Communication data processing method, device and computer equipment based on VOIP communication

Abstract

The application relates to the technical field of mobile internet, in particular to a communication data processing method and device based on VOIP communication, computer equipment, a storage medium and a computer program product. The method comprises the following steps: collecting communication data when a user communicates based on VOIP; generating an encryption key by using a preset seed key and a counter value; combining the communication data and the encryption key according to a preset agreement rule to obtain a combined string; encoding the combined string by using a preset encoding rule to obtain encrypted data; and transmitting the encrypted data to a data receiving party. The method can effectively improve the transmission security of communication data in the network communication process.

Description

TECHNICAL FIELD

[0001] The present application relates to the mobile Internet technology field, in particular to a communication data processing method and device based on VOIP communication, computer equipment, storage medium and computer program product. BACKGROUND

[0002] With the rapid development of Internet and mobile communication technology, the rapid improvement of network speed and the coverage of network is more and more wide, network phone gradually appears in the public vision. When communicating based on VOIP, different communication links are easy to be attacked by third parties in the interaction process, such as intercepting communication, eavesdropping, phishing attack by manipulating caller ID, etc., which is easy to cause important data to be stolen or lost, or to be processed by third parties to achieve bad purpose.

[0003] In the traditional technology, the data in the communication link is usually prevented from being stolen by adding new functional entities such as authentication center in VOIP networking. In the transmission process, the encryption and decryption of data need to be processed by the authentication center. The traditional encryption method for VOIP call needs to increase the corresponding supporting basic hardware facilities on the basis of existing networking, and also needs to purchase digital certificate from qualified CA agency and smart card from hardware manufacturer, which has high cost, is not flexible in deployment, cannot quickly respond to the rapid development of stealing means, and reduces the security of network call. SUMMARY

[0004] Therefore, it is necessary to provide a communication data processing method and device based on VOIP communication, computer equipment, computer readable storage medium and computer program product, which can improve the security of network communication.

[0005] In a first aspect, the present application provides a communication data processing method based on VOIP communication, applied to a data sender, the method comprising:

[0006] Collecting communication data when a user communicates based on VOIP;

[0007] Generating an encryption key using a preset seed key and a counter value;

[0008] Combining the communication data and the encryption key according to a preset agreement rule to obtain a combined string;

[0009] Encoding the combined string using a preset encoding rule to obtain encrypted data;

[0010] transmitting the encrypted data to a data receiver, the data receiver receiving the encrypted data, obtaining the communication data and the encryption key according to the encrypted data, verifying the encryption key, and outputting the communication data if the verification is passed.

[0011] In one of the embodiments, the preset agreement rule includes a first agreement rule and a second agreement rule.

[0012] The combination of the communication data and the encryption key according to the preset agreement rule includes:

[0013] Obtaining the timestamp information of the communication data.

[0014] Combining the communication data and the encryption key according to the first agreement rule to obtain a first string.

[0015] Combining the timestamp information and the first string according to the second agreement rule to obtain a combination string.

[0016] In a second aspect, the application further provides a communication data processing method based on VOIP communication, applied to a data receiver, the method including:

[0017] Receiving encrypted data transmitted by a data sender, the encrypted data being obtained by encoding a combination string using a preset encoding rule, the combination string being obtained by combining communication data and an encryption key based on a preset agreement rule, and the encryption key being generated based on a preset seed key and a counter value.

[0018] Decoding the encrypted data using the preset encoding rule to obtain the combination string.

[0019] Deconstructing the combination string according to the preset agreement rule to obtain the communication data and the encryption key.

[0020] Generating a verification key using the preset seed key and the counter value.

[0021] Verifying the encryption key based on the verification key, and outputting the communication data if the verification is passed.

[0022] In one of the embodiments, the method further includes:

[0023] If the verification is not passed, discarding the communication data, cutting off the current communication based on VOIP, and reporting an error to the communication parties.

[0024] In one of the embodiments, the method further includes:

[0025] monitoring a communication duration of a communication based on VOIP in real time;

[0026] comparing the communication duration with a preset communication duration, and performing identity verification on both parties of the communication based on the VOIP when the communication duration reaches the preset communication duration;

[0027] if the identity verification is unsuccessful, cutting off the current communication based on the VOIP and reporting an error to both parties of the communication.

[0028] In one of the embodiments, the preset agreement rules include a first agreement rule and a second agreement rule.

[0029] The deconstruction processing of the combined string according to the preset agreement rules to obtain the communication data and the encryption key includes:

[0030] deconstruction processing of the combined string according to the second agreement rule to obtain the timestamp information of the communication data and a first string;

[0031] if the difference between the timestamp information and the system local time is less than or equal to a preset threshold, deconstruction processing of the first string according to the first agreement rule to obtain the communication data and the encryption key.

[0032] In one of the embodiments, if the difference between the timestamp information and the system local time is greater than the preset threshold, cutting off the communication of both parties and reporting an error to both parties.

[0033] In a third aspect, the application further provides a communication data processing device based on VOIP communication, applied to a data sender, the device comprising:

[0034] a collection module for collecting communication data when a user communicates based on VOIP;

[0035] a key generation module for generating an encryption key using a preset seed key and a counter value;

[0036] a combination module for combining the communication data and the encryption key according to preset agreement rules to obtain a combined string;

[0037] an encoding module for encoding the combined string using a preset encoding rule to obtain encrypted data;

[0038] The data transmission module is configured to transmit the encrypted data to a data receiver, and after the data receiver receives the encrypted data, the data receiver obtains the communication data and the encryption key according to the encrypted data, verifies the encryption key, and if the verification is passed, outputs the communication data.

[0039] In one of the embodiments, the combination module further comprises: obtaining timestamp information of the communication data; combining the communication data and the encryption key according to a first agreement rule to obtain a first string; and combining the timestamp information and the first string according to a second agreement rule to obtain a combined string.

[0040] In a fourth aspect, the application further provides a communication data processing device based on VOIP communication, which is applied to a data receiver, and the device comprises:

[0041] The data receiving module is configured to receive encrypted data transmitted by a data sender, wherein the encrypted data is obtained by encoding a combined string using a preset encoding rule, and the combined string is obtained by combining communication data and an encryption key based on a preset agreement rule; and the encryption key is generated based on a preset seed key and a counter value.

