Method for invoking password function in mobile terminal

Abstract

The invention discloses a method for invoking a password function in a mobile terminal. The method comprises that an application system server displays bar codes which comprise session identifier data or session association data to a user through an application system client; the user uses the mobile terminal which operates a password function program to scan the bar codes; the password function program in the mobile terminal obtains the session identifier data or the session association data from the scanned bar codes and builds connection with the application system server through the session identifier data or the session association data; and then the application system server invokes the password function in the mobile terminal through the password function program. Another method for invoking the password function in the mobile terminal comprises that the application system server returns the bar codes comprising password connection identifier data to the client; the application system server builds password function invoking connection with the password function program in the mobile terminal of a user through a password server; and then the application system server invokes the password function in the mobile terminal through password connection.

Description

technical field [0001] The invention belongs to the technical field of information security, in particular to a method for an application system server to invoke a password function in a mobile terminal. Background technique [0002] In order to solve the trouble of carrying USBKeys and the extra cost of using USBKeys, the applicant of this patent has proposed some password solutions based on mobile terminals, including: a portable password device based on mobile terminals (patent application number: 201410340474.0), a A cryptographic system based on mobile terminals (patent application number: 201410407715.9), a cryptographic data processing and interaction method based on mobile terminals in Web applications (patent application acceptance number: 201510196956.8), a cryptographic data processing and exchange based on mobile terminals Method (patent application number: 201510214649.8), a portable cryptographic system (patent application number: 201510745471.X). In some of t...

AI Technical Summary

Problems solved by technology

[0004] First, in a system that adopts the client / server (Client / Server) mode, if it is necessary to call the cryptographic function in the mobile terminal, all cryptographic function calls must go through the application server (application system server) -> application client terminal (client of the application system) -> password server (password intermediary system) -> mobile terminal, that is, the path must go through the application client every time, but if the processing result of the password call is finally submitted to the application server, then , each time through the application client in the user's computer is redundant;

[0005] Second, in some cases, it is much more troublesome and inefficient to call the cryptographic function on the application client side to cryptographically process the data than to directly call the cryptographic function on the application system server side. For example, suppose there is In a web mail system, the user is viewing an encrypted mail with attachments (such as files) in the mail system. In order to display the text and attachment information (such as file names) to the user through the client browser, the web mail system needs to first Decrypt part or all of the encrypted mail with attachments to obtain the text content and attachment information (such as the file name) to display to the user; if this decryption process is completed in the client browser, it will be very troublesome and efficient Low, because the code processing capability of the browser side is relatively weak, and there are few functions, and it is not advisable to download the entire email with attachments to the user's computer every time it is decrypted, and the efficiency is very low (because the user may not do not plan to download the attachments to the local), but it is easy and efficient if it is completed on the server side of the Web mail system, because the code processing capability of the server system is strong and the functions are rich, and the user only needs to download the attachments when needed

[0006] The above problems are summarized as follows: in some cases, it is redundant to call the password function in the mobile terminal every time through the application client, and in some cases, the application client calls the password function in the mobile terminal to complete the data encryption The processing is very troublesome and the efficiency is very low. Therefore, it is a universal requirement that the application system server can directly call the password function in the mobile terminal without going through the application client.

Images