A method and system for managing the security of audio data network transmission

Abstract

The present invention relates to the technical field of audio data transmission, and in particular to a method and system for managing the network transmission security of audio data; firstly, a to-be-sent audio to be sent is generated by a first client, and then the to-be-sent audio is divided into a first audio segment and a second audio segment; subsequently, the second audio segment is directly sent to a second client that needs to use the to-be-sent audio, and then the first audio segment is encrypted to obtain a corresponding audio ciphertext, and the audio ciphertext is sent to a server; only when the security risk level of the second client is low risk, the server sends the audio ciphertext to the second client; the to-be-sent audio is split and transmitted over the network in different paths, which can reduce the possibility of the audio being stolen during the transmission process; the scheme also verifies the information security risk level of the second client that receives the to-be-sent audio, and further ensures the security of the audio.

Description

Technical Field

[0001] The present invention relates to the technical field of audio data transmission, and in particular to a method and system for managing the security of audio data network transmission. Background Art

[0002] With the continuous development of information technology, Internet audio live broadcast and on-demand services have attracted widespread attention for their novel forms and rich content. After the audio is produced, it needs to be distributed to different terminals through network transmission; there may be a risk of leakage during the network transmission of the audio. In order to ensure the security of the audio, the transmitted audio needs to be encrypted to prevent the audio from being stolen and leaked during the transmission process; in the existing technology, the encryption algorithm is often directly used to encrypt the audio to obtain the corresponding ciphertext, and then the ciphertext and the corresponding key are transmitted to the terminal through the network. After the terminal receives the ciphertext and key, it decrypts them to obtain the original audio; this encryption transmission method is relatively simple and there is the possibility of brute force cracking, so the security of the existing audio encryption transmission needs to be improved. Summary of the invention

[0003] The main purpose of the present invention is to provide a method and system for managing the security of audio data network transmission, aiming to solve the problem that the security of existing audio encryption transmission needs to be improved.

[0004] The technical solution proposed by the present invention is:

[0005] A method for managing the security of audio data network transmission is applied to an audio data network transmission security management system; the system comprises a first client for sending audio information, a second client for receiving audio information, and a server; the first client and the second client are both communicatively connected to the server; the method comprises:

[0006] The first client obtains the audio to be sent, and divides the audio to be sent to obtain a first audio segment for sending to the server and a second audio segment for sending to the second client, wherein the number of the first audio segment and the number of the second audio segment are both multiple;

[0007] The first client encrypts the first audio segment to obtain a corresponding audio ciphertext, and sends the audio ciphertext to the server;

[0008] The first client sends the second audio segment to the second client;

[0009] The server sends a security verification instruction to the second client;

[0010] After receiving the security inspection instruction, the second client obtains its corresponding information security risk level and sends the information security risk level to the server, wherein the information security risk level includes high risk and low risk;

[0011] When the security risk level of the received information is low risk, the server sends the audio ciphertext to the second client;

[0012] The second client performs restoration based on the received audio ciphertext and the second audio segment to obtain the original audio to be sent.

[0013] Preferably, the first client obtains the audio to be sent, and divides the audio to be sent to obtain a first audio segment for sending to the server and a second audio segment for sending to the second client, including:

[0014] The first client determines the number of segments, and determines the first duration and the second duration based on the total duration of the audio to be sent and the number of segments:

[0015] ,

[0016] ,

[0017] In the formula, is the first duration, in seconds; is the second duration, in seconds; The total duration of the audio to be sent, in seconds; is the number of splits;

[0018] The first client divides the first second duration of the audio to be sent to obtain a third audio segment having a duration equal to the second duration and a remaining audio segment;

[0019] The first client evenly divides the remaining audio segments according to the target number to obtain fourth audio segments whose number is the target number and whose individual duration is the first duration, wherein the target number is the number of divisions minus one;

[0020] The first client determines the first audio segment and the second audio segment based on the third audio segment and the fourth audio segment.

[0021] Preferably, there are multiple second clients; and the first client determines the first audio segment and the second audio segment based on the third audio segment and the fourth audio segment, including:

[0022] The first client obtains the network delay duration between the first client and each second client to obtain the sum of the network delay durations between the first client and each second client, and marks it as the first total delay duration;

[0023] The first client obtains the network delay duration between the first client and the server, and the network delay duration between the server and each second client;

[0024] The first client sums the network delay durations between the server and each second client, and then adds the sum to the network delay duration between the first client and the server to obtain a second total delay duration;

[0025] When the first total delay duration is greater than the second total delay duration, the first client marks the third audio segment as the first audio segment;

[0026] When the first total delay duration is less than or equal to the second total delay duration, the first client marks the third audio segment as the second audio segment;

[0027] The first client divides the plurality of fourth audio segments into a plurality of first audio segments and a plurality of second audio segments.

[0028] Preferably, the first client divides the plurality of fourth audio segments into a plurality of first audio segments and a plurality of second audio segments, including:

[0029] The first client sorts the fourth audio segments in order so that each fourth audio segment is correspondingly provided with a unique serial number, wherein the serial number corresponding to the first fourth audio segment is 2, and the serial numbers of subsequent fourth audio segments are incremented in sequence, and the increment difference is 1;

[0030] The first client marks the fourth audio segment with an odd sequence number as the first audio segment, and marks the fourth audio segment with an even sequence number as the second audio segment;

[0031] The method further comprises:

[0032] The first client marks the sequence number of the third audio segment as 1.

