An instant messaging system and a secure transmission method thereof

Abstract

The application discloses an instant communication system and a secure transmission method thereof, which adopts a layered asynchronous architecture, and initiators and receivers are respectively provided with instant communication main services, asynchronous message services and transmission services. The initiator main service stores information related to to-be-transmitted data into a local database, encapsulates the information into a secure transmission data packet through the asynchronous message service, and then stores the data packet in the transmission service and pushes the data packet to the receiver when the network is reachable. The receiver transmission service checks the data packet for correctness and integrity, and then pushes the data packet to a target terminal through the asynchronous message service and the main service, and can return a receiving success feedback message along the original path. The instant communication system and the secure transmission method thereof realize reliable cross-domain transmission of instant communication messages and files, ensure the integrity of communication data, realize a network communication automatic retry mechanism and an end-to-end receiving confirmation feedback through the layered asynchronous architecture and an inter-domain secure transmission mechanism.

Description

Technical Field

[0001] This application relates to the field of information system office, specifically to an instant messaging system and its secure transmission method. Background Technology

[0002] Instant messaging systems are typically deployed on a company's internal LAN and generally offer features such as point-to-point messaging, point-to-point file transfer, and group messaging. Large enterprises typically have multiple remote offices. Under pressure from unstable network latency and a large user base, they generally adopt an independent deployment approach, with one server per office location. However, ensuring reliable and successful delivery of messages and documents to users in different locations becomes a crucial issue. Summary of the Invention

[0003] To address at least one deficiency or improvement need in the prior art, the present invention provides an instant messaging system and a remote communication method thereof, thereby ensuring successful delivery of point-to-point message sending and document transmission, and providing timely feedback.

[0004] To achieve the above objectives, according to a first aspect of the present invention, a secure transmission method for an instant messaging system is provided. The instant messaging system includes an initiator and a receiver. The initiator includes a first instant messaging user terminal, a first instant messaging main service, a first secure message service, and a first transmission service. The receiver includes a second transmission service, a second secure message service, a second instant messaging main service, and a second instant messaging user terminal. The method includes the following steps: S1, the first instant messaging user terminal sends the data to be transmitted to the first instant messaging main service, and the first instant messaging main service generates a timestamp and integrity check code corresponding to the data to be transmitted. S2, the first instant messaging main service sends information containing the data to be transmitted, timestamp and integrity check code to the first secure message service, and the first secure message service encapsulates the information into a secure transmission data packet; S3, the first secure message service sends the secure transmission data packet to the first transmission service, and the first transmission service caches the secure transmission data packet; S4, when the first transmission service detects network reachability with the second transmission service, it pushes the secure transmission data packet to the second transmission service, and the second transmission service forwards the secure transmission data packet to the second secure message service; S5, the second security message service receives the secure transmission data packet, performs integrity verification on the secure transmission data packet, and parses out the original data to be transmitted after the verification is passed; S6, the second secure message service sends the parsed original data to be transmitted to the second instant messaging main service, and the second instant messaging main service sends the original data to be transmitted to the second instant messaging user terminal.

[0005] Furthermore, steps S2 and S3 also include: The first instant messaging main service determines the domain of the recipient. If the recipient and the initiator belong to different domains, it generates a timestamp and integrity check code corresponding to the data to be transmitted, and sends the secure transmission data containing the data to be transmitted, the timestamp, and the integrity check code to the first secure message service. The first secure message service supplements the target domain information according to the secure transmission data and then sends it to the first transmission service. The first secure message service is a first asynchronous message service. If they belong to the same domain, the data to be transmitted will be directly pushed to the second instant messaging user terminal.

[0006] Furthermore, step S4 also includes: After receiving the secure transmission data packet, the first transmission service analyzes the target domain information to determine whether it can communicate normally with the second transmission service. If yes, it sends the secure transmission data packet to the second transmission service. If no, it enters the polling queue and tries to send it again after a period of time.

[0007] Furthermore, step S4 also includes: After receiving the secure transmission data packet, the second transmission service temporarily caches it locally, determines the correctness and integrity of the secure transmission data packet, and sends it to the second asynchronous message service after successful verification. After successful push, the local cache is deleted. The determination of the correctness and integrity of the message includes: determining whether it is a message from the local domain and whether the message content has been completely received.

