Third-party short message service provider data leakage detection method and device, equipment and storage medium

Abstract

The invention relates to a third-party short message service provider data leakage detection method and device, computer equipment and a storage medium. The method comprises the following steps: receiving a short message template sent by a short message platform and service provider information of a matched third-party short message service provider; responding to a short message sending trigger event of the short message template, acquiring a short message copywriting and parameter content of the short message template according to a pre-configured configuration strategy of the short message template, and splicing the short message copywriting and the parameter content into the short message template to obtain simulated short message content; sending the simulated short message content to a third-party short message service provider; receiving result information which is sent by a third-party short message service provider and represents that the short message is successfully sent; acquiring short message data from a third-party data intelligence platform; and comparing the acquired short message data with the simulated short message content, and if a comparison result shows that the acquired short message data contains the simulated short message content, detecting that the third-party short message service provider has data leakage. According to the method, whether the third-party short message service provider has data leakage can be accurately detected.

Description

Technical Field

[0001] The present application relates to the field of data processing technology, and in particular to a method, device, computer equipment and storage medium for detecting data leakage of a third-party SMS service provider. Background Art

[0002] At present, the problem of illegal sale of SMS information of users of well-known application platforms frequently occurs in the market. The platform faces the challenge of finding it difficult to trace the source of the user SMS leakage, which makes it impossible to effectively identify which SMS service providers have data security risks. In turn, it also causes frequent user fraud incidents caused by SMS leakage, but enterprises are unable to determine whether these security loopholes are caused by poor internal management or the protection defects of SMS service providers.

[0003] Traditional methods rely on sending test SMS messages to user devices and using tracking technology to monitor the effectiveness of SMS service providers' sending. However, this method only verifies whether the SMS service provider has false sending, but cannot verify whether the SMS service provider has SMS leaks, nor can it prove whether its own SMS system has been hacked or data leaks have occurred. Summary of the invention

[0004] Based on this, it is necessary to provide a third-party SMS service provider data leakage detection method, device, computer equipment and storage medium to address the above technical problems, which can accurately detect whether there is data leakage in the third-party SMS service provider.

[0005] A method for detecting data leakage of a third-party SMS service provider is applied to a security verification platform, comprising: receiving an SMS template sent by an SMS platform and service provider information of a third-party SMS service provider that matches the SMS template; responding to an SMS sending trigger event of the SMS template initiated by the SMS platform, obtaining a configuration strategy of the SMS template preconfigured in the security verification platform, obtaining the SMS text and parameter content of the SMS template according to the configuration strategy, and splicing the SMS text and parameter content of the SMS template into the SMS template to obtain simulated SMS content, wherein the parameter content of the SMS template includes a simulated mobile phone number; calling an interface of the third-party SMS service provider according to the service provider information of the third-party SMS service provider, and sending the simulated SMS content to the third-party SMS service provider; receiving result information indicating successful SMS sending sent by the third-party SMS service provider; obtaining SMS data from a third-party data intelligence platform; comparing the obtained SMS data with the simulated SMS content, and if the comparison result shows that the obtained SMS data contains the simulated SMS content, data leakage of the third-party SMS service provider is detected.

[0006] In one of the embodiments, in response to an SMS sending trigger event of an SMS template initiated by an SMS platform, a configuration policy of an SMS template preconfigured in a security verification platform is obtained, including: in response to an SMS sending trigger event of an SMS template initiated by an SMS platform, activating a security verification service preconfigured in the security verification platform; when it is detected through the security verification service that the SMS template is configured with a matching security policy, the configuration policy of the SMS template preconfigured in the security verification platform is obtained.

[0007] In one of the embodiments, when it is detected through a security verification service that a SMS template is configured with a matching security policy, the configuration policy of the SMS template pre-configured in the security verification platform is obtained, including: obtaining the importance level of the SMS template; when the importance level of the SMS template is a configured high level, detecting through the security verification service whether the SMS template is configured with a matching security policy; if so, obtaining the configuration policy of the SMS template pre-configured in the security verification platform; if not, outputting security warning risk information.

[0008] In one of the embodiments, a method for detecting data leakage of a third-party SMS service provider also includes: obtaining the importance level of the SMS template; when the importance level of the SMS template is a configured low level, if it is detected through a security verification service that the SMS template is not configured with a matching security policy or is configured with a matching security policy, then obtaining the configuration policy of the SMS template pre-configured in the security verification platform.

[0009] In one of the embodiments, a method for detecting data leakage of a third-party SMS service provider also includes: in response to receiving an SMS leakage security event and not receiving an SMS sending trigger event, activating a preconfigured security verification service in a security verification platform; obtaining an SMS template and service provider information of a third-party SMS service provider that matches the SMS template through the security verification service and based on SMS features in the SMS leakage security event; obtaining the SMS text and parameter content of the SMS template according to the configuration strategy, and splicing the SMS text and parameter content of the SMS template into the SMS template to obtain simulated SMS content, wherein the parameter content of the SMS template includes a simulated mobile phone number; calling an interface of the third-party SMS service provider according to the service provider information of the third-party SMS service provider, and sending simulated SMS content to the third-party SMS service provider based on a first SMS sending frequency; receiving result information indicating successful SMS sending sent by the third-party SMS service provider; obtaining SMS data from a third-party data intelligence platform according to the first data acquisition frequency; comparing the acquired SMS data with the simulated SMS content, and if the comparison result shows that the acquired SMS data contains simulated SMS content, data leakage of the third-party SMS service provider is detected.

[0010] In one of the embodiments, a method for detecting data leakage of a third-party SMS service provider also includes: in response to receiving an SMS leakage intelligence event and not receiving an SMS sending trigger event and an SMS leakage security event, activating a preconfigured security verification service in a security verification platform; obtaining an SMS template and service provider information of a third-party SMS service provider that matches the SMS template through the security verification service and based on SMS features in the SMS leakage intelligence event; obtaining SMS text and parameter content of the SMS template according to a configuration strategy, and splicing the SMS text and parameter content of the SMS template into the SMS template to obtain simulated SMS content, wherein the parameter content of the SMS template includes a simulated mobile phone number; calling an interface of the third-party SMS service provider according to the service provider information of the third-party SMS service provider, and sending simulated SMS content to the third-party SMS service provider based on a second SMS sending frequency, wherein the first SMS sending frequency is greater than the second SMS sending frequency; receiving result information sent by the third-party SMS service provider indicating successful SMS sending; obtaining SMS data from a third-party data intelligence platform according to a second data acquisition frequency, wherein the first data acquisition frequency is greater than the second data acquisition frequency; comparing the acquired SMS data with the simulated SMS content, and if the comparison result shows that the acquired SMS data contains simulated SMS content, data leakage of the third-party SMS service provider is detected.

[0011] In one of the embodiments, a method for detecting data leakage of a third-party SMS service provider also includes: in response to receiving an SMS sending trigger event and not receiving an SMS leakage intelligence event and an SMS leakage security event, obtaining a third SMS sending frequency and a third data acquisition frequency; sending simulated SMS content to the third-party SMS service provider, including: sending simulated SMS content to the third-party SMS service provider based on the third SMS sending frequency, wherein the second SMS sending frequency is greater than the third SMS sending frequency; obtaining SMS data from a third-party data intelligence platform, including: obtaining SMS data from the third-party data intelligence platform according to the third data acquisition frequency, wherein the second data acquisition frequency is greater than the third data acquisition frequency.