[0033] Preferably, the first client encrypts the first audio segment to obtain a corresponding audio ciphertext, and sends the audio ciphertext to the server, including:

[0034] The first client generates a private key and a public key corresponding to the RSA encryption algorithm, and encrypts each first audio segment based on the RSA encryption algorithm and the corresponding private key to obtain multiple audio ciphertexts, and establishes a corresponding relationship between the sequence number corresponding to the first audio segment and the audio ciphertext;

[0035] The first client sends the audio ciphertext, the public key, and the serial number corresponding to the audio ciphertext to the server;

[0036] The server sends the audio ciphertext to the second client, including:

[0037] The server sends the audio ciphertext, the public key, and the serial number corresponding to the audio ciphertext to the second client;

[0038] The first client sends the second audio segment to the second client, including:

[0039] The first client sends the second audio segments and the sequence numbers corresponding to the second audio segments to the second client;

[0040] The second client performs restoration based on the received audio ciphertext and the second audio segment to obtain the original audio to be sent, including:

[0041] The second client decrypts the audio ciphertext based on the received audio ciphertext and the corresponding public key to obtain the corresponding first audio segments, and obtains the sequence number corresponding to each first audio segment;

[0042] The second client sequentially sorts the first audio segments and the second audio segments according to the corresponding sequence numbers and combines them to form the original audio to be sent.

[0043] Preferably, the second client includes a storage module; the method further includes:

[0044] The second client generates a first bait file and a second bait file simultaneously, wherein the first bait file and the second bait file are both audio files, the content of the first bait file includes randomly generated virtual personal privacy information, the content of the second bait file includes randomly generated audio content, and the content of the second bait file does not contain personal privacy information, and the size of the first bait file is the same as the size of the second bait file;

[0045] The second client stores the first bait file and the second bait file in different storage locations of the storage module respectively;

[0046] When the storage time of the first bait file is greater than the first preset time, the second client obtains the total number of times the external device reads the first bait file through the network in the past first preset time, and marks it as the first number;

[0047] When the storage time of the second bait file is greater than the first preset time, the second client obtains the total number of times the external device reads the second bait file through the network within the past first preset time, and marks it as the second number;

[0048] The second client calculates the risk value of the first information based on the first number and the second number:

[0049] ,

[0050] In the formula, is the first information risk value; is the first count; For the second number;

[0051] When the first information risk value is greater than the first preset value, the second client determines its corresponding information security risk level as high risk;

[0052] When the first information risk value is less than a second preset value, the second client determines its corresponding information security risk level as low risk, wherein the second preset value is less than the first preset value.

[0053] Preferably, the second client calculates the first information risk value based on the first number and the second number, and then further includes:

[0054] When the storage time of the first bait file is greater than the first preset time, the second client simultaneously generates a third bait file and a fourth bait file with completely identical content, wherein the third bait file and the fourth bait file are both audio files, the contents of the third bait file and the fourth bait file both include randomly generated audio content, and the third bait file and the fourth bait file do not contain personal privacy information;

[0055] The second client obtains the storage location of the first bait file and marks it as the first location, obtains the storage location of the second bait file and marks it as the second location;

[0056] The second client stores the third bait file in the first location, and stores the fourth bait file in the second location;

[0057] When the storage time of the third bait file is greater than the first preset time, the second client obtains the total number of times the external device reads the third bait file through the network within the past first preset time, and marks it as the third number;

[0058] When the storage time of the fourth bait file is greater than the first preset time, the second client obtains the total number of times the external device reads the fourth bait file through the network within the past first preset time, and marks it as the fourth number;

[0059] The second client calculates the second information risk value based on the third number and the fourth number:

[0060] ,

[0061] In the formula, is the second information risk value; is the third number; For the fourth time;

[0062] When the first information risk value and the second information risk value are both greater than the first preset value, the second client determines its corresponding information security risk level as high risk;

[0063] When the first information risk value and the second information risk value are both smaller than the second preset value, the second client determines its corresponding information security risk level as low risk.

[0064] Preferably, the second client stores the first bait file and the second bait file in different storage locations of the storage module respectively, and then further includes:

[0065] When the storage time of the first bait file is greater than the first preset time, the second client obtains an external device that has read the first bait file through the network within the first preset time, and marks it as a first target device;

[0066] The second client sorts the first target devices in order of the number of times the first bait file is read from most to least, so that each first target device is correspondingly provided with a unique serial number, wherein the serial number of the first first target device is 1, and the serial numbers of the subsequent first target devices are incremented in sequence, and the increment difference is 1;

[0067] The second client obtains the MAC address of the first target device whose serial number is less than the third preset value, and marks it as the first target address;

[0068] The second client analyzes the preset files stored in its own storage module to divide the preset files into sensitive files containing privacy information and common files not containing privacy information;

[0069] When the storage time of the first bait file is greater than the second preset time, the second client obtains the external devices that have read each sensitive file through the network within the second preset time, and marks them as the second target device set corresponding to each sensitive file, wherein the second preset time is greater than the first preset time, and each second target device set includes at least one second target device;

[0070] The second client sorts the second target devices in each second target set in order of the number of times the corresponding sensitive files are read, so that the second target devices in each second target device set are respectively provided with unique serial numbers, wherein the serial number of the first second target device in the second target device set is 1, and the serial numbers of the subsequent second target devices in the second target device set are incremented in sequence, and the increment difference is 1;

[0071] The second client marks the MAC address of the second target device with a sequence number less than the third preset value in the second target device set as the second target address, and combines the second target addresses belonging to the same second target device set to form a second target address set;

[0072] When the storage time of the first bait file is greater than the second preset time, the second client obtains the external devices that have read each common file through the network within the second preset time, and marks them as the third target device set corresponding to each common file, wherein each third target device set includes at least one third target device;

[0073] The second client sorts the third target devices in each third target set in order of the number of times the corresponding common files are read from most to least, so that the third target devices in each third target device set are respectively provided with unique serial numbers, wherein the serial number of the first third target device in the third target device set is 1, and the serial numbers of the subsequent third target devices in the third target device set are incremented in sequence, and the increment difference is 1;

[0074] The second client marks the MAC address of the third target device whose serial number is less than the third preset value in the third target device set as a third target address, and combines the third target addresses belonging to the same third target device set to form a third target address set;

[0075] The second client determines whether the following conditions are met: there is at least one second target address in any second target address set that is consistent with any first target address, and all third target addresses in all third target address sets are different from any first target address;

[0076] If so, the second client determines that its corresponding information security risk level is high risk;

[0077] If not, the second client determines that its corresponding information security risk level is low risk.

