Data transmission method and equipment

Abstract

The invention provides a data transmission method and equipment, and the method comprises the steps: when a user carries out the data transmission operation of terminal equipment, the terminal equipment firstly sends the current position of the terminal equipment to a server; when the first verification result returned by the server indicates that the terminal equipment is currently located in the preset area, continuing to send identity authentication information to the server; then, if a second verification result returned by the server indicates that the identity authentication information passes the identity authentication, a VPN channel establishment request is sent to the server; and finally, if the establishment result of the VPN channel returned by the server indicates that the VPN channel is successfully established, carrying out data transmission with the target terminal equipment through the VPN channel. Through the method, secure transmission of message data between different terminal devices is realized, and meanwhile, complex operation of a user is not needed, so that the data transmission efficiency is improved.

Description

Technical Field

[0001] The present application relates to the technical field of data transmission, and in particular to a data transmission method and device. Background Art

[0002] In the modern information society, the transmission of data files has become a basic link for various businesses and applications. Through data transmission, information can flow quickly between different devices, locations and users. However, since data files may contain personal privacy or corporate secrets, if they are intercepted or tampered with during the transmission process, it may cause serious economic losses or reputation crisis. Therefore, it is very important to ensure the efficient and secure transmission of data files.

[0003] In the prior art, data is usually transmitted by online submission using the Secure File Transfer Protocol (SFTP). First, a person needs to log in to the server of the data receiving department using the SFTP method with a corresponding user name and password, and then transfer the relevant data files to a specified directory.

[0004] However, the existing verification method is single and has certain security risks, making it difficult to ensure the security of data transmission. Summary of the invention

[0005] The embodiments of the present application provide a data transmission method and device to solve the problem that the data transmission method in the prior art has a single verification method, has certain security risks, and is difficult to ensure the security of data transmission.

[0006] In a first aspect, an embodiment of the present application provides a data transmission method, applied to a terminal device, comprising:

[0007] In response to a data transmission operation by a user, sending a current location of the terminal device to a server;

[0008] Receiving a first verification result returned by the server, where the first verification result is used to indicate whether the terminal device is currently in a preset area;

[0009] If the first verification result indicates that the terminal device is currently in the preset area, sending identity authentication information to the server;

[0010] Receiving a second verification result corresponding to the identity authentication information returned by the server;

[0011] If the second verification result indicates that the identity authentication information passes the identity authentication, sending a VPN channel establishment request to the server;

[0012] Receive the VPN channel establishment result returned by the server;

[0013] If the establishment result indicates that the VPN channel is successfully established, data is transmitted with the target terminal device through the VPN channel.

[0014] In one achievable manner, the sending of identity authentication information to the server includes:

[0015] Obtaining the account number and corresponding password input by the user;

[0016] Sending the account number and the password to the server;

[0017] receiving a first sub-verification result for the account and the password returned by the server;

[0018] When the first sub-verification result indicates that the verification is passed, capturing a facial video of the user through a camera;

[0019] Sending the facial video to the server;

[0020] Among them, the facial video, the account number and the password corresponding to the account number belong to the identity authentication information.

[0021] In one achievable manner, when the first sub-verification result indicates that the verification is passed, capturing the user's facial video through a camera includes:

[0022] When the first sub-verification result indicates that the verification is passed, in response to the user's input operation for a transmission password, sending a transmission password to the server;

[0023] Receive a second sub-verification result for the transmission password returned by the server.

[0024] In one achievable manner, the method further includes:

[0025] If the first verification result indicates that the terminal device is not currently in the preset area, outputting a first warning message, wherein the first warning message is used to remind the user to move the terminal device into the preset area;

[0026] If the second verification result indicates that the identity authentication information has not passed the identity authentication, a second warning message is output, where the second warning message is used to remind the user that the data transmission operation cannot be performed.

[0027] In a first aspect, an embodiment of the present application provides a data transmission method, applied to a server, comprising:

[0028] Receiving the current location of the terminal device sent by the terminal device;

[0029] Determine whether the current location of the terminal device is within a preset area, and send a first verification result to the terminal device;

[0030] If the first verification result indicates that the terminal device is currently in the preset area, receiving identity authentication information sent by the terminal device;

[0031] authenticating the identity authentication information according to the pre-stored target identity authentication information, and sending a second verification result to the terminal device;

[0032] If the second verification result indicates that the identity authentication information passes the identity authentication, receiving a VPN channel establishment request sent by the terminal device;

[0033] The VPN channel requested to be established by the terminal device is matched with the VPN channel requested to be established by the target terminal device, and the establishment result of the VPN channel is returned to the terminal device, and the target terminal device is the terminal device requested by the terminal device to perform data transmission.

