Movatterモバイル変換


[0]ホーム

URL:


CN109246105B - Communication method and system for preventing information leakage - Google Patents

Communication method and system for preventing information leakage
Download PDF

Info

Publication number
CN109246105B
CN109246105BCN201811068065.4ACN201811068065ACN109246105BCN 109246105 BCN109246105 BCN 109246105BCN 201811068065 ACN201811068065 ACN 201811068065ACN 109246105 BCN109246105 BCN 109246105B
Authority
CN
China
Prior art keywords
information
identification information
receiving terminal
platform
identification
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Active
Application number
CN201811068065.4A
Other languages
Chinese (zh)
Other versions
CN109246105A (en
Inventor
余文胜
陈新
白渊玲
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Shenzhen Montnets Technology Co ltd
Original Assignee
Shenzhen Montnets Technology Co ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Shenzhen Montnets Technology Co ltdfiledCriticalShenzhen Montnets Technology Co ltd
Priority to CN201811068065.4ApriorityCriticalpatent/CN109246105B/en
Publication of CN109246105ApublicationCriticalpatent/CN109246105A/en
Application grantedgrantedCritical
Publication of CN109246105BpublicationCriticalpatent/CN109246105B/en
Activelegal-statusCriticalCurrent
Anticipated expirationlegal-statusCritical

Links

Images

Classifications

Landscapes

Abstract

The invention belongs to the technical field of communication, and provides a communication method and a system for preventing information leakage, wherein the method comprises the following steps: when receiving first information sent by a sending terminal and a telephone number of a receiver, a service gateway codes the first information and first identification information according to a preset coding algorithm to form second information, the second information is sent to a corresponding receiving terminal through an IM platform, the receiving terminal decodes the second information according to a preset decoding algorithm to form the first information and the first identification information, obtains a first identification code of a current user identity identification card in the receiving terminal, generates third identification information according to the first identification code, judges whether the first identification information and the third identification information are the same, and if the first identification information and the third identification information are the same, allows the first information to be received. The invention can verify whether the user identification card in the receiving terminal is invalid or not, thereby improving the information communication safety.

