirety in its entirety in the the the the the the the the the

Technical field

 The present invention relates to the field of communications technologies, and in particular, to a method for erasing terminal data and a terminal device. Background technique

 Open mobile alliance device management (OMA)

DM) VI .2, is a unified device management specification developed by the OMA DM Working Group.

 The DM system provides a low-cost solution for third-party management and setting of environment and configuration information in wireless network terminals such as mobile terminals and functional objects in terminals. Solve the problems encountered in the use of these network terminals, install and upgrade software and firmware through the over-the-air (OTA) mode, and provide more personalized and personalized services to enhance the user experience. The third party can be the network management device of the information management department of the mobile operator, service provider or partner.

 In the overall structure diagram, the device proxy (DMAgent) on the terminal is used to interpret and execute the management commands issued by the DM server. The management tree stored on the terminal can be considered as an interface for the DM Server to manage the terminal through the DM protocol. It includes some basic management objects (MO, Management Object), and the DM Server achieves the purpose of controlling the terminal management object by operating the management tree object. The operation commands are Get, Replace, Exec, Copy, Delete, and so on.

 Based on the OMA DM technology, there is a method available to implement erasing data of a terminal. The method includes:

 The management server sends a request for erasing user equipment data to the terminal;

 The terminal receives the request and erases all user data by invoking a data erase program.

Referring to Figure 1, in the terminal management object, there is an operable Device Wipe node under the Terminal Security node. By executing the node, the network can indicate the terminal. Perform the appropriate erase procedure to erase the data on the terminal.

In the research and practice of the prior art, the inventors found that the prior art has the following problems: Simple data erasure, and the network side has insufficient control over the erasing operation.

Summary of the invention

 The technical problem to be solved by the embodiments of the present invention is to provide a method for erasing terminal data and a terminal device, which can implement selective selective erasure or multi-level erasure of terminal data on the network side, and strengthen the network side to perform terminal operations on the terminal. The control of the erase operation satisfies the user's need for refinement of the erase function.

 A method for erasing terminal data provided by an embodiment of the present invention includes:

 Receiving an erase command and an erase range sent by the management server;

 The local data is correspondingly erased according to the erasure range.

 A method for erasing terminal data provided by an embodiment of the present invention includes:

 Receiving a data erase request from the management server;

 Obtaining the management server identity identifier;

 Finding an erasure level corresponding to the management server identity;

 The local data is erased accordingly according to the found erase level.

 A terminal device provided by an embodiment of the present invention includes: a receiving unit, a data storage unit, and an erasing unit;

 a receiving unit, configured to receive an erasure instruction and an erasure range sent by the management server;

 a data storage unit for storing local data;

 And an erasing unit, configured to perform corresponding erasing on the local data stored by the data storage unit according to the erasing range.

 A terminal device provided by the embodiment of the present invention includes: a receiving unit, an identity acquiring unit, a searching unit, a data storage unit, and an erasing unit;

 a receiving unit, configured to receive a data erasure request of the management server;

 An identity obtaining unit, configured to acquire an identity of the management server after the receiving unit receives the data erasure request;

a searching unit, configured to search for an erasure level corresponding to the identity of the management server; and a data storage unit, configured to store local data; And an erasing unit, configured to perform corresponding erasure on the local data stored by the data storage unit according to the erasure level found by the searching unit.

 With the above technical solutions, the beneficial technical effects of the embodiments of the present invention are as follows:

 In the embodiment of the present invention, the terminal receives the erasure instruction and the erasure range sent by the management server; and performs corresponding erasure on the local data according to the erasure range. The network side performs selective or multi-level erasure on the terminal data, strengthens the control power of the network side to erase the terminal, and makes the erasing function more detailed, and satisfies the user's diverse erasing data. Claim.

DRAWINGS

 1 is a structural diagram of a management object of a terminal in the prior art;

 2 is a flowchart of a method for erasing terminal data according to an embodiment of the present invention;

 3 is a flowchart of a method for erasing terminal data according to Embodiment 3 of the present invention;

 4 is a flowchart of a method for erasing terminal data according to Embodiment 4 of the present invention;

 FIG. 5 is a schematic structural diagram of a terminal device according to Embodiment 5 of the present invention; FIG.

