Mobile terminal data leakage prevention method and device based on quantum security

Abstract

The embodiment of the invention provides a mobile terminal data anti-leakage method and device based on quantum security, and the method comprises the steps: encrypting a data request through a built-in quantum security shield of a mobile terminal, and transmitting the encrypted data request to a management and control data platform, the management and control data platform decrypts the encrypted data request through the quantum security shield, receives encrypted response data issued by the management and control data platform, processes the decrypted data request to generate response data, encrypts the response data through the quantum security shield to obtain encrypted response data, and sends the encrypted response data to the management and control data platform; the response data encrypted by the platform is decrypted through the quantum security shield to obtain the response data, so that attack and eavesdropping of an unauthorized third party are avoided in the data transmission process of the mobile terminal, and the security and integrity of the data in the transmission process are ensured.

Description

Technical Field

[0001] The present invention relates to the field of mobile terminal data security, and in particular to a method and device for preventing mobile terminal data leakage based on quantum security. Background Art

[0002] With the rapid development of mobile Internet technology and applications, the types and number of mobile terminal viruses are increasing year by year, and the speed of transmission is increasing exponentially, making mobile security issues increasingly complex. Various mobile office or industry applications based on mobile Internet technology have brought unprecedented and more complex new security threats.

[0003] When some of the company's core data is stored on employees' mobile phones, sensitive information on the phone may be leaked. For example, when interacting with the platform, core data is transmitted over the network and can be easily monitored or tampered with by hackers, leading to the leakage of core data.

[0004] In short, the existing technology cannot completely solve the problem of tracing the source of data leakage caused by browsing and storing data information on mobile devices. Therefore, it is necessary to avoid data leakage on mobile terminals without affecting the normal use of users. Summary of the invention

[0005] In view of the above problems, a method and device for preventing data leakage of a mobile terminal based on quantum security is proposed to overcome the above problems or at least partially solve the above problems, including:

[0006] A method for preventing data leakage in a mobile terminal based on quantum security, characterized in that the method comprises:

[0007] Encrypting the data request through the quantum security shield built into the mobile terminal, and sending the encrypted data request to the management and control data platform; wherein the management and control data platform decrypts the encrypted data request through the quantum security shield;

[0008] Receiving the encrypted response data sent by the control data platform; wherein the control data platform processes the decrypted data request to generate response data, and encrypts the response data through the quantum security shield to obtain the encrypted response data;

[0009] The encrypted response data is decrypted by the quantum security shield to obtain the response data.

[0010] Optionally, before encrypting the data request by the quantum security shield built into the mobile terminal and sending the encrypted data request to the management and control data platform, the method further includes:

[0011] In response to an activation operation by a user, encrypting user information and mobile terminal information through the quantum security shield;

[0012] Sending the encrypted user information and mobile terminal information to the management and control data platform; wherein the management and control data platform decrypts and verifies the encrypted user information and mobile terminal information through the quantum security shield;

[0013] In response to the verification being passed, a binding relationship between the mobile terminal and the management and control data platform is established.

[0014] Optionally, the establishing a binding relationship between the mobile terminal and the management and control data platform includes:

[0015] Establishing a long connection between the mobile terminal and the management and control data platform; wherein, before establishing the long connection between the mobile terminal and the management and control data platform, the management and control data platform establishes a corresponding relationship between user information and mobile terminal information.

[0016] Optionally, the method further comprises:

[0017] Receiving the encrypted control policy issued by the control data platform; wherein the control data platform encrypts the control policy through the quantum security shield;

[0018] Decrypting the encrypted control strategy through the quantum security shield;

[0019] The control strategy is executed, and the execution result is encrypted through the quantum security shield and sent to the control data platform.

[0020] Optionally, before receiving the encrypted control policy issued by the control data platform, the method further includes:

[0021] The login log and operation log of the mobile terminal are encrypted by the quantum security shield and sent to the management and control data platform.

[0022] Optionally, the management and control strategy includes at least one of a mobile terminal lock or unlock instruction, a mobile terminal logout instruction, a factory reset instruction, a data or application clear instruction, a USB permission shutdown instruction, and a camera shutdown instruction.

[0023] Optionally, the method further comprises:

[0024] The call recording of the mobile terminal is encrypted by the quantum security shield and uploaded to the management and control data platform.

[0025] Optionally, the quantum security shield is encrypted or decrypted by a quantum key, and the quantum key is generated by the quantum security shield through a quantum key distribution protocol.

[0026] Optionally, the method further comprises:

[0027] In the process of encrypting using a quantum key through the quantum security shield, an identifier is added to the encrypted data to identify the quantum key used for encryption.

[0028] Optionally, the user information includes user name information and user gender information, and the mobile terminal information includes mobile terminal model, mobile terminal product serial number and SIM card information.

[0029] A mobile terminal data leakage prevention device based on quantum security, characterized in that the device comprises:

[0030] A data request sending module, used to encrypt the data request through the quantum security shield built into the mobile terminal, and send the encrypted data request to the management and control data platform; wherein the management and control data platform decrypts the encrypted data request through the quantum security shield;

[0031] A response data receiving module, used to receive the encrypted response data sent by the control data platform; wherein the control data platform processes the decrypted data request to generate response data, and encrypts the response data through the quantum security shield to obtain the encrypted response data;

[0032] A response data decryption module is used to decrypt the encrypted response data through the quantum security shield to obtain the response data.

