A data transmission method and system

By configuring an NFC module in electronic devices and processing identification information in the cloud to generate encryption and decryption information, the problem of data transmission security in wired connections is solved, enabling effective encryption and decryption of data, preventing attacks from unauthorized devices, and ensuring the security and reliability of data transmission.

CN115883195BActive Publication Date: 2026-02-27LENOVO (BEIJING) LTD
View PDF 2 Cites 0 Cited by

Patent Information

Application Number
CN202211513892.6
Authority / Receiving Office
CN · China
Patent Type
Patents(China)
Current Assignee / Owner
Filing Date
2022-11-29
Publication Date
2026-02-27
Estimated Expiration
2042-11-29

AI Technical Summary

Technical Problem

How to ensure data security when transmitting data between different electronic devices, especially in wired connections, to prevent attacks from unauthorized devices and data leaks.

Method used

By configuring an NFC module in an electronic device, the device identification information is obtained using the NFC device, and the identification information is processed by a cloud device or a local device to generate configuration information. The device's encryption and decryption information is configured to encrypt or decrypt data transmission. Combined with the association relationship and key generation mechanism, the encryption and decryption information is updated in a timely manner to adapt to changes in the transmission environment.

Benefits of technology

It improves the security of data transmission in wired connections, prevents attacks from unauthorized devices, ensures that sensitive information is not leaked, and enhances the reliability and security of data transmission.

✦ Generated by Eureka AI based on patent content.

Smart Images

  • Figure CN115883195B_ABST
    Figure CN115883195B_ABST
Patent Text Reader

Abstract

The application provides a data transmission method and system. The method comprises the following steps: obtaining the identification information of a first electronic device and a second electronic device after the first electronic device and the second electronic device establish a target connection; processing the identification information by a third electronic device to obtain the configuration information of the first electronic device and the second electronic device; and configuring the encryption and decryption information of the first electronic device and the second electronic device by using the configuration information, so as to encrypt or decrypt the data transmitted through the target connection.
Need to check novelty before this filing date? Find Prior Art

Description

TECHNICAL FIELD

[0001] The present application relates to the field of communication technology, in particular to a data transmission method and system. BACKGROUND

[0002] With the development of electronic technology, different electronic devices are often connected to each other to work together. However, how to ensure the security of the data transmitted between the mutually connected electronic devices becomes a problem. SUMMARY

[0003] The present application provides the following technical solutions:

[0004] In one aspect, the present application provides a data transmission method, comprising:

[0005] After a target connection is established between a first electronic device and a second electronic device, obtaining identification information of the first electronic device and the second electronic device;

[0006] Processing the identification information by a third electronic device to obtain configuration information of the first electronic device and the second electronic device;

[0007] Using the configuration information to configure encryption and decryption information of the first electronic device and the second electronic device to encrypt or decrypt data transmitted through the target connection.

[0008] Obtaining the identification information of the first electronic device and the second electronic device comprises at least one of the following:

[0009] Establishing a first connection with the first electronic device and the second electronic device respectively, obtaining the identification information of the first electronic device and the second electronic device through the first connection, and the first connection is different from the target connection;

[0010] Establishing a second connection with the first electronic device and the second electronic device, obtaining the identification information of the first electronic device and the second electronic device through the second connection, and the second connection is different from the target connection;

[0011] Obtaining the identification information of the first electronic device and the second electronic device through a fourth electronic device.

[0012] Processing the identification information by a third electronic device to obtain configuration information of the first electronic device and the second electronic device, comprising:

[0013] Verifying the legality of the identification information by the third electronic device;

[0014] In a case where the identification information passes the legality verification, an association relationship between the first electronic device and the second electronic device is established based on the identification information, so as to generate a first key based on the association relationship;

[0015] The first key is respectively encrypted based on a second key corresponding to the identification information, so as to obtain configuration information of the first electronic device and the second electronic device.

[0016] The method further includes at least one of the following:

[0017] The identification information is sent to the third electronic device for registration;

[0018] The identification information of the first electronic device and the second electronic device is verified for legality by the third electronic device using preset device information.

[0019] After the association relationship is established, the second key corresponding to the identification information of the first electronic device and the second electronic device is respectively acquired by the third electronic device.

[0020] The first key is generated based on the association relationship, including at least one of the following:

[0021] In a case where it is determined that the first electronic device and the second electronic device have the association relationship, a randomly generated random number is determined as the first key;

[0022] In a case where it is determined that the first electronic device and the second electronic device have the association relationship, the first key is generated based on timestamp information of a target time point;

[0023] In a case where it is determined that the first electronic device and the second electronic device have the association relationship, the first key is generated based on position information of the first electronic device or the second electronic device;

[0024] In a case where it is determined that the first electronic device and the second electronic device have the association relationship, the first key is generated based on current use object information of the first electronic device or the second electronic device.

[0025] The configuration information is used to configure encryption and decryption information of the first electronic device and the second electronic device, including at least one of the following:

[0026] Obtaining configuration information fed back to the first electronic device and the second electronic device by the third electronic device, and decrypting the configuration information based on a third key built-in in the first electronic device and the second electronic device respectively to obtain the first key, so as to encrypt or decrypt data transmitted through the target connection by using the first key.

[0027] Obtaining configuration information fed back to the first electronic device and the second electronic device by a fourth electronic device, and decrypting the configuration information based on a third key built-in in the first electronic device and the second electronic device respectively to obtain the first key, so as to encrypt or decrypt data transmitted through the target connection by using the first key, wherein the fourth electronic device is a device capable of connecting the third electronic device and the first electronic device or the second electronic device.