Description

Communication method and system for preventing information leakage
Technical Field
The invention belongs to the technical field of communication, and particularly relates to a communication method and system for preventing information leakage.
Background
With The continuous progress of communication technology, OTT (Over The Top, providing various application services to users through The internet) services are also continuously developing, and The OTT services can cover multimedia information such as text, pictures, audio, video and The like. Compared with the traditional short message communication mode, the OTT information-based communication is low in price and good in user embodiment.
However, when the current mobile terminal needs to receive the OTT-based information, the connection between the sending terminal and the mobile terminal is mainly established through the internet for communication, and when the user identification card in the mobile terminal fails (such as a mobile phone card fails, a mobile phone card is replaced, a mobile phone card is disabled, or a loss report is reported), the mobile terminal can still normally receive the information, so that some important or sensitive information is at risk of leakage, and the security is low.
Disclosure of Invention
In view of this, embodiments of the present invention provide a communication method and system for preventing information leakage, which can receive information when a user identity card is verified to be non-invalid when receiving information, so as to effectively solve the problem of information leakage caused by invalid user identity card and improve information communication security.
A first aspect of an embodiment of the present invention provides a communication method for preventing information leakage, where the method includes:
when receiving first information sent by a sending terminal and a telephone number of a first information receiver, a service gateway acquires first identification information and second identification information corresponding to the telephone number according to a prestored first relation information table, encodes the first information and the first identification information according to a preset encoding algorithm to obtain second information, acquires an Instant Messaging (IM) platform access number corresponding to the second identification information according to a prestored second relation information table, and sends the second information and the IM platform access ID number to an IM platform;
when the IM platform receives the second information and the IM platform access ID number, the IM platform sends the second information to the receiving terminal, and the receiving terminal corresponds to the IM platform access ID number;
when the receiving terminal receives the second information sent by the IM platform, decoding the second information according to a preset decoding algorithm to generate the first information and the first identification information, acquiring a first identification code of a current user identity identification card in the receiving terminal, generating third identification information according to the first identification code, judging whether the first identification information and the third identification information are the same, and if so, allowing the first information to be received;
the first identification information is identification information of a user identification card pre-associated with a receiving terminal, and the second identification information is identification information of the receiving terminal.
A second aspect of the embodiments of the present invention provides a communication method for preventing information leakage, which is applied to a service gateway, and the method includes:
when first information sent by a sending terminal and a telephone number of a first information receiver are received, first identification information and second identification information corresponding to the telephone number are obtained according to a pre-stored first relation information table;
coding the first information and the first identification information according to a preset coding algorithm to form second information, and acquiring an Instant Messaging (IM) platform access number corresponding to the second identification information according to a second relation information table stored in advance;
and sending the second information and the IM platform access ID number to an IM platform so that the IM platform sends the second information to the receiving terminal.
In one embodiment, before receiving the first information sent by the sending terminal and the telephone number of the first information receiver, the method further comprises the following steps:
when a second relation information table sent by a service gateway is received, storing the second relation information table; the second relation information table comprises the incidence relation between the second identification information and the IM platform access ID number;
storing a first relation information table when receiving the first relation information table sent by addressing equipment; wherein the first relationship information table includes an association relationship between the first identification information, the second identification information, and the telephone number.
A third aspect of the embodiments of the present invention provides a communication method for preventing information leakage, which is applied to a receiving terminal, and the communication method includes:
when second information sent by an IM platform is received, decoding the second information according to a preset decoding algorithm to generate first information and first identification information;
acquiring a first identification code of a current user identity identification card in the receiving terminal, and generating third identification information according to the first identification code;
judging whether the first identification information and the third identification information are the same;
and if the first information is the same as the second information, the first information is allowed to be received.
In one embodiment, before receiving the second information, the method further comprises:
when a request instruction for registration is sent to the IM platform, acquiring a second identification code of a current user identity identification card in the receiving terminal and a feature code of the receiving terminal;
generating corresponding first identification information and second identification information by the second identification code and the feature code respectively, and sending the first identification information and the second identification information to the IM platform, so that the IM platform allocates a unique IM platform access ID number to the receiving terminal according to the second identification information, returns the IM platform access ID number to the receiving terminal, associates the second identification information and the IM platform access ID number, stores the second identification information and the IM platform access ID number into the second relationship information table, and sends the second identification information and the IM platform access ID number to a service gateway;
and when receiving the IM platform access number sent by the IM platform, sending the first identification information and the second identification information to addressing equipment, so that the addressing equipment acquires a telephone number matched with the first identification information and the second identification information from a preset historical information database, associates the first identification information, the second identification information and the telephone number, stores the associated telephone number into a first relation information table and sends the associated telephone number to a service gateway.
A fourth aspect of the embodiments of the present invention provides a communication system for preventing information leakage, where the system includes a service gateway, an IM platform in communication connection with the service gateway, and a receiving terminal in communication connection with the IM platform;
the service gateway is used for acquiring first identification information and second identification information corresponding to a telephone number according to a prestored first relation information table when receiving first information sent by a sending terminal and the telephone number of a first information receiver, encoding the first information and the first identification information according to a preset encoding algorithm to obtain second information, acquiring an instant messaging IM platform access number corresponding to the second identification information according to a prestored second relation information table, and sending the second information and the IM platform access ID number to an IM platform; the first identification information is identification information of a user identity identification card pre-associated with a receiving terminal, and the second identification information is identification information of the receiving terminal;
the IM platform is used for sending the second information to the receiving terminal when receiving the second information and the IM platform access ID number, and the receiving terminal corresponds to the IM platform access number;
the receiving terminal is configured to, when receiving the second information sent by the IM platform, decode the second information according to a preset decoding algorithm to generate the first information and the first identification information, obtain a first identification code of a current user identity card in the receiving terminal, generate third identification information according to the first identification code, determine whether the first identification information and the third identification information are the same, and allow to receive the first information if the first identification information and the third identification information are the same.
In one embodiment, the system further comprises addressing devices in communication connection with the receiving terminal and the service gateway, respectively;
