Network security short message sending method and system based on zero trust mechanism

Abstract

The invention provides a network security short message sending method and system based on a zero trust mechanism, and the method comprises the steps: obtaining a data package sent by a client, analyzing the data package, and obtaining authentication information which comprises an authentication key, a timestamp and a client address; acquiring a preset service password, generating a detection key according to the service password, the timestamp and the client address, and performing authentication comparison on the detection key and the authentication key; opening a corresponding short message service port for the client under the condition that the authentication comparison is passed, wherein the short message service port is used for establishing communication with the client; wherein the short message service port is in an invisible state before the authentication comparison is not passed; and obtaining a resource access request sent by the client, and sending a secure short message to the client through the short message service port to perform short message security authentication. According to the invention, malicious scanning and unauthorized access are effectively prevented, and the security and privacy in the short message sending process are ensured.

Description

Technical Field

[0001] The present invention relates to the field of network security technology, and in particular to a network security short message sending method, system, device and storage medium based on a zero trust mechanism. Background Art

[0002] In today's highly interconnected network environment, SMS sending services have been widely integrated into the daily operations of many enterprises, financial institutions and various applications, playing a key role in account verification, identity verification, payment reminders, etc. However, it cannot be ignored that the open ports of SMS gateways are often directly exposed to the public network space, which undoubtedly makes them potential targets for malicious scanning and network attacks. Such attacks may cause serious security issues, including but not limited to the proliferation of unauthorized access, malicious hijacking of ports, and even deep intrusion of the entire system, posing a serious threat to business continuity and user data security. Therefore, a new security mechanism is urgently needed to protect the SMS sending system. Summary of the invention

[0003] The embodiment of the present invention provides a network security short message sending method, system, device and storage medium based on a zero trust mechanism to solve the problems existing in the related technologies. The technical solution is as follows: In a first aspect, an embodiment of the present invention provides a method for sending a network security short message based on a zero trust mechanism, including: Obtain the data packet sent by the client, parse the data packet, and obtain the authentication information, which includes the authentication key, timestamp, and client address; Obtain a preset service password, generate a detection key based on the service password, timestamp and client address, and perform authentication comparison between the detection key and the authentication key; if the authentication comparison passes, open the corresponding SMS service port for the client, and the SMS service port is used to establish communication with the client; the SMS service port is in a stealth state before the authentication comparison fails; Get the resource access request sent by the client, and send a secure SMS message to the client through the SMS service port for SMS security authentication.

[0004] In one implementation, the authentication key is calculated based on a shared key and a random number using a hash algorithm when the client initiates a PPA request message.

[0005] In one embodiment, it further includes: Get the list configuration information, which contains the specified terminal number; A white list of terminals that are allowed to receive text messages and / or a black list of terminals that are prohibited from receiving text messages are generated according to the list configuration information.

[0006] In one embodiment, it further includes: If the authentication is successful, the target number bound to the client is determined based on the authentication information; Compare the target number with the terminal whitelist, and only open the corresponding SMS service port to the client if the target number is in the terminal whitelist; or The target number is compared with the terminal blacklist, and the corresponding SMS service port is opened to the client only when the target number is not in the terminal blacklist.

[0007] In one embodiment, it further includes: If the authentication comparison passes, a unique identity authentication token is generated for the client based on the encryption algorithm and the identity authentication token is returned to the client, so that the client issues a resource access request for accessing the protected resource according to the identity authentication token; A mapping relationship is established between the identity authentication token and the target number. The mapping relationship is used to determine the target number based on the identity authentication token when a resource access request is received, and send a secure SMS message to the target number, which includes a verification code.

[0008] In one embodiment, SMS security authentication includes: Obtain the SMS authentication request sent by the client, which includes the verification code entered by the user according to the requirements of the secure SMS message; The SMS authentication request is authenticated based on the identity authentication token, and the authentication result is returned to the client so that the client can perform related business actions based on the authentication result.

[0009] In one embodiment, it further includes: When the business action is completed, the SMS service port is closed and switched to a stealth state until the next data packet is received.

[0010] In a second aspect, an embodiment of the present invention provides a network security short message sending system based on a zero trust mechanism, which executes the network security short message sending method based on a zero trust mechanism as described above.

[0011] In a third aspect, an embodiment of the present invention provides an electronic device, the device comprising: a memory and a processor. The memory and the processor communicate with each other through an internal connection path, the memory is used to store instructions, the processor is used to execute the instructions stored in the memory, and when the processor executes the instructions stored in the memory, the processor executes the method in any one of the above-mentioned embodiments.

