Disclosure of Invention
In view of this, embodiments of the present invention provide a communication method and system for preventing information leakage, which can receive information when a user identity card is verified to be non-invalid when receiving information, so as to effectively solve the problem of information leakage caused by invalid user identity card and improve information communication security.
A first aspect of an embodiment of the present invention provides a communication method for preventing information leakage, where the method includes:
when receiving first information sent by a sending terminal and a telephone number of a first information receiver, a service gateway acquires first identification information and second identification information corresponding to the telephone number according to a prestored first relation information table, encodes the first information and the first identification information according to a preset encoding algorithm to obtain second information, acquires an Instant Messaging (IM) platform access number corresponding to the second identification information according to a prestored second relation information table, and sends the second information and the IM platform access ID number to an IM platform;
when the IM platform receives the second information and the IM platform access ID number, the IM platform sends the second information to the receiving terminal, and the receiving terminal corresponds to the IM platform access ID number;
when the receiving terminal receives the second information sent by the IM platform, decoding the second information according to a preset decoding algorithm to generate the first information and the first identification information, acquiring a first identification code of a current user identity identification card in the receiving terminal, generating third identification information according to the first identification code, judging whether the first identification information and the third identification information are the same, and if so, allowing the first information to be received;
the first identification information is identification information of a user identification card pre-associated with a receiving terminal, and the second identification information is identification information of the receiving terminal.
A second aspect of the embodiments of the present invention provides a communication method for preventing information leakage, which is applied to a service gateway, and the method includes:
when first information sent by a sending terminal and a telephone number of a first information receiver are received, first identification information and second identification information corresponding to the telephone number are obtained according to a pre-stored first relation information table;
coding the first information and the first identification information according to a preset coding algorithm to form second information, and acquiring an Instant Messaging (IM) platform access number corresponding to the second identification information according to a second relation information table stored in advance;
and sending the second information and the IM platform access ID number to an IM platform so that the IM platform sends the second information to the receiving terminal.
In one embodiment, before receiving the first information sent by the sending terminal and the telephone number of the first information receiver, the method further comprises the following steps:
when a second relation information table sent by a service gateway is received, storing the second relation information table; the second relation information table comprises the incidence relation between the second identification information and the IM platform access ID number;
storing a first relation information table when receiving the first relation information table sent by addressing equipment; wherein the first relationship information table includes an association relationship between the first identification information, the second identification information, and the telephone number.
A third aspect of the embodiments of the present invention provides a communication method for preventing information leakage, which is applied to a receiving terminal, and the communication method includes:
when second information sent by an IM platform is received, decoding the second information according to a preset decoding algorithm to generate first information and first identification information;
acquiring a first identification code of a current user identity identification card in the receiving terminal, and generating third identification information according to the first identification code;
judging whether the first identification information and the third identification information are the same;
and if the first information is the same as the second information, the first information is allowed to be received.
In one embodiment, before receiving the second information, the method further comprises:
when a request instruction for registration is sent to the IM platform, acquiring a second identification code of a current user identity identification card in the receiving terminal and a feature code of the receiving terminal;
generating corresponding first identification information and second identification information by the second identification code and the feature code respectively, and sending the first identification information and the second identification information to the IM platform, so that the IM platform allocates a unique IM platform access ID number to the receiving terminal according to the second identification information, returns the IM platform access ID number to the receiving terminal, associates the second identification information and the IM platform access ID number, stores the second identification information and the IM platform access ID number into the second relationship information table, and sends the second identification information and the IM platform access ID number to a service gateway;
and when receiving the IM platform access number sent by the IM platform, sending the first identification information and the second identification information to addressing equipment, so that the addressing equipment acquires a telephone number matched with the first identification information and the second identification information from a preset historical information database, associates the first identification information, the second identification information and the telephone number, stores the associated telephone number into a first relation information table and sends the associated telephone number to a service gateway.
A fourth aspect of the embodiments of the present invention provides a communication system for preventing information leakage, where the system includes a service gateway, an IM platform in communication connection with the service gateway, and a receiving terminal in communication connection with the IM platform;
the service gateway is used for acquiring first identification information and second identification information corresponding to a telephone number according to a prestored first relation information table when receiving first information sent by a sending terminal and the telephone number of a first information receiver, encoding the first information and the first identification information according to a preset encoding algorithm to obtain second information, acquiring an instant messaging IM platform access number corresponding to the second identification information according to a prestored second relation information table, and sending the second information and the IM platform access ID number to an IM platform; the first identification information is identification information of a user identity identification card pre-associated with a receiving terminal, and the second identification information is identification information of the receiving terminal;
the IM platform is used for sending the second information to the receiving terminal when receiving the second information and the IM platform access ID number, and the receiving terminal corresponds to the IM platform access number;
the receiving terminal is configured to, when receiving the second information sent by the IM platform, decode the second information according to a preset decoding algorithm to generate the first information and the first identification information, obtain a first identification code of a current user identity card in the receiving terminal, generate third identification information according to the first identification code, determine whether the first identification information and the third identification information are the same, and allow to receive the first information if the first identification information and the third identification information are the same.