[0012] A data leakage detection device for a third-party SMS service provider is applied to a security verification platform, comprising: a first receiving module, used to receive an SMS template sent by an SMS platform and service provider information of a third-party SMS service provider that matches the SMS template; a configuration module, used to respond to an SMS sending trigger event of the SMS template initiated by the SMS platform, obtain the configuration strategy of the SMS template preconfigured in the security verification platform, obtain the SMS text and parameter content of the SMS template according to the configuration strategy, and splice the SMS text and parameter content of the SMS template into the SMS template to obtain simulated SMS content, wherein the parameter content of the SMS template includes a simulated mobile phone number; a sending module, used to call an interface of a third-party SMS service provider according to the service provider information of the third-party SMS service provider, and send the simulated SMS content to the third-party SMS service provider; a second receiving module, used to receive result information indicating successful SMS sending sent by the third-party SMS service provider; an acquisition module, used to obtain SMS data from a third-party data intelligence platform; and a detection module, used to compare the acquired SMS data with the simulated SMS content. If the comparison result shows that the acquired SMS data contains the simulated SMS content, data leakage of the third-party SMS service provider is detected.

[0013] A computer device includes a memory, a processor, and a computer program stored in the memory and executable on the processor. When the processor executes the computer program, the steps of any of the above-mentioned embodiments are implemented.

[0014] A computer-readable storage medium stores a computer program, which implements the steps of the method of the above embodiment when executed by a processor.

[0015] The above-mentioned third-party SMS service provider data leakage detection method, device, computer equipment and storage medium are applied to a security verification platform, and specifically include: receiving an SMS template sent by an SMS platform and service provider information of a third-party SMS service provider matching the SMS template; responding to an SMS sending trigger event of an SMS template initiated by the SMS platform, obtaining the configuration strategy of the SMS template pre-configured in the security verification platform, obtaining the SMS text and parameter content of the SMS template according to the configuration strategy, and splicing the SMS text and parameter content of the SMS template into the SMS template to obtain simulated SMS content, wherein the parameter content of the SMS template includes a simulated mobile phone number; calling the interface of the third-party SMS service provider according to the service provider information of the third-party SMS service provider, and sending simulated SMS content to the third-party SMS service provider; receiving result information indicating successful SMS sending sent by the third-party SMS service provider; obtaining SMS data from a third-party data intelligence platform; comparing the obtained SMS data with the simulated SMS content. If the comparison result shows that the obtained SMS data contains simulated SMS content, data leakage of the third-party SMS service provider is detected.

[0016] Therefore, simulated SMS content is sent to the third-party SMS service provider through the security verification platform to eliminate data leakage on the mobile phone and SMS platform during this process. When the result information indicating successful SMS sending is received from the third-party SMS service provider, it indicates that the third-party SMS service provider has successfully sent the SMS to the simulated mobile phone number in the simulated SMS content. At this time, if the simulated SMS content is obtained from the third-party data intelligence platform, it can be directly determined that the third-party SMS service provider has data leakage. BRIEF DESCRIPTION OF THE DRAWINGS

[0017] Figure 1 An application environment diagram of a third-party SMS service provider data leakage detection method in one embodiment;

[0018] Figure 2 A schematic diagram of a flow chart of a method for detecting data leakage of a third-party SMS service provider in one embodiment;

[0019] Figure 3 A data interaction diagram between various platforms when implementing a third-party SMS service provider data leakage detection method in an embodiment;

[0020] Figure 4 It is a structural block diagram of a data leakage detection device for a third-party SMS service provider in one embodiment;

[0021] Figure 5 FIG. 4 is a diagram showing the internal structure of a computer device in one embodiment. DETAILED DESCRIPTION

[0022] In order to make the purpose, technical solution and advantages of the present application more clearly understood, the present application is further described in detail below in conjunction with the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are only used to explain the present application and are not used to limit the present application.

[0023] This application provides a third-party SMS service provider data leakage detection method, which is applied to Figure 1 In the application environment shown. Figure 1As shown, the security verification platform 100 is used to implement a third-party SMS service provider data leakage detection method of the present application. The SMS platform 200 synchronizes each SMS template and the service provider information of the third-party SMS service provider matching each SMS template to the security verification platform 100. The third-party data intelligence platform 300 collects multiple SMS data flowing into the market. Among them, the third-party data intelligence platform 300 collects multiple SMS data flowing into the market through legal intelligence means. The third-party SMS service provider 400 is used to receive the sent SMS content and forward the SMS content. Specifically, the security verification platform 100 receives the SMS template sent by the SMS platform 200 and the service provider information of the third-party SMS service provider 400 that matches the SMS template, and responds to the SMS sending trigger event of the SMS template initiated by the SMS platform 200, obtains the configuration strategy of the SMS template pre-configured in the security verification platform 100, obtains the SMS text and parameter content of the SMS template according to the configuration strategy, and splices the SMS text and parameter content of the SMS template into the SMS template to obtain simulated SMS content, and the parameter content of the SMS template includes a simulated mobile phone number; calls the interface of the third-party SMS service provider 400 according to the service provider information of the third-party SMS service provider 400, and sends the simulated SMS content to the third-party SMS service provider 400; receives the result information indicating the successful SMS sending sent by the third-party SMS service provider 400; obtains SMS data from the third-party data intelligence platform 300; compares the obtained SMS data with the simulated SMS content. If the comparison result shows that the obtained SMS data contains simulated SMS content, data leakage of the third-party SMS service provider 400 is detected.

[0024] In one embodiment, Figure 2 As shown, a third-party SMS service provider data leakage detection method is provided, and the method is applied to Figure 1 The security verification platform 100 in FIG. 1 is used as an example to illustrate the method, which includes the following steps:

[0025] S202, receiving a text message template sent by the text message platform and service provider information of a third-party text message service provider that matches the text message template.

[0026] In this embodiment, the SMS platform regularly synchronizes the SMS template and the service provider information of the matching third-party SMS service provider to the security verification platform. Furthermore, the security verification platform can configure the mapping relationship table of the simulated mobile phone number according to the service provider information of the third-party SMS service provider. The mapping relationship table contains the mapping relationship between each third-party SMS service provider and each simulated mobile phone number. There is a one-to-one mapping relationship between the simulated mobile phone number and the third-party SMS service provider to ensure that when the security verification program in the security verification platform 100 sends the simulated SMS content to the simulated mobile phone number at a later stage, the simulated SMS content will only be sent to one corresponding third-party SMS service provider, thereby avoiding one simulated SMS content being sent to multiple third-party SMS service providers. When the simulated SMS content is leaked, it is impossible to determine which third-party SMS service provider has a data leak.

[0027] S204, responds to the SMS sending trigger event of the SMS template initiated by the SMS platform, obtains the configuration strategy of the SMS template pre-configured in the security verification platform, obtains the SMS text and parameter content of the SMS template according to the configuration strategy, and splices the SMS text and parameter content of the SMS template into the SMS template to obtain simulated SMS content, and the parameter content of the SMS template includes a simulated mobile phone number.

[0028] In this embodiment, the SMS sending trigger event can be a batch SMS sending verification event. That is, when the SMS platform sends a large number of SMS messages, the SMS platform triggers a batch SMS sending verification event and sends a batch SMS sending verification event to the security verification platform. The batch SMS sending verification event contains the ID number of the SMS template, and the corresponding SMS template is identified by the ID number of the SMS template, and its corresponding pre-configured configuration strategy is obtained. According to the configuration strategy, the SMS text and parameter content of the SMS template are obtained and spliced ​​to obtain simulated SMS content. Among them, the parameter content of the SMS template includes simulated mobile phone numbers, etc. The sending object of the simulated SMS content can be identified by the simulated mobile phone number.