[0034] In one achievable manner, the identity authentication information includes a facial video, an account number, and a password corresponding to the account number.

[0035] In one achievable manner, the identity authentication information also includes a transmission password.

[0036] In a third aspect, an embodiment of the present application provides a data transmission device, which is applied to a terminal device and includes:

[0037] A sending module, configured to send the current location of the terminal device to a server in response to a data transmission operation of a user;

[0038] A receiving module, used for receiving a first verification result returned by the server, where the first verification result is used for indicating whether the terminal device is currently in a preset area;

[0039] The sending module is further configured to send identity authentication information to the server if the first verification result indicates that the terminal device is currently within the preset area;

[0040] The receiving module is also used to receive a second verification result corresponding to the identity authentication information returned by the server;

[0041] The sending module is further configured to send a VPN channel establishment request to the server if the second verification result indicates that the identity authentication information passes the identity authentication;

[0042] The receiving module is also used to receive the VPN channel establishment result returned by the server;

[0043] The transmission module is used to transmit data with the target terminal device through the VPN channel if the establishment result indicates that the VPN channel is successfully established.

[0044] In an achievable manner, the data transmission device further includes a processing device, wherein the processing module is specifically configured to:

[0045] Obtaining the account number and corresponding password input by the user;

[0046] Sending the account number and the password to the server;

[0047] receiving a first sub-verification result for the account and the password returned by the server;

[0048] When the first sub-verification result indicates that the verification is passed, capturing a facial video of the user through a camera;

[0049] Sending the facial video to the server;

[0050] Among them, the facial video, the account number and the password corresponding to the account number belong to the identity authentication information.

[0051] In one achievable manner, the processing module is specifically used to:

[0052] When the first sub-verification result indicates that the verification is passed, in response to the user's input operation for a transmission password, sending a transmission password to the server;

[0053] Receive a second sub-verification result for the transmission password returned by the server.

[0054] In one achievable manner, the processing module is further used for:

[0055] If the first verification result indicates that the terminal device is not currently in the preset area, outputting a first warning message, wherein the first warning message is used to remind the user to move the terminal device into the preset area;

[0056] If the second verification result indicates that the identity authentication information has not passed the identity authentication, a second warning message is output, where the second warning message is used to remind the user that the data transmission operation cannot be performed.

[0057] In a fourth aspect, an embodiment of the present application provides a data transmission device, which is applied to a server and includes:

[0058] A receiving module, used for receiving the current location of the terminal device sent by the terminal device;

[0059] A processing module, used for determining whether the current location of the terminal device is within a preset area, and sending a first verification result to the terminal device;

[0060] The receiving module is further configured to receive identity authentication information sent by the terminal device if the first verification result indicates that the terminal device is currently within the preset area;

[0061] The processing module is also used to perform identity authentication on the identity authentication information according to the pre-stored target identity authentication information, and send a second verification result to the terminal device;

[0062] The receiving module is further configured to receive a VPN channel establishment request sent by the terminal device if the second verification result indicates that the identity authentication information passes the identity authentication;

[0063] The processing module is also used to match the VPN channel requested to be established by the terminal device with the VPN channel requested to be established by the target terminal device, and return the establishment result of the VPN channel to the terminal device, wherein the target terminal device is the terminal device requested by the terminal device to perform data transmission.

[0064] In one achievable manner, the identity authentication information includes a facial video, an account number, and a password corresponding to the account number.

[0065] In one achievable manner, the identity authentication information also includes a transmission password.

[0066] In a fifth aspect, an embodiment of the present application provides an electronic device, including: a memory, a processor;

[0067] The memory stores computer-executable instructions;

[0068] The processor executes the computer-executable instructions stored in the memory, so that the processor executes the above first aspect and / or various possible implementations of the first aspect.

[0069] A data transmission method and device are provided in an embodiment of the present application. In the method, when a user performs a data transmission operation on a terminal device, the terminal device first sends the current location of the terminal device to a server. When the first verification result returned by the server indicates that the terminal device is currently in a preset area, the terminal device continues to send identity authentication information to the server, so as to ensure that only terminal devices in the preset area can start further operations through geographical location restrictions, thereby adding a layer of access control. Afterwards, if the second verification result returned by the server indicates that the identity authentication information passes the identity authentication, a VPN channel establishment request is sent to the server again. By combining location verification and identity authentication, a "region + identity" dual verification mechanism is formed, which greatly improves the security of data transmission. Finally, if the VPN channel establishment result returned by the server indicates that the VPN channel is successfully established, data is transmitted with the target terminal device through the VPN channel, and the encrypted communication provided by the VPN channel is further utilized to ensure that the data is not eavesdropped or tampered with during the transmission process. This method realizes the secure transmission of message data between different terminal devices, and does not require users to perform complex operations in data verification, thereby improving the efficiency of data transmission and user experience. BRIEF DESCRIPTION OF THE DRAWINGS

[0070] The accompanying drawings, which are incorporated in and constitute a part of this specification, illustrate embodiments consistent with the present application and, together with the description, serve to explain the principles of the present application.

