Encrypted instant messaging system and communication method for protecting data safety

Abstract

The invention discloses an encrypted instant messaging system and a communication method for protecting data safety. The communication system comprises a first client and a server. The first client comprises a first private account module used for storing a public key and a private key of a first user. A first contact account module is used for storing a public key of a second user. A first ECDH module is used for performing ECDH encryption on the private key of the first user and the public key of the second user to obtain a first secret key. A first AES module is used for performing AES encryption on the original information through a first secret key to obtain encrypted information. A first data transceiving module is used for sending the encrypted information to the server. The encrypted instant messaging system for protecting the data safety has the beneficial effects that all messages of the provided encrypted instant messaging system for protecting the data safety are asymmetrically encrypted. Only two parties participating in communication can know the messages. All encryption and decryption are completed at a user terminal, and a server cannot steal plaintext data of a user.

Description

technical field [0001] The invention relates to an encrypted instant communication system and a communication method for protecting data security. Background technique [0002] Most of the current mainstream instant messaging networks and applications use symmetric encryption (such as AES algorithm), the user's account is generated online, and the server hosts the user's password, so there are the following risk points: [0003] 1. The server actually controls the user's account password and can steal user data [0004] 2. The server hosts the user's password, and there may be a problem of cheating by the operator, resulting in data leakage [0005] 3. The server hosts user passwords, which may cause the risk of user accounts being stolen due to password database leaks or external credentialing [0006] 4. The client does not perform encryption, so if the packet is captured during the communication packet sending process, there will be hidden dangers of data leakage. Con...

AI Technical Summary

Problems solved by technology

[0004] 2. The server hosts the user's password, and there may be a problem of cheating by the operator, resulting in data leakage

[0005] 3. The server hosts user passwords, which may cause the risk of user accounts being stolen due to password database leaks or external credentialing

[0006] 4. The client does not perform encryption, so if the packet is captured during the communication packet sending process, there will be hidden dangers of data leakage

Images