A mail encryption sending method, device, equipment, medium and product
By embedding digital watermarks in emails and performing watermark and feature recognition, the security deficiencies of traditional email encryption methods within banks are solved, enabling confidentiality and security monitoring of email content and ensuring the secure transmission of sensitive information.
Patent Information
- Application Number
- CN202411877297.X
- Authority / Receiving Office
- CN · China
- Patent Type
- Patents(China)
- Current Assignee / Owner
- Filing Date
- 2024-12-19
- Publication Date
- 2025-12-12
- Estimated Expiration
- 2044-12-19
AI Technical Summary
Traditional email encryption methods suffer from problems such as complex key management, cumbersome encryption and decryption processes, and ineffective prevention of network attacks in internal bank email systems, resulting in insufficient information security.
Digital watermarking encryption technology is used to embed hidden encrypted information in emails and to ensure email security through watermark recognition and feature recognition mechanisms, including determining the watermark recognition status and feature recognition status to judge the legality and integrity of the email.
It enhances the confidentiality of email content, prevents unauthorized third parties from obtaining the true content, promptly detects abnormal emails, and ensures that only correctly encrypted emails are sent, thus maximizing the secure transmission of sensitive information in the bank's internal public email system.
Smart Images

Figure CN119766518B_ABST
Abstract
Description
TECHNICAL FIELD
[0001] The present application relates to the field of financial technology, and in particular to a mail encryption sending method, device, equipment, medium and product. BACKGROUND
[0002] In today's digital financial environment, information exchange within banks is crucial. As an important tool for communication and collaboration among employees, the bank's internal public mail system carries a large amount of sensitive and confidential information, such as customer data, financial statements and business strategies, etc.
[0003] However, the traditional mail encryption method has certain limitations in the application of the bank's internal public mail system. Common encryption methods such as symmetric encryption and asymmetric encryption, although to some extent, guarantee the confidentiality of the mail content, but in actual operation, there may be problems such as complex key management, cumbersome encryption and decryption process, etc., which affect the work efficiency. In addition, with the increasing diversification and complexity of network attack methods, for example, hackers may obtain the content of the mail through network monitoring, malicious software implantation, etc., or crack and tamper with the encrypted mail, simple encryption technology may not be enough to deal with potential threats. SUMMARY
[0004] The present application provides a mail encryption sending method, device, equipment, medium and product to realize the safe and secure release and processing of mail and ensure the security of the bank's public mail system.
[0005] According to an aspect of the present application, a mail encryption sending method is provided, which comprises:
[0006] Obtaining a to-be-sent mail, and performing digital watermark encryption processing on the to-be-sent mail to generate an encrypted mail;
[0007] Determining the watermark identification condition of the encrypted mail, wherein the watermark identification condition is with watermark or without watermark;
[0008] When the watermark identification condition is with watermark, determining the watermark feature identification condition of the encrypted mail, and sending the encrypted mail according to the watermark feature identification condition.
[0009] Optionally, the digital watermark encryption processing on the to-be-sent mail to generate an encrypted mail comprises: obtaining to-be-embedded information, and determining the information dimension of the to-be-embedded information; processing the to-be-sent mail based on the information dimension to generate a processed text, converting the processed text into a carrier tensor of a specified format; performing convolution operation on the carrier tensor through an encoder to form intermediate features, and splicing the intermediate features with the to-be-embedded information to generate the encrypted mail.
[0010] Optionally, the determining the watermark identification condition of the encrypted email comprises: checking whether the encrypted email contains a digital watermark, and if yes, determining that the watermark identification condition is that the encrypted email contains the watermark; otherwise, determining that the watermark identification condition is that the encrypted email does not contain the watermark.
[0011] Optionally, the determining the watermark feature identification condition of the encrypted email comprises: performing digital watermark feature identification on the encrypted email; judging whether a text digital watermark is identified, and if yes, determining that the watermark feature identification condition is that the encrypted email contains the feature; otherwise, determining that the watermark feature identification condition is that the encrypted email does not contain the feature.
[0012] Optionally, after the determining the watermark identification condition of the encrypted email, the method further comprises: when the watermark identification condition is that the encrypted email does not contain the watermark or the watermark feature identification condition is that the encrypted email does not contain the feature, determining that the encrypted email is an abnormal email; and generating prompt information according to the abnormal email.
[0013] Optionally, the sending the encrypted email according to the watermark feature identification condition comprises: when the watermark feature identification condition is that the encrypted email contains the feature, sending the encrypted email to a target recipient.
[0014] According to another aspect of the present application, a mail encryption sending device is provided, which comprises:
[0015] a mail watermark encryption module configured to obtain a to-be-sent mail, and perform digital watermark encryption processing on the to-be-sent mail to generate an encrypted email;
[0016] a watermark identification condition determination module configured to determine a watermark identification condition of the encrypted email, wherein the watermark identification condition is that the encrypted email contains the watermark or does not contain the watermark;
[0017] a mail sending module configured to, when the watermark identification condition is that the encrypted email contains the watermark, determine a watermark feature identification condition of the encrypted email, and send the encrypted email according to the watermark feature identification condition.