[0071] Figure 1 A system schematic diagram of a data transmission system provided in an embodiment of the present application;

[0072] Figure 2 A schematic diagram of the appearance of a terminal device provided in an embodiment of the present application;

[0073] Figure 3 Schematic diagram of the data transmission method provided in the embodiment of the present application Figure 1 ;

[0074] Figure 4 Schematic diagram of the data transmission method provided in the embodiment of the present application Figure 2 ;

[0075] Figure 5 A schematic diagram of the structure of the data transmission device provided in the embodiment of the present application Figure 1 ;

[0076] Figure 6 A schematic diagram of the structure of the data transmission device provided in the embodiment of the present application Figure 2 ;

[0077] Figure 7 A schematic diagram of the structure of an electronic device provided in an embodiment of the present application.

[0078] The above drawings have shown clear embodiments of the present application, which will be described in more detail later. These drawings and text descriptions are not intended to limit the scope of the present application in any way, but to illustrate the concept of the present application to those skilled in the art by referring to specific embodiments. DETAILED DESCRIPTION

[0079] Exemplary embodiments will be described in detail herein, examples of which are shown in the accompanying drawings. When the following description refers to the drawings, the same numbers in different drawings represent the same or similar elements unless otherwise indicated. The implementations described in the following exemplary embodiments do not represent all implementations consistent with the present application. Instead, they are merely examples of devices and methods consistent with some aspects of the present application as detailed in the appended claims.

[0080] In the modern information society, the transmission of data files has become a basic link for various businesses and applications. Through data transmission, information can flow quickly between different devices, locations and users. However, since data files may contain personal privacy or corporate secrets, if they are intercepted or tampered with during the transmission process, it may cause serious economic losses or reputation crisis. Therefore, it is very important to ensure the efficient and secure transmission of data files.

[0081] In the prior art, data is usually transmitted by online submission using the Secure File Transfer Protocol (SFTP). First, a person needs to log in to the server of the data receiving department using the SFTP method with a corresponding user name and password, and then transfer the relevant data files to a specified directory.

[0082] However, the existing technology has a single verification method, which only uses usernames and passwords for verification, which can easily lead to password leakage and data tampering. Multiple users may share a username and password, which poses certain security risks. The specific operating subjects cannot be distinguished, making it difficult to ensure the security of data transmission.

[0083] Based on this, the present application provides a method for data transmission. Since the existing data transmission only relies on the "user name + password" method to authenticate the data transmission party, this verification method can neither ensure the uniqueness of the operating user nor confirm whether the operation is performed by the user himself. In order to ensure the security of data transmission, various verification methods can be used to ensure the identity of the user and the security of data transmission. First, in order to ensure the security of the terminal device operated by the user, the current location of the terminal device is verified; then, the uniqueness of the user identity is verified. Since the biometrics are non-replicable and non-tamperable, it is necessary to obtain identity authentication information before data transmission; further, in order to ensure that the data transmission is not attacked and tampered with during the transmission process, the virtual private network (VPN) channel is verified. In this way, by combining identity authentication information, geographic location information, and VPN channels, it is possible to determine whether the operating user is the person himself, and to ensure the security of the operating device and the data transmission channel. In this way, the security of data transmission is greatly improved, the risk of data leakage is reduced, and the entire verification process is imperceptible, without the need for users to perform complex operations, which improves the user experience and improves the efficiency of data transmission.

[0084] The technical solution of the present application and how the technical solution of the present application solves the above-mentioned technical problems are described in detail below with specific embodiments. The following specific embodiments can be combined with each other, and the same or similar concepts or processes may not be repeated in some embodiments. The embodiments of the present application will be described below in conjunction with the accompanying drawings.

[0085] Figure 1 A system diagram of a data transmission system provided in an embodiment of the present application; Figure 1 As shown, the data transmission method provided in the present application can be applied to a data transmission system, which includes: a terminal device, a server and a web page, and the terminal device includes a data sending end and a data receiving end.