[0033] An electronic device comprises a processor, a memory and a computer program stored in the memory and capable of running on the processor, wherein when the computer program is executed by the processor, the method for preventing data leakage of a mobile terminal based on quantum security as described above is implemented.

[0034] A readable storage medium stores a computer program, and when the computer program is executed by a processor, the method for preventing data leakage of a mobile terminal based on quantum security as described above is implemented.

[0035] The embodiments of the present invention have the following advantages:

[0036] In an embodiment of the present invention, a data request is encrypted by a quantum security shield built into a mobile terminal, and the encrypted data request is sent to a management and control data platform; the management and control data platform decrypts the encrypted data request by the quantum security shield, receives the encrypted response data sent by the management and control data platform, processes the decrypted data request, generates response data, encrypts the response data by the quantum security shield, obtains the encrypted response data, and decrypts the encrypted response data by the quantum security shield to obtain the response data, thereby encrypting the data in the interaction process between the mobile terminal and the management and control data platform by the quantum security shield, avoiding attacks and eavesdropping by unauthorized third parties, thereby ensuring the security and integrity of the data during transmission, that is, meeting the high security requirements of the mobile terminal during data transmission, and also ensuring the data privacy of the mobile terminal device. BRIEF DESCRIPTION OF THE DRAWINGS

[0037] In order to more clearly illustrate the technical solution of the present invention, the accompanying drawings required for use in the description of the present invention will be briefly introduced below. Obviously, the accompanying drawings in the following description are only some embodiments of the present invention. For ordinary technicians in this field, other accompanying drawings can be obtained based on these accompanying drawings without paying creative labor.

[0038] Figure 1 It is a flowchart of a method for preventing data leakage of a mobile terminal based on quantum security provided by some embodiments of the present invention;

[0039] Figure 2 It is a workflow diagram of a human-machine card authentication provided by some embodiments of the present invention;

[0040] Figure 3 It is a structural block diagram of a device for preventing data leakage of a mobile terminal based on quantum security provided by some embodiments of the present invention;

[0041] Figure 4 It is a flow chart of data interaction between a management and control data platform and a mobile terminal provided by some embodiments of the present invention;

[0042] Figure 5 is a flow chart of a control data platform and a mobile terminal state switching provided by some embodiments of the present invention;

[0043] Figure 6 It is a structural block diagram of a device for preventing data leakage of a mobile terminal based on quantum security provided by some embodiments of the present invention. DETAILED DESCRIPTION

[0044] In order to make the above-mentioned purposes, features and advantages of the present invention more obvious and easy to understand, the present invention is further described in detail below in conjunction with the accompanying drawings and specific embodiments. Obviously, the described embodiments are part of the embodiments of the present invention, rather than all the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0045] With the rapid development of mobile Internet technology and applications, the types and number of mobile terminal viruses are increasing year by year, and the speed of transmission is increasing exponentially, making mobile security issues increasingly complex. Various mobile office or industry applications based on mobile Internet technology have brought unprecedented and more complex new security threats.

[0046] In terms of applications, illegal applications may be installed on mobile terminal devices actively or passively, or users may use non-compliant applications through unconventional means, causing Trojans to be implanted in the applications, thereby causing core data to be leaked.

[0047] In terms of identity, users are required to perform separate identity authentication when using applications integrated in the system, which will lead to certain security risks such as identity data leakage.

[0048] In short, existing technologies cannot completely solve the problem of tracing the source of leaks caused by browsing and storing data information on mobile devices.

[0049] In some embodiments of the present invention, a control policy for a mobile terminal is issued through a control data platform, and the mobile terminal executes the control policy to perform operations such as data clearing, thereby avoiding the problem of leakage of core data stored in the mobile terminal.

[0050] In some embodiments of the present invention, identity information is encrypted by a quantum security shield built into a mobile terminal device and sent to a management and control data platform, which decrypts it through the quantum security shield for authentication, thereby avoiding the security risk of identity data leakage.

[0051] Reference Figure 1 , shows a flowchart of a method for preventing data leakage of a mobile terminal based on quantum security provided by some embodiments of the present invention, which may specifically include the following steps:

[0052] Step 101: encrypt a data request through a quantum security shield built into a mobile terminal, and send the encrypted data request to a management and control data platform; wherein the management and control data platform decrypts the encrypted data request through the quantum security shield.

[0053] During the interaction between the mobile terminal and the management and control data platform, all data transmission and reception are encrypted and decrypted through the built-in quantum security shield in the customized terminal device.

[0054] Specifically, when a mobile terminal needs to request data from the management and control data platform, the data request can be encrypted through the built-in quantum security shield of the mobile terminal, and then the encrypted data request is sent to the management and control data platform. After receiving the encrypted data request sent by the mobile terminal, the management and control data platform decrypts the encrypted data request through the quantum security shield.