[0078] Preferably, after receiving the security verification instruction, the second client obtains its own corresponding information security risk level and sends the information security risk level to the server, and then further includes:

[0079] When the received information security risk level is high risk, the server disconnects the communication connection with the second client.

[0080] The present invention also proposes an audio data network transmission security management system, which applies an audio data network transmission security management method; the system includes a first client for sending audio information, a second client for receiving audio information, and a server; the first client and the second client are both communicatively connected to the server.

[0081] Through the above technical solution, the following beneficial effects can be achieved:

[0082] The audio data network transmission security management method proposed by the present invention can further improve the security of audio encryption transmission; specifically, firstly generate the audio to be sent through the first client, and then divide the audio to be sent into a first audio segment and a second audio segment; subsequently directly send the second audio segment to the second client that needs to use the audio to be sent, and then encrypt the first audio segment to obtain the corresponding audio ciphertext, and send the audio ciphertext to the server; the server verifies the information security risk level of the second client to determine whether the second client is prone to information leakage. Only when the security risk level of the second client is low risk, the server sends the audio ciphertext to the second client to prevent the audio to be sent from being leaked at the second client; the scheme first splits the audio to be sent and transmits it over the network in different paths, which can reduce the possibility of audio being stolen during transmission, and even if it is stolen, only one of the first audio segment or the second audio segment is stolen, and the content of the entire audio to be sent is still safe; secondly, the scheme also verifies the information security risk level of the second client receiving the audio to be sent, further ensuring the security of the audio. BRIEF DESCRIPTION OF THE DRAWINGS

[0083] In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on the structures shown in these drawings without paying creative work.

[0084] Figure 1 This is a flow chart of a first embodiment of a method for managing audio data network transmission security proposed by the present invention. DETAILED DESCRIPTION

[0085] It should be understood that the specific embodiments described herein are only used to explain the present invention, and are not used to limit the present invention.

[0086] The present invention provides a method and system for managing the security of audio data network transmission.

[0087] As attached Figure 1 As shown, in a first embodiment of a method for managing the network transmission security of audio data proposed by the present invention, the method is applied to a management system for managing the network transmission security of audio data; the system includes a first client for sending audio information (the first client here is a client for producing and recording audio to be sent), and a second client for receiving audio information (the second client here can be one or more) and a server; the first client and the second client are both communicatively connected to the server; this embodiment includes the following steps:

[0088] Step S110: The first client obtains the audio to be sent, and divides the audio to be sent to obtain a first audio segment for sending to the server and a second audio segment for sending to the second client, wherein the number of the first audio segment and the number of the second audio segment are both multiple.

[0089] Step S120: The first client encrypts the first audio segment to obtain a corresponding audio ciphertext, and sends the audio ciphertext to the server.

[0090] Step S130: the first client sends the second audio segment to the second client.

[0091] Step S140: The server sends a security verification instruction to the second client.

[0092] Step S150: After receiving the security check instruction, the second client obtains its own corresponding information security risk level and sends the information security risk level to the server, wherein the information security risk level includes high risk and low risk.

[0093] Step S160: When the received information security risk level is low risk, the server sends the audio ciphertext to the second client.

[0094] Specifically, only when the security risk level of the second client is low risk, the server sends the audio ciphertext to the second client to prevent the audio to be sent from being leaked at the second client.

[0095] Step S170: The second client performs restoration based on the received audio ciphertext and the second audio segment to obtain the original audio to be sent.

[0096] The audio data network transmission security management method proposed by the present invention can further improve the security of audio encryption transmission; specifically, firstly generate the audio to be sent through the first client, and then divide the audio to be sent into a first audio segment and a second audio segment; subsequently directly send the second audio segment to the second client that needs to use the audio to be sent, and then encrypt the first audio segment to obtain the corresponding audio ciphertext, and send the audio ciphertext to the server; the server verifies the information security risk level of the second client to determine whether the second client is prone to information leakage. Only when the security risk level of the second client is low risk, the server sends the audio ciphertext to the second client to prevent the audio to be sent from being leaked at the second client; the scheme first splits the audio to be sent and transmits it over the network in different paths, which can reduce the possibility of audio being stolen during transmission, and even if it is stolen, only one of the first audio segment or the second audio segment is stolen, and the content of the entire audio to be sent is still safe; secondly, the scheme also verifies the information security risk level of the second client receiving the audio to be sent, further ensuring the security of the audio.

[0097] In a second embodiment of a method for managing the security of audio data network transmission proposed by the present invention, based on the first embodiment, step S110 includes the following steps:

[0098] Step S210: The first client determines the number of divisions (i.e., the number of first audio segments and second audio segments into which the audio to be sent needs to be divided), and determines the first duration and the second duration based on the total duration of the audio to be sent and the number of divisions:

[0099] ,

[0100] ,

[0101] In the formula, is the first duration, in seconds; is the second duration, in seconds; The total duration of the audio to be sent, in seconds; is the number of splits.

[0102] Specifically, for example, in this embodiment, the total duration of the audio to be sent is 320 seconds; the number of divisions is 100; then the corresponding first duration is 3 seconds; and the second duration is 23 seconds.

