Secure Instant Messaging Method and System in Open and Untrustworthy Internet Environment

Abstract

The invention discloses a secure instant communication method in an open and untrustworthy Internet environment, comprising: a first client sends a request for communication with a second client to a server, and the server forwards the communication request to the second client; the second client The terminal returns the response of agreeing to the communication to the server, and the server forwards the response of agreeing to the communication to the first client; generates a session key between the first client and the second client; establishes a communication between the first client and the second client Communication link; the first client collects the original communication information and encapsulates the original communication information through a custom data format to obtain the encapsulated communication information; the first client encrypts the encapsulated communication information according to the session key to obtain encrypted communication information; the first The client sends the encrypted communication information to the second client; the second client decrypts the received encrypted communication information according to the session key to obtain encapsulated communication information.

Description

technical field [0001] The invention relates to an instant communication technology, in particular to a method and system for secure instant communication in an open and untrustworthy Internet environment. Background technique [0002] Currently, we are fast entering a new era of (mobile) Internet. Instant voice / video communication is an important foundation of the mobile Internet, and a large number of applications, such as "social networking, entertainment, shopping, leisure, finance", etc., are based on it. However, how to ensure the security (secrecy) of instant voice / video communication in an open and untrusted environment is still a key problem to be solved. [0003] At present, domestic mainstream instant messaging software, such as WeChat, QQ, and Lailian, etc., provide certain security and confidentiality functions, but they do not support communication parties to independently and dynamically negotiate session keys in an open and untrusted environment. In other w...

AI Technical Summary

Problems solved by technology

[0007] 1. The session key used in the encrypted communication process can only be generated by the server of the software provider. On the one hand, the user cannot negotiate the session key dynamically, autonomously and controllably; on the other hand, it also causes the session key itself, or even The security of the entire communication encryption process must depend on the security of the server, but the server is not absolutely reliable

[0008] 2. The user terminal needs to be specially modified, which is inconvenient to implement and requires additional costs

[0009] 3. An external mobile security device is required, but ordinary commercial mobile smart terminals do not have such devices, and users need to customize additionally, and the cost is high

Images