[0028] The method further comprises:

[0029] Updating the encryption and decryption information based on transmission environment information.

[0030] Updating the encryption and decryption information based on transmission environment information comprises at least one of the following:

[0031] If the transmission environment information is time information of data transmission between electronic devices, updating the encryption and decryption information based on time stamp information corresponding to current data transmission between the first electronic device and the second electronic device;

[0032] If the transmission environment information is position information of electronic devices, updating the encryption and decryption information based on current position information of the first electronic device or the second electronic device;

[0033] If the transmission environment information is usage object information of electronic devices, updating the encryption and decryption information based on current usage object information of the first electronic device or the second electronic device;

[0034] If the transmission environment information is data content information, updating the encryption and decryption information based on content of data to be currently transmitted between the first electronic device and the second electronic device;

[0035] If the transmission environment information is data type information, updating the encryption and decryption information based on type of data to be currently transmitted between the first electronic device and the second electronic device.

[0036] Updating the encryption and decryption information based on transmission environment information comprises:

[0037] Determining an updating mode for updating the encryption and decryption information based on the configuration information, and updating the encryption and decryption information in a corresponding updating mode and based on the configuration information.

[0038] Another aspect of the present application provides a data transmission system, comprising a first electronic device, a second electronic device and a third electronic device;

[0039] The third electronic device is configured to obtain the identification information of the first electronic device and the second electronic device after the first electronic device and the second electronic device establish a target connection; and

[0040] The identification information is processed to obtain the configuration information of the first electronic device and the second electronic device;

[0041] The first electronic device and the second electronic device are respectively configured to configure the encryption and decryption information of each other by using the configuration information, so as to encrypt or decrypt the data transmitted through the target connection.

[0042] In the present application, after the first electronic device and the second electronic device establish a target connection, the identification information of the first electronic device and the second electronic device is obtained, the identification information is processed by the third electronic device to obtain the configuration information of the first electronic device and the second electronic device, and the encryption and decryption information of the first electronic device and the second electronic device is configured by using the configuration information, so that the data transmitted through the target connection can be encrypted or decrypted by the encryption and decryption information, and the security of the transmitted data is ensured. BRIEF DESCRIPTION OF DRAWINGS

[0043] In order to more clearly illustrate the technical solutions in the embodiments of the present application, the drawings needed in the embodiment description will be briefly introduced. Obviously, the drawings in the following description are only some embodiments of the present application, and other drawings can be obtained by those skilled in the art without creative labor.

[0044] Figure 1 is a flow diagram of a data transmission method provided by the first embodiment of the present application;

[0045] Figure 2 is an interaction diagram between electronic devices provided by the present application;

[0046] Figure 3 is another interaction diagram between electronic devices provided by the present application;

[0047] Figure 4 is still another interaction diagram between electronic devices provided by the present application;

[0048] Figure 5 is still another interaction diagram between electronic devices provided by the present application;

[0049] Figure 6is a flowchart of a data transmission method provided by Embodiment 2 of the present application;

[0050] Figure 7 is a flowchart of a data transmission method provided by Embodiment 3 of the present application;

[0051] Figure 8 is a flowchart of a data transmission method provided by Embodiment 5 of the present application;

[0052] Figure 9 is a structural diagram of a data transmission system provided by the present application. DETAILED DESCRIPTION

[0053] The technical solutions in the embodiments of the present application will be described clearly and completely below with reference to the drawings in the embodiments of the present application. Obviously, the described embodiments are only part of the embodiments of the present application, rather than all the embodiments of the present application. Based on the embodiments in the present application, all the other embodiments obtained by those skilled in the art without any creative work fall within the scope of protection of the present application.

[0054] In order to make the above objectives, characteristics and advantages of the present application more apparent, the present application will be further described in detail below with reference to the drawings and specific embodiments.

[0055] Reference Figure 1 is a flowchart of a data transmission method provided by Embodiment 1 of the present application, as shown in the figure, the method can include but is not limited to the following steps: Figure 1

[0056] Step S101, after the first electronic device and the second electronic device establish a target connection, obtaining the identification information of the first electronic device and the second electronic device.

[0057] At least one target connection mode is supported between the first electronic device and the second electronic device, on the basis of which the first electronic device and the second electronic device can establish a target connection, which can include but is not limited to wired connection or wireless connection. For example, in the scenario where the first electronic device or the second electronic device needs to use its display function, the first electronic device and the second electronic device can establish a wired connection such as HDMI (High-Definition Multimedia Interface) connection, DP (DisplayPort) connection or VGA (Video Graphics Array) connection, or the first electronic device and the second electronic device can establish a wireless screen projection connection.

[0058] ​In this application, there are no restrictions on the method of obtaining the identification information of the first electronic device and the second electronic device. Specifically, obtaining the identification information of the first electronic device and the second electronic device includes at least one of the following:

[0059] S1011. Establish a first connection with the first electronic device and the second electronic device respectively, and obtain the identification information of the first electronic device and the second electronic device through the first connection. The first connection is different from the target connection.

[0060] S1012. Establish a second connection with the first electronic device and the second electronic device, and obtain the identification information of the first electronic device and the second electronic device through the second connection. The second connection is different from the target connection.