[0055] In actual applications, mobile terminals can be customized mobile phones, tablets and other electronic devices, which have built-in quantum security shield components. The quantum security shield component can be an APP (Application) that runs in the background during the use of the mobile terminal. Moreover, the mobile terminal can set up dual systems to separate the system used for personal life and the work system to prevent sensitive data from being transmitted and leaked across systems. The management and control data platform can be an MXM (Mobile eXtension Module) platform that integrates multiple functions. The MXM platform is a platform developed by China Telecom, which can provide various services as a server, such as data processing and business logic implementation.

[0056] In some embodiments of the present invention, before encrypting the data request by the built-in quantum security shield of the mobile terminal and sending the encrypted data request to the management and control data platform, the method further includes:

[0057] Sub-step 11, in response to the user's activation operation, encrypting the user information and the mobile terminal information through the quantum security shield.

[0058] When a user uses a mobile terminal for the first time, he or she can operate the quantum security shield, enter user information, and then encrypt the user information and mobile terminal information through the quantum security shield. The user information and mobile terminal information can be called authentication information.

[0059] It should be noted that the Quantum Security Shield only operates when the mobile terminal is turned on for the first time for activation. When the mobile terminal is used at other times, it will remain active in the background of the mobile terminal.

[0060] Sub-step 12, sending the encrypted user information and mobile terminal information to the management and control data platform; wherein the management and control data platform decrypts and verifies the encrypted user information and mobile terminal information through the quantum security shield.

[0061] After encrypting the user information and mobile terminal information through the quantum security shield, that is, after encrypting the authentication information, the encrypted authentication information can be sent to the management and control data platform through a short connection. After receiving the encrypted authentication information, the management and control data platform decrypts the encrypted authentication information through the quantum security shield, that is, decrypts the encrypted user information and mobile terminal information, obtains the user information and mobile terminal information, and then the management and control data platform verifies by entering the user information and mobile terminal information in advance.

[0062] Sub-step 13, in response to the verification being passed, establishing a binding relationship between the mobile terminal and the management and control data platform.

[0063] After verification, the mobile terminal will be bound to the management and control data platform.

[0064] In one example, as shown in the attached Figure 2 As shown, a workflow diagram of a human-machine card authentication provided by some embodiments of the present invention is shown. The quantum security shield sends the authentication information to the control data platform, receives the authentication result returned by the control data platform, and stores the authentication information verified by the control data platform. When the device is offline, such as when the mobile terminal device is in an environment without a network, the user login can be verified or authenticated through the stored authentication information to use the mobile terminal device normally.

[0065] In some embodiments of the present invention, the user information includes user name information and user gender information, and the mobile terminal information includes mobile terminal model, mobile terminal product serial number and SIM (Subscriber Identity Module) card information.

[0066] In some embodiments of the present invention, the establishing of a binding relationship between the mobile terminal and the management and control data platform includes:

[0067] Establishing a long connection between the mobile terminal and the management and control data platform; wherein, before establishing the long connection between the mobile terminal and the management and control data platform, the management and control data platform establishes a corresponding relationship between user information and mobile terminal information.

[0068] The management and control data platform configures a listener through a specific network programming framework to receive incoming connection requests. The network programming framework can be Netty (an asynchronous event-driven network application framework).

[0069] At the TCP / IP (Transmission Control Protocol / Internet Protocol) level, the management and control data platform uses the bind operation to listen for connection requests on a specific port and wait for connection requests from mobile terminals.

[0070] The client initiates a connection request, and the management and control data platform accepts and establishes a long connection. This process involves the TCP three-way handshake to confirm that both parties are ready to start communication.

[0071] After the mobile terminal establishes a long connection with the management and control data platform, the specific protocols used for communication can be negotiated, such as HTTP (Hypertext Transfer Protocol), WebSocket (a protocol for full-duplex communication on a single TCP connection), etc., to determine the format and rules for data exchange.

[0072] In one example, in terms of active maintenance of long connections, timed heartbeat messages or other maintenance mechanisms can be encrypted using quantum security shields to ensure security. These messages can prevent unauthorized visitors from interfering with the connection status. In terms of exception handling and long connection closure, when communication ends or an exception occurs, quantum security shields can be used to clean up related resources and safely close long connections to prevent data leakage or unauthorized access.

[0073] In addition, after the management and control data platform verifies the user information and mobile terminal information sent by the mobile terminal, before establishing a long connection between the mobile terminal and the management and control data platform, the management and control data platform establishes a correspondence between the user information and the mobile terminal information, that is, establishes a correspondence between the user information, mobile terminal device information and the SIM card in the mobile terminal, thereby generating a correspondence between the human-machine card.

[0074] Step 102, receiving the encrypted response data sent by the control data platform; wherein the control data platform processes the decrypted data request to generate response data, and encrypts the response data through the quantum security shield to obtain the encrypted response data.

[0075] The quantum security shield can ensure that the decrypted data is consistent with the original data sent and has not been tampered with, that is, it verifies the data.

[0076] After obtaining the decrypted data request, the management and control data platform can verify the integrity and legitimacy of the decrypted data request before executing the business logic. After the verification is completed, the data request is parsed, which may include basic data formatting (such as byte stream to text conversion) or more complex protocol parsing (such as JSON or custom protocol). Then, the parsed data request will be passed to the business logic processing module, which can perform specific operations or responses based on the content of the data request. For example, execute database queries, file operations, or other computing tasks according to the received instructions.