[0012] In a fourth aspect, an embodiment of the present invention provides a computer-readable storage medium, which stores a computer program. When the computer program runs on a computer, the method in any one of the above-mentioned embodiments is executed.

[0013] The advantages or beneficial effects of the above technical solution include at least: The present invention hides the SMS service port in the network before the authentication comparison fails, and opens the SMS service port to the client only when the authentication comparison passes, thereby achieving the effect of allowing legitimate users to access the SMS service port only after authorization and authentication, thereby effectively preventing malicious scanning and unauthorized access, and ensuring the security and privacy of the SMS sending process.

[0014] The above summary is for illustrative purposes only and is not intended to be limiting in any way. In addition to the illustrative aspects, embodiments and features described above, further aspects, embodiments and features of the present invention will be readily apparent by reference to the accompanying drawings and the following detailed description. BRIEF DESCRIPTION OF THE DRAWINGS

[0015] In the accompanying drawings, unless otherwise specified, the same reference numerals throughout the multiple drawings represent the same or similar parts or elements. These drawings are not necessarily drawn to scale. It should be understood that these drawings only depict some embodiments disclosed in the present invention and should not be regarded as limiting the scope of the present invention.

[0016] Figure 1 It is a flow chart of the method for sending network security short messages based on the zero trust mechanism of the present invention; Figure 2 A schematic diagram of data transmission between the SMS gateway and the client of the present invention; Figure 3 The structure block diagram of an electronic device according to an embodiment of the present invention. DETAILED DESCRIPTION

[0017] In the following, only some exemplary embodiments are briefly described. As those skilled in the art will appreciate, the described embodiments may be modified in various ways without departing from the spirit or scope of the present invention. Therefore, the drawings and descriptions are considered to be exemplary and non-restrictive in nature.

[0018] In today's Internet ecosystem, SMS sending services have become a key pillar for the operation of enterprises, financial institutions and various application functions, and are widely used in multiple key links such as account verification, identity verification, payment reminders, etc. However, the open ports of SMS gateways are directly exposed to the public network environment, facing severe tests from malicious scanning and network attacks, and security threats such as unauthorized access, port usurpation and system penetration are emerging in an endless stream.

[0019] Although mature security measures such as firewalls and access control lists (ACLs) are widely used to protect SMS gateway ports, the effectiveness of these traditional defense measures is gradually weakening as network attack technologies continue to evolve and become more complex. Especially in complex network architectures, attackers can often use a variety of strategies to bypass firewall blockades, accurately locate and detect SMS service ports, and then carry out more in-depth attacks, which may even affect the security defenses of other systems within the enterprise.

[0020] Once the SMS service system is hacked or forged, the impact will be catastrophic. Not only will it paralyze business accounts in various industries that rely on the service, it may also trigger a series of chain reactions such as account theft, sensitive information leakage, and property loss. The consequences are unimaginable.

[0021] Embodiment 1 of the present invention provides a method for sending network security short messages based on a zero-trust mechanism, which can effectively hide service ports and prevent unauthorized access, becoming a key requirement for solving the above security issues.

[0022] It should be noted that the execution subject of the network security short message sending method based on the zero trust mechanism in this embodiment is the short message service gateway. In other embodiments, other servers can also be used as the execution subject of the method in this embodiment.

[0023] like Figure 1 As shown, the network security short message sending method based on the zero trust mechanism in this embodiment specifically includes: Step S1: Obtain a data packet sent by the client, parse the data packet, and obtain authentication information, which includes an authentication key, a timestamp, and a client address.

[0024] Combination Figure 2 As shown, before the client sends a data packet, the SMS service gateway needs to be initialized, that is, the SMS service port of the SMS service gateway is set to a stealth state. In this state, all unauthenticated network requests are inaccessible, and malicious scanning and attacks can also be effectively prevented.

[0025] After completing the initialization settings, the client can send a PPA authorization request to the SMS service gateway, indicating that the client hopes to obtain some kind of authorization or access rights from the SMS service gateway. When the client wants to send a PPA authorization request message, it calculates the authentication key through the shared key and the random number through the hash algorithm, and packages the authentication key with the client's terminal identification, random number, timestamp, client IP address, port, mobile phone number and other information into a UDP (User Datagram Protocol) data packet and sends it to the designated service port of the SMS service gateway for authentication.