[0061] S1013. Obtain the identification information of the first electronic device and the second electronic device through the fourth electronic device.

[0062] like Figure 2 As shown, in step S1011, a third electronic device can establish a first connection with both the first and second electronic devices; as... Figure 3 As shown, in step S1012, a second connection can also be established between a third electronic device and the first and second electronic devices. This second connection differs from the first connection. The first or second connection may include, but is not limited to, Bluetooth, WiFi, RFID, or wired connections via encrypted leased networks.

[0063] like Figure 4 As shown, in step S1013, the identification information of the first electronic device and the second electronic device is obtained by the fourth electronic device, and the fourth electronic device transmits the identification information of the first electronic device and the second electronic device to the third electronic device so that the third electronic device can obtain the identification information of the first electronic device and the second electronic device.

[0064] It should be noted that, Figure 4 There are no restrictions on the connection method between the fourth electronic device and the first and second electronic devices. Figure 4 The connection between the fourth electronic device and the first and second electronic devices is not limited to a wired connection, which indicates that there is an interactive relationship between the fourth electronic device and the first and second electronic devices.

[0065] In the present application, the fourth electronic device in step S1013 is not limited. For example, the fourth electronic device can include but is not limited to a card reading device, such as an NFC (Near Field Communication) device. Accordingly, the first electronic device and the second electronic device need to be configured with a wireless induction module corresponding to the card reading device. In the embodiment where the card reading device is an NFC device, the wireless induction device is an NFC module. Specifically, in the case where the wireless induction module of the first electronic device and the second electronic device senses the wireless signal emitted by the card reading device, the identification information of the first electronic device and the second electronic device is sent to the card reading device, and the card reading device transmits the identification information of the first electronic device and the second electronic device to the third electronic device.

[0066] The identification information can include but is not limited to the first identification information or the second identification information or the third identification information obtained by processing the first identification information and the second identification information (for example, the third identification information is obtained by splicing the first identification information and the second identification information), the first identification information and the second identification information are different, and the first identification information and the second identification information can both represent the electronic device. For example, the first identification information can be deviceid (device id), and the second identification information can be uid (device unique identification code). The deviceid of different electronic devices can be the same, but the uid of different electronic devices is not the same.

[0067] Step S102, processing the identification information by the third electronic device to obtain the configuration information of the first electronic device and the second electronic device.

[0068] In the present embodiment, the third electronic device can include but is not limited to a cloud device or an electronic device corresponding to the first electronic device and the second electronic device locally.

[0069] The configuration information of the first electronic device and the second electronic device can be used at least to configure the encryption and decryption information of the first electronic device and the second electronic device.

[0070] Step S103, configuring the encryption and decryption information of the first electronic device and the second electronic device with the configuration information to encrypt or decrypt the data transmitted through the target connection.

[0071] Corresponding to the embodiment of step S1011 or S1012, the present step can include but is not limited to:

[0072] S1031, obtaining the configuration information of the third electronic device fed back to the first electronic device and the second electronic device, and configuring the encryption and decryption information of the first electronic device and the second electronic device based on the configuration information obtained by the first electronic device and the second electronic device, respectively.

[0073] Corresponding to the embodiment of step S1013, this step can include but is not limited to:

[0074] S1032, obtaining the configuration information fed back to the first electronic device and the second electronic device by the fourth electronic device, and configuring the encryption and decryption information of the first electronic device and the second electronic device based on the configuration information obtained by the first electronic device and the second electronic device respectively.

[0075] In this embodiment, after the first electronic device and the second electronic device establish a target connection, the identification information of the first electronic device and the second electronic device is obtained, the identification information is processed by the third electronic device to obtain the configuration information of the first electronic device and the second electronic device, and the encryption and decryption information of the first electronic device and the second electronic device is configured by using the configuration information, so that the data transmitted through the target connection can be encrypted or decrypted by the encryption and decryption information, and the security of the transmitted data is ensured. For example, if the first electronic device is a computer and the second electronic device is a display, if the computer and the display are connected through HDMI, if an attacker accesses an illegal malicious device in the HDMI line, it will cause serious leakage of image display information, such as daily office email information, remote desktop conference, confidential document content, core technology drawings or unpublished video and other sensitive information. Although there are defense means of HDCP protocol in the prior art to deal with the attack of HDMI line, but the master key of HDCP is leaked, which allows the attacker to make a device that meets the HDCP protocol to attack, so that the HDCP protection mechanism is no longer reliable.

[0076] In the case that the protection mechanism of the wired line is unreliable, the present application configures NFC modules in the computer and the display, and ensures the security of the data transmitted through the HDMI connection by the NFC device. As shown in Figure 5 As shown in the figure, the computer and the display are both configured with NFC modules, in the case that the NFC module in the computer senses the wireless signal emitted by the NFC device after the computer and the display establish HDMI wired connection, the identification information of the computer is sent to the NFC device, in the case that the NFC module in the display senses the wireless signal emitted by the NFC device, the identification information of the display is sent to the NFC device, the NFC device transmits the identification information of the computer and the display to the cloud device, the cloud device processes the identification information of the computer and the display to obtain the configuration information of the computer and the display, the NFC device feeds back the configuration information of the computer to the computer, and the NFC device feeds back the configuration information of the display to the display, and the computer and the display respectively configure the encryption and decryption information based on the configuration information.