[0042] The decoding module is configured to decode the encrypted data using the preset encoding rule to obtain the combined string.

[0043] The deconstruction module is configured to deconstruct the combined string according to the preset agreement rule to obtain the communication data and the encryption key.

[0044] The verification key generation module is configured to generate a verification key using the preset seed key and the counter value.

[0045] The verification module is configured to verify the encryption key based on the verification key, and if the verification is passed, output the communication data.

[0046] In one of the embodiments, the device further comprises:

[0047] The communication cutting module is configured to discard the communication data, cut off the current communication based on VOIP, and report an error to both communication parties if the verification is not passed.

[0048] In one of the embodiments, the device further comprises:

[0049] The identity authentication module is configured to monitor a communication duration of the communication based on the VOIP in real time, compare the communication duration with a preset communication duration, perform identity authentication on both parties of the communication based on the VOIP when the communication duration reaches the preset communication duration, and cut off the communication based on the VOIP and report an error to both parties of the communication if the identity authentication is unsuccessful.

[0050] In one of the embodiments, the deconstruction module further comprises: deconstructing the combined string according to the second agreement rule to obtain the timestamp information of the communication data and a first string; and deconstructing the first string according to the first agreement rule to obtain the communication data and the encryption key if a difference between the timestamp information and a system local time is less than or equal to a preset threshold.

[0051] In one of the embodiments, the deconstruction module further comprises: cutting off the communication between the two parties and reporting an error to the two parties if the difference between the timestamp information and the system local time is greater than the preset threshold.

[0052] In a fifth aspect, the present application further provides a computer device comprising a memory and a processor, wherein the memory stores a computer program, and the processor implements the steps of the above method when executing the computer program.

[0053] In a sixth aspect, the present application further provides a computer readable storage medium, which stores a computer program, and the computer program implements the steps of the above method when executed by a processor.

[0054] In a seventh aspect, the present application further provides a computer program product comprising a computer program, and the computer program implements the steps of the above method when executed by a processor.

[0055] The aforementioned communication data processing method, apparatus, computer equipment, storage medium, and computer program products based on VoIP communication collect communication data from users during VoIP communication. An encryption key is generated using a preset seed key and a counter value. Because the counter value changes randomly, the encryption key generated based on the preset seed key and counter value has higher security. The communication data and encryption key are combined according to preset rules to obtain a combined string. This combined string is then encoded using preset encoding rules to obtain encrypted data, which is transmitted to the data receiver. Since the encrypted data is obtained by processing the communication data and encryption key based on preset rules and preset encoding rules, even if the encrypted data is obtained by an attacker during VoIP communication, the two-layer processing of preset rules and preset encoding rules integrates the communication data and encryption key. Without knowing the encryption key, preset rules, and preset encoding rules, the attacker cannot obtain the communication data within the encrypted data. This effectively improves the security of communication data transmission during network communication. Furthermore, the entire encryption process requires no additional hardware, further reducing communication costs and increasing deployment flexibility. Attached Figure Description

[0056] Figure 1 This is an application environment diagram of a communication data processing method based on VoIP communication in one embodiment;

[0057] Figure 2 This is a flowchart illustrating a communication data processing method based on VoIP communication in one embodiment;

[0058] Figure 3 This is a flowchart illustrating the steps of combining communication data and encryption keys to obtain a combined string according to a preset agreement rule in one embodiment.

[0059] Figure 4 This is a flowchart illustrating a communication data processing method based on VoIP communication in another embodiment;

[0060] Figure 5 This is a flowchart illustrating a communication data processing method based on VoIP communication in another embodiment;

[0061] Figure 6 This is a timing diagram of a communication data processing method based on VoIP communication in another embodiment;

[0062] Figure 7 This is a structural block diagram of a communication data processing device based on VoIP communication in one embodiment;

[0063] Figure 8A structural block diagram of a communication data processing device based on VOIP communication in another embodiment;

[0064] Figure 9 An internal structural diagram of a computer device in an embodiment. DETAILED DESCRIPTION

[0065] For the purpose, technical solutions and advantages of the present application to be clearer, the present application is further described in detail below in combination with the drawings and embodiments. It should be understood that the specific embodiments described herein are only used to explain the present application and do not limit the present application.

[0066] It should be noted that the user information (including but not limited to user device information, user personal information, etc.) and data (including but not limited to data for analysis, stored data, displayed data, etc.) involved in the present application are all information and data authorized by the user or authorized by all parties.

[0067] The communication data processing method based on VOIP communication provided by the embodiments of the present application can be applied in an application environment as shown in the figure. Figure 1 The data sender 102 communicates with the data receiver 104 based on VOIP. The data storage system can store the data that the data sender 102 and the data receiver 104 need to process. The data storage system is integrated on the data sender 102 and the data receiver 104 respectively. The data receiver 102 collects the communication data when the user communicates based on VOIP, generates an encryption key using a preset seed key and a counter value, processes the communication data and the encryption key according to a preset agreement rule to obtain a combination string, encodes the combination string using a preset encoding rule to obtain encrypted data, and transmits the encrypted data to the data receiver 104. After receiving the encrypted data, the data receiver 104 obtains the communication data and the encryption key according to the encrypted data, verifies the encryption key, and outputs the communication data if the verification is passed. The data receiver 102 and the data sender 104 can be, but are not limited to, various personal computers, notebook computers, smart phones, tablet computers, Internet of Things devices and portable wearable devices. The Internet of Things device can be a smart speaker, a smart TV, a smart air conditioner, a smart vehicle device, etc. The portable wearable device can be a smart watch, a smart bracelet, a head-mounted device, etc. It can be understood that the data sender and the data receiver in the present application are not fixed, and the data sender and the data receiver can be switched in the actual communication process.

[0068] In one of the embodiments, the VOIP can be a network of SIP protocol extended to a communication range. It can be understood that the SIP protocol can enable the VOIP to be not limited to pure voice calls, but also to support video conferencing, instant messaging, text or other multimedia communication scenarios.