[0103] Step S220: The first client divides the first second duration of the audio to be sent to obtain a third audio segment with a duration equal to the second duration and a remaining audio segment.

[0104] Specifically, the first 23 seconds of the audio to be sent are used as the third audio segment, and the last 291 seconds of the audio to be sent are used as the remaining audio segments.

[0105] Step S230: the first client evenly divides the remaining audio segments according to the target number to obtain fourth audio segments whose number is the target number and whose individual duration is the first duration, wherein the target number is the number of divisions minus one.

[0106] Specifically, through the above steps, 99 fourth audio segments with a duration of 3 seconds are obtained.

[0107] Step S240: the first client determines a first audio segment and a second audio segment based on the third audio segment and the fourth audio segment.

[0108] Specifically, the first client determines a third audio segment (the number is 1) with a duration of 23 seconds and a fourth audio segment (the number is 99) with a duration of 3 seconds as the first audio segment and the second audio segment, respectively.

[0109] In a third embodiment of a method for managing the security of audio data network transmission proposed by the present invention, based on the second embodiment, the number of second clients is multiple; step S240 includes the following steps:

[0110] Step S310: The first client obtains the network delay durations between the first client and each second client to obtain the sum of the network delay durations between the first client and each second client, and marks it as the first total delay duration.

[0111] Step S320: The first client obtains the network delay duration between the first client and the server, and the network delay duration between the server and each second client.

[0112] Step S330: The first client sums up the network delay durations between the server and each second client, and then adds the sum to the network delay duration between the first client and the server to obtain a second total delay duration.

[0113] Specifically, the first total delay time here can reflect the network communication situation of the first client sending the file to each second client. The smaller the first total delay time, the smoother the network communication between the first client and each second client. The second total delay time here can reflect the network communication situation of the first client sending the file to each second client through the server. The smaller the second total delay time, the smoother the network communication between the first client→server→each second client.

[0114] Step S340: When the first total delay time is greater than the second total delay time, the first client marks the third audio segment as the first audio segment.

[0115] Specifically, when the first total delay time is greater than the second total delay time, it means that the first client sends the file to each second client through the server faster, so the third audio segment is marked as the first audio segment; because the third audio segment is larger than the single fourth audio segment, the transmission time required is longer than the fourth audio segment, so the third audio segment is marked as the first audio segment, so that the third audio segment is sent to each second client through the server, thereby saving transmission time.

[0116] Step S350: When the first total delay duration is less than or equal to the second total delay duration, the first client marks the third audio segment as the second audio segment.

[0117] Specifically, on the contrary, the third audio segment is directly sent to each second client through the first client, thereby saving transmission time.

[0118] Step S60: The first client divides the plurality of fourth audio segments into a plurality of first audio segments and a plurality of second audio segments.

[0119] In a fourth embodiment of a method for managing the security of audio data network transmission proposed by the present invention, based on the third embodiment, step S60 includes the following steps:

[0120] Step S410: The first client sorts the fourth audio segments in order so that each fourth audio segment is correspondingly provided with a unique serial number, wherein the serial number corresponding to the first fourth audio segment is 2, and the serial numbers of subsequent fourth audio segments are incremented in sequence, and the increment difference is 1.

[0121] Step S420: the first client marks the fourth audio segment with an odd sequence number as a first audio segment, and marks the fourth audio segment with an even sequence number as a second audio segment.

[0122] This embodiment also includes the following steps:

[0123] Step S430: the first client marks the sequence number of the third audio segment as 1.

[0124] Specifically, in this embodiment, the fourth audio segments with odd serial numbers among the multiple fourth audio segments are used as the first audio segments, and the fourth audio segments with even serial numbers among the multiple fourth audio segments are used as the second audio segments, thereby completing the purpose of segmenting and dividing the entire audio to be sent; because the third audio segment is the first audio segment of the audio to be sent, the serial number of the third audio segment is directly marked as 1 (no matter whether the third audio segment is marked as the first audio segment or the second audio segment subsequently, its serial number is 1, so that the second client can restore the split audio segments easily).

[0125] In a fifth embodiment of a method for managing the security of audio data network transmission proposed by the present invention, based on the fourth embodiment, step S120 includes the following steps:

[0126] Step S510: The first client generates a private key and a public key corresponding to the RSA encryption algorithm, and encrypts each first audio segment based on the RSA encryption algorithm and the corresponding private key to obtain multiple audio ciphertexts, and establishes a corresponding relationship between the serial number corresponding to the first audio segment and the audio ciphertext.

[0127] Specifically, the RSA encryption algorithm is an asymmetric encryption algorithm invented by Ronald Rivest, Adi Samour, and Leonard Adleman in 1977. The security of the RSA algorithm is based on the difficulty of large number factorization, that is, the factorization of the product of two large prime numbers is very difficult. The public key and private key of the RSA algorithm are a pair of large numbers. The public key is used for encryption and the private key is used for decryption. Anyone can use the public key to encrypt, but only the person holding the private key can decrypt.

[0128] Step S520: The first client sends the audio ciphertext, the public key, and the serial number corresponding to the audio ciphertext to the server.

[0129] The step of the server sending the audio ciphertext to the second client in step S160 includes the following steps:

[0130] Step S530: The server sends the audio ciphertext, the public key, and the serial number corresponding to the audio ciphertext to the second client.

[0131] Step S130 includes the following steps:

[0132] Step S540: the first client sends the second audio segments and the sequence numbers corresponding to the second audio segments to the second client.

[0133] Step S170 includes the following steps:

[0134] Step S550: The second client decrypts the audio ciphertext based on the received audio ciphertext and the corresponding public key to obtain the corresponding first audio segments, and obtains the serial numbers corresponding to the first audio segments.

[0135] Step S560: The second client sequentially sorts the first audio segments and the second audio segments according to the corresponding sequence numbers and combines them to form the original audio to be sent.