 FIG. 6 is a schematic structural diagram of a terminal device according to Embodiment 6 of the present invention.

detailed description

 The embodiment of the invention provides a method for erasing terminal data and a terminal device, which can implement multi-level erasure of terminal data by the network side, and strengthens the control power of the network side to perform erasing operations on the terminal, and satisfies the user's wiping In addition to the need for functional refinement. A method and a terminal device for erasing terminal data provided by the present invention are described in detail below.

 Embodiment 1 is a method for erasing terminal data. The flowchart is as shown in FIG. 2, and includes: al, the terminal receives an erasure instruction and an erasure range sent by the management server;

 The erase command and the erase range sent by the management server may be: a data erase request sent by the management server including the erase command and the erase range.

 The erase range may correspond to an erase level.

 For example: The management server sends an Exec management command carrying the erasure level information to the terminal:

<Exec>

 <CmdID>4</CmdID>

 <Item>

<Target> <LocURI>J WipeMO/Operations/Wipe</LocURI></Target>

 <Data>K/Data><! -Erase level ― >

 </Item>

 </Exec>

 Where <Data>1 indicates that the current erasure level is level 1, that is, all data of the terminal is erased, and the <1^0^11 1> indicates the path of the program for performing erasure.

 It can be understood that the management server can also separately issue the erasure level and the erasure command, for example, by issuing the erasure level through a replacement command, and issuing an erasure command through the Exec management command:

 <Replace>

 <CmdID>3 </CmdID>

 <Item>

 <Target>

 <LocURI>./WipeMO/WipeLevel</LocURI>

 </Target>

 <Data>l</Data><!—Highest level, completely erased ->

 </Item>

 </ Replace >

 <Exec>

 <CmdID>4</CmdID>

 <Item>

 <Target>

 <LocURI>./ WipeMO/Operations/Wipe</LocURI>

 </Target>

 </Item>

 </Exec>

Where <Data>1 indicates that the current erasure level is level 1, that is, erases all data of the terminal, and the <LocURI> indicates the path of the program that performs erasure. A2. The terminal performs corresponding erasure on the local data according to the erasure range. The terminal device may perform a corresponding erasing operation according to the management server specified level. It can be understood that different levels of erasure levels correspond to different erasure ranges, and the specific correspondences refer to Table 1.

 Table 1

 A3, returning the result of the erasure to the management server.

 It can be understood that if the erasing operation of the step a2 fails, the terminal device can perform an erasing operation lower than the level, and feed back the result of the erasing to the management server.

 For example, as shown in Table 1, if the erasing operation for performing level 1 all erasing fails, the erasing operation of level 2 erasing user data is automatically performed. Performing a low-level erasure operation may be performed automatically by the terminal side, or may be performed by the terminal under the control of the management server, for example, the data erasure request sent by the management server may include an erasure failure processing identifier;

 After the terminal receives the erasure failure processing identifier, the step of erasing below the level is performed if the erasure fails. In this way, the management server can control the processing of the terminal after the failure of the erasure through the identifier.

 It can be understood that the step of returning the erasure result in the embodiment of the present invention may not be performed, and does not affect the implementation of the method of the embodiment of the present invention.

 In the first embodiment of the present invention, the terminal receives the data erasure request and the erasure level sent by the management server, and performs corresponding erasure on the local data according to the erasure level. The network side performs multiple levels of erasure on the terminal data, and the simple control method of erasing the terminal data in the prior art strengthens the control of the erasing operation of the terminal on the network side, so that the erasing function is more detailed. To meet the requirements of users to diversify data.

 A person skilled in the art can understand that all or part of the steps in the method of implementing the above embodiments can be completed by a program requesting related hardware, and the program can be stored in a computer readable storage medium, when the program is executed. , including the following steps:

The terminal receives a data erasure request and an erasure level sent by the management server; The storage medium mentioned above may be a memory, a magnetic disk or an optical disk or the like.