In one embodiment, the system further comprises addressing devices in communication connection with the receiving terminal and the service gateway, respectively;
the service gateway is also used for receiving a registration request instruction sent by the receiving terminal before receiving first information sent by a sending terminal and a telephone number of a first information receiver, distributing a unique IM platform access ID number for the receiving terminal according to second identification information when receiving the first identification information and the second identification information sent by the receiving terminal, sending the IM platform access ID number to the receiving terminal, associating the second identification information with the IM platform access ID number, storing the second identification information into the second relation information table and sending the second relation information table to the service gateway;
the receiving terminal is further configured to send the first identification information and the second identification information to an addressing device when receiving the IM platform access number sent by the IM platform;
and the addressing device is used for acquiring a telephone number matched with the first identification information and the second identification information from a preset historical information database when the first identification information and the second identification information are received, associating the first identification information, the second identification information and the telephone number, storing the first identification information, the second identification information and the telephone number into a first relation information table and sending the first identification information, the second identification information and the telephone number to a service gateway.
In an embodiment, the receiving terminal is further configured to, when a request instruction for sending registration to the IM platform is detected, obtain a second identification code of a current user identity card in the receiving terminal and a feature code of the receiving terminal, generate corresponding first identification information and second identification information from the second identification code and the feature code, and send the first identification information and the second identification information to the IM platform.
A fifth aspect of the embodiments of the present invention provides a service gateway for preventing information leakage, where the service gateway includes:
the first obtaining module is used for obtaining first identification information and second identification information corresponding to a telephone number according to a pre-stored first relation information table when receiving first information sent by a sending terminal and the telephone number of a first information receiving party;
the second obtaining module is used for coding the first information and the first identification information according to a preset coding algorithm to form second information, and obtaining an Instant Messaging (IM) platform access number corresponding to the second identification information according to a second relation information table stored in advance;
and the sending module is used for sending the second information and the IM platform access ID number to an IM platform so that the IM platform sends the second information to the receiving terminal.
A sixth aspect of the present invention provides a receiving terminal for preventing information leakage, where the receiving terminal includes:
the IM platform comprises a first generation module, a second generation module and a first identification module, wherein the first generation module is used for decoding second information sent by the IM platform according to a preset decoding algorithm to generate first information and first identification information;
the second generation module is used for acquiring a first identification code of a current user identity identification card in the receiving terminal and generating third identification information according to the first identification code;
the judging module is used for judging whether the first identification information and the third identification information are the same;
and the permission module is used for permitting to receive the first information if the first information is the same as the second information.
A seventh aspect of embodiments of the present invention provides a computer-readable storage medium storing a computer program which, when executed by a processor, implements the steps of the method of any one of the above aspects.
In the embodiment of the invention, when the service gateway receives the first information sent by the sending terminal and the telephone number of the receiving party, encoding the first information and the first identification information according to a preset encoding algorithm to form second information, wherein the first identification information is identification information of a user identification card pre-associated with the receiving terminal, the second information is sent to a corresponding receiving terminal through an IM platform, the receiving terminal decodes the second information according to a preset decoding algorithm to generate the first information and the first identification information, and acquiring a first identification code of a current user identity identification card in the receiving terminal, generating third identification information according to the first identification code, judging whether the first identification information and the third identification information are the same, and if so, allowing to receive the first information. When receiving the second information, the receiving terminal decodes the first information sent by the sending terminal and the identification information of the user identification card pre-associated with the receiving terminal, and verifies whether the identification information of the pre-associated user identification card is the same as the identification information of the current user identification card in the receiving terminal, so that whether the user identification card in the receiving terminal is invalid can be verified, and the first information is received when the user identification card is valid, so that the information communication safety can be improved.
Detailed Description
In the following description, for purposes of explanation and not limitation, specific details are set forth, such as particular system structures, techniques, etc. in order to provide a thorough understanding of the embodiments of the invention. It will be apparent, however, to one skilled in the art that the present invention may be practiced in other embodiments that depart from these specific details. In other instances, detailed descriptions of well-known systems, devices, circuits, and methods are omitted so as not to obscure the description of the present invention with unnecessary detail.