[0077] After the business logic processing module is processed, the control data platform will generate response data. The response can be a success or failure status information, or it can contain specific data response. Then, the control data platform can encrypt the response data through the quantum security shield and obtain the encrypted response data, thereby ensuring the confidentiality and security of the data during transmission.

[0078] Finally, the management and control data platform sends the encrypted response data to the mobile terminal.

[0079] Step 103: decrypt the encrypted response data by using the quantum security shield to obtain the response data.

[0080] After receiving the encrypted response data, the mobile terminal can decrypt the encrypted response data through the quantum security shield to obtain the response data.

[0081] In some embodiments of the present invention, the method further comprises:

[0082] The call recording of the mobile terminal is encrypted by the quantum security shield and uploaded to the management and control data platform.

[0083] Mobile terminals can automatically encrypt call recordings through the quantum security shield and securely upload them to the management and control data platform for storage and subsequent review and management, thereby ensuring that the content of the call recordings is not tampered with or leaked.

[0084] In one example, a recording encryption policy can be manually configured, such as for some people or all people, and then all call recordings of mobile terminals under the policy can be encrypted through the quantum security shield.

[0085] In some embodiments of the present invention, the quantum security shield is encrypted or decrypted by a quantum key, and the quantum key is generated by the quantum security shield through a quantum key distribution protocol.

[0086] Specifically, the quantum security shield built into the mobile terminal can adapt to the quantum key distribution network, so that the quantum key generated by the quantum key distribution protocol can be QKD (Quantum Key Distribution), and then the quantum security shield can encrypt or decrypt data through the quantum key. In addition, a quantum random number generator is integrated in the quantum security shield. The generator provides a true random number every time a quantum key or initialization vector is needed, ensuring that the random number part of the encryption algorithm has high security. These random numbers are used to generate quantum keys, initialization vectors, etc. to prevent potential security risks caused by pseudo-random numbers.

[0087] As an example, before data transmission, the mobile terminal can use the quantum key generated by the quantum key distribution technology through the quantum security shield to encrypt the data. The specific operations include: when the mobile terminal initiates a data request, the request data can be encrypted using the quantum key generated by QKD; after the control data platform receives the data, the data can be decrypted using the same quantum key. The response data can also be encrypted with the quantum key and sent back to the mobile terminal.

[0088] In some embodiments of the present invention, the method further comprises:

[0089] In the process of encrypting using a quantum key through the quantum security shield, an identifier is added to the encrypted data to identify the quantum key used for encryption.

[0090] The mobile terminal can add an identifier to the encrypted data during the process of encrypting with the quantum key through the quantum security shield to identify the quantum key used for encryption. Similarly, the management and control data platform can also add an identifier to the encrypted data during the process of encrypting with the quantum key through the quantum security shield.

[0091] In practical applications, each complete interaction between the mobile terminal and the management and control data platform uses a different quantum key for encryption or decryption, that is, the quantum key is updated for each interaction. Therefore, an identifier can be added to the encrypted data, which can be a timestamp or a serial number to identify the quantum key used for encryption, and then the corresponding quantum key can be used for decryption.

[0092] The entire data transmission process from the sender to the receiver is protected by quantum security technology. Specifically, there are four points:

[0093] 1. Quantum-safe encryption:

[0094] Quantum Key Distribution (QKD): Generate quantum keys using protocols such as BB84. The sender and receiver exchange quantum states through a quantum channel to establish a shared key.

[0095] Quantum encryption algorithm: Use shared keys to encrypt data, such as combining quantum keys with traditional symmetric encryption algorithms to protect data.

[0096] 2. End-to-end encryption:

[0097] Application layer encryption: The application at the sending end encrypts the data using the quantum key and sends the encrypted data packet into the network.

[0098] Data protection: Even if data is forwarded through multiple intermediate nodes, all nodes only process encrypted data and do not decrypt it, ensuring the privacy of data during transmission.

[0099] 3. Continuous monitoring:

[0100] Quantum state monitoring: monitor changes in quantum states in quantum channels, such as interference in entangled states or measurement of quantum bits, to detect potential eavesdropping or attacks in real time.

[0101] Security alerts: If anomalies or potential attacks are detected, the system will issue an alert and take further measures to protect data security.

[0102] 4. Decryption and integrity check:

[0103] Decryption process: The receiving end uses the quantum key to decrypt the data and restore the original data.

[0104] Integrity verification: Ensure that data has not been tampered with during transmission through digital signatures or hash verification, and verify the integrity of the data. This end-to-end quantum security technology provides strong protection against future quantum computing threats that traditional encryption methods may face.

[0105] In an embodiment of the present invention, a data request is encrypted by a quantum security shield built into a mobile terminal, and the encrypted data request is sent to a management and control data platform; the management and control data platform decrypts the encrypted data request by the quantum security shield, receives the encrypted response data sent by the management and control data platform, processes the decrypted data request, generates response data, encrypts the response data by the quantum security shield, obtains the encrypted response data, and decrypts the encrypted response data by the quantum security shield to obtain the response data, thereby encrypting the data in the interaction process between the mobile terminal and the management and control data platform by the quantum security shield, avoiding attacks and eavesdropping by unauthorized third parties, thereby ensuring the security and integrity of the data during transmission, that is, meeting the high security requirements of the mobile terminal during data transmission, and also ensuring the data privacy of the mobile terminal device.