[0026] After receiving the UDP data packet, the SMS service gateway parses the UDP data packet to obtain the authentication information. The authentication information obtained by parsing is consistent with the data in the UDP data packet, and the authentication information includes the authentication key, the terminal identification of the client, the random number, the timestamp, the client IP address, the port, the mobile phone number and other information.

[0027] In some embodiments, when performing initialization settings, a terminal whitelist and / or terminal blacklist may also be set according to business scenario requirements. Specifically: The user can enter the list configuration information through the management page, and the list configuration information includes the terminal number specified by the user; after obtaining the list configuration information, the SMS service gateway generates a white list of terminals allowed to receive SMS and / or a black list of terminals prohibited from receiving SMS according to the list configuration information, so as to facilitate subsequent identity verification.

[0028] Step S2: Obtain a preset service password, generate a detection key based on the service password, timestamp and client address, and perform an authentication comparison between the detection key and the authentication key; if the authentication comparison passes, open the corresponding SMS service port for the client, and the SMS service port is used to establish communication with the client; wherein, the SMS service port is in a stealth state before the authentication comparison fails.

[0029] In this embodiment, the short message service gateway extracts the service password stored inside the short message service gateway for calculating the detection key while parsing the UDP data packet.

[0030] It should be noted that the service password is a key or password for security verification stored inside the SMS service gateway. The service password is pre-set and stored on the server side, and is used for identity authentication when the client attempts to access the service. The calculation method of the exploration key can use the extracted timestamp, client IP address and service password as input, and execute one or more encryption algorithms (such as hash algorithm, symmetric encryption algorithm, etc.) to generate the detection key.

[0031] The SMS service gateway compares the detection key and the received authentication key. If the two are the same, the authentication comparison is determined to be successful. At this time, the SMS service port that was originally in the invisible state is opened, that is, the SMS service port that was originally in the invisible state is switched to the visible state. In the visible state, the SMS service port is accessible, and the client can apply to access the SMS service port to achieve communication connection.

[0032] Assuming that the detection key and the authentication key do not match, it is determined that the authentication comparison fails. At this time, the state of the SMS service port that was originally in the invisible state remains unchanged and no operation is performed.

[0033] In some embodiments, when the authentication comparison between the detection key and the authentication key is passed, it is also necessary to determine the mobile phone number bound to the client based on the authentication information, and this mobile phone number is referred to as the target number. Assuming that a terminal whitelist is set during the initialization stage of the SMS gateway, the target number is compared with the terminal whitelist, and the corresponding SMS service port is opened for the client only when the target number is in the terminal whitelist. Assuming that a terminal blacklist is set during the initialization stage of the SMS gateway, the target number is compared with the terminal blacklist, and the corresponding SMS service port is opened for the client only when the target number is not in the terminal blacklist, which can improve the accuracy of authentication.

[0034] In order to prevent attackers from trying to send old data packets to deceive the SMS gateway to obtain unauthorized services or data, in some embodiments, the SMS gateway records the last valid authorized data packet it received; when the SMS gateway receives a new data packet, it calculates the hash value of the new data packet and compares it with the previously recorded hash value. If the hash values ​​do not match, it means that the data packet may have been tampered with or is not the latest, so no action is performed. Secondly, check whether the detection key in the new data packet is the same as the valid detection key received previously. If they are the same, it means that this data packet may be an old, replayed data packet, so no action is performed.

[0035] Through the above measures, the SMS service gateway can effectively prevent replay attacks. Even if the attacker tries to send an old data packet, the SMS service gateway will not perform any operation due to the mismatch of hash values ​​or the same detection key, effectively preventing replay attacks and thus protecting the security of the system and the integrity of the data.

[0036] Step S3: Obtain the resource access request sent by the client, and send a secure SMS message to the client through the SMS service port for SMS security authentication.

[0037] After the authentication is passed, the SMS service gateway assigns an authentication token to the client. Specifically, when the client passes the authentication process of the SMS service gateway, the SMS service gateway will confirm the identity and authority of the client, and the SMS service gateway will select the appropriate encryption algorithm (such as HMAC-SHA256, RSA, etc.) and key to generate a unique authentication token for the client. The generated authentication token will be returned to the client as a successful authentication response, and the client will save it locally for use in subsequent requests.

