A secure communication method and system

Abstract

The present invention discloses a method and system for secure communication in the field of communication security between a mobile terminal and a computer, comprising: a mobile terminal transmits an identity authentication request to a computer, the computer verifies the identity authentication request, generates and transmits a pass to the mobile terminal; the mobile terminal obtains mobile terminal information and performs segmentation and encryption, transmits the segmented encrypted mobile terminal information and the encrypted pass to the computer, the computer identifies the mobile terminal according to the decrypted pass, and after the identification is completed, restores the segmented encrypted mobile terminal information to obtain the mobile terminal information; the computer obtains computer information and performs segmentation and encryption, transmits the segmented encrypted computer information and the encrypted pass to the mobile terminal, the mobile terminal identifies the computer according to the decrypted pass, and after the identification is completed, restores the segmented encrypted computer information to obtain the computer information.

Description

Technical Field

[0001] The present invention belongs to the technical field of communication security, and in particular, relates to a method and system for secure communication between a mobile terminal and a computer. Background Art

[0002] Mobile Internet and computer application technologies are developing rapidly. Relying on the information interaction between mobile terminals and computers, they are widely used in various fields such as industry, economy, finance, and national defense. Various data information is transmitted between mobile terminals and computers, especially some sensitive data is involved. Therefore, the security issues of information processing and transmission between mobile terminals and computers are particularly prominent. Now there is an urgent need for a secure communication method and system that can ensure the secure processing and transmission of information between mobile terminals and computers. Summary of the invention

[0003] In order to solve the above technical problems, the present invention proposes a method and system based on secure communication between a mobile terminal and a computer to solve the above problems existing in the prior art.

[0004] To achieve the above object, the present invention provides a secure communication method, comprising:

[0005] The mobile terminal transmits an identity authentication request to the computer, the computer verifies the identity authentication request, generates a pass corresponding to the mobile terminal according to the verification result, and transmits the pass to the mobile terminal;

[0006] The mobile terminal obtains the mobile terminal information and performs segmentation and encryption, and transmits the segmented encrypted mobile terminal information and the encrypted pass to the computer. The computer identifies the mobile terminal according to the decrypted pass, and after the identification is completed, restores the segmented encrypted mobile terminal information to obtain the mobile terminal information;

[0007] The computer obtains computer information and splits and encrypts it, and transmits the split encrypted computer information and the encrypted pass to the mobile terminal. The mobile terminal identifies the computer based on the decrypted pass. After the identification is completed, the split encrypted computer information is restored to obtain the computer information.

[0008] Optionally, before the mobile terminal transmits the identity authentication request to the computer, the following steps are included:

[0009] Build a soft business card based on the usage information of the mobile terminal, where the terminal information includes the operating system type, operating system serial number, and system login user;

[0010] Construct a hard business card based on the device information of the mobile terminal, where the device information includes the serial number of the mobile terminal device, the MAC address of the communication module, and the connection method;

[0011] A mobile terminal business card white list is constructed on a computer, wherein the mobile terminal business card white list records soft business cards, hard business cards, and the corresponding relationship between the soft business cards and the hard business cards.

[0012] Optionally, the process of generating a pass corresponding to the mobile terminal includes:

[0013] The mobile terminal encrypts the information of the soft business card and the hard business card, and transmits an identity authentication request to the computer, wherein the identity authentication request is the encrypted soft business card and the hard business card, and the encryption adopts a symmetric encryption algorithm;

[0014] The computer receives the identity authentication request, decrypts the identity authentication request, and verifies the decrypted identity authentication request through the mobile terminal business card whitelist;

[0015] When the soft business card, hard business card and the correspondence between the soft business card and the hard business card recorded in the business card whitelist correspond to the decrypted identity authentication request, the verification is passed, and the computer generates a pass corresponding to the mobile terminal. If the verification fails, the computer rejects the identity authentication request of the mobile terminal, wherein the pass includes the mobile terminal identification, the mobile terminal name and the connection method;

[0016] The computer stores and encrypts the pass, transmits the encrypted pass to the mobile terminal, and the mobile terminal decrypts the encrypted pass to obtain and store the pass.