[0106] Reference Figure 3, shows a flowchart of another method for preventing data leakage of a mobile terminal based on quantum security provided by some embodiments of the present invention, which may specifically include the following steps:

[0107] Step 301, receiving the encrypted control policy issued by the control data platform; wherein the control data platform encrypts the control policy through the quantum security shield.

[0108] When the control data platform needs to control the mobile terminal, the control strategy can be encrypted through the quantum security shield and sent to the mobile terminal.

[0109] In some embodiments of the present invention, before receiving the encrypted control policy issued by the control data platform, the method includes:

[0110] The login log and operation log of the mobile terminal are encrypted by the quantum security shield and sent to the management and control data platform.

[0111] Before receiving the encrypted control policy issued by the control data platform, the mobile terminal can encrypt each login log and related operation log through the quantum security shield, and then report the encrypted login log and related operation log to the control data platform.

[0112] After receiving the encrypted login log and related operation log, the management and control data platform can decrypt them through the quantum security shield for administrators to query. After discovering an abnormality, the administrator can operate on the web page of the management and control data platform and issue management and control policies to control the mobile terminal.

[0113] In some embodiments of the present invention, the management and control strategy includes at least one of a mobile terminal lock or unlock instruction, a mobile terminal logout instruction, a factory reset instruction, a data or application clear instruction, a USB permission shutdown instruction, and a camera shutdown instruction.

[0114] The control policy issued by the control data platform to the mobile terminal may be an operation instruction to the mobile terminal, and the operation instruction may be at least one of a mobile terminal lock or unlock instruction, a mobile terminal logout instruction, a factory reset instruction, a data or application clear instruction, a USB permission shutdown instruction, and a camera shutdown instruction.

[0115] The above-mentioned operation instructions are some examples of the operation instructions corresponding to the control policies issued by the control data platform in the present invention, and do not mean that there are only these operation instructions.

[0116] As an example, when a mobile terminal needs to prevent data infiltration, an electronic fence can be used and a control policy can be issued to the mobile terminal to prohibit the mobile terminal from using the camera and microphone in the controlled area, and to limit USB control and shield file transfer functions. The control policy at this time includes a command to turn off the camera, turn off the microphone, turn off the USB permission, and turn off the file transfer.

[0117] Step 302: decrypt the encrypted control policy through the quantum security shield.

[0118] After receiving the encrypted control policy issued by the control data platform, the mobile terminal decrypts the encrypted control policy through the quantum security shield to obtain the corresponding control policy.

[0119] Step 303: execute the control strategy, encrypt the execution result through the quantum security shield, and send it to the control data platform.

[0120] After obtaining the corresponding control strategy, execute the control strategy, such as completing the data clearing instruction of the control data platform to realize the remote data clearing operation of the control data platform, or closing the USB permission, closing the camera permission, etc. After executing the control strategy, the corresponding execution result is encrypted by the quantum security shield and reported to the control data platform. The execution result may include the success or failure of closing the USB permission, the success or failure of closing the camera permission, the success or failure of data clearing, or the progress of data clearing, etc.

[0121] In one example, through the above-mentioned technical solution of the present invention, the full life cycle management of mobile terminals can be realized, and the full life cycle remote management of mobile terminals, applications and data can be realized, including remote clearing of applications and data, restoring factory settings and other operations, thereby ensuring device security and data privacy.

[0122] As an example, the attached Figure 4 As shown, a flow chart of data interaction between a control data platform and a mobile terminal provided by some embodiments of the present invention is shown. The control data platform can encrypt data through a quantum security shield. The control strategy is essentially also data. After obtaining the encrypted data returned by the quantum security shield, the control data platform sends the encrypted data to the mobile terminal. After receiving the encrypted data, the mobile terminal can decrypt it through the quantum security shield and respond to the decrypted data to obtain response data. Then, the mobile terminal can encrypt the response data through the quantum security shield and return the encrypted response data returned by the quantum security shield to the control data platform. The control data platform decrypts the encrypted response data through the quantum security shield to obtain the response data, thereby completing a complete interaction between the control data platform and the mobile terminal.

[0123] In an embodiment of the present invention, a data request is encrypted by a quantum security shield built into a mobile terminal, and the encrypted data request is sent to a management and control data platform; the management and control data platform decrypts the encrypted data request by the quantum security shield, receives the encrypted response data sent by the management and control data platform, processes the decrypted data request, generates response data, encrypts the response data by the quantum security shield, obtains the encrypted response data, and decrypts the encrypted response data by the quantum security shield to obtain the response data, thereby encrypting the data in the interaction process between the mobile terminal and the management and control data platform by the quantum security shield, avoiding attacks and eavesdropping by unauthorized third parties, thereby ensuring the security and integrity of the data during transmission, that is, meeting the high security requirements of the mobile terminal during data transmission, and also ensuring the data privacy of the mobile terminal device.

