File transmission method, device and computer-readable storage medium

Abstract

The present application discloses a file transfer method, which includes: obtaining a file to be transferred from a first user and a first private key of the first user, and signing the file to be transferred using the first private key to obtain signature information; obtaining target information; wherein the target information is information obtained by signing with the second private key of the second user, and is at least used to prevent tampering with the first private key of the first user; sending the signature information, the file to be transferred, and the target information to a terminal management system; wherein the target information is used to instruct the terminal management system to determine whether the first public key of the first user has been tampered with; and the signature information is used to instruct the terminal management system to determine whether the received file to be transferred is a legitimate file if it is determined that the first public key has not been tampered with. The present application also discloses a file transfer device and a computer-readable storage medium.

Description

Technical Field

[0001] The present application relates to file transmission technology in the field of file transmission, and in particular to a file transmission method, device and computer-readable storage medium. Background Art

[0002] With the continuous development of computer technology, the use of terminal management systems is becoming increasingly common. Terminal management systems can establish channels with managed terminals to distribute software or script files to designated terminals and complete software installation and deployment or script execution. However, if a terminal management system is compromised, hackers can forge the user's identity and send files containing malicious viruses (malicious files) to the terminal, exposing the terminal to malicious virus attacks and posing a security risk. Summary of the Invention

[0003] In order to solve the above technical problems, the embodiments of the present application hope to provide a file transfer method, device and computer-readable storage medium, which solves the problem that when a terminal management system is hacked, the user's identity will be forged to send malicious files to the terminal, causing the terminal to be attacked by malicious viruses and posing a security risk.

[0004] The technical solution of this application is achieved as follows:

[0005] A file transmission method, comprising:

[0006] Obtaining a file to be transmitted from a first user and a first private key of the first user, and signing the file to be transmitted using the first private key to obtain signature information;

[0007] Obtaining target information; wherein the target information is information signed by the second private key of the second user, and is at least used to prevent tampering with the first public key of the first user;

[0008] The signature information, the file to be transmitted, and the target information are sent to the terminal management system; wherein the target information is used to instruct the terminal management system to determine whether the first public key of the first user has been tampered with; and the signature information is used to instruct the terminal management system to determine whether the received file to be transmitted is a legal file when it is determined that the first public key has not been tampered with.

[0009] In the above solution, the target information is also used to prevent tampering with the identifier of the terminal management system bound to the first user.

[0010] In the above solution, the target information is obtained by summarizing the identifier of the terminal management system bound to the first user and the first public key, and signing it with the second private key of the second user.

[0011] In the above solution, the method further includes:

[0012] Sending the first public key to the terminal management system;

[0013] Correspondingly, the target information is specifically used to instruct the terminal management system to determine whether the received first public key of the first user has been tampered with.

[0014] In the above solution, the first private key, the first public key and the target information are all stored in a removable device.

[0015] A file transmission method, applied to a terminal management system on a server, comprising:

[0016] Receiving a file to be transferred from a first user, signature information corresponding to the file to be transferred, and target information sent by a file transfer system; wherein the target information is information signed by a second private key of a second user, and is used to prevent tampering with the first public key of the first user;

[0017] In a case where it is determined based on the target information that the first public key has not been tampered with, determining based on the first public key and the signature information whether the received file to be transmitted is a legitimate file;

[0018] When it is determined that the file to be transmitted is the legal file, the file to be transmitted is sent to the target terminal.

[0019] In the above solution, when it is determined based on the target information that the first public key has not been tampered with, determining whether the received file to be transmitted is a legitimate file based on the first public key and the signature information includes:

[0020] determining, based on the second public key of the second user and the received target information, whether the first public key has been tampered with;

[0021] In the case that the first public key has not been tampered with, the first public key and the signature information are used to verify whether the received file to be transmitted is legal.

[0022] In the above solution, the target information is also used to prevent tampering with the identifier of the terminal management system bound to the first user;

[0023] Accordingly, when it is determined based on the target information that the first public key has not been tampered with, determining whether the received file to be transmitted is a legitimate file based on the first public key and the signature information includes:

[0024] When it is determined based on the target information that the first public key has not been tampered with, and when it is determined based on the target information that the terminal management system is bound to the user who sends the file to be transmitted, it is determined based on the first public key and the signature information whether the received file to be transmitted is a legal file.

[0025] In the above solution, the target information is obtained by digesting the identifier of the terminal management system bound to the first user and the first public key and signing it with the second private key of the second user;

[0026] Correspondingly, the terminal management system performs a digest calculation using the first public key and the identifier of the terminal management system to obtain a target value; based on the target value, the second public key of the second user and the received target information, it determines whether the first public key has been tampered with and whether the terminal management system is bound to the user who sends the file to be transferred.

[0027] In the above solution, the method further includes:

[0028] A first public key of the first user is received, and whether the received first public key has been tampered with is determined according to the received target information.

[0029] A file transmission method, applied to a target terminal, comprising:

[0030] Receiving a file to be transferred from a first user, signature information corresponding to the file to be transferred, and target information sent by a terminal management system; wherein the target information is used to prevent tampering with a first public key; the first public key is the public key of the first user;

[0031] Obtaining a first public key, and verifying whether the file to be transferred is legal based on the first public key and the signature information when determining that the first public key has not been tampered with based on the target information;

[0032] If it is determined that the file to be transmitted is a legal file, the file to be transmitted is executed.

[0033] In the above solution, the target information is also used to prevent tampering with the identifier of the terminal management system bound to the first user;

[0034] The obtaining of the first public key and, when determining based on the target information that the first public key has not been tampered with, verifying whether the file to be transferred is legal based on the first public key and the signature information includes:

[0035] Obtain the first public key and the identifier of the terminal management system bound to the first user, and when it is determined based on the target information that the first public key has not been tampered with and the binding identifier is consistent with the identifier reflected by the target information, verify whether the file to be transferred is legal based on the first public key and the signature information.

[0036] A file transfer device, comprising: a processor, a memory, and a communication bus;

[0037] The communication bus is used to realize the communication connection between the processor and the memory;

[0038] The processor is used to execute the file transmission program in the memory to implement the steps of the above-mentioned file transmission method.

[0039] A computer-readable storage medium stores one or more programs, and the one or more programs can be executed by one or more processors to implement the steps of the above-mentioned file transmission method.

