Secure communication method, device, equipment and medium

Abstract

The invention provides a secure communication method, device, equipment and medium, and the method is applied to a first server, and comprises the steps: responding to a network access authentication request of a terminal, so as to determine whether the terminal passes the network access authentication of the first server; after the terminal passes the network access authentication, sending an accreditation request to the terminal, so that the terminal generates accreditation data according to the accreditation request; calling first middleware of the first server to generate certificate data of the terminal based on the certificate making data; and sending the certificate data to the terminal, thereby solving the problem that the service security of the articulated naturality web is affected when the terminal accesses the articulated naturality web at present.

Description

Technical Field

[0001] The present invention relates to the field of visual networking technology, and in particular to a method, device, equipment and medium for secure communication. Background Art

[0002] Currently, when a terminal of a visual network accesses the network or performs security services, the terminal needs to be verified to ensure the security of the visual network services.

[0003] In the related technology, the terminal performs network access operations in the visual network server according to the visual network number and visual network MAC address of the target virtual terminal in order to connect to the visual network. The way the above terminal connects to the visual network lacks certain security checks, which will affect the security of the visual network business. Summary of the invention

[0004] The present invention provides a method, device, equipment and medium for secure communication to solve the problem that the current terminal access to the visual network will affect the security of the visual network services.

[0005] In order to solve the above problem, the present invention discloses a secure communication method, which is applied to a first server and includes:

[0006] responding to a network access authentication request of a terminal to determine whether the terminal has passed the network access authentication of the first server;

[0007] After the terminal passes the network access authentication, sending a certificate request to the terminal so that the terminal generates certificate data according to the certificate request;

[0008] Based on the certificate data, calling the first middleware of the first server to generate certificate data of the terminal;

[0009] The certificate data is sent to the terminal.

[0010] Optionally, calling the first middleware of the first server to generate the certificate data of the terminal based on the certificate data includes:

[0011] Determine whether the certificate making data contains a certificate making parameter field, and if the certificate making data contains a certificate making parameter field, call the first middleware of the first server to generate certificate data of the terminal;

[0012] If the certificate generation data does not include a certificate generation parameter field, it is determined that the terminal has a local certificate, and the first server sends a no-certification-required instruction to the terminal.

[0013] Optionally, sending a certificate making request to the terminal so that the terminal generates certificate making data according to the certificate making request includes:

[0014] Receive the certificate data generated by the terminal according to the certificate request, wherein the certificate request does not carry any certificate information, the certificate data is empty, and the certificate data is generated when the terminal calls the second middleware to determine whether the terminal has a local certificate.

[0015] Optionally, sending a certificate making request to the terminal so that the terminal generates certificate making data according to the certificate making request includes:

[0016] Receive the certificate data generated by the terminal by splicing the certificate information in the certificate request, wherein the certificate data includes: a certificate parameter field, a certificate length and a certificate parameter value, and the certificate data is generated when the terminal calls the second middleware to determine whether the terminal has a local certificate when the terminal does not have a local certificate.

[0017] Optionally, the method further comprises:

[0018] Receiving a response indicating successful certificate creation returned by the terminal;

[0019] The user account information in the Ukey encryption device is called so that the terminal can log in to the visual network according to the user account information.

[0020] In order to solve the above problem, the present invention further discloses a secure communication device, which is applied to a first server and includes:

[0021] A network access authentication module, used to respond to a network access authentication request of a terminal to determine whether the terminal has passed the network access authentication of the first server;

[0022] A generating module, configured to send a certificate request to the terminal after the terminal passes the network access authentication, so that the terminal generates certificate data according to the certificate request;

[0023] A calling module, configured to call the first middleware of the first server to generate certificate data of the terminal based on the certificate making data;

[0024] A sending module is used to send the certificate data to the terminal.

[0025] Optionally, the calling module includes:

[0026] A judging unit, configured to judge whether the certificate making data contains a certificate making parameter field, and if the certificate making data contains a certificate making parameter field, calling the first middleware of the first server to generate certificate data of the terminal;

[0027] If the certificate generation data does not include a certificate generation parameter field, it is determined that the terminal has a local certificate, and the first server sends a no-certification-required instruction to the terminal.