[0124] In practical applications, see Appendix Figure 5 , is a flow chart of a state switching of a control data platform and a mobile terminal provided by some embodiments of the present invention, in order to enable those skilled in the art to better understand the above content, the following is combined with the attached Figure 5 The embodiments of the present invention are described exemplarily, but it should be understood that the embodiments of the present invention are not limited thereto.

[0125] Combined with Figure 5 , you can follow from top to bottom, Figure 5 The content is divided into three parts: the registration part, that is, the user activation part, the offline online judgment part and the state switching part.

[0126] 1. Registration part (i.e. activation operation part)

[0127] 1. When operating a mobile terminal for the first time, generate a summary (i.e. authentication information) through the Quantum Security Shield APP and send a registration request to the MXM platform (i.e. the management and control data platform) for activation;

[0128] 2. The MXM platform authenticates the authentication information through the pre-stored user information, the SN (Serial Number) number of the mobile terminal device and the SIM card number, i.e. verification;

[0129] 3. After the verification is passed, the MXM platform generates the correspondence between the human-machine card and the mobile terminal device, and updates the status of the mobile terminal device from unregistered to registered;

[0130] 4. The MXM platform generates a summary of the response result and returns it to the Quantum Security Shield APP on the mobile terminal to authenticate the response result, that is, verify the response result, thereby completing the registration part, that is, the activation operation of the mobile terminal.

[0131] 2. Offline and online judgment part

[0132] 1. The Quantum Security Shield APP will be kept alive in the background of the mobile terminal, so it will send a heartbeat message to the MXM platform every 30 seconds to maintain the user's online status;

[0133] 2. After receiving the heartbeat message, the MXM platform authenticates the heartbeat message, that is, verifies the heartbeat message;

[0134] 3. The MXM platform updates the latest heartbeat time and updates the online status of the user's mobile terminal;

[0135] 4. The MXM platform generates a summary of the response result and returns it to the Quantum Security Shield APP on the mobile terminal. The Quantum Security Shield APP authenticates the response result, that is, verifies the response result, and returns the event to the MXM platform;

[0136] 5. If the MXM platform fails to receive the heartbeat information sent by the quantum security shield of the mobile terminal for more than 5 times, the user's status will be updated to offline.

[0137] 3. State switching part

[0138] 1. The MXM web terminal initiates a logout (login / logout) / lock / unlock request for the mobile terminal, i.e., a control operation event for the mobile terminal on the web terminal;

[0139] 2. The MXM platform updates the user status to the status corresponding to the corresponding control operation;

[0140] 3. The MXM platform adds the control operation to the generated event queue and returns the information to the MXM web terminal;

[0141] 4. The MXM platform obtains events (i.e., control strategies) from the queue, generates a summary (i.e., information containing the control strategies), and sends it to the Quantum Security Shield APP on the mobile terminal;

[0142] 5. The mobile terminal authenticates the received information through the Quantum Security Shield APP, that is, verifies the corresponding information, and then executes the event (i.e., the control strategy);

[0143] 6. The mobile terminal returns the execution result of the event to the MAM platform through the Quantum Security Shield APP. The MXM platform authenticates the returned execution result, that is, verifies it, and then updates the event execution result.

[0144] It should be noted that, for the sake of simplicity, the method embodiments are described as a series of action combinations, but those skilled in the art should be aware that the embodiments of the present invention are not limited by the order of the actions described, because according to the embodiments of the present invention, certain steps can be performed in other orders or simultaneously. Secondly, those skilled in the art should also be aware that the embodiments described in the specification are all preferred embodiments, and the actions involved are not necessarily required by the embodiments of the present invention.

[0145] Reference Figure 6 , shows a schematic diagram of the structure of a device for a method for preventing data leakage of a mobile terminal based on quantum security provided by some embodiments of the present invention, which may specifically include the following modules:

[0146] The data request sending module 601 is used to encrypt the data request through the quantum security shield built into the mobile terminal, and send the encrypted data request to the management and control data platform; wherein the management and control data platform decrypts the encrypted data request through the quantum security shield;

[0147] A response data receiving module 602 is used to receive the encrypted response data sent by the control data platform; wherein the control data platform processes the decrypted data request to generate response data, and encrypts the response data through the quantum security shield to obtain the encrypted response data;

[0148] The response data decryption module 603 is used to decrypt the encrypted response data through the quantum security shield to obtain the corresponding data.

[0149] In one embodiment of the present invention, before encrypting the data request by the quantum security shield built into the mobile terminal and sending the encrypted data request to the management and control data platform, it also includes:

[0150] An authentication information encryption module, used to encrypt user information and mobile terminal information through the quantum security shield in response to an activation operation by the user;

[0151] A serious information sending module is used to send the encrypted user information and mobile terminal information to the management and control data platform; wherein the management and control data platform decrypts and verifies the encrypted user information and mobile terminal information through the quantum security shield;

[0152] The binding module is used to establish a binding relationship between the mobile terminal and the management and control data platform in response to the verification being passed.

[0153] In one embodiment of the present invention, the binding module includes:

[0154] The long connection establishment submodule is used to establish a long connection between the mobile terminal and the management and control data platform; wherein, before establishing the long connection between the mobile terminal and the management and control data platform, the management and control data platform establishes a correspondence between user information and mobile terminal information.

