A mobile security customized terminal encryption system

Abstract

The present invention discloses a mobile security customized terminal encryption system, comprising a mobile terminal, an intermediate encryption terminal and a server terminal; the mobile terminal sends an encryption request, and after the intermediate encryption terminal receives the encryption request from the mobile terminal, it sends an encryption method and an encryption key to the server terminal and the mobile terminal respectively through the encryption module; after the mobile terminal encrypts, it sends the encrypted service request to the server terminal, and the intermediate encryption terminal regenerates the encryption method and the encryption key and sends them to the server terminal and the mobile terminal respectively, and after the server terminal completes the encryption, it sends the service response to the mobile terminal, and the mobile terminal obtains the service response after decryption; the technical solution adds a service intermediate encryption terminal to the mobile terminal and the server terminal, so that when the mobile terminal sends a service request and the server terminal sends a service response, both can be encrypted twice through the intermediate encryption terminal, thereby improving the security of the information transmission process.

Description

Technical Field

[0001] The invention belongs to the technical field of communications, and in particular relates to a mobile security customized terminal encryption system. Background Art

[0002] The rapid development of mobile communication technology and Internet technology has opened up a broad space for the development of mobile applications; however, the mobile terminal is exposed to the Internet environment, so the service request sent by the mobile terminal to the server is easily intercepted, resulting in the leakage of sensitive information included in the service request, which in turn leads to low communication security between the mobile terminal and the server. Summary of the invention

[0003] In order to solve the above problems existing in the prior art, the present invention aims to provide a mobile security customized terminal encryption system.

[0004] The technical solution adopted by the present invention is:

[0005] A mobile security customized terminal encryption system, characterized by: comprising a mobile terminal, an intermediate encryption terminal and a service terminal;

[0006] After completing the encrypted identity collection, the mobile terminal sends the encrypted identity information and the encryption request to the encryption module in the intermediate encryption terminal, and compares them with the encrypted identity information stored in the encryption module;

[0007] After the encryption module completes the matching of the encrypted identity information, the mobile terminal sends an encryption request, and after the intermediate encryption terminal receives the encryption request from the mobile terminal, it sends the encryption method and encryption key to the server and the mobile terminal respectively through the encryption module;

[0008] The mobile terminal encrypts the service request according to the encryption method, and then sends the encrypted service request to the server, and the server uses the encryption key sent by the intermediate encryption terminal to decrypt the service request;

[0009] The server will feedback the completed service response to the intermediate encryption end, and the intermediate encryption end will regenerate the encryption method and encryption key and send them to the server and the mobile end respectively. After the server completes the encryption, it will send the service response to the mobile end, and the mobile end will obtain the service response after decryption;

[0010] The encryption key generated for the first time by the intermediate encryption end is the first key, and the encryption key generated for the second time is the second key.

[0011] Preferably, the mobile terminal collects encrypted identity information and stores it in the intermediate encryption terminal for verifying the newly collected encrypted identity information sent by the mobile terminal.

[0012] Preferably, after verifying the encrypted identity information, the intermediate encryption end generates a first key and an encryption method agreed with the first key, and sends the first key and the encryption method agreed with the first key to the server and the mobile end respectively.

[0013] Preferably, after receiving the encryption feedback from the mobile terminal, the intermediate encryption terminal generates the second key and the encryption method agreed with the second key, and sends the second key and the encryption method agreed with the second key to the mobile terminal and the server terminal respectively.

[0014] Preferably, information is synchronized on the mobile terminal during the process of information collection and encryption machine cracking.

[0015] A mobile security customized terminal encryption system, comprising a mobile terminal, an intermediate encryption terminal and a server terminal, wherein the intermediate encryption terminal is arranged between the mobile terminal and the server terminal and connected via a network;

[0016] The intermediate encryption end includes a main control module, a network module, a power module and an encryption module. The network module, the power module and the encryption module are respectively connected to the main control module. The encryption module is used to verify the encryption request issued by the mobile terminal and the encrypted identity information.

[0017] Preferably, the encryption module comprises:

[0018] Generating unit; forming encryption key and encryption method;

[0019] Sending unit: sending the generated encryption key and the new encryption key or encryption method to the mobile terminal service end;

[0020] Receiving unit: used to receive encryption requests from the mobile terminal and encryption feedback from the mobile terminal and the server.