 In the second embodiment, when the erasure level is specified according to the Replace management command, the terminal performs the corresponding erasing operation. In the device management information sent to the terminal, the server sends a Replace management command to the WipeRange node, and sends an Exec management command to the Wipe under Operations:

 <Replace>

 <CmdID>3 </CmdID>

 <Item>

 <Target>

 <LocURI>./WipeMO/WipeRange</LocURI>

 </Target>

 <Data>2</Data><!—Level 2, Erase Enterprise Data ->

 </Item>

 </ Replace >

 <Exec>

 <CmdID>4</CmdID>

 <Item>

 <Target>

 <LocURI>./ WipeMO/Operations/Wipe</LocURI>

 </Target>

 </Item>

 </Exec>

 The terminal can determine that the enterprise data needs to be erased according to the erasure level and the erasure command, then erase the enterprise data saved in the terminal, and return the erasure status information to the server. The enterprise data is the data of the company or enterprise to which the user set or saved in the terminal belongs.

 The correspondence between the erase level and the erase range is as follows:

 Erase level erase range

 1 Erase user data and corporate data

2 Erase corporate data 3 Erase user data

 Since different erase levels can correspond to different erase ranges, and there is no intersection between different erase ranges, the erase level 2 and erase level 3 in the table can represent different, independent data, no This is different from the first embodiment in that they contain or cross each other. Of course, the present invention does not limit that there must be no intersection between the erased ranges.

 The difference from the first embodiment is also that if the erasing failure of the execution level 2 enterprise data fails, the level 3 erase operation is not automatically performed because they have no inclusion relationship.

 Embodiment 3 is a method for erasing terminal data. The flowchart is as shown in FIG. 3, and includes: bl, the terminal receives an erasure instruction and an erasure range sent by the management server;

 The process in which the management server transmits the erase command and the erase range is referred to the first step of the embodiment al. The erase range may correspond to an erase level.

 B2: The terminal authenticates whether the management server is allowed to perform the erasing level erasing operation, and if the authentication is passed, the process proceeds to step b3, and if the authentication fails, step b5 is performed.

 In the embodiment of the present invention, the process of the authentication is:

 Finding an erasure permission corresponding to the management server identifier;

 Obtaining a highest erasure level corresponding to the erasure authority;

 If the erasure level requested by the management server is not higher than the found erasure level; then the authentication is passed; otherwise, the authentication fails. It is to be understood that the management server may send the identity of the management server to the terminal when the erasure command and the erasure level are issued, or may obtain the identity of the management server when the terminal accesses the network. The identity identifier may be a management server address or a username, and the like.

 There may be multiple ways for a specific terminal to obtain a management server identity, which is not limited by the present invention.

 The process of identity authentication can also adopt a simpler authentication mode, that is, the terminal device locally saves the correspondence between the identity of the management server and the erasure authority; the identity of the management server that requests the erasure operation is in the saved identity. Inside, the erase operation is allowed, and if not, the erase operation is not allowed. It can be understood that the process of identity authentication can also adopt a conventional authentication mode of multiple systems, and the specific authentication mode does not constitute a limitation of the present invention.

In the embodiment of the present invention, the identity of the management server may be the IP of the management server. An address or a username or a domain address, etc., it can be understood that an identifier that can uniquely identify the identity of the management server in the network can be used as an identity. The terminal device performs a corresponding erase operation according to the management server specified level.

 It can be understood that different levels of erasure levels correspond to different erasure ranges, and the specific correspondences refer to Table 1.

 B4, returning the result of the erasure to the management server.

 It can be understood that if the erasing operation of the step b3 fails, the terminal device performs an erasing operation lower than the level, and feeds back the result of the erasing to the management server. Performing a low-level erase operation may be performed automatically by the terminal side, or may be performed by the terminal under the control of the management server. For example, the data erasure request sent by the management server may include an erasure failure processing identifier;

 After the terminal receives the erasure failure processing flag, if the erasing fails, a step of performing an erasing operation lower than the level is performed. In this way, the management server can control the processing of the terminal after the failure of the erasure through the identifier.