[0008] Furthermore, step S1 also includes: The data to be transmitted is an instant messaging message. The first instant messaging main service obtains the message content and stores it in a local database.

[0009] Furthermore, step S1 also includes: The data to be transmitted is file data, and the initiator also includes a first file service, while the receiver also includes a second file service; In step S1, the first instant messaging user terminal uploads the file to be transmitted to the first file service, and the first instant messaging main service stores the file metadata information of the file to be transmitted in the local database and stores the file to be transmitted in the first file service. The domain of the recipient is determined. If the recipient and the initiator belong to the same domain, the file metadata information is directly pushed to the second instant messaging user terminal. The second instant messaging user terminal receives the message and displays a file download link. After clicking the link, the file is downloaded from the second file service. If the recipient and the initiator belong to different domains, the target domain information is added based on the file metadata information and then sent to the second transmission service.

[0010] Furthermore, step S4 also includes: After the second transmission service verifies the data, it sends the file metadata to the second security message service, downloads the file from the first transmission service, and uploads it to the second file service after the download is complete.

[0011] Furthermore, step S5 also includes: After receiving the file metadata, the second instant messaging main service verifies whether the second file service has prepared the file. If the file has been received, the file information and download link are pushed to the second instant messaging user terminal and displayed. The second instant messaging user terminal clicks the download link to receive the file from the second file service.

[0012] According to a second aspect of the present invention, an instant messaging system is also provided, characterized in that the instant messaging system includes an initiator and a receiver, the initiator including a first instant messaging user terminal, a first instant messaging main service, a first secure message service, and a first transmission service; the receiver including a second transmission service, a second secure message service, a second instant messaging main service, and a second instant messaging user terminal; When the initiator and the receiver interact, they execute the steps of any of the methods described above.

[0013] According to a third aspect of the present invention, a computer program product is also provided, comprising a computer program / instructions, characterized in that, when executed by a processor, the computer program / instructions implement the steps of any of the methods described above.

[0014] Overall, compared with the prior art, the above-described technical solutions conceived by this invention can achieve the following beneficial effects: the instant messaging system and remote communication method of this invention, through a layered asynchronous architecture and an inter-domain secure transmission mechanism, realize reliable cross-domain transmission of instant messaging messages and files, ensure the integrity of communication data, and realize an automatic retry mechanism for network communication and end-to-end reception confirmation feedback. Attached Figure Description

[0015] To more clearly illustrate the technical solutions in the embodiments of this application, the accompanying drawings used in the embodiments will be briefly introduced below. Obviously, the drawings described below are only some embodiments of this application. For those skilled in the art, other drawings can be obtained based on these drawings without creative effort.

[0016] Figure 1 A flowchart illustrating an instant messaging system and its remote communication method provided in an embodiment of this application; Figure 2 This is a schematic diagram illustrating the remote message sending process and structure provided in an embodiment of this application; Figure 3 This is a schematic diagram of the remote file sending process and structure provided in an embodiment of this application. Detailed Implementation

[0017] To make the objectives, technical solutions, and advantages of this invention clearer, the invention will be further described in detail below with reference to the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are merely illustrative and not intended to limit the invention. Furthermore, the technical features involved in the various embodiments of this invention described below can be combined with each other as long as they do not conflict with each other.

[0018] The terms "first," "second," "third," etc., in the specification, claims, and accompanying drawings of this application are used to distinguish different objects, not to describe a specific order. Furthermore, the terms "comprising" and "having," and any variations thereof, are intended to cover non-exclusive inclusion. For example, a process, method, system, product, or apparatus that includes a series of steps or units is not limited to the listed steps or units, but may optionally include steps or units not listed, or may optionally include other steps or units inherent to these processes, methods, products, or apparatuses.

[0019] According to a first aspect of the invention, in conjunction with the appendix Figure 1 As shown, a secure transmission method for an instant messaging system is provided. The instant messaging system includes an initiator and a receiver. The initiator includes a first instant messaging user terminal, a first instant messaging main service, a first secure message service, and a first transmission service. The receiver includes a second transmission service, a second secure message service, a second instant messaging main service, and a second instant messaging user terminal. The instant messaging system includes an instant messaging main service, a file service, an asynchronous message service, and a remote transmission service. The method includes the following steps: S1, the first instant messaging user terminal sends the data to be transmitted to the first instant messaging main service, and the first instant messaging main service generates a timestamp and integrity check code corresponding to the data to be transmitted; it should be noted that the data to be transmitted can be an instant messaging message, in which case the specific connection relationship between the initiator and the receiver and the reference appendix are detailed below. Figure 2 As shown; the data to be transmitted is file data, and the specific connection relationship between the initiator and receiver is shown in the attached reference. Figure 3 As shown.