[0069] In one embodiment, as shown in Figure 2 , a communication data processing method based on VOIP communication is provided, which is applied to a data sender in Figure 1 for example, and includes the following steps:

[0070] Step 202, collecting communication data of a user based on VOIP communication.

[0071] Among them, VOIP refers to the use of IP protocol to transmit voice in the form of data packets on the IP network. In a VOIP network, voice signals are digitized, compressed and converted into IP packets, and then transmitted in the IP network.

[0072] Specifically, the data sender collects communication data of a user based on VOIP network communication.

[0073] Step 204, generating an encryption key using a preset seed key and a counter value.

[0074] Among them, the preset seed key is a key determined in advance by the data sender and the data receiver, which is used to generate the encryption key. It can be understood that the preset seed key is a dynamic value, and the number of occurrences of each preset seed key is recorded by the counter. The counter is an unordered container used to record the number of occurrences of various values, which is generally stored in the form of key-value pair, and the value to be recorded is the key, and the number of occurrences of this value is the counter value.

[0075] Specifically, the data sender generates an encryption key using the preset seed key and the corresponding counter value agreed by the communication parties in advance. It can be understood that, since the preset seed key is a dynamic value, the encryption key generated based on the preset seed key and the counter value is also a one-time encryption key. The one-time pad encryption method for data encryption transmission can greatly improve the security of data transmission.

[0076] In one embodiment, the encryption key can be generated based on the event synchronization mode. Specifically, the number of times of encrypted data transmission between the communication parties (i.e. the event sequence) is used as an operation factor of the encryption key, for example, if the current encryption times is 10, the preset seed key value is 10, and the encryption key for encrypting the current communication data is generated according to the counter value corresponding to the preset seed key value 10 and the preset seed key value.

[0077] Step 206, combining the communication data and the encryption key according to the preset agreement rule to obtain a combined string.

[0078] The preset agreement rule is an agreement rule used to obtain the combined string. The communication data and the encryption key are combined according to the preset agreement rule, so that the communication data and the encryption key are combined to obtain an entirety. It can be understood that the preset agreement rule is obtained by the data receiving party and the data sending party in advance.

[0079] Specifically, the data sending party combines the communication data and the encryption key according to the preset agreement rule obtained by the communication parties in advance, to obtain the combined string.

[0080] Step 208: The combined string is encoded using a preset encoding rule to obtain encrypted data.

[0081] The preset encoding rule is a rule used to encode the combined string. The combined string is processed by the preset encoding rule, so that the combined string is converted into encrypted data that can be transmitted. It can be understood that the preset encoding rule is obtained by the data receiving party and the data sending party in advance.

[0082] Specifically, the data sending party encodes the combined string according to the preset encoding rule obtained by the communication parties in advance, to obtain encrypted data that can be used for transmission.

[0083] In one embodiment, the preset encoding rule can be obtained by using a preset encoding algorithm. Specifically, the data sending party and the data receiving party agree in advance on the preset encoding algorithm to be used. When the combined string needs to be encoded, the data sending party calls the preset encoding algorithm to encode the combined string, to obtain the encrypted data.

[0084] In one embodiment, encoding the combined string using the preset encoding rule includes:

[0085] The combined string is encoded using the preset encoding rule, the combined string is modulated into analog information, the analog information is converted into digital information, and the encrypted data is obtained in the form of digital signals.

[0086] Step 210: The encrypted data is transmitted to the data receiving party. After receiving the encrypted data, the data receiving party obtains the communication data and the encryption key according to the encrypted data, verifies the encryption key, and outputs the communication data if the verification is passed.

[0087] Specifically, the data sending party transmits the encrypted data to the data receiving party based on the VOIP network. After receiving the encrypted data, the data receiving party performs a preset decryption operation on the encrypted data to obtain the communication data and the encryption key, and verifies the encryption key based on the verification key generated by itself. If the verification is passed, the communication data is output.

[0088] In the communication data processing method based on the VOIP communication, the communication data of the user in the VOIP communication is collected, and the encryption key is generated by using the preset seed key and the counter value. Since the counter value is randomly changed, the encryption key generated according to the preset seed key and the counter value has higher security. The combination string is obtained by combining the communication data and the encryption key according to the preset agreement rule, and the encryption data is obtained by encoding the combination string according to the preset encoding rule. The encryption data is transmitted to the data receiving party. Since the encryption data is obtained by processing the communication data and the encryption key according to the preset agreement rule and the preset encoding rule, even if the encryption data is obtained by the attacker when the user communicates based on the VOIP, the communication data and the encryption key are fused together due to the two-layer processing of the preset agreement rule and the preset encoding rule. In the case where the encryption key, the preset agreement rule and the preset encoding rule are unknown, the attacker cannot obtain the communication data in the encryption data, thereby effectively improving the transmission security of the communication data in the network communication process. The entire encryption process does not need to increase additional hardware, further reduces the communication cost, and improves the deployment flexibility.

[0089] In one embodiment, as shown in Figure 3 The preset agreement rule includes a first agreement rule and a second agreement rule, and the combination string is obtained by combining the communication data and the encryption key according to the preset agreement rule.

[0090] In step 302, the timestamp information of the communication data is obtained.

[0091] The timestamp is a sequence of characters or encoded information, which is used to identify when a specific event occurs, and usually gives the date and time, and sometimes to the accuracy of tenths of a second. The main purpose of the timestamp is to authenticate the time when the data is generated through certain technical means, so as to verify whether the data is tampered after being generated. The timestamp information of the communication data is a timestamp generated based on the time when the data sending party collects the communication data.

[0092] Specifically, the data sending party obtains the timestamp information generated based on the time when the communication data is collected.

[0093] In step 304, the first string is obtained by combining the communication data and the encryption key according to the first agreement rule.

[0094] The first agreement rule is a splicing rule for generating the string of the communication data and the encryption key.

[0095] Specifically, the data sending party combines the communication data and the encryption key according to the first agreement rule, and combines the communication data and the encryption key into the first string.