[0018] According to another aspect of the present application, an electronic device is provided, which comprises:
[0019] at least one processor;
[0020] and a memory connected in communication with the at least one processor;
[0021] wherein the memory stores a computer program capable of being executed by the at least one processor, and the computer program is executed by the at least one processor to enable the at least one processor to execute a mail encryption sending method according to any one of the embodiments of the present application.
[0022] According to another aspect of the present application, there is provided a computer readable storage medium storing computer instructions for causing a processor to implement a method for encrypted sending of a mail according to any of the embodiments of the present application when executed by the processor.
[0023] According to another aspect of the present application, there is provided a computer program product comprising a computer program for implementing a method for encrypted sending of a mail according to any of the embodiments of the present application when executed by a processor.
[0024] The technical solution of the embodiments of the present application can embed hidden encrypted information in the mail through digital watermark encryption processing, without affecting the normal reading and appearance of the mail, and increasing the confidentiality of the content of the mail. The method can effectively prevent the mail from being easily obtained and the real content from being understood by an unauthorized third party during transmission. By determining the watermark identification condition, it can be quickly judged whether the mail has been correctly encrypted, and the possible abnormal mail can be found in time, and the monitoring of the mail security is improved. By determining the watermark feature identification condition, the effectiveness of the encryption is further verified, and it is ensured that only the mail that is correctly encrypted is sent, and the safe transmission of sensitive information in the bank internal public mail system is maximally guaranteed, and the risk of information leakage is reduced.
[0025] It should be understood that the content described in this part is not intended to identify the key or important features of the embodiments of the present application, nor is it used to limit the scope of the present application. Other features of the present application will become apparent from the following description. BRIEF DESCRIPTION OF DRAWINGS
[0026] In order to more clearly illustrate the technical solutions in the embodiments of the present application, the drawings needed in the embodiment description will be briefly introduced below. Obviously, the drawings in the following description are only some embodiments of the present application, and other drawings can be obtained by those skilled in the art without creative labor.
[0027] Figure 1 is a flowchart of a method for encrypted sending of a mail according to an embodiment of the present application;
[0028] Figure 2 is a flowchart of another method for encrypted sending of a mail according to an embodiment of the present application;
[0029] Figure 3 is a structural schematic diagram of a device for encrypted sending of a mail according to an embodiment of the present application;
[0030] Figure 4 is a structural schematic diagram of an electronic device for implementing a method for encrypted sending of a mail according to an embodiment of the present application. DETAILED DESCRIPTION
[0031] In order to make the person skilled in the art better understand the present application, the technical solutions in the embodiments of the present application will be described clearly and completely in conjunction with the drawings in the embodiments of the present application. Obviously, the described embodiments are only a part of the embodiments of the present application, not all. Based on the embodiments in the present application, all other embodiments obtained by those skilled in the art without creative labor should belong to the scope of protection of the present application.
[0032] It should be noted that the terms "first", "second" and the like in the specification and claims of the present application and the above-mentioned drawings are used to distinguish similar objects, and do not necessarily indicate a specific order or sequence. It should be understood that the data thus used can be interchanged under appropriate circumstances, so that the embodiments of the present application described herein can be implemented in an order other than that illustrated or described herein. In addition, the terms "include" and "have" and any variations thereof are intended to cover non-exclusive inclusion, for example, a process, method, system, product or device including a series of steps or units does not necessarily have to include those steps or units clearly listed, but can include other steps or units not clearly listed or inherent to these processes, methods, products or devices.
[0033] Embodiment one
[0034] Figure 1 A flowchart of a mail encryption sending method is provided for the first embodiment of the present application. The present embodiment can be applied to the bank internal public mail management scene. The method can be executed by a mail encryption sending device. The mail encryption sending device can be realized in the form of hardware and / or software. The mail encryption sending device can be configured in a computer controller. As shown in the figure, the method comprises: Figure 1
[0035] S110, obtaining a to-be-sent mail, and performing digital watermark encryption processing on the to-be-sent mail to generate an encrypted mail.
[0036] The to-be-sent email refers to an email text that has been edited by the sender before the email sending operation and is ready to be sent to the recipient through the bank internal public email system. The to-be-sent email can contain various types of business-related information and file data of the bank. The digital watermark encryption processing refers to embedding some identifying watermark information into the to-be-sent email content, which basically does not affect the normal viewing and use of the email, so as to achieve the purposes of email encryption, traceability, copyright protection, etc., and finally convert the email into an encrypted email. The encrypted email refers to the email after digital watermark encryption processing, which hides the digital watermark information embedded by a specific algorithm inside, and may have little difference from ordinary emails in appearance, but the watermark content can be found by using the corresponding detection means, which can be used to protect the security of the email in the process of transmission and use.