It should be understood that the sequence numbers of the steps in the method embodiments described below do not mean the execution sequence, and the execution sequence of each process should be determined by the function and the inherent logic of the process, and should not constitute any limitation on the implementation process of each embodiment.
In order to explain the technical means of the present invention, the following description will be given by way of specific examples.
Example one
As shown in fig. 1, thecommunication system 100 includes a receivingterminal 101, an addressingdevice 102 communicatively connected to the receivingterminal 101, anIM platform 103 communicatively connected to the receivingterminal 101, aservice gateway 104 communicatively connected to the IM platform and the addressingdevice 102, respectively, and a sendingterminal 105 communicatively connected to theservice gateway 104.
In the embodiment of the present invention, the receivingterminal 101 may be a mobile terminal such as a mobile phone; the addressingdevice 102 may be a server, a mobile terminal, a desktop computer, a notebook, a palm computer, or other computing devices with an addressing function; theIM platform 103 is a communication software system based on the internet and capable of communicating with an instant message on a server, a mobile terminal, a desktop computer, a notebook, a palm computer, or other computing devices; theservice gateway 104 may be a dynamic data switching platform system. Through the interface software of the dynamic data exchange platform system, the information platform can be seamlessly and efficiently connected with various systems and software, the information sent by the sending terminal is processed and then forwarded, and a rapid bidirectional (or unidirectional) information channel is established for various terminals (or software), so that the sending terminal can perform bidirectional communication with a service platform (such as an IM platform or addressing equipment) and send information to the service platform and/or receive information services provided by IM; the sending terminal may be a mobile terminal of a personal user, or may also be a server including a service processing system (such as an enterprise service processing system), a mobile terminal, a desktop computer, a notebook computer, a palmtop computer, or other terminal devices.
In an embodiment of the present invention, the communication method includes: when receiving first information sent by a sending terminal and a telephone number of a first information receiver, a service gateway acquires first identification information and second identification information corresponding to the telephone number according to a pre-stored first relation information table, encodes the first information and the first identification information according to a preset encoding algorithm to obtain second information, acquires an Instant Messaging (IM) platform access number corresponding to the second identification information according to a pre-stored second relation information table, and sends the second information and the IM platform access ID number to an IM platform; the first identification information is identification information of a user identity identification card pre-associated with a receiving terminal, and the second identification information is identification information of the receiving terminal;
when the IM platform receives the second information and the IM platform access ID number, the IM platform sends the second information to the receiving terminal, and the receiving terminal corresponds to the IM platform access ID number;
when receiving the second information sent by the IM platform, the receiving terminal decodes the second information according to a preset decoding algorithm to generate the first information and the first identification information, obtains a first identification code of a current user identity identification card in the receiving terminal, generates third identification information according to the first identification code, judges whether the first identification information and the third identification information are the same, and allows the first information to be received if the first identification information and the third identification information are the same.
In an embodiment, the communication method in this embodiment is further described with reference to the communication process shown in fig. 2, and as shown in fig. 2, the communication method includes:
step S201, sending first information and the telephone number of the first information receiver to a service gateway;
in the embodiment of the invention, the sending terminal sends the first information to be sent and the telephone number of the receiving party to the service gateway, wherein the first information comprises but is not limited to one or more multimedia information of text, picture, audio and video.
Step S202, acquiring first identification information and second identification information corresponding to the telephone number according to a pre-stored first relation information table, encoding the first information and the first identification information according to a preset encoding algorithm to obtain second information, and acquiring an instant messaging IM platform access number corresponding to the second identification information according to a pre-stored second relation information table;
in the embodiment of the present invention, first identification information and second identification information corresponding to a telephone number of the sending terminal are obtained according to a pre-stored first relationship information table, where the first relationship information table includes the telephone number, the first identification information, the second identification information, and an association relationship among the first identification information, the second identification information, and the telephone number. Acquiring an Instant Messaging (IM) platform access number corresponding to second identification information according to a pre-stored second relation information table, wherein the second relation information table comprises the second identification information, an IM platform access ID number and an incidence relation between the second identification information and the IM platform access ID number; the first identification information is identification information of a user identification card pre-associated with the receiving terminal, and the second identification information is identification information of the receiving terminal. The IM platform access ID number may be an identification number of an internet access service provider allocated by the IM platform for the receiving terminal, and may be information such as a user name or an account number.