[0077] As another optional embodiment of the present application, referring to Figure 6A flowchart of a data transmission method provided for Embodiment 2 of the present application is shown in the figure. The embodiment mainly details the scheme of step S102 in Embodiment 1 above. As shown in the figure, step S102 can include but is not limited to the following steps: Figure 6

[0078] Step S1021, establishing an association between the first electronic device and the second electronic device based on the identification information, to generate a first key based on the association.

[0079] This step can include but is not limited to: establishing an association between the identification information of the first electronic device and the identification information of the second electronic device, to establish an association between the first electronic device and the second electronic device.

[0080] After establishing the association between the first electronic device and the second electronic device, a first key is generated based on the association, which is used by the first electronic device and the second electronic device having the association.

[0081] In this embodiment, generating the first key based on the association can include but is not limited to at least one of the following:

[0082] S10211, in the case where it is determined that the first electronic device and the second electronic device have an association, determining a randomly generated random number as the first key.

[0083] S10212, in the case where it is determined that the first electronic device and the second electronic device have an association, generating the first key based on the timestamp information of the target moment.

[0084] Generating the first key based on the timestamp information of the target moment can include but is not limited to:

[0085] Performing privacy processing on the timestamp information of the target moment to obtain a first privacy value, and determining the first privacy value as the first key.

[0086] S10213, in the case where it is determined that the first electronic device and the second electronic device have an association, generating the first key based on the location information of the first electronic device or the second electronic device.

[0087] Generating the first key based on the location information of the first electronic device or the second electronic device can include but is not limited to:

[0088] Performing privacy processing on the location information of the first electronic device or the second electronic device to obtain a second privacy value, and determining the second privacy value as the first key.

[0089] ​S10214、In a case where it is determined that the first electronic device and the second electronic device have the association relationship, generating the first key based on current usage object information of the first electronic device or the second electronic device.

[0090] Generating the first key based on the current usage object information of the first electronic device or the second electronic device can include but is not limited to:

[0091] Performing privacy processing on the current usage object information of the first electronic device or the second electronic device to obtain a third privacy value, and determining the third privacy value as the first key.

[0092] Step S1022, respectively encrypting the first key based on the second key corresponding to the identification information to obtain the configuration information of the first electronic device and the second electronic device.

[0093] It can be understood that the identification information of the first electronic device and the second electronic device is different, and the second key corresponding to the identification information of the first electronic device and the second key corresponding to the identification information of the second electronic device are different.

[0094] In the embodiment, the configuration information of the first electronic device can at least include the encrypted first key, and the configuration information of the second electronic device can at least include the encrypted first key.

[0095] Of course, the configuration information of the first electronic device can also include the encrypted first key and the identification information of the first electronic device; and the configuration information of the second electronic device can also include the encrypted first key and the identification information of the second electronic device.

[0096] When the third key corresponding to the second key is not built-in in the first electronic device and the second electronic device, the configuration information of the first electronic device and the second electronic device can further include the third key in addition to the above contents.

[0097] As another optional embodiment of the present application, referring to Figure 7 A flowchart of a data transmission method provided in Embodiment 3 of the present application is shown in the figure. The present embodiment mainly details the step S102 in Embodiment 1 above. As shown in the figure, the step S102 can include but is not limited to the following steps: Figure 7

[0098] Step S1023, performing legality verification on the identification information by the third electronic device.

[0099] The step can further include the following steps before the step:

[0100] Sending the identification information to the third electronic device for registration.

[0101] ​In a case where the third electronic device registers the identification information, the third electronic device can perform legitimacy verification on the identification information.

[0102] The present step can include, but is not limited to:

[0103] S10231, the third electronic device obtains the identification information of the first electronic device and the second electronic device authenticated by the security authentication agency, compares the identification information of the first electronic device and the second electronic device authenticated by the security authentication agency with the identification information of the first electronic device and the second electronic device obtained after the target connection between the first electronic device and the second electronic device is established, obtains a first comparison result, and determines that the obtained identification information passes the legitimacy verification if the first comparison result is consistent.

[0104] Corresponding to the implementation of step S10231, the present step can further include the following steps:

[0105] The third electronic device performs legitimacy verification on the identification information of the first electronic device and the second electronic device by using the preset device information.

[0106] The preset device information can include preset device information of the first electronic device and preset device information of the second electronic device.

[0107] Specifically, the preset device information and the identification information of the first electronic device and the second electronic device can be compared to obtain a second comparison result.

[0108] If the first comparison result and the second comparison result are consistent, it can be determined that the obtained identification information of the first electronic device and the second electronic device passes the legitimacy verification.

[0109] Step S1024, in a case where the identification information passes the legitimacy verification, an association relationship between the first electronic device and the second electronic device is established based on the identification information, and a first key is generated based on the association relationship.

[0110] Step S1025, the first key is encrypted based on a second key corresponding to the identification information to obtain configuration information of the first electronic device and the second electronic device.

[0111] In the present embodiment, the third electronic device can pre-store the second key corresponding to the identification information.

[0112] Of course, in a case where the third electronic device does not pre-store the second key corresponding to the identification information, the present step can further include:

[0113] After the association relationship is established, the third electronic device obtains the second key corresponding to the identification information of the first electronic device and the second electronic device, respectively.

[0114] The detailed process of steps S1024-S1025 can be referred to the related description of steps S1021-S1022 in Embodiment 2, which will not be repeated here.