[0096] For example, the data sender and the data receiver can agree to arrange the communication data and the encryption key in a specific order according to a first agreed rule, and combine the arranged communication data and encryption key with a random character placeholder of a fixed number of bits to obtain a first string.

[0097] In step 306, the timestamp information and the first string are combined according to a second agreed rule to obtain a combined string.

[0098] The second agreed rule is a concatenation rule of concatenating the timestamp information and the first string.

[0099] Specifically, the data sender combines the timestamp information and the first string according to the second agreed rule to obtain the combined string.

[0100] For example, the data sender and the data receiver can agree to arrange the communication data and the encryption key in a specific order according to a first agreed rule, and combine the arranged communication data and encryption key with a random character placeholder of a fixed number of bits to obtain a first string.

[0101] In this embodiment, the timestamp information corresponding to the time when the communication data is collected is obtained, and the timestamp information and the first string are combined according to the second agreed rule to obtain the combined string. Using the method in this example, the combined string obtained by the second agreed rule provides protection for the timestamp information, and the timestamp information provides protection for the validity of the first string. The combined string is obtained through double protection, which can further improve the accuracy of judging the validity of the communication data and improve the security of the encrypted transmission.

[0102] In one embodiment, as shown in Figure 4 , a communication data processing method based on VOIP communication is provided. Taking the data receiver in Figure 1 as an example, the method includes the following steps:

[0103] In step 402, the encrypted data transmitted by the data sender is received. The encrypted data is obtained by encoding the combined string using a preset encoding rule, and the combined string is obtained by combining the communication data and the encryption key based on a preset agreed rule. The encryption key is generated based on a preset seed key and a counter value.

[0104] Specifically, the data receiver receives the encrypted data transmitted by the data sender. The generation of the encrypted data is described in detail in the previous description of steps 202 to 210, and will not be repeated here.

[0105] In step 404, the encrypted data is decoded using a preset encoding rule to obtain the combined string.

[0106] Specifically, since the encrypted data is obtained by the data sender encoding the combined string according to the preset encoding rule, after the data receiver receives the encrypted data, the data receiver decodes the encrypted data using the preset encoding rule agreed with the data sender in advance to obtain the combined string.

[0107] In step 406, the combined string is deconstructed according to the preset agreement rule to obtain the communication data and the encryption key.

[0108] Specifically, since the combined string is obtained by the data sender combining the communication data and the encryption key according to the preset agreement rule, after the data receiver obtains the combined string, in order to obtain the encryption key and the communication data, the data receiver can deconstruct the combined string using the preset agreement rule agreed with the data sender in advance to obtain the communication data and the encryption key.

[0109] In step 408, the verification key is generated using the preset seed key and the counter value.

[0110] The verification key is a key generated by the data receiver based on the preset seed key and the counter value consistent with the data sender, and the verification key is used for comparison with the encryption key to determine whether the encrypted data is tampered with during transmission.

[0111] The preset seed key is a seed key agreed by the data receiver and the data sender in advance, and the data receiver and the data sender are provided with the same counter, and the counter values corresponding to the preset seed keys are consistent, so that the key generated based on the preset seed key and the counter value can verify the encryption key generated by the data sender.

[0112] Specifically, the data receiver obtains the counter value and generates the verification key using the preset seed key agreed with the data sender in advance and the counter value.

[0113] In step 410, the encryption key is verified based on the verification key, and if the verification is passed, the communication data is output.

[0114] Specifically, the data receiver compares the verification key with the encryption key, verifies the encryption key based on the verification key, and if the verification is passed, it indicates that the encrypted data is not tampered with during data transmission, and the communication data carried in the encrypted data is safe, and the communication data is output to the user.

[0115] In one embodiment, verifying the encryption key based on the verification key includes: if the verification key is consistent with the encryption key, the verification is passed; and if the verification key is inconsistent with the encryption key, the verification is not passed.

[0116] The method in the above embodiment, the data receiver decodes and disassembles the received encrypted data according to the preset coding rule and the preset agreement rule negotiated with the data sender, obtains the encryption key and the communication data, obtains the counter value corresponding to the preset seed key through the counter consistent with the data receiver, generates the verification key according to the preset seed key and the counter value, verifies the encryption key based on the verification key, and outputs the communication data to the user only when the encryption key passes the verification, thereby effectively ensuring the security of the communication data output to the user.

[0117] Further, in one embodiment, the communication data processing method based on VOIP communication further includes: if the verification fails, discarding the communication data, cutting off the current communication based on VOIP, and reporting an error to the communication parties.

[0118] Specifically, if the verification fails, it indicates that the encrypted data received by the current data receiver has been tampered with during transmission, and the current communication between the communication parties based on VOIP may be invaded by an attacker, and the communication data in the obtained encrypted data does not have security and does not need to be retained. Therefore, the data receiver discards the communication data, cuts off the current communication based on the VOIP network, generates a prompt information, and sends the prompt information to the data sender. The prompt information is used to report an error to the communication parties and to inform that the current communication network has an invasion risk.

[0119] In the embodiment, when the verification key generated by the data receiver is inconsistent with the encryption key generated by the data sender, it indicates that the security of the encrypted data received by the data receiver at this time cannot be guaranteed, and the data receiver discards the communication data and cuts off the current communication in time, effectively avoiding greater data eavesdropping or data tampering risk, and effectively improving the security of communication data transmission in the communication process.

[0120] Identity verification is a necessary means to ensure the security of communication between the communication parties, and the identity verification of both parties before communication is a necessary operation. In order to further improve the security of the communication process, in one embodiment, as shown in Figure 5 The communication data processing method based on VOIP communication further includes the following steps:

[0121] Step 502, real-time monitoring of the communication duration based on VOIP communication.

[0122] Specifically, the data receiver monitors the communication duration of the communication parties based on the VOIP network in real time when the communication parties communicate.

[0123] Step 504, compare the communication duration with the preset communication duration, and when the communication duration reaches the preset communication duration, identity authentication is performed on the communication parties based on VOIP.

[0124] The preset communication duration is time duration data used to determine whether identity authentication is needed for the communication parties. It can be understood that the preset communication duration is set by the designer according to the actual situation, and the specific value of the preset communication duration is not limited in the present application.