[0029] S206, calling the interface of the third-party SMS service provider according to the service provider information of the third-party SMS service provider, and sending simulated SMS content to the third-party SMS service provider.

[0030] In this embodiment, if the service provider information of the third-party SMS service provider is known, the interface of the third-party SMS service provider can be directly called to send simulated SMS content to the third-party SMS service provider through the interface of the third-party SMS service provider. After receiving the simulated SMS content, the third-party SMS service provider sends the simulated SMS content to the SMS receiving terminal of the simulated mobile phone number.

[0031] Specifically, there is a one-to-one relationship between the simulated mobile phone number and the SMS service provider to ensure that the SMS content sent to the simulated mobile phone number by the security verification program will only be sent to one SMS service provider. When the SMS template has been configured with the simulated sending function, the SMS platform will notify the security platform to mix the simulated SMS sending request into the normal SMS batch based on the proportion; the security platform receives the notification from the SMS platform, and sends SMS to the SMS providers in this batch according to the one-to-one relationship according to the mapping relationship table between the SMS platform sending object and the simulated mobile phone number.

[0032] S208, receiving result information indicating successful SMS sending sent by the third-party SMS service provider.

[0033] In this embodiment, after confirming that the simulated SMS content is successfully sent, the third-party SMS service provider feeds back the result information indicating the successful SMS sending to the security verification platform 100. The security verification platform 100 records the result information indicating the successful SMS sending. The specific recorded information may be: the simulated mobile phone number, the third-party SMS service provider, the simulated SMS content, and the result information indicating the successful SMS sending, and the relationship between these four.

[0034] S210, obtaining SMS data from a third-party data intelligence platform.

[0035] In this embodiment, a plurality of SMS data flowing into the market are collected in the third-party data intelligence platform. Specifically, the third-party data intelligence platform collects the plurality of SMS data flowing into the market through legal intelligence means.

[0036] S212, comparing the obtained SMS data with the simulated SMS content. If the comparison result shows that the obtained SMS data contains the simulated SMS content, data leakage of the third-party SMS service provider is detected.

[0037] In this embodiment, the acquired SMS data is compared with the simulated SMS content. If the SMS data contains the simulated SMS content, it means that the third-party SMS service provider has data leakage, and the simulated SMS content tested has been leaked to the market.

[0038] The above-mentioned third-party SMS service provider data leakage detection method is applied to a security verification platform, and specifically includes: receiving a SMS template sent by a SMS platform and service provider information of a third-party SMS service provider that matches the SMS template; responding to a SMS sending trigger event of the SMS template initiated by the SMS platform, obtaining the configuration strategy of the SMS template pre-configured in the security verification platform, obtaining the SMS text and parameter content of the SMS template according to the configuration strategy, and splicing the SMS text and parameter content of the SMS template into the SMS template to obtain a simulated SMS content, wherein the parameter content of the SMS template includes a simulated mobile phone number; calling the interface of the third-party SMS service provider according to the service provider information of the third-party SMS service provider, and sending the simulated SMS content to the third-party SMS service provider; receiving the result information indicating the successful SMS sending sent by the third-party SMS service provider; obtaining SMS data from a third-party data intelligence platform; comparing the obtained SMS data with the simulated SMS content, and if the comparison result shows that the obtained SMS data contains the simulated SMS content, then data leakage of the third-party SMS service provider is detected. Therefore, the simulated SMS content is sent to the third-party SMS service provider through the security verification platform to eliminate data leakage of the mobile phone and the SMS platform in this process. When the result information indicating successful SMS sending is received from a third-party SMS service provider, it indicates that the third-party SMS service provider has successfully sent the SMS to the simulated mobile phone number in the simulated SMS content. At this time, if the simulated SMS content is obtained from a third-party data intelligence platform, it can be directly determined that the third-party SMS service provider has a data leak.

[0039] In one embodiment, in the above step S204, in response to the SMS sending trigger event of the SMS template initiated by the SMS platform, the configuration policy of the SMS template preconfigured in the security verification platform is obtained, including: responding to the SMS sending trigger event of the SMS template initiated by the SMS platform, activating the security verification service preconfigured in the security verification platform; when it is detected through the security verification service that the SMS template is configured with a matching security policy, the configuration policy of the SMS template preconfigured in the security verification platform is obtained.

[0040] In this embodiment, if Figure 3 As shown in FIG. 1 , the SMS platform receives batch SMS parameters and verifies the batch SMS parameters. The SMS parameters include the simulated mobile phone number and the SMS template identifier. Figure 3 As shown, a trigger event for sending SMS messages, i.e., a batch SMS message sending verification event, is triggered to activate the security verification service of the security verification platform. Among them, the SMS message sending trigger event contains the identification information of the SMS template, so that the security verification service can perform security verification on the SMS template based on the identification information of the SMS template. The security verification method is: the security verification service detects that the SMS template is configured with a matching security policy, i.e., determines that the SMS template security verification has passed. Then, subsequent operations are performed, i.e., the configuration policy of the SMS template is obtained to simulate the splicing of SMS content.

[0041] In an example, when the security verification service detects that the SMS template is configured with a matching security policy, the configuration policy of the SMS template pre-configured in the security verification platform is obtained, including: obtaining the importance level of the SMS template; when the importance level of the SMS template is a configured high level, detecting through the security verification service whether the SMS template is configured with a matching security policy; if so, obtaining the configuration policy of the SMS template pre-configured in the security verification platform; if not, outputting security warning risk information.

[0042] In another example, after the above-mentioned step of activating the security verification service pre-configured in the security verification platform, it also includes: obtaining the importance level of the SMS template; when the importance level of the SMS template is a configured low level, if it is detected through the security verification service that the SMS template is not configured with a matching security policy or is configured with a matching security policy, then obtaining the configuration policy of the SMS template pre-configured in the security verification platform.

[0043] In this embodiment, Figure 3 As shown, the security verification platform is configured with a security verification service. The security verification service is used to verify the security of the SMS template triggered by the SMS sending trigger event. The specific verification method is: identify whether the security policy corresponding to the SMS template is configured in the security verification platform. For example, the SMS template is configured with a corresponding ID number, and each security policy is associated with the ID of its corresponding SMS template. When the security policy is read through the ID number of the SMS template, the security verification of the SMS template passes.

[0044] In one case, if the security verification service detects that the SMS template is configured with a matching security policy, regardless of whether the importance level of the SMS template is high or low, the SMS template security verification is confirmed to have passed, and the configuration policy of the SMS template pre-configured in the security verification platform is directly obtained.

[0045] In another case, if the importance level of the SMS template is high, the SMS content splicing operation is performed only when the security verification service detects that the SMS template is configured with a matching security policy, that is, the step of obtaining the configuration policy of the SMS template pre-configured in the security verification platform is entered. Otherwise, the security warning risk information will be directly popped up. Therefore, the security of the SMS content in the platform can be guaranteed. If the importance level of the SMS template is low, regardless of whether the security verification service detects that the SMS template is configured with a matching security policy, the SMS content splicing operation is performed, that is, the step of obtaining the configuration policy of the SMS template pre-configured in the security verification platform is directly entered. Wherein the importance level of the SMS template is a pre-configured high level or low level, the security verification platform can directly identify the importance level of the SMS template. Specifically, if Figure 3As shown in the figure, the security verification platform configures the security verification service. As mentioned above, the security verification service is used to perform security verification on high-level SMS templates. After the verification is passed, the SMS template is configured. For non-high-level SMS templates, no security verification is required. When the service provider information of the third-party SMS service provider is received, the SMS template is directly configured. After the configuration is completed and the simulated SMS content is obtained, Figure 3 As shown, the interface of the third-party SMS service provider is called to send simulated SMS content to the third-party SMS service provider.