[0040] The embodiments of the present application provide a file transfer method, device and computer-readable storage medium, which obtain a file to be transferred by a first user and a first private key of the first user, and sign the file to be transferred by using the first private key to obtain signature information; obtain target information; wherein the target information is information obtained by signing with the second private key of the second user, and is at least used to prevent tampering with the first public key of the first user; send the signature information, the file to be transferred and the target information to a terminal management system; wherein the target information is used to instruct the terminal management system to determine whether the first public key of the first user has been tampered with; the signature information is used to instruct the terminal management system to determine whether the received file to be transferred is tampered with when it is determined that the first public key has not been tampered with. For a legitimate file; in this way, when the terminal management system is hacked, the terminal management system can determine whether the first public key of the first user has been tampered with based on the target information sent by the file transfer system, and when it is determined that the first public key has not been tampered with, and when it is determined that the file to be transferred is a legitimate file based on the signature information sent by the file transfer system, the terminal management system sends the file to be transferred to the target terminal, thereby avoiding the situation where the hacker attacks the terminal management system and forges the identity of the first user by tampering with the first public key and sends malicious files to the target terminal, thereby eliminating the security risks of the target terminal, improving the security of the target terminal, and solving the problem of security risks of the target terminal being attacked by malicious viruses in the related technology. BRIEF DESCRIPTION OF THE DRAWINGS

[0041] Figure 1 A flowchart of a file transfer method provided in an embodiment of the present application;

[0042] Figure 2A flowchart of another file transfer method provided in an embodiment of the present application;

[0043] Figure 3 A flowchart of another file transfer method provided in an embodiment of the present application;

[0044] Figure 4 A flowchart of a file transmission method provided in another embodiment of the present application;

[0045] Figure 5 A schematic diagram of the structure of a file transfer system provided in one embodiment of the present application;

[0046] Figure 6 A flowchart of another file transmission method provided in another embodiment of the present application;

[0047] Figure 7 A schematic diagram of the structure of a file transmission system in a file transmission device provided in one embodiment of the present application;

[0048] Figure 8 A schematic diagram of the structure of a server in a file transfer device provided in one embodiment of the present application;

[0049] Figure 9 A schematic diagram of the structure of a target terminal in a file transfer device provided in one embodiment of the present application. DETAILED DESCRIPTION

[0050] The technical solutions in the embodiments of the present application will be described clearly and completely below in conjunction with the drawings in the embodiments of the present application.

[0051] It should be understood that the specific embodiments described herein are only used to explain the present application and are not intended to limit the present application.

[0052] The present application provides a file transmission method, which is applied to a file transmission system. Figure 1 As shown, the method may include the following steps:

[0053] Step 101: Obtain a file to be transmitted from a first user and a first private key of the first user, and sign the file to be transmitted using the first private key to obtain signature information.

[0054] In an embodiment of the present application, the file to be transferred can be generated on the file transfer system, or it can be generated by other devices and then sent to the file transfer system; the file to be transferred can be a script file (code file) or other files edited by the first user; the first private key is provided by the second user.

[0055] The file transfer system can access the terminal management system using the first user's account and password, and download a file signing tool from the terminal management system to the local file transfer system. The file transfer system can then use the file signing tool to sign the file to be transferred using the first private key, generating signature information. The signature can be a public key digital signature, specifically a string of numbers that can only be generated by the sender and cannot be forged by others. This string of numbers also effectively proves the authenticity of the information sent by the sender.

[0056] It should be noted that the file transfer system can be a terminal device of the first user, or a removable device customized for the first user by a second user; the file transfer system can also include both a terminal device and a removable device. The second user can be the manufacturer of the terminal management system. Steps 101-103 can be performed by the terminal device, the removable device, or even collaboratively by the terminal device and the removable device.

[0057] Preferably, the file transmission system may include a terminal device and a removable device.

[0058] The terminal device is connected to the removable device. The file to be transferred may be a file generated by the terminal device in response to an editing operation of the first user.

[0059] The first user can be a user authorized by the terminal management system; the removable device can be a customized Universal Serial Bus (USB) hardware device provided by the second user; when using the removable device, a password is required. This prevents the information stored in the removable device from being stolen even if the removable device is lost, thereby improving the security of the information stored in the removable device. The first private key can be directly read by the terminal device; of course, the first private key can also be burned into a KEY inside the removable device, which cannot be read externally.

[0060] In an embodiment of the present application, the signature information may be obtained by signing the contents of the file to be transmitted. When the first private key can be read externally, the terminal device may read the first private key from the removable device and use the first private key to sign the file to be transmitted to obtain the signature information. When the first private key cannot be read externally, the terminal device may send the file to be transmitted to the removable device, so that the removable device can use the first private key stored therein to sign the file to be transmitted to obtain the signature information.

[0061] Step 102: Obtain target information.

[0062] The target information is information signed by the second private key of the second user, and is at least used to prevent tampering with the first public key of the first user.

[0063] In the embodiment of the present application, the target information is information provided by the second user; the target information may be information sent by the second user to the file transfer system.

[0064] In a feasible implementation method, the target information can be sent by the second user to the terminal device of the first user through his own terminal; the target information can be information provided by the second user and burned in the mobile device. When the terminal device is connected to the mobile device, the target information can be obtained from the mobile device.

[0065] The second user can digest the first public key of the first user to obtain digested information, and then sign the digested information with the second private key to obtain the target information. The second user can also digest the first public key of the first user and the identifier of the terminal management system to obtain digested information, and then sign the digested information with the second private key to obtain the target information. The digest can be understood as a hash.

[0066] In a feasible implementation, the file transfer system includes a terminal device and a removable device; wherein the removable device can be a USBKey, and the terminal device can be connected to the USBKey through its own USB interface; the first public key and the first private key of the first user can respectively be the RSA public key and the RSA private key of the first user provided by the second user; wherein the RSA private key can be represented by prk1, and the RSA public key can be represented by puk1.

[0067] It should be noted that after the terminal device connects to the USBKey through its own USB interface, the USBKey's PIN code must be entered before the USBKey can be used. The USBKey's PIN code can be understood as the password required to use the USBKey. Only those who know the PIN code are authorized to use the USBKey. The first user can only pass identity authentication when they possess both the USBKey and the PIN code. If the USBKey is lost, others cannot forge the first user's identity using the USBKey because they do not know the PIN code.

[0068] Step 103: Send the signature information, the file to be transferred, and the target information to the terminal management system.

[0069] The target information is used to instruct the terminal management system to determine whether the first public key of the first user has been tampered with; the signature information is used to instruct the terminal management system to determine whether the received file to be transmitted is a legal file when it is determined that the first public key has not been tampered with.

[0070] In an embodiment of the present application, the terminal management system may be an application program having the function of distributing software and / or script files to designated terminals. The terminal management system may run on the terminal device of the first user or on a server.