[0021] Preferably, the encryption module is further provided with a storage unit and a comparison unit;

[0022] The storage unit is used to store the encrypted identity information collected by the mobile terminal;

[0023] The comparison unit is used to compare the encrypted identity information stored in the storage unit with the encrypted identity information collected when the mobile device collects the encryption request.

[0024] Preferably, the encrypted identity information includes one or more of image information and voice information.

[0025] Preferably, the network module includes any one or more of a network card module, a WiFi module and a 4G module.

[0026] The beneficial effects of the present invention are:

[0027] 1. This technical solution adds an intermediate encryption terminal between the mobile terminal and the server terminal, so that when the mobile terminal sends a service request and the server terminal sends a service response, both can be encrypted twice through the intermediate encryption terminal, thereby improving the security of the information transmission process.

[0028] 2. This technical solution generates an encryption key and a corresponding encryption method through the intermediate encryption end during the encryption process, and sends the two to the mobile end and the server end respectively. After the mobile end and the server end complete the encryption, they will transmit the information. The encryption key, encryption method and information transmission are all carried out separately, and they need to be intercepted and cracked at the same time to obtain the encrypted information, which further improves the security of the information transmission process.

[0029] 3. This technical solution uses an intermediate encryption end to generate different encryption keys and encryption methods during the service request and service response processes, thereby avoiding security issues such as attacks and leakage of sensitive information. BRIEF DESCRIPTION OF THE DRAWINGS

[0030] The present invention is further described in detail below with reference to the accompanying drawings and specific implementation methods.

[0031] Figure 1 It is a schematic diagram of the overall structure of the present invention;

[0032] Figure 2 It is a schematic diagram of the structure of the intermediate encryption end of the present invention;

[0033] Figure 3 It is a structural schematic diagram of the encryption module of the present invention.

[0034] In the figure: 1-mobile terminal, 2-intermediate encryption terminal, 3-server terminal, 201-main control module, 202-network module, 203-power module, 204-encryption module, 211-generation unit, 212-sending unit, 213-receiving unit, 214-storage unit, 215-comparison unit. DETAILED DESCRIPTION

[0035] The present invention will be further described below in conjunction with the accompanying drawings and specific embodiments.

[0036] Combine the following Figure 1-3 The specific implementation mode of the present invention is described, a mobile security customized terminal encryption system, characterized by comprising a mobile terminal 1, an intermediate encryption terminal 2 and a service terminal 3;

[0037] After completing the encrypted identity collection, the mobile terminal 1 sends the encrypted identity information and the encryption request to the encryption module 204 in the intermediate encryption terminal 2, and compares them with the encrypted identity information stored in the encryption module 204;

[0038] After the encryption module 204 completes the matching of the encrypted identity information, the mobile terminal 1 sends an encryption request, and after the intermediate encryption terminal 2 receives the encryption request from the mobile terminal 1, it sends the encryption method and encryption key to the server 3 and the mobile terminal 1 respectively through the encryption module 204;

[0039] The mobile terminal 1 encrypts according to the encryption method, and then sends the encrypted service request to the server 3, and the server 3 uses the encryption key sent by the intermediate encryption terminal 2 to decrypt the service request;

[0040] The server 3 will feedback the completed service response to the intermediate encryption terminal 2, and the intermediate encryption terminal 2 will regenerate the encryption method and encryption key and send them to the server 3 and the mobile terminal 1 respectively. After the server 3 completes the encryption, it will send the service response to the mobile terminal 1, and the mobile terminal 1 will obtain the service response after decryption;

[0041] The encryption key generated by the intermediate encryption terminal 3 for the first time is the first key, and the encryption key generated for the second time is the second key; the technical solution adds the service intermediate encryption terminal 2 to the mobile terminal 1 and the server 3, so that when the mobile terminal 1 sends a service request and the server 3 sends a service response, both can be encrypted twice through the intermediate encryption terminal 2, thereby improving the security of the information transmission process;

[0042] The intermediate encryption terminal 2 will generate an encryption key and a corresponding encryption method during the encryption process, and send the two to the mobile terminal 1 and the server 3 respectively. After the mobile terminal 1 and the server 3 complete the encryption, the information will be transmitted. The encryption key, encryption method and information transmission are all carried out separately, and the encrypted information can only be obtained after being intercepted and cracked at the same time, which further improves the security of the information transmission process;

[0043] The encryption key and encryption method generated by the intermediate encryption end 2 during the service request and service response process are different, thus avoiding security issues such as attacks and leakage of sensitive information.