[0037] It should be noted that in the bank, employees often need to communicate various types of business-related information through the public email system. For example, employees of the credit department need to send a detailed analysis report on the loan application of a large customer to the risk management department, which covers many key business data and risk assessment content, and is an important carrier for daily work exchange between departments, carrying the information needed for inter-departmental collaborative office. That is, the to-be-sent email may involve customer privacy and important business decisions, so it is very important to ensure its security.
[0038] Specifically, the digital watermark encryption processing refers to using text digital watermark technology to embed watermark information into the format attributes of the text according to the blind watermark algorithm HiDDeN, such as subtle adjustments of the inter-character spacing and line spacing to carry the watermark. For some business charts and pictures attached in the email, frequency domain or spatial domain algorithms can also be used to hide the watermark in a specific area of the picture, such as embedding watermark information in the least significant bit of the picture pixel, so that the encryption is completed without affecting the normal viewing of the picture, and an encrypted email containing hidden digital watermark is generated, so as to ensure that the email can be traced and prevent the content from being illegally used during the circulation process in the bank.
[0039] Optionally, the to-be-sent email is subjected to digital watermark encryption processing to generate an encrypted email, including: obtaining to-be-embedded information and determining the information dimension of the to-be-embedded information; processing the to-be-sent email based on the information dimension to generate a processed text, converting the processed text into a carrier tensor of a specified format; performing convolution operation on the carrier tensor through an encoder to form an intermediate feature, and splicing the intermediate feature with the to-be-embedded information to generate an encrypted email.
[0040] In the bank internal public mail system, the information to be embedded can be the unique code of the sending department, the employee ID, the priority identification of the mail, etc. Determining the information dimension is to clarify the structural characteristics of the information to be embedded at the data level. For example, if it is a simple numerical code form, it can be a one-dimensional data structure; if it contains multiple attribute combinations, such as the combination of department code, employee ID, and time, it is a multi-dimensional data structure.
[0041] Specifically, based on the determined information dimension, the controller will perform adaptive processing on the mail to be sent. For example, if the information dimension is two-dimensional, the mail text content can be divided into corresponding logical areas according to certain rules, such as paragraphs or specific business blocks, so that there is a suitable position for embedding information later.
[0042] In one specific embodiment, the encoder can perform convolution operation on the carrier tensor to form an intermediate feature representation, and then merge with the input embedded information, so that the watermark information can be embedded in any position of the tensor where the digital watermark is embedded. Therefore, the information is copied in space, and the "amount of information" is spliced with the intermediate feature representation of the encoder. This operation ensures that each convolution kernel in the next layer can access the entire information while performing convolution across each spatial position. After multiple convolution operations, an encoded text feature tensor is generated (which has the same size as the input).
[0043] Among them, the convolution operation in the encoder refers to the process of sliding the convolution kernel on the carrier tensor, performing weighted summation and other operations on the data in the carrier tensor according to the set step size, padding, etc. Parameters, so as to extract different levels and different local features. Finally, the controller will splice the extracted intermediate features with the information to be embedded, and finally become an encrypted mail after digital watermark encryption in the bank internal public mail system.
[0044] In a specific embodiment, the processing text and the information to be embedded can be subjected to addition operation to complete information splicing and convolution operation, and after residual connection, a feature map with the same channel number as the original carrier text embedding matrix is obtained, thereby completing the embedding of the watermark information. The addition operation is used to reasonably fuse the information to be embedded into the processing text. Through element-by-element addition or addition according to a set weighted addition operation mode, the value corresponding to the information to be embedded and the element value in the processing text are operated, thereby generating an embedding matrix. The embedding matrix contains both the original content information of the email and the information such as the key identifier to be embedded, and prepares for further hiding of the watermark. The residual connection refers to adding the information at the current embedding matrix layer and the same layer information after some transformation through a specific connection mode, thereby retaining the original information and enabling the model to better learn and extract features. After the residual connection processing, a feature map is obtained. The feature map can be understood as a kind of form after feature extraction and integration of the embedding matrix, and it has the same channel number as the embedding matrix, and keeping the same channel number ensures the continuity and correspondence of the information in the conversion process.
[0045] S120, determining the watermark identification condition of the encrypted email, wherein the watermark identification condition is containing a watermark or not containing a watermark.
[0046] The watermark identification condition refers to the result state of judging whether the encrypted email contains the digital watermark embedded before detection, and is divided into two cases of containing a watermark and not containing a watermark, and is used to understand whether the email maintains the original encrypted state during transmission.
[0047] Specifically, when the email circulates in the system, whether it is forwarded from one department to another department or transmitted between employees at different levels, the receiving end system will automatically trigger the watermark detection program. According to the algorithm rules set when the watermark is embedded, the email content is scanned and analyzed. If the watermark trace that meets the rules can be accurately found in the elements such as the documents and pictures of the email, it indicates that the email basically maintains the original, legally encrypted state; and if the watermark cannot be detected, it indicates that the email may have encountered data errors, been tampered with by external malicious attacks, etc. during transmission.