[0136] Specifically, the second client receives the second audio segment and the serial number corresponding to each second audio segment, and then decrypts the received audio ciphertext based on the public key to obtain the corresponding first audio segment and the serial number corresponding to each first audio segment, and then the first audio segment and the second audio segment can be sorted in sequence according to the corresponding serial number and combined to form the original audio to be sent.

[0137] In a sixth embodiment of a method for managing the security of audio data network transmission proposed by the present invention, based on the first embodiment, the second client includes a storage module (such as a hard disk); this embodiment also includes the following steps:

[0138] Step S610: The second client generates a first bait file and a second bait file simultaneously, wherein the first bait file and the second bait file are both audio files, the content of the first bait file includes randomly virtually generated personal privacy information (the personal privacy information here includes but is not limited to name, age, home address, mobile phone number, height, weight and bank card number), the content of the second bait file includes randomly generated audio content, and the content of the second bait file does not contain personal privacy information, and the size of the first bait file is consistent with the size of the second bait file.

[0139] Step S620: The second client stores the first bait file and the second bait file in different storage locations of the storage module (for example, different folders on the same hard disk).

[0140] Step S630: When the storage time of the first bait file is greater than the first preset time (eg, 1 week), the second client obtains the total number of times the external device reads the first bait file through the network within the past first preset time, and marks it as the first number.

[0141] Step S640: When the storage time of the second bait file is greater than the first preset time, the second client obtains the total number of times the external device reads the second bait file through the network within the past first preset time, and marks it as the second number.

[0142] Specifically, because the first bait file contains virtually generated personal privacy information, external malicious terminals (terminals operated by persons who maliciously steal information) will be more inclined to read the first bait file, thereby stealing privacy information; conversely, because the second bait file does not contain personal privacy information, external malicious terminals (terminals operated by persons who steal information) will read the first bait file relatively less likely.

[0143] Step S650: The second client calculates the first information risk value based on the first number and the second number:

[0144] ,

[0145] In the formula, is the first information risk value; is the first count; For the second number.

[0146] Step S660: When the first information risk value is greater than a first preset value (eg, 3), the second client determines its corresponding information security risk level as high risk.

[0147] Specifically, it can be seen from the above formula that if the ratio of the first number to the second number is larger, it means that under the same circumstances, the first bait file is read more times than the second bait file, that is, the larger the first information risk value, the greater the possibility that the second client has been locked by an external malicious terminal, that is, the higher the risk of information leakage of the second client; in this embodiment, the first preset value is 3, that is, when the number of times the first bait file is read is 3 times greater than the number of times the second bait file is read, it means that the risk of information leakage of the second client is higher, so the second client determines its corresponding information security risk level as high risk.

[0148] Step S670: When the first information risk value is less than a second preset value (eg, 1), the second client determines its corresponding information security risk level as low risk, wherein the second preset value is less than the first preset value.

[0149] Specifically, when the first information risk value is less than the second preset value (1), it means that the number of times the first bait file is read is almost the same as the number of times the second bait file is read (or even the second bait file is read more often), and the risk of information leakage of the second client is relatively low. Therefore, the second client determines its corresponding information security risk level as low risk.

[0150] In a seventh embodiment of a method for managing the security of audio data network transmission proposed by the present invention, based on the sixth embodiment, step S650 further includes the following steps:

[0151] Step S710: When the storage duration of the first bait file is greater than the first preset duration, the second client simultaneously generates a third bait file and a fourth bait file with completely identical contents, wherein the third bait file and the fourth bait file are both audio files, the contents of the third bait file and the fourth bait file both include randomly generated audio content, and the third bait file and the fourth bait file do not contain personal privacy information.

[0152] Step S720: The second client obtains the storage location of the first bait file and marks it as the first location, obtains the storage location of the second bait file and marks it as the second location.

[0153] Step S730: The second client stores the third bait file in the first location, and stores the fourth bait file in the second location.

[0154] Step S740: When the storage time of the third bait file is greater than the first preset time, the second client obtains the total number of times the external device reads the third bait file through the network within the past first preset time, and marks it as the third number.

[0155] Specifically, the third number here is the number of times the third bait file placed at the first position has been read by the external device within the past first preset time period.

[0156] Step S750: When the storage time of the fourth bait file is greater than the first preset time, the second client obtains the total number of times the external device reads the fourth bait file through the network within the past first preset time, and marks it as the fourth number.

[0157] Specifically, the fourth number here is the number of times the fourth bait file placed at the second position is read by the external device within the past first preset time period.

[0158] Step S760: The second client calculates the second information risk value based on the third number and the fourth number:

[0159] ,

[0160] In the formula, is the second information risk value; is the third number; For the fourth time.

[0161] Step S770: When the first information risk value and the second information risk value are both greater than the first preset value, the second client determines its corresponding information security risk level as high risk.

[0162] Specifically, the second information risk value can reflect the reading status of the third bait file and the fourth bait file; if the first information risk value is greater than the first preset value before, the second client is likely to have been locked by an external malicious terminal, that is, the risk of information leakage of the second client is high. On this basis, if the second information risk value is still greater than the first preset value, it means that the external malicious terminal has marked the storage location of the first bait file. When the sizes of the third bait file and the fourth bait file are the same, the third bait file is read more times simply because it is stored in the same location as the first bait file, and the fourth bait file is read less frequently, which further indicates that the second client has been paid attention to by external malicious terminals and is more likely to have risk leakage, which can further indicate that the information security risk level corresponding to the second client itself is high risk.

[0163] Step S780: When the first information risk value and the second information risk value are both smaller than the second preset value, the second client determines its corresponding information security risk level as low risk.