the service gateway is also used for receiving a registration request instruction sent by the receiving terminal before receiving first information sent by a sending terminal and a telephone number of a first information receiver, distributing a unique IM platform access ID number for the receiving terminal according to second identification information when receiving the first identification information and the second identification information sent by the receiving terminal, sending the IM platform access ID number to the receiving terminal, associating the second identification information with the IM platform access ID number, storing the second identification information into the second relation information table and sending the second relation information table to the service gateway;
the receiving terminal is further configured to send the first identification information and the second identification information to an addressing device when receiving the IM platform access number sent by the IM platform;
and the addressing device is used for acquiring a telephone number matched with the first identification information and the second identification information from a preset historical information database when the first identification information and the second identification information are received, associating the first identification information, the second identification information and the telephone number, storing the first identification information, the second identification information and the telephone number into a first relation information table and sending the first identification information, the second identification information and the telephone number to a service gateway.
In an embodiment, the receiving terminal is further configured to, when a request instruction for sending registration to the IM platform is detected, obtain a second identification code of a current user identity card in the receiving terminal and a feature code of the receiving terminal, generate corresponding first identification information and second identification information from the second identification code and the feature code, and send the first identification information and the second identification information to the IM platform.
A fifth aspect of the embodiments of the present invention provides a service gateway for preventing information leakage, where the service gateway includes:
the first obtaining module is used for obtaining first identification information and second identification information corresponding to a telephone number according to a pre-stored first relation information table when receiving first information sent by a sending terminal and the telephone number of a first information receiving party;
the second obtaining module is used for coding the first information and the first identification information according to a preset coding algorithm to form second information, and obtaining an Instant Messaging (IM) platform access number corresponding to the second identification information according to a second relation information table stored in advance;
and the sending module is used for sending the second information and the IM platform access ID number to an IM platform so that the IM platform sends the second information to the receiving terminal.
A sixth aspect of the present invention provides a receiving terminal for preventing information leakage, where the receiving terminal includes:
the IM platform comprises a first generation module, a second generation module and a first identification module, wherein the first generation module is used for decoding second information sent by the IM platform according to a preset decoding algorithm to generate first information and first identification information;
the second generation module is used for acquiring a first identification code of a current user identity identification card in the receiving terminal and generating third identification information according to the first identification code;
the judging module is used for judging whether the first identification information and the third identification information are the same;
and the permission module is used for permitting to receive the first information if the first information is the same as the second information.
A seventh aspect of embodiments of the present invention provides a computer-readable storage medium storing a computer program which, when executed by a processor, implements the steps of the method of any one of the above aspects.
In the embodiment of the invention, when the service gateway receives the first information sent by the sending terminal and the telephone number of the receiving party, encoding the first information and the first identification information according to a preset encoding algorithm to form second information, wherein the first identification information is identification information of a user identification card pre-associated with the receiving terminal, the second information is sent to a corresponding receiving terminal through an IM platform, the receiving terminal decodes the second information according to a preset decoding algorithm to generate the first information and the first identification information, and acquiring a first identification code of a current user identity identification card in the receiving terminal, generating third identification information according to the first identification code, judging whether the first identification information and the third identification information are the same, and if so, allowing to receive the first information. When receiving the second information, the receiving terminal decodes the first information sent by the sending terminal and the identification information of the user identification card pre-associated with the receiving terminal, and verifies whether the identification information of the pre-associated user identification card is the same as the identification information of the current user identification card in the receiving terminal, so that whether the user identification card in the receiving terminal is invalid can be verified, and the first information is received when the user identification card is valid, so that the information communication safety can be improved.
Drawings
In order to more clearly illustrate the technical solutions in the embodiments of the present invention, the drawings needed to be used in the embodiments or the prior art descriptions will be briefly described below, and it is obvious that the drawings in the following description are only some embodiments of the present invention, and it is obvious for those skilled in the art to obtain other drawings based on these drawings without inventive exercise.
Fig. 1 is a schematic structural diagram of a communication system for preventing information leakage according to an embodiment of the present invention;
fig. 2 is a communication process diagram of a communication method for preventing information leakage according to an embodiment of the present invention;
fig. 3 is a schematic flow chart of a communication method for preventing information leakage according to a second embodiment of the present invention;
fig. 4 is a schematic flowchart of a communication method for preventing information leakage according to a third embodiment of the present invention;
fig. 5 is a schematic structural diagram of a service gateway for preventing information leakage according to a fifth embodiment of the present invention;
fig. 6 is a schematic structural diagram of a receiving terminal for preventing information leakage according to a sixth embodiment of the present invention.
Detailed Description
In the following description, for purposes of explanation and not limitation, specific details are set forth, such as particular system structures, techniques, etc. in order to provide a thorough understanding of the embodiments of the invention. It will be apparent, however, to one skilled in the art that the present invention may be practiced in other embodiments that depart from these specific details. In other instances, detailed descriptions of well-known systems, devices, circuits, and methods are omitted so as not to obscure the description of the present invention with unnecessary detail.
It should be understood that the sequence numbers of the steps in the method embodiments described below do not mean the execution sequence, and the execution sequence of each process should be determined by the function and the inherent logic of the process, and should not constitute any limitation on the implementation process of each embodiment.
In order to explain the technical means of the present invention, the following description will be given by way of specific examples.
Example one
As shown in fig. 1, thecommunication system 100 includes a receivingterminal 101, an addressingdevice 102 communicatively connected to the receivingterminal 101, anIM platform 103 communicatively connected to the receivingterminal 101, aservice gateway 104 communicatively connected to the IM platform and the addressingdevice 102, respectively, and a sendingterminal 105 communicatively connected to theservice gateway 104.
In the embodiment of the present invention, the receivingterminal 101 may be a mobile terminal such as a mobile phone; the addressingdevice 102 may be a server, a mobile terminal, a desktop computer, a notebook, a palm computer, or other computing devices with an addressing function; theIM platform 103 is a communication software system based on the internet and capable of communicating with an instant message on a server, a mobile terminal, a desktop computer, a notebook, a palm computer, or other computing devices; theservice gateway 104 may be a dynamic data switching platform system. Through the interface software of the dynamic data exchange platform system, the information platform can be seamlessly and efficiently connected with various systems and software, the information sent by the sending terminal is processed and then forwarded, and a rapid bidirectional (or unidirectional) information channel is established for various terminals (or software), so that the sending terminal can perform bidirectional communication with a service platform (such as an IM platform or addressing equipment) and send information to the service platform and/or receive information services provided by IM; the sending terminal may be a mobile terminal of a personal user, or may also be a server including a service processing system (such as an enterprise service processing system), a mobile terminal, a desktop computer, a notebook computer, a palmtop computer, or other terminal devices.