[0115] As another optional embodiment of the present application, a flowchart of a data transmission method is provided for Embodiment 4 of the present application. The present embodiment mainly provides a detailed scheme of step S103 in Embodiment 3 described above. Step S103 can include, but is not limited to, at least one of the following:

[0116] S1031, obtaining configuration information fed back to the first electronic device and the second electronic device by the third electronic device, and decrypting the configuration information based on the third key built-in in the first electronic device and the second electronic device respectively to obtain the first key, so as to encrypt or decrypt the data transmitted through the target connection by using the first key.

[0117] S1032, obtaining configuration information fed back to the first electronic device and the second electronic device by the fourth electronic device, and decrypting the configuration information based on the third key built-in in the first electronic device and the second electronic device respectively to obtain the first key, so as to encrypt or decrypt the data transmitted through the target connection by using the first key. The fourth electronic device is an electronic device capable of connecting the third electronic device and the first electronic device or the second electronic device.

[0118] In the case where the second key is a public key, the third key is a private key corresponding to the public key.

[0119] In the present embodiment, the first electronic device and the second electronic device can each have a security chip, which can be used to store the identification information and the third key.

[0120] It can be understood that the configuration information fed back to the first electronic device and the second electronic device can be fed back by the third electronic device or the fourth electronic device alone, or by the third electronic device and the fourth electronic device. For example, in the case where the configuration information of the first electronic device and the second electronic device is not fed back in time by the third electronic device, the configuration information of the first electronic device and the second electronic device can be fed back by the fourth electronic device. Or, in the case where the configuration information of the first electronic device and the second electronic device is not fed back in time by the fourth electronic device, the configuration information of the first electronic device and the second electronic device can be fed back by the third electronic device.

[0121] As another optional embodiment of the present application, refer to Figure 8 A flowchart of a data transmission method is provided for Embodiment 5 of the present application. The present embodiment mainly provides an extension scheme of the data transmission method described in Embodiment 1. The method can include, but is not limited to, the following steps:

[0122] Step S201, after the first electronic device and the second electronic device establish a target connection, obtaining the identification information of the first electronic device and the second electronic device.

[0123] Step S202, processing the identification information through the third electronic device to obtain the configuration information of the first electronic device and the second electronic device.

[0124] Step S203, using the configuration information to configure the encryption and decryption information of the first electronic device and the second electronic device to encrypt or decrypt the data transmitted through the target connection.

[0125] The detailed process of steps S201-S203 can refer to the related introduction of steps S101-S103 in embodiment 1, which will not be repeated here.

[0126] Step S204, updating the encryption and decryption information based on the transmission environment information.

[0127] In this embodiment, the transmission environment information can include but is not limited to at least one of the following: time information of data transmission between electronic devices, location information of electronic devices, usage object information of electronic devices, data content information and data type information.

[0128] This step can include but is not limited to at least one of the following:

[0129] S2041, if the transmission environment information is the time information of data transmission between electronic devices, updating the encryption and decryption information based on the timestamp information corresponding to the current data transmission between the first electronic device and the second electronic device.

[0130] For example, the timestamp information corresponding to the data transmission between the first electronic device and the second electronic device within a period of time before the current time is from 8:00 in the morning to 17:00 in the afternoon, and the timestamp information corresponding to the current data transmission between the first electronic device and the second electronic device is from 8:00 in the evening to 2:00 in the morning, which indicates that the timestamp information of data transmission between the first electronic device and the second electronic device has changed. In order to ensure the security of the data transmitted between the first electronic device and the second electronic device, the encryption and decryption information can be updated based on the timestamp information corresponding to the current data transmission between the first electronic device and the second electronic device.

[0131] In this embodiment, updating the encryption and decryption information based on the timestamp information corresponding to the current data transmission between the first electronic device and the second electronic device can include but is not limited to:

[0132] Performing privacy processing on the timestamp information corresponding to the current data transmission between the first electronic device and the second electronic device to obtain a fourth privacy value, combining the fourth privacy value and the encryption and decryption information to obtain the updated encryption and decryption information.

[0133] or,

[0134] The timestamp information corresponding to the current data transmission between the first electronic device and the second electronic device is processed for privacy to obtain a fourth privacy value, and the encryption and decryption information is replaced by the fourth privacy value.

[0135] S2042, if the transmission environment information is the location information of the electronic device, updating the encryption and decryption information based on the current location information of the first electronic device or the second electronic device.

[0136] For example, the location information of the first electronic device or the second electronic device in a period of time before the current time is at site A, and the current location information of the first electronic device or the second electronic device is at site B, which indicates that the location information of the first electronic device or the second electronic device has changed. In order to ensure the security of the data transmitted between the first electronic device and the second electronic device, the encryption and decryption information can be updated based on the current location information of the first electronic device or the second electronic device.

[0137] Updating the encryption and decryption information based on the current location information of the first electronic device or the second electronic device can include but is not limited to:

[0138] The current location information of the first electronic device or the second electronic device is processed for privacy to obtain a fifth privacy value, and the fifth privacy value and the encryption and decryption information are combined to obtain updated encryption and decryption information.

[0139] or,

[0140] The current location information of the first electronic device or the second electronic device is processed for privacy to obtain a fifth privacy value, and the fifth privacy value and the encryption and decryption information are combined to obtain updated encryption and decryption information.

[0141] S2043, if the transmission environment information is the usage object information of the electronic device, updating the encryption and decryption information based on the current usage object information of the first electronic device or the second electronic device.

