An advertisement delivery system that ensures the safety of the advertisement delivery process

Abstract

The present invention discloses an advertisement delivery system for ensuring the safety of the advertisement delivery process. A typical advertisement delivery process in the advertisement delivery system includes: 1) the advertiser uploads the advertisement to the system through the front desk of the advertisement delivery system and specifies the terminal device to play the advertisement content; 2) the system administrator reviews the advertisement content uploaded by the advertiser; 3) the system signs the approved advertisement using the platform private key; 4) the system encrypts the platform public key, advertisement signature, and advertisement URL using the terminal public key; 5) the system pushes the encrypted content to the terminal device to be played; 6) the terminal uses the filled private key to decrypt after receiving the push; 7) the terminal downloads the advertisement content to be played according to the advertisement URL; 8) the terminal verifies the signature of the advertisement; 9) the terminal plays the advertisement that has passed the signature verification. Based on the system of the present invention, it can effectively solve the security problems such as advertisers maliciously uploading bad advertisements, the security of audit operations, the tampering of advertisement content during network transmission, and the tampering of advertisement content in the advertisement terminal.

Description

Technical Field

[0001] The present invention relates to an advertisement delivery system, and more specifically, to a security control of advertisement content during transmission. Background Art

[0002] A terminal device used to play multimedia ads, the final advertising content played comes from network transmission, and the network transmission process is unsafe. During the administrator review process, there is a risk of account theft; when pushing ads to the device, the network may be hijacked and pushed impersonally; the advertising content is large and needs to be downloaded to the local cache, but the smart device may be hacked and the downloaded ads may be replaced. If any of these links have problems, it will eventually lead to the playback of unexpected advertising content. Once illegally used, it may bring disastrous consequences to advertising platform operators and enterprises. Summary of the invention

[0003] The purpose of the present invention is to provide a security control solution for the process from advertisement uploading to advertisement playing, so as to solve the problems raised in the above background technology.

[0004] To achieve the above object, the present invention provides the following technical solutions:

[0005] An advertisement delivery system for ensuring the safety of the advertisement delivery process comprises the following steps:

[0006] (1) The advertiser uploads the advertisement to the system through the front end of the advertising delivery system and specifies the terminal device on which the advertisement content is to be played;

[0007] (2) The system administrator reviews the advertising content uploaded by the advertiser;

[0008] (3) The system signs the approved advertisements using the platform private key;

[0009] (4) The system uses the terminal public key to encrypt the platform public key, advertisement signature, and advertisement URL;

[0010] (5) The system pushes the encrypted content to the terminal device to be played;

[0011] (6) After receiving the push, the terminal uses the injected private key to decrypt it;

[0012] (7) The terminal downloads the advertisement content to be played according to the advertisement URL;

[0013] (8) The terminal performs signature verification on the advertisement;

[0014] (9) The terminal plays the advertisement that has passed the signature verification.

[0015] The step 1 is further as follows:

[0016] (1-1) The advertiser logs in to the system front desk with his account and password

[0017] (1-2) Advertisers upload advertisements;

[0018] (1-3) The advertiser selects a terminal to deliver the advertisement.

[0019] The step 2 is further as follows:

[0020] (2-1) The administrator uses his account and password to log in to the system backend;

[0021] (2-2) The administrator performs authorization authentication, which can be web page authorization authentication using the WeChat account bound to the administrator account, or SMS verification code authentication using the mobile phone number bound to the administrator account;

[0022] (2-3) Audit operations can only be performed after the administrator has passed the authentication.

[0023] The step 3 further includes: the system generates a signature for the advertisement content uploaded by the user using the RSA algorithm and the platform RSA private key, wherein the platform RSA private key is a private key in a pair of RSA key pairs stored by the system.

[0024] The step 4 is further as follows:

[0025] (4-1) Obtain the terminal RSA public key stored in the system according to the terminal specified by the user for playing advertisements. The terminal RSA public key is: when the terminal device leaves the factory, a pair of RSA key pairs is generated, the public key is stored in the system, and the private key is installed in the terminal device. The public key stored in the system is the terminal RSA public key;

[0026] (4-2) Encrypt the URL corresponding to the advertisement content, the platform RSA public key, and the signature generated in step 3 using the RSA algorithm and the terminal RSA public key. The platform RSA public key is the public key in a pair of RSA key pairs stored in the system.