[0071] In a feasible implementation method, the first user can send the file to be transferred, signature information and target information to the terminal management system on the server through the terminal device. The terminal management system determines that the first public key has not been tampered with based on the target information, which indicates that the identity of the first user has not been forged. At this time, the legitimacy of the file to be transferred can be verified to prevent the file to be transferred from being swapped. When it is determined that the file to be transferred is a legal file, it indicates that the file to be transferred has not been tampered with. At this time, the file to be transferred can be sent to the target terminal through the terminal management system.

[0072] In an embodiment of the present application, the file transfer system can package the target information, the file to be transferred and the signature information, and send the packaged file package to the terminal management system. After receiving the file package, the terminal management system can parse the file package to obtain the target information, the file to be transferred and the signature information, and verify the legitimacy of the file to be transferred when it is determined based on the target information that the first public key has not been tampered with, so as to send the file to be transferred to the target terminal when it is determined that the file to be transferred is a legal file; refuse to send the file to be transferred to the target terminal when it is determined that the first public key has been tampered with; or refuse to send the file to be transferred to the target terminal when the first public key has not been tampered with but the file to be transferred is an illegal file (i.e., an illegal file) to avoid malicious files from being transmitted to the target terminal, which poses a security risk to the target terminal.

[0073] It should be noted that if the file transfer system includes terminal devices and removable devices, when the password of the first user for logging into the terminal management system is leaked, or the terminal management system is hacked, when the first user wants to send malicious files to the target terminal through the terminal management system, the removable device provided to the first user by the manufacturer of the terminal management system cannot be obtained, and the password for using the removable device cannot be used. Then, the information in the removable device cannot be obtained, and further, the identity of the first user cannot be forged on the terminal management system through the information in the removable device to send malicious files to the target terminal through the terminal management system. In this way, the malicious file can be prevented from being sent to the target terminal, the security risks of the target terminal are eliminated, and the security of the target terminal is improved.

[0074] If the mobile device is lost, no one else can access it by obtaining the password. Only by obtaining the mobile device and the password, as well as the first user's account and password for logging into the terminal management system, can the terminal management system authenticate the user and send the file to the target terminal. The target information is also used to prevent tampering with the management system identifier associated with the first user. This prevents any system outside the terminal management system from using the target device. In other words, it is impossible to send files to be transferred from the target device to any system outside the terminal management system.

[0075] In addition, the file transfer method provided in the embodiment of the present application can be applied in offline scenarios, and can be connected to a removable device through the USB interface provided by the terminal device to obtain information stored in the removable device. The terminal management system can verify the received files to be transferred through the information stored in the removable device, thereby realizing that the terminal management system can also verify the legitimacy of the files to be transferred in offline scenarios, so that the terminal management system does not need to be restricted by the network when verifying the legitimacy of the files to be transferred, reducing the limitations when sending files to be transferred through the terminal management system.

[0076] The file transfer method provided by the embodiment of the present application obtains a file to be transferred by a first user and a first private key of the first user, and signs the file to be transferred using the first private key to obtain signature information; obtains target information; wherein the target information is information obtained by signing with the second private key of the second user, and is at least used to prevent tampering with the first public key of the first user; sends the signature information, the file to be transferred, and the target information to a terminal management system; wherein the target information is used to instruct the terminal management system to determine whether the first public key of the first user has been tampered with; the signature information is used to instruct the terminal management system to determine whether the received file to be transferred is a legitimate file when it is determined that the first public key has not been tampered with; In this way, when the terminal management system is hacked, the terminal management system can determine whether the first public key of the first user has been tampered with based on the target information sent by the file transfer system. If it is determined that the first public key has not been tampered with, and if it is determined that the file to be transferred is a legal file based on the signature information sent by the file transfer system, the terminal management system sends the file to be transferred to the target terminal, thereby preventing hackers from attacking the terminal management system and forging the identity of the first user by tampering with the first public key to send malicious files to the target terminal. This eliminates the security risks of the target terminal, improves the security of the target terminal, and solves the problem of security risks of the target terminal being attacked by malicious viruses in related technologies.

[0077] Based on the above embodiments, the embodiments of the present application provide a file transmission method, which is applied to a terminal management system on a server, referring to Figure 2 As shown, the method includes the following steps:

[0078] Step 201: Receive a file to be transferred, signature information corresponding to the file to be transferred, and target information of a first user sent by a file transfer system.

[0079] The target information is information signed by the second private key of the second user, and is used to prevent tampering with the first public key of the first user.

[0080] In an embodiment of the present application, a file package sent by a file transfer system can be received, and the file package can be parsed to obtain the file to be transferred, target information and signature information.

[0081] Step 202: When it is determined based on the target information that the first public key has not been tampered with, determine whether the received file to be transmitted is a legal file based on the first public key and the signature information.

[0082] In an embodiment of the present application, the terminal management system can verify whether the received first public key has been tampered with based on the target information. If it is determined that the first public key has not been tampered with, the file to be transmitted can be signed with the first public key to generate new signature information, so as to determine whether the file to be transmitted has been tampered with during the transmission process through the new signature information and the received signature information.

[0083] It should be noted that, when it is determined that the received first public key is the public key of the first user, it is determined that the first public key has not been tampered with; when it is determined that the received first public key is not the public key of the first user, it is determined that the first public key has been tampered with; in this way, by verifying whether the first public key has been tampered with, it is verified whether the user transmitting the file to be transmitted is the first user authorized by the terminal management platform, so as to avoid hackers attacking the terminal management system and then forging the identity of the first user to send malicious files, thereby improving the security of using the terminal management system to send files.

[0084] Step 203: When it is determined that the file to be transmitted is a legal file, the file to be transmitted is sent to the target terminal.

[0085] In an embodiment of the present application, the file to be transferred is sent to the target terminal so that the target terminal can execute the file to be transferred; if it is determined that the file to be transferred is an illegal file, the file to be transferred is refused to be sent to the target device to avoid the illegal file being transmitted to the target terminal, which poses a security risk to the target terminal.

[0086] It should be noted that the target terminal can be any terminal that has established communication with the terminal management system, or a terminal selected from multiple terminals managed by the terminal management system. If the file to be transferred is determined to be illegal, a prompt message can be generated to notify a third user of the illegal file on the terminal management system. This allows the third user to promptly be aware of the intrusion into the terminal management system and take appropriate measures to prevent the loss of the file when the first user uploads the file after the intrusion, thereby improving the security of the file transmission. The third user can be the maintainer of the terminal management system.