[0048] Optionally, determining the watermark identification condition of the encrypted email includes: checking whether the encrypted email contains a digital watermark, if yes, determining that the watermark identification condition is containing a watermark; otherwise, determining that the watermark identification condition is not containing a watermark.
[0049] When checking whether the encrypted email contains a digital watermark, the operation needs to be based on the blind watermarking algorithm HiDDeN rule used when the watermark was initially embedded. For example, for the text content in the email, if the digital watermark was previously embedded by modifying the text encoding properties, the controller will analyze these encoding properties of the text during detection, and through a specific decoding algorithm, it will search for whether there are features that meet the initial embedding rule and can restore the corresponding watermark content. After checking, if the encrypted email can find digital watermark-related features that meet the pre-set rules, it indicates that the watermark identification of the encrypted email contains a watermark, which means that the encrypted email has basically maintained the legal state after the initial digital watermark encryption from creation to the current detection, and there is a high probability that the source reliability, content integrity, and other aspects meet the bank's internal security requirements. Subsequent further verification and email circulation and other related operations can be carried out according to the specific watermark features.
[0050] S130, when the watermark identification is a watermark, determine the watermark feature identification of the encrypted email, and send the encrypted email according to the watermark feature identification.
[0051] Among them, the watermark feature identification refers to further identifying the text features inside the watermark after determining that the encrypted email contains a watermark, so as to judge the source legality, content integrity, and whether the email is tampered with and other security-related issues.
[0052] Specifically, the digital watermark set by the bank often has unique and critical features, such as it may contain a department-specific code for distinguishing emails sent by the credit department, finance department, and other departments; it may also have a staff position permission level identifier to ensure that only staff of corresponding levels can handle certain sensitive emails. By comparing the extracted watermark features, it can be determined whether the email is indeed sent by a legally authorized employee from the corresponding department, and whether the email content has been modified in violation of the rules. If the watermark feature identification is normal and consistent with the bank's pre-set standards, it means that the email is safe and reliable, and can be accurately sent to the target recipient in the bank's internal public email system according to the normal process, and the recipient can carry out subsequent business work according to the email content. If the watermark feature identification is found to be abnormal, such as the department code is incorrect or the permission identifier is inconsistent, it indicates that the email may have security risks, such as being sent by an illegal person pretending to be someone else. At this time, the system will intercept the email and trigger an alarm to notify the relevant security management department, so as to promptly investigate and handle the problem and avoid serious consequences caused by the leakage or incorrect execution of important business information in the bank.
[0053] Optionally, the watermark feature recognition condition of the encrypted email is determined, including: performing digital watermark feature recognition on the encrypted email; determining whether the text digital watermark is recognized, if yes, determining that the watermark feature recognition condition is containing features; otherwise, determining that the watermark feature recognition condition is not containing features.
[0054] Specifically, this step is to perform digital watermark feature recognition on the email again to ensure that the digital watermark is indeed contained in the email. During the recognition process, the controller will parse the email text character by character and line by line to obtain accurate parameter information of the text layout. Then, according to the pre-set encoding rules, reverse deduction is performed, for example, a specific character spacing range may correspond to a specific character encoding. Through a series of calculations and comparisons, the original embedded text digital watermark information is attempted to be restored. When the relevant features that meet the pre-set text digital watermark embedding rules are detected in the encrypted email, it can be determined that the watermark feature recognition condition of the encrypted email is containing features. If the text digital watermark features that meet the requirements cannot be found in the encrypted email, it indicates that the watermark feature recognition condition is not containing features.
[0055] The technical scheme of the embodiment of the present application can embed hidden encrypted information in the email through digital watermark encryption processing, without affecting the normal reading and appearance of the email, and increasing the confidentiality of the email content. It effectively prevents the email from being easily obtained and understood by unauthorized third parties during transmission, and quickly judges whether the email has been correctly encrypted by determining the watermark recognition condition, discovers possible abnormal emails in time, and improves the monitoring of email security. By determining the watermark feature recognition condition, the effectiveness of encryption is further verified to ensure that only correctly encrypted emails are sent, thereby maximizing the security of sensitive information transmission in the bank's internal public email system and reducing the risk of information leakage.
[0056] Embodiment two
[0057] Figure 2 A flowchart of a method for encrypting and sending an email according to the second embodiment of the present application is provided. The embodiment adds a specific process of sending an encrypted email according to the watermark feature recognition condition on the basis of the above-mentioned first embodiment. The specific content of steps S210-S220 is substantially the same as that of steps S110-S120 in the first embodiment, and therefore will not be described again in this embodiment. As shown in the figure, the method comprises the following steps. Figure 2
[0058] S210, obtaining a to-be-sent email, performing digital watermark encryption processing on the to-be-sent email to generate an encrypted email.