[0046] For example, each SMS template in the SMS platform is configured with an importance level, or some SMS templates are configured with a high level or a medium level, and other SMS templates that are not configured with an importance level are configured with a low level by default. It can be that the importance level of the SMS template is set based on the parameter content in the SMS template. For example, when the SMS template contains parameters for financial services and their business behaviors, the importance level of the SMS template is configured to be high. For example, when the SMS template contains a repayment plan and a repayment amount, the SMS template is configured to be high. When no parameters related to financial services and their business behaviors are configured in the SMS template, the importance level of the SMS template is not configured, that is, it is configured to be low by default. For example, if the SMS template only contains regular greeting content, the importance level of the SMS template does not need to be configured. If the SMS template does not contain parameters for financial services and their business behaviors, but the configured parameters are related to financial services, the importance level of the SMS template is configured to be medium. For example, if the SMS template is configured with reminder content for completed repayments, the configured SMS template is medium.

[0047] In one embodiment, before the above-mentioned step S204, that is, before the step of responding to the SMS sending trigger event of the SMS template initiated by the SMS platform, it also includes: in response to receiving an SMS leakage security event and not receiving an SMS sending trigger event, activating a pre-configured security verification service in the security verification platform; obtaining the SMS template and the service provider information of the third-party SMS service provider matching the SMS template through the security verification service and according to the SMS features in the SMS leakage security event; configuring a strategy to obtain the SMS text and parameter content of the SMS template, and splicing the SMS text and parameter content of the SMS template into the SMS template to obtain simulated SMS content, and the parameter content of the SMS template includes a simulated mobile phone number; calling the interface of the third-party SMS service provider according to the service provider information of the third-party SMS service provider, and sending the simulated SMS content to the third-party SMS service provider based on the first SMS sending frequency; receiving result information indicating successful SMS sending sent by the third-party SMS service provider; obtaining SMS data from the third-party data intelligence platform according to the first data acquisition frequency; comparing the acquired SMS data with the simulated SMS content, if the comparison result shows that the acquired SMS data contains simulated SMS content, data leakage of the third-party SMS service provider is detected.

[0048] In another embodiment, before the above-mentioned step S204, that is, before the step of responding to the SMS sending trigger event of the SMS template initiated by the SMS platform, it also includes: in response to receiving the SMS leakage intelligence event and not receiving the SMS sending trigger event and the SMS leakage security event, activating the security verification service preconfigured in the security verification platform; obtaining the SMS template and the service provider information of the third-party SMS service provider matching the SMS template through the security verification service and according to the SMS features in the SMS leakage intelligence event; obtaining the SMS text and parameter content of the SMS template according to the configuration strategy, and splicing the SMS text and parameter content of the SMS template into the SMS template to obtain the simulated SMS content, and the parameter content of the SMS template The content includes a simulated mobile phone number; calling the interface of the third-party SMS service provider according to the service provider information of the third-party SMS service provider, and sending the simulated SMS content to the third-party SMS service provider based on the second SMS sending frequency, wherein the first SMS sending frequency is greater than the second SMS sending frequency; receiving result information indicating successful SMS sending sent by the third-party SMS service provider; obtaining SMS data from a third-party data intelligence platform according to the second data acquisition frequency, wherein the first data acquisition frequency is greater than the second data acquisition frequency; comparing the obtained SMS data with the simulated SMS content, if the comparison result shows that the obtained SMS data contains the simulated SMS content, it is detected that there is a data leak in the third-party SMS service provider.

[0049] In another embodiment, after the step of responding to the SMS sending trigger event of the SMS template initiated by the SMS platform in the above step S204, it also includes: in response to receiving the SMS sending trigger event and not receiving the SMS leakage intelligence event and the SMS leakage security event, obtaining a third SMS sending frequency and a third data acquisition frequency; the above step S206, sending simulated SMS content to a third-party SMS service provider, includes: sending simulated SMS content to the third-party SMS service provider based on the third SMS sending frequency, wherein the second SMS sending frequency is greater than the third SMS sending frequency; the above step S210, obtaining SMS data from a third-party data intelligence platform, includes: obtaining SMS data from the third-party data intelligence platform according to the third data acquisition frequency, wherein the second data acquisition frequency is greater than the third data acquisition frequency.

[0050] In this embodiment, the SMS leakage security event can be determined by receiving a notification message of non-simulated SMS content on a simulated mobile phone number, such as receiving a fraudulent SMS on a simulated mobile phone number. The SMS leakage intelligence event is determined by receiving SMS leakage intelligence information, such as receiving intelligence about SMS data leakage from a third-party SMS service provider.

[0051] Specifically, if a simulated mobile phone number receives a notification message of non-simulated SMS content, a SMS leakage security incident is directly triggered. If intelligence information about data leakage is received from a third-party SMS service provider, it indicates that there may be a leakage of SMS content, triggering an SMS leakage intelligence incident. If neither of the above two messages is received, it indicates that there may be no leakage of SMS content. For these three situations, the first SMS sending frequency, the second SMS sending frequency, and the third SMS sending frequency are pre-set, and the frequency values ​​increase in sequence. The first data acquisition frequency, the second data acquisition frequency, and the third data acquisition frequency are pre-set, and the frequency values ​​increase in sequence.

[0052] If the simulated mobile phone number receives notification information with non-simulated SMS content, it is necessary to send the simulated mobile phone number and simulated SMS content at a high frequency, and obtain SMS data from the third-party data intelligence platform at a high frequency to verify the data leakage. If the third-party SMS service provider receives intelligence information that there is a data leakage, the simulated mobile phone number and simulated SMS content are sent at a medium frequency, and SMS data is obtained from the third-party data intelligence platform at a medium frequency to verify the data leakage. If neither of them appears, the simulated mobile phone number and simulated SMS content are sent at a low frequency as generally set, and SMS data is obtained from the third-party data intelligence platform. Therefore, by dividing the SMS data and data comparison verification at different frequencies, the accuracy and efficiency of the data leakage verification of the third-party SMS service provider can be improved, and the waste of resources of the security verification platform can be reduced.

[0053] The SMS receiving terminal of the simulated mobile phone number has the mobile communication function turned on, and the mobile traffic function and wireless traffic function turned off, and no applications other than the operating system are installed on the SMS receiving terminal. Therefore, it can be ensured that when the simulated mobile phone number receives non-simulated SMS content, the data leakage comes from the third-party SMS service provider, not the data leakage of the SMS receiving terminal of the simulated mobile phone number. For example, Figure 3 As shown, the SMS receiving terminal of the simulated mobile phone number is a mobile phone, and the non-simulated SMS content is a fraudulent call or fraudulent SMS. This situation is passive verification, that is, the data leakage of the third-party SMS service provider is not verified by active data comparison. If the data leakage of the third-party SMS service provider is verified passively, active verification is triggered. Active verification is: the data verification platform actively sends simulated SMS content to the third-party SMS service provider, obtains SMS data from the third-party data intelligence platform, and verifies whether there is data leakage of the third-party SMS service provider through data comparison.