[0017] Optionally, the process of the computer obtaining the mobile terminal information includes:

[0018] The mobile terminal obtains mobile terminal information and segments the mobile terminal information to obtain mobile terminal information fragments, wherein the mobile terminal information includes text information, picture information and formatted data, the text information adopts a semantic-based segmentation method, the formatted data adopts a field and record row cross unit segmentation method, and the picture adopts an information segmentation method after image perspective modeling;

[0019] The mobile terminal encrypts the mobile terminal information fragments and the pass, and transmits the segmented encrypted mobile terminal information and the encrypted pass to the computer;

[0020] The computer receives the split encrypted mobile terminal information and the encrypted pass, decrypts the encrypted pass, and identifies the decrypted pass;

[0021] If the decrypted communication certificate corresponds to the communication certificate stored in the computer, the recognition is successful, and the computer decrypts and combines the split encrypted mobile terminal to restore and obtain the mobile terminal information. If the recognition is not successful, the split encrypted mobile terminal information is discarded.

[0022] Optionally, the process of the mobile terminal acquiring computer information includes:

[0023] The computer obtains computer information and segments the computer information to obtain computer information fragments, wherein the computer information includes text information, picture information and formatted data, the text information adopts a semantic-based segmentation method, the formatted data adopts a field and record row cross unit segmentation method, and the picture adopts an information segmentation method after image perspective modeling;

[0024] The computer encrypts the computer information fragments and the pass corresponding to the mobile terminal, and transmits the segmented encrypted computer information and the encrypted pass to the mobile terminal;

[0025] The mobile terminal receives the split encrypted computer information and the encrypted pass, decrypts the encrypted pass, and identifies the decrypted pass;

[0026] If the decrypted communication certificate corresponds to the communication certificate stored in the mobile terminal, the recognition is successful, and the mobile terminal decrypts and combines the split encrypted computer information, restores and obtains the computer information. If the recognition is not successful, the split encrypted computer information is discarded.

[0027] In order to better achieve the above technical objectives, the present invention also provides a secure communication system, comprising:

[0028] An information sending unit and an information receiving unit are provided in both the mobile terminal and the computer; the information sending unit is used to divide, encrypt and send information, and the information receiving unit is used to receive, decrypt and combine information;

[0029] The mobile terminal transmits an identity authentication request to the computer through the information sending unit. The computer verifies the identity authentication request and generates a pass corresponding to the mobile terminal according to the verification result. The pass is transmitted to the mobile terminal through the information receiving unit. The mobile terminal receives the pass through the information receiving unit.

[0030] The mobile terminal obtains the mobile terminal information through the information sending unit and divides and encrypts it, and transmits the divided and encrypted mobile terminal information and the encrypted pass to the computer. The computer identifies the mobile terminal according to the decrypted pass. After the identification is completed, the divided and encrypted mobile terminal information is restored through the information receiving unit to obtain the mobile terminal information;

[0031] The computer obtains computer information through the information sending unit and splits and encrypts it, and transmits the split encrypted computer information and the encrypted pass to the mobile terminal. The mobile terminal identifies the computer based on the decrypted pass. After the identification is completed, the split encrypted computer information is restored through the information receiving unit to obtain the computer information.

[0032] Optionally, the information sending unit in the mobile terminal is also connected to a soft business card module and a hard business card module, wherein the soft business card module is used to construct a soft business card according to the usage information of the mobile terminal; the hard business card module is used to construct a hard business card according to the device information of the mobile terminal; the information receiving module in the computer is also connected to a business card whitelist module, and the mobile terminal business card whitelist is constructed through the business card whitelist module.

[0033] Optionally, the information sending unit includes an information segmentation module, an information encryption module and an information sending interface, and the information receiving unit includes an information receiving interface, an information decryption module and an information combination module;

[0034] In the computer, the information encryption module is also connected to the pass generation module, and a pass cache module is provided in the mobile terminal, which is connected to the pass generation module, the information encryption module and the information decryption module. A pass cache module is also provided in the computer, which is connected to the information encryption module and the information decryption module, and is used to cache and identify the pass through the pass cache module;

[0035] The mobile terminal encrypts the information of the soft business card and the hard business card in the soft business card module and the hard business card module through the information encryption module, generates an identity authentication request, and transmits the identity authentication request to the computer through the information sending interface;

[0036] The computer receives the identity authentication request through the information receiving interface, decrypts the identity authentication request through the information decryption module, and verifies the decrypted identity authentication request using the mobile terminal business card whitelist through the business card whitelist module;

[0037] If the verification is successful, the computer generates a pass corresponding to the mobile terminal through the pass generation module; if the verification is not successful, the computer rejects the identity authentication request of the mobile terminal;

[0038] The computer stores the pass through the pass cache module and encrypts the pass through the information encryption module, transmits the encrypted pass to the mobile terminal through the information sending interface, the mobile terminal receives the encrypted communication pass through the information receiving interface, decrypts the encrypted pass through the information decryption module, and obtains and stores the pass through the pass cache module.

