A message transmission control method of a secret-involved instant communication system

Abstract

This invention discloses a message transmission control method for a classified instant messaging system, belonging to the field of classified information communication technology. The method includes the following steps: pre-configuring system information for different nodes during message transmission within the classified instant messaging system; pre-configuring at least one message transmission control policy for each organization, containing policy control conditions and transmission control execution; responding to and receiving messages to be sent, including at least a message security level; matching the message security level with the corresponding message transmission control policy; and performing operations such as rejecting transmission, exempting from approval, or requiring approval on the message based on the matching result. This message transmission control method can accurately control message transmission between users at different nodes in the system, ensuring message transmission efficiency while improving the accuracy and security of message transmission control. It also provides convenience and flexibility for organizations in formulating message transmission approval policies, demonstrating excellent application prospects.

Description

Technical Field

[0001] This invention belongs to the field of classified information communication technology, specifically relating to a message transmission control method for a classified instant messaging system. Background Technology

[0002] In organizations and fields with confidentiality requirements, classified information systems are widely used. To enable internal and external information communication and transmission within and outside the system, classified instant messaging systems are typically deployed to manage address books, facilitate point-to-point messaging, and send group messages. These messages generally include text messages (including emoticons and rich text), image messages, and file messages.

[0003] For information transmission within classified information systems, there are usually strict controls on the scope of users' knowledge. When using classified instant messaging systems to transmit messages, approval is required based on actual usage needs.

[0004] Currently, the approval of classified instant messaging information is mostly completed by human "walking around," which is an extremely cumbersome process that consumes a lot of manpower, affects the efficiency of classified instant messaging, and causes great inconvenience. Summary of the Invention

[0005] In response to one or more of the above-mentioned defects or improvement needs of the prior art, the present invention provides a message transmission control method for a classified instant messaging system, which can flexibly control the scope of message access in classified instant messaging, accurately control message transmission between different node users in the classified instant messaging system, avoid leakage of classified information, and improve the efficiency and reliability of classified instant messaging.

[0006] To achieve the above objectives, the present invention provides a message transmission control method for a classified instant messaging system, comprising the following processes: (1) Pre-configure the user security classification system, message security classification system, organizational structure and role system in the classified instant messaging system; (2) Pre-configure at least one message passing control policy for each organization; the message passing control policy includes: Policy control conditions include the policy control subject and the judgment conditions and control values ​​configured for the policy control subject; Transmission control execution is used to define the operation to be performed when the policy control conditions are met; (3) In response to a user’s information sending request, receive a message to be sent submitted by the sender; wherein the message carries at least a message security level; (4) Obtain the message passing control policy applied by the organization where the sender is located, and match the message security level of the message to be sent with the policy control conditions in the message passing control policy; (5) Based on the transmission control execution in the matched message transmission control strategy, perform the rejection operation, the exemption operation, or the approval operation on the message to be sent.

[0007] As a further improvement of the present invention, the message passing control strategy includes multiple strategy control conditions, and the multiple strategy control conditions are combined by "AND" or "OR" logic.

[0008] As a further improvement of the present invention, the same message passing control policy may be applied to a single organization or multiple organizations; and / or, Multiple different messaging control policies can be configured for a single organization.

[0009] As a further improvement of the present invention, multiple message passing control strategies are configured for a single organization, and each message passing control strategy is configured with a priority. When a message to be sent matches multiple message passing control policies, they are matched sequentially in descending order of priority until a passing control policy is matched and executed.

[0010] As a further improvement of the present invention, the method further includes: If a message to be sent does not match a message delivery control policy, the message to be sent will be rejected.

[0011] As a further improvement of the present invention, the method further includes: Before matching the message delivery control policy, verify whether the message security level of the message to be sent matches the user security level of the recipient. If there is no match, the transmission will be rejected.

[0012] As a further improvement of the present invention, when the transmission control is executed to perform an approval operation, the method further includes: Invoke and execute the pre-configured approval strategy; The approval strategy includes at least: the number of approval levels and the information of the approver at each level.