[0164] Correspondingly, if the first information risk value and the second information risk value are both smaller than the second preset value, it is further determined that the information security risk level corresponding to the second client itself is low risk.

[0165] In an eighth embodiment of a method for managing the security of audio data network transmission proposed by the present invention, based on the sixth embodiment, step S620 further includes the following steps:

[0166] Step S801: When the storage time of the first bait file is greater than the first preset time, the second client obtains an external device that has read the first bait file through the network within the first preset time, and marks it as a first target device.

[0167] Specifically, the first target device is an external device that has read the first bait file within the first preset time period in the past.

[0168] Step S802: The second client sorts the first target devices in order from most to least according to the number of times they read the first bait file, so that each first target device is provided with a unique serial number, wherein the serial number of the first first target device is 1, and the first first target device is the external device that reads the first bait file the most times, and the serial numbers of subsequent first target devices are incremented successively, and the increment difference is 1.

[0169] Step S803: the second client obtains the MAC address of the first target device whose serial number is less than the third preset value (eg, 3) (the MAC address of each device is unique, so the external devices can be distinguished by the MAC address), and marks it as the first target address.

[0170] Specifically, the first target address here is the MAC address of the external device with the top 3 most times of reading the first bait file.

[0171] Step S804: The second client analyzes the preset files stored in its own storage module (specifically, all audio files, image files and text files in the storage module) to divide the preset files into sensitive files containing privacy information and ordinary files not containing privacy information.

[0172] Specifically, in this embodiment, voice recognition is performed on audio files in the storage module to determine audio files that contain personal privacy information (such as name, age, home address, mobile phone number, height, weight and bank card number); image recognition is performed on image files in the storage module to determine image files that contain personal privacy information (such as faces of non-public figures); and text recognition is performed on text files in the storage module to determine text files that contain personal privacy information (such as name, age, home address, mobile phone number, height, weight and bank card number).

[0173] Step S805: When the storage time of the first bait file is greater than the second preset time (the second preset time here is twice the first preset time, i.e. 2 weeks), the second client obtains the external devices that have read each sensitive file through the network within the past second preset time, and marks them as the second target device set corresponding to each sensitive file, wherein the second preset time is greater than the first preset time, and each second target device set includes at least one second target device.

[0174] Specifically, the second target device is an external device that has read the sensitive file within the second preset time period in the past.

[0175] Step S806: The second client sorts the second target devices in each second target set in order from most to least according to the number of times the corresponding sensitive files are read, so that the second target devices in each second target device set are respectively provided with a unique serial number, wherein the serial number of the first second target device in the second target device set is 1, and the first second target device is the external device that has read the sensitive files the most times, and the serial numbers of subsequent second target devices in the second target device set are incremented successively, and the increment difference is 1.

[0176] Step S807: the second client marks the MAC addresses of the second target devices in the second target device set whose serial numbers are less than the third preset value as second target addresses, and combines the second target addresses belonging to the same second target device set to form a second target address set.

[0177] Specifically, the second target address here is the MAC address of the external device with the top 3 most times of reading sensitive files.

[0178] Step S808: When the storage time of the first bait file is greater than the second preset time, the second client obtains the external devices that have read each ordinary file through the network within the past second preset time, and marks them as the third target device set corresponding to each ordinary file, wherein each third target device set includes at least one third target device.

[0179] Specifically, the third target device is an external device that has read the common file within the second preset time period in the past.

[0180] Step S809: The second client sorts the third target devices in each third target set in order from most to least according to the number of times the corresponding ordinary files are read, so that the third target devices in each third target device set are respectively provided with a unique serial number, wherein the serial number of the first third target device in the third target device set is 1, and the first third target device is the external device that reads the ordinary files the most times, and the serial numbers of subsequent third target devices in the third target device set are incremented successively, and the increment difference is 1.

[0181] Step S810: the second client marks the MAC address of the third target device whose sequence number is less than the third preset value in the third target device set as a third target address, and combines the third target addresses belonging to the same third target device set to form a third target address set.

[0182] Specifically, the third target address here is the MAC address of the external device with the top 3 most common file reads.

[0183] Step S811: The second client determines whether the following conditions are met: any second target address set contains at least one second target address that is consistent with any first target address, and all third target addresses in all third target address sets are different from any first target address.

[0184] Specifically, when there is at least one second target address in any second target address set that is consistent with any first target address, it means that at least one of the external devices that read sensitive files more times (i.e., the second target devices) is the same as the external device that reads the first bait file more times (i.e., the first target device, which is more likely to be a malicious device), indicating that all files containing personal privacy information stored in the second client have been read multiple times by at least one external device, which further indicates that the second client has a high probability of information leakage and has low security.

[0185] When all the third target addresses in all the third target address sets are different from any of the first target addresses, it means that any external device (i.e., the third target device) that reads ordinary files (i.e., files that do not contain privacy information) more times is not the same as the external device (i.e., the first target device) that reads the first bait file more times (i.e., the first target device, which is more likely to be a malicious device). In other words, the first target device reads ordinary files less frequently, and it can be inferred that the first target device only pays attention to files containing privacy information (sensitive files). It can be further inferred that the first target device is a malicious device. On this basis, it is more certain that the risk of information leakage in the second client is higher.

[0186] If yes, execute step S812: the second client determines that its corresponding information security risk level is high risk.

[0187] If not, execute step S813: the second client determines that its corresponding information security risk level is low risk.

[0188] Specifically, this embodiment provides another solution for the second client to determine its corresponding information security risk level.

[0189] In a ninth embodiment of a method for managing the security of audio data network transmission proposed by the present invention, based on the first embodiment, step S150 further includes the following steps:

[0190] Step S1010: When the received information security risk level is high risk, the server disconnects the communication connection with the second client.