[0039] Optionally, the mobile terminal obtains the mobile terminal information, and divides the mobile terminal information through the information division module to obtain mobile terminal information fragments; the mobile terminal information fragments and the pass are encrypted through the information encryption module, and the divided encrypted mobile terminal information and the encrypted pass are transmitted to the computer through the information sending interface;

[0040] The computer receives the segmented encrypted mobile terminal information and the encrypted pass through the information receiving interface, decrypts the encrypted pass through the information decryption module, and identifies the decrypted pass through the pass cache module; if the identification is successful, the computer decrypts and combines the segmented encrypted mobile terminal information through the information decryption module and the information combination module in turn, restores and obtains the mobile terminal information, and if the identification is not successful, the segmented encrypted mobile terminal information is discarded.

[0041] Optionally, the computer obtains computing information, and divides the computer information through an information division module to obtain computer information fragments; the computer information fragments and the pass are encrypted through an information encryption module, and the divided and encrypted computer information and the encrypted pass are transmitted to the mobile terminal through an information sending interface;

[0042] The mobile terminal receives the segmented encrypted computer information and the encrypted pass through the information receiving interface, decrypts the encrypted pass through the information decryption module, and identifies the decrypted pass through the pass cache module; if the identification is successful, the mobile terminal decrypts and combines the segmented encrypted computer information through the information decryption module and the information combination module in turn, restores and obtains the computer information; if the identification is not successful, the segmented encrypted computer information is discarded.

[0043] Compared with the prior art, the present invention has the following advantages and technical effects:

[0044] The present invention adopts combined information security means such as identity authentication, information encryption and information segmentation to solve the security risks and weak links in the communication between mobile terminals and computers, and improve the security level of information communication between mobile terminals and computers. BRIEF DESCRIPTION OF THE DRAWINGS

[0045] The drawings constituting a part of the present application are used to provide a further understanding of the present application. The illustrative embodiments and descriptions of the present application are used to explain the present application and do not constitute an improper limitation on the present application. In the drawings:

[0046] Figure 1 A schematic diagram of the structure of a mobile terminal and a computer security communication system according to an embodiment of the present invention;

[0047] Figure 2 This is a structural diagram of an information transceiver unit according to an embodiment of the present invention;

[0048] Figure 3 A schematic diagram of a verification process between a mobile terminal and a computer according to an embodiment of the present invention;

[0049] Figure 4 This is a schematic diagram of the flow of information transmission from a mobile terminal to a computer according to an embodiment of the present invention;

[0050] Figure 5 The present invention is a flowchart of a computer transmitting information to a mobile terminal according to an embodiment of the present invention. DETAILED DESCRIPTION

[0051] It should be noted that, in the absence of conflict, the embodiments and features in the embodiments of the present application can be combined with each other. The present application will be described in detail below with reference to the accompanying drawings and in combination with the embodiments.

[0052] It should be noted that the steps shown in the flowcharts of the accompanying drawings can be executed in a computer system such as a set of computer executable instructions, and that, although a logical order is shown in the flowcharts, in some cases, the steps shown or described can be executed in an order different from that shown here.

[0053] Embodiment 1

[0054] In order to achieve the above technical objectives, the present invention provides a method based on secure communication between a mobile terminal and a computer, which specifically includes:

[0055] The mobile terminal transmits an identity authentication request to the computer, the computer verifies the identity authentication request, generates a pass corresponding to the mobile terminal according to the verification result, and transmits the pass to the mobile terminal;

[0056] The mobile terminal obtains the mobile terminal information and performs segmentation and encryption, and transmits the segmented encrypted mobile terminal information and the encrypted pass to the computer. The computer identifies the mobile terminal according to the decrypted pass, and after the identification is completed, restores the segmented encrypted mobile terminal information to obtain the mobile terminal information;

[0057] The computer obtains computer information and splits and encrypts it, and transmits the split encrypted computer information and the encrypted pass to the mobile terminal. The mobile terminal identifies the computer based on the decrypted pass. After the identification is completed, the split encrypted computer information is restored to obtain the computer information.