[0155] In one embodiment of the present invention, the device further comprises:

[0156] A control strategy receiving module, used to receive the encrypted control strategy issued by the control data platform; wherein the control data platform encrypts the control strategy through the quantum security shield;

[0157] A control policy decryption module, used to decrypt the encrypted control policy through the quantum security shield;

[0158] A control strategy execution module is used to execute the control strategy, encrypt the execution result through the quantum security shield, and send it to the control data platform.

[0159] In one embodiment of the present invention, before receiving the encrypted control policy issued by the control data platform, the method further includes:

[0160] The log sending module is used to encrypt the login log and operation log of the mobile terminal through the quantum security shield and send them to the management and control data platform.

[0161] In one embodiment of the present invention, the management and control strategy includes at least one of a mobile terminal lock or unlock instruction, a mobile terminal logout instruction, a factory reset instruction, a data or application clear instruction, a USB permission shutdown instruction, and a camera shutdown instruction.

[0162] In one embodiment of the present invention, the device further comprises:

[0163] A call recording uploading module is used to encrypt the call recording of the mobile terminal through the quantum security shield and upload it to the management and control data platform.

[0164] In one embodiment of the present invention, the quantum security shield is encrypted or decrypted by a quantum key, and the quantum key is generated by the quantum security shield through a quantum key distribution protocol.

[0165] In one embodiment of the present invention, the device further comprises:

[0166] The identifier adding module is used to add an identifier to the encrypted data during the process of encrypting with the quantum key through the quantum security shield to identify the quantum key used for encryption.

[0167] In an embodiment of the present invention, the user information includes user name information and user gender information, and the mobile terminal information includes mobile terminal model, mobile terminal product serial number and SIM card information.

[0168] In an embodiment of the present invention, a data request is encrypted by a quantum security shield built into a mobile terminal, and the encrypted data request is sent to a management and control data platform; the management and control data platform decrypts the encrypted data request by the quantum security shield, receives the encrypted response data sent by the management and control data platform, processes the decrypted data request, generates response data, encrypts the response data by the quantum security shield, obtains the encrypted response data, and decrypts the encrypted response data by the quantum security shield to obtain the response data, thereby encrypting the data in the interaction process between the mobile terminal and the management and control data platform by the quantum security shield, avoiding attacks and eavesdropping by unauthorized third parties, thereby ensuring the security and integrity of the data during transmission, that is, meeting the high security requirements of the mobile terminal during data transmission, and also ensuring the data privacy of the mobile terminal device.

[0169] An embodiment of the present invention also provides an electronic device, including a processor, a memory, and a computer program stored in the memory and capable of running on the processor, wherein when the computer program is executed by the processor, the method for preventing data leakage of a mobile terminal based on quantum security as described above is implemented.

[0170] An embodiment of the present invention further provides a readable storage medium, on which a computer program is stored. When the computer program is executed by a processor, the audio and video recording method based on quantum key as described above is implemented.

[0171] As for the device embodiment, since it is basically similar to the method embodiment, the description is relatively simple, and the relevant parts can be referred to the partial description of the method embodiment.

[0172] It should be noted that the user information (including but not limited to user device information, user personal information, etc.) and data (including but not limited to data used for analysis, stored data, displayed data, etc.) involved in this application are all information and data authorized by the user or fully authorized by all parties, and the collection, use and processing of relevant data must comply with the relevant laws, regulations and standards of the relevant countries and regions, and provide corresponding operation entrances for users to choose to authorize or refuse.

[0173] The various embodiments in this specification are described in a progressive manner, and each embodiment focuses on the differences from other embodiments. The same or similar parts between the various embodiments can be referenced to each other.

[0174] Those skilled in the art will appreciate that the embodiments of the present invention may be provided as methods, devices, or computer program products. Therefore, the embodiments of the present invention may take the form of a complete hardware embodiment, a complete software embodiment, or an embodiment combining software and hardware. Moreover, the embodiments of the present invention may take the form of a computer program product implemented on one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) containing computer-usable program codes.

[0175] The embodiments of the present invention are described with reference to the flowcharts and / or block diagrams of the methods, terminal devices (systems), and computer program products according to the embodiments of the present invention. It should be understood that each process and / or block in the flowchart and / or block diagram, as well as the combination of the processes and / or blocks in the flowchart and / or block diagram, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, an embedded processor, or other programmable data processing terminal device to generate a machine, so that the instructions executed by the processor of the computer or other programmable data processing terminal device generate instructions for implementing the processes in the flowchart and / or block diagram. Figure 1 A process or multiple processes and / or boxes Figure 1 A device that provides the functions specified in a block or multiple blocks.

[0176] These computer program instructions may also be stored in a computer-readable memory capable of directing a computer or other programmable data processing terminal device to operate in a specific manner, so that the instructions stored in the computer-readable memory produce a manufactured product including an instruction device, which implements the process Figure 1 A process or multiple processes and / or boxes Figure 1 A function specified in one or more boxes.

[0177] These computer program instructions can also be loaded onto a computer or other programmable data processing terminal device so that a series of operating steps are executed on the computer or other programmable terminal device to produce a computer-implemented process, thereby providing instructions for executing on the computer or other programmable terminal device to implement the process. Figure 1 A process or multiple processes and / or boxes Figure 1 The steps for the functions specified in one or more boxes.