[0087] The file transmission method provided by the embodiment of the present application receives a file to be transmitted of a first user, signature information corresponding to the file to be transmitted, and target information sent by a file transmission system; wherein the target information is information obtained by signing with a second private key of a second user, and is used to prevent tampering with the first public key of the first user; when it is determined based on the target information that the first public key has not been tampered with, it is determined based on the first public key and the signature information whether the received file to be transmitted is a legal file; when it is determined that the file to be transmitted is a legal file, the file to be transmitted is sent to the target terminal; in this way, when the terminal management system is hacked, the terminal management system can determine the first user's legal file based on the target information sent by the file transmission system. Whether the first public key has been tampered with, and when it is determined that the first public key has not been tampered with, the legitimacy of the file to be transferred is verified based on the signature information sent by the file transfer system. When it is determined that the file to be transferred is legal, the terminal management system sends the file to be transferred to the target terminal, thereby avoiding hackers attacking the terminal management system and forging the identity of the first user by tampering with the first public key to send malicious files to the target terminal, eliminating the security risks of the target terminal, improving the security of the target terminal, and solving the problem in the related technology that after the terminal management system is invaded by hackers, malicious files can be sent to the target terminal through the terminal management system, thereby causing the target terminal to be attacked by malicious viruses and posing a security risk.

[0088] Based on the above embodiments, the file transmission method provided in the embodiments of the present application is applied to the target device, referring to Figure 3 As shown, the method includes the following steps:

[0089] Step 301: Receive a file to be transmitted from a first user, signature information corresponding to the file to be transmitted, and target information sent by a terminal management system.

[0090] The target information is used to prevent tampering with the first public key; the first public key is the public key of the first user.

[0091] In an embodiment of the present application, a file package sent by a terminal management system can be received, and the file package can be parsed to obtain the file to be transmitted, target information and signature information.

[0092] It should be noted that the target terminal may be any terminal that has established communication with the terminal management system, or may be a terminal determined from multiple terminals managed by the terminal management system.

[0093] Step 302: Obtain the first public key, and if it is determined based on the target information that the first public key has not been tampered with, verify whether the file to be transferred is legal based on the first public key and the signature information.

[0094] In an embodiment of the present application, the first public key can be sent by the terminal management system to the target terminal; it can be verified based on the target information whether the first public key received by the terminal management system has been tampered with. If it is determined that the first public key has not been tampered with, the first public key can be used to sign the file to be transmitted to generate new signature information, so as to determine whether the file to be transmitted is a legal file through the new signature information and the received signature information.

[0095] Step 303: If it is determined that the file to be transferred is a legal file, execute the file to be transferred.

[0096] The file to be transferred may be a script file. If the file to be transferred is a legal file, the script file may be executed.

[0097] It should be noted that even if a hacker violently damages the terminal management system and sends malicious files through the terminal management system, the target terminal will not execute the malicious files immediately after receiving them. Instead, it will first verify the identity of the user who sent the malicious file through the received target information, and then verify the legitimacy of the malicious file. If the target terminal detects that the first public key of the first user has been tampered with or the malicious file is an illegal file, it will refuse to execute the malicious file and issue an alarm message to warn the user that the malicious file has been received.

[0098] The illegal file refers to a file to be transmitted on the terminal management system, which has different contents from the file to be transmitted before being uploaded to the terminal management system.

[0099] The file transfer method provided by the embodiment of the present application receives the file to be transferred of the first user, the signature information corresponding to the file to be transferred, and the target information sent by the terminal management system; wherein the target information is used to prevent tampering with the first public key; the first public key is the public key of the first user; the first public key is obtained, and when it is determined based on the target information that the first public key has not been tampered with, the legality of the file to be transferred is verified based on the first public key and the signature information; when it is determined that the file to be transferred is a legal file, the file to be transferred is executed; in this way, through the target terminal, when it is determined that the first public key has not been tampered with based on the target information, the legality of the file to be transferred is verified, and when it is determined that the file to be transferred is a legal file, the file to be transferred is executed, thereby avoiding the situation where the malicious file issued by the terminal management system is directly executed by the target terminal, causing a security risk to the target terminal, further providing security protection for the target terminal, and improving the security of the target terminal.

[0100] Based on the above embodiments, the present application provides a method for transferring files. Figure 4 , the method comprises the following steps:

[0101] Step 401: The file transfer system obtains a file to be transferred from a first user and a first private key of the first user, and signs the file to be transferred using the first private key to obtain signature information.

[0102] Step 402: The file transfer system obtains target information.

[0103] The target information is information signed by the second private key of the second user, and is at least used to prevent tampering with the first public key of the first user.

[0104] Step 403: The file transfer system sends the first public key to the terminal management system.

[0105] It should be noted that step 403 may be performed before step 404 , may be performed after step 404 , or may be performed simultaneously with step 404 .

[0106] In an embodiment of the present application, after the terminal management system receives the first public key, it can determine whether the received first public key is the public key of the first user based on the target information. If it is determined that the received first public key is not the public key of the first user, it indicates that the public key of the first user has been tampered with. If the received first public key is the public key of the first user, it indicates that the public key of the first user has not been tampered with.

[0107] Optionally, the target information is also used to prevent tampering with the identifier of the terminal management system bound to the first user.

[0108] It should be noted that the target information can include first information and second information; the first information is a digest of the first public key and signed with the second private key of the second user; the second information can be a digest of the terminal management system identifier and signed with the second private key of the second user. In this way, the first public key of the first user can be bound to the terminal management system, which can also be understood as binding the first user or target device to the terminal management system. This means that the first user can only use the terminal management system to send files to be transferred through the target device, ensuring the security of the first user's transmission of files to be transferred.

[0109] Optionally, the target information is obtained by summarizing the identifier of the terminal management system bound to the first user and the first public key, and signing with the second private key of the second user.

[0110] In an embodiment of the present application, the first public key and the identifier of the terminal management system may be summarized (ie, hashed) to obtain summarized information, and the summarized information may be signed with the second private key to obtain target information.

[0111] Optionally, the first private key, the first public key and the target information are all stored in a removable device.

[0112] It should be noted that the first private key can be read externally, but it also can be unreadable by external devices. When the first private key can be read externally, the terminal device can obtain the first private key from the removable device. When the first private key cannot be read externally, the removable device can obtain the file to be transferred and sign the file using its stored first private key to generate signature information. When the first public key and target information are stored in the removable device, the terminal device can read the first public key and target information from the removable device.

[0113] Step 404: The file transfer system sends the signature information, the file to be transferred, and the target information to the terminal management system.

[0114] The target information is used to instruct the terminal management system to determine whether the first public key of the first user has been tampered with; the signature information is used to instruct the terminal management system to determine whether the received file to be transmitted is a legal file when it is determined that the first public key has not been tampered with.

[0115] Step 405: The terminal management system receives the first user's to-be-transmitted file, signature information corresponding to the to-be-transmitted file, and target information sent by the file transmission system.