[0058] As some embodiments, before the mobile terminal transmits the identity authentication request to the computer, the process includes:

[0059] Build a soft business card based on the usage information of the mobile terminal, where the terminal information includes the operating system type, operating system serial number, and system login user;

[0060] Construct a hard business card based on the device information of the mobile terminal, where the device information includes the serial number of the mobile terminal device, the MAC address of the communication module, and the connection method;

[0061] A mobile terminal business card white list is constructed on a computer, wherein the mobile terminal business card white list records soft business cards, hard business cards, and the corresponding relationship between the soft business cards and the hard business cards.

[0062] As some embodiments, the process of generating a pass corresponding to the mobile terminal includes:

[0063] The mobile terminal encrypts the information of the soft business card and the hard business card, and transmits an identity authentication request to the computer, wherein the identity authentication request is the encrypted soft business card and the hard business card, and the encryption adopts a symmetric encryption algorithm;

[0064] The computer receives the identity authentication request, decrypts the identity authentication request, and verifies the decrypted identity authentication request through the mobile terminal business card whitelist;

[0065] When the soft business card, hard business card and the correspondence between the soft business card and the hard business card recorded in the business card whitelist correspond to the decrypted identity authentication request, the verification is passed, and the computer generates a pass corresponding to the mobile terminal. If the verification fails, the computer rejects the identity authentication request of the mobile terminal, wherein the pass includes the mobile terminal identification, the mobile terminal name and the connection method;

[0066] The computer stores and encrypts the pass, transmits the encrypted pass to the mobile terminal, and the mobile terminal decrypts the encrypted pass to obtain and store the pass.

[0067] As some embodiments, the process of a computer acquiring mobile terminal information includes:

[0068] The mobile terminal obtains mobile terminal information and segments the mobile terminal information to obtain mobile terminal information fragments, wherein the mobile terminal information includes text information, picture information and formatted data, the text information adopts a semantic-based segmentation method, the formatted data adopts a field and record row cross unit segmentation method, and the picture adopts an information segmentation method after image perspective modeling;

[0069] The mobile terminal encrypts the mobile terminal information fragments and the pass, and transmits the segmented encrypted mobile terminal information and the encrypted pass to the computer;

[0070] The computer receives the split encrypted mobile terminal information and the encrypted pass, decrypts the encrypted pass, and identifies the decrypted pass;

[0071] If the decrypted communication certificate corresponds to the communication certificate stored in the computer, the recognition is successful, and the computer decrypts and combines the split encrypted mobile terminal to restore and obtain the mobile terminal information. If the recognition is not successful, the split encrypted mobile terminal information is discarded.

[0072] As some embodiments, the process of the mobile terminal acquiring computer information includes:

[0073] The computer obtains computer information and segments the computer information to obtain computer information fragments, wherein the computer information includes text information, picture information and formatted data, the text information adopts a semantic-based segmentation method, the formatted data adopts a field and record row cross unit segmentation method, and the picture adopts an information segmentation method after image perspective modeling;

[0074] The computer encrypts the computer information fragments and the pass corresponding to the mobile terminal, and transmits the segmented encrypted computer information and the encrypted pass to the mobile terminal;

[0075] The mobile terminal receives the split encrypted computer information and the encrypted pass, decrypts the encrypted pass, and identifies the decrypted pass;

[0076] If the decrypted communication certificate corresponds to the communication certificate stored in the mobile terminal, the recognition is successful, and the mobile terminal decrypts and combines the split encrypted computer information, restores and obtains the computer information. If the recognition is not successful, the split encrypted computer information is discarded.

[0077] Embodiment 2

[0078] In order to better achieve the above technical objectives, the present invention also provides a system based on secure communication between a mobile terminal and a computer.

[0079] The mobile terminal and the computer are both provided with an information sending unit, an information receiving unit and a pass cache module. The mobile terminal is also provided with a soft business card module and a hard business card module, and the computer is also provided with a business card whitelist module and a pass generation module; the information sending unit includes an information segmentation module, an information encryption module and an information sending interface connected in sequence; the information receiving unit includes an information receiving interface, an information decryption module and an information combination module connected in sequence;

[0080] In the mobile terminal, the soft business card module and the hard business card module are both connected to the information encryption module in the information sending unit, and the pass cache module is connected to the information encryption module and the information decryption module. In the computer, the information decryption module, the business card whitelist module and the pass cache module are connected in sequence, wherein the pass cache module is also connected to the information encryption module and the information decryption module; the pass cache module is used to cache and compare and identify the pass.