In an embodiment of the present invention, the communication method includes: when receiving first information sent by a sending terminal and a telephone number of a first information receiver, a service gateway acquires first identification information and second identification information corresponding to the telephone number according to a pre-stored first relation information table, encodes the first information and the first identification information according to a preset encoding algorithm to obtain second information, acquires an Instant Messaging (IM) platform access number corresponding to the second identification information according to a pre-stored second relation information table, and sends the second information and the IM platform access ID number to an IM platform; the first identification information is identification information of a user identity identification card pre-associated with a receiving terminal, and the second identification information is identification information of the receiving terminal;
when the IM platform receives the second information and the IM platform access ID number, the IM platform sends the second information to the receiving terminal, and the receiving terminal corresponds to the IM platform access ID number;
when receiving the second information sent by the IM platform, the receiving terminal decodes the second information according to a preset decoding algorithm to generate the first information and the first identification information, obtains a first identification code of a current user identity identification card in the receiving terminal, generates third identification information according to the first identification code, judges whether the first identification information and the third identification information are the same, and allows the first information to be received if the first identification information and the third identification information are the same.
In an embodiment, the communication method in this embodiment is further described with reference to the communication process shown in fig. 2, and as shown in fig. 2, the communication method includes:
step S201, sending first information and the telephone number of the first information receiver to a service gateway;
in the embodiment of the invention, the sending terminal sends the first information to be sent and the telephone number of the receiving party to the service gateway, wherein the first information comprises but is not limited to one or more multimedia information of text, picture, audio and video.
Step S202, acquiring first identification information and second identification information corresponding to the telephone number according to a pre-stored first relation information table, encoding the first information and the first identification information according to a preset encoding algorithm to obtain second information, and acquiring an instant messaging IM platform access number corresponding to the second identification information according to a pre-stored second relation information table;
in the embodiment of the present invention, first identification information and second identification information corresponding to a telephone number of the sending terminal are obtained according to a pre-stored first relationship information table, where the first relationship information table includes the telephone number, the first identification information, the second identification information, and an association relationship among the first identification information, the second identification information, and the telephone number. Acquiring an Instant Messaging (IM) platform access number corresponding to second identification information according to a pre-stored second relation information table, wherein the second relation information table comprises the second identification information, an IM platform access ID number and an incidence relation between the second identification information and the IM platform access ID number; the first identification information is identification information of a user identification card pre-associated with the receiving terminal, and the second identification information is identification information of the receiving terminal. The IM platform access ID number may be an identification number of an internet access service provider allocated by the IM platform for the receiving terminal, and may be information such as a user name or an account number.
In an embodiment, the predetermined encoding algorithm may be a code division multiple access-based encoding technique, in which the first information and the first identification information are encoded by different encoding sequences and encapsulated to form the second information. The code division multiple access can distinguish different information by using different code sequences, namely different information is coded by using different code patterns which are specially selected, for example, the different code patterns are mutually orthogonal, and the first information and the first identification information can be coded into second information by using different code patterns. Other types of encoding algorithms can be used for the predetermined encoding algorithm.
In an embodiment, the sending terminal may also send the first information to be sent and the first identification information of the receiving terminal to the service gateway, and the service gateway obtains the phone number and the second identification information corresponding to the first identification information according to a pre-stored first relationship information table, and obtains the IM platform access number corresponding to the second identification information according to a pre-stored second relationship information table.
In an embodiment, the sending terminal may further send the first information and the IM platform access number to be sent to the service gateway, and the service gateway obtains the second identification information corresponding to the IM platform access number according to the second relationship information table stored in advance, and obtains the phone number and the first identification information corresponding to the first identification information according to the first relationship information table stored in advance.
Step S203, the second information and the IM platform access ID number are sent to an IM platform;
in the embodiment of the invention, the service gateway sends the second information and the IM platform access ID number to the IM platform.
Step S204, the second information is sent to the receiving terminal;
in the embodiment of the present invention, the IM platform sends the second information to the receiving terminal, where the receiving terminal corresponds to the IM platform access ID number, that is, the receiving terminal allocates the IM access ID number to the IM platform.
Step S205, decoding the second information according to a preset decoding algorithm to generate the first information and the first identification information, acquiring a first identification code of a current user identity identification card in the receiving terminal, generating third identification information according to the first identification code, and judging whether the first identification information and the third identification information are the same;
in the embodiment of the present invention, when receiving the second information sent by the IM platform, the receiving terminal decodes the second information according to a preset decoding algorithm corresponding to the code to generate the first information and the first identification information, obtains the first identification code of the current user identification card in the receiving terminal, and generates the third identification information according to the first identification code, where the first identification information is identification information of a user identification card pre-associated with the receiving terminal, and the third identification information is identification information of the current user identification card in the receiving terminal, and determines whether the first identification information and the third identification information are the same, so as to verify whether the pre-associated user identification card in the receiving terminal is invalid. The first Identification code of the current Subscriber identity card in the receiving terminal may be an IMSI number (International Mobile Subscriber identity number) of the current SIM in the receiving terminal.
In an embodiment, if the preset encoding algorithm is a code division multiple access-based encoding technique that encodes the first information and the first identification information with different respective encoding sequences to form the second information, the preset decoding algorithm may be a code division multiple access-based decoding technique that extracts the first information and the first identification information from the second information carrying the first information and the first identification information, or the preset encoding algorithm and the preset decoding algorithm are other techniques based encoding and decoding algorithms, which is not limited herein.
Step S206, if the first information is the same, allowing to receive the first information;
in the embodiment of the present invention, when it is determined that the first identification information is the same as the third identification information, that is, the identification information indicating the pre-associated user id card in the receiving terminal is the same as the identification information indicating the current user id card in the receiving terminal, that is, the pre-associated user id card in the receiving terminal is in a normal use state, the first information is allowed to be received, and the user is allowed to display or play the first information when the user needs to display or play the first information. And if the first identification information and the third identification information are judged to be different, the first information is not allowed to be received, and the user cannot display or play the first information.