[0038] Each time the client requests access to protected resources from the SMS service gateway, it carries the authentication token in the header or parameter of the resource access request initiated by the client. After receiving the resource access request, the SMS service gateway will first verify whether the carried authentication token is valid, including checking whether the signature of the authentication token matches, whether it has expired, and whether it contains the correct permissions. If the authentication token is verified, the SMS service gateway will allow the resource access request to continue and return the corresponding resources or data. If the authentication token fails to be verified, the resource access request will be rejected and the corresponding error message will be returned.

[0039] When the authentication token is verified, the SMS service gateway establishes a mapping relationship between the client's authentication token and the target number extracted from the authentication information. Among them, through the mapping relationship, the SMS service gateway can accurately associate a specific authentication token with the corresponding mobile phone number. When you need to send a text message to a client, you can quickly find the corresponding mobile phone number based on the authentication token to ensure the accuracy of text message sending.

[0040] Based on the established mapping relationship, the SMS sending interface capability is called through the identity authentication token to send a secure SMS message to the target number, such as an SMS verification code, etc. Among them, the SMS verification code can be a time-sensitive verification code, which is valid within a specified time and becomes invalid after the specified time.

[0041] The SMS service gateway completes the task of sending the secure SMS message, and synchronously returns the identity authentication token to the client. After receiving the return message from the SMS service gateway, the client executes a pop-up prompt, prompting the user to enter the SMS verification code in the secure SMS message in the client through a pop-up window. At this time, the client uses the identity authentication token as a credential and initiates an SMS authentication request to the SMS service gateway in combination with the SMS verification code entered by the user.

[0042] The SMS service gateway obtains the SMS authentication request sent by the client, performs identity authentication based on the identity authentication token contained in the SMS authentication request, and authenticates the SMS content based on the SMS verification code contained in the SMS authentication request, and returns the authentication result to the client so that the client can perform related business actions based on the authentication result.

[0043] The authentication operation is used to verify whether the client has the right to send SMS and what types of SMS can be sent. If the verification fails, the SMS service gateway will reject the request and return the corresponding error message. In addition, the SMS service gateway will also check the validity period of the authentication token. If the authentication token has expired, the SMS service gateway will require the client to re-authenticate or reject the request.

[0044] After completing the identity authentication, the SMS service gateway will also verify the verification code, that is, determine whether the verification code entered by the user is consistent with the verification code in the secure SMS message. If they are consistent, the SMS authentication is successful. If the verification codes are inconsistent, the SMS authentication fails.

[0045] The SMS service gateway returns the identity authentication result and the identity verification result to the client, and the client performs the corresponding business execution according to the authentication result. When the business action is completed, it means that the interaction process between the client and the SMS service gateway has been completed. At this time, the SMS service gateway closes the SMS service port and switches the SMS service port back to the invisible state until the SMS service gateway receives the next data packet.

[0046] The network security SMS sending method of this embodiment can be applied in scenarios such as bank payment verification. For example, in bank payment verification, it can be used to send a dynamic verification code to the user. The bank client sends the SPA authentication package to the SMS service gateway, and after the authentication is passed, a verification code SMS is sent. The entire process is protected by the stealth mechanism and encryption protocol to ensure security and prevent malicious users from scanning the SMS service port.

[0047] This embodiment improves the security and reliability of the SMS sending system by: 1. The terminal’s SMS sending and receiving methods are not changed. The SMS gateway port is hidden without authorization through zero-trust signature technology. Only authenticated users can send and receive SMS.

[0048] 2. Prevent unauthorized access: The port stealth mechanism effectively blocks access by unauthenticated requests and reduces the risk of malicious scanning.

[0049] 3. Improve the effectiveness of identity authentication: The single-packet authentication mechanism simplifies the authentication process, improves efficiency, and ensures the legitimacy of SMS requests.

[0050] 4. Enhance user trust: In the financial and payment fields, users can safely receive dynamic verification codes, increasing their trust in SMS services.

[0051] 5. Suitable for scenarios with high security requirements: such as banks, financial institutions, etc., and can provide more secure and reliable SMS service solutions.

[0052] Embodiment 2 of the present invention provides a network security short message sending system based on a zero trust mechanism, including: The client is the device or application responsible for sending the signature authentication package request.

[0053] The SMS service gateway executes the above-mentioned network security SMS sending method based on the zero-trust mechanism, and is used to receive and process client-based authentication packages, SMS generation and sending requests, and send SMS to target users, etc.