 B5. The identity authentication failure is fed back to the management server.

 The difference between the third embodiment and the first embodiment is that the authentication server that requests the erasure is authenticated, and the erasing operation is performed after the authentication is passed, so that the security is higher, and the malicious erasing behavior is prevented from being brought to the user. The necessary loss.

 Embodiment 4 is a method for erasing terminal data. The flowchart is as shown in FIG. 4, and includes: cl, the terminal receives a data erasure request of the management server;

 In the embodiment of the present invention, the data erasure request is an erasure instruction sent by the management server. For example, the management server issues an Exec management command to the terminal to instruct data erasure: <Exec>

 <CmdID>4</CmdID>

 <Item>

 <Target>

 <LocURI>./ WipeMO/Operations/Wipe</LocURI>

</Target> </Item>

 </Exec>

 Where <LocURI> indicates the path to the program that performs the erase operation.

 C2. The terminal acquires an identity of the management server.

 The terminal device may obtain the identity of the management server in a session establishment phase with the management server, such as: obtaining, by the management server, the header information in the data erasure request to obtain the identity of the management server. . The identity identifier may be a management server address or a username, and the like.

 C3, obtaining an erasure level corresponding to the identity of the management server;

 In the embodiment of the present invention, the correspondence between the identity of the management server and the erasure level needs to be preset. The correspondence between the identity of the management server and the erasure level may be set by the user locally, or may be registered by the terminal on the mobile network. The network automatically pushes the information to the terminal; or the terminal acquires through the data network. The present invention emphasizes that the terminal has the ability to obtain the correspondence between the identity of the management server and the erasure level. The specific manner of obtaining the information may be implemented in a plurality of conventional manners, and does not constitute a limitation of the present invention.

 For example, the correspondence between the management server identity and the erasure level can be referred to Table 2, where the identity of the management server can be the address or user name of the management server.

 Through the obtained identity, the erasure level of the management server can be obtained by querying in Table 2 above.

 C4, correspondingly erasing the local data according to the erasure level.

 The terminal device performs a corresponding erasing operation according to an erasure level corresponding to the management server identity.

It can be understood that different levels of erasure levels correspond to different erasure ranges, and the specific correspondences refer to Table 1. C5. The terminal device returns the result of the erasure to the management server.

 It can be understood that step c5 of this embodiment may not be performed, and does not affect the implementation of the embodiment of the present invention. It can be understood that if the erasing operation fails in the step c4, the terminal device can perform an erasing operation lower than the level, and feed back the result of the erasing to the management server. Performing a low-level erase operation may be performed automatically by the terminal side, or may be performed by the terminal under the control of the management server. For example, the data erasure request sent by the management server may include an erasure failure processing identifier;

 After the terminal receives the erasure failure processing identifier, if the erasure fails, a step of erasing operation lower than the level is performed. In this way, the management server can control the terminal's processing after the erasure failure through the identifier.

 The step of the embodiment cl indicates that the processing of the erasure failure is performed in the data erasing request sent by the server. For example, the lower level of erasing operation is automatically performed by the replacement command indicating that the erasing is failed. Here FailDegrade is the erase failure processing flag, and <Data>True</Data> is the value of FailDegrade.

 <Replace>

 <CmdID>3 </CmdID>

 <Item>

 <Target>

 <LocURI>./WipeMO/FailDegrade</LocURI>

 </Target>

 <Data>True</Data> <! 4 Low-level erase operation is automatically performed when the shot erase operation fails ->

 </Item>

 <Item>

 <Target>

 <LocURI>./WipeMO/WipeLevel</LocURI>

 </Target>

 <Data>K/Data> <! - highest level, completely erased ->

</Item> </ Replace >

 <Exec>

 <CmdID>4</CmdID>

 <Item>

 <Target>

 <LocURI>./ WipeMO/Operations/Wipe</LocURI>

 </Target>

 </Item>

 </Exec>

 The terminal judges that a complete erasure is required according to the erasure level and the erasing command, and erases all the data saved in the terminal; during the erasing process, for some reasons, such as some files are used mediumly, causing erasure Failed; the terminal judges that the lower level erase operation needs to be automatically performed according to the value of FailDegrade. In combination with Table 1, the erase operation with the erase level of 2 is performed, that is, only the user data is erased.