[0081] The present invention discloses a system based on secure communication between a mobile terminal and a computer, and a method for using the system includes the following steps: on a computer and a mobile terminal, a secure communication system between a mobile terminal and a computer is set up based on a communication link; the mobile terminal sends an identity authentication request to the computer, the computer verifies the access rights of the mobile terminal, and generates a corresponding pass for each mobile terminal; the mobile terminal collects mobile terminal information, performs segmentation and encryption, and transmits it to the computer, the computer identifies the identity of the mobile terminal through the pass, and restores the mobile terminal information according to the identification result; the computer forms computer information, segments the computer information, encrypts the computer information fragments and the corresponding pass, and issues the encrypted information, after the mobile terminal receives the computer information, it identifies the corresponding pass, decrypts and combines the computer information, and processes the computer information. The present invention adopts combined information security means such as identity authentication, information encryption and information segmentation to solve the security risks and weak links of mobile terminal and computer communication, and improve the security level of mobile terminal and computer information communication.

[0082] In conjunction with the accompanying drawings, the technical solution of the system for secure communication between the mobile terminal and the computer is described in detail:

[0083] Step S1, on the computer and mobile terminal, relying on the communication link, set up a mobile terminal and computer security communication system, the system includes a soft business card module, a hard business card module, a business card whitelist module, a pass generation module, a pass cache module, an information sending unit, an information receiving unit, etc. Figure 1 shown.

[0084] This step contains the following sub-steps:

[0085] Step S1-1, on the mobile terminal, a soft business card is constructed by a soft business card module according to information such as the operating system type, operating system serial number, and system login user of the mobile terminal. The mobile terminal can be installed with operating systems such as Android and Hongmeng. The soft business card is used to identify the user of the mobile terminal. A hard business card is constructed by a hard business card module according to information such as the mobile terminal device serial number, the communication module MAC address, and the connection method (Bluetooth, WiFi, 5G). The hard business card is used to identify the mobile device and the connection method. The soft business card and the hard business card are respectively stored locally;

[0086] Step S1-2, constructing a mobile terminal business card whitelist through a business card whitelist module on a computer, wherein the mobile terminal business card whitelist records the correspondence between the hard-business card, soft-business card, and hard-business card and soft-flat card of the mobile terminal, ensuring that the mobile terminal user, mobile terminal device, and connection method are in the list and conform to the correspondence;

[0087] Step S1-3, in the computer and the mobile terminal, an information sending unit and an information receiving unit are set up for sending and receiving data information, such as Figure 2 As shown;

[0088] Step S1-4: Setting an information segmentation module in the information sending unit, using an information segmentation algorithm, using semantic-based segmentation for text information, using field and record row cross-unit segmentation for formatted data, and using image perspective modeling for image segmentation;

[0089] Step S1-5: Setting an information encryption module in the information sending unit, which may use symmetric encryption algorithms such as 3DES, RC2, and AES;

[0090] Step S1-6 sets an information sending interface in the information sending unit, which is the information outlet;

[0091] Step S1-7 sets an information receiving interface in the information receiving unit, which is the entry point of the information;

[0092] Step S1-8: Setting an information decryption module in the information receiving unit, and using a symmetric decryption algorithm corresponding to the symmetric encryption algorithm;

[0093] Step S1-9 sets an information combination module in the information receiving unit and adopts an information combination algorithm, which corresponds to the information segmentation algorithm.

[0094] Step S2: The mobile terminal sends an authentication request to the computer. The computer authenticates the access rights of the mobile terminal. If the authentication is successful, a corresponding pass is generated for each mobile terminal. If the authentication fails, access is denied. Figure 3 shown.

[0095] This step contains the following sub-steps:

[0096] Step S2-1, the mobile terminal calls the local soft-business card in the soft business card module;

[0097] Step S2-2, the mobile terminal calls the local hard-business card in the hard-business card module;

[0098] Step S2-3, the mobile terminal uses the information encryption module to encrypt the soft-business card and the hard-business card respectively;

[0099] Step S2-4, the mobile terminal sends an identity authentication request to the computer through the information sending interface, and submits the encrypted soft-business card and hard-business card;

[0100] Step S2-5, the computer receives the identity authentication request from the mobile terminal, collects the connection mode of the mobile terminal, uses the information decryption module to decrypt and obtain the soft-business card and the hard-business card, and verifies the identity of the mobile terminal through the business card whitelist in the business card whitelist module (whether the soft-business card is in the whitelist, whether the hard-business card is in the business card whitelist, whether the soft-business card and the hard-business card correspond, and whether the connection mode complies). If the verification fails, the identity authentication request of the mobile terminal is rejected. If the verification succeeds, proceed to step S2-6;