[0054] Specifically, the phone number of the simulated SMS receiving number is kept powered on 24 / 7, and the mobile phone number is a newly applied mobile phone number. Only the mobile communication function is turned on, the mobile traffic and wifi functions are turned off, and any non-essential software other than the mobile phone operating system is uninstalled to ensure that the mobile phone number will not be "contaminated" by external factors such as apps, mobile traffic, and wifi. Ensure that the simulated SMS receiving number is only used to receive fraudulent SMS and fraudulent calls caused by SMS leaks.

[0055] In one example, as described above, whether the simulated mobile phone number receives non-simulated SMS content or receives intelligence information about data leakage from a third-party SMS service provider, it is determined that the simulated SMS mobile phone number has been leaked. At this time, the interface of the third-party data intelligence platform is called to purchase data from the third-party data intelligence platform to obtain the simulated SMS data circulating in the market that day, so as to verify the authenticity of the data leakage of the third-party SMS service provider.

[0056] In view of the data leakage detection method of a third-party SMS service provider mentioned in the above embodiment, Figure 3 As shown:

[0057] When the SMS platform sends a large number of SMS messages, a batch SMS sending verification event is triggered, activating the security verification service of the security verification platform. The security verification platform checks whether the SMS template ID that triggers the event has a corresponding security policy configured.

[0058] When the security verification platform finds that the SMS template ID is a high-level SMS template and matches the corresponding security policy, it starts to check the configuration policy for the SMS template in its own platform and splices the relevant SMS text and parameter content into the SMS template.

[0059] The security verification platform calls the interface of the third-party SMS service provider to send simulated SMS content and records the sending results in this platform.

[0060] When the operator of the security verification platform receives information about SMS leaks, he or she can actively activate the security verification service through the security verification platform, match the corresponding SMS template based on the characteristics of the suspected leaked SMS, and actively initiate the simulated SMS sending function.

[0061] When the operator of the security verification platform receives a security incident of SMS leakage, he can actively activate the security verification service through the security verification platform, match the corresponding SMS template according to the characteristics of the leaked SMS, and actively initiate the simulated SMS sending function.

[0062] After the security verification platform sends a simulated SMS, for low-frequency SMS simulation sending events passively triggered by the SMS platform, it is necessary to simulate the mobile phone receiving a fraudulent SMS or call and manually trigger the third-party threat intelligence platform purchasing interface; for actively initiated verification events, the third-party threat intelligence platform purchasing interface will be automatically called.

[0063] After the purchase is completed, the data will be stored in the security verification platform and compared with the SMS sending result records. If a match is found, it is determined that there has been a text message leak at the third-party SMS service provider.

[0064] It should be understood that, although the steps in the flowchart are displayed in sequence as indicated by the arrows, these steps are not necessarily executed in sequence in the order indicated by the arrows. Unless otherwise specified herein, there is no strict order restriction on the execution of these steps, and these steps can be executed in other orders. Moreover, at least a portion of the steps in the accompanying drawings may include multiple sub-steps or multiple stages, and these sub-steps or stages are not necessarily executed at the same time, but can be executed at different times, and the execution order of these sub-steps or stages is not necessarily sequential, but can be executed in turn or alternately with other steps or at least a portion of the sub-steps or stages of other steps.

[0065] This application also provides a third-party SMS service provider data leakage detection device, which is applied to the security verification platform. Figure 4 As shown, a data leakage detection device for a third-party SMS service provider includes a first receiving module 402 , a configuration module 404 , a sending module 406 , a second receiving module 408 , an acquisition module 410 and a detection module 412 . The first receiving module 402 is used to receive the SMS template sent by the SMS platform and the service provider information of the third-party SMS service provider that matches the SMS template; the configuration module 404 is used to respond to the SMS sending trigger event of the SMS template initiated by the SMS platform, obtain the configuration strategy of the SMS template pre-configured in the security verification platform, obtain the SMS text and parameter content of the SMS template according to the configuration strategy, and splice the SMS text and parameter content of the SMS template into the SMS template to obtain the simulated SMS content, and the parameter content of the SMS template includes a simulated mobile phone number; the sending module 406 is used to call the interface of the third-party SMS service provider according to the service provider information of the third-party SMS service provider, and send the simulated SMS content to the third-party SMS service provider; the second receiving module 408 is used to receive the result information sent by the third-party SMS service provider indicating the successful SMS sending; the acquisition module 410 is used to obtain SMS data from the third-party data intelligence platform; the detection module 412 is used to compare the acquired SMS data with the simulated SMS content. If the comparison result shows that the acquired SMS data contains simulated SMS content, it is detected that there is a data leak in the third-party SMS service provider.

[0066] In one of the embodiments, in response to an SMS sending trigger event of an SMS template initiated by an SMS platform, a configuration policy of an SMS template preconfigured in a security verification platform is obtained, including: in response to an SMS sending trigger event of an SMS template initiated by an SMS platform, activating a security verification service preconfigured in the security verification platform; when it is detected through the security verification service that the SMS template is configured with a matching security policy, the configuration policy of the SMS template preconfigured in the security verification platform is obtained.

[0067] In one of the embodiments, when it is detected through a security verification service that a SMS template is configured with a matching security policy, the configuration policy of the SMS template pre-configured in the security verification platform is obtained, including: obtaining the importance level of the SMS template; when the importance level of the SMS template is a configured high level, detecting through the security verification service whether the SMS template is configured with a matching security policy; if so, obtaining the configuration policy of the SMS template pre-configured in the security verification platform; if not, outputting security warning risk information.

[0068] In one of the embodiments, a data leakage detection device for a third-party SMS service provider also includes a first processing module, which is used to obtain the importance level of the SMS template; when the importance level of the SMS template is a configured low level, if it is detected through the security verification service that the SMS template is not configured with a matching security policy or is configured with a matching security policy, then the configuration policy of the SMS template pre-configured in the security verification platform is obtained.

[0069] In one of the embodiments, a data leakage detection device for a third-party SMS service provider also includes a second processing module, which is used to activate a pre-configured security verification service in a security verification platform in response to receiving an SMS leakage security event and not receiving an SMS sending trigger event; obtain an SMS template and service provider information of a third-party SMS service provider that matches the SMS template through the security verification service and based on SMS features in the SMS leakage security event; obtain the SMS text and parameter content of the SMS template according to the configuration strategy, and splice the SMS text and parameter content of the SMS template into the SMS template to obtain simulated SMS content, and the parameter content of the SMS template includes a simulated mobile phone number; call the interface of the third-party SMS service provider according to the service provider information of the third-party SMS service provider, and send simulated SMS content to the third-party SMS service provider based on a first SMS sending frequency; receive result information sent by the third-party SMS service provider indicating successful SMS sending; obtain SMS data from a third-party data intelligence platform according to the first data acquisition frequency; compare the acquired SMS data with the simulated SMS content, and if the comparison result shows that the acquired SMS data contains simulated SMS content, data leakage of the third-party SMS service provider is detected.