[0028] Optionally, the generating module includes:

[0029] The first generating unit is used to receive the certificate data generated by the terminal according to the certificate request, wherein the certificate request does not carry any certificate information, the certificate data is empty, and the certificate data is generated when the terminal calls the second middleware to determine whether the terminal has a local certificate.

[0030] In order to solve the above problems, the present invention also discloses an electronic device, including a memory, a processor and a computer program stored in the memory and executable on the processor, wherein the processor implements the secure communication method when executing the computer program.

[0031] In order to solve the above problem, the present invention also discloses a computer-readable storage medium, which stores a computer program for implementing the secure communication method when executed by a processor.

[0032] Compared with the prior art, the present invention has the following advantages:

[0033] In an embodiment of the present invention, a terminal is first authenticated for network access to determine whether the terminal has passed the network access authentication of the first server; after the terminal passes the network access authentication, the terminal is not allowed to connect to the visual network directly, but a certificate is required for the terminal. Only after obtaining the certificate data can the terminal log in to the visual network, that is, the terminal can log in to the visual network only after two authentications in the present invention, thereby ensuring the security of the visual network services.

[0034] Of course, any product implementing the present invention does not necessarily need to achieve all of the advantages described above at the same time. BRIEF DESCRIPTION OF THE DRAWINGS

[0035] Figure 1 is a flow chart of a method for secure communication according to an embodiment of the present invention;

[0036] Figure 2 is a flow chart of a method for secure communication according to an embodiment of the present invention;

[0037] Figure 3 It is a structural diagram of a secure communication device described in an embodiment of the present invention. DETAILED DESCRIPTION

[0038] In order to make the above-mentioned objects, features and advantages of the present invention more obvious and easy to understand, the present invention is further described in detail below with reference to the accompanying drawings and specific embodiments.

[0039] Reference Figure 1 , which shows a flow chart of a secure communication method according to an embodiment of the present invention, the method is applied to a first server, and specifically includes:

[0040] Step 101: In response to the network access authentication of the terminal, determine whether the terminal has passed the network access authentication of the first server.

[0041] The terminal may be a physical terminal or a soft terminal, and the soft terminal may be any software that interacts with the visual network, such as live broadcast software, video conferencing software, etc. The terminal may be installed on hardware devices such as PCs and mobile phones.

[0042] 1. When the terminal corresponds to a physical terminal and the terminal corresponds to a chief virtual terminal, the terminal performs network authentication in the following ways:

[0043] 1) After accessing the video network, the first server applies to the key management server for the root network key NK-root and the broadcast key BK.

[0044] 2) The terminal sends a network access authentication request to the first server, wherein the network access authentication request carries a random number, and it is agreed that the terminal does not pass the terminal certificate when the first instruction of the network access authentication is sent. If the first server requires a terminal certificate, the first server returns an error message to the terminal, which indicates that one or all of the terminal certificate and encryption certificate need to be passed. After receiving the error message, the terminal resends the "network access authentication request" instruction to the first server, wherein the network access authentication request carries information such as a random number and a terminal certificate.

[0045] 3) After the first server receives the network authentication request, if there is a certificate in the network authentication request, it will cache the certificate locally to verify the validity of the certificate, and send a "network authentication response" instruction to the terminal. The network authentication response carries random numbers, encrypted visual network keys (distributed by NK-root), encrypted broadcast keys and other information. If the network authentication request indicates that the certificate of the first server is required, the first server certificate is carried in the network authentication response. In this way, when the first server generates the network authentication response instruction, it needs to pass in the terminal ID, the first server ID, the certificate revocation list (which can be left blank if verification is not required), etc.

[0046] 4) After the terminal receives the network access authentication response instruction, if the terminal receives the first server certificate, it caches the first server certificate in the specified path, verifies that it is correct, and sends a network access authentication completion message to the first server.

[0047] 2. When the terminal corresponds to a non-chief virtual terminal, the terminal performs network authentication in the following ways:

[0048] 1) After accessing the video network, the first server applies to the key management server for the root network key NK-root and the broadcast key BK.

[0049] 2) The virtual terminal sends a fast network access authentication request instruction to the first server, where the fast network access authentication request instruction carries a random number and the first server ID.