[0101] Step S2-6, the computer generates a corresponding pass for the mobile terminal through the pass generation module, including information such as the mobile terminal identifier (unique), the mobile terminal name, and the connection method;

[0102] Step S2-7, the computer caches the corresponding pass through the pass cache module;

[0103] Step S2-8, the computer encrypts the corresponding pass through the information encryption module;

[0104] Step S2-9, the computer issues the encrypted corresponding pass to the mobile terminal through the information sending interface;

[0105] Step S2-10, after receiving the encrypted pass through the information receiving interface, the mobile terminal decrypts and generates a corresponding pass;

[0106] Step S2-11, the mobile terminal caches the corresponding pass through the pass cache module for later use.

[0107] Step S3, the mobile terminal collects and forms mobile terminal information, which is transmitted to the computer through segmentation and encryption based on the mobile terminal and computer security communication system. The computer identifies the identity of the mobile terminal. If the identification is successful, the mobile terminal information is processed. If the identification fails, the mobile terminal information is discarded. Figure 4 shown.

[0108] This step contains the following sub-steps:

[0109] Step S3-1, the mobile terminal collects and forms mobile terminal information, and the mobile terminal information may be text, pictures, or formatted data;

[0110] Step S3-2, the mobile terminal uses an information segmentation module and an information segmentation algorithm to segment the mobile terminal information. The text information adopts semantic-based segmentation, the formatted data adopts field and record row cross unit segmentation, and the picture adopts information segmentation after image perspective modeling to form mobile terminal information fragments;

[0111] Step S3-3, the mobile terminal uses the information encryption module to encrypt the mobile terminal information fragment and the corresponding pass respectively;

[0112] Step S3-4, the mobile terminal transmits the segmented encrypted mobile terminal information fragment and the encrypted mobile terminal corresponding pass to the computer through the information sending interface;

[0113] Step S3-5, after receiving the segmented encrypted mobile terminal information through the information receiving interface, the computer decrypts the corresponding pass through the information decryption module;

[0114] Step S3-6, the computer identifies the corresponding pass through the pass cache module. If the identification fails, the mobile terminal information is discarded. If the identification succeeds, step S3-7 is executed;

[0115] Step S3-7, the computer decrypts the mobile terminal information fragment through the information decryption module;

[0116] Step S3-8, the computer combines the mobile terminal information fragments through the information combination module;

[0117] Step S3-9, the computer processes the mobile terminal information, and performs business operations such as parsing, processing, integrating, and saving the mobile terminal information on the computer.

[0118] Step S4, the computer forms computer information, uses the information segmentation module to segment the computer information, encrypts the computer information and the corresponding pass of the mobile terminal, transmits the encrypted computer information to the mobile terminal to compare with the corresponding pass, and after the mobile terminal receives the computer information, it identifies the corresponding pass, decrypts the computer information, and processes the computer information, such as Figure 5 shown.

[0119] This step contains the following sub-steps:

[0120] Step S4-1, the computer collects and forms computer information (information sent to the mobile terminal), and the computer information can be text, pictures, and formatted data;

[0121] Step S4-2, the computer uses an information segmentation module and an information segmentation algorithm to segment the computer information. The text information is segmented based on semantics, the formatted data is segmented based on fields and record lines, and the pictures are segmented based on information modeled from an image perspective to form computer information fragments.

[0122] Step S4-3, the computer uses the information encryption module to encrypt the computer information fragment and the corresponding pass of the mobile terminal respectively;

[0123] Step S4-4, the computer transmits the encrypted computer information fragment and the corresponding pass to the mobile terminal through the information sending interface;

[0124] Step S4-5, after receiving the computer information through the information receiving interface, the mobile terminal uses the information decryption module to decrypt the corresponding pass;

[0125] Step S4-6, the mobile terminal identifies the corresponding pass in the pass cache module. If the identification fails, the computer information is discarded. If the identification succeeds, step S4-7 is executed;

[0126] Step S4-7, the mobile terminal uses the information decryption module to decrypt the computer information fragment;

[0127] Step S4-8, the mobile terminal combines the computer information fragments using the information combination module;

[0128] Step S4-9, the mobile terminal processes the computer information, and performs business operations such as parsing, processing, integrating, and saving the computer information on the mobile terminal.