In an embodiment, the predetermined encoding algorithm may be a code division multiple access-based encoding technique, in which the first information and the first identification information are encoded by different encoding sequences and encapsulated to form the second information. The code division multiple access can distinguish different information by using different code sequences, namely different information is coded by using different code patterns which are specially selected, for example, the different code patterns are mutually orthogonal, and the first information and the first identification information can be coded into second information by using different code patterns. Other types of encoding algorithms can be used for the predetermined encoding algorithm.
In an embodiment, the sending terminal may also send the first information to be sent and the first identification information of the receiving terminal to the service gateway, and the service gateway obtains the phone number and the second identification information corresponding to the first identification information according to a pre-stored first relationship information table, and obtains the IM platform access number corresponding to the second identification information according to a pre-stored second relationship information table.
In an embodiment, the sending terminal may further send the first information and the IM platform access number to be sent to the service gateway, and the service gateway obtains the second identification information corresponding to the IM platform access number according to the second relationship information table stored in advance, and obtains the phone number and the first identification information corresponding to the first identification information according to the first relationship information table stored in advance.
Step S203, the second information and the IM platform access ID number are sent to an IM platform;
in the embodiment of the invention, the service gateway sends the second information and the IM platform access ID number to the IM platform.
Step S204, the second information is sent to the receiving terminal;
in the embodiment of the present invention, the IM platform sends the second information to the receiving terminal, where the receiving terminal corresponds to the IM platform access ID number, that is, the receiving terminal allocates the IM access ID number to the IM platform.
Step S205, decoding the second information according to a preset decoding algorithm to generate the first information and the first identification information, acquiring a first identification code of a current user identity identification card in the receiving terminal, generating third identification information according to the first identification code, and judging whether the first identification information and the third identification information are the same;
in the embodiment of the present invention, when receiving the second information sent by the IM platform, the receiving terminal decodes the second information according to a preset decoding algorithm corresponding to the code to generate the first information and the first identification information, obtains the first identification code of the current user identification card in the receiving terminal, and generates the third identification information according to the first identification code, where the first identification information is identification information of a user identification card pre-associated with the receiving terminal, and the third identification information is identification information of the current user identification card in the receiving terminal, and determines whether the first identification information and the third identification information are the same, so as to verify whether the pre-associated user identification card in the receiving terminal is invalid. The first Identification code of the current Subscriber identity card in the receiving terminal may be an IMSI number (International Mobile Subscriber identity number) of the current SIM in the receiving terminal.
In an embodiment, if the preset encoding algorithm is a code division multiple access-based encoding technique that encodes the first information and the first identification information with different respective encoding sequences to form the second information, the preset decoding algorithm may be a code division multiple access-based decoding technique that extracts the first information and the first identification information from the second information carrying the first information and the first identification information, or the preset encoding algorithm and the preset decoding algorithm are other techniques based encoding and decoding algorithms, which is not limited herein.
Step S206, if the first information is the same, allowing to receive the first information;
in the embodiment of the present invention, when it is determined that the first identification information is the same as the third identification information, that is, the identification information indicating the pre-associated user id card in the receiving terminal is the same as the identification information indicating the current user id card in the receiving terminal, that is, the pre-associated user id card in the receiving terminal is in a normal use state, the first information is allowed to be received, and the user is allowed to display or play the first information when the user needs to display or play the first information. And if the first identification information and the third identification information are judged to be different, the first information is not allowed to be received, and the user cannot display or play the first information.
Step S207, when a request instruction for registration is sent to the IM platform, acquiring a second identification code of a current user identity identification card in the receiving terminal and a feature code of the receiving terminal, and respectively generating corresponding first identification information and second identification information from the second identification code and the feature code;
in the embodiment of the invention, before receiving the second information, when detecting that a request instruction for registering is sent to the IM platform, the receiving terminal obtains the second identification code of the current user identity identification card in the receiving terminal and the feature code of the receiving terminal, and respectively generates corresponding first identification information and second identification information from the second identification code and the feature code. The second identification code of the user identification card and the characteristic code of the receiving terminal.
In one embodiment, the feature code of the receiving terminal includes at least one of: an IMEI (International Mobile Equipment Identity) code of the receiving terminal, a receiving terminal serial number, a Media Access Control (MAC) address, and the like. The second Identification code of the current Subscriber identity card in the receiving terminal may be an IMSI number (International Mobile Subscriber identity number) of the current SIM in the receiving terminal.
Step S208, the first identification information and the second identification information are sent to the IM platform;
in the embodiment of the invention, the receiving terminal sends the first identification information and the second identification information to the IM platform.