[0050] 3) After receiving the fast network access authentication request instruction, the first server sends a fast network access authentication response instruction to the virtual terminal. The fast network access authentication response carries information such as a random number, an encrypted visual network key (distributed by NK-root), and an encrypted broadcast key. If the first fast network access authentication request instruction indicates that the first server certificate needs to be transmitted, the fast network access authentication request instruction carries the network management certificate. When generating a fast network access authentication response instruction, the first server needs to pass in the virtual terminal ID, the ID of the chief virtual terminal to which the virtual terminal belongs, the network management ID, the certificate revocation list (if not required, leave blank), etc.

[0051] 4) After the virtual terminal receives the quick network access authentication response instruction, if it receives the first server certificate, it caches the first server certificate in the specified path. Send a "quick network access authentication completed" instruction to the first server. Among them, if the "quick network access authentication response instruction" indicates that the chief virtual terminal certificate needs to be transmitted, this quick network access authentication response instruction carries the certificate of the chief virtual terminal to which the virtual terminal belongs. When the virtual terminal generates the "quick network access authentication completed" instruction, it passes in the first server authentication response data, the first server ID, etc. during the quick network access.

[0052] 5) After receiving the quick network access authentication completion instruction, the first server transmits the network access authentication completion information, virtual terminal ID, chief virtual terminal ID of the virtual terminal, etc. If the certificate of the first server is received, the first server certificate is cached in the specified path, the validity of the certificate is verified, the instruction content is verified, and the network access process is completed.

[0053] When a terminal / virtual terminal has been connected to the network and needs to be reconnected to the network, the terminal adopts the network connection method when the terminal corresponds to a physical terminal and the terminal corresponds to a chief virtual terminal or the network connection method when the terminal corresponds to a non-chief virtual terminal.

[0054] 3. For all visual networking terminals and virtual terminals corresponding to the terminal, the terminal shall be authenticated through the following methods:

[0055] 1) The first server sends a "network management heartbeat" instruction to all terminals to start the network authentication in the heartbeat phase.

[0056] 2) After receiving the "network management heartbeat" instruction, the terminal sends a heartbeat response instruction to the first server, and the heartbeat response instruction carries a MAC check value. When generating the heartbeat response instruction, the terminal also needs to pass in the first server heartbeat information, terminal ID, etc.

[0057] 3) After receiving the heartbeat response information, the first server transmits the first server heartbeat information, terminal ID, MAC value, etc. to verify the MAC value. If the verification fails, 1) is repeated. If the verification fails after exceeding the set number of times (such as 3 times), the terminal is kicked out of the network.

[0058] 4. When a terminal joins a meeting, it performs membership authentication in the following ways.

[0059] 1) Before the meeting starts, the first server applies for a video key encryption key (VKEK) from the key management server (creating a new video conference) or queries (joining an existing video conference); or queries the video network key corresponding to terminal A.

[0060] 2) The first server sends a membership authentication instruction to the terminal, which carries a random number and the ID of the first server. 3) The terminal receives the membership authentication instruction and determines whether it needs to send its own certificate to the first server. The terminal sends a terminal response instruction to the first server, where the certificate of terminal A is not sent by default.

[0061] The terminal membership authentication instruction determines whether it needs to send its own certificate to the first server. If the terminal sends the certificate, the first server caches it locally. When the terminal generates a terminal response instruction, it needs to pass in the first server ID, the authentication data sent by the first server, etc.

[0062] 4) After receiving the terminal response instruction, the first server sends a server response instruction to the terminal. The certificate of the first server is not sent by default. According to the terminal response instruction in step 3), it is determined whether it is necessary to send its own certificate to the terminal. If the first server sends the certificate, the terminal caches it locally. When the first server generates a server response instruction, it needs to pass in the terminal ID, the first server ID, the authentication data sent by the terminal, etc.

[0063] 5) After receiving the server response instruction, the terminal sends a joining completion instruction to the first server. When the terminal generates the joining completion instruction, it needs to pass in the first server ID, the authentication data sent by the first server, etc.

[0064] 6) The first server receives the membership completion message from the terminal, passes in the first server ID, the membership authentication completion data sent by the terminal, etc., and performs verification to determine whether it is correct, thus completing the membership authentication.

[0065] Step 102: After the terminal passes the network access authentication, a certificate request is sent to the terminal, so that the terminal generates certificate data according to the certificate request.

[0066] In actual application, after the terminal passes the network access authentication, the first server sends a certificate request to the terminal through 0322 signaling. The certificate request includes the certificate information of the terminal, so the terminal generates certificate data according to the certificate information.