Step S207, when a request instruction for registration is sent to the IM platform, acquiring a second identification code of a current user identity identification card in the receiving terminal and a feature code of the receiving terminal, and respectively generating corresponding first identification information and second identification information from the second identification code and the feature code;
in the embodiment of the invention, before receiving the second information, when detecting that a request instruction for registering is sent to the IM platform, the receiving terminal obtains the second identification code of the current user identity identification card in the receiving terminal and the feature code of the receiving terminal, and respectively generates corresponding first identification information and second identification information from the second identification code and the feature code. The second identification code of the user identification card and the characteristic code of the receiving terminal.
In one embodiment, the feature code of the receiving terminal includes at least one of: an IMEI (International Mobile Equipment Identity) code of the receiving terminal, a receiving terminal serial number, a Media Access Control (MAC) address, and the like. The second Identification code of the current Subscriber identity card in the receiving terminal may be an IMSI number (International Mobile Subscriber identity number) of the current SIM in the receiving terminal.
Step S208, the first identification information and the second identification information are sent to the IM platform;
in the embodiment of the invention, the receiving terminal sends the first identification information and the second identification information to the IM platform.
Step S209, receiving a registration request instruction sent by the receiving terminal, and when receiving the first identification information and the second identification information sent by the receiving terminal, allocating a unique IM platform access ID number to the receiving terminal according to the second identification information;
in the embodiment of the present invention, the IM platform receives a registration request instruction sent by a terminal, and allocates a unique IM platform access ID number to the receiving terminal according to the second identification information when receiving the first identification information and the second identification information sent by the receiving terminal;
in an embodiment, a unique IM platform access ID number may be further allocated to the receiving terminal according to the first identification information and the second identification information, where the IM platform access ID number may be understood as the receiving terminal and the IM platform.
Step S210, the second identification information and the IM platform access ID number are associated and then stored into the second relation information table and sent to a service gateway;
in the embodiment of the invention, the IM platform associates the second identification information with the IM platform access ID number, stores the second identification information into a second relation information table and sends the second identification information to the service gateway, so that the service gateway stores the second identification information.
Step S211, sending the first identification information and the second identification information to an addressing device;
in the embodiment of the invention, when receiving the IM platform access number sent by the IM platform, the receiving terminal sends the first identification information and the second identification information to addressing equipment.
Step S212, obtaining a telephone number matched with the first identification information and the second identification information from a preset historical information database;
in this embodiment of the present invention, the addressing device obtains a phone number that matches the first identification information and the second identification information from a preset history information database, where a first relationship information table is stored in the preset history information database in advance, where the first relationship information table includes an association relationship between the first identification information, the second identification information, and the phone number, such as storing the first identification information, the second identification information, and the phone number that matches the first identification information and the second identification information.
Step S213, storing the first identification information, the second identification information and the telephone number after associating them into a first relation information table, and sending them to a service gateway.
In the embodiment of the present invention, the addressing device associates the first identification information, the second identification information, and the telephone number, stores the associated information into the first relationship information table, and sends the associated information to the service gateway.
Therefore, in the embodiment of the invention, when receiving the second information, the receiving terminal decodes the first information sent by the sending terminal and the identification information of the user identification card pre-associated with the receiving terminal, and verifies whether the identification information of the pre-associated user identification card is the same as the identification information of the current user identification card in the receiving terminal, so that whether the user identification card in the receiving terminal is invalid can be verified, and the first information is received when the user identification card is valid, so that the information communication safety can be improved.
Example two
A description is given below of a communication method for information leakage according to a second embodiment of the present invention, where the communication method in this embodiment is applied to a service gateway, and where this embodiment is the same as or similar to the first embodiment, reference may be specifically made to the related description of the first embodiment, which is not described herein again, and as shown in fig. 3, the communication method in this embodiment includes:
step S301, when receiving a first message sent by a sending terminal and a telephone number of a first message receiver, acquiring a first identification message and a second identification message corresponding to the telephone number according to a pre-stored first relation message table;
in one embodiment, before receiving the first information sent by the sending terminal and the telephone number of the first information receiver, the method further comprises the following steps: when a second relation information table sent by a service gateway is received, storing the second relation information table; the second relation information table comprises the incidence relation between the second identification information and the IM platform access ID number; storing a first relation information table when receiving the first relation information table sent by addressing equipment; wherein the first relationship information table includes an association relationship between the first identification information, the second identification information, and the telephone number.
Step S302, the first information and the first identification information are coded into second information according to a preset coding algorithm, and an instant messaging IM platform access number corresponding to the second identification information is obtained according to a second relation information table stored in advance;
step S303, the second information and the IM platform access ID number are sent to an IM platform, so that the IM platform sends the second information to the receiving terminal;
in the embodiment of the present application, where the steps S301 to S303 are the same as or similar to the steps S201 to S213, reference may be specifically made to the related descriptions of the steps S201 to S213, and details are not repeated herein.
Therefore, in the embodiment of the present invention, when receiving the first information sent by the sending terminal and the telephone number of the first information receiving party, the service gateway obtains the first identification information and the second identification information corresponding to the telephone number according to the pre-stored first relationship information table, and can encode the first information and the first identification information according to the preset encoding algorithm to obtain the second information and send the second information to the receiving terminal through the IM platform, so that the receiving terminal decodes the first information sent by the sending terminal and the identification information of the user identification card pre-associated with the receiving terminal when receiving the second information, and verifies whether the identification information of the pre-associated user identification card is the same as the identification information of the current user identification card in the receiving terminal, thereby verifying whether the user identification card in the receiving terminal is invalid, and the first information is received when the user identification card is valid, so that the information communication safety can be improved.
EXAMPLE III
A description is given below of a communication method for information leakage according to a third embodiment of the present invention, where the communication method in this embodiment is applied to a receiving terminal, and where this embodiment is the same as or similar to the first embodiment or the second embodiment, reference may be specifically made to the related description of the first embodiment or the second embodiment, which is not repeated here, and as shown in fig. 4, the communication method in this embodiment includes:
step S401, when receiving second information sent by an IM platform, decoding the second information according to a preset decoding algorithm to generate first information and first identification information;