[0191] The present invention also proposes an audio data network transmission security management system, which applies an audio data network transmission security management method; the system includes a first client for sending audio information, a second client for receiving audio information, and a server; the first client and the second client are both communicatively connected to the server.

[0192] The serial numbers of the above embodiments of the present invention are only for description and do not represent the advantages or disadvantages of the embodiments.

[0193] Through the description of the above implementation methods, those skilled in the art can clearly understand that the above-mentioned embodiment methods can be implemented by means of software plus a necessary general hardware platform, and of course by hardware, but in many cases the former is a better implementation method. Based on such an understanding, the technical solution of the present invention, or the part that contributes to the prior art, can be embodied in the form of a software product, and the computer software product is stored in a storage medium (such as ROM / RAM, magnetic disk, optical disk), including a number of instructions for a terminal (which can be a mobile phone, computer, server, air conditioner, or network equipment, etc.) to execute the methods described in each embodiment of the present invention.

[0194] The embodiments of the present invention are described above in conjunction with the accompanying drawings, but the present invention is not limited to the above-mentioned specific implementation modes, which are merely illustrative rather than restrictive. Under the guidance of the present invention, ordinary technicians in this field can also make many forms without departing from the scope of protection of the present invention and the claims, all of which are within the protection of the present invention.

Claims

1. A method for managing the security of audio data network transmission, characterized in that: Applicable to an audio data network transmission security management system; the system comprises a first client for sending audio information, and a second client and a server for receiving audio information respectively; The first client and the second client are both communicatively connected to the server; the method comprises: The first client obtains the audio to be sent, and divides the audio to be sent to obtain a first audio segment for sending to the server and a second audio segment for sending to the second client, wherein the number of the first audio segment and the number of the second audio segment are both multiple, and the first audio segment and the second audio segment are transmitted over the network using different paths; The first client encrypts the first audio segment to obtain a corresponding audio ciphertext, and sends the audio ciphertext to the server; The first client sends the second audio segment to the second client; The server sends a security verification instruction to the second client; After receiving the security inspection instruction, the second client obtains its corresponding information security risk level and sends the information security risk level to the server, wherein the information security risk level includes high risk and low risk; When the security risk level of the received information is low risk, the server sends the audio ciphertext to the second client; The second client performs restoration based on the received audio ciphertext and the second audio segment to obtain the original audio to be sent.

2. The method for managing the security of audio data network transmission according to claim 1, characterized in that: The first client obtains the audio to be sent and divides the audio to be sent to obtain a first audio segment for sending to the server and a second audio segment for sending to the second client, including: The first client determines the number of segments, and determines the first duration and the second duration based on the total duration of the audio to be sent and the number of segments: ， ， In the formula, is the first duration, in seconds; is the second duration, in seconds; The total duration of the audio to be sent, in seconds; is the number of splits; The first client divides the first second duration of the audio to be sent to obtain a third audio segment having a duration equal to the second duration and a remaining audio segment; The first client evenly divides the remaining audio segments according to the target number to obtain fourth audio segments whose number is the target number and whose individual duration is the first duration, wherein the target number is the number of divisions minus one; The first client determines the first audio segment and the second audio segment based on the third audio segment and the fourth audio segment.

3. A method for managing the security of audio data network transmission according to claim 2, characterized in that: There are multiple second clients; the first client determines the first audio segment and the second audio segment based on the third audio segment and the fourth audio segment, including: The first client obtains the network delay duration between the first client and each second client to obtain the sum of the network delay durations between the first client and each second client, and marks it as the first total delay duration; The first client obtains the network delay duration between the first client and the server, and the network delay duration between the server and each second client; The first client sums the network delay durations between the server and each second client, and then adds the sum to the network delay duration between the first client and the server to obtain a second total delay duration; When the first total delay duration is greater than the second total delay duration, the first client marks the third audio segment as the first audio segment; When the first total delay duration is less than or equal to the second total delay duration, the first client marks the third audio segment as the second audio segment; The first client divides the plurality of fourth audio segments into a plurality of first audio segments and a plurality of second audio segments.

4. The method for managing the security of audio data network transmission according to claim 3, characterized in that: The first client divides the plurality of fourth audio segments into a plurality of first audio segments and a plurality of second audio segments, including: The first client sorts the fourth audio segments in order so that each fourth audio segment is correspondingly provided with a unique serial number, wherein the serial number corresponding to the first fourth audio segment is 2, and the serial numbers of subsequent fourth audio segments are incremented in sequence, and the increment difference is 1; The first client marks the fourth audio segment with an odd sequence number as the first audio segment, and marks the fourth audio segment with an even sequence number as the second audio segment; The method further comprises: The first client marks the sequence number of the third audio segment as 1.

5. A method for managing the security of audio data network transmission according to claim 4, characterized in that: The first client encrypts the first audio segment to obtain a corresponding audio ciphertext, and sends the audio ciphertext to the server, including: The first client generates a private key and a public key corresponding to the RSA encryption algorithm, and encrypts each first audio segment based on the RSA encryption algorithm and the corresponding private key to obtain multiple audio ciphertexts, and establishes a corresponding relationship between the sequence number corresponding to the first audio segment and the audio ciphertext; The first client sends the audio ciphertext, the public key, and the serial number corresponding to the audio ciphertext to the server; The server sends the audio ciphertext to the second client, including: The server sends the audio ciphertext, the public key, and the serial number corresponding to the audio ciphertext to the second client; The first client sends the second audio segment to the second client, including: The first client sends the second audio segments and the sequence numbers corresponding to the second audio segments to the second client; The second client performs restoration based on the received audio ciphertext and the second audio segment to obtain the original audio to be sent, including: The second client decrypts the audio ciphertext based on the received audio ciphertext and the corresponding public key to obtain the corresponding first audio segments, and obtains the sequence number corresponding to each first audio segment; The second client sequentially sorts the first audio segments and the second audio segments according to the corresponding sequence numbers and combines them to form the original audio to be sent.