Step S209, receiving a registration request instruction sent by the receiving terminal, and when receiving the first identification information and the second identification information sent by the receiving terminal, allocating a unique IM platform access ID number to the receiving terminal according to the second identification information;
in the embodiment of the present invention, the IM platform receives a registration request instruction sent by a terminal, and allocates a unique IM platform access ID number to the receiving terminal according to the second identification information when receiving the first identification information and the second identification information sent by the receiving terminal;
in an embodiment, a unique IM platform access ID number may be further allocated to the receiving terminal according to the first identification information and the second identification information, where the IM platform access ID number may be understood as the receiving terminal and the IM platform.
Step S210, the second identification information and the IM platform access ID number are associated and then stored into the second relation information table and sent to a service gateway;
in the embodiment of the invention, the IM platform associates the second identification information with the IM platform access ID number, stores the second identification information into a second relation information table and sends the second identification information to the service gateway, so that the service gateway stores the second identification information.
Step S211, sending the first identification information and the second identification information to an addressing device;
in the embodiment of the invention, when receiving the IM platform access number sent by the IM platform, the receiving terminal sends the first identification information and the second identification information to addressing equipment.
Step S212, obtaining a telephone number matched with the first identification information and the second identification information from a preset historical information database;
in this embodiment of the present invention, the addressing device obtains a phone number that matches the first identification information and the second identification information from a preset history information database, where a first relationship information table is stored in the preset history information database in advance, where the first relationship information table includes an association relationship between the first identification information, the second identification information, and the phone number, such as storing the first identification information, the second identification information, and the phone number that matches the first identification information and the second identification information.
Step S213, storing the first identification information, the second identification information and the telephone number after associating them into a first relation information table, and sending them to a service gateway.
In the embodiment of the present invention, the addressing device associates the first identification information, the second identification information, and the telephone number, stores the associated information into the first relationship information table, and sends the associated information to the service gateway.
Therefore, in the embodiment of the invention, when receiving the second information, the receiving terminal decodes the first information sent by the sending terminal and the identification information of the user identification card pre-associated with the receiving terminal, and verifies whether the identification information of the pre-associated user identification card is the same as the identification information of the current user identification card in the receiving terminal, so that whether the user identification card in the receiving terminal is invalid can be verified, and the first information is received when the user identification card is valid, so that the information communication safety can be improved.
Example two
A description is given below of a communication method for information leakage according to a second embodiment of the present invention, where the communication method in this embodiment is applied to a service gateway, and where this embodiment is the same as or similar to the first embodiment, reference may be specifically made to the related description of the first embodiment, which is not described herein again, and as shown in fig. 3, the communication method in this embodiment includes:
step S301, when receiving a first message sent by a sending terminal and a telephone number of a first message receiver, acquiring a first identification message and a second identification message corresponding to the telephone number according to a pre-stored first relation message table;
in one embodiment, before receiving the first information sent by the sending terminal and the telephone number of the first information receiver, the method further comprises the following steps: when a second relation information table sent by a service gateway is received, storing the second relation information table; the second relation information table comprises the incidence relation between the second identification information and the IM platform access ID number; storing a first relation information table when receiving the first relation information table sent by addressing equipment; wherein the first relationship information table includes an association relationship between the first identification information, the second identification information, and the telephone number.
Step S302, the first information and the first identification information are coded into second information according to a preset coding algorithm, and an instant messaging IM platform access number corresponding to the second identification information is obtained according to a second relation information table stored in advance;
step S303, the second information and the IM platform access ID number are sent to an IM platform, so that the IM platform sends the second information to the receiving terminal;
in the embodiment of the present application, where the steps S301 to S303 are the same as or similar to the steps S201 to S213, reference may be specifically made to the related descriptions of the steps S201 to S213, and details are not repeated herein.
Therefore, in the embodiment of the present invention, when receiving the first information sent by the sending terminal and the telephone number of the first information receiving party, the service gateway obtains the first identification information and the second identification information corresponding to the telephone number according to the pre-stored first relationship information table, and can encode the first information and the first identification information according to the preset encoding algorithm to obtain the second information and send the second information to the receiving terminal through the IM platform, so that the receiving terminal decodes the first information sent by the sending terminal and the identification information of the user identification card pre-associated with the receiving terminal when receiving the second information, and verifies whether the identification information of the pre-associated user identification card is the same as the identification information of the current user identification card in the receiving terminal, thereby verifying whether the user identification card in the receiving terminal is invalid, and the first information is received when the user identification card is valid, so that the information communication safety can be improved.