in one embodiment, before receiving the second information, the method further comprises: when a request instruction for registration is sent to the IM platform, acquiring a second identification code of a current user identity identification card in the receiving terminal and a feature code of the receiving terminal; generating corresponding first identification information and second identification information by the second identification code and the feature code respectively, and sending the first identification information and the second identification information to the IM platform, so that the IM platform allocates a unique IM platform access ID number to the receiving terminal according to the second identification information, returns the IM platform access ID number to the receiving terminal, associates the second identification information and the IM platform access ID number, stores the second identification information and the IM platform access ID number into the second relationship information table, and sends the second identification information and the IM platform access ID number to a service gateway; and when receiving the IM platform access number sent by the IM platform, sending the first identification information and the second identification information to addressing equipment, so that the addressing equipment acquires a telephone number matched with the first identification information and the second identification information from a preset historical information database, associates the first identification information, the second identification information and the telephone number, stores the associated telephone number into a first relation information table and sends the associated telephone number to a service gateway.
Step S402, acquiring a first identification code of a current user identity identification card in the receiving terminal, and generating third identification information according to the first identification code;
step S403, determining whether the first identification information and the third identification information are the same;
step S404, if the first information is the same, allowing to receive the first information.
In the embodiment of the present application, where the steps S401 to S404 are the same as or similar to the steps S201 to S213, reference may be specifically made to the related description of the steps S201 to S213, and details are not repeated here.
Therefore, in the embodiment of the invention, when receiving the second information, the receiving terminal decodes the first information sent by the sending terminal and the identification information of the user identification card pre-associated with the receiving terminal, and verifies whether the identification information of the pre-associated user identification card is the same as the identification information of the current user identification card in the receiving terminal, so that whether the user identification card in the receiving terminal is invalid can be verified, and the first information is received when the user identification card is valid, so that the information communication safety can be improved.
Example four
The embodiment of the present invention provides a communication system for preventing information leakage, which is used for executing the method steps in the first embodiment, as shown in fig. 1, thecommunication system 100 includes aservice gateway 104, anIM platform 103 in communication connection with theservice gateway 104, and a receivingterminal 101 in communication connection with theIM platform 103;
theservice gateway 104 is configured to, when receiving first information sent by a sendingterminal 105 and a telephone number of a first information recipient, obtain first identification information and second identification information corresponding to the telephone number according to a pre-stored first relationship information table, encode the first information and the first identification information according to a preset encoding algorithm to obtain second information, obtain an IM platform access number corresponding to the second identification information according to a pre-stored second relationship information table, and send the second information and the IM platform access ID number to theIM platform 103; the first identification information is identification information of a user identity identification card pre-associated with a receiving terminal, and the second identification information is identification information of the receiving terminal;
theIM platform 103 is configured to send the second information to the receivingterminal 101 when receiving the second information and the IM platform access ID number, where the receivingterminal 101 corresponds to the IM platform access number;
the receivingterminal 101 is configured to, when receiving the second information sent by theIM platform 103, decode the second information according to a preset decoding algorithm to generate the first information and the first identification information, obtain a first identification code of a current subscriber identity module card in the receivingterminal 101, generate third identification information according to the first identification code, determine whether the first identification information and the third identification information are the same, and if the first identification information and the third identification information are the same, allow to receive the first information.
In one embodiment, thecommunication system 100 further comprises an addressingdevice 102 communicatively connected to the receivingterminal 101 and theservice gateway 104, respectively;
theservice gateway 104 is further configured to receive a registration request instruction sent by the receiving terminal before receiving the first information sent by the sendingterminal 105 and the telephone number of the first information receiver, and when receiving the first identification information and the second identification information sent by the receiving terminal, allocate a unique IM platform access ID number to the receivingterminal 101 according to the second identification information, send theIM platform 103 access ID number to the receivingterminal 101, associate the second identification information with the IM platform access ID number, store the second relationship information table, and send the second relationship information table to theservice gateway 104;
the receivingterminal 101 is further configured to send the first identification information and the second identification information to an addressingdevice 102 when receiving the IM platform access number sent by theIM platform 103;
the addressingdevice 102 is configured to, when receiving the first identification information and the second identification information, obtain a telephone number that matches the first identification information and the second identification information from a preset historical information database, associate the first identification information, the second identification information, and the telephone number, store the first identification information, the second identification information, and the telephone number in a first relationship information table, and send the first identification information and the second identification information to a service gateway.
In an embodiment, the receivingterminal 101 is further configured to, when detecting that a request instruction for registration is sent to the IM platform, obtain a second identification code of a current user identity card in the receivingterminal 101 and a feature code of the receiving terminal, generate corresponding first identification information and second identification information from the second identification code and the feature code, respectively, and send the first identification information and the second identification information to theIM platform 103.
Therefore, in the embodiment of the invention, when receiving the second information, the receiving terminal decodes the first information sent by the sending terminal and the identification information of the user identification card pre-associated with the receiving terminal, and verifies whether the identification information of the pre-associated user identification card is the same as the identification information of the current user identification card in the receiving terminal, so that whether the user identification card in the receiving terminal is invalid can be verified, and the first information is received when the user identification card is valid, so that the information communication safety can be improved.
EXAMPLE five
In this embodiment, a service gateway for preventing information leakage is provided, configured to execute the method steps in the second embodiment, as shown in fig. 5, aservice gateway 500 in this embodiment includes:
a first obtainingmodule 501, configured to, when receiving first information sent by a sending terminal and a phone number of a first information receiving party, obtain first identification information and second identification information corresponding to the phone number according to a pre-stored first relationship information table;
a second obtainingmodule 502, configured to encode the first information and the first identification information according to a preset encoding algorithm to obtain second information, and obtain an access number of an instant messaging IM platform corresponding to the second identification information according to a second relationship information table stored in advance;
a sendingmodule 503, configured to send the second information and the IM platform access ID number to an IM platform, so that the IM platform sends the second information to the receiving terminal.
In one embodiment, the illustratedservice gateway 500 further comprises:
afirst storage module 504, configured to store a second relationship information table sent by a service gateway when receiving the second relationship information table sent by a service gateway before receiving first information sent by a sending terminal and a telephone number of a first information receiving party; the second relation information table comprises the incidence relation between the second identification information and the IM platform access ID number;
asecond storage module 505, configured to store a first relationship information table sent by an addressing device when receiving the first relationship information table; wherein the first relationship information table includes an association relationship between the first identification information, the second identification information, and the telephone number.