[0129] The above are only preferred specific implementations of the present application, but the protection scope of the present application is not limited thereto. Any changes or substitutions that can be easily thought of by a person skilled in the art within the technical scope disclosed in the present application should be included in the protection scope of the present application. Therefore, the protection scope of the present application should be based on the protection scope of the claims.

Claims

1. A method for secure communication, It is characterized in that include: The mobile terminal transmits an identity authentication request to the computer, the computer verifies the identity authentication request, generates a pass corresponding to the mobile terminal according to the verification result, and transmits the pass to the mobile terminal; The mobile terminal obtains the mobile terminal information and performs segmentation and encryption, and transmits the segmented encrypted mobile terminal information and the encrypted pass to the computer. The computer identifies the mobile terminal according to the decrypted pass, and after the identification is completed, restores the segmented encrypted mobile terminal information to obtain the mobile terminal information; The computer obtains the computer information and performs segmentation and encryption, and transmits the segmented and encrypted computer information and the encrypted pass to the mobile terminal. The mobile terminal identifies the computer according to the decrypted pass, and after the identification is completed, restores the segmented and encrypted computer information to obtain the computer information; Before the mobile terminal transmits the identity authentication request to the computer, it includes: Build a soft business card based on the usage information of the mobile terminal, where the terminal information includes the operating system type, operating system serial number, and system login user; Construct a hard business card based on the device information of the mobile terminal, where the device information includes the mobile terminal device serial number, communication module MAC address, and connection method; Building a mobile terminal business card whitelist on a computer, wherein the mobile terminal business card whitelist records soft business cards, hard business cards, and the corresponding relationship between the soft business cards and the hard business cards; The process of generating a pass corresponding to a mobile terminal includes: The mobile terminal encrypts the information of the soft business card and the hard business card, and transmits an identity authentication request to the computer, wherein the identity authentication request is the encrypted soft business card and the hard business card, and the encryption adopts a symmetric encryption algorithm; The computer receives the identity authentication request, decrypts the identity authentication request, and verifies the decrypted identity authentication request through the mobile terminal business card whitelist; When the soft business card, hard business card and the correspondence between the soft business card and the hard business card recorded in the business card whitelist correspond to the decrypted identity authentication request, the verification is passed, and the computer generates a pass corresponding to the mobile terminal. If the verification fails, the computer rejects the identity authentication request of the mobile terminal, wherein the pass includes the mobile terminal identification, the mobile terminal name and the connection method; The computer stores and encrypts the pass, transmits the encrypted pass to the mobile terminal, and the mobile terminal decrypts the encrypted pass to obtain and store the pass.

2. The method according to claim 1, It is characterized in that The process of a computer obtaining mobile terminal information includes: The mobile terminal obtains mobile terminal information and segments the mobile terminal information to obtain mobile terminal information fragments, wherein the mobile terminal information includes text information, picture information and formatted data, the text information adopts a semantic-based segmentation method, the formatted data adopts a field and record row cross unit segmentation method, and the picture adopts an information segmentation method after image perspective modeling; The mobile terminal encrypts the mobile terminal information fragments and the pass, and transmits the segmented encrypted mobile terminal information and the encrypted pass to the computer; The computer receives the split encrypted mobile terminal information and the encrypted pass, decrypts the encrypted pass, and identifies the decrypted pass; If the decrypted communication certificate corresponds to the communication certificate stored in the computer, the recognition is successful, and the computer decrypts and combines the split encrypted mobile terminal to restore and obtain the mobile terminal information. If the recognition is not successful, the split encrypted mobile terminal information is discarded.

3. The method according to claim 1, It is characterized in that The process of a mobile terminal obtaining computer information includes: The computer obtains computer information and segments the computer information to obtain computer information fragments, wherein the computer information includes text information, picture information and formatted data, the text information adopts a semantic-based segmentation method, the formatted data adopts a field and record row cross unit segmentation method, and the picture adopts an information segmentation method after image perspective modeling; The computer encrypts the computer information fragments and the pass corresponding to the mobile terminal, and transmits the segmented encrypted computer information and the encrypted pass to the mobile terminal; The mobile terminal receives the split encrypted computer information and the encrypted pass, decrypts the encrypted pass, and identifies the decrypted pass; If the decrypted communication certificate corresponds to the communication certificate stored in the mobile terminal, the recognition is successful, and the mobile terminal decrypts and combines the split encrypted computer information, restores and obtains the computer information. If the recognition is not successful, the split encrypted computer information is discarded.