[0020] S2, the first instant messaging main service sends information containing the data to be transmitted, timestamp, and integrity check code to the first secure message service, and the first secure message service encapsulates the information into a secure transmission data packet; it should be noted that the information encapsulation method is a common data encryption method in the field, which will not be described in detail here.

[0021] S3, the first security message service sends the secure transmission data packet to the first transmission service, and the first transmission service caches the secure transmission data packet; it should be noted that after the remote transmission service, i.e. the first transmission service, receives the task, it first temporarily stores it locally, and then analyzes the target domain-related information to determine whether it can communicate normally with the remote transmission service of the target domain.

[0022] S4, when the first transmission service detects network reachability with the second transmission service, it pushes the secure transmission data packet to the second transmission service, and the second transmission service forwards the secure transmission data packet to the second secure message service; it should be noted that network reachability means that normal data connection between the two parties can be achieved. At this time, the first transmission service pushes the secure transmission data packet to the second transmission service, and the second transmission service forwards the secure transmission data packet to the second secure message service.

[0023] S5, the second secure message service receives the secure transmission data packet, performs integrity verification on the secure transmission data packet, and parses out the original data to be transmitted after the verification is successful; it should be noted that the integrity verification of the secure transmission data packet can be performed by hash verification, which will not be elaborated here.

[0024] S6, the second secure message service sends the parsed original data to be transmitted to the second instant messaging main service, and the second instant messaging main service sends the original data to be transmitted to the second instant messaging user terminal. It should be noted that after the target domain's message service, i.e., the second secure message service, receives the message, it pushes it to the second instant messaging main service; the second instant messaging main service receives it, pushes it to the target user's terminal, and displays it. Upon success, the terminal sends a "[Reception Successful]" feedback to the instant messaging main service, and then sends it back step by step to the initiating terminal.

[0025] Furthermore, steps S2 and S3 also include: The first instant messaging main service determines the domain of the recipient. If the recipient and the initiator belong to different domains, it generates a timestamp and integrity check code corresponding to the data to be transmitted, and sends the secure transmission data, including the data to be transmitted, the timestamp, and the integrity check code, to the first secure message service. The first secure message service supplements the secure transmission data and sends it to the first transmission service. The first secure message service is a first asynchronous message service. It should be noted that the target domain information can be the target domain's identifier, location information, etc.

[0026] If they belong to the same domain, the data to be transmitted will be directly pushed to the second instant messaging user terminal; at this time, there is no need for interaction and data transmission between the target domain-related modules.

[0027] Furthermore, step S4 also includes: After receiving the secure transmission data packet, the first transmission service analyzes the target domain information to determine whether normal communication with the second transmission service is possible. If so, it sends the secure transmission data packet to the second transmission service; otherwise, it enters a polling queue and attempts to send it again after a certain period of time. It should be noted that after receiving the task, the remote transmission service (i.e., the first transmission service) first temporarily stores it locally, then analyzes the target domain information to determine whether normal communication is possible with the remote transmission service of the target domain (i.e., the second transmission service). If communication is possible, the message task is sent to the remote transmission service of the target domain. If the network is down, it enters a polling queue and attempts to send it again after a certain period of time.

[0028] Furthermore, step S4 also includes: After receiving the secure transmission data packet, the second transmission service temporarily caches it locally, determines the correctness and integrity of the secure transmission data packet, and sends it to the second asynchronous message service after successful verification. Upon successful push, the local cache is deleted. Determining the correctness and integrity of the message includes: checking if it is a message from the local domain and whether the message content has been completely received. It should be noted that when the remote transmission service of the target domain (i.e., the second transmission service) receives the message, it first temporarily caches it locally, then determines the correctness and integrity of the message (whether it is from the local domain and whether the message content has been completely received). If it passes the verification, it sends it to the message service of the target domain; upon successful push, the local cache is deleted.