[0013] As a further improvement of the present invention, the approver information for each level of approval is determined through a pre-configured role system, or a specific approver is directly designated.

[0014] As a further improvement of the present invention, the policy control subject includes any one or more of the following: message security level, sender security level, sender department, sending department level, receiver security level, receiver department, receiver department level, difference between sender and receiver department levels, relationship between sender and receiver departments, receiver role, and sender role.

[0015] As a further improvement of the present invention, the judgment conditions are determined according to the type of the strategy control subject, including: size comparison relationship, equal to / not equal to relationship, contain / not contain relationship, and yes / no relationship.

[0016] The aforementioned improved technical features can be combined with each other as long as they do not conflict with each other.

[0017] In summary, the beneficial effects of the above-described technical solutions conceived by this invention compared with the prior art include: The message transmission control method for a classified instant messaging system in this invention includes the following steps: pre-configuring system information for different nodes during message transmission within the classified instant messaging system; pre-configuring at least one message transmission control policy for each organization, containing policy control conditions and transmission control execution; responding to and receiving messages to be sent that contain at least a message security level; matching the message security level with the corresponding message transmission control policy; and, based on the matching result, rejecting, exempting from approval, or requiring approval for the message, thereby completing the message transmission control of the classified instant messaging system. By utilizing the aforementioned method, flexible control of the message access scope within the classified instant messaging system is effectively achieved, ensuring the security and reliability of classified information transmission and approval.

[0018] The message transmission control method for a classified instant messaging system in this invention is simple in steps and easy to use. By utilizing the pre-configuration of relevant system nodes in the classified instant messaging system, combined with the formulation and configuration of message transmission control strategies, it can accurately realize message transmission control when users at different nodes in the system transmit messages. While ensuring message transmission efficiency, it improves the accuracy and security of message transmission control, and also provides convenience and flexibility for the formulation of message transmission approval strategies for various organizations, showing excellent application prospects. Attached Figure Description

[0019] To more clearly illustrate the technical solutions in the embodiments of the present invention, the accompanying drawings used in the embodiments will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present invention. For those skilled in the art, other drawings can be obtained based on these drawings without creative effort.

[0020] Figure 1This is a flowchart of the steps of the message transmission control method for a classified instant messaging system in an embodiment of the present invention; Figure 2 This is a logic flowchart of the configured message passing control method applied in an embodiment of the present invention; Figure 3 This is an architecture diagram of setting multiple policy control conditions in the message passing control strategy in an embodiment of the present invention. Detailed Implementation

[0021] To make the objectives, technical solutions, and advantages of this invention clearer, the invention will be further described in detail below with reference to the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are merely illustrative and not intended to limit the invention. Furthermore, the technical features involved in the various embodiments of this invention described below can be combined with each other as long as they do not conflict with each other.

[0022] In the description of this invention, it should be understood that, unless otherwise expressly specified and limited, the terms "center," "longitudinal," "lateral," "length," "width," "thickness," "upper," "lower," "front," "rear," "left," "right," "vertical," "horizontal," "top," "bottom," "inner," "outer," "clockwise," "counterclockwise," "axial," "radial," "circumferential," etc., indicating the orientation or positional relationship based on the orientation or positional relationship shown in the accompanying drawings, are only for the convenience of describing this invention and simplifying the description, and are not intended to indicate or imply that the device or element referred to must have a specific orientation, or be constructed and operated in a specific orientation, and therefore should not be construed as a limitation of this invention.

[0023] Furthermore, unless otherwise expressly defined, the terms "first" and "second" are used for descriptive purposes only and should not be construed as indicating or implying relative importance or implicitly specifying the number of indicated technical features. Thus, a feature defined as "first" or "second" may explicitly or implicitly include at least one of that feature. In the description of this invention, "a plurality of" means at least two, such as two, three, etc., unless otherwise expressly and specifically defined.

