A method for determining a local control authority of a user on a user device, the method is performed by a terminal, wherein the method comprising: sending a request message for requesting a first token of the user device to a server if a device identifier of the user device is found in a process of scanning for local devices, wherein the request message carries identity authentication information of the user (S101); receiving the first token returned by the server according to the request message after the identity authentication information passes authentication in the server (S102; S304); and determining the local control authority of the user on the user device according to the first token (S103; S305), and controlling the user device according to the determined local control authority of the user on the user device; said method further comprising: sending a control instruction for controlling the user device to the server, if the device identifier of the user device is not found in the process of scanning for local devices and the user needs to remotely control, via a user interface on the terminal, the user device (S201; S202; S203), wherein the control instruction carries the identity authentication information of the user; and controlling the user device according to the control instruction after the identity authentication information passes authentication in the server (S204); and further comprising: determining whether the first token is cached before sending the request message (S301); obtaining the local control authority of the user on the user device according to the first token cached, if the first token is cached (S302); and sending the request message for requesting the first token of the user device to the server, if the first token is not cached (S303). sending a request message for requesting a first token of the user device to a server if a device identifier of the user device is found in a process of scanning for local devices, wherein the request message carries identity authentication information of the user (S101); receiving the first token returned by the server according to the request message after the identity authentication information passes authentication in the server (S102; S304); and determining the local control authority of the user on the user device according to the first token (S103; S305), and controlling the user device according to the determined local control authority of the user on the user device; said method further comprising: sending a control instruction for controlling the user device to the server, if the device identifier of the user device is not found in the process of scanning for local devices and the user needs to remotely control, via a user interface on the terminal, the user device (S201; S202; S203), wherein the control instruction carries the identity authentication information of the user; and controlling the user device according to the control instruction after the identity authentication information passes authentication in the server (S204); and further comprising: determining whether the first token is cached before sending the request message (S301); obtaining the local control authority of the user on the user device according to the first token cached, if the first token is cached (S302); and sending the request message for requesting the first token of the user device to the server, if the first token is not cached (S303). determining whether the first token is cached before sending the request message (S301); obtaining the local control authority of the user on the user device according to the first token cached, if the first token is cached (S302); and sending the request message for requesting the first token of the user device to the server, if the first token is not cached (S303). <EOS>