[0086] The data sending end and the data receiving end both include a location authentication unit, an identity information authentication unit, a video and audio unit, an early warning detection unit, a VPN communication unit, a data input unit, and a storage unit. Among them, the location authentication unit is mainly used to obtain location information for the data sending end of the terminal device. When the location information is consistent with the preset area information of the terminal device, the sending end device can be used normally; the identity information authentication unit: is mainly responsible for obtaining the identity information of the user of the data sending end of the device and sending it to the server. When the user name, password, and face information are all detected and passed, the terminal device can be used normally; the video and audio unit: is mainly used to obtain the recognition input of face information, video information, and audio information; the early warning detection unit: is mainly responsible for checking and reminding the authentication result of the identity authentication information (the second verification result) and the authentication result of the location information (the first verification result); the VPN communication unit is mainly used for the data sending end and the data receiving end to send the corresponding VPN channel establishment request to the server; the data input unit is used to support hard disks and USB devices with USB interfaces; the storage unit is used to store real-time video information and audio information.

[0087] The server includes a control unit, which is mainly used to authenticate the current location, identity authentication information and VPN channel establishment request of the terminal device sent by the data sender and feedback the verification result, and provide access control for the data sender and data receiver for the web page.

[0088] The web page includes an information configuration unit, which is mainly used to preset the location information of the terminal device, input the identity authentication information of the terminal device user and the VPN channel information, and send them to the server for storage.

[0089] Figure 2 A schematic diagram of the appearance of a terminal device provided in an embodiment of the present application; Figure 2 As shown in the schematic diagram, Figure 2 (a) is a bottom view. Figure 2 (b) is the right view. Figure 2 (c) is the front view. Figure 2 (d) is the left view. Figure 2 (e) is a top view. Figure 2 (f) is a side view. Figure 2 (g) in the figure is the rear view.

[0090] Figure 3 Schematic diagram of the data transmission method provided in the embodiment of the present application Figure 1 ;like Figure 3 As shown, the method includes:

[0091] S301. In response to a user's data transmission operation, send the current location of the terminal device to a server.

[0092] The execution subject of the embodiment of the present application is an electronic device, which is a terminal device and a server, and the terminal device can be a notebook computer, a desktop computer, a tablet computer, etc. The embodiment of the present application is not specifically limited here.

[0093] It should be noted that since the data input unit is used to support hard disks and USB devices with USB interfaces, when the user receives a data reporting task and needs to use the terminal device to perform data transmission operations, the user needs to connect the reporting hard disk or USB flash drive containing the reporting file to the terminal device. At this time, the terminal device will trigger the location information authentication unit and send the current location information of the terminal device to the server for verification.

[0094] For the server, the current location of the terminal device sent by the terminal device is received.

[0095] S302: Determine whether the current location of the terminal device is within a preset area, and send a first verification result to the terminal device.

[0096] The first verification result is used to indicate whether the terminal device is currently in a preset area. The preset area can be a specific location (such as positioning coordinates, a specific office location, etc.), or a certain area range (such as a circular range within a preset radius with an office building as the center). The specific preset area is determined according to the actual situation, and the embodiment of the present application does not impose specific restrictions.

[0097] In this step, after receiving the current location of the terminal device sent by the terminal device, the server compares it with the preset area of ​​the terminal device stored in the server to determine whether the current location of the terminal device is within the preset area. If so, a first verification result including successful verification is sent to the terminal device; if not, a first verification result including failed verification is sent to the terminal device.

[0098] S303: If the first verification result indicates that the terminal device is currently in a preset area, identity authentication information is sent to the server.

[0099] Among them, identity authentication information includes facial video, account number and password corresponding to the account number.

[0100] Optionally, when the first verification result indicates that the terminal device is not currently in a preset area, a first warning message is output.

[0101] The first warning information is used to remind the user to move the terminal device into a preset area.

[0102] It should be noted that when the first verification result indicates that the terminal device is not currently in the preset area, it indicates that the terminal device has shifted, which may cause certain risks. Therefore, the terminal device issues a first warning message, that is, "This device is not used in the designated safe location and cannot be used temporarily. Please move this device to the designated location!" to remind the user to adjust the location and re-verify the location information.

[0103] Optionally, when the first verification result indicates that the terminal device is currently in a preset area, the terminal device uses the video and audio unit to record video and audio of the user, and stores them in a storage unit; thereafter, the web page can obtain the corresponding video and audio recordings from the storage unit for review and comparison. In this way, the data transmission process is made auditable and traceable, further improving the security of data transmission.

[0104] It is understandable that when the first verification result indicates that the terminal device is currently in the preset area, that is, the current location information of the terminal device is consistent with the preset location information, the terminal device can be used normally to perform the next step of identity information authentication. In this way, the risk of misoperation caused by incorrect device location and device abuse is avoided.