[0067] The certificate information includes: certificate parameter field, certificate length and certificate parameter value.

[0068] The terminal generates production data according to the certificate production request in the following manner.

[0069] The terminal calls the second middleware to determine whether the terminal has a local certificate; if the terminal has a certificate, there is no need to create a certificate. At this time, the certificate request does not carry any certificate information, so the certificate data generated according to the certificate request is empty, and the certificate data is sent to the first server.

[0070] If the terminal does not have a certificate, it needs to make a certificate. At this time, the terminal calls the second middleware to splice the certificate information in the certificate request to generate certificate data, that is, to splice the certificate parameter field, certificate length and certificate parameter value to generate certificate data. The terminal sends the production data to the first server, and the production data includes: certificate request field, certificate request length and certificate parameter value.

[0071] In specific applications, the terminal obtains the certificate information according to the MAC address of the terminal by generating the interface provided by the certificate parameter SDK, and concatenates the certificate parameter field, certificate length and certificate parameter value in the certificate information to form certificate data. The certificate data is represented by KLV, where K occupies two bytes and represents the command value. The 0x0060 command can be used, L is the certificate length, and V represents the certificate parameter value. The certificate parameter value is rtyudfgh...erty, which occupies 78 bytes.

[0072] Step 103: Based on the certificate data, call the first middleware in the first server to generate certificate data of the terminal.

[0073] Step 103 includes the following sub-steps:

[0074] Sub-step 1031: determine whether the certificate data contains a certificate parameter field. If the certificate data contains a certificate parameter field, call the online certificate response interface of the first middleware of the first server to generate certificate data of the terminal.

[0075] Sub-step 1032: If the certificate making data does not include a certificate making parameter field, it is determined that the terminal has a local certificate and does not need to make a certificate, and the first server sends a no-certificate-making instruction to the terminal.

[0076] Step 104: Send the certificate data to the terminal.

[0077] In this embodiment, the terminal is first authenticated for network access to determine whether the terminal has passed the network access authentication of the first server; after the terminal has passed the network access authentication, the terminal will not be allowed to connect to the visual network directly, but a certificate will be required for the terminal. Only after the certificate data is obtained can the terminal log in to the visual network. That is, the present invention requires two authentications before the terminal can log in to the visual network, thereby ensuring the security of the visual network services.

[0078] Reference Figure 2 , which shows a flow chart of a secure communication method according to an embodiment of the present invention, the method is applied to a first server, and specifically includes:

[0079] Step 201: responding to a network access authentication request from a terminal to determine whether the terminal has passed the network access authentication of the first server.

[0080] Step 202: After the terminal passes the network access authentication, a certificate request is sent to the terminal, so that the terminal generates certificate data according to the certificate request.

[0081] In actual application, as an implementation method, sending a certificate request to the terminal so that the terminal generates certificate data according to the certificate request includes: receiving the certificate data generated by the terminal according to the certificate request, wherein the certificate request does not carry any certificate information, the certificate data is empty, and the certificate data is generated when the terminal calls the second middleware to determine whether the terminal has a local certificate.

[0082] In actual application, as another implementation method, sending a certificate request to the terminal so that the terminal generates certificate data according to the certificate request includes: receiving the certificate information in the certificate request from the terminal and splicing it to generate certificate data, wherein the certificate data includes: certificate parameter field, certificate length and certificate parameter value, and the certificate data is generated when the terminal calls the second middleware to determine whether the terminal has a local certificate when the terminal does not have a local certificate.

[0083] Step 203: Determine whether the certificate making data contains a certificate making parameter field.

[0084] Step 204: If the certificate making data contains a certificate making parameter field, then the first middleware of the first server is called to generate certificate data of the terminal.

[0085] Step 205: Send the certificate data to the terminal.

[0086] Step 206: Receive a response from the terminal indicating successful certification.

[0087] The first middleware of the first server generates certificate data of the terminal and sends the certificate data to the terminal. The terminal then generates a response of successful certificate production through the online certificate production completion interface. If the first middleware of the first server does not generate certificate data of the terminal, the terminal returns a response of failed certificate production through the online certificate production completion interface.

[0088] Step 207: Call the user account information in the Ukey encryption device so that the terminal can log in to the video network according to the user account information.