[0059] Optionally, the to-be-sent email is subjected to digital watermark encryption processing to generate an encrypted email, including: obtaining to-be-embedded information, and determining an information dimension of the to-be-embedded information; processing the to-be-sent email based on the information dimension to generate a processed text, and converting the processed text into a carrier tensor in a specified format; performing convolution operation on the carrier tensor by an encoder to form an intermediate feature, and splicing the intermediate feature with the to-be-embedded information to generate the encrypted email.
[0060] S220, determining a watermark identification condition of the encrypted email, wherein the watermark identification condition is whether the encrypted email contains a watermark.
[0061] Optionally, the watermark identification condition of the encrypted email is determined, including: checking whether the encrypted email contains a digital watermark, if yes, determining that the watermark identification condition is that the encrypted email contains a watermark; otherwise, determining that the watermark identification condition is that the encrypted email does not contain a watermark.
[0062] S230, when the watermark identification condition is that the encrypted email contains a watermark, determining a watermark feature identification condition of the encrypted email.
[0063] Optionally, the watermark feature identification condition of the encrypted email is determined, including: performing digital watermark feature identification on the encrypted email; judging whether a text digital watermark is identified, if yes, determining that the watermark feature identification condition is that the encrypted email contains a feature; otherwise, determining that the watermark feature identification condition is that the encrypted email does not contain a feature.
[0064] S240, when the watermark feature identification condition is that the encrypted email contains a feature, sending the encrypted email to a target recipient.
[0065] Specifically, when it is determined through detection that the watermark feature identification condition of the encrypted email is that the encrypted email contains a feature, it indicates that the email passes the security verification link. For example, a legal sending department code can be accurately extracted from the watermark feature, indicating that the email is indeed sent by the corresponding authorized department within the bank; the corresponding employee's post permission identifier can be identified, proving that the email is sent by an employee with corresponding operation permission; and the watermark feature can also contain a timestamp and other features to ensure that the timeliness of the email meets the requirements of the business process. The ability to identify complete and correct watermark features indicates that the email has not been illegally tampered with during the generation and transmission process, and the source is reliable and the content is complete, which is a email that meets the bank's internal business specifications and security standards. Therefore, at this time, the email system will accurately and correctly send the encrypted email to the target recipient according to the established sending process.
[0066] Further, for the target recipient, they can not only normally view the business content in the encrypted email, but also recheck the watermark features through corresponding detection means if necessary, further confirm the legality and security of the email, and thus carry out subsequent important business work such as credit approval, financial processing, risk assessment and the like according to the business information carried by the email, so as to ensure smooth, safe and orderly communication of the entire bank internal business information.
[0067] Optionally, after determining the watermark identification condition of the encrypted email, the method further comprises: when the watermark identification condition is no watermark or the watermark feature identification condition is no feature, determining that the encrypted email is an abnormal email; and generating prompt information according to the abnormal email.
[0068] It can be known that the encrypted email should normally carry complete and identifiable digital watermark and corresponding features. When the watermark identification condition is no watermark, it indicates that the email may have encountered external malicious attacks during transmission, i.e. external personnel has destroyed the original structure of the email by technical means and deliberately removed the digital watermark therein, in order to spread some illegal or false business information under the name of the bank, thereby causing serious threat to the business security of the bank.
[0069] Similarly, when the watermark feature identification condition is no feature, even if it is detected that there seems to be a digital watermark in the email, further analysis of the specific features shows that it does not conform to the pre-set rules, such as the specific code that should have been embedded to identify the sending department as a watermark feature, but the corresponding code is not detected or the code is incorrect. It also implies that the email may have been tampered with, and the original normal watermark features may have been destroyed by the illegal modification of the content, so that it loses the function of verifying the legality and integrity of the email.
[0070] Specifically, no matter which of the above conditions, as long as the watermark identification condition is no watermark or the watermark feature identification condition is no feature, based on the strict information security requirements of the bank, the controller will determine the corresponding encrypted email as an abnormal email to mark the potential security risk, so as to facilitate subsequent targeted measures to investigate and respond.
[0071] Furthermore, once an encrypted email is identified as abnormal, the bank's internal public email system will automatically generate a notification message based on the relevant information of the abnormal email, promptly informing relevant personnel that the email has encountered an anomaly and enabling them to react quickly. When generating the notification message, the controller extracts key identifying information from the abnormal email, such as the email subject, sender's account, and recipient's account, clearly indicating which email is problematic. Then, it describes in detail the specifics of the watermark detection, such as whether no watermark was detected at all, or whether the watermark features do not meet requirements, etc. Simultaneously, it includes potential risk warnings regarding the abnormal email, such as the potential for information leakage and impact on the accuracy of business decisions, allowing recipients to intuitively and comprehensively understand the severity of the situation. The generated notification message will be sent according to the bank's internal notification mechanism. It may be pushed to the sender and recipient of the email to inform them that there is a problem with the email transmission. It will also be sent to the bank's internal security management department and the relevant business department heads, so that they can organize personnel to intervene in a timely manner and carry out investigation and analysis. For example, they can check the network transmission logs for abnormal access records, check for security vulnerabilities on the sending end, etc., so as to resolve the potential security risks caused by abnormal emails as soon as possible and ensure that the bank's internal business information can flow normally in a secure and reliable email system environment.