[0125] Specifically, when the communication duration reaches the preset communication duration, it means that the communication parties have communicated for a certain time based on the VOIP network, and a period of time has passed since the identity authentication of the communication parties. In order to further improve the security of the communication process, the data receiving party performs identity authentication on the communication parties currently communicating based on VOIP.

[0126] In one embodiment, if the data receiving party only has the right to authenticate the communication user corresponding to the data receiving party, and does not have the right to authenticate the data sending party, the data receiving party can generate an identity authentication request instruction and send it to the data sending party to apply for identity authentication of the communication user corresponding to the data sending party.

[0127] Step 506, if the identity authentication is not successful, the current communication based on VOIP is cut off, and an error is reported to the communication parties.

[0128] Specifically, if the identity authentication is not successful, it means that the communication parties at this time have the situation of mismatched identity information, which affects the security of the communication process. The data receiving party cuts off the current communication based on the VOIP network, generates a prompt information, and sends it to the data sending party. The prompt information is used to report an error to the communication parties and inform them that the current communication network has a communication risk.

[0129] In one embodiment, the identity authentication of the communication parties can be a periodic operation, and the specific number of times of identity authentication is determined by the total communication duration of the communication parties.

[0130] The method in the above embodiment, the data sending party performs identity authentication on the communication participants in the communication, and when it is found that there is a situation of unsuccessful identity authentication, the communication is cut off in time. By performing identity authentication on the communication participants in the communication, the situation that an attacker avoids the identity authentication operation before communication and intercepts and pretends to be a communication participant to steal communication data in the communication process is effectively avoided, and the security of the network communication process is further improved.

[0131] In actual communication process, after obtaining the encrypted data, the attacker cannot obtain the communication data, but can repeatedly send the obtained encrypted data to the data receiving party to disturb the normal work of the data receiving party.

[0132] Based on this, in one embodiment, the preset agreement rule includes a first agreement rule and a second agreement rule. The deconstruction processing of the combined string according to the preset agreement rule to obtain the communication data and the encryption key includes: deconstructing the combined string according to the second agreement rule to obtain the timestamp information of the communication data and the first string; if the difference between the timestamp information and the system local time is less than or equal to a preset threshold, deconstructing the first string according to the first agreement rule to obtain the communication data and the encryption key.

[0133] The first agreement rule is a concatenation rule for generating a string of communication data and encryption key; the second agreement rule is a concatenation rule for concatenating the timestamp information and the first string; and the timestamp information of the communication data is a timestamp generated based on the time when the data sending party collects the communication data.

[0134] The preset threshold is a time difference for judging the validity of the communication data. It can be understood that the preset threshold is set by the designer according to the actual data transmission rate in communication.

[0135] Specifically, in order to further improve the effect of anti-replay attack, the data receiving party needs to judge the validity of the communication data through the timestamp information of the communication data. When the data sending party generates the combined string, it first combines the communication data and the encryption key according to the first agreement rule to obtain the first string, and then combines the timestamp information and the first string according to the second agreement rule to obtain the combined string.

[0136] Therefore, the data receiving party first deconstructs the combined string according to the second agreement rule negotiated with the data sending party to obtain the timestamp information and the first string. The system local time at the current time is obtained, and the obtained timestamp information and the system local time are calculated. If the time difference between the timestamp information and the system local time is less than or equal to the preset threshold, it means that the encrypted data received by the current data receiving party is sent within the valid time period, and at this time it can be determined that the time effectiveness verification of the received communication data is successful. The data receiving party deconstructs the first string according to the first agreement rule negotiated with the data sending party to obtain the encryption key and the communication data with time effectiveness verification success.

[0137] In this embodiment, the data receiving party verifies the time effectiveness of the received communication data according to the timestamp information of the communication data, which can effectively prevent the attacker from using replay attack on the data receiving party and disturbing the system order, and further improves the security of the communication process.

[0138] Further, in one embodiment, the communication data processing method based on VOIP communication further comprises: if the difference between the timestamp information and the system local time is greater than the preset threshold, cutting off the communication between the two parties, and reporting an error to the two parties.

[0139] Specifically, the data receiving party obtains the system local time at the current time, calculates the obtained timestamp information with the system local time, and if the time difference between the timestamp information and the system local time is greater than the preset threshold, it means that the encrypted data received by the current data receiving party is not sent within the valid time period, at this time it can be determined that the timeliness verification of the current received communication data fails, and the data receiving party may be under attack by the attacker. The data receiving party cuts off the communication between the two parties, and generates a prompt information, which is used to report an error to the two parties, prompting that there is a risk in the current communication process.

[0140] In this embodiment, when the data receiving party determines that the communication data does not have timeliness through the timestamp information, it quickly cuts off the communication between the two parties, avoids the situation that the data receiving party receives disorderly due to a large number of replay attacks, and the communication data receiving error occurs, and further improves the security and stability of the communication process.

[0141] In one embodiment, as shown in Figure 6 A communication data processing method based on VOIP communication is provided, which is applied in a VOIP network based on Session Initiation Protocol (SIP) networking. Since the communication link established by such a method generally needs to involve the communication between the Internet and the Public Switched Telephone Network (PSTN), it is easy for third-party attackers to perform activities such as intercepting communication and eavesdropping during the interaction process in different communication links. The method starts from the whole, ensures the security of communication data transmission in the communication process, and improves the difficulty of cracking encrypted data. The method is as follows:

[0142] First, the PSTN side terminal collects the communication data of the user based on VOIP through the communication collection device integrated in the terminal, such as a microphone, and transmits the data to the PSTN server.

[0143] The PSTN server generates a one-time encryption key OTP using a preset seed key and a counter value, combines the communication data and the OTP according to a first agreement rule to obtain a first string, acquires timestamp information of the communication data, combines the timestamp information and the first string according to a second agreement rule to obtain a combined string. The combined string is encoded using a Turbo coding algorithm and then converted into digital data to obtain encrypted data, which is transmitted to the PSTN landing gateway. The PSTN landing gateway transmits the encrypted data to the SIP server through the PBX landing gateway.