[0089] After the certificate is successfully produced, the first server calls the user account information in the Ukey encryption device, and the terminal logs in to the video network according to the user account information.

[0090] Ukey encryption device is a small storage device that is directly connected to the computer via USB (Universal Serial Bus) and has password verification function and is reliable and high-speed.

[0091] In this embodiment, the terminal is first authenticated for network access to determine whether the terminal has passed the network access authentication of the first server; after the terminal has passed the network access authentication, the terminal will not be allowed to connect to the visual network directly, but a certificate will be required for the terminal. Only after the certificate data is obtained can the terminal log in to the visual network. That is, the present invention requires two authentications before the terminal can log in to the visual network, thereby ensuring the security of the visual network services.

[0092] It should be noted that, for the above method embodiments, for the sake of simplicity, they are all described as a series of action combinations, but those skilled in the art should know that the present invention is not limited by the order of the actions described, because according to the present invention, some steps can be performed in other orders or simultaneously. Secondly, those skilled in the art should also know that the embodiments described in the specification are all preferred embodiments, and the actions involved are not necessarily required by the present invention.

[0093] Based on the description of the above method embodiments, the present invention also provides corresponding device embodiments to implement the contents described in the above method embodiments.

[0094] Reference Figure 3, which shows a structural diagram of a secure communication device according to an embodiment of the present invention, the device is applied to a first server, and specifically includes:

[0095] The network access authentication module 301 is used to respond to the terminal performing network access authentication to determine whether the terminal passes the network access authentication of the first server.

[0096] The generating module 302 is used to send a certificate making request to the terminal after the terminal passes the network access authentication, so that the terminal generates certificate making data according to the certificate making request.

[0097] The calling module 303 is used to call the first middleware of the first server to generate certificate data of the terminal based on the certificate making data.

[0098] The sending module 304 is used to send the certificate data to the terminal.

[0099] Optionally, the calling module includes:

[0100] A judging unit, configured to judge whether the certificate making data contains a certificate making parameter field, and if the certificate making data contains a certificate making parameter field, calling the first middleware of the first server to generate certificate data of the terminal;

[0101] If the certificate generation data does not include a certificate generation parameter field, it is determined that the terminal has a local certificate, and the first server sends a no-certification-required instruction to the terminal.

[0102] Optionally, the generating module includes:

[0103] The first generating unit is used to receive the certificate data generated by the terminal according to the certificate request, wherein the certificate request does not carry any certificate information, the certificate data is empty, and the certificate data is generated when the terminal calls the second middleware to determine whether the terminal has a local certificate.

[0104] Optionally, the generating module includes:

[0105] The second generating unit is used to receive the certificate information in the certificate request and concatenate it with the terminal to generate certificate data, wherein the certificate data includes: a certificate parameter field, a certificate length and a certificate parameter value, and the certificate data is generated when the terminal calls the second middleware to determine whether the terminal has a local certificate and when the terminal does not have a local certificate.

[0106] Optionally, the device further comprises:

[0107] A receiving module, used for receiving a response indicating successful certificate creation returned by the terminal;

[0108] The login module is used to call the user account information in the Ukey encryption device so that the terminal can log in to the visual network according to the user account information.

[0109] In an embodiment of the present invention, a terminal is first authenticated for network access to determine whether the terminal has passed the network access authentication of the first server; after the terminal has passed the network access authentication, the terminal is not allowed to directly connect to the visual network, but a certificate is required for the terminal. Only after obtaining the certificate data can the terminal log in to the visual network, that is, the terminal can log in to the visual network only after two authentications in the present invention, thereby ensuring the security of the visual network services.

[0110] As for the above-mentioned device embodiment, since it is basically similar to the method embodiment, the description is relatively simple, and the relevant parts may refer to the partial description of the method embodiment.

[0111] An embodiment of the present invention further provides an electronic device, comprising: a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the processor implements the secure communication method when executing the computer program.

[0112] An embodiment of the present invention further provides a computer-readable storage medium, which stores a computer program that implements the secure communication method when executed by a processor.

[0113] Alternatively, the computer-readable storage medium may be a non-transitory computer-readable storage medium, for example, the non-transitory computer-readable storage medium may be a ROM, a random access memory (RAM), a CD-ROM, a magnetic tape, a floppy disk, an optical data storage device, and the like.