[0044] Preferably, the mobile terminal 1 collects encrypted identity information and stores it in the intermediate encryption terminal 2, which is used to verify that the mobile terminal 1 sends the newly collected encrypted identity information.

[0045] Preferably, after verifying the encrypted identity information, the intermediate encryption terminal 2 generates a first key and an encryption method agreed with the first key, and sends the first key and the encryption method agreed with the first key to the server terminal 3 and the mobile terminal 1 respectively.

[0046] Preferably, after receiving the encryption feedback from the mobile terminal 1, the intermediate encryption terminal 2 will generate the second key and the encryption method agreed with the second key, and send the second key and the encryption method agreed with the second key to the mobile terminal 1 and the server terminal 3 respectively.

[0047] Preferably, information is synchronized on the mobile terminal 1 during the process of information collection and encryption machine cracking.

[0048] A mobile security customized terminal encryption system, comprising a mobile terminal 1, an intermediate encryption terminal 2 and a server 3, wherein the intermediate encryption terminal 2 is arranged between the mobile terminal 1 and the server 3 and connected via a network;

[0049] The intermediate encryption terminal 2 includes a main control module 201, a network module 202, a power module 203 and an encryption module 204. The network module 202, the power module 203 and the encryption module 204 are respectively connected to the main control module 201. The encryption module 204 is used to verify the encryption request sent by the mobile terminal 1 and the encryption identity information. The network module can be used to transmit information between the mobile terminal, the intermediate encryption terminal and the service terminal. The power module can provide power for other components to ensure that each component can operate normally.

[0050] Preferably, the encryption module 204 includes:

[0051] Generating unit 211: forming an encryption key and an encryption method;

[0052] The sending unit 212 sends the generated encryption key and the new encryption key or encryption method to the mobile terminal 1 and the server 3;

[0053] Receiving unit 213: used for receiving the encryption request sent by mobile terminal 1 and the encryption feedback sent by mobile terminal 1 and server 3.

[0054] Preferably, the encryption module 204 is further provided with a storage unit 214 and a comparison unit 215;

[0055] The storage unit 214 is used to store the encrypted identity information collected by the mobile terminal 1;

[0056] The comparison unit 215 is used to compare the encrypted identity information stored in the storage unit 214 with the encrypted identity information collected when the mobile device collects the encryption request.

[0057] Preferably, the encrypted identity information includes one or more of image information and voice information; and the facial features or voice of the initiator are collected during the process of collecting the encrypted identity information.

[0058] Preferably, the network module 202 includes any one or more of a network card module, a WiFi module and a 4G module.

[0059] The present invention provides a mobile security customized terminal encryption system, and the working principle of the device is as follows:

[0060] First, the mobile terminal 1 takes the encrypted identity information and stores it in the storage unit 214. When in use, the encrypted identity information of the initiator is re-collected through the mobile terminal 1. The re-collected encrypted identity information is compared with the encrypted identity information stored in the storage unit 214 by the comparison unit 215 in the encryption module 204. After the matching is completed, the receiving unit 213 of the encryption module 204 receives the encryption request of the mobile terminal 1, and the generation unit 211 of the encryption module 204 automatically generates a first key and an encryption method agreed with the first key, and sends the first key and the encryption method agreed with the first key to the server 3 and the mobile terminal 1 respectively (the mobile terminal 1 service request completes the encryption and sends the encryption feedback to the intermediate encryption terminal 2, and then sends the first key to the server 3 and the mobile terminal 1 respectively). The first key is sent to the server 3), the mobile terminal 1 encrypts the service request with the encryption method agreed with the first key and then sends the encrypted service request to the server 3. The server 3 uses the first key to unlock the encrypted service request. After completing the service response, the server 3 obtains the second key generated by the intermediate encryption terminal 2 and the encryption method agreed with the second key, and sends the second key and the encryption method agreed with the second key to the mobile terminal 1 and the server 3 respectively (when the second key is sent, the encryption feedback of the encryption completed by the server 3 needs to be obtained). The service response is encrypted with the encryption method agreed with the second key and then sent directly to the mobile terminal 1. The mobile terminal 1 decrypts the encrypted service response with the second key, and then obtains the corresponding service response of the service request.