4. A secure communication system according to any one of claims 1 to 3, It is characterized in that An information sending unit and an information receiving unit are provided in both the mobile terminal and the computer; the information sending unit is used to divide, encrypt and send information, and the information receiving unit is used to receive, decrypt and combine information; The mobile terminal transmits an identity authentication request to the computer through the information sending unit. The computer verifies the identity authentication request and generates a pass corresponding to the mobile terminal according to the verification result. The pass is transmitted to the mobile terminal through the information receiving unit. The mobile terminal receives the pass through the information receiving unit. The mobile terminal obtains the mobile terminal information through the information sending unit and divides and encrypts it, and transmits the divided and encrypted mobile terminal information and the encrypted pass to the computer. The computer identifies the mobile terminal according to the decrypted pass. After the identification is completed, the divided and encrypted mobile terminal information is restored through the information receiving unit to obtain the mobile terminal information; The computer obtains computer information through the information sending unit and divides and encrypts it, and transmits the divided and encrypted computer information and the encrypted pass to the mobile terminal. The mobile terminal identifies the computer according to the decrypted pass. After the identification is completed, the divided and encrypted computer information is restored through the information receiving unit to obtain the computer information; The information sending unit in the mobile terminal is also connected to a soft business card module and a hard business card module, wherein the soft business card module is used to construct a soft business card according to the usage information of the mobile terminal; the hard business card module is used to construct a hard business card according to the device information of the mobile terminal; the information receiving module in the computer is also connected to a business card whitelist module, and the business card whitelist module is used to construct a mobile terminal business card whitelist; The information sending unit includes an information segmentation module, an information encryption module and an information sending interface, and the information receiving unit includes an information receiving interface, an information decryption module and an information combination module; In the computer, the information encryption module is also connected to the pass generation module, and a pass cache module is provided in the mobile terminal, which is connected to the pass generation module, the information encryption module and the information decryption module. A pass cache module is also provided in the computer, which is connected to the information encryption module and the information decryption module, and is used to cache and identify the pass through the pass cache module; The mobile terminal encrypts the information of the soft business card and the hard business card in the soft business card module and the hard business card module through the information encryption module, generates an identity authentication request, and transmits the identity authentication request to the computer through the information sending interface; The computer receives the identity authentication request through the information receiving interface, decrypts the identity authentication request through the information decryption module, and verifies the decrypted identity authentication request using the mobile terminal business card whitelist through the business card whitelist module; If the verification is successful, the computer generates a pass corresponding to the mobile terminal through the pass generation module; if the verification is not successful, the computer rejects the identity authentication request of the mobile terminal; The computer stores the pass through the pass cache module and encrypts the pass through the information encryption module, transmits the encrypted pass to the mobile terminal through the information sending interface, the mobile terminal receives the encrypted communication pass through the information receiving interface, decrypts the encrypted pass through the information decryption module, and obtains and stores the pass through the pass cache module.

5. The system according to claim 4, It is characterized in that The mobile terminal obtains the mobile terminal information, and divides the mobile terminal information through the information division module to obtain mobile terminal information fragments; the mobile terminal information fragments and the pass are encrypted through the information encryption module, and the divided and encrypted mobile terminal information and the encrypted pass are transmitted to the computer through the information sending interface; The computer receives the segmented encrypted mobile terminal information and the encrypted pass through the information receiving interface, decrypts the encrypted pass through the information decryption module, and identifies the decrypted pass through the pass cache module; if the identification is successful, the computer decrypts and combines the segmented encrypted mobile terminal information through the information decryption module and the information combination module in turn, restores and obtains the mobile terminal information, and if the identification is not successful, the segmented encrypted mobile terminal information is discarded.

6. The system according to claim 4, It is characterized in that The computer obtains computing information, and divides the computer information through the information segmentation module to obtain computer information fragments; the computer information fragments and the pass are encrypted through the information encryption module, and the segmented encrypted computer information and the encrypted pass are transmitted to the mobile terminal through the information sending interface; the mobile terminal receives the segmented encrypted computer information and the encrypted pass through the information receiving interface, and decrypts the encrypted pass through the information decryption module, and identifies the decrypted pass through the pass cache module; if the identification is successful, the mobile terminal decrypts and combines the segmented encrypted computer information through the information decryption module and the information combination module in turn, restores and obtains the computer information, and if the identification is not successful, the segmented encrypted computer information is discarded.

Images