[0144] The SIP server performs digital-to-analog conversion on the received encrypted data, decodes the converted data using a Turbo coding algorithm to obtain a combined string. The combined string is deconstructed according to the second agreement rule to obtain the first string and the timestamp information of the communication data. The SIP server acquires the current system time, calculates the time difference between the timestamp information and the current system time, and if the time difference is greater than a preset threshold, the current communication is cut off and an error is reported to both parties. If the time difference is less than or equal to the preset threshold, the first string is deconstructed according to the first agreement rule to obtain the OTP and the communication data.

[0145] The SIP server generates a verification key using a preset seed key and a counter value, compares the verification key with the OTP, and if the verification key and the OTP are inconsistent, the verification fails, the current communication is cut off, and an error is reported to both parties. If the verification key and the OTP are consistent, the verification is successful, and the communication data is output to the user.

[0146] It should be understood that although each step in the flowchart involved in each embodiment as described above is displayed in sequence according to the arrow, these steps are not necessarily executed in sequence according to the arrow. Unless otherwise specified herein, the execution of these steps is not strictly limited in sequence, and these steps can be executed in other orders. Moreover, at least part of the steps in the flowchart involved in each embodiment as described above can include multiple steps or stages, which are not necessarily executed at the same time, but can be executed at different times, and the execution sequence of these steps or stages is not necessarily sequential, but can be executed in rotation or alternation with at least part of other steps or steps or stages in other steps.

[0147] Based on the same inventive concept, the embodiments of the present application further provide a VOIP communication based communication data processing device for implementing the VOIP communication based communication data processing method as mentioned above. The implementation scheme for solving the problem provided by the device is similar to the implementation scheme described in the above method, therefore, the specific limitations in one or more VOIP communication based communication data processing device embodiments provided below can refer to the limitations of the VOIP communication based communication data processing method in the above text, and will not be repeated here.

[0148] In one embodiment, as shown in Figure 7 FIG. 7, a VOIP communication based communication data processing device 700 is provided, applied to a data sender, comprising: an acquisition module 701, a key generation module 702, a combination module 703, an encoding module 704 and a data transmission module 705, wherein:

[0149] The acquisition module 701 is configured to acquire communication data when a user communicates based on VOIP.

[0150] The key generation module 702 is configured to generate an encryption key using a preset seed key and a counter value.

[0151] The combination module 703 is configured to combine the communication data and the encryption key according to a preset agreement rule to obtain a combination string.

[0152] The encoding module 704 is configured to encode the combination string using a preset encoding rule to obtain encrypted data.

[0153] The data transmission module 705 is configured to transmit the encrypted data to a data receiver. After receiving the encrypted data, the data receiver obtains the communication data and the encryption key according to the encrypted data, verifies the encryption key, and outputs the communication data if the verification is passed.

[0154] The communication data processing device based on the VOIP communication collects communication data when a user communicates based on the VOIP, generates an encryption key using a preset seed key and a counter value, and the counter value is randomly changed, so that the encryption key generated according to the preset seed key and the counter value has higher security. The communication data and the encryption key are combined according to a preset agreement rule to obtain a combined string, the combined string is encoded according to a preset encoding rule to obtain encrypted data, and the encrypted data is transmitted to a data receiving party. Since the encrypted data is obtained by processing the communication data and the encryption key based on the preset agreement rule and the preset encoding rule, even if the user communicates based on the VOIP, the encrypted data is obtained by the attacker, and the preset agreement rule and the preset encoding rule are processed in two layers, so that the communication data and the encryption key are fused together. In the case where the encryption key, the preset agreement rule and the preset encoding rule are unknown, the attacker cannot obtain the communication data in the encrypted data, thereby effectively improving the transmission security of the communication data in the network communication process, and the entire encryption process does not need to increase additional hardware, further reducing the communication cost and improving the deployment flexibility.

[0155] In one of the embodiments, the combination module further comprises: obtaining timestamp information of the communication data; combining the communication data and the encryption key according to the first agreement rule to obtain a first string; and combining the timestamp information and the first string according to the second agreement rule to obtain the combined string.

[0156] In one embodiment, as shown in Figure 8 A communication data processing device based on VOIP communication 800 is provided, applied to a data receiving party, comprising: a data receiving module 801, a decoding module 802, a deconstruction module 803, a verification key generation module 804 and a verification module 805, wherein:

[0157] The data receiving module 801 is configured to receive encrypted data transmitted by a data sending party, the encrypted data being obtained by encoding a combined string using a preset encoding rule by the data sending party, the combined string being obtained by combining communication data and an encryption key based on a preset agreement rule; and the encryption key being generated based on a preset seed key and a counter value.

[0158] The decoding module 802 is configured to decode the encrypted data using the preset encoding rule to obtain the combined string.

[0159] The deconstruction module 803 is configured to deconstruct the combined string according to the preset agreement rule to obtain the communication data and the encryption key.

[0160] The verification key generation module 804 is configured to generate a verification key using the preset seed key and the counter value.

[0161] The verification module 805 is configured to verify the encryption key based on the verification key, and output the communication data if the verification is passed.

[0162] In one of the embodiments, the communication data processing apparatus based on VOIP communication further comprises a communication cutting module configured to discard the communication data, cut off the current communication based on VOIP, and report an error to the communication parties if the verification is not passed.

[0163] In one of the embodiments, the communication data processing apparatus based on VOIP communication further comprises an identity verification module configured to monitor the communication duration of the communication based on VOIP in real time, compare the communication duration with a preset communication duration, and perform identity verification on the communication parties based on VOIP when the communication duration reaches the preset communication duration; and cut off the current communication based on VOIP and report an error to the communication parties if the identity verification is not successful.

[0164] In one of the embodiments, the deconstruction module further comprises: deconstructing the combined string according to the second agreement rule to obtain the timestamp information of the communication data and the first string; and deconstructing the first string according to the first agreement rule to obtain the communication data and the encryption key if the difference between the timestamp information and the system local time is less than or equal to the preset threshold.