[0072] The technical solution of this invention, through watermark recognition and watermark feature recognition, can promptly detect emails with abnormal encryption, improving the accuracy of email security monitoring. Generating alert messages helps relevant personnel take swift action to prevent the mistransmission of abnormal emails. It effectively prevents the risk of information leakage due to incomplete encryption, enhancing the overall security of the bank's internal email system. Ensuring that only completely and effectively encrypted emails are sent guarantees the confidentiality and integrity of email content during transmission, improves the accuracy of email transmission, and enables recipients to receive secure and reliable emails. This maximizes the secure transmission of sensitive information within the bank's internal public email system and reduces the risk of information leakage.
[0073] Example 3
[0074] Figure 3 This is a schematic diagram of the structure of an email encryption sending device provided in Embodiment 3 of the present invention. Figure 3 As shown, the device includes: an email watermark encryption module 310, used to acquire an email to be sent and perform digital watermark encryption on the email to be sent to generate an encrypted email.
[0075] The watermark recognition status determination module 320 is used to determine the watermark recognition status of encrypted emails, wherein the watermark recognition status is either containing a watermark or not containing a watermark.
[0076] The mail sending module 330 is configured to determine the watermark feature identification condition of the encrypted mail when the watermark identification condition is that the watermark is contained, and send the encrypted mail according to the watermark feature identification condition.
[0077] Optionally, the mail watermark encryption module 310 is specifically configured to: obtain to-be-embedded information, and determine an information dimension of the to-be-embedded information; process the to-be-sent mail based on the information dimension to generate a processed text, and convert the processed text into a carrier tensor in a specified format; perform convolution operation on the carrier tensor through an encoder to form intermediate features, and splice the intermediate features with the to-be-embedded information to generate the encrypted mail.
[0078] Optionally, the watermark identification condition determination module 320 is specifically configured to: check whether the encrypted mail contains digital watermark, and if yes, determine that the watermark identification condition is that the watermark is contained, and if not, determine that the watermark identification condition is that the watermark is not contained.
[0079] Optionally, the mail sending module 330 specifically includes a watermark feature identification unit configured to: perform digital watermark feature identification on the encrypted mail; determine whether the text digital watermark is identified, and if yes, determine that the watermark feature identification condition is that the feature is contained, and if not, determine that the watermark feature identification condition is that the feature is not contained.
[0080] Optionally, the mail sending module 330 specifically includes a mail sending unit configured to: when the watermark feature identification condition is that the feature is contained, send the encrypted mail to a target recipient.
[0081] Optionally, the device further includes an abnormal mail identification module configured to: after determining the watermark identification condition of the encrypted mail, when the watermark identification condition is that the watermark is not contained or the watermark feature identification condition is that the feature is not contained, determine that the encrypted mail is an abnormal mail; and generate prompt information according to the abnormal mail.
[0082] The technical scheme of the embodiment of the application can embed hidden encrypted information in the mail through digital watermark encryption processing, without affecting the normal reading and appearance of the mail, and increase the confidentiality of the mail content. The transmission process of the mail can be effectively prevented from being easily obtained and understood by an unauthorized third party. By determining the watermark identification condition, it can be quickly judged whether the mail has been correctly encrypted, and possible abnormal mails can be found in time, thereby improving the monitoring of the security of the mail. By determining the watermark feature identification condition, the effectiveness of the encryption is further verified, and only the encrypted mail is sent, thereby maximizing the security of the transmission of sensitive information in the bank internal public mail system and reducing the risk of information leakage.
[0083] The mail encryption sending device provided in the embodiment of the application can perform the mail encryption sending method provided in any embodiment of the application, and has the corresponding function modules and beneficial effects of the execution method.
[0084] Embodiment Four
[0085] Figure 4 A structural diagram of an electronic device 10 that can be used to implement embodiments of the present application is shown. The electronic device is intended to represent various forms of digital computers, such as laptops, desktops, tablets, personal digital assistants, servers, blade servers, mainframes, and other appropriate computers. The electronic device can also represent various forms of mobile devices, such as personal digital assistants, cellular telephones, smartphones, wearable devices (e.g., headsets, glasses, watches, etc.), and other similar computing devices. The components shown here, their connections and relationships, and their functions, are meant to be examples only, and are not meant to limit implementations of the applications described and / or claimed in this document.