[0116] The target information is information signed by the second private key of the second user, and is used to prevent tampering with the first public key of the first user.

[0117] Step 406: The terminal management system receives the first public key of the first user.

[0118] In an embodiment of the present application, the terminal management system can receive the first public key of the first user sent by the file transfer system.

[0119] It should be noted that step 406 may be performed before step 405 or after step 406, and step 405 and step 406 may also be performed simultaneously.

[0120] Step 407: The terminal management system determines whether the first public key has been tampered with based on the second public key of the second user and the received target information.

[0121] In an embodiment of the present application, the received first public key can be processed based on the second public key to obtain a processing result, and the processing result can be compared with the target information to determine whether the first public key has been tampered with.

[0122] Preferably, the target information is also used to prevent tampering with the identifier of the terminal management system bound to the first user.

[0123] The target information may include first information and second information; the first information may be obtained by summarizing the first public key and signing it with the second private key of the second user; the second information may be obtained by summarizing the identifier of the terminal management system and signing it with the second private key of the second user. The target information may also be obtained by summarizing the identifier of the terminal management system and the first public key and signing it with the second private key of the second user. In this way, the first public key of the first user can be bound to the terminal management system, which can also be understood as binding the first user to the terminal management system, so that the first user can only use the terminal management system to send the file to be transferred, thereby ensuring the security of the first user transmitting the file to be transferred.

[0124] Step 408: When it is determined based on the target information that the first public key has not been tampered with, and when it is determined based on the target information that the terminal management system is bound to the user who sent the file to be transmitted, the terminal management system determines whether the received file to be transmitted is a legal file based on the first public key and the signature information.

[0125] The target information is obtained by summarizing the identifier of the terminal management system bound to the first user and the first public key and signing it with the second private key of the second user.

[0126] In an embodiment of the present application, if the first public key has not been tampered with, the first public key can be used to sign the file to be transmitted to obtain new signature information. If it is determined that the new signature information is consistent with the received signature information, it is determined that the file to be transmitted is a legal file.

[0127] It should be noted that determining in step 408 that the first public key has not been tampered with based on the target information and binding the terminal management system to the user who sent the file to be transferred based on the target information can be achieved by the following steps:

[0128] a1. The terminal management system performs digest calculation using the first public key and the identifier of the terminal management system to obtain a target value.

[0129] The target value is used to uniquely refer to the first public key and the identifier of the terminal management system.

[0130] In the embodiment of the present application, performing a digest calculation on the first public key and the identifier of the terminal management system can be understood as performing a hash process on the first public key and the identifier of the terminal management system. The target value can be a hash value.

[0131] a2. The terminal management system determines whether the first public key has been tampered with and whether the terminal management system is bound to the user who sent the file to be transferred based on the target value, the second public key of the second user and the received target information.

[0132] The target information is obtained by summarizing the identifier of the terminal management system and the first public key and signing it with the second private key of the second user.

[0133] In an embodiment of the present application, the second public key can be used to sign the target value to obtain third information. When it is determined that the third information is consistent with the target information, it is determined that the first public key has not been tampered with, and the terminal management system is bound to the user who sends the file to be transferred.

[0134] Step 409: When it is determined that the file to be transmitted is a legal file, the terminal management system sends the file to be transmitted to the target terminal.

[0135] Step 410: The target terminal receives the first user's to-be-transmitted file, signature information corresponding to the to-be-transmitted file, and target information sent by the terminal management system.

[0136] The target information is used to prevent tampering with the first public key; the first public key is the public key of the first user.

[0137] Step 411: The target terminal obtains the first public key and the identifier of the terminal management system bound to the first user, and verifies whether the file to be transferred is legal based on the first public key and the signature information when it determines based on the target information that the first public key has not been tampered with and the binding identifier is consistent with the identifier reflected in the target information.

[0138] Among them, the first public key and the identifier of the terminal management system can be sent by the terminal management system to the target terminal; the target information can be obtained by summarizing the identifier and the first public key of the terminal management system bound to the first user and signing with the second private key of the second user.

[0139] In an embodiment of the present application, the target terminal can summarize the identifier and the first public key of the terminal management system, and use the second public key of the second user to sign the summarized information to obtain fourth information. When it is determined that the fourth information is consistent with the target information, it is determined that the first public key has not been tampered with and the binding identifier is consistent with the identifier reflected by the target information. At this time, the first public key can be used to sign the file to be transmitted to obtain new signature information, and when the received signature information is consistent with the new signature information, it is determined that the file to be transmitted is a legal file.

[0140] Step 412: If it is determined that the file to be transferred is a legal file, execute the file to be transferred.

[0141] It should be noted that, for the description of the same steps and contents in this embodiment as those in other embodiments, reference can be made to the description in other embodiments and will not be repeated here.

[0142] The embodiment of the present application provides a file transfer method. When a terminal management system is hacked, the terminal management system can determine whether the first public key of the first user has been tampered with based on the target information sent by the file transfer system. If it is determined that the first public key has not been tampered with, and if it is determined that the file to be transferred is a legitimate file based on the signature information sent by the file transfer system, the terminal management system sends the file to be transferred to the target terminal, thereby preventing the hacker from attacking the terminal management system and forging the identity of the first user by tampering with the first public key to send malicious files to the target terminal. This eliminates the security risks of the target terminal, improves the security of the target terminal, and solves the problem of the target terminal being attacked by malicious viruses in the related art. Moreover, the legitimacy of the file sent by the terminal management system is verified by the target terminal, and if the file sent by the terminal management system is a legitimate file, the file is executed, thereby avoiding the security risks of the target terminal when the malicious file sent by the terminal management system is directly executed by the target terminal, further providing security protection for the target terminal and improving the security of the target terminal.

[0143] Based on the above embodiment, the embodiment of the present application further provides a file transmission system, which includes a terminal device and a removable device. Figure 5As shown, the terminal management system includes an RSA signature verification module and a file signing tool; wherein, the RSA signature verification module is used to verify the legitimacy of the file to be transferred on the terminal management system; the RSA signature verification module has an authorization verification module, and the authorization verification module is used to verify the identity of the first user; the file signing tool is used to sign the file to be transferred. An RSA signature verification module is also deployed on the target terminal, so that after receiving the file to be transferred, the target terminal can verify the legitimacy of the file to be transferred, and execute the file to be transferred if it is determined that the file to be transferred is a legal file. The USB key can be connected to the terminal device through a USB interface, and the terminal management system can verify the identity of the first user through the target information stored in the USB key, so as to authorize the first user after the terminal management system passes the identity authentication of the first user, so that the first user can download the file signing tool to the local terminal device, so that the terminal device can sign the first user's file to be transferred through the file signing tool.