[0024] In this invention, unless otherwise explicitly specified and limited, the terms "installation," "connection," "linking," and "fixing," etc., should be interpreted broadly. For example, they can refer to a fixed connection, a detachable connection, or an integral part; they can refer to a mechanical connection or an electrical connection; they can refer to a direct connection or an indirect connection through an intermediate medium; they can refer to the internal communication of two components or the interaction between two components, unless otherwise explicitly limited. Those skilled in the art can understand the specific meaning of the above terms in this invention according to the specific circumstances.

[0025] In this invention, unless otherwise explicitly specified and limited, "above" or "below" the second feature can mean that the first feature is in direct contact with the second feature, or that the first feature is in indirect contact with the second feature through an intermediate medium. Furthermore, "above," "over," and "on top" of the second feature can mean that the first feature is directly above or diagonally above the second feature, or simply that the first feature is at a higher horizontal level than the second feature. "Below," "below," and "under" the second feature can mean that the first feature is directly below or diagonally below the second feature, or simply that the first feature is at a lower horizontal level than the second feature.

[0026] Below, for reference Figures 1-3 A message transmission control method for a classified instant messaging system according to a preferred embodiment of the present invention is described.

[0027] The message transmission control method in this invention aims to achieve message transmission control when a classified instant messaging system conducts classified instant messaging, ensuring the confidentiality and security of system communication while improving the efficiency of message judgment and approval, thereby enhancing the convenience and reliability of the classified instant messaging system application.

[0028] Specifically, the preferred embodiment of the message transmission control method for a classified instant messaging system has the following steps: Figure 1 The process shown includes the following: (1) Pre-configure the user security classification system, message security classification system, organizational structure and role system in the classified instant messaging system.

[0029] When configuring a classified instant messaging system, user security levels are set for personnel within the system. For example, a user security level system is constructed from low to high as Public, Internal, Secret, and Confidential.

[0030] Furthermore, messages transmitted within the system (including text messages, file messages, or other forms of transmitted content) must be labeled with a security classification before being sent. Therefore, a message security classification system is pre-configured within the system during configuration.

[0031] For example, in a preferred embodiment, the message security classification system is also preferably configured from low to high as public, internal, secret, and confidential.

[0032] Of course, it is understandable that both the user security classification system and the message security classification system can be configured to other levels as needed, which will not be elaborated here.

[0033] Furthermore, when configuring a classified instant messaging system, configurations are made for organizational structures and at least some user roles. For example, based on the structure of an enterprise or organization, organizational structures corresponding to different departments are configured, and configurations are made for each user's department, department level, inter-departmental relationships, and the role identity (position, rank, or function, etc.) of some users, in order to support the subsequent acquisition, judgment, and verification of relevant policies.

[0034] (2) Pre-configure at least one message passing control policy for each organization; the message passing control policy includes: Policy control conditions include the policy control subject and the judgment conditions and control values ​​configured for the policy control subject; Transmission control execution is used to define the operations to be performed when policy control conditions are met.

[0035] In the preferred embodiment of the message passing control method, a message passing control strategy can be customized as needed and applied to the global or specific organizational structure, thereby achieving the purpose of flexibly controlling the scope of message awareness.

[0036] More specifically, in actual configuration, the same message passing control policy is applied to a single organization. In this case, users within that organization must follow the configured message passing control policy when sending messages. Of course, the same message passing control policy can also be applied to multiple organizations simultaneously. In this case, users in multiple organizations will follow the same message passing control policy when sending messages.

[0037] By setting message transmission control policies, organizations can flexibly configure policies and approval processes for message transmission using classified instant messaging systems, meeting the needs of classified instant messaging under different requirements.

[0038] More specifically, in the preferred embodiment, the policy control entity configured preferably includes any one or more of the following: message security level, sender security level, sender department, sending department level, receiver security level, receiver department, receiver department level, difference between sender and receiver department levels, relationship between sender and receiver departments, receiver role, and sender role.

[0039] Meanwhile, the judgment conditions and control values ​​in the strategy control conditions are determined according to the type of the strategy control subject. For judgment conditions, preferred options include: size comparison relationships, equal / not equal relationships, inclusion / exclusion relationships, and yes / no relationships. For control values, preferred options are values ​​representing the security level (e.g., unclassified, internal, secret, confidential, etc.) or values ​​representing the role (e.g., department head, exempt from approval, etc.).