[0105] S304: The server performs identity authentication on the identity authentication information according to the pre-stored target identity authentication information, and sends a second verification result to the terminal device.

[0106] In this step, the server pre-stores the target identity authentication information, and authenticates the facial video, account number, and password corresponding to the account number in the identity authentication information sent by the terminal device one by one. Only when all the information in the identity authentication information has passed the authentication, the second verification result will indicate that the identity authentication information has passed the identity authentication; otherwise, the second verification result indicates that the identity authentication information has not passed the identity authentication.

[0107] By using facial video, account number and password for authentication, it effectively prevents a single factor from being cracked (such as the security risk of cracking by password alone); and ensures the identity of the operating user, improving the security of data transmission.

[0108] S305: If the second verification result indicates that the identity authentication information passes the identity authentication, a VPN channel establishment request is sent to the server.

[0109] In one achievable manner, if the second verification result indicates that the identity authentication information has not passed the identity authentication, a second warning message is output.

[0110] The second warning message is used to remind the user that the data transmission operation cannot be performed. The second warning message can be used to inform the user that the verification has not been passed by making a sound, or by visually reminding the user, such as by flashing a red light to remind the user, or by making a text reminder on the display screen. At the same time, the text reminder can be accompanied by a specific reason for the failure, such as "wrong password" or "facial recognition does not match", so that the user can quickly locate the problem. The specific reminder method can be determined according to the actual situation, and the embodiments of the present application do not make specific restrictions.

[0111] In this step, only when the second verification result indicates that the identity authentication information has passed the identity authentication, can the terminal device send a VPN channel establishment request to the server, effectively preventing unauthorized devices or attackers from establishing false VPN channels and protecting network security; correspondingly, when the second verification result indicates that the identity authentication information has not passed the identity authentication, the terminal device will output an intuitive second warning message to the user.

[0112] S306: The server matches the VPN channel requested to be established by the terminal device with the VPN channel requested to be established by the target terminal device, and returns the establishment result of the VPN channel to the terminal device.

[0113] The target terminal device is a terminal device that the terminal device requests to perform data transmission.

[0114] It can be understood that the server ensures that the VPN channel established by matching the VPN request of the terminal device with the VPN channel established by the target terminal device is a clear connection requirement of both parties, rather than an accidental or malicious connection, thereby preventing erroneous connection to non-target devices and improving the security and accuracy of data transmission.

[0115] S307: If the establishment result indicates that the VPN channel is successfully established, data is transmitted with the target terminal device through the VPN channel.

[0116] It should be noted that if the establishment result indicates that the VPN channel establishment failed, it means that the VPN channels requested by both parties do not match each other, and the terminal device still needs to issue a warning message to remind the user that the data transmission operation cannot be performed. It should also be noted that when the user completes the data transmission task, he can directly remove the hard disk or USB flash drive in the terminal device and close the terminal device without other complicated operations such as logging out.

[0117] It can be understood that by performing three types of authentication on users of terminal devices, namely location information, identity information, and VPN channel establishment request, not only can multi-dimensional security verification be achieved, but also the complexity of user operations is reduced, thereby improving data transmission efficiency while ensuring data transmission security.

[0118] A data transmission method is provided in an embodiment of the present application. In this method, when a user performs a data transmission operation on a terminal device, the terminal device first sends the current location of the terminal device to a server. When the first verification result returned by the server indicates that the terminal device is currently in a preset area, the terminal device continues to send identity authentication information to the server, so as to ensure that only terminal devices in the preset area can start further operations through geographical location restrictions, thereby adding a layer of access control. Afterwards, if the second verification result returned by the server indicates that the identity authentication information passes the identity authentication, a VPN channel establishment request is sent to the server again. By combining location verification and identity authentication, a "region + identity" dual verification mechanism is formed, which greatly improves the security of data transmission. Finally, if the VPN channel establishment result returned by the server indicates that the VPN channel is successfully established, data is transmitted with the target terminal device through the VPN channel, and the encrypted communication provided by the VPN channel is further utilized to ensure that the data is not eavesdropped or tampered with during the transmission process. This method realizes the secure transmission of message data between different terminal devices, and does not require users to perform complex operations in data verification, thereby improving the efficiency of data transmission and user experience.

[0119] Figure 4 Schematic diagram of the data transmission method provided in the embodiment of the present application Figure 2 ;like Figure 4 As shown, the embodiment of the present application is Figure 3 The specific process of identity information authentication is described in detail on this basis, including:

[0120] S401. Obtain the account number and corresponding password input by the user.