Therefore, in the embodiment of the present invention, when receiving the first information sent by the sending terminal and the telephone number of the first information receiving party, the service gateway obtains the first identification information and the second identification information corresponding to the telephone number according to the pre-stored first relationship information table, and can encode the first information and the first identification information according to the preset encoding algorithm to obtain the second information and send the second information to the receiving terminal through the IM platform, so that the receiving terminal decodes the first information sent by the sending terminal and the identification information of the user identification card pre-associated with the receiving terminal when receiving the second information, and verifies whether the identification information of the pre-associated user identification card is the same as the identification information of the current user identification card in the receiving terminal, thereby verifying whether the user identification card in the receiving terminal is invalid, and the first information is received when the user identification card is valid, so that the information communication safety can be improved.
EXAMPLE six
The present embodiment provides a receiving terminal for preventing information leakage, configured to execute the method steps in the third embodiment, as shown in fig. 6, a receivingterminal 600 in the present embodiment includes:
thefirst generating module 601 is configured to, when receiving second information sent by the IM platform, decode the second information according to a preset decoding algorithm to generate first information and first identification information;
asecond generating module 602, configured to obtain a first identification code of a current user identity card in the receiving terminal, and generate third identification information according to the first identification code;
a determiningmodule 603, configured to determine whether the first identification information and the third identification information are the same;
an allowingmodule 604, configured to allow the first information to be received if the first information is the same as the second information.
In one embodiment, the receivingterminal 600 further comprises:
an obtainingmodule 605, configured to, before receiving the second information, obtain a second identification code of the current user id card in the receiving terminal and a feature code of the receiving terminal when detecting that a request instruction for registration is sent to the IM platform;
afirst sending module 606, configured to generate corresponding first identification information and second identification information from the second identification code and the feature code, and send the first identification information and the second identification information to the IM platform, so that the IM platform allocates a unique IM platform access ID number to the receiving terminal according to the second identification information, returns the IM platform access ID number to the receiving terminal, associates the second identification information and the IM platform access ID number, stores the second identification information and the IM platform access ID number in the second relationship information table, and sends the second identification information and the IM platform access ID number to a service gateway;
asecond sending module 607, configured to send the first identification information and the second identification information to an addressing device when receiving the IM platform access number sent by the IM platform, so that the addressing device obtains a phone number matched with the first identification information and the second identification information from a preset historical information database, associates the first identification information, the second identification information, and the phone number, stores the associated phone number in a first relationship information table, and sends the associated phone number to a service gateway.
Therefore, in the embodiment of the invention, when receiving the second information, the receiving terminal decodes the first information sent by the sending terminal and the identification information of the user identification card pre-associated with the receiving terminal, and verifies whether the identification information of the pre-associated user identification card is the same as the identification information of the current user identification card in the receiving terminal, so that whether the user identification card in the receiving terminal is invalid can be verified, and the first information is received when the user identification card is valid, so that the information communication safety can be improved.
It will be apparent to those skilled in the art that, for convenience and brevity of description, only the above-mentioned division of the functional units and modules is illustrated, and in practical applications, the above-mentioned functions may be distributed as different functional units and modules according to needs, that is, the internal structure of the apparatus may be divided into different functional units or modules to implement all or part of the above-mentioned functions. Each functional unit and module in the embodiments may be integrated in one processing unit, or each unit may exist alone physically, or two or more units are integrated in one unit, and the integrated unit may be implemented in a form of hardware, or in a form of software functional unit. In addition, specific names of the functional units and modules are only for convenience of distinguishing from each other, and are not used for limiting the protection scope of the present application. The specific working processes of the units and modules in the intelligent terminal may refer to the corresponding processes in the foregoing method embodiments, and are not described herein again.
In the above embodiments, the descriptions of the respective embodiments have respective emphasis, and reference may be made to the related descriptions of other embodiments for parts that are not described or illustrated in a certain embodiment.
Those of ordinary skill in the art will appreciate that the various illustrative elements and algorithm steps described in connection with the embodiments disclosed herein may be implemented as electronic hardware or combinations of computer software and electronic hardware. Whether such functionality is implemented as hardware or software depends upon the particular application and design constraints imposed on the implementation. Skilled artisans may implement the described functionality in varying ways for each particular application, but such implementation decisions should not be interpreted as causing a departure from the scope of the present invention.
In the embodiments provided in the present invention, it should be understood that the disclosed apparatus and method may be implemented in other ways. For example, the above-described embodiments of the apparatus are merely illustrative, and for example, the division of the above-described modules or units is only one type of division of logical functions, and there may be other divisions when actually implemented, for example, a plurality of units or components may be combined or integrated into another system, or some features may be omitted, or not executed. In addition, the shown or discussed mutual coupling or direct coupling or communication connection may be an indirect coupling or communication connection through some interfaces, devices or units, and may be in an electrical, mechanical or other form.
The units described as separate parts may or may not be physically separate, and parts displayed as units may or may not be physical units, may be located in one place, or may be distributed on a plurality of network units. Some or all of the units can be selected according to actual needs to achieve the purpose of the solution of the embodiment of the present invention.
In addition, functional units in the embodiments of the present invention may be integrated into one processing unit, or each unit may exist alone physically, or two or more units are integrated into one unit. The integrated unit can be realized in a form of hardware, and can also be realized in a form of a software functional unit.
The integrated unit may be stored in a computer-readable storage medium if it is implemented in the form of a software functional unit and sold or used as a separate product. Based on such understanding, all or part of the flow in the method according to the above embodiments may be implemented by a computer program, which may be stored in a computer-readable storage medium or multiple computer-readable storage media, and when the computer program is executed by a processor, the steps of the above method embodiments may be implemented. The computer program includes computer program code, and the computer program code may be in a source code form, an object code form, an executable file or some intermediate form. The computer readable medium may include: any entity or device capable of carrying the above-mentioned computer program code, recording medium, usb disk, removable hard disk, magnetic disk, optical disk, computer Memory, Read-Only Memory (ROM), Random Access Memory (RAM), electrical carrier wave signal, telecommunication signal, software distribution medium, etc. It should be noted that the computer readable medium described above may be suitably increased or decreased as required by legislation and patent practice in jurisdictions, for example, in some jurisdictions, computer readable media excludes electrical carrier signals and telecommunications signals in accordance with legislation and patent practice.
The above-mentioned embodiments are only used for illustrating the technical solutions of the present invention, and not for limiting the same; although the present invention has been described in detail with reference to the foregoing embodiments, it will be understood by those of ordinary skill in the art that: the technical solutions described in the foregoing embodiments may still be modified, or some technical features may be equivalently replaced; such modifications and substitutions do not substantially depart from the spirit and scope of the embodiments of the present invention, and are intended to be included within the scope of the present invention.