[0040] Obviously, depending on the different entities controlling the strategy, the judgment conditions and control values ​​will be adjusted accordingly.

[0041] For example, when the policy control subject is "message security level", the preferred judgment conditions are "greater than", "greater than or equal to", "less than", "less than or equal to", "equal to", and "not equal to", while the control values ​​are "non-confidential", "internal", "confidential", etc.

[0042] For example, when the policy control subject is the "sender role", the judgment condition is "included", "does not include", "yes" or "no", and the control value is "department leader" or "no approval".

[0043] By combining and configuring the policy control subject, judgment conditions, and control values, determinable policy control conditions can be formed, providing a basis and standard for determining the subsequent transmission control execution.

[0044] More specifically, in actual configuration, the message passing control strategy preferably includes multiple policy control conditions, such as... Figure 3 As shown in the diagram, multiple policy control conditions are combined using "AND" or "OR" logic.

[0045] For example, in the message transmission control policy of a specific organization, there are policy control conditions set for the confidentiality level of the sending message, the confidentiality level of the sender, the confidentiality level of the sending department, the confidentiality level of the recipient's department, and the confidentiality level of the recipient. These conditions are listed in parallel using "AND" logic. In this case, when a sender in the organization sends a message, he needs to judge each policy control condition separately. If any policy control condition cannot be judged, it will indicate that the message control policy cannot be matched, and thus the normal transmission control execution cannot be guided. The message will then trigger "reject sending".

[0046] Furthermore, when determining multiple policy control conditions, it is preferable to perform a matching process between corresponding policy control conditions. For example, in the aforementioned embodiment, if the message security level and the receiver security level cannot match, the message transmission control execution will also determine "reject sending".

[0047] Based on the aforementioned message passing control strategy and related system pre-configuration steps, the corresponding logical flow during actual message passing control is as follows: Figure 2 As shown in the diagram. That is to say, the message passing control method in the preferred embodiment further preferably includes the following steps: (3) In response to the user’s information sending request, receive the message to be sent submitted by the sender; wherein the message carries at least the message security level.

[0048] Of course, it is understandable that when a user sends a message request, the relevant configuration information of the sender and receiver is also obtained by the system, which serves as part of the basis for subsequent policy judgments and action execution.

[0049] (4) Obtain the message passing control policy of the organization where the sender is located, and match the message security level of the message to be sent with the policy control conditions in the message passing control policy.

[0050] Furthermore, in a special case, multiple different message passing control policies are configured for a single organization; in this case, it is preferable that each message passing control policy is configured with a priority.

[0051] When a message to be sent matches multiple message passing control policies, they are matched sequentially in descending order of priority until a passing control policy is matched and executed.

[0052] Furthermore, during the actual matching process, if the message to be sent does not match the message delivery control policy, the message to be sent will be rejected.

[0053] More specifically, before actually matching the message passing control strategy, it is preferable to first check whether the message security level of the message to be sent matches the user security level of the recipient; if they do not match, the message should be rejected directly.

[0054] (5) Based on the transmission control execution in the matched message transmission control strategy, perform the rejection operation, the exemption operation, or the approval operation on the message to be sent.

[0055] The matching result between the message security level and the policy control conditions in the message delivery control strategy directly affects the specific operation of the delivery control, determining whether the message to be sent can be sent or whether it can be sent after approval.

[0056] Specifically, when the transmission control is set to "deny sending", the message cannot be sent.

[0057] When the transmission control is set to "no approval required", the recipient can directly receive the message after it is sent.

[0058] When the transfer control is executed as "approval", the method in the preferred embodiment further performs the following process: Invoke and execute the pre-configured approval strategy; The approval strategy should include at least the number of approval levels and the information of the approvers at each level.

[0059] The approval strategy includes corresponding approval levels, namely single-level approval or multi-level approval. The approver information for each level of approval is preferably determined through a pre-configured role system, or the sender can directly specify the specific approver when sending the message.