[0144] In a feasible implementation, the target terminal may be a tablet device, a computer or other device.

[0145] The following is a detailed explanation of the file transfer method provided in the embodiment of the present application in combination with the application scenario.

[0146] like Figure 6 As shown, the first user can connect to the terminal device through a USB key, and the terminal management system can verify the identity of the first user through the target information in the USB key, and download the authorized file signing tool from the terminal management system to the local computer if the identity authentication is passed; the terminal device can use the file signing tool to sign the file to be transferred using the first private key of the first user in the USB key to generate signature information; and combine the signature information, target information and the file to be transferred to obtain the target file; the terminal device can send the target file to the terminal management system, and after receiving the target file, the terminal management system can parse the target file to obtain the target information, signature information and the file to be transferred, and determine whether the first public key has been tampered with based on the target information. If it is determined that the first public key has not been tampered with, the legitimacy of the file to be transferred is verified. If the file to be transferred is a legal file, the terminal management system sends the target file to the target terminal.

[0147] In one feasible implementation, the terminal management system can perform a one-way hash on the terminal management system's identity document (ID) and a first public key to generate a target hash value, then use a second public key to sign the target hash value to generate a third message. If the third message and the target message are consistent, the first public key is determined to be untampered with. The first public key can then be used to sign the contents of the file to be transmitted to obtain new signature information. If the received signature information and the new signature information are consistent, the file to be transmitted is determined to be legitimate. The digest includes the one-way hash.

[0148] It should be noted that when the target terminal receives the target file sent by the terminal management system, it can parse the target file to obtain the file to be transmitted, signature information and target information, and based on the target information, when it is determined that the first public key has not been tampered with, verify the legitimacy of the file to be transmitted. When it is determined that the file to be transmitted is a legal file, execute the file to be transmitted.

[0149] An embodiment of the present application provides a file transfer method. When a terminal management system is hacked, the terminal management system can determine whether a first public key of a first user has been tampered with based on target information sent by the file transfer system. When it is determined that the first public key has not been tampered with, and when it is determined that the file to be transferred is a legitimate file based on signature information sent by the file transfer system, the terminal management system sends the file to be transferred to the target terminal, thereby preventing the hacker from attacking the terminal management system and forging the identity of the first user by tampering with the first public key to send malicious files to the target terminal. This eliminates the security risks of the target terminal, improves the security of the target terminal, and solves the problem of security risks of the target terminal being attacked by malicious viruses in the related art. Moreover, through the target terminal, when it is determined that the first public key has not been tampered with based on target information, the legitimacy of the file to be transferred sent by the terminal management system is verified, and when it is determined that the file to be transferred sent by the terminal management system is a legitimate file, the file is executed, thereby avoiding the security risks of the target terminal when the malicious file sent by the terminal management system is directly executed by the target terminal. This further provides security for the target terminal and improves the security of the target terminal.

[0150] Based on the above embodiments, the embodiments of the present application provide a file transmission device, which includes a file transmission system. The file transmission system can be applied to Figure 1 and 4 In the file transmission method provided in the corresponding embodiment, refer to Figure 7 As shown, the file transmission system 5 may include: a first processor 51, a first memory 52 and a first communication bus 53;

[0151] The first communication bus 53 is used to realize the communication connection between the first processor 51 and the first memory 52;

[0152] The first processor 51 is configured to execute the file transfer program in the first memory 52 to implement the following steps:

[0153] Obtaining a file to be transmitted from a first user and a first private key of the first user, and signing the file to be transmitted using the first private key to obtain signature information;

[0154] Obtaining target information; wherein the target information is information signed by the second private key of the second user, and is at least used to prevent tampering with the first public key of the first user;

[0155] The signature information, the file to be transmitted and the target information are sent to the terminal management system; wherein the target information is used to instruct the terminal management system to determine whether the first public key of the first user has been tampered with; the signature information is used to instruct the terminal management system to determine whether the received file to be transmitted is a legal file when it is determined that the first public key has not been tampered with.

[0156] In other embodiments of the present application, the target information is also used to prevent tampering with the identifier of the terminal management system bound to the first user.

[0157] In other embodiments of the present application, the target information is obtained by summarizing the identifier and the first public key of the terminal management system bound to the first user and signing it with the second private key of the second user.

[0158] In other embodiments of the present application, the first processor 51 is configured to execute the file transfer program in the first memory 52 to implement the following steps:

[0159] Sending the first public key to the terminal management system;

[0160] Accordingly, the target information is specifically used to instruct the terminal management system to determine whether the received first public key of the first user has been tampered with.

[0161] In other embodiments of the present application, the first private key, the first public key, and the target information are all stored in a removable device.

[0162] It should be noted that the specific implementation process of the steps executed by the first processor in this embodiment can refer to Figure 1 and 4 The implementation process of the file transmission method provided in the corresponding embodiment will not be repeated here.

[0163] The file transfer system provided by the embodiment of the present application can, when the terminal management system is hacked, determine whether the first public key of the first user has been tampered with based on the target information sent by the file transfer system. If it is determined that the first public key has not been tampered with, and if it is determined that the file to be transferred is a legal file based on the signature information sent by the file transfer system, the terminal management system sends the file to be transferred to the target terminal, thereby preventing the hacker from attacking the terminal management system and forging the identity of the first user by tampering with the first public key to send malicious files to the target terminal, eliminating the security risks of the target terminal, improving the security of the target terminal, and solving the problem of security risks of the target terminal being attacked by malicious viruses in the related art.

[0164] Based on the above embodiments, the embodiments of the present application provide a file transmission device, which includes a server, Figure 2 and 4 In the file transfer method provided in the corresponding embodiment, a terminal management system is running on the server, referring to Figure 8 As shown, the server 6 may include: a second processor 61, a second memory 62, and a second communication bus 63, wherein:

[0165] The second communication bus 63 is used to realize the communication connection between the second processor 61 and the second memory 62;

[0166] The second processor 61 is used to execute the file transfer program in the second memory 62 to implement the following steps:

[0167] Receiving a file to be transferred from a first user, signature information corresponding to the file to be transferred, and target information sent by a file transfer system; wherein the target information is information signed by a second private key of a second user, and is used to prevent tampering with the first public key of the first user;

[0168] In a case where it is determined based on the target information that the first public key has not been tampered with, determining based on the first public key and the signature information whether the received file to be transmitted is a legitimate file;

[0169] When it is determined that the file to be transferred is a legal file, the file to be transferred is sent to the target terminal.