6. The method for managing the security of audio data network transmission according to claim 1, characterized in that: The second client includes a storage module; the method further includes: The second client generates a first bait file and a second bait file simultaneously, wherein the first bait file and the second bait file are both audio files, the content of the first bait file includes randomly generated virtual personal privacy information, the content of the second bait file includes randomly generated audio content, and the content of the second bait file does not contain personal privacy information, and the size of the first bait file is the same as the size of the second bait file; The second client stores the first bait file and the second bait file in different storage locations of the storage module respectively; When the storage time of the first bait file is greater than the first preset time, the second client obtains the total number of times the external device reads the first bait file through the network within the past first preset time, and marks it as the first number; When the storage time of the second bait file is greater than the first preset time, the second client obtains the total number of times the external device reads the second bait file through the network within the past first preset time, and marks it as the second number; The second client calculates the risk value of the first information based on the first number and the second number: ， In the formula, is the first information risk value; is the first count; For the second number; When the first information risk value is greater than the first preset value, the second client determines its corresponding information security risk level as high risk; When the first information risk value is less than a second preset value, the second client determines its corresponding information security risk level as low risk, wherein the second preset value is less than the first preset value.

7. A method for managing the security of audio data network transmission according to claim 6, characterized in that: The second client calculates the first information risk value based on the first number and the second number, and then further includes: When the storage time of the first bait file is greater than the first preset time, the second client simultaneously generates a third bait file and a fourth bait file with completely identical content, wherein the third bait file and the fourth bait file are both audio files, the contents of the third bait file and the fourth bait file both include randomly generated audio content, and the third bait file and the fourth bait file do not contain personal privacy information; The second client obtains the storage location of the first bait file and marks it as the first location, obtains the storage location of the second bait file and marks it as the second location; The second client stores the third bait file in the first location, and stores the fourth bait file in the second location; When the storage time of the third bait file is greater than the first preset time, the second client obtains the total number of times the external device reads the third bait file through the network within the past first preset time, and marks it as the third number; When the storage time of the fourth bait file is greater than the first preset time, the second client obtains the total number of times the external device reads the fourth bait file through the network within the past first preset time, and marks it as the fourth number; The second client calculates the second information risk value based on the third number and the fourth number: ， In the formula, is the second information risk value; is the third number; For the fourth time; When the first information risk value and the second information risk value are both greater than the first preset value, the second client determines its corresponding information security risk level as high risk; When the first information risk value and the second information risk value are both smaller than the second preset value, the second client determines its corresponding information security risk level as low risk.

8. The method for managing the security of audio data network transmission according to claim 6, characterized in that: The second client stores the first bait file and the second bait file in different storage locations of the storage module respectively, and then further includes: When the storage time of the first bait file is greater than the first preset time, the second client obtains an external device that has read the first bait file through the network within the first preset time, and marks it as a first target device; The second client sorts the first target devices in order of the number of times the first bait file is read from most to least, so that each first target device is correspondingly provided with a unique serial number, wherein the serial number of the first first target device is 1, and the serial numbers of the subsequent first target devices are incremented in sequence, and the increment difference is 1; The second client obtains the MAC address of the first target device whose serial number is less than the third preset value, and marks it as the first target address; The second client analyzes the preset files stored in its own storage module to divide the preset files into sensitive files containing privacy information and common files not containing privacy information; When the storage time of the first bait file is greater than the second preset time, the second client obtains the external devices that have read each sensitive file through the network within the second preset time, and marks them as the second target device set corresponding to each sensitive file, wherein the second preset time is greater than the first preset time, and each second target device set includes at least one second target device; The second client sorts the second target devices in each second target set in order of the number of times the corresponding sensitive files are read, so that the second target devices in each second target device set are respectively provided with unique serial numbers, wherein the serial number of the first second target device in the second target device set is 1, and the serial numbers of the subsequent second target devices in the second target device set are incremented in sequence, and the increment difference is 1; The second client marks the MAC address of the second target device with a sequence number less than the third preset value in the second target device set as the second target address, and combines the second target addresses belonging to the same second target device set to form a second target address set; When the storage time of the first bait file is greater than the second preset time, the second client obtains the external devices that have read each common file through the network within the second preset time, and marks them as the third target device set corresponding to each common file, wherein each third target device set includes at least one third target device; The second client sorts the third target devices in each third target set in order of the number of times the corresponding common files are read from most to least, so that the third target devices in each third target device set are respectively provided with unique serial numbers, wherein the serial number of the first third target device in the third target device set is 1, and the serial numbers of the subsequent third target devices in the third target device set are incremented in sequence, and the increment difference is 1; The second client marks the MAC address of the third target device whose serial number is less than the third preset value in the third target device set as a third target address, and combines the third target addresses belonging to the same third target device set to form a third target address set; The second client determines whether the following conditions are met: there is at least one second target address in any second target address set that is consistent with any first target address, and all third target addresses in all third target address sets are different from any first target address; If so, the second client determines that its corresponding information security risk level is high risk; If not, the second client determines that its corresponding information security risk level is low risk.

9. The method for managing the security of audio data network transmission according to claim 1, characterized in that: After receiving the security inspection instruction, the second client obtains its own corresponding information security risk level and sends the information security risk level to the server, and then further includes: When the received information security risk level is high risk, the server disconnects the communication connection with the second client.

10. An audio data network transmission security management system, characterized in that: The method for managing the network transmission security of audio data as described in any one of claims 1 to 9 is applied; the system comprises a first client for sending audio information, a second client for receiving audio information, and a server; the first client and the second client are both communicatively connected to the server.

Images