[0029] Furthermore, step S1 also includes: The data to be transmitted is an instant messaging message. The first instant messaging main service obtains the message content and stores it in a local database. It should be noted that, as one implementation method, as shown in the attached... Figure 2 As shown, the data type of the data to be transmitted is an instant messaging message; at this time, the first instant messaging main service obtains the message content and stores it in the local database. (See attached document) Figure 2 The specific implementation process involves the user sending a message to the target user through an instant messaging system client. The specific steps are as follows: S1-1, the instant messaging main service receives a client message, stores the relevant information of this message in the local database, and, based on the domain of the target user, if they are in the same domain (not in different locations), directly pushes the message to the target user, who receives and displays the message. Otherwise, it adds a timestamp and a verification code for information integrity, and sends it to the asynchronous message service. S1-2, the asynchronous message service supplements the relevant information of the target domain according to the domain to which the target user belongs, and pushes the task to the remote transmission service.

[0030] S1-3 After receiving the task, the remote transmission service first temporarily stores it locally, then analyzes the relevant information of the target domain to determine whether it can communicate normally with the remote transmission service of the target domain; if it can, it sends the message task to the remote transmission service of the target domain.

[0031] If the network is unavailable, the device will enter the polling queue and attempt to send again after a period of time.

[0032] S1-4: After receiving the message, the remote transmission service of the target domain first temporarily caches it locally, then checks the correctness and integrity of the message (whether it belongs to this domain and whether the message content has been completely received). If it passes the checks, it sends the message to the message service of the target domain. After successful push, the local cache is deleted.

[0033] In step S1-5, after receiving the message, the target domain's message service pushes it to the instant messaging main service. The instant messaging main service then receives the message, pushes it to the target user's terminal, and displays it. Upon successful reception, the terminal sends a "[Received Successfully]" feedback to the instant messaging main service, which then forwards the message back to the initiating terminal step by step.

[0034] Furthermore, step S1 also includes: The data to be transmitted is file data. The initiator also includes a first file service, and the receiver also includes a second file service. It should be noted that, as another implementation method, see attached... Figure 3 As shown, the data type of the data to be transmitted is file data; in this case, the initiator also includes a first file service, and the receiver also includes a second file service. (See attached document.) Figure 3 The specific implementation process involves the user sending a file to the target user through an instant messaging system client. The specific steps are as follows: S2-1, the instant messaging main service receives a file request from a client, stores the file metadata information in a local database, and stores the file in a file service. Based on the target user's domain, if they belong to the same domain (not in a different location), the file metadata information is directly pushed to the target user. The target user receives the message and sees a file download link. After clicking the link, the file is downloaded from the file service within their domain. Otherwise, a timestamp and a verification code for information integrity are added to the file metadata information, and the request is sent to the asynchronous message service. S2-2, the asynchronous message service supplements the relevant information of the target domain according to the domain to which the target user belongs, and pushes the task to the remote transmission service.

[0035] S2-3 After receiving the task, the remote transmission service first temporarily stores it locally, then analyzes the relevant information of the target domain to determine whether it can communicate normally with the remote transmission service of the target domain; if it can, it sends the message task to the remote transmission service of the target domain.

[0036] If the network is unavailable, the device will enter the polling queue and attempt to send again after a period of time.

[0037] In S2-4, after receiving the message, the target domain's remote transmission service first temporarily caches it locally. Then, it checks the message's correctness and integrity (whether it belongs to this domain and whether the message content has been fully received). If the verification passes, it asynchronously sends the information to the target domain's message service. Simultaneously, it downloads the file from the source domain's remote transmission service. After downloading, it uploads the file to the local domain's file service. Once all tasks are successfully completed, the local cache is deleted.

[0038] In step S2-5, after the target domain's message service receives the file metadata, it pushes it to the instant messaging main service. Upon receiving the file metadata, the instant messaging main service verifies whether the file service has prepared it. If the file has been received, it pushes the file information and download link to the target user's terminal and displays it. The target user can then click the download link to receive the file. Upon successful receipt, the terminal sends a "[Reception Successful]" feedback to the instant messaging main service, which then forwards the message back to the initiating terminal step by step.

[0039] In the appendix Figure 3In this embodiment, the first instant messaging user terminal uploads the file to be transferred to the first file service. The first instant messaging main service stores the file metadata information of the file to be transferred in a local database and stores the file to be transferred in the first file service. The domain of the recipient is determined. If the recipient and the initiator belong to the same domain, the file metadata information is directly pushed to the second instant messaging user terminal. The second instant messaging user terminal receives the message and displays a file download link. After clicking the link, the file is downloaded from the second file service. If the recipient and the initiator belong to different domains, target domain information is added to the file metadata information, and the file is sent to the second transmission service.