[0121] In this step, when the terminal device needs to send identity authentication information to the server, the terminal device displays an input interface through the display screen, and the user enters the account number and the corresponding password in the input area through the display screen input interface. After that, the terminal device responds to the user's input operation to obtain the account number and the corresponding password entered by the user.

[0122] S402: Send the account number and password to the server.

[0123] S403: Perform identity authentication on the identity authentication information according to the pre-stored target identity authentication information, and send a first sub-authentication result to the terminal device.

[0124] In this step, the server pre-stores the target identity authentication information, and authenticates the account number and the password corresponding to the account number in the identity authentication information sent by the terminal device. Only when the account number and the password corresponding to the account number are authenticated, the first sub-verification result will indicate that the identity authentication information has passed the identity authentication; otherwise, the first sub-verification result indicates that the identity authentication information has not passed the identity authentication.

[0125] Among them, facial video, account number and password corresponding to the account number belong to identity authentication information.

[0126] S404: When the first sub-verification result indicates that the verification is passed, in response to the user's input operation for the transmission password, sending a transmission password to the server.

[0127] The identity authentication information also includes the transmission password

[0128] It should be noted that the method in which the terminal device obtains the transmission password is the same as the method in which the account and password are obtained in the above S401, and the embodiment of the present application will not be elaborated here.

[0129] S405: Perform identity authentication on the identity authentication information according to the pre-stored target identity authentication information, and send a second sub-authentication result to the terminal device.

[0130] It can be understood that the server pre-stores the transmission password of the target identity authentication information, and authenticates the transmission password in the identity authentication information sent by the terminal device. Only when the transmission password is authenticated, the second sub-verification result will indicate that the identity authentication information has passed the identity authentication; otherwise, the second sub-verification result indicates that the identity authentication information has not passed the identity authentication.

[0131] Figure 5 A schematic diagram of the structure of the data transmission device provided in the embodiment of the present application Figure 1 , applied to terminal devices, such as Figure 5 As shown, the data transmission device 50 includes:

[0132] The sending module 501 is used to send the current location of the terminal device to the server in response to the user's data transmission operation;

[0133] A receiving module 502 is used to receive a first verification result returned by the server, where the first verification result is used to indicate whether the terminal device is currently in a preset area;

[0134] The sending module 501 is also used to send identity authentication information to the server if the first verification result indicates that the terminal device is currently in a preset area;

[0135] The receiving module 502 is also used to receive a second verification result corresponding to the identity authentication information returned by the server;

[0136] The sending module 501 is further configured to send a VPN channel establishment request to the server if the second verification result indicates that the identity authentication information passes the identity authentication;

[0137] The receiving module 501 is also used to receive the VPN channel establishment result returned by the server;

[0138] The transmission module 503 is configured to transmit data to the target terminal device through the VPN channel if the establishment result indicates that the VPN channel is successfully established.

[0139] In one achievable manner, the data transmission device further includes a processing device, wherein the processing module is specifically configured to:

[0140] Get the account number and corresponding password entered by the user;

[0141] Send account and password to the server;

[0142] Receive the first sub-verification result of the account and password returned by the server;

[0143] When the first sub-verification result indicates that the verification is passed, capturing a facial video of the user through a camera;

[0144] Send facial video to server;

[0145] Among them, facial video, account number and password corresponding to the account number belong to identity authentication information.

[0146] In one achievable manner, the processing module is specifically used to:

[0147] When the first sub-verification result indicates that the verification is passed, in response to the user's input operation for the transmission password, sending the transmission password to the server;

[0148] The receiving server returns the second sub-verification result for the transmission password.

[0149] In one achievable manner, the processing module is further used for:

[0150] If the first verification result indicates that the terminal device is not currently in the preset area, a first warning message is output, and the first warning message is used to remind the user to move the terminal device into the preset area;

[0151] If the second verification result indicates that the identity authentication information has not passed the identity authentication, a second warning message is output, and the second warning message is used to remind the user that the data transmission operation cannot be performed.

[0152] Figure 6 A schematic diagram of the structure of the data transmission device provided in the embodiment of the present application Figure 2 , applied to the server, such as Figure 6 As shown, the data transmission device 60 includes:

[0153] Receiving module 601, used for receiving the current location of the terminal device sent by the terminal device;

[0154] Processing module 602, used to determine whether the current location of the terminal device is within a preset area, and send a first verification result to the terminal device;

[0155] The receiving module 601 is further configured to receive identity authentication information sent by the terminal device if the first verification result indicates that the terminal device is currently in a preset area;

[0156] The processing module 602 is also used to perform identity authentication on the identity authentication information according to the pre-stored target identity authentication information, and send a second verification result to the terminal device;

[0157] The receiving module 601 is further configured to receive a VPN channel establishment request sent by the terminal device if the second verification result indicates that the identity authentication information passes the identity authentication;

[0158] The processing module 602 is also used to match the VPN channel requested to be established by the terminal device with the VPN channel requested to be established by the target terminal device, and return the establishment result of the VPN channel to the terminal device. The target terminal device is the terminal device that the terminal device requests to perform data transmission.