[0027] The step 5 is further as follows: the system pushes a message to the terminal through a self-built or third-party message push platform such as Jiguang, EMQ, etc. The encrypted content generated in step 4 can be pushed directly, or only a command can be pushed, and then the terminal requests the system to obtain the encrypted content generated in step 4.

[0028] The step 6 is further as follows:

[0029] (6-1) The terminal saves the encrypted content pushed;

[0030] (6-2) Use the RSA private key installed in the terminal to decrypt the pushed content and obtain the advertisement URL, platform RSA public key, and advertisement content signature.

[0031] The step 7 further includes: using the advertisement URL obtained by decrypting in step 6 to download the advertisement content and save it locally.

[0032] The step 8 further includes: performing signature verification on the advertisement content downloaded in step 7 using the RSA algorithm, the platform RSA public key obtained by decryption in step 6, and the advertisement content signature obtained by decryption in step 6.

[0033] The advertiser is a user who wants to place advertisements on terminal devices through the system.

[0034] The advertisement content includes at least one of a picture and a video.

[0035] The terminal device is a device installed with an Android system, pre-installed with an advertising APP, and filled with an RSA private key when leaving the factory, and is used to play advertisements.

[0036] The system and the terminal device communicate via the Internet, more specifically, via TCP or HTTP protocol.

[0037] When the terminal does not receive a push, the steps for playing an advertisement are as follows:

[0038] (1) Load the downloaded advertisement stored locally;

[0039] (2) Load the content pushed by the system stored locally, decrypt the content using the RSA private key of the terminal, and obtain the advertisement signature and the platform RSA public key;

[0040] (3) The loaded ad content is signed and verified using the RSA algorithm, ad signature, and platform RSA public key;

[0041] (4) Play advertisements that have passed signature verification.

[0042] The RSA algorithm is an asymmetric encryption algorithm. Decryption can be completed without directly transferring the key. This can ensure the security of information and avoid the risk of being cracked by directly transferring the key. It is a process of encryption and decryption using a pair of keys, called the public key and the private key. There is a mathematical relationship between the two. The principle of this encryption algorithm is to ensure security by taking advantage of the difficulty of factoring a very large integer.

[0043] Compared with the prior art, the present invention has the following beneficial effects:

[0044] The present invention adds an authorization verification step on the basis of conventional account and password verification, which can effectively avoid the risk of account theft; uses a two-way encrypted communication method instead of plain text communication to protect the advertising content from being hijacked and tampered with by the network; and performs signature verification each time it is played, which can prevent the advertising files cached locally in the advertising terminal device from being directly replaced. Overall, it ensures that the terminal finally plays the expected advertising content. BRIEF DESCRIPTION OF THE DRAWINGS

[0045] Figure 1 This is a schematic diagram of the authorization process when the administrator of the advertising delivery system performs review operations; Figure 2 It is a flowchart of an advertisement delivery system delivering advertisements to terminal devices and terminal devices playing advertisements. DETAILED DESCRIPTION

[0046] The technical solution of this patent is further described in detail below in conjunction with the accompanying drawings and specific implementation methods.

[0047] like Figure 1 As shown, an advertisement delivery system for ensuring the security of the advertisement delivery process includes an advertisement delivery system and a terminal. Users of the system include advertisers and administrators.

[0048] Advertisers upload advertisements to the system through the front desk and specify the terminals to be delivered. After the administrator reviews the advertisements in the system background, the system pushes the advertisements to the terminals, which then play the advertisements.