[0040] Furthermore, in the appendix Figure 3 In the embodiments, step S2-4 further includes: After the second transmission service verifies the data, it sends the file metadata to the second security message service, downloads the file from the first transmission service, and uploads it to the second file service after the download is complete.

[0041] Furthermore, in the appendix Figure 3 In the embodiment, step S2-5 further includes: After receiving the file metadata, the second instant messaging main service verifies whether the second file service has prepared the file. If the file has been received, the file information and download link are pushed to the second instant messaging user terminal and displayed. The second instant messaging user terminal clicks the download link to receive the file from the second file service.

[0042] According to a second aspect of the present invention, an instant messaging system is also provided, characterized in that the instant messaging system includes an initiator and a receiver; the initiator includes a first instant messaging user terminal, a first instant messaging main service, a first secure message service, and a first transmission service; the receiver includes a second transmission service, a second secure message service, a second instant messaging main service, and a second instant messaging user terminal; when the initiator and the receiver interact, they execute the steps of any of the methods described above. It should be noted that the instant messaging system of the present invention corresponds to the steps in the aforementioned remote communication method of instant messaging systems, and will not be elaborated upon here.

[0043] According to a third aspect of the present invention, a computer program product is also provided, comprising a computer program / instructions, characterized in that, when executed by a processor, the computer program / instructions implement the steps of any of the methods described above.

[0044] Overall, compared with the prior art, the above-described technical solutions conceived by this invention can achieve the following beneficial effects: the instant messaging system and remote communication method of this invention, through a layered asynchronous architecture and an inter-domain secure transmission mechanism, realize reliable cross-domain transmission of instant messaging messages and files, ensure the integrity of communication data, and realize an automatic retry mechanism for network communication and end-to-end reception confirmation feedback.

[0045] This application also provides a computer-readable storage medium having a computer program stored thereon, which, when executed by a processor, implements the steps of the above-described method. The computer-readable storage medium may include, but is not limited to, any type of disk, including floppy disks, optical disks, DVDs, CD-ROMs, microdrives, as well as magneto-optical disks, ROMs, RAMs, EPROMs, EEPROMs, DRAMs, VRAMs, flash memory devices, magnetic cards or optical cards, nanosystems (including molecular memory ICs), or any type of medium or device suitable for storing instructions and / or data.

[0046] It should be noted that, for the sake of simplicity, the foregoing method embodiments are all described as a series of actions. However, those skilled in the art should understand that this application is not limited to the described order of actions, as some steps may be performed in other orders or simultaneously according to this application. Furthermore, those skilled in the art should also understand that the embodiments described in the specification are preferred embodiments, and the actions and modules involved are not necessarily essential to this application.

[0047] In the above embodiments, the descriptions of each embodiment have different focuses. For parts not described in detail in a certain embodiment, please refer to the relevant descriptions in other embodiments.

[0048] In the several embodiments provided in this application, it should be understood that the disclosed apparatus can be implemented in other ways. For example, the apparatus embodiments described above are merely illustrative; for instance, the division of units is only a logical functional division, and in actual implementation, there may be other division methods. For example, multiple units or components may be combined or integrated into another system, or some features may be ignored or not executed. Furthermore, the coupling or direct coupling or communication connection shown or discussed may be through some service interface; the indirect coupling or communication connection between devices or units may be electrical or other forms.

[0049] The units described as separate components may or may not be physically separate. The components shown as units may or may not be physical units; that is, they may be located in one place or distributed across multiple network units. Some or all of the units can be selected to achieve the purpose of this embodiment according to actual needs.

[0050] Furthermore, the functional units in the various embodiments of this application can be integrated into one processing unit, or each unit can exist physically separately, or two or more units can be integrated into one unit. The integrated unit can be implemented in hardware or as a software functional unit.