EXAMPLE III
A description is given below of a communication method for information leakage according to a third embodiment of the present invention, where the communication method in this embodiment is applied to a receiving terminal, and where this embodiment is the same as or similar to the first embodiment or the second embodiment, reference may be specifically made to the related description of the first embodiment or the second embodiment, which is not repeated here, and as shown in fig. 4, the communication method in this embodiment includes:
step S401, when receiving second information sent by an IM platform, decoding the second information according to a preset decoding algorithm to generate first information and first identification information;
in one embodiment, before receiving the second information, the method further comprises: when a request instruction for registration is sent to the IM platform, acquiring a second identification code of a current user identity identification card in the receiving terminal and a feature code of the receiving terminal; generating corresponding first identification information and second identification information by the second identification code and the feature code respectively, and sending the first identification information and the second identification information to the IM platform, so that the IM platform allocates a unique IM platform access ID number to the receiving terminal according to the second identification information, returns the IM platform access ID number to the receiving terminal, associates the second identification information and the IM platform access ID number, stores the second identification information and the IM platform access ID number into the second relationship information table, and sends the second identification information and the IM platform access ID number to a service gateway; and when receiving the IM platform access number sent by the IM platform, sending the first identification information and the second identification information to addressing equipment, so that the addressing equipment acquires a telephone number matched with the first identification information and the second identification information from a preset historical information database, associates the first identification information, the second identification information and the telephone number, stores the associated telephone number into a first relation information table and sends the associated telephone number to a service gateway.
Step S402, acquiring a first identification code of a current user identity identification card in the receiving terminal, and generating third identification information according to the first identification code;
step S403, determining whether the first identification information and the third identification information are the same;
step S404, if the first information is the same, allowing to receive the first information.
In the embodiment of the present application, where the steps S401 to S404 are the same as or similar to the steps S201 to S213, reference may be specifically made to the related description of the steps S201 to S213, and details are not repeated here.
Therefore, in the embodiment of the invention, when receiving the second information, the receiving terminal decodes the first information sent by the sending terminal and the identification information of the user identification card pre-associated with the receiving terminal, and verifies whether the identification information of the pre-associated user identification card is the same as the identification information of the current user identification card in the receiving terminal, so that whether the user identification card in the receiving terminal is invalid can be verified, and the first information is received when the user identification card is valid, so that the information communication safety can be improved.
Example four
The embodiment of the present invention provides a communication system for preventing information leakage, which is used for executing the method steps in the first embodiment, as shown in fig. 1, thecommunication system 100 includes aservice gateway 104, anIM platform 103 in communication connection with theservice gateway 104, and a receivingterminal 101 in communication connection with theIM platform 103;
theservice gateway 104 is configured to, when receiving first information sent by a sendingterminal 105 and a telephone number of a first information recipient, obtain first identification information and second identification information corresponding to the telephone number according to a pre-stored first relationship information table, encode the first information and the first identification information according to a preset encoding algorithm to obtain second information, obtain an IM platform access number corresponding to the second identification information according to a pre-stored second relationship information table, and send the second information and the IM platform access ID number to theIM platform 103; the first identification information is identification information of a user identity identification card pre-associated with a receiving terminal, and the second identification information is identification information of the receiving terminal;
theIM platform 103 is configured to send the second information to the receivingterminal 101 when receiving the second information and the IM platform access ID number, where the receivingterminal 101 corresponds to the IM platform access number;
the receivingterminal 101 is configured to, when receiving the second information sent by theIM platform 103, decode the second information according to a preset decoding algorithm to generate the first information and the first identification information, obtain a first identification code of a current subscriber identity module card in the receivingterminal 101, generate third identification information according to the first identification code, determine whether the first identification information and the third identification information are the same, and if the first identification information and the third identification information are the same, allow to receive the first information.
In one embodiment, thecommunication system 100 further comprises an addressingdevice 102 communicatively connected to the receivingterminal 101 and theservice gateway 104, respectively;
theservice gateway 104 is further configured to receive a registration request instruction sent by the receiving terminal before receiving the first information sent by the sendingterminal 105 and the telephone number of the first information receiver, and when receiving the first identification information and the second identification information sent by the receiving terminal, allocate a unique IM platform access ID number to the receivingterminal 101 according to the second identification information, send theIM platform 103 access ID number to the receivingterminal 101, associate the second identification information with the IM platform access ID number, store the second relationship information table, and send the second relationship information table to theservice gateway 104;
the receivingterminal 101 is further configured to send the first identification information and the second identification information to an addressingdevice 102 when receiving the IM platform access number sent by theIM platform 103;
the addressingdevice 102 is configured to, when receiving the first identification information and the second identification information, obtain a telephone number that matches the first identification information and the second identification information from a preset historical information database, associate the first identification information, the second identification information, and the telephone number, store the first identification information, the second identification information, and the telephone number in a first relationship information table, and send the first identification information and the second identification information to a service gateway.