[0054] The SMS gateway includes: The authentication module is used to receive the feature authentication package from the client, use the private key to verify whether the single package specific information in the package meets the preset rules, and decide whether to notify the SMS sending module to send the next step.

[0055] The SMS sending module is used to receive and verify the sending notification after the authentication is passed. After the verification is passed, the SMS is sent to the target user number.

[0056] The system of the present invention adopts network security short message notification technology based on zero trust mechanism, and realizes the stealth protection of SMS gateway port by introducing zero trust plan client feature recognition and authentication technology. Only legitimate users are allowed to access the SMS service port after authorization and authentication, thereby effectively preventing malicious scanning and unauthorized access, and ensuring the security and privacy of SMS sending process.

[0057] The functions of each module in the system of the embodiment of the present invention can refer to the corresponding description in the above method, which will not be repeated here.

[0058] A third embodiment of the present invention provides an electronic device, Figure 3 FIG. 2 shows a structural block diagram of an electronic device according to an embodiment of the present invention. Figure 3 As shown, the electronic device includes: a memory 100 and a processor 200, and the memory 100 stores a computer program that can be run on the processor 200. When the processor 200 executes the computer program, the network security short message sending method based on the zero trust mechanism in the above embodiment is implemented. The number of the memory 100 and the processor 200 can be one or more.

[0059] The electronic device also includes: The communication interface 300 is used to communicate with external devices and perform data exchange transmission.

[0060] If the memory 100, the processor 200 and the communication interface 300 are implemented independently, the memory 100, the processor 200 and the communication interface 300 can be connected to each other through a bus and communicate with each other. The bus can be an Industry Standard Architecture (ISA) bus, a Peripheral Component Interconnect (PCI) bus or an Extended Industry Standard Architecture (EISA) bus, etc. The bus can be divided into an address bus, a data bus, a control bus, etc.

[0061] Optionally, in a specific implementation, if the memory 100, the processor 200 and the communication interface 300 are integrated on a chip, the memory 100, the processor 200 and the communication interface 300 can communicate with each other through an internal interface.

[0062] An embodiment of the present invention provides a computer-readable storage medium storing a computer program, which implements the method provided in the embodiment of the present invention when executed by a processor.

[0063] An embodiment of the present invention further provides a chip, which includes a processor for calling and executing instructions stored in the memory from the memory, so that a communication device equipped with the chip executes the method provided by the embodiment of the present invention.

[0064] An embodiment of the present invention also provides a chip, including: an input interface, an output interface, a processor and a memory, wherein the input interface, the output interface, the processor and the memory are connected via an internal connection path, and the processor is used to execute the code in the memory. When the code is executed, the processor is used to execute the method provided by the embodiment of the invention.

[0065] It should be understood that the processor may be a central processing unit (CPU), or other general-purpose processors, digital signal processors (DSP), application specific integrated circuits (ASIC), field programmable gate arrays (FPGA) or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components, etc. The general-purpose processor may be a microprocessor or any conventional processor, etc. It is worth noting that the processor may be a processor supporting the advanced RISC machines (ARM) architecture.

[0066] Further, optionally, the above-mentioned memory may include a read-only memory and a random access memory, and may also include a non-volatile random access memory. The memory may be a volatile memory or a non-volatile memory, or may include both volatile and non-volatile memories. Among them, the non-volatile memory may include a read-only memory (ROM), a programmable read-only memory (PROM), an erasable programmable read-only memory (EPROM), an electrically erasable programmable read-only memory (EEPROM), or a flash memory. The volatile memory may include a random access memory (RAM), which is used as an external cache. By way of example but not limitation, many forms of RAM are available. For example, static RAM (SRAM), dynamic random access memory (DRAM), synchronous DRAM (SDRAM), double data rate synchronous dynamic random access memory (DDR SDRAM), enhanced synchronous dynamic random access memory (ESDRAM), synchronous link dynamic random access memory (SLDRAM) and direct rambus RAM (DR RAM).

[0067] In the above embodiments, it can be implemented in whole or in part by software, hardware, firmware or any combination thereof. When implemented using software, it can be implemented in whole or in part in the form of a computer program product. The computer program product includes one or more computer instructions. When the computer program instructions are loaded and executed on a computer, the process or function according to the present invention is generated in whole or in part. The computer can be a general-purpose computer, a special-purpose computer, a computer network, or other programmable device. The computer instructions can be stored in a computer-readable storage medium, or transmitted from one computer-readable storage medium to another computer-readable storage medium.