[0061] The present invention is not limited to the above-mentioned optional implementation modes. Anyone can derive other various forms of products under the inspiration of the present invention. However, no matter what changes are made in the shape or structure, all technical solutions that fall within the scope defined by the claims of the present invention fall within the protection scope of the present invention.

Claims

1. A mobile security customized terminal encryption system, characterized by: Including mobile end, intermediate encryption end and server end; After completing the encrypted identity collection, the mobile terminal sends the encrypted identity information and the encryption request to the encryption module in the intermediate encryption terminal, and compares them with the encrypted identity information stored in the encryption module; After the encryption module completes the matching of the encrypted identity information, the mobile terminal sends an encryption request, and after the intermediate encryption terminal receives the encryption request from the mobile terminal, it sends the encryption method and encryption key to the server and the mobile terminal respectively through the encryption module; The mobile terminal encrypts the service request according to the encryption method, and then sends the encrypted service request to the server, and the server uses the encryption key sent by the intermediate encryption terminal to decrypt the service request; The server will feedback the completed service response to the intermediate encryption end, and the intermediate encryption end will regenerate the encryption method and encryption key and send them to the server and the mobile end respectively. After the server completes the encryption, it will send the service response to the mobile end, and the mobile end will obtain the service response after decryption; The encryption key generated by the intermediate encryption end for the first time is the first key, and the encryption key generated for the second time is the second key.

2. A mobile security customized terminal encryption system according to claim 1, characterized in that: The mobile terminal collects encrypted identity information and stores it in the intermediate encryption terminal, which is used to verify the newly collected encrypted identity information sent by the mobile terminal.

3. A mobile security customized terminal encryption system according to claim 1, characterized in that: After verifying the encrypted identity information, the intermediate encryption end generates a first key and an encryption method agreed with the first key, and sends the first key and the encryption method agreed with the first key to the server and the mobile end respectively.

4. A mobile security customized terminal encryption system according to claim 1, characterized in that: After receiving the encryption feedback from the mobile terminal, the intermediate encryption terminal generates the second key and the encryption method agreed with the second key, and sends the second key and the encryption method agreed with the second key to the mobile terminal and the server terminal respectively.

5. A mobile security customized terminal encryption system according to claim 1, characterized in that: During the information collection and encryption machine cracking process, information is synchronized on the mobile terminal.

6. A mobile security customized terminal encryption system according to any one of claims 1 to 5, characterized in that: The intermediate encryption end is arranged between the mobile end and the server end and connected via a network; The intermediate encryption end includes a main control module, a network module, a power module and an encryption module. The network module, the power module and the encryption module are respectively connected to the main control module. The encryption module is used to verify the encryption request issued by the mobile terminal and the encrypted identity information.

7. A mobile security customized terminal encryption system according to claim 6, characterized in that: The encryption module comprises: Generating unit; forming encryption key and encryption method; Sending unit: sending the generated encryption key and the new encryption key or encryption method to the mobile terminal service end; Receiving unit: used to receive encryption requests from the mobile terminal and encryption feedback from the mobile terminal and the server.

8. A mobile security customized terminal encryption system according to claim 7, characterized in that: The encryption module is also provided with a storage unit and a comparison unit; The storage unit is used to store the encrypted identity information collected by the mobile terminal; The comparison unit is used to compare the encrypted identity information stored in the storage unit with the encrypted identity information collected when the mobile device collects the encryption request.

9. A mobile security customized terminal encryption system according to claim 8, characterized in that: The encrypted identity information includes one or more of image information and voice information.

10. A mobile security customized terminal encryption system according to claim 6, characterized in that: The network module includes any one or more of a network card module, a WiFi module and a 4G module.

Images