[0165] In one of the embodiments, the deconstruction module further comprises: cutting off the communication between the communication parties and reporting an error to the communication parties if the difference between the timestamp information and the system local time is greater than the preset threshold.

[0166] The above-mentioned various modules of the communication data processing apparatus based on VOIP communication can be realized by software, hardware and their combinations in whole or in part. The above-mentioned various modules can be embedded in or independent of the processor in the computer device in hardware form, or stored in the memory in the computer device in software form, so as to be called and executed by the processor to perform the operations corresponding to the above-mentioned various modules.

[0167] In one embodiment, a computer device is provided, which can be a server or a terminal integrated with a data sender or a data receiver, and its internal structure diagram can be as shown in Figure 9As shown. The computer device includes a processor, a memory and a network interface connected through a system bus. Among them, the processor of the computer device is used to provide computing and control capabilities. The memory of the computer device includes a non-volatile storage medium and an internal memory. The non-volatile storage medium stores an operating system, a computer program and a database. The internal memory provides an environment for the operating system and the computer program in the non-volatile storage medium to run. The database of the computer device is used to store communication data, preset seed keys, counter values, preset agreement rules, preset encoding rules and the like. The network interface of the computer device is used to communicate with external terminals through network connection. The computer program is executed by the processor to implement a communication data processing method based on VOIP communication.

[0168] Those skilled in the art can understand that, Figure 9 The structure shown in the figure is only a block diagram of part of the structure related to the scheme of the present application, and does not constitute a limitation on the computer device to which the scheme of the present application is applied. The specific computer device can include more or fewer components than those shown in the figure, or combine certain components, or have a different component arrangement.

[0169] In one embodiment, a computer device is provided, including a memory and a processor, the memory storing a computer program, and the processor executing the computer program to implement the steps of the communication data processing method based on VOIP communication of each of the above embodiments.

[0170] In one embodiment, a computer readable storage medium is provided, which stores a computer program, and the computer program is executed by the processor to implement the steps of the communication data processing method based on VOIP communication of each of the above embodiments.

[0171] In one embodiment, a computer program product is provided, including a computer program, and the computer program is executed by the processor to implement the steps of the communication data processing method based on VOIP communication of each of the above embodiments.

[0172] Those skilled in the art can understand that all or part of the processes in the above-mentioned embodiment methods can be completed by instructing the relevant hardware through a computer program. The computer program can be stored in a non-volatile computer readable storage medium, and when the computer program is executed, the processes of the above-mentioned embodiments of the methods can be included. Any reference to memory, database or other medium used in the embodiments provided in the present application can include at least one of non-volatile and volatile memory. Non-volatile memory can include read-only memory (Read-Only Memory, ROM), magnetic tape, floppy disk, flash memory, optical storage, high-density embedded non-volatile memory, resistive memory (ReRAM), magnetoresistive random access memory (Magnetoresistive Random Access Memory, MRAM), ferroelectric memory (Ferroelectric Random Access Memory, FRAM), phase change memory (Phase Change Memory, PCM), graphene memory, etc. Volatile memory can include random access memory (Random Access Memory, RAM) or external cache memory, etc. As an illustration but not limitation, RAM can be in various forms, such as static random access memory (Static Random Access Memory, SRAM) or dynamic random access memory (Dynamic Random Access Memory, DRAM), etc. The database involved in the embodiments provided in the present application can include at least one of a relational database and a non-relational database. The non-relational database can include a distributed database based on a block chain, etc., without being limited thereto. The processor involved in the embodiments provided in the present application can be a general-purpose processor, a central processing unit, a graphics processing unit, a digital signal processor, a programmable logic device, a data processing logic device based on quantum computing, etc., without being limited thereto.

[0173] Any combination of the technical features of the above embodiments can be made. In order to make the description simple, all possible combinations of the technical features in the above embodiments are not described, however, as long as the combination of the technical features does not exist contradictory, it should be considered as the scope of the present application.

[0174] The above embodiments only express several implementation manners of the present application, and the description is more specific and detailed, but it should not be understood as a limitation on the scope of the patent of the present application. It should be pointed out that for ordinary skilled in the art, without departing from the concept of the present application, a number of modifications and improvements can be made, which are within the scope of protection of the present application. Therefore, the protection scope of the present application should be subject to the appended claims.

Claims

1. A communication data processing method based on VOIP communication, characterized by, The method applied to a data sender comprises: Collecting communication data when a user communicates based on VOIP; Generating an encryption key using a preset seed key and a counter value; Obtaining timestamp information of the communication data; the timestamp information of the communication data is a timestamp generated based on a time when the data sender collects the communication data; Combining the communication data and the encryption key according to a first agreement rule to obtain a first string; the first agreement rule is a concatenation rule for generating a string of the communication data and the encryption key; According to a second agreement rule, the timestamp information and the first string are sorted in a specific order and combined with a random character placeholder of a fixed number of bits by a pre-agreed concatenation with the data receiver, to obtain a combined string; the second agreement rule is a concatenation rule for concatenating the timestamp information and the first string; Encoding the combined string using a preset encoding rule, modulating the analog information into digital information, and obtaining encrypted data by analog-digital conversion; Transmitting the encrypted data to the data receiver; after receiving the encrypted data, the data receiver decodes the encrypted data using the preset encoding rule to obtain the combined string; according to the second agreement rule, the timestamp information and the first string of the communication data are deconstructed from the combined string; in the case that the difference between the timestamp information and the system local time is less than or equal to a preset threshold, the first string is deconstructed according to the first agreement rule to obtain the communication data and the encryption key, the encryption key is verified, and if the verification is passed, the communication data is output; In response to an identity verification request instruction sent by the data receiver, identity verification is performed on a communication user; the identity verification request instruction is triggered and generated by the data receiver when the communication duration based on VOIP reaches a preset communication duration.