[0142] For example, the usage object of the first electronic device or the second electronic device in a period of time before the current time is object A, and the current usage object of the first electronic device or the second electronic device is object B, which indicates that the usage object of the first electronic device or the second electronic device has changed. In order to ensure the security of the data transmitted between the first electronic device and the second electronic device, the encryption and decryption information can be updated based on the current usage object information of the first electronic device or the second electronic device.

[0143] Updating the encryption and decryption information based on the current usage object information of the first electronic device or the second electronic device can include but is not limited to:

[0144] The current use object information of the first electronic device or the second electronic device is privacy processed to obtain a sixth privacy value, the sixth privacy value and the encryption and decryption information are combined to obtain updated encryption and decryption information.

[0145] Or,

[0146] The current use object information of the first electronic device or the second electronic device is privacy processed to obtain a sixth privacy value, and the encryption and decryption information is replaced by the sixth privacy value.

[0147] S2044, if the transmission environment information is data content information, updating the encryption and decryption information based on the content of the data currently to be transmitted between the first electronic device and the second electronic device.

[0148] For example, the content of the data transmitted between the first electronic device and the second electronic device in a period of time before the current time is email information, and the content of the data to be transmitted between the first electronic device and the second electronic device at the current time is email information and confidential document information. In order to enhance the security of the data transmitted between the first electronic device and the second electronic device, the encryption and decryption information can be updated based on the content of the data currently to be transmitted between the first electronic device and the second electronic device, and the difficulty of cracking the encryption and decryption information is increased.

[0149] S2045, if the transmission environment information is data type information, updating the encryption and decryption information based on the type of the data currently to be transmitted between the first electronic device and the second electronic device.

[0150] For example, the type of the data transmitted between the first electronic device and the second electronic device in a period of time before the current time is audio data, and the type of the data to be transmitted between the first electronic device and the second electronic device at the current time is video data. In order to ensure the security of the data transmitted between the first electronic device and the second electronic device, the encryption and decryption information can be updated based on the type of the data currently to be transmitted between the first electronic device and the second electronic device.

[0151] In this embodiment, updating the encryption and decryption information based on the transmission environment information can include but is not limited to:

[0152] S2046, determining an updating mode for updating the encryption and decryption information based on the configuration information, and updating the encryption and decryption information in the corresponding updating mode and the configuration information.

[0153] For the implementation mode in which the configuration information contains the first key, this step can include but is not limited to:

[0154] Determining a privacy processing mode corresponding to the first key, and updating the encryption and decryption information by using the privacy processing mode of the first key object, the first key and the transmission environment information.

[0155] In the embodiment, after the first electronic device and the second electronic device establish the target connection, the identification information of the first electronic device and the second electronic device is obtained, the identification information is processed by the third electronic device to obtain the configuration information of the first electronic device and the second electronic device, and the encryption and decryption information of the first electronic device and the second electronic device is configured by using the configuration information, so that the data transmitted through the target connection can be encrypted or decrypted by the encryption and decryption information, and the security of the transmitted data is ensured.

[0156] In addition, the encryption and decryption information is updated based on the transmission environment information, so that the secure data transmission between the first electronic device and the second electronic device can be ensured when the transmission environment changes.

[0157] Next, a data transmission system provided by the present application is introduced, and the data transmission system introduced below can be correspondingly referred to the data transmission method introduced above.

[0158] Please refer to Figure 9 , the data transmission system comprises a first electronic device 100, a second electronic device 200 and a third electronic device 300.

[0159] The third electronic device 300 is configured to obtain the identification information of the first electronic device 100 and the second electronic device 200 after the first electronic device 100 and the second electronic device 200 establish the target connection.

[0160] The identification information is processed to obtain the configuration information of the first electronic device 100 and the second electronic device 200.

[0161] The first electronic device 100 and the second electronic device 200 are respectively configured to configure the encryption and decryption information of each other by using the configuration information, so as to encrypt or decrypt the data transmitted through the target connection.

[0162] In the embodiment, the data transmission system can further comprise a fourth electronic device.

[0163] The process that the third electronic device 300 obtains the identification information of the first electronic device 100 and the second electronic device 200 can specifically comprise at least one of the following:

[0164] The first electronic device 100 and the second electronic device 200 are respectively configured to configure the encryption and decryption information of each other by using the configuration information, so as to encrypt or decrypt the data transmitted through the target connection.

[0165] The first electronic device 100 and the second electronic device 200 are respectively configured to configure the encryption and decryption information of each other by using the configuration information, so as to encrypt or decrypt the data transmitted through the target connection.

[0166] Obtain the identification information of the first electronic device 100 and the second electronic device 200 by the fourth electronic device.

[0167] In this embodiment, the third electronic device 300 processes the identification information to obtain the configuration information of the first electronic device 100 and the second electronic device 200, which can specifically include:

[0168] Legitimacy verification is performed on the identification information;

[0169] In the case where the identification information passes the legitimacy verification, an association relationship between the first electronic device 100 and the second electronic device 200 is established based on the identification information, and a first key is generated based on the association relationship;

[0170] The first key is encrypted based on the second key corresponding to the identification information, and the configuration information of the first electronic device 100 and the second electronic device 200 is obtained.

[0171] The process of the third electronic device 300 processing the identification information to obtain the configuration information of the first electronic device 100 and the second electronic device 200 can further include at least one of the following:

[0172] The identification information is sent to the third electronic device 300 for registration;

[0173] The third electronic device 300 performs legitimacy verification on the identification information of the first electronic device 100 and the second electronic device 200 by using preset device information;

[0174] After the association relationship is established, the third electronic device 300 obtains the second key corresponding to the identification information of the first electronic device 100 and the second electronic device 200, respectively.