[0070] In one of the embodiments, a data leakage detection device for a third-party SMS service provider also includes a third processing module, which is used to activate a pre-configured security verification service in a security verification platform in response to receiving an SMS leakage intelligence event and not receiving an SMS sending trigger event and an SMS leakage security event; obtain an SMS template and service provider information of a third-party SMS service provider that matches the SMS template through the security verification service and based on the SMS features in the SMS leakage intelligence event; obtain the SMS text and parameter content of the SMS template according to the configuration strategy, and splice the SMS text and parameter content of the SMS template into the SMS template to obtain simulated SMS content, wherein the parameter content of the SMS template includes a simulated mobile phone number; call the interface of the third-party SMS service provider according to the service provider information of the third-party SMS service provider, and send the simulated SMS content to the third-party SMS service provider based on a second SMS sending frequency, wherein the first SMS sending frequency is greater than the second SMS sending frequency; result information sent by the third-party SMS service provider indicating successful SMS sending; obtain SMS data from a third-party data intelligence platform according to a second data acquisition frequency, wherein the first data acquisition frequency is greater than the second data acquisition frequency; compare the acquired SMS data with the simulated SMS content, and if the comparison result shows that the acquired SMS data contains simulated SMS content, data leakage of the third-party SMS service provider is detected.

[0071] In one of the embodiments, before sending simulated SMS content to a third-party SMS service provider, it also includes: in response to receiving an SMS sending trigger event and not receiving an SMS leakage intelligence event and an SMS leakage security event, obtaining a third SMS sending frequency and a third data acquisition frequency; wherein, sending simulated SMS content to a third-party SMS service provider includes: sending simulated SMS content to the third-party SMS service provider based on the third SMS sending frequency, wherein the second SMS sending frequency is greater than the third SMS sending frequency; wherein, obtaining SMS data from a third-party data intelligence platform includes obtaining SMS data from a third-party data intelligence platform according to the third data acquisition frequency, wherein the second data acquisition frequency is greater than the third data acquisition frequency.

[0072] For the specific definition of a data leakage detection device for a third-party SMS service provider, please refer to the definition of a data leakage detection method for a third-party SMS service provider mentioned above, which will not be repeated here. Each module in the above-mentioned data leakage detection device for a third-party SMS service provider can be implemented in whole or in part through software, hardware and a combination thereof. The above-mentioned modules can be embedded in or independent of the processor in the computer device in the form of hardware, or can be stored in the memory of the computer device in the form of software, so that the processor can call and execute the operations corresponding to the above modules.

[0073] In one embodiment, a computer device is provided. The computer device may be a server supporting the operation of the security verification platform 100. The internal structure diagram thereof may be as shown in FIG. Figure 5 As shown. The computer device includes a processor, a memory, a network interface and a database connected via a system bus. Among them, the processor of the computer device is used to provide computing and control capabilities. The memory of the computer device includes a non-volatile storage medium and an internal memory. The non-volatile storage medium stores an operating system, a computer program and a database. The internal memory provides an environment for the operation of the operating system and the computer program in the non-volatile storage medium. The network interface of the computer device is used to interact with a text message platform or a third-party text message service provider or a third-party data intelligence platform for data, etc. When the computer program is executed by the processor, it implements the above-mentioned third-party text message service provider data leakage detection method.

[0074] Those skilled in the art will understand that Figure 5 The structure shown in the figure is only a block diagram of a part of the structure related to the scheme of the present application, and does not constitute a limitation on the computer device to which the scheme of the present application is applied. The specific computer device may include more or fewer components than shown in the figure, or combine certain components, or have a different arrangement of components.

[0075] In one embodiment, a computer device is provided, including a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the processor implements the following steps when executing the computer program: receiving a text message template sent by a text message platform and service provider information of a third-party text message service provider that matches the text message template; responding to a text message sending trigger event of the text message template initiated by the text message platform, obtaining a configuration strategy of the text message template preconfigured in a security verification platform, obtaining text messages and parameter contents of the text message template according to the configuration strategy, and splicing the text messages and parameter contents of the text message template into the text message template to obtain simulated text message contents, wherein the parameter contents of the text message template include a simulated mobile phone number; calling an interface of a third-party text message service provider according to the service provider information of the third-party text message service provider, and sending simulated text message contents to the third-party text message service provider; receiving result information indicating successful text message sending sent by the third-party text message service provider; obtaining text message data from a third-party data intelligence platform; comparing the obtained text message data with the simulated text message contents, and if the comparison result shows that the obtained text message data contains simulated text message contents, data leakage of the third-party text message service provider is detected.

[0076] In one of the embodiments, when the processor executes a computer program to implement the above-mentioned steps of responding to the SMS sending trigger event of the SMS template initiated by the SMS platform and obtaining the configuration policy of the SMS template preconfigured in the security verification platform, the following steps are specifically implemented: responding to the SMS sending trigger event of the SMS template initiated by the SMS platform, activating the security verification service preconfigured in the security verification platform; when it is detected through the security verification service that the SMS template is configured with a matching security policy, obtaining the configuration policy of the SMS template preconfigured in the security verification platform.

[0077] In one of the embodiments, the processor executes a computer program to implement the above-mentioned step of obtaining the configuration policy of the SMS template preconfigured in the security verification platform when it is detected through the security verification service that the SMS template is configured with a matching security policy. The following steps are specifically implemented: obtaining the importance level of the SMS template; when the importance level of the SMS template is a configured high level, detecting through the security verification service whether the SMS template is configured with a matching security policy; if so, obtaining the configuration policy of the SMS template preconfigured in the security verification platform; if not, outputting security warning risk information.

[0078] In one of the embodiments, the processor implements the following steps when executing the computer program: obtaining the importance level of the SMS template; when the importance level of the SMS template is a configured low level, if it is detected through the security verification service that the SMS template is not configured with a matching security policy or is configured with a matching security policy, then obtaining the configuration policy of the SMS template pre-configured in the security verification platform.

[0079] In one of the embodiments, the processor implements the following steps when executing the computer program: in response to receiving a text message leakage security event and not receiving a text message sending trigger event, activating a preconfigured security verification service in the security verification platform; obtaining a text message template and service provider information of a third-party text message service provider that matches the text message template through the security verification service and based on the text message features in the text message leakage security event; obtaining the text message text and parameter content of the text message template according to the configuration strategy, and splicing the text message text and parameter content of the text message template into the text message template to obtain simulated text message content, and the parameter content of the text message template includes a simulated mobile phone number; calling the interface of the third-party text message service provider according to the service provider information of the third-party text message service provider, and sending the simulated text message content to the third-party text message service provider based on the first text message sending frequency; receiving result information indicating successful text message sending sent by the third-party text message service provider; obtaining text message data from a third-party data intelligence platform according to the first data acquisition frequency; comparing the obtained text message data with the simulated text message content, if the comparison result shows that the obtained text message data contains simulated text message content, data leakage of the third-party text message service provider is detected.

[0080] In one of the embodiments, the processor implements the following steps when executing the computer program: in response to receiving a text message leakage intelligence event and not receiving a text message sending trigger event and a text message leakage security event, activate a preconfigured security verification service in a security verification platform; obtain a text message template and service provider information of a third-party text message service provider that matches the text message template through the security verification service and based on the text message features in the text message leakage intelligence event; obtain the text message text and parameter content of the text message template according to the configuration strategy, and splice the text message text and parameter content of the text message template into the text message template to obtain simulated text message content, wherein the parameter content of the text message template includes a simulated mobile phone number; call the interface of the third-party text message service provider according to the service provider information of the third-party text message service provider, and send the simulated text message content to the third-party text message service provider based on a second text message sending frequency, wherein the first text message sending frequency is greater than the second text message sending frequency; receive result information sent by the third-party text message service provider indicating successful text message sending; obtain text message data from a third-party data intelligence platform according to a second data acquisition frequency, wherein the first data acquisition frequency is greater than the second data acquisition frequency; compare the acquired text message data with the simulated text message content, and if the comparison result shows that the acquired text message data contains simulated text message content, data leakage of the third-party text message service provider is detected.