In an embodiment, the receivingterminal 101 is further configured to, when detecting that a request instruction for registration is sent to the IM platform, obtain a second identification code of a current user identity card in the receivingterminal 101 and a feature code of the receiving terminal, generate corresponding first identification information and second identification information from the second identification code and the feature code, respectively, and send the first identification information and the second identification information to theIM platform 103.
Therefore, in the embodiment of the invention, when receiving the second information, the receiving terminal decodes the first information sent by the sending terminal and the identification information of the user identification card pre-associated with the receiving terminal, and verifies whether the identification information of the pre-associated user identification card is the same as the identification information of the current user identification card in the receiving terminal, so that whether the user identification card in the receiving terminal is invalid can be verified, and the first information is received when the user identification card is valid, so that the information communication safety can be improved.
EXAMPLE five
In this embodiment, a service gateway for preventing information leakage is provided, configured to execute the method steps in the second embodiment, as shown in fig. 5, aservice gateway 500 in this embodiment includes:
a first obtainingmodule 501, configured to, when receiving first information sent by a sending terminal and a phone number of a first information receiving party, obtain first identification information and second identification information corresponding to the phone number according to a pre-stored first relationship information table;
a second obtainingmodule 502, configured to encode the first information and the first identification information according to a preset encoding algorithm to obtain second information, and obtain an access number of an instant messaging IM platform corresponding to the second identification information according to a second relationship information table stored in advance;
a sendingmodule 503, configured to send the second information and the IM platform access ID number to an IM platform, so that the IM platform sends the second information to the receiving terminal.
In one embodiment, the illustratedservice gateway 500 further comprises:
afirst storage module 504, configured to store a second relationship information table sent by a service gateway when receiving the second relationship information table sent by a service gateway before receiving first information sent by a sending terminal and a telephone number of a first information receiving party; the second relation information table comprises the incidence relation between the second identification information and the IM platform access ID number;
asecond storage module 505, configured to store a first relationship information table sent by an addressing device when receiving the first relationship information table; wherein the first relationship information table includes an association relationship between the first identification information, the second identification information, and the telephone number.
Therefore, in the embodiment of the present invention, when receiving the first information sent by the sending terminal and the telephone number of the first information receiving party, the service gateway obtains the first identification information and the second identification information corresponding to the telephone number according to the pre-stored first relationship information table, and can encode the first information and the first identification information according to the preset encoding algorithm to obtain the second information and send the second information to the receiving terminal through the IM platform, so that the receiving terminal decodes the first information sent by the sending terminal and the identification information of the user identification card pre-associated with the receiving terminal when receiving the second information, and verifies whether the identification information of the pre-associated user identification card is the same as the identification information of the current user identification card in the receiving terminal, thereby verifying whether the user identification card in the receiving terminal is invalid, and the first information is received when the user identification card is valid, so that the information communication safety can be improved.
EXAMPLE six
The present embodiment provides a receiving terminal for preventing information leakage, configured to execute the method steps in the third embodiment, as shown in fig. 6, a receivingterminal 600 in the present embodiment includes:
thefirst generating module 601 is configured to, when receiving second information sent by the IM platform, decode the second information according to a preset decoding algorithm to generate first information and first identification information;
asecond generating module 602, configured to obtain a first identification code of a current user identity card in the receiving terminal, and generate third identification information according to the first identification code;
a determiningmodule 603, configured to determine whether the first identification information and the third identification information are the same;
an allowingmodule 604, configured to allow the first information to be received if the first information is the same as the second information.
In one embodiment, the receivingterminal 600 further comprises:
an obtainingmodule 605, configured to, before receiving the second information, obtain a second identification code of the current user id card in the receiving terminal and a feature code of the receiving terminal when detecting that a request instruction for registration is sent to the IM platform;
afirst sending module 606, configured to generate corresponding first identification information and second identification information from the second identification code and the feature code, and send the first identification information and the second identification information to the IM platform, so that the IM platform allocates a unique IM platform access ID number to the receiving terminal according to the second identification information, returns the IM platform access ID number to the receiving terminal, associates the second identification information and the IM platform access ID number, stores the second identification information and the IM platform access ID number in the second relationship information table, and sends the second identification information and the IM platform access ID number to a service gateway;
asecond sending module 607, configured to send the first identification information and the second identification information to an addressing device when receiving the IM platform access number sent by the IM platform, so that the addressing device obtains a phone number matched with the first identification information and the second identification information from a preset historical information database, associates the first identification information, the second identification information, and the phone number, stores the associated phone number in a first relationship information table, and sends the associated phone number to a service gateway.