[0159] In one possible implementation, the identity authentication information includes a facial video, an account number, and a password corresponding to the account number.

[0160] In one possible implementation, the identity authentication information also includes a transmission password.

[0161] The data transmission device provided in this embodiment can execute the method provided in the above method embodiment. Its implementation principle and technical effect are similar, and this embodiment will not be described in detail here.

[0162] Figure 7 This is a schematic diagram of the structure of an electronic device provided in an embodiment of the present application. Figure 7 As shown, the electronic device 70 provided in this embodiment includes: at least one processor 701 and a memory 702. Optionally, the device 70 further includes a communication component 703. The processor 701, the memory 702 and the communication component 703 are connected via a bus 704.

[0163] In a specific implementation process, at least one processor 701 executes the computer-executable instructions stored in the memory 702, so that at least one processor 701 executes the above method.

[0164] The specific implementation process of the processor 701 can be found in the above method embodiment, and its implementation principle and technical effect are similar, so this embodiment will not be repeated here.

[0165] The electronic device provided in the embodiment of the present application can be implemented as Figure 3The terminal device and the server are used to execute the data transmission method provided by any of the above method embodiments. The implementation principle and technical effect are similar and will not be repeated here.

[0166] In the above embodiments, it should be understood that the processor may be a central processing unit (CPU), or other general-purpose processors, digital signal processors (DSP), application-specific integrated circuits (ASIC), etc. A general-purpose processor may be a microprocessor or any conventional processor. The steps of the method disclosed in the invention may be directly implemented as being executed by a hardware processor, or may be executed by a combination of hardware and software modules in the processor.

[0167] The memory may include a high-speed memory (Random Access Memory, RAM), and may also include a non-volatile memory (Non-volatile Memory, NVM), such as at least one disk memory.

[0168] The bus may be an Industry Standard Architecture (ISA) bus, a Peripheral Component Interconnect (PCI) bus, or an Extended Industry Standard Architecture (EISA) bus, etc. The bus may be divided into an address bus, a data bus, a control bus, etc. For ease of representation, the bus in the drawings of the present application is not limited to only one bus or one type of bus.

[0169] The division of units is only a logical function division, and there may be other divisions in actual implementation, such as multiple units or components can be combined or integrated into another system, or some features can be ignored or not executed. Another point is that the mutual coupling or direct coupling or communication connection shown or discussed can be an indirect coupling or communication connection through some interface, device or unit, which can be electrical, mechanical or other forms.

[0170] The units described as separate components may or may not be physically separated, and the components shown as units may or may not be physical units, that is, they may be located in one place or distributed on multiple network units. Some or all of the units may be selected according to actual needs to achieve the purpose of the solution of this embodiment.

[0171] In addition, each functional unit in each embodiment of the present invention may be integrated into one processing unit, or each unit may exist physically separately, or two or more units may be integrated into one unit.

[0172] If the function is implemented in the form of a software functional unit and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present invention, or the part that contributes to the prior art, or the part of the technical solution, can be embodied in the form of a software product. The computer software product is stored in a storage medium, including several instructions for a computer device (which can be a personal computer, server, or network device, etc.) to perform all or part of the steps of the methods of each embodiment of the present invention. The aforementioned storage medium includes: U disk, mobile hard disk, read-only memory (ROM, Read-Only Memory), random access memory (RAM, Random Access Memory), disk or optical disk, etc. Various media that can store program codes.

[0173] Those skilled in the art can understand that all or part of the steps of implementing the above-mentioned method embodiments can be completed by hardware related to program instructions. The aforementioned program can be stored in a computer-readable storage medium. When the program is executed, the steps of the above-mentioned method embodiments are executed; and the aforementioned storage medium includes: ROM, RAM, disk or optical disk and other media that can store program codes.

[0174] Finally, it should be noted that those skilled in the art will readily conceive of other embodiments of the present invention after considering the specification and practicing the invention disclosed herein. The present invention is intended to cover any variations, uses or adaptations of the present invention, which follow the general principles of the present invention and include common knowledge or customary technical means in the art not disclosed by the present invention, are not limited to the precise structure described above and shown in the drawings, and may be modified and changed in various ways without departing from the scope thereof. The scope of the present invention is limited only by the appended claims.