[0086] As shown in Figure 4 The electronic device 10 includes at least one processor 11, and a memory, such as a read-only memory (ROM) 12, a random access memory (RAM) 13, etc., connected to the at least one processor 11 in communication, where the memory stores computer programs executable by the at least one processor. The processor 11 can perform various appropriate actions and processes according to the computer programs stored in the read-only memory (ROM) 12 or loaded into the random access memory (RAM) 13 from the storage unit 18. In the RAM 13, various programs and data required for the operation of the electronic device 10 can also be stored. The processor 11, the ROM 12, and the RAM 13 are connected to each other through a bus 14. An input / output (I / O) interface 15 is also connected to the bus 14.
[0087] A plurality of components in the electronic device 10 are connected to the I / O interface 15, including an input unit 16, such as a keyboard, a mouse, etc., an output unit 17, such as various types of displays, speakers, etc., a storage unit 18, such as a magnetic disk, an optical disk, etc., and a communication unit 19, such as a network card, a modem, a wireless communication transceiver, etc. The communication unit 19 allows the electronic device 10 to exchange information / data with other devices through a computer network, such as the Internet, and / or various telecommunications networks.
[0088] The processor 11 can be various general and / or special-purpose processing components with processing and computing capabilities. Some examples of the processor 11 include, but are not limited to, a central processing unit (CPU), a graphics processing unit (GPU), various special-purpose artificial intelligence (AI) computing chips, various processors running machine learning model algorithms, a digital signal processor (DSP), and any appropriate processor, controller, microcontroller, etc. The processor 11 performs various methods and processes described above, such as a mail encryption sending method.
[0089] In some embodiments, a method of encrypted mail sending can be implemented as a computer program tangibly embodied in a computer readable storage medium, e.g., storage unit 18. In some embodiments, portions or all of the computer program can be loaded and / or installed onto electronic device 10 via, e.g., ROM 12 and / or communication unit 19. When the computer program is loaded onto RAM 13 and executed by processor 11, one or more steps of a method of encrypted mail sending as described above can be performed. Alternatively, in other embodiments, processor 11 can be configured to perform a method of encrypted mail sending by other means, e.g., with the aid of firmware.
[0090] Various implementations of the systems and techniques described above can be realized in digital electronic circuitry, integrated circuitry, a field programmable gate array (FPGA), an application specific integrated circuit (ASIC), a system on a chip (SOC), a programmable logic device (PLD), a computer hardware, firmware, software, and / or combinations thereof. These various implementations can include implementation in one or more computer programs that are executable and / or interpretable on a programmable system including at least one programmable processor, which can be special or general purpose, coupled to receive data and instructions from, and to transmit data and instructions to, a storage system, at least one input device, and at least one output device.
[0091] Computer programs used to implement the methods of the present application can be written in any combination of one or more programming languages. These computer programs can be provided to a processor of a general purpose computer, special purpose computer, or other programmable data processing apparatus to produce a machine, such that the computer program, when executed by the processor, implements the functions / acts specified in the flowcharts and / or block diagrams. The computer program can be executed entirely on a machine, partially on a machine, partially on a machine as part of a standalone software package, partially on a machine and partially on a remote machine or entirely on a remote machine or server.
[0092] In the context of the present application, a computer-readable storage medium can be a tangible medium that can contain or store a computer program for use by or in connection with an instruction execution system, apparatus, or device. A computer-readable storage medium can include, but is not limited to, an electronic, magnetic, optical, electromagnetic, infrared, or semiconductor system, apparatus, or device, or any suitable combination of the foregoing. Alternatively, a computer-readable storage medium can be a machine-readable signal medium. More specific examples of a machine-readable storage medium will include one or more lines of a program of instructions in a transitory signal, a portable computer diskette, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or Flash memory), an optical fiber, a portable compact disc read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination of the foregoing.
[0093] To provide for interaction with a user, the systems and techniques described here can be implemented on an electronic device having a display device (e.g., a CRT (cathode ray tube) or LCD (liquid crystal display) monitor) for displaying information to the user and a keyboard and a pointing device (e.g., a mouse or a trackball) by which the user can provide input to the electronic device. Other kinds of devices can be used to provide for interaction with a user as well; for example, feedback provided to the user can be any form of sensory feedback (e.g., visual feedback, auditory feedback, or tactile feedback); and input from the user can be received in any form, including acoustic, speech, or tactile input.
[0094] The systems and techniques described here can be implemented in a computing system that includes a back end component (e.g., as a data server), or that includes a middleware component (e.g., an application server), or that includes a front end component (e.g., a user computer having a graphical user interface or a Web browser through which a user can interact with an implementation of the systems and techniques described here), or any combination of such back end, middleware, or front end components. The components of the system can be interconnected by any form or medium of digital data communication (e.g., a communication network). Examples of communication networks include a local area network (LAN), a wide area network (WAN), a blockchain network, and the Internet.