[0081] In one of the embodiments, when the processor executes a computer program, the following steps are implemented: in response to receiving a text message sending trigger event and not receiving a text message leakage intelligence event and a text message leakage security event, a third text message sending frequency and a third data acquisition frequency are obtained; when the processor executes the computer program to implement the above-mentioned step of sending simulated text message content to a third-party text message service provider, the following steps are specifically implemented: based on the third text message sending frequency, simulated text message content is sent to the third-party text message service provider, wherein the second text message sending frequency is greater than the third text message sending frequency; when the processor executes the computer program to implement the above-mentioned step of obtaining text message data from a third-party data intelligence platform, the following steps are specifically implemented: obtaining text message data from the third-party data intelligence platform according to the third data acquisition frequency, wherein the second data acquisition frequency is greater than the third data acquisition frequency.

[0082] In one embodiment, a computer-readable storage medium is provided, on which a computer program is stored. When the computer program is executed by a processor, the following steps are implemented: receiving a text message template sent by a text message platform and service provider information of a third-party text message service provider that matches the text message template; responding to a text message sending trigger event of the text message template initiated by the text message platform, obtaining a configuration strategy of the text message template preconfigured in a security verification platform, obtaining text messages and parameter contents of the text message template according to the configuration strategy, and splicing the text messages and parameter contents of the text message template into the text message template to obtain simulated text message contents, wherein the parameter contents of the text message template include a simulated mobile phone number; calling an interface of a third-party text message service provider according to the service provider information of the third-party text message service provider, and sending simulated text message contents to the third-party text message service provider; receiving result information indicating successful text message sending sent by the third-party text message service provider; obtaining text message data from a third-party data intelligence platform; comparing the obtained text message data with the simulated text message contents, and if the comparison result shows that the obtained text message data contains simulated text message contents, data leakage of the third-party text message service provider is detected.

[0083] In one of the embodiments, when a computer program is executed by a processor to implement the above-mentioned steps of responding to the SMS sending trigger event of the SMS template initiated by the SMS platform and obtaining the configuration policy of the SMS template preconfigured in the security verification platform, the following steps are specifically implemented: responding to the SMS sending trigger event of the SMS template initiated by the SMS platform, activating the security verification service preconfigured in the security verification platform; when it is detected through the security verification service that the SMS template is configured with a matching security policy, obtaining the configuration policy of the SMS template preconfigured in the security verification platform.

[0084] In one of the embodiments, the computer program is executed by the processor to implement the above-mentioned step of obtaining the configuration policy of the SMS template preconfigured in the security verification platform when it is detected through the security verification service that the SMS template is configured with a matching security policy. The following steps are specifically implemented: obtaining the importance level of the SMS template; when the importance level of the SMS template is a configured high level, detecting through the security verification service whether the SMS template is configured with a matching security policy; if so, obtaining the configuration policy of the SMS template preconfigured in the security verification platform; if not, outputting security warning risk information.

[0085] In one of the embodiments, when the computer program is executed by the processor, the following steps are implemented: obtaining the importance level of the SMS template; when the importance level of the SMS template is a configured low level, if it is detected through the security verification service that the SMS template is not configured with a matching security policy or is configured with a matching security policy, then obtaining the configuration policy of the SMS template pre-configured in the security verification platform.

[0086] In one of the embodiments, the computer program implements the following steps when executed by the processor: in response to receiving a text message leakage security event and not receiving a text message sending trigger event, activating a preconfigured security verification service in the security verification platform; obtaining a text message template and service provider information of a third-party text message service provider that matches the text message template through the security verification service and based on the text message features in the text message leakage security event; obtaining the text message text and parameter content of the text message template according to the configuration strategy, and splicing the text message text and parameter content of the text message template into the text message template to obtain simulated text message content, and the parameter content of the text message template includes a simulated mobile phone number; calling the interface of the third-party text message service provider according to the service provider information of the third-party text message service provider, and sending the simulated text message content to the third-party text message service provider based on the first text message sending frequency; receiving result information indicating successful text message sending sent by the third-party text message service provider; obtaining text message data from a third-party data intelligence platform according to the first data acquisition frequency; comparing the obtained text message data with the simulated text message content, if the comparison result shows that the obtained text message data contains simulated text message content, data leakage of the third-party text message service provider is detected.

[0087] In one embodiment, when the computer program is executed by the processor, the following steps are implemented: in response to receiving a text message leakage intelligence event and not receiving a text message sending trigger event and a text message leakage security event, activating a preconfigured security verification service in a security verification platform; obtaining a text message template and service provider information of a third-party text message service provider that matches the text message template through the security verification service and based on the text message features in the text message leakage intelligence event; obtaining the text message text and parameter content of the text message template according to the configuration strategy, and splicing the text message text and parameter content of the text message template into the text message template to obtain simulated text message content, wherein the parameter content of the text message template includes a simulated mobile phone number; calling an interface of a third-party text message service provider according to the service provider information of the third-party text message service provider, and sending simulated text message content to the third-party text message service provider based on a second text message sending frequency, wherein the first text message sending frequency is greater than the second text message sending frequency; receiving result information indicating successful text message sending sent by the third-party text message service provider; obtaining text message data from a third-party data intelligence platform according to a second data acquisition frequency, wherein the first data acquisition frequency is greater than the second data acquisition frequency; comparing the acquired text message data with the simulated text message content, and if the comparison result shows that the acquired text message data contains simulated text message content, data leakage of the third-party text message service provider is detected.

[0088] In one embodiment, when the computer program is executed by the processor, the following steps are implemented: in response to receiving a text message sending trigger event and not receiving a text message leakage intelligence event and a text message leakage security event, a third text message sending frequency and a third data acquisition frequency are obtained; when the processor executes the computer program to implement the above-mentioned step of sending simulated text message content to a third-party text message service provider, the following steps are specifically implemented: based on the third text message sending frequency, simulated text message content is sent to the third-party text message service provider, wherein the second text message sending frequency is greater than the third text message sending frequency; when the processor executes the computer program to implement the above-mentioned step of obtaining text message data from a third-party data intelligence platform, the following steps are specifically implemented: obtaining text message data from the third-party data intelligence platform according to the third data acquisition frequency, wherein the second data acquisition frequency is greater than the third data acquisition frequency.

[0089] Those skilled in the art can understand that all or part of the processes in the above-mentioned embodiment methods can be completed by instructing the relevant hardware through a computer program, and the computer program can be stored in a non-volatile computer-readable storage medium. When the computer program is executed, it can include the processes of the embodiments of the above-mentioned methods. Among them, any reference to memory, storage, database or other media used in the embodiments provided in this application can include non-volatile and / or volatile memory. Non-volatile memory can include read-only memory (ROM), programmable ROM (PROM), electrically programmable ROM (EPROM), electrically erasable programmable ROM (EEPROM) or flash memory. Volatile memory can include random access memory (RAM) or external cache memory. As an illustration and not limitation, RAM is available in many forms, such as static RAM (SRAM), dynamic RAM (DRAM), synchronous DRAM (SDRAM), double data rate SDRAM (DDRSDRAM), enhanced SDRAM (ESDRAM), synchronous link (Synchlink) DRAM (SLDRAM), memory bus (Rambus) direct RAM (RDRAM), direct memory bus dynamic RAM (DRDRAM), and memory bus dynamic RAM (RDRAM).