2. A communication data processing method based on VOIP communication, characterized by, The method applied to a data receiver comprises: Receiving encrypted data transmitted by a data sender; the encrypted data is obtained by encoding a combined string using a preset encoding rule by the data sender; the combined string is obtained by combining communication data and an encryption key based on a preset agreement rule; the encryption key is generated based on a preset seed key and a counter value; Decoding the encrypted data using the preset encoding rule to obtain the combined string; the combined string is obtained by sorting the timestamp information and the first string in a specific order and combining them with a random character placeholder of a fixed number of bits by a pre-agreed concatenation with the data receiver according to a second agreement rule; the second agreement rule is a concatenation rule for concatenating the timestamp information and the first string; According to the second agreement rule, the combined string is deconstructed to obtain the timestamp information of the communication data and a first string; the timestamp information of the communication data is a timestamp generated based on the time when the data sender collects the communication data; If the difference between the timestamp information and the system local time is less than or equal to a preset threshold, the first string is deconstructed according to a first agreement rule to obtain the communication data and the encryption key; the first agreement rule is a concatenation rule for generating a string of the communication data and the encryption key; An authentication key is generated using the preset seed key and the counter value; The encryption key is verified based on the authentication key, and if the verification is passed, the communication data is output; The communication duration based on VOIP is monitored in real time; The communication duration is compared with a preset communication duration, and when the communication duration reaches the preset communication duration, an identity verification request instruction is generated; The identity verification request instruction is sent to the data sender, and the identity verification request instruction is used to instruct the data sender to perform identity verification on a communication user based on the VOIP; If the identity verification is unsuccessful, the current communication based on the VOIP is cut off, and an error is reported to the communication parties.

3. The method of claim 2, wherein, The method further comprises: If the verification is not passed, the communication data is discarded, the current communication based on the VOIP is cut off, and an error is reported to the communication parties.

4. The method of claim 2, wherein, If the difference between the timestamp information and the system local time is greater than the preset threshold, the communication between the communication parties is cut off, and an error is reported to the communication parties.

5. A communication data processing apparatus based on VOIP communication, characterized by, The device is applied to a data sender and comprises: An acquisition module is configured to acquire communication data when a user communicates based on VOIP; A key generation module is configured to generate an encryption key using a preset seed key and a counter value; A combination module is configured to obtain timestamp information of the communication data; the timestamp information of the communication data is a timestamp generated based on the time when the data sender collects the communication data; a first string is obtained by combining the communication data and the encryption key according to a first agreement rule; the first agreement rule is a concatenation rule for generating a string of the communication data and the encryption key; the timestamp information and the first string are sorted in a specific order and combined with a random character placeholder with a fixed number of concatenation positions according to a second agreement rule to obtain a combined string; the second agreement rule is a concatenation rule for concatenating the timestamp information and the first string; An encoding module is configured to encode the combined string using a preset encoding rule to obtain encrypted data. The data transmission module is configured to transmit the encrypted data to the data receiver. After receiving the encrypted data, the data receiver decodes the encrypted data using the preset encoding rule to obtain the combined string. According to the second agreement rule, the timestamp information and the first string of the communication data are obtained by deconstructing the combined string. In the case where the difference between the timestamp information and the system local time is less than or equal to a preset threshold, the communication data and the encryption key are obtained by deconstructing the first string according to the first agreement rule. The encryption key is verified. If the verification is passed, the communication data is output. The communication user identity verification module is configured to perform identity verification on a communication user in response to an identity verification request instruction sent by the data receiver. The identity verification request instruction is triggered and generated by the data receiver when the communication duration based on VOIP reaches a preset communication duration.

6. A communication data processing apparatus based on VOIP communication, characterized by, The device is applied to a data receiver and includes: The data receiving module is configured to receive encrypted data transmitted by a data sender. The encrypted data is obtained by encoding a combined string using a preset encoding rule by the data sender. The combined string is obtained by combining communication data and an encryption key based on a preset agreement rule. The encryption key is generated based on a preset seed key and a counter value. The decoding module is configured to decode the encrypted data using the preset encoding rule to obtain the combined string. The combined string is obtained by sorting the timestamp information and the first string in a specific order according to a random character placeholder with a fixed number of splicing positions pre-agreed with the data receiver, and combining the random character placeholder, according to a second agreement rule. The second agreement rule is a splicing rule for splicing the timestamp information and the first string. The deconstruction module is configured to deconstruct the combined string according to the second agreement rule to obtain the timestamp information and the first string of the communication data. The timestamp information of the communication data is a timestamp generated based on the time when the communication data is collected by the data sender. If the difference between the timestamp information and the system local time is less than or equal to a preset threshold, the communication data and the encryption key are obtained by deconstructing the first string according to the first agreement rule. The first agreement rule is a splicing rule for generating the communication data and the encryption key. The verification key generation module is configured to generate a verification key using the preset seed key and the counter value. The verification module is configured to verify the encryption key based on the verification key. If the verification is passed, the communication data is output. The identity authentication module is configured to monitor a communication duration of the communication based on the VOIP in real time, compare the communication duration with a preset communication duration, generate an identity authentication request instruction when the communication duration reaches the preset communication duration, and send the identity authentication request instruction to the data sender, where the identity authentication request instruction is used to instruct the data sender to perform identity authentication on a communication user of the communication based on the VOIP; and if the identity authentication is unsuccessful, the current communication based on the VOIP is cut off, and error reporting is performed on both communication parties.

7. The apparatus of claim 6, wherein, The apparatus further comprises: The communication cutting module is configured to discard the communication data, cut off the current communication based on the VOIP, and perform error reporting on both communication parties if the authentication is unsuccessful.

8. The apparatus of claim 6, wherein, The deconstruction module further comprises: if a difference between the timestamp information and the local system time is greater than the preset threshold, cutting off the communication of the two communication parties and performing error reporting on the two communication parties. 9.A computer device, comprising a memory and a processor, wherein the memory stores a computer program, and the computer device is configured to perform the method according to any one of claims 1-8 when the computer program is executed by the processor. The computer program is executed by the processor to implement the steps of the method in any one of claims 1 to 4.

10. A computer-readable storage medium having stored thereon a computer program, characterized in that, The computer program is executed by the processor to implement the steps of the method in any one of claims 1 to 4.

11. A computer program product comprising a computer program, characterized in that, The computer program is executed by the processor to implement the steps of the method in any one of claims 1 to 4.

Images