[0095] The computing system can include clients and servers. A client and server are generally remote from each other and typically interact through a communication network. The relationship of client and server arises by virtue of computer programs running on the respective computers and having a client-server relationship to each other. The server can be a cloud server, also known as a cloud computing server or cloud host, which is a host product in the cloud computing service system, to solve the defects of large management difficulty and weak business scalability in traditional physical host and VPS service.
[0096] It should be understood that the various forms of flow shown above can be used to reorder, add or delete steps. For example, each step described in the present application can be executed in parallel, sequentially or in a different order, as long as the desired results of the technical solutions of the present application can be achieved, which is not limited herein.
[0097] The above detailed description does not constitute a limitation on the protection scope of the present application. Those skilled in the art should understand that various modifications, combinations, sub-combinations and substitutions can be made according to design requirements and other factors. Any modifications, equivalent replacements and improvements made within the spirit and principles of the present application shall be included in the protection scope of the present application.
Claims
1. A mail encryption transmission method characterized by, The method comprises: obtaining a to-be-sent email, and performing digital watermark encryption processing on the to-be-sent email to generate an encrypted email; determining a watermark identification condition of the encrypted email, wherein the watermark identification condition is that the encrypted email contains watermark or does not contain watermark; when the watermark identification condition is that the encrypted email contains watermark, determining a watermark feature identification condition of the encrypted email, and sending the encrypted email according to the watermark feature identification condition; wherein the digital watermark encryption processing on the to-be-sent email to generate an encrypted email comprises: performing addition operation on the processed text and the to-be-embedded information to complete information splicing and convolution operation, and obtaining a feature map with the same channel number as the original carrier text embedding matrix after residual connection, wherein the residual connection refers to a process of adding information of a current embedding matrix layer to transformed information of the same layer through a specific connection manner, and the addition operation refers to a process of generating an embedding matrix by performing operation on element values in the processed text and values corresponding to the to-be-embedded information according to element-by-element addition or set weighted addition.
2. The method of claim 1, wherein, The determination of the watermark identification condition of the encrypted email comprises: checking whether the encrypted email contains digital watermark, and if yes, determining that the watermark identification condition is that the encrypted email contains watermark; otherwise, determining that the watermark identification condition is that the encrypted email does not contain watermark.
3. The method of claim 2, wherein, The determination of the watermark feature identification condition of the encrypted email comprises: performing digital watermark feature identification on the encrypted email; judging whether the text digital watermark is identified, and if yes, determining that the watermark feature identification condition is that the encrypted email contains feature; otherwise, determining that the watermark feature identification condition is that the encrypted email does not contain feature.
4. The method of claim 3, wherein, After the determination of the watermark identification condition of the encrypted email, the method further comprises: when the watermark identification condition is that the encrypted email does not contain watermark or the watermark feature identification condition is that the encrypted email does not contain feature, determining that the encrypted email is an abnormal email; generating prompt information according to the abnormal email.
5. The method of claim 3, wherein, The sending of the encrypted email according to the watermark feature identification condition comprises: when the watermark feature identification condition is that the encrypted email contains feature, sending the encrypted email to a target recipient.
6. A mail encryption transmission apparatus characterized by comprising: The method comprises: a mail watermark encryption module configured to obtain a to-be-sent email, and perform digital watermark encryption processing on the to-be-sent email to generate an encrypted email; a watermark identification condition determination module configured to determine a watermark identification condition of the encrypted email, wherein the watermark identification condition is that the encrypted email contains watermark or does not contain watermark; a mail sending module configured to, when the watermark identification condition is that the encrypted email contains watermark, determine a watermark feature identification condition of the encrypted email, and send the encrypted email according to the watermark feature identification condition. The mail watermark encryption module is specifically configured to: perform information splicing and convolution operation on the processed text and the information to be embedded by using an add operation, and obtain a feature map having the same channel number as an original carrier text embedding matrix after residual connection, wherein the residual connection refers to a process of adding information of a current embedding matrix and information of the same layer after transformation by using a specific connection manner, and the add operation refers to a process of generating an embedding matrix by performing operation on element values in the processed text and values corresponding to the information to be embedded by using element-by-element addition or weighted addition according to a preset manner.
7. An electronic device, comprising: The electronic device includes: at least one processor; and a memory connected to the at least one processor in communication; wherein the memory stores a computer program capable of being executed by the at least one processor, and the computer program is executed by the at least one processor to enable the at least one processor to execute the method of any one of claims 1-5.
8. A computer storage medium, characterized in that The computer storage medium stores computer instructions, and the computer instructions are used to enable the processor to implement the method of any one of claims 1-5 when executed.
9. A computer program product, characterised in that, The computer program product includes a computer program, and the computer program implements the method of any one of claims 1-5 when executed by the processor. The computer program product includes a computer program, and the computer program implements the method of any one of claims 1-5 when executed by the processor.
Citation Information
Patent Citations
Mail processing method and system, and mail proxy gateway
CN108446543A
Mail sending method and device
CN112688858A