[0178] Although the preferred embodiments of the present invention have been described, those skilled in the art may make additional changes and modifications to these embodiments once they have learned the basic creative concept. Therefore, the appended claims are intended to be interpreted as including the preferred embodiments and all changes and modifications that fall within the scope of the embodiments of the present invention.

[0179] Finally, it should be noted that, in this article, relational terms such as first and second, etc. are only used to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any such actual relationship or order between these entities or operations. Moreover, the terms "include", "comprise" or any other variants thereof are intended to cover non-exclusive inclusion, so that a process, method, article or terminal device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, article or terminal device. In the absence of further restrictions, the elements defined by the sentence "including one..." do not exclude the existence of other identical elements in the process, method, article or terminal device including the above elements.

[0180] The above is a detailed introduction to a method and device for preventing data leakage in a mobile terminal based on quantum security. Specific examples are used in this article to illustrate the principles and implementation methods of the present invention. The description of the above embodiments is only used to help understand the method of the present invention and its core idea. At the same time, for those skilled in the art, according to the idea of ​​the present invention, there will be changes in the specific implementation method and application scope. In summary, the content of this specification should not be understood as a limitation on the present invention.

Claims

1. A method for preventing data leakage in a mobile terminal based on quantum security, characterized in that: The method comprises: Encrypting the data request through the quantum security shield built into the mobile terminal, and sending the encrypted data request to the management and control data platform; wherein the management and control data platform decrypts the encrypted data request through the quantum security shield; Receiving the encrypted response data sent by the control data platform; wherein the control data platform processes the decrypted data request to generate response data, and encrypts the response data through the quantum security shield to obtain the encrypted response data; The encrypted response data is decrypted by the quantum security shield to obtain the response data.

2. The method according to claim 1, characterized in that Before encrypting the data request by the quantum security shield built into the mobile terminal and sending the encrypted data request to the management and control data platform, the method further includes: In response to an activation operation by a user, encrypting user information and mobile terminal information through the quantum security shield; Sending the encrypted user information and mobile terminal information to the management and control data platform; wherein the management and control data platform decrypts and verifies the encrypted user information and mobile terminal information through the quantum security shield; In response to the verification being passed, a binding relationship between the mobile terminal and the management and control data platform is established.

3. The method according to claim 2, characterized in that The establishing of a binding relationship between the mobile terminal and the management and control data platform includes: Establishing a long connection between the mobile terminal and the management and control data platform; wherein, before establishing the long connection between the mobile terminal and the management and control data platform, the management and control data platform establishes a corresponding relationship between user information and mobile terminal information.

4. The method according to claim 1, characterized in that The method further comprises: Receiving the encrypted control policy issued by the control data platform; wherein the control data platform encrypts the control policy through the quantum security shield; Decrypting the encrypted control strategy through the quantum security shield; The control strategy is executed, and the execution result is encrypted through the quantum security shield and sent to the control data platform.

5. The method according to claim 4, characterized in that Before receiving the encrypted control policy issued by the control data platform, the method includes: The login log and operation log of the mobile terminal are encrypted by the quantum security shield and sent to the management and control data platform.

6. The method according to claim 4, characterized in that The management and control strategy includes at least one of a mobile terminal lock or unlock instruction, a mobile terminal logout instruction, a factory reset instruction, a data or application clear instruction, a USB permission shutdown instruction, and a camera shutdown instruction.

7. The method according to claim 1, characterized in that The method further comprises: The call recording of the mobile terminal is encrypted by the quantum security shield and uploaded to the management and control data platform.

8. The method according to any one of claims 1 to 7, characterized in that: The quantum security shield is encrypted or decrypted by a quantum key, and the quantum key is generated by the quantum security shield through a quantum key distribution protocol.

9. The method according to claim 7, characterized in that: The method further comprises: In the process of encrypting using a quantum key through the quantum security shield, an identifier is added to the encrypted data to identify the quantum key used for encryption.

10. The method according to claim 2, characterized in that The user information includes user name information and user gender information, and the mobile terminal information includes mobile terminal model, mobile terminal product serial number and SIM card information.

11. A mobile terminal data leakage prevention device based on quantum security, characterized in that: The device comprises: A data request sending module, used to encrypt the data request through the quantum security shield built into the mobile terminal, and send the encrypted data request to the management and control data platform; wherein the management and control data platform decrypts the encrypted data request through the quantum security shield; A response data receiving module, used to receive the encrypted response data sent by the control data platform; wherein the control data platform processes the decrypted data request to generate response data, and encrypts the response data through the quantum security shield to obtain the encrypted response data; A response data decryption module is used to decrypt the encrypted response data through the quantum security shield to obtain the response data.

12. An electronic device, characterized in that: The invention comprises a processor, a memory and a computer program stored in the memory and capable of running on the processor, wherein when the computer program is executed by the processor, the method for preventing data leakage of a mobile terminal based on quantum security as described in any one of claims 1 to 10 is implemented.

13. A readable storage medium, characterized in that: The readable storage medium stores a computer program, and when the computer program is executed by a processor, the method for preventing data leakage of a mobile terminal based on quantum security as described in any one of claims 1 to 10 is implemented.

Images