[0114] The various embodiments in this specification are described in a progressive manner, and each embodiment focuses on the differences from other embodiments. The same or similar parts between the various embodiments can be referenced to each other.

[0115] It is easy for a person skilled in the art to think that any combination of the above embodiments is feasible, so any combination of the above embodiments is an implementation scheme of the present invention, but due to space limitations, this specification will not be described in detail here. Although the preferred embodiments of the present invention have been described, once a person skilled in the art knows the basic creative concept, he can make other changes and modifications to these embodiments. Therefore, the attached claims are intended to be interpreted as including the preferred embodiments and all changes and modifications that fall within the scope of the present invention.

[0116] The above is a detailed introduction to a method, device, equipment and medium for secure communication provided by the present invention. Specific examples are used in this article to illustrate the principles and implementation methods of the present invention. The description of the above embodiments is only used to help understand the method of the present invention and its core idea; at the same time, for a general technician in this field, according to the idea of ​​the present invention, there will be changes in the specific implementation method and application scope. In summary, the content of this specification should not be understood as a limitation on the present invention.

Claims

1. A method for secure communication, characterized in that: The method is applied to a first server, comprising: responding to a network access authentication request of a terminal to determine whether the terminal has passed the network access authentication of the first server; After the terminal passes the network access authentication, sending a certificate request to the terminal so that the terminal generates certificate data according to the certificate request; Based on the certificate data, calling the first middleware of the first server to generate certificate data of the terminal; The certificate data is sent to the terminal.

2. The method according to claim 1, characterized in that The calling the first middleware of the first server to generate the certificate data of the terminal based on the certificate data includes: Determine whether the certificate making data contains a certificate making parameter field, and if the certificate making data contains a certificate making parameter field, call the first middleware of the first server to generate certificate data of the terminal; If the certificate generation data does not include a certificate generation parameter field, it is determined that the terminal has a local certificate, and the first server sends a no-certification-required instruction to the terminal.

3. The method according to claim 1, characterized in that The sending of the certificate making request to the terminal so that the terminal generates the certificate making data according to the certificate making request comprises: Receive the certificate data generated by the terminal according to the certificate request, wherein the certificate request does not carry any certificate information, the certificate data is empty, and the certificate data is generated when the terminal calls the second middleware to determine whether the terminal has a local certificate.

4. The method according to claim 1, characterized in that: The sending of the certificate making request to the terminal so that the terminal generates the certificate making data according to the certificate making request comprises: Receive the certificate data generated by the terminal by splicing the certificate information in the certificate request, wherein the certificate data includes: a certificate parameter field, a certificate length and a certificate parameter value, and the certificate data is generated when the terminal calls the second middleware to determine whether the terminal has a local certificate when the terminal does not have a local certificate.

5. The method according to any one of claims 1 to 4, characterized in that: The method further comprises: Receiving a response indicating successful certificate creation returned by the terminal; The user account information in the Ukey encryption device is called so that the terminal can log in to the visual network according to the user account information.

6. A secure communication device, characterized in that: The device is applied to a first server and includes: A network access authentication module, used to respond to a network access authentication request of a terminal to determine whether the terminal has passed the network access authentication of the first server; A generating module, configured to send a certificate request to the terminal after the terminal passes the network access authentication, so that the terminal generates certificate data according to the certificate request; A calling module, configured to call the first middleware of the first server to generate certificate data of the terminal based on the certificate making data; A sending module is used to send the certificate data to the terminal.

7. The device according to claim 6, characterized in that The calling module includes: A judging unit, configured to judge whether the certificate making data contains a certificate making parameter field, and if the certificate making data contains a certificate making parameter field, calling the first middleware of the first server to generate certificate data of the terminal; If the certificate generation data does not include a certificate generation parameter field, it is determined that the terminal has a local certificate, and the first server sends a no-certification-required instruction to the terminal.

8. The device according to claim 6, characterized in that The generation module comprises: The first generating unit is used to receive the certificate data generated by the terminal according to the certificate request, wherein the certificate request does not carry any certificate information, the certificate data is empty, and the certificate data is generated when the terminal calls the second middleware to determine whether the terminal has a local certificate.

9. An electronic device comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, characterized in that: When the processor executes the computer program, the secure communication method according to any one of claims 1 to 5 is implemented.

10. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores a computer program that implements the secure communication method according to any one of claims 1 to 5 when executed by a processor.

Images