Method and device for terminal device management based on right control

Abstract

A method and a device for terminal device management based on right control are provided. The method includes the following steps. A Get command on an access control list (ACL) of a managed node in a device management tree (DMT) from a device management (DM) server is received, where the Get command includes a Unified Resource Identity (URI) of the managed node. It is determined whether the DM server has a direct right of executing the Get command on the managed node. The Get command is processed when it is determined that the DM server has the direct right of executing the Get command on the managed node. The method and the device simplify the complexity of right management, and reduce the number of times of message interaction between the DM server and a terminal device, thereby improving the efficiency and performance of terminal device management.

What is claimed is: 
     
         1 . A method for replacing an Access Control List (ACL) of a managed node, comprising:
 receiving by a terminal, a command from a Device Management (DM) server for replacing an Access Control List (ACL) of a managed node on a Device Management Tree (DMT), the managed node is an internal node on the DMT;   if the DM server does not have the authority to replace the ACL of the managed node according to the ACL of the managed node and an ACL of a parent node of the managed node, determining by the terminal, whether there exists an ancestor node of the managed node which is one or more level above the parent node of the managed node on the DMT and has an ACL indicating that the DM server has an authority to replace the ACL of the ancestor node;   if such ancestor node of the managed node exists, replacing by the terminal, the ACL of the managed node according to the command without replacing both the ACL of the parent node and the ACL of the ancestor node.   
     
     
         2 . The method according to  claim 1 , wherein if a Replace item in a value of the ACL of ancestor node comprises an identifier of the DM server, the DM server has an authority to replace the ACL of the ancestor node. 
     
     
         3 . The method according to  claim 1 , further comprising:
 returning, an error if it is determined that such ancestor node of the managed node does not exist.   
     
     
         4 . A method for replacing an Access Control List (ACL) of a managed node, comprising:
 receiving by a terminal, a command from a Device Management (DM) server for replacing an Access Control List (ACL) of a managed node on a Device Management Tree (DMT), the managed node is a leaf node on the DMT;   if the DM server does not have the authority to replace the ACL of the parent node of the managed node according to the ACL of the parent node, determining by the terminal, whether there exists an ancestor node of the managed node which is one or more level above the parent node of the managed node on the DMT and has an ACL indicating that the DM server has an authority to replace the ACL of the ancestor node;   if such ancestor node of the managed node exists, replacing, by the terminal, the ACL of the managed node according to the command without replacing both the ACL of the parent node and the ACL of the ancestor node.   
     
     
         5 . The method according to  claim 4 , wherein if a Replace item in a value of the ACL of ancestor node comprises an identifier of the DM server, the DM server has an authority to replace the ACL of the ancestor node. 
     
     
         6 . The method according to  claim 4 , further comprising:
 returning, an error if it is determined that such ancestor node of the managed node does not exist.   
     
     
         7 . A terminal device for replacing an Access Control List (ACL) of a managed node, comprising a memory, a receiver and a processor, wherein:
 the memory is configured to store a Device Management Tree (DMT) of the terminal device;   the receiver is configured to receive a command from a Device Management (DM) server for replacing an Access Control List (ACL) of a managed node on the Device Management Tree (DMT), the managed node is an internal node on the DMT; and   the processor is configured to:   if the DM server does not have the authority to replace the ACL of the managed node according to the ACL of the managed node and an ACL of a parent node of the managed node, determine whether there exists an ancestor node of the managed node which is one or more level above the parent node of the managed node on the DMT and has an ACL indicating that the DM server has an authority to replace an ACL of the ancestor node;   if such ancestor node of the managed node exists, replace the ACL of the managed node according to the command without replacing both the ACL of the parent node and the ACL of the ancestor node.   
     
     
         8 . The terminal device according to  claim 7 , wherein if a Replace item in a value of the ACL of ancestor node comprises an identifier of the DM server, the DM server has an authority to replace the ACL of the ancestor node. 
     
     
         9 . The terminal device according to  claim 7 , the processor is further configured to:
 returning, an error if it is determined that such ancestor node of the managed node does not exist.   
     
     
         10 . A terminal device for replacing an Access Control List (ACL) of a managed node, comprising a memory, a receiver and a processor, wherein:
 the memory is configured to store a Device Management Tree (DMT) of the terminal device;   the receiver is configured to receive a command from a Device Management (DM) server for replacing an Access Control List (ACL) of a managed node on the Device Management Tree (DMT), the managed node is a leaf node on the DMT; and   the processor is configured configured to:   if the DM server does not have the authority to replace the ACL of the parent node of the managed node according to the ACL of the parent node, determine, whether there exists an ancestor node of the managed node which is one or more level above the parent node of the managed node on the DMT and has an ACL indicating that the DM server has an authority to replace an ACL of the ancestor node;   if such ancestor node of the managed node exists, replace the ACL of the managed node according to the command without replacing both the ACL of the parent node and the ACL of the ancestor node.   
     
     
         11 . The terminal device according to  claim 10 , wherein if a Replace item in a value of the ACL of ancestor node comprises an identifier of the DM server, the DM server has an authority to replace the ACL of the ancestor node. 
     
     
         12 . The terminal device according to  claim 9 , the processor is further configured to:
 returning, an error if it is determined that such ancestor node of the managed node does not exist.