[0049] like Figure 2 As shown, a specific implementation step is:

[0050] 1. The advertiser logs in to the system front desk with his account and password and uploads the advertisement to the system;

[0051] 2. The advertiser selects the terminal to deliver the advertisement;

[0052] 3. The administrator logs in to the system backend with the account and password, and uses the WeChat account bound to the account to perform WeChat web page authorization authentication. If the authorization is not obtained or the authorization authentication fails, the review operation cannot be performed and the process is terminated;

[0053] 4. The administrator reviews the advertising content uploaded by the advertiser. If the review is rejected, the process ends;

[0054] 5. When the review is passed, the system uses the platform's RSA private key to perform RSA signature on the advertising content;

[0055] 6. The system uses the RSA public key of the terminal corresponding to the advertiser's designated playback terminal to perform RSA encryption on the advertisement URL, the platform RSA public key, and the signature obtained in step 5, and stores the encrypted data in the database;

[0056] 7. The system pushes a message to the terminal selected by the advertiser to pull the latest advertisement;

[0057] 8. The terminal receives the notification and requests the system to obtain the encrypted data generated in step 6;

[0058] 9. The terminal stores the requested data locally;

[0059] 10. The terminal uses the RSA private key installed at the factory to decrypt the requested data and obtain the advertisement URL, platform RSA public key, and advertisement content signature. If the decryption fails, the process terminates.

[0060] 11. The terminal requests the advertisement URL and downloads the advertisement content;

[0061] 12. The terminal saves the downloaded advertisement content locally;

[0062] 13. The terminal uses the decrypted platform RSA public key, the advertisement content signature, and the downloaded advertisement content to perform RSA signature verification. If the signature verification fails, the process terminates.

[0063] 14. The terminal plays the advertisement content that has passed the signature verification.

[0064] The advertiser is a user who wants to place advertisements on terminal devices through the system.

[0065] The advertisement content includes at least one of a picture and a video.

[0066] The step 3, the binding relationship between the administrator account and the WeChat account, refers to the mapping relationship between the openid of the personal WeChat account under the WeChat website application and the administrator account formed through WeChat web page authorization in an environment where access is restricted to the intranet.

[0067] The system stores a pair of 2048-bit RSA key pairs, including a platform RSA private key and a platform RSA public key, wherein the private key is used to sign the advertisement content in step 5, and the public key is transmitted to the terminal after encryption, and the terminal uses it to perform signature verification on the advertisement content in step 13 after decryption.

[0068] In step 7, the push can be carried out through third-party platforms such as Jiguang and EMQ.

[0069] The terminal is a device installed with the Android system and pre-installed with the advertising APP. When it leaves the factory, a pair of 2048-bit RSA key pairs is generated, the private key is installed into the system ROM, and the public key is stored in the system. The public key is used to encrypt and generate encrypted data in step 6, and the private key is used to decrypt the data in step 13 to obtain the advertising URL, advertising signature, and platform RSA public key.

[0070] The above are preferred embodiments of the present invention. Various modifications or variations made on the basis of the technical solution of the present invention still fall within the protection scope of the present invention.

Claims

1. An advertisement delivery method for ensuring the safety of the advertisement delivery process, characterized in that: The steps are: (1) The advertiser uploads the advertisement to the system through the front end of the advertising delivery system and specifies the terminal device on which the advertisement content is to be played; (2) The system administrator reviews the advertising content uploaded by the advertiser; (3) The system signs the approved advertisements using the platform private key; (4) The system uses the terminal public key to encrypt the platform public key, advertisement signature, and advertisement URL; (5) The system pushes the encrypted content to the terminal device to be played; (6) After receiving the push, the terminal uses the injected private key to decrypt it; (7) The terminal downloads the advertisement content to be played according to the advertisement URL; (8) The terminal performs signature verification on the advertisement; (9) The terminal plays the advertisement that has passed the signature verification.

2. The method for placing advertisements to ensure the safety of the advertisement placing process according to claim 1, characterized in that: The step 1 is further as follows: (1-1) The advertiser logs in to the system front desk with his account and password; (1-2) Advertisers upload advertisements; (1-3) The advertiser selects a terminal to deliver the advertisement.

3. The method for placing advertisements to ensure the safety of the placing advertisements according to claim 1, characterized in that: The step 2 is further as follows: (2-1) The administrator uses his account and password to log in to the system backend; (2-2) The administrator performs authorization authentication; (2-3) Audit operations can only be performed after the administrator has passed the authentication.