[0175] In this embodiment, the first key is generated based on the association relationship, which includes at least one of the following:

[0176] In the case where it is determined that the first electronic device 100 and the second electronic device 200 have the association relationship, a randomly generated random number is determined as the first key;

[0177] In the case where it is determined that the first electronic device 100 and the second electronic device 200 have the association relationship, the first key is generated based on the timestamp information of the target moment;

[0178] In the case where it is determined that the first electronic device 100 and the second electronic device 200 have the association relationship, the first key is generated based on the location information of the first electronic device 100 or the second electronic device 200;

[0179] In a case where it is determined that the first electronic device 100 and the second electronic device 200 have an association relationship, the first key is generated based on current usage object information of the first electronic device 100 or the second electronic device 200.

[0180] The first electronic device 100 and the second electronic device 200, respectively, for a process of configuring respective encryption and decryption information by using configuration information, can include at least one of the following:

[0181] Obtaining configuration information fed back to the first electronic device 100 and the second electronic device 200 by the third electronic device 300, the configuration information is decrypted by the first electronic device 100 and the second electronic device 200 based on the built-in third key, and the first key is obtained to encrypt or decrypt the data transmitted through the target connection by using the first key;

[0182] Obtaining configuration information fed back to the first electronic device 100 and the second electronic device 200 by the fourth electronic device, the configuration information is decrypted by the first electronic device 100 and the second electronic device 200 based on the built-in third key, and the first key is obtained to encrypt or decrypt the data transmitted through the target connection by using the first key, and the fourth electronic device is a device capable of connecting the third electronic device 300 and the first electronic device 100 or the second electronic device 200.

[0183] In the embodiment, the first electronic device 100 or the second electronic device 200 can also be used for:

[0184] Updating the encryption and decryption information based on the transmission environment information.

[0185] In the embodiment, the process of updating the encryption and decryption information based on the transmission environment information can include at least one of the following:

[0186] If the transmission environment information is time information of data transmission between electronic devices, the encryption and decryption information is updated based on time stamp information corresponding to current data transmission between the first electronic device 100 and the second electronic device 200;

[0187] If the transmission environment information is location information of the electronic device, the encryption and decryption information is updated based on current location information of the first electronic device 100 or the second electronic device 200;

[0188] If the transmission environment information is usage object information of the electronic device, the encryption and decryption information is updated based on current usage object information of the first electronic device 100 or the second electronic device 200;

[0189] If the transmission environment information is data content information, the encryption and decryption information is updated based on the content of the current data to be transmitted between the first electronic device 100 and the second electronic device 200;

[0190] If the transmission environment information is data type information, the encryption and decryption information is updated based on the type of data currently to be transmitted between the first electronic device 100 and the second electronic device 200.

[0191] In this embodiment, the process of updating the encryption and decryption information based on the transmission environment information specifically includes:

[0192] The updating manner for updating the encryption and decryption information is determined based on the configuration information, and the encryption and decryption information is updated in the corresponding updating manner and the configuration information.

[0193] Corresponding to the information processing method embodiments provided by the present application, the present application further provides an electronic device embodiment applying the information processing method.

[0194] As shown in FIG. 1, which is a structural schematic diagram of an electronic device embodiment 1 provided by the present application, the electronic device can include the following structure: Figure 4

[0195] The memory 100 and the processor 200.

[0196] The memory 100 is configured to store at least a set of instruction sets.

[0197] The processor 200 is configured to invoke and execute the instruction sets in the memory 100, and execute the information processing method as introduced in any one of the method embodiments 1-2 by executing the instruction sets.

[0198] Corresponding to the information processing method embodiments provided by the present application, the present application further provides an embodiment of a storage medium.

[0199] In this embodiment, the storage medium stores a computer program for implementing the information processing method as introduced in the method embodiments 1 or 2, and the computer program is executed by the processor to implement each step of the information processing method as introduced in the embodiments 1 or 2.

[0200] It should be noted that each embodiment focuses on the differences from other embodiments, and the same or similar parts between the embodiments can be referred to each other. For the device embodiments, since they are basically similar to the method embodiments, the description is relatively simple, and the related parts can be referred to the part of the method embodiments.

[0201] ​Finally, it is to be understood that the phraseology or terminology employed herein, such as "first" and "second", etc. for example, is for the purpose of differentiating one from another instantiation but is not intended to imply any actual relationship or order between such entities or acts. Also, the use of "including" and "comprising" and variations thereof as terms of inclusion in a claim are not used as limitations but to game that any process, method, article, or apparatus that incorporates one or more of features of a claim is within the scope of the claim, and is used the same manner as the term "comprising" as defined above. Additionally, the use of "first", "second", "third", etc. are not used to connote any ordering such as in a first step before a second step or vice versa, but are used for the purpose of naming various elements.

[0202] For the purpose of clarity, the above apparatuses are described with functional modules in various embodiments. Of course, the functions of the various modules can be implemented in one or more software and / or hardware components in practice.