Claims

1. A data transmission method, characterized in that: Applied to a terminal device, the method comprises: In response to a data transmission operation by a user, sending a current location of the terminal device to a server; Receiving a first verification result returned by the server, where the first verification result is used to indicate whether the terminal device is currently in a preset area; If the first verification result indicates that the terminal device is currently in the preset area, sending identity authentication information to the server; Receiving a second verification result corresponding to the identity authentication information returned by the server; If the second verification result indicates that the identity authentication information passes the identity authentication, sending a virtual private network VPN channel establishment request to the server; Receive the VPN channel establishment result returned by the server; If the establishment result indicates that the VPN channel is successfully established, data is transmitted with the target terminal device through the VPN channel.

2. The method according to claim 1, characterized in that The sending of identity authentication information to the server includes: Obtaining the account number and corresponding password input by the user; Sending the account number and the password to the server; receiving a first sub-verification result for the account and the password returned by the server; When the first sub-verification result indicates that the verification is passed, capturing a facial video of the user through a camera; Sending the facial video to the server; Among them, the facial video, the account number and the password corresponding to the account number belong to the identity authentication information.

3. The method according to claim 2, characterized in that When the first sub-verification result indicates that the verification is passed, collecting the user's facial video through a camera includes: When the first sub-verification result indicates that the verification is passed, in response to the user's input operation for a transmission password, sending a transmission password to the server; Receive a second sub-verification result for the transmission password returned by the server.

4. The method according to any one of claims 1 to 3, characterized in that: The method further comprises: If the first verification result indicates that the terminal device is not currently in the preset area, outputting a first warning message, wherein the first warning message is used to remind the user to move the terminal device into the preset area; If the second verification result indicates that the identity authentication information has not passed the identity authentication, a second warning message is output, where the second warning message is used to remind the user that the data transmission operation cannot be performed.

5. A data transmission method, characterized in that: Applied to a server, the method comprises: Receiving the current location of the terminal device sent by the terminal device; Determine whether the current location of the terminal device is within a preset area, and send a first verification result to the terminal device; If the first verification result indicates that the terminal device is currently in the preset area, receiving identity authentication information sent by the terminal device; authenticating the identity authentication information according to the pre-stored target identity authentication information, and sending a second verification result to the terminal device; If the second verification result indicates that the identity authentication information passes the identity authentication, receiving a virtual private network VPN channel establishment request sent by the terminal device; The VPN channel requested to be established by the terminal device is matched with the VPN channel requested to be established by the target terminal device, and the establishment result of the VPN channel is returned to the terminal device, and the target terminal device is the terminal device requested by the terminal device to perform data transmission.

6. The method according to claim 5, characterized in that The identity authentication information includes a facial video, an account number, and a password corresponding to the account number.

7. The method according to claim 6, characterized in that The identity authentication information also includes a transmission password.

8. A data transmission device, the device being applied to a terminal device, comprising: A sending module, configured to send the current location of the terminal device to a server in response to a data transmission operation of a user; A receiving module, used for receiving a first verification result returned by the server, where the first verification result is used for indicating whether the terminal device is currently in a preset area; The sending module is further configured to send identity authentication information to the server if the first verification result indicates that the terminal device is currently within the preset area; The receiving module is also used to receive a second verification result corresponding to the identity authentication information returned by the server; The sending module is further configured to send a VPN channel establishment request to the server if the second verification result indicates that the identity authentication information passes the identity authentication; The receiving module is also used to receive the VPN channel establishment result returned by the server; The transmission module is used to transmit data with the target terminal device through the VPN channel if the establishment result indicates that the VPN channel is successfully established.

9. A data transmission device, the device being applied to a server, comprising: A receiving module, used for receiving the current location of the terminal device sent by the terminal device; A processing module, used for determining whether the current location of the terminal device is within a preset area, and sending a first verification result to the terminal device; The receiving module is further configured to receive identity authentication information sent by the terminal device if the first verification result indicates that the terminal device is currently within the preset area; The processing module is also used to perform identity authentication on the identity authentication information according to the pre-stored target identity authentication information, and send a second verification result to the terminal device; The receiving module is further configured to receive a VPN channel establishment request sent by the terminal device if the second verification result indicates that the identity authentication information passes the identity authentication; The processing module is also used to match the VPN channel requested to be established by the terminal device with the VPN channel requested to be established by the target terminal device, and return the establishment result of the VPN channel to the terminal device, wherein the target terminal device is the terminal device requested by the terminal device to perform data transmission.

10. An electronic device, characterized in that: include: Memory, processor; The memory stores computer-executable instructions; The processor executes the computer-executable instructions stored in the memory, so that the processor performs the method according to any one of claims 1 to 7.

Images