4. The method for placing advertisements to ensure the safety of the placing advertisements according to claim 3, characterized in that: The authorization authentication in step 2-2 may be a web page authorization authentication using the WeChat account bound to the administrator account, or an SMS verification code authentication using the mobile phone number bound to the administrator account.

5. The method for placing advertisements to ensure the safety of the placing advertisements according to claim 1, characterized in that: The step 3 further includes: the system uses the RSA algorithm and the platform RSA private key to generate a signature for the advertisement content uploaded by the user.

6. The method for placing advertisements to ensure the safety of the placing advertisements according to claim 5, characterized in that: The platform RSA private key is a private key in a pair of RSA key pairs stored in the system.

7. The method for placing advertisements to ensure the safety of the advertisement placing process according to claim 1, characterized in that: The step 4 is further as follows: (4-1) Obtain the terminal RSA public key stored in the system according to the terminal designated by the user for playing the advertisement; (4-2) Encrypt the URL corresponding to the advertising content, the platform RSA public key, and the signature generated in step 3 using the RSA algorithm and the terminal RSA public key.

8. The method for placing advertisements to ensure the safety of the placing advertisements according to claim 7, characterized in that: The platform RSA public key is a public key in a pair of RSA key pairs stored in the system.

9. The method for placing advertisements to ensure the safety of the placing advertisements according to claim 7, characterized in that: The terminal RSA public key is: when the terminal device leaves the factory, a pair of RSA key pairs is generated, the public key is stored in the system, the private key is installed in the terminal device, and the public key stored in the system is the terminal RSA public key.

10. The method for placing advertisements to ensure the safety of the placing advertisements according to claim 1, characterized in that: The step 5 is further as follows: the system pushes a message to the terminal through a self-built or Jiguang, EMQ message push platform, and can directly push the encrypted content generated in step 4, or only push the command, and then the terminal requests the system to obtain the encrypted content generated in step 4.

11. The method for placing advertisements to ensure the safety of the advertisement placing process according to claim 1, characterized in that: The step 6 is further as follows: (6-1) The terminal saves the encrypted content pushed; (6-2) Use the RSA private key installed in the terminal to decrypt the pushed content and obtain the advertisement URL, platform RSA public key, and advertisement content signature.

12. The method for placing advertisements to ensure the safety of the advertisement placing process according to claim 1, characterized in that: The step 7 further includes: using the advertisement URL obtained by decrypting in step 6 to download the advertisement content and save it locally.

13. The method for placing advertisements to ensure the safety of the placing advertisements according to claim 1, characterized in that: The step 8 further includes: performing signature verification on the advertisement content downloaded in step 7 using the RSA algorithm, the platform RSA public key obtained by decryption in step 6, and the advertisement content signature obtained by decryption in step 6.

14. The method for placing advertisements to ensure the safety of the advertisement placing process according to claim 1, characterized in that: The advertiser is a user who wants to place advertisements on terminal devices through the system.

15. The method for placing advertisements to ensure the safety of the advertisement placing process according to claim 1, characterized in that: The advertisement content includes at least one of a picture and a video.

16. The method for placing advertisements to ensure the safety of the advertisement placing process according to claim 1, characterized in that: The terminal device is a device installed with an Android system, pre-installed with an advertising APP, and filled with an RSA private key when leaving the factory, and is used to play advertisements.

17. The method for placing advertisements to ensure the safety of the advertisement placing process according to claim 1, characterized in that: The system and the terminal device communicate via the Internet.

18. The method for placing advertisements to ensure the safety of the advertisement placing process according to claim 1, characterized in that: When the terminal does not receive a push, the steps for playing an advertisement are as follows: (1) Load the downloaded advertisement stored locally; (2) Load the content pushed by the system stored locally, decrypt the content using the RSA private key of the terminal, and obtain the advertisement signature and the platform RSA public key; (3) The loaded ad content is signed and verified using the RSA algorithm, ad signature, and platform RSA public key; (4) Play advertisements that have passed signature verification.

Images