[0203] From the above description of the embodiments, it can be clear to a person skilled in the art that the present application can be implemented by means of software using a general purpose computer, a special purpose computer, and / or a processor of a more particular computer. Based on the understanding thus achieved, the technical solutions according to the present application can be in the form of a software product, and the computer software product can be stored in a storage medium, such as a ROM / RAM, a magnetic disk, or an optical disk, and includes a number of instructions for causing a computer device (which can be a personal computer, a server, or a network device, etc.) to execute the methods described in the various embodiments or some parts of the embodiments.

[0204] The data transmission method and system provided by the present application are described in detail above, and the principles and implementation manners of the present application are described by using specific examples. The above description of the embodiments is only used to help understand the method and the core idea of the present application; meanwhile, for those skilled in the art, according to the idea of the present application, the specific implementation manner and application range can be changed, and the above description of the present application should not be understood as a limitation.

Claims

1. A data transmission method, comprising: After the first electronic device and the second electronic device establish a target connection, the identification information of the first electronic device and the second electronic device is obtained; The identification information is validated by a third electronic device. If the identification information passes the validation, an association is established between the first electronic device and the second electronic device based on the identification information, and a first key is generated based on the association. The first key is encrypted based on the second key corresponding to the identification information to obtain the configuration information of the first electronic device and the second electronic device. The encryption and decryption information of the first electronic device and the second electronic device is configured using the configuration information to encrypt or decrypt data transmitted through the target connection.

2. The method according to claim 1, obtaining the identification information of the first electronic device and the second electronic device, includes at least one of the following: A first connection is established with the first electronic device and the second electronic device respectively, and the identification information of the first electronic device and the second electronic device is obtained through the first connection. The first connection is different from the target connection. A second connection is established with the first electronic device and the second electronic device, and the identification information of the first electronic device and the second electronic device is obtained through the second connection. The second connection is different from the target connection. The identification information of the first electronic device and the second electronic device is obtained through the fourth electronic device.

3. The method according to claim 1, wherein, It also includes at least one of the following: The identification information is sent to the third electronic device for registration. The third electronic device uses preset device information to verify the legitimacy of the identification information of the first electronic device and the second electronic device; After establishing the association, the third electronic device obtains the second key corresponding to the identification information of the first electronic device and the second electronic device, respectively.

4. The method according to claim 1, wherein, A first key is generated based on the aforementioned association, including at least one of the following: If it is determined that the first electronic device and the second electronic device have the aforementioned association relationship, a randomly generated random number will be determined as the first key; If it is determined that the first electronic device and the second electronic device have the aforementioned association relationship, the first key is generated based on the timestamp information of the target time. If it is determined that the first electronic device and the second electronic device have the aforementioned association relationship, the first key is generated based on the location information of the first electronic device or the second electronic device. If it is determined that the first electronic device and the second electronic device have the aforementioned association relationship, the first key is generated based on the current user information of the first electronic device or the second electronic device.

5. The method according to any one of claims 1 to 4, wherein configuring the encryption / decryption information of the first electronic device and the second electronic device using the configuration information includes at least one of the following: The configuration information fed back to the first electronic device and the second electronic device by the third electronic device is obtained. The first electronic device and the second electronic device decrypt the configuration information based on the built-in third key to obtain the first key, so as to use the first key to encrypt or decrypt the data transmitted through the target connection. The configuration information fed back to the first electronic device and the second electronic device through the fourth electronic device is obtained. The first electronic device and the second electronic device decrypt the configuration information based on the built-in third key to obtain the first key. The first key is then used to encrypt or decrypt data transmitted through the target connection. The fourth electronic device is a device that can connect the third electronic device and the first electronic device or the second electronic device.

6. The method according to claim 1, further comprising: The encryption / decryption information is updated based on the transmission environment information.

7. The method according to claim 6, wherein updating the encryption / decryption information based on transmission environment information includes at least one of the following: If the transmission environment information is the time information for data transmission between electronic devices, the encryption and decryption information is updated based on the timestamp information corresponding to the current data transmission between the first electronic device and the second electronic device. If the transmitted environment information is the location information of an electronic device, the encryption / decryption information is updated based on the current location information of the first electronic device or the second electronic device; If the transmitted environment information is the user information of the electronic device, the encryption / decryption information is updated based on the current user information of the first electronic device or the second electronic device; If the transmission environment information is data content information, the encryption / decryption information is updated based on the content of the data to be transmitted between the first electronic device and the second electronic device. If the transmission environment information is data type information, the encryption / decryption information is updated based on the type of the data to be transmitted between the first electronic device and the second electronic device.

8. The method according to claim 6, wherein updating the encryption / decryption information based on transmission environment information includes: Based on the configuration information, an update method for updating the encryption and decryption information is determined, and the encryption and decryption information is updated using the corresponding update method and the configuration information.

9. A data transmission system, comprising: First electronic device, second electronic device, and third electronic device; The third electronic device is used to obtain the identification information of the first electronic device and the second electronic device after the first electronic device and the second electronic device establish a target connection; as well as, The identification information is validated for legality. If the identification information passes the validity validation, an association relationship is established between the first electronic device and the second electronic device based on the identification information. A first key is generated based on the association relationship. The first key is encrypted based on the second key corresponding to the identification information to obtain the configuration information of the first electronic device and the second electronic device. The first electronic device and the second electronic device are respectively configured with the configuration information to encrypt or decrypt their respective encryption and decryption information to encrypt or decrypt data transmitted through the target connection.

Citation Information

Patent Citations

  • Terminal equipment, equipment management server and connection establishment method

    CN103685176A

  • Data transmission method and device, electronic equipment and storage medium

    CN114697122A