 After the terminal successfully erases the user data, it returns to the server information that the predetermined erasure failed but the second erasure succeeds:

 <Status>

 <CmdRef>3 </CmdRef>

 <CmdID>7</CmdID>

 <Cmd>Replace</Cmd>

 <Data>200</Data> <!— Replace command executed successfully ― >

 </Status>

 <Status>

 <CmdRef>4</CmdRef>

 <CmdID>8</CmdID>

 <Cmd>Exec</Cmd>

 <TargetRef>./ WipeMO/Operations/Wipe</TargetRef>

 <Data>222</Data><! - Use this status code to indicate "Scheduled erase failed but low level erased successfully" ->

</Status> The fourth embodiment of the present invention is different from the first embodiment in that it provides that the erasure initiator of the erasure initiator is determined according to the identity of the management server, and the terminal device performs the erasure operation corresponding to the erasure authority, thereby implementing the network side pair. The terminal data performs multiple levels of erasure, and the control method of erasing the terminal on the network side is strengthened compared with the simple method of erasing the terminal data in the prior art, so that the erasing function is more detailed and the user is diverse. The requirement to erase data.

 A fifth embodiment of the present invention, a terminal device 500, a schematic structural diagram shown in Figure 5, comprising: a receiving unit 510, a data storage unit 520 and an erasing unit 530;

 The receiving unit 510 is configured to receive an erasure instruction and an erasure range sent by the management server, where the data storage unit 520 is configured to store local data.

 The erasing unit 530 is configured to perform corresponding erasing on the local data stored by the data storage unit 520 according to the erasing range.

 The erase range may correspond to an erase level.

 The terminal device of the fifth embodiment of the present invention can run the method of the first embodiment of the present invention.

 Embodiment 6, a terminal device 600, a schematic structural diagram shown in FIG. 6, comprising: a receiving unit 610, an identity obtaining unit 620, a searching unit 630, a data storage unit 640, and an erasing unit 650;

 The receiving unit 610 is configured to receive a data erasure request of the management server;

 The identity identifier obtaining unit 620 is configured to acquire the identity identifier of the management server after receiving the data erasure request by the receiving unit 610;

 The searching unit 630 is configured to search for an erasure level corresponding to the identity of the management server, and the data storage unit 640 is configured to store local data.

 The erasing unit 650 is configured to perform corresponding erasure on the local data of the data storage unit storage 640 according to the erasure level found by the searching unit 630.

 The sixth embodiment of the present invention can run the method of Embodiment 4 of the present invention.

 The method and the terminal device for erasing terminal data provided by the present invention are described in detail above, wherein:

In an embodiment of the invention, the terminal receives an erase command and an erase level sent by the management server; and performs corresponding erasure on the local data according to the erasure level. The network side performs multiple levels of erasure on the terminal data, and the simple control method of erasing the terminal data in the prior art strengthens the control of the erasing operation of the terminal on the network side, so that the erasing function is more detailed. To meet the diversification of users In addition to data requirements.

 In another embodiment of the present invention, the authentication server that requests the erasure is authenticated, and the erasing operation is performed after the authentication is passed, so that the security is higher, and the malicious erasing behavior is prevented from causing unnecessary loss to the user.

 According to still another embodiment of the present invention, the erasing initiator's erasing authority is determined according to the identity of the management server, and the terminal device performs the erasing operation corresponding to the erasing right, so that the network side performs multiple levels of erasure on the terminal data. In addition, compared with the simple method of erasing terminal data in the prior art, the control force of the erasing operation of the terminal on the network side is strengthened, the erasing function is more refined, and the user's diverse data erasing requirements are satisfied.