[0170] In other embodiments of the present application, the second processor 61 is configured to execute the file transfer program in the second memory 62, and when it is determined based on the target information that the first public key has not been tampered with, determine whether the received file to be transferred is a legitimate file based on the first public key and the signature information, so as to implement the following steps:

[0171] determining, based on the second public key of the second user and the received target information, whether the first public key has been tampered with;

[0172] In the case that the first public key has not been tampered with, the first public key and signature information are used to verify whether the received file to be transmitted is legal.

[0173] In other embodiments of the present application, the target information for the second processor 61 to execute the file transfer program in the second memory 62 is also used to prevent tampering with the identifier of the terminal management system bound to the first user;

[0174] Accordingly, when it is determined based on the target information that the first public key has not been tampered with, determining whether the received file to be transmitted is a legitimate file based on the first public key and the signature information includes:

[0175] When it is determined based on the target information that the first public key has not been tampered with, and when it is determined based on the target information that the terminal management system is bound to the user who sent the file to be transmitted, it is determined based on the first public key and the signature information whether the received file to be transmitted is a legal file.

[0176] In other embodiments of the present application, the target information for the second processor 61 to execute the file transfer program in the second memory 62 is an identifier of the terminal management system bound to the first user and a digest of the first public key, and is obtained by signing with the second private key of the second user;

[0177] Accordingly, the terminal management system performs a digest calculation using the first public key and the identifier of the terminal management system to obtain a target value; based on the target value, the second public key of the second user and the received target information, it determines whether the first public key has been tampered with and whether the terminal management system is bound to the user who sends the file to be transferred.

[0178] In other embodiments of the present application, the second processor 61 is configured to execute the file transfer program in the second memory 62 to implement the following steps:

[0179] A first public key of a first user is received, and whether the received first public key has been tampered with is determined based on the received target information.

[0180] It should be noted that the specific implementation process of the steps executed by the second processor in this embodiment can be referred to Figure 2 and 4 The implementation process of the file transmission method provided in the corresponding embodiment will not be repeated here.

[0181] The server provided by the embodiment of the present application can, when the terminal management system on the server is hacked, determine whether the first public key of the first user has been tampered with based on the target information sent by the file transfer system, and when it is determined that the first public key has not been tampered with, verify the legitimacy of the file to be transferred based on the signature information sent by the file transfer system. When it is determined that the file to be transferred is legal, the terminal management system sends the file to be transferred to the target terminal, thereby preventing the hacker from attacking the terminal management system and forging the identity of the first user by tampering with the first public key and sending malicious files to the target terminal. This eliminates the security risks of the target terminal, improves the security of the target terminal, and solves the problem in the related art that after the terminal management system is hacked, malicious files can be sent to the target terminal through the terminal management system, thereby causing the target terminal to be attacked by malicious viruses and posing a security risk.

[0182] Based on the above embodiments, the embodiments of the present application provide a file transmission device, which includes a target terminal, which can be applied to Figure 3 and 4 In the file transmission method provided in the corresponding embodiment, refer to Figure 9 As shown, the target terminal 7 may include: a third processor 71, a third memory 72 and a third communication bus 73;

[0183] The third communication bus 73 is used to realize the communication connection between the third processor 71 and the third memory 72;

[0184] The third processor 71 is configured to execute the file transfer program in the third memory 72 to implement the following steps:

[0185] Receiving a file to be transferred from a first user, signature information corresponding to the file to be transferred, and target information sent by the terminal management system; wherein the target information is used to prevent tampering with a first public key; the first public key is a public key of the first user;

[0186] Obtaining a first public key, and verifying whether the file to be transferred is legal based on the first public key and the signature information when determining based on the target information that the first public key has not been tampered with;

[0187] If it is determined that the file to be transferred is a legal file, the file to be transferred is executed.

[0188] In other embodiments of the present application, the target information is also used to prevent tampering with the identifier of the terminal management system bound to the first user;

[0189] In other embodiments of the present application, the third processor 71 is configured to execute the file transfer program in the third memory 72 to obtain the first public key, and when determining based on the target information that the first public key has not been tampered with, verify whether the file to be transferred is legal based on the first public key and the signature information, so as to implement the following steps:

[0190] Obtain the first public key and the identifier of the terminal management system bound to the first user, and when it is determined based on the target information that the first public key has not been tampered with and the binding identifier is consistent with the identifier reflected by the target information, verify whether the file to be transferred is legal based on the first public key and the signature information.

[0191] It should be noted that the specific implementation process of the steps executed by the third processor in this embodiment can be referred to Figure 3 and 4 The implementation process of the file transmission method provided in the corresponding embodiment will not be repeated here.

[0192] The target terminal provided in the embodiment of the present application verifies the legitimacy of the file to be transferred based on the target information when it determines that the first public key has not been tampered with, and executes the file to be transferred when it determines that the file to be transferred is a legal file, thereby avoiding security risks for the target terminal when malicious files issued by the terminal management system are directly executed by the target terminal, further providing security protection for the target terminal and improving the security of the target terminal.

[0193] Based on the above embodiments, the embodiments of the present application provide a computer-readable storage medium, which stores one or more programs, and the one or more programs can be executed by one or more processors to implement Figures 1 to 4 The corresponding embodiment provides steps of the file transmission method.

[0194] It should be noted that the above-mentioned computer-readable storage medium can be a read-only memory (ROM), a programmable read-only memory (PROM), an erasable programmable read-only memory (EPROM), an electrically erasable programmable read-only memory (EEPROM), a magnetic random access memory (FRAM), a flash memory (Flash Memory), a magnetic surface storage, an optical disc, or a compact disc read-only memory (CD-ROM); it can also be various electronic devices that include one or any combination of the above-mentioned memories, such as mobile phones, computers, tablet devices, personal digital assistants, etc.

[0195] It should be noted that, in this document, the terms "comprises," "includes," or any other variations thereof are intended to encompass non-exclusive inclusion, such that a process, method, article, or apparatus comprising a series of elements includes not only those elements but also other elements not explicitly listed, or elements inherent to such process, method, article, or apparatus. In the absence of further limitations, an element defined by the phrase "comprising a ..." does not exclude the presence of other identical elements in the process, method, article, or apparatus comprising the element.

[0196] The serial numbers of the above embodiments of the present application are for description only and do not represent the advantages or disadvantages of the embodiments.

[0197] Through the description of the above implementation methods, those skilled in the art can clearly understand that the above-mentioned embodiment methods can be implemented by means of software plus the necessary general hardware platform, and of course can also be implemented by hardware, but in many cases the former is a better implementation method. Based on this understanding, the technical solution of the present application, or the part that contributes to the prior art, can be embodied in the form of a software product, which is stored in a storage medium (such as ROM / RAM, magnetic disk, optical disk), and includes a number of instructions for enabling a terminal device (which can be a mobile phone, computer, server, air conditioner, or network device, etc.) to execute the methods described in each embodiment of the present application.