[0068] In the description of this specification, the description with reference to the terms "one embodiment", "some embodiments", "example", "specific example", or "some examples" means that the specific features, structures, materials or characteristics described in conjunction with the embodiment or example are included in at least one embodiment or example of the present invention. Moreover, the specific features, structures, materials or characteristics described may be combined in any one or more embodiments or examples in a suitable manner. In addition, those skilled in the art may combine and combine different embodiments or examples described in this specification and the features of different embodiments or examples, unless they are contradictory.

[0069] In addition, the terms "first" and "second" are used for descriptive purposes only and should not be understood as indicating or implying relative importance or implicitly indicating the number of the indicated technical features. Therefore, the features defined as "first" and "second" may explicitly or implicitly include at least one of the features. In the description of the present invention, the meaning of "plurality" is two or more, unless otherwise clearly and specifically defined.

[0070] The above is only a specific embodiment of the present invention, but the protection scope of the present invention is not limited thereto. Any person skilled in the art can easily think of various changes or substitutions within the technical scope disclosed by the present invention, which should be included in the protection scope of the present invention. Therefore, the protection scope of the present invention should be based on the protection scope of the claims.

Claims

1. A network security short message sending method based on zero trust mechanism, characterized in that: include: Obtaining a data packet sent by the client, parsing the data packet, and obtaining authentication information, the authentication information including an authentication key, a timestamp, and a client address; Obtain a preset service password, generate a detection key according to the service password, the timestamp and the client address, and perform an authentication comparison between the detection key and the authentication key; if the authentication comparison passes, open a corresponding SMS service port for the client, and the SMS service port is used to establish communication with the client; wherein the SMS service port is in a stealth state before the authentication comparison fails; The resource access request sent by the client is obtained, and a secure SMS message is sent to the client through the SMS service port for SMS security authentication.

2. The method for sending network security short messages based on zero trust mechanism according to claim 1, characterized in that: The authentication key is calculated by the client based on a hash algorithm according to a shared key and a random number when the client initiates a PPA request message.

3. The method for sending network security short messages based on zero trust mechanism according to claim 1, characterized in that: Also includes: Acquire list configuration information, wherein the list configuration information includes a specified terminal number; A white list of terminals that are allowed to receive text messages and / or a black list of terminals that are prohibited from receiving text messages is generated according to the list configuration information.

4. The method for sending network security short messages based on zero trust mechanism according to claim 3 is characterized in that: Also includes: If the authentication comparison is passed, determine the target number bound to the client according to the authentication information; Compare the target number with the terminal whitelist, and open the corresponding SMS service port for the client only when the target number is in the terminal whitelist; or, The target number is compared with the terminal blacklist, and the corresponding SMS service port is opened for the client only when the target number is not in the terminal blacklist.

5. The method for sending network security short messages based on zero trust mechanism according to claim 1, characterized in that: Also includes: If the authentication comparison passes, a unique identity authentication token is generated for the client based on an encryption algorithm and the identity authentication token is returned to the client, so that the client issues a resource access request for accessing a protected resource according to the identity authentication token; A mapping relationship is established between the identity authentication token and the target number bound to the client. The mapping relationship is used to determine the target number according to the identity authentication token when the resource access request is received, and send the secure SMS message to the target number, wherein the secure SMS message includes a verification code.

6. The method for sending network security short messages based on zero trust mechanism according to claim 5 is characterized in that: The SMS security authentication includes: Obtaining a text message authentication request sent by the client, wherein the text message authentication request includes the verification code input by the user according to the requirements of the secure text message; The SMS authentication request is authenticated based on the identity authentication token, and the authentication result is returned to the client so that the client can perform related business actions according to the authentication result.

7. The method for sending network security short messages based on zero trust mechanism according to claim 6 is characterized in that: Also includes: When the service action is completed, the SMS service port is closed and switched to a stealth state until the next data packet is received.

8. A network security short message sending system based on zero trust mechanism, characterized in that: Execute the network security short message sending method based on the zero trust mechanism as described in any one of claims 1 to 7.

9. An electronic device, characterized in that: include: A processor and a memory, wherein the memory stores instructions, and the instructions are loaded and executed by the processor to implement the network security short message sending method based on the zero trust mechanism as described in any one of claims 1 to 7.

10. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores a computer program, and when the computer program is executed by the processor, the network security short message sending method based on the zero-trust mechanism as described in any one of claims 1 to 7 is implemented.

Images