Therefore, in the embodiment of the invention, when receiving the second information, the receiving terminal decodes the first information sent by the sending terminal and the identification information of the user identification card pre-associated with the receiving terminal, and verifies whether the identification information of the pre-associated user identification card is the same as the identification information of the current user identification card in the receiving terminal, so that whether the user identification card in the receiving terminal is invalid can be verified, and the first information is received when the user identification card is valid, so that the information communication safety can be improved.
It will be apparent to those skilled in the art that, for convenience and brevity of description, only the above-mentioned division of the functional units and modules is illustrated, and in practical applications, the above-mentioned functions may be distributed as different functional units and modules according to needs, that is, the internal structure of the apparatus may be divided into different functional units or modules to implement all or part of the above-mentioned functions. Each functional unit and module in the embodiments may be integrated in one processing unit, or each unit may exist alone physically, or two or more units are integrated in one unit, and the integrated unit may be implemented in a form of hardware, or in a form of software functional unit. In addition, specific names of the functional units and modules are only for convenience of distinguishing from each other, and are not used for limiting the protection scope of the present application. The specific working processes of the units and modules in the intelligent terminal may refer to the corresponding processes in the foregoing method embodiments, and are not described herein again.
In the above embodiments, the descriptions of the respective embodiments have respective emphasis, and reference may be made to the related descriptions of other embodiments for parts that are not described or illustrated in a certain embodiment.
Those of ordinary skill in the art will appreciate that the various illustrative elements and algorithm steps described in connection with the embodiments disclosed herein may be implemented as electronic hardware or combinations of computer software and electronic hardware. Whether such functionality is implemented as hardware or software depends upon the particular application and design constraints imposed on the implementation. Skilled artisans may implement the described functionality in varying ways for each particular application, but such implementation decisions should not be interpreted as causing a departure from the scope of the present invention.
In the embodiments provided in the present invention, it should be understood that the disclosed apparatus and method may be implemented in other ways. For example, the above-described embodiments of the apparatus are merely illustrative, and for example, the division of the above-described modules or units is only one type of division of logical functions, and there may be other divisions when actually implemented, for example, a plurality of units or components may be combined or integrated into another system, or some features may be omitted, or not executed. In addition, the shown or discussed mutual coupling or direct coupling or communication connection may be an indirect coupling or communication connection through some interfaces, devices or units, and may be in an electrical, mechanical or other form.
The units described as separate parts may or may not be physically separate, and parts displayed as units may or may not be physical units, may be located in one place, or may be distributed on a plurality of network units. Some or all of the units can be selected according to actual needs to achieve the purpose of the solution of the embodiment of the present invention.
In addition, functional units in the embodiments of the present invention may be integrated into one processing unit, or each unit may exist alone physically, or two or more units are integrated into one unit. The integrated unit can be realized in a form of hardware, and can also be realized in a form of a software functional unit.
The integrated unit may be stored in a computer-readable storage medium if it is implemented in the form of a software functional unit and sold or used as a separate product. Based on such understanding, all or part of the flow in the method according to the above embodiments may be implemented by a computer program, which may be stored in a computer-readable storage medium or multiple computer-readable storage media, and when the computer program is executed by a processor, the steps of the above method embodiments may be implemented. The computer program includes computer program code, and the computer program code may be in a source code form, an object code form, an executable file or some intermediate form. The computer readable medium may include: any entity or device capable of carrying the above-mentioned computer program code, recording medium, usb disk, removable hard disk, magnetic disk, optical disk, computer Memory, Read-Only Memory (ROM), Random Access Memory (RAM), electrical carrier wave signal, telecommunication signal, software distribution medium, etc. It should be noted that the computer readable medium described above may be suitably increased or decreased as required by legislation and patent practice in jurisdictions, for example, in some jurisdictions, computer readable media excludes electrical carrier signals and telecommunications signals in accordance with legislation and patent practice.
The above-mentioned embodiments are only used for illustrating the technical solutions of the present invention, and not for limiting the same; although the present invention has been described in detail with reference to the foregoing embodiments, it will be understood by those of ordinary skill in the art that: the technical solutions described in the foregoing embodiments may still be modified, or some technical features may be equivalently replaced; such modifications and substitutions do not substantially depart from the spirit and scope of the embodiments of the present invention, and are intended to be included within the scope of the present invention.