[0198] The present application is described with reference to the flowcharts and / or block diagrams of the methods, devices (systems), and computer program products according to the embodiments of the present application. It should be understood that each process and / or box in the flowchart and / or block diagram, as well as the combination of the processes and / or boxes in the flowchart and / or block diagram, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, an embedded processor, or other programmable data processing device to produce a machine, so that the instructions executed by the processor of the computer or other programmable data processing device generate instructions for implementing the steps in the process. Figure 1 a process or multiple processes and / or boxes Figure 1 A device that provides the functions specified in a block or multiple blocks.

[0199] These computer program instructions may also be stored in a computer readable memory that can direct a computer or other programmable data processing device to work in a specific manner, so that the instructions stored in the computer readable memory produce an article of manufacture comprising an instruction device, which implements the process Figure 1 a process or multiple processes and / or boxes Figure 1 The function specified in one or more boxes.

[0200] These computer program instructions can also be loaded onto a computer or other programmable data processing device so that a series of operational steps are executed on the computer or other programmable device to produce a computer-implemented process, thereby providing the instructions executed on the computer or other programmable device for implementing the process. Figure 1 a process or multiple processes and / or boxes Figure 1 A step that specifies a function in one or more boxes.

[0201] The above are only preferred embodiments of the present application and do not limit the patent scope of the present application. Any equivalent structure or equivalent process transformation made using the contents of the present application specification and drawings, or directly or indirectly applied in other related technical fields, are also included in the patent protection scope of the present application.

Claims

1. A file transmission method, characterized in that: Applied to a file transfer system, the method includes: Obtaining a file to be transmitted from a first user and a first private key of the first user, and signing the file to be transmitted using the first private key to obtain signature information; Obtaining target information; wherein the target information includes information obtained by signing digested information using the second private key of the second user, at least for preventing tampering with the first public key of the first user; the digested information is obtained by the second user digesting the first public key and an identifier of a terminal management system bound to the first user; The signature information, the file to be transmitted, and the target information are sent to the terminal management system, wherein the target information is used to instruct the terminal management system to determine whether the first public key of the first user has been tampered with, and to determine whether the terminal management system is bound to the first user; the signature information is used to instruct the terminal management system to determine whether the received file to be transmitted is a legal file when it is determined that the first public key has not been tampered with and the first user is a user authorized by the terminal management system.

2. The method according to claim 1, characterized in that The target information is also used to prevent tampering with the identifier of the terminal management system bound to the first user.

3. The method according to any one of claims 1 to 2, characterized in that The method further comprises: Sending the first public key to the terminal management system; Correspondingly, the target information is specifically used to instruct the terminal management system to determine whether the received first public key of the first user has been tampered with.

4. The method according to claim 3, characterized in that The first private key, the first public key and the target information are all stored in a removable device.

5. A file transmission method, characterized in that: The terminal management system is applied to a server, and the method includes: Receiving, from a file transfer system, a file to be transferred from a first user, signature information corresponding to the file to be transferred, and target information; wherein the target information includes information obtained by signing a digest of information using a second private key of a second user to prevent tampering with the first public key of the first user; and the digested information is obtained by the second user digesting the first public key and an identifier of a terminal management system bound to the first user; If it is determined based on the target information that the first public key has not been tampered with and the first user is a user authorized by the terminal management system, determining whether the received file to be transmitted is a legitimate file based on the first public key and the signature information; When it is determined that the file to be transmitted is the legal file, the file to be transmitted is sent to the target terminal.

6. The method according to claim 5, characterized in that The determining whether the received file to be transmitted is a legitimate file based on the first public key and the signature information when the first public key is determined not to have been tampered with based on the target information includes: determining, based on the second public key of the second user and the received target information, whether the first public key has been tampered with; In the case that the first public key has not been tampered with, the first public key and the signature information are used to verify whether the received file to be transmitted is legal.

7. The method according to claim 5, characterized in that The target information is also used to prevent tampering with the identifier of the terminal management system bound to the first user; Accordingly, when it is determined based on the target information that the first public key has not been tampered with, determining whether the received file to be transmitted is a legitimate file based on the first public key and the signature information includes: When it is determined based on the target information that the first public key has not been tampered with, and when it is determined based on the target information that the terminal management system is bound to the user who sends the file to be transmitted, it is determined based on the first public key and the signature information whether the received file to be transmitted is a legal file.

8. The method according to claim 7, characterized in that The terminal management system performs a digest calculation using the first public key and the identifier of the terminal management system to obtain a target value; based on the target value, the second public key of the second user and the received target information, determines whether the first public key has been tampered with and whether the terminal management system is bound to the user who sends the file to be transferred.

9. The method according to any one of claims 5 to 8, characterized in that Also includes: A first public key of the first user is received, and whether the received first public key has been tampered with is determined according to the received target information.

10. A file transmission method, characterized in that: Applied to a target terminal, the method includes: Receiving, from a terminal management system, a file to be transferred from a first user, signature information corresponding to the file to be transferred, and target information; wherein the target information includes information obtained by signing a digest of information using a second private key of a second user, and is used to prevent tampering with a first public key; the first public key is the public key of the first user; and the digested information is obtained by the second user digesting the first public key and an identifier of the terminal management system bound to the first user; Obtaining a first public key, and verifying whether the file to be transferred is legal based on the first public key and the signature information, if it is determined based on the target information that the first public key has not been tampered with and the first user is a user authorized by the terminal management system; If it is determined that the file to be transmitted is a legal file, the file to be transmitted is executed.

11. The method according to claim 10, characterized in that The target information is also used to prevent tampering with the identifier of the terminal management system bound to the first user; The obtaining of the first public key and, when determining based on the target information that the first public key has not been tampered with, verifying whether the file to be transferred is legal based on the first public key and the signature information includes: Obtain a first public key and an identifier of the terminal management system bound to the first user, and upon determining based on the target information that the first public key has not been tampered with and the binding identifier is consistent with the identifier reflected by the target information, verify whether the file to be transferred is legal based on the first public key and the signature information.

12. A file transfer device, characterized in that: The device includes: a processor, a memory and a communication bus; The communication bus is used to realize the communication connection between the processor and the memory; The processor is configured to execute the file transmission program in the memory to implement the steps of the file transmission method according to any one of claims 1 to 4, 5 to 9, or 10 to 11.

13. A computer-readable storage medium, characterized in that The computer-readable storage medium stores one or more programs, and the one or more programs can be executed by one or more processors to implement the steps of the file transmission method according to any one of claims 1 to 4, 5 to 9, or 10 to 11.

Images