 For those skilled in the art, the present invention is not limited by the scope of the present invention, and the scope of the present invention is not limited by the scope of the present invention.

Claims

Rights request  A method for erasing terminal data, comprising:  Receiving an erase command and an erase range sent by the management server;  The local data is correspondingly erased according to the erasure range.  2. The method of erasing terminal data according to claim 1, wherein the erasing range corresponds to an erasure level; and the erasing the local data according to the erasure range comprises:  The local data is erased correspondingly according to the erasure level corresponding to the erasure range.  3. The method of erasing terminal data according to claim 2, wherein the erasure command and the erasure range sent by the receiving management server are received data erasure requests, and the data erasure request includes the Erase instruction and erase range.  The method for erasing terminal data according to claim 3, wherein the received data erasure request further includes an erasure failure processing identifier;  After receiving the erasure failure processing flag, if the local data is erased in accordance with the erasure level corresponding to the erasure range, an erase operation lower than the level is performed.  The method for erasing terminal data according to any one of claims 1 to 4, wherein after the erasing is completed, the method further comprises: returning the result of the erasing to the management server.  The method for erasing terminal data according to any one of claims 2 to 4, wherein the erasing of the local data according to the erasure level corresponding to the erasure range further comprises:  Whether the management server allows the erasing level of the erasing operation to be authenticated, and the authentication succeeds to continue the corresponding erasing of the local data according to the erasing level corresponding to the erasing range.  7. The method of erasing terminal data according to claim 6, wherein the process of authenticating whether the management server allows the erasing level of the erasing operation comprises:  Finding an erasure permission corresponding to the management server identifier;  Obtaining a highest erasure level corresponding to the erasure authority;  If the erasure level requested by the management server is not higher than the found erasure level; then the authentication is passed; otherwise, the authentication fails.  A method for erasing terminal data, comprising: Receiving a data erase request from the management server; Obtaining the management server identity identifier;  Finding an erasure level corresponding to the management server identity;  The local data is erased accordingly according to the found erase level.  9. The method of erasing terminal data according to claim 8, wherein the receiving the data erasure request of the management server comprises:  Preset management server identity and erasure level correspondence.  10. The method of erasing terminal data according to claim 9, wherein the received data erasure request includes an erasure failure processing identifier;  After receiving the erasure failure processing flag, if the corresponding data fails to be erased according to the found erasure level, an erase operation lower than the level is performed.  The method of erasing terminal data according to any one of claims 8 to 10, characterized in that after the erasing operation is completed, the result of the erasing is returned to the management server.  12. A terminal device, comprising: a receiving unit, a data storage unit, and an erasing unit;  a receiving unit, configured to receive an erasure instruction and an erasure range sent by the management server;  a data storage unit for storing local data;  And an erasing unit, configured to perform corresponding erasing on the local data stored by the data storage unit according to the erasing range.  The terminal device according to claim 12, further comprising:  And an authentication unit, configured to perform identity authentication on the management server after the receiving unit receives the erasure command and the erasure range sent by the management server, and notify the erasing unit to perform the erasing operation after the authentication is passed.  The terminal device according to claim 12 or 13, further comprising:  The erase result feedback unit is configured to feed back the erase result to the management server after the erasing operation of the execution of the erase unit is completed.  A terminal device, comprising: a receiving unit, an identity acquiring unit, a searching unit, a data storage unit, and an erasing unit;  a receiving unit, configured to receive a data erasure request of the management server; An identity obtaining unit, configured to acquire an identity of the management server after the receiving unit receives the data erasure request; a searching unit, configured to search for an erasure level corresponding to the identity of the management server; and a data storage unit, configured to store local data;  And an erasing unit, configured to perform corresponding erasure on the local data stored by the data storage unit according to the erasure level found by the searching unit.  The terminal device according to claim 14, further comprising:  The erase result feedback unit is configured to feed back the erase result to the management server after the erasing operation of the execution of the erase unit is completed.