[0060] After completing the aforementioned approval process, the system will either send or reject the information based on the results of single-level or multi-level approval.

[0061] The message transmission control method for a classified instant messaging system in this invention is simple in steps and easy to use. By utilizing the pre-configuration of relevant system nodes in the classified instant messaging system, combined with the formulation and configuration of message transmission control strategies, it can accurately realize message transmission control when users at different nodes in the system transmit messages. While ensuring message transmission efficiency, it improves the accuracy and security of message transmission control, and also provides convenience and flexibility for the formulation of message transmission approval strategies for various organizations, showing excellent application prospects.

[0062] Those skilled in the art will readily understand that the above description is merely a preferred embodiment of the present invention and is not intended to limit the present invention. Any modifications, equivalent substitutions, and improvements made within the spirit and principles of the present invention should be included within the scope of protection of the present invention.

Claims

1. A message transmission control method for a classified instant messaging system, characterized in that, The process includes the following: (1) Pre-configure the user security classification system, message security classification system, organizational structure and role system in the classified instant messaging system; (2) Pre-configure at least one message passing control policy for each organization; The message passing control strategy includes: Policy control conditions include the policy control subject and the judgment conditions and control values ​​configured for the policy control subject; Transmission control execution is used to define the operation to be performed when the policy control conditions are met; (3) In response to a user’s information sending request, receive a message to be sent submitted by the sender; wherein the message carries at least a message security level; (4) Obtain the message passing control policy applied by the organization where the sender is located, and match the message security level of the message to be sent with the policy control conditions in the message passing control policy; (5) Based on the transmission control execution in the matched message transmission control strategy, perform the rejection operation, the exemption operation, or the approval operation on the message to be sent.

2. The message transmission control method for a classified instant messaging system according to claim 1, characterized in that, The message passing control strategy includes multiple strategy control conditions, and these multiple strategy control conditions are combined through "AND" or "OR" logic.

3. The message transmission control method for a classified instant messaging system according to claim 1, characterized in that, The same message passing control policy may be applied to a single organization or multiple organizations; and / or, Multiple different messaging control policies can be configured for a single organization.

4. The message transmission control method for a classified instant messaging system according to claim 1, characterized in that, Multiple message passing control policies are configured for a single organization, and each message passing control policy is configured with a priority. When a message to be sent matches multiple message passing control policies, they are matched sequentially in descending order of priority until a passing control policy is matched and executed.

5. The message transmission control method for a classified instant messaging system according to any one of claims 1 to 4, characterized in that, The method further includes: If a message to be sent does not match a message delivery control policy, the message to be sent will be rejected.

6. The message transmission control method for a classified instant messaging system according to any one of claims 1 to 4, characterized in that, The method further includes: Before matching the message delivery control policy, verify whether the message security level of the message to be sent matches the user security level of the recipient. If there is no match, the transmission will be rejected.

7. The message transmission control method for a classified instant messaging system according to any one of claims 1 to 4, characterized in that, When the transmission control is executed to perform an approval operation, the method further includes: Invoke and execute the pre-configured approval strategy; The approval strategy includes at least: the number of approval levels and the information of the approver at each level.

8. The message transmission control method for a classified instant messaging system according to claim 7, characterized in that, The approver information for each level of approval is determined through a pre-configured role system, or by directly designating a specific approver.

9. The message transmission control method for a classified instant messaging system according to any one of claims 1 to 4 and 8, characterized in that, The policy control entity includes any one or more of the following: message security level, sender security level, sender department, sending department level, receiver security level, receiver department, receiver department level, difference between sender and receiver department levels, relationship between sender and receiver departments, receiver role, and sender role.

10. The message transmission control method for a classified instant messaging system according to any one of claims 1 to 4 and 8, characterized in that, The judgment conditions are determined according to the type of the policy control subject, and include: size comparison relationship, equal to / not equal to relationship, contain / not contain relationship, and yes / no relationship.

Images