[0090] The technical features of the above embodiments may be combined arbitrarily. To make the description concise, not all possible combinations of the technical features in the above embodiments are described. However, as long as there is no contradiction in the combination of these technical features, they should be considered to be within the scope of this specification.

[0091] The above-mentioned embodiments only express several implementation methods of the present application, and the descriptions thereof are relatively specific and detailed, but they cannot be understood as limiting the scope of the invention patent. It should be pointed out that, for a person of ordinary skill in the art, several variations and improvements can be made without departing from the concept of the present application, and these all belong to the protection scope of the present application. Therefore, the protection scope of the patent of the present application shall be subject to the attached claims.

Claims

1. A method for detecting data leakage of a third-party SMS service provider, characterized in that: Applied to a security verification platform, the method comprises: Receive the SMS template sent by the SMS platform and the service provider information of the third-party SMS service provider matching the SMS template; In response to the SMS sending trigger event of the SMS template initiated by the SMS platform, the configuration strategy of the SMS template preconfigured in the security verification platform is obtained, the SMS text and parameter content of the SMS template are obtained according to the configuration strategy, and the SMS text and parameter content of the SMS template are spliced ​​into the SMS template to obtain simulated SMS content, wherein the parameter content of the SMS template includes a simulated mobile phone number; Calling an interface of a third-party SMS service provider according to the service provider information of the third-party SMS service provider, and sending the simulated SMS content to the third-party SMS service provider; Receiving result information indicating successful SMS sending sent by the third-party SMS service provider; Obtain SMS data from third-party data intelligence platforms; The acquired SMS data is compared with the simulated SMS content. If the comparison result shows that the acquired SMS data contains the simulated SMS content, data leakage of the third-party SMS service provider is detected.

2. The method according to claim 1, characterized in that The step of responding to the SMS sending trigger event of the SMS template initiated by the SMS platform, and obtaining the configuration strategy of the SMS template preconfigured in the security verification platform, includes: In response to the SMS sending trigger event of the SMS template initiated by the SMS platform, the security verification service preconfigured in the security verification platform is activated; When it is detected through the security verification service that the SMS template is configured with a matching security policy, the configuration policy of the SMS template preconfigured in the security verification platform is obtained.

3. The method according to claim 2, characterized in that When the security verification service detects that the SMS template is configured with a matching security policy, obtaining the configuration policy of the SMS template preconfigured in the security verification platform includes: Obtaining the importance level of the SMS template; When the importance level of the SMS template is a configured high level, detecting whether the SMS template is configured with a matching security policy through the security verification service; If yes, obtaining the configuration policy of the SMS template preconfigured in the security verification platform; If not, output security risk information.

4. The method according to claim 2, characterized in that: The method further comprises: Obtaining the importance level of the SMS template; When the importance level of the SMS template is a configured low level, if the security verification service detects that the SMS template is not configured with a matching security policy or is configured with a matching security policy, the configuration policy of the SMS template preconfigured in the security verification platform is obtained.

5. The method according to claim 2, characterized in that: The method further comprises: In response to receiving a short message leakage security event and not receiving the short message sending trigger event, activating a security verification service preconfigured in the security verification platform; Obtaining the SMS template and service provider information of a third-party SMS service provider matching the SMS template through the security verification service and according to the SMS features in the SMS leakage security event; Acquire the SMS text and parameter content of the SMS template according to the configuration strategy, and splice the SMS text and parameter content of the SMS template into the SMS template to obtain simulated SMS content, wherein the parameter content of the SMS template includes a simulated mobile phone number; Calling an interface of a third-party SMS service provider according to the service provider information of the third-party SMS service provider, and sending the simulated SMS content to the third-party SMS service provider based on a first SMS sending frequency; Receiving result information indicating successful SMS sending sent by the third-party SMS service provider; acquiring SMS data from a third-party data intelligence platform according to the first data acquisition frequency; The acquired SMS data is compared with the simulated SMS content. If the comparison result shows that the acquired SMS data contains the simulated SMS content, data leakage of the third-party SMS service provider is detected.

6. The method according to claim 5, characterized in that The method further comprises: In response to receiving the SMS leak intelligence event and not receiving the SMS sending trigger event and the SMS leak security event, activating the security verification service preconfigured in the security verification platform; Obtaining the SMS template and service provider information of a third-party SMS service provider matching the SMS template through the security verification service and according to the SMS features in the SMS intelligence leakage event; Acquire the SMS text and parameter content of the SMS template according to the configuration strategy, and splice the SMS text and parameter content of the SMS template into the SMS template to obtain simulated SMS content, wherein the parameter content of the SMS template includes a simulated mobile phone number; Calling an interface of a third-party SMS service provider according to the service provider information of the third-party SMS service provider, and sending the simulated SMS content to the third-party SMS service provider based on a second SMS sending frequency, wherein the first SMS sending frequency is greater than the second SMS sending frequency; Receiving result information indicating successful SMS sending sent by the third-party SMS service provider; Acquiring SMS data from a third-party data intelligence platform according to a second data acquisition frequency, wherein the first data acquisition frequency is greater than the second data acquisition frequency; The acquired SMS data is compared with the simulated SMS content. If the comparison result shows that the acquired SMS data contains the simulated SMS content, data leakage of the third-party SMS service provider is detected.

7. The method according to claim 6, characterized in that The method further comprises: In response to receiving the SMS sending trigger event and not receiving the SMS intelligence leakage event and the SMS security leakage event, acquiring a third SMS sending frequency and a third data acquisition frequency; The sending of the simulated SMS content to the third-party SMS service provider includes: Sending the simulated SMS content to the third-party SMS service provider based on the third SMS sending frequency, wherein the second SMS sending frequency is greater than the third SMS sending frequency; The obtaining of SMS data from a third-party data intelligence platform includes: The SMS data is acquired from a third-party data intelligence platform according to the third data acquisition frequency, wherein the second data acquisition frequency is greater than the third data acquisition frequency.

8. A data leakage detection device for a third-party SMS service provider, characterized in that: Applied to a security verification platform, the device comprises: A first receiving module, used to receive a text message template sent by a text message platform and service provider information of a third-party text message service provider matching the text message template; A configuration module, for responding to a text message sending trigger event of the text message template initiated by the text message platform, obtaining a configuration strategy of the text message template preconfigured in the security verification platform, obtaining text and parameter content of the text message template according to the configuration strategy, and splicing the text and parameter content of the text message template into the text message template to obtain simulated text message content, wherein the parameter content of the text message template includes a simulated mobile phone number; A sending module, configured to call an interface of a third-party SMS service provider according to the service provider information of the third-party SMS service provider, and send the simulated SMS content to the third-party SMS service provider; The second receiving module is used to receive the result information indicating the successful sending of the SMS sent by the third-party SMS service provider; The acquisition module is used to obtain SMS data from a third-party data intelligence platform; The detection module is used to compare the acquired SMS data with the simulated SMS content. If the comparison result shows that the acquired SMS data contains the simulated SMS content, it is detected that the third-party SMS service provider has a data leak.

9. A computer device comprising a memory, a processor and a computer program stored in the memory and executable on the processor, characterized in that: When the processor executes the computer program, the steps of the method according to any one of claims 1 to 7 are implemented.

10. A computer-readable storage medium having a computer program stored thereon, characterized in that: When the computer program is executed by a processor, the steps of the method according to any one of claims 1 to 7 are implemented.

Images