Claims (6)

the service gateway is used for acquiring first identification information and second identification information corresponding to a telephone number according to a prestored first relation information table when receiving first information sent by a sending terminal and the telephone number of a first information receiver, encoding the first information and the first identification information according to a preset encoding algorithm to generate second information, acquiring an instant messaging IM platform access ID number corresponding to the second identification information according to a prestored second relation information table, and sending the second information and the IM platform access ID number to an IM platform; the first identification information is a second identification code of a user identity identification card pre-associated with a receiving terminal, and the second identification information is a feature code of the receiving terminal;
CN201811068065.4A2018-09-132018-09-13Communication method and system for preventing information leakageActiveCN109246105B (en)

Priority Applications (1)

Application NumberPriority DateFiling DateTitle
CN201811068065.4ACN109246105B (en)2018-09-132018-09-13Communication method and system for preventing information leakage

Applications Claiming Priority (1)

Application NumberPriority DateFiling DateTitle
CN201811068065.4ACN109246105B (en)2018-09-132018-09-13Communication method and system for preventing information leakage

Publications (2)

Publication NumberPublication Date
CN109246105A CN109246105A (en)2019-01-18
CN109246105Btrue CN109246105B (en)2021-08-03

Family

ID=65058075

Family Applications (1)

Application NumberTitlePriority DateFiling Date
CN201811068065.4AActiveCN109246105B (en)2018-09-132018-09-13Communication method and system for preventing information leakage

Country Status (1)

CountryLink
CN (1)CN109246105B (en)

Families Citing this family (1)

* Cited by examiner, † Cited by third party
Publication numberPriority datePublication dateAssigneeTitle
CN110213795B (en)*2019-05-132023-12-12李允毕Method for simultaneously communicating double SIM cards, mobile terminal and storage medium

Citations (5)

* Cited by examiner, † Cited by third party
Publication numberPriority datePublication dateAssigneeTitle
CN102651718A (en)*2011-02-252012-08-29腾讯科技(深圳)有限公司Method and device for information transmission
KR101306074B1 (en)*2012-09-192013-09-12강철구Method and system to prevent phishing
CN104572135A (en)*2015-02-102015-04-29深圳酷派技术有限公司Command processing method, command processing device and terminal
CN104820805A (en)*2015-04-232015-08-05广东欧珀移动通信有限公司Method and device for burglary prevention of user identity identification card information
CN105898736A (en)*2016-05-252016-08-24努比亚技术有限公司Mobile terminal and control method

Family Cites Families (1)

* Cited by examiner, † Cited by third party
Publication numberPriority datePublication dateAssigneeTitle
CN110995689A (en)*2013-06-242020-04-10阿里巴巴集团控股有限公司Method and device for user identity authentication

Patent Citations (5)

* Cited by examiner, † Cited by third party
Publication numberPriority datePublication dateAssigneeTitle
CN102651718A (en)*2011-02-252012-08-29腾讯科技(深圳)有限公司Method and device for information transmission
KR101306074B1 (en)*2012-09-192013-09-12강철구Method and system to prevent phishing
CN104572135A (en)*2015-02-102015-04-29深圳酷派技术有限公司Command processing method, command processing device and terminal
CN104820805A (en)*2015-04-232015-08-05广东欧珀移动通信有限公司Method and device for burglary prevention of user identity identification card information
CN105898736A (en)*2016-05-252016-08-24努比亚技术有限公司Mobile terminal and control method

Also Published As

Publication numberPublication date
CN109246105A (en)2019-01-18

Similar Documents

PublicationPublication DateTitle
CN1080071C (en)Device for transmitting messages in a communication network for voice and data processing
US9231763B2 (en)System and method for providing a multi-credential authentication protocol
CN106911661B (en)Short message verification method, device, client, server and system
CN103957522B (en)A kind of intelligent communication method, terminal and system
JPH10117381A (en)Method and system for automatically validating radio equipment
CN108271130B (en)Communication system and method for identifying pseudo base station short message
CN106686591A (en)Method and device accessing wireless network
CN101808094A (en)Identity authentication system and method
CN104333530A (en)Information credibility verifying method and apparatus
CN106792709B (en)Method, device and terminal for preventing pseudo base station
CN105681258A (en)Session method and session device based on third-party server
CN113067859A (en)Communication method and device based on cloud mobile phone
CN108924838A (en)Method for switching network, device, Provider Equipment and the terminal of cross operator
CN106713315B (en)Login method and device of plug-in application program
CN108174377A (en) Method and system for opening number
CN105306202A (en)Identity verification method and device, server
CN109246105B (en)Communication method and system for preventing information leakage
CN111049822B (en)Short message verification code sending method and device, short message server and storage medium
CN113329404B (en) Network access method and device
CN114978749B (en)Login authentication method and system, storage medium and electronic equipment
WO2003036867A1 (en)System and method for performing mutual authentication between mobile terminal and server
CN105376733A (en)Information processing method and electronic apparatus
KR20240163157A (en) Payment methods, user terminals, devices, systems and media
CN113852639B (en)Data processing method, device, electronic equipment and computer readable storage medium
CN108683508B (en)Mobile terminal information authentication method based on equipment fingerprint

Legal Events

DateCodeTitleDescription
PB01Publication
PB01Publication
SE01Entry into force of request for substantive examination
SE01Entry into force of request for substantive examination
GR01Patent grant
GR01Patent grant

[8]ページ先頭

©2009-2025 Movatter.jp