[0051] If the integrated unit is implemented as a software functional unit and sold or used as an independent product, it can be stored in a computer-readable storage device (CMD). Based on this understanding, the technical solution of this application, in essence, or the part that contributes to the prior art, or all or part of the technical solution, can be embodied in the form of a software product. This computer software product is stored in a memory and includes several instructions to cause a computer device (which may be a personal computer, server, or network device, etc.) to execute all or part of the steps of the methods described in the various embodiments of this application. The aforementioned memory includes various media capable of storing program code, such as USB flash drives, read-only memory (ROM), random access memory (RAM), portable hard drives, magnetic disks, or optical disks.

[0052] Those skilled in the art will understand that all or part of the steps in the various methods of the above embodiments can be implemented by a program instructing related hardware. The program can be stored in a computer-readable storage medium, which may include: a flash drive, a read-only memory (ROM), a random access memory (RAM), a magnetic disk, or an optical disk, etc.

[0053] The foregoing description is merely an exemplary embodiment of this disclosure and should not be construed as limiting the scope of this disclosure. Any equivalent changes and modifications made in accordance with the teachings of this disclosure shall still fall within the scope of this disclosure. Those skilled in the art will readily conceive of embodiments of this disclosure upon considering the specification and practicing the disclosure herein. This application is intended to cover any variations, uses, or adaptations of this disclosure that follow the general principles of this disclosure and include common knowledge or customary techniques in the art not described herein. The specification and embodiments are to be considered exemplary only, and the scope and spirit of this disclosure are defined by the claims.

[0054] The technical features of the above embodiments can be combined in any way. For the sake of brevity, not all possible combinations of the technical features in the above embodiments are described. However, as long as there is no contradiction in the combination of these technical features, they should be considered to be within the scope of this specification.

[0055] Those skilled in the art will readily understand that the above description is merely a preferred embodiment of the present invention and is not intended to limit the present invention. Any modifications, equivalent substitutions, and improvements made within the spirit and principles of the present invention should be included within the scope of protection of the present invention.

Claims

1. A secure transmission method for an instant messaging system, characterized in that, The instant messaging system includes an initiator and a receiver. The initiator includes a first instant messaging user terminal, a first instant messaging main service, a first secure message service, and a first transmission service. The receiver includes a second transmission service, a second secure message service, a second instant messaging main service, and a second instant messaging user terminal. The method includes the following steps: S1, the first instant messaging user terminal sends the data to be transmitted to the first instant messaging main service, and the first instant messaging main service generates a timestamp and integrity check code corresponding to the data to be transmitted. S2, the first instant messaging main service sends information containing the data to be transmitted, timestamp and integrity check code to the first secure message service, and the first secure message service encapsulates the information into a secure transmission data packet; S3, the first secure message service sends the secure transmission data packet to the first transmission service, and the first transmission service caches the secure transmission data packet; S4, when the first transmission service detects network reachability with the second transmission service, it pushes the secure transmission data packet to the second transmission service, and the second transmission service forwards the secure transmission data packet to the second secure message service; S5, the second security message service receives the secure transmission data packet, performs integrity verification on the secure transmission data packet, and parses out the original data to be transmitted after the verification is passed; S6, the second secure message service sends the parsed original data to be transmitted to the second instant messaging main service, and the second instant messaging main service sends the original data to be transmitted to the second instant messaging user terminal.

2. The method according to claim 1, characterized in that, Steps S2 and S3 also include: The first instant messaging main service determines the domain of the recipient. If the recipient and the initiator belong to different domains, it generates a timestamp and integrity check code corresponding to the data to be transmitted, and sends the secure transmission data containing the data to be transmitted, the timestamp, and the integrity check code to the first secure message service. The first secure message service supplements the target domain information according to the secure transmission data and then sends it to the first transmission service. The first secure message service is a first asynchronous message service. If they belong to the same domain, the data to be transmitted will be directly pushed to the second instant messaging user terminal.

3. The method according to claim 2, characterized in that, Step S4 also includes: After receiving the secure transmission data packet, the first transmission service analyzes the target domain information to determine whether it can communicate normally with the second transmission service. If yes, it sends the secure transmission data packet to the second transmission service. If no, it enters the polling queue and tries to send it again after a period of time.

4. The method according to claim 2, characterized in that, Step S4 also includes: After receiving the secure transmission data packet, the second transmission service temporarily caches it locally, determines the correctness and integrity of the secure transmission data packet, and sends it to the second asynchronous message service after successful verification. After successful push, the local cache is deleted. The determination of the correctness and integrity of the message includes: determining whether it is a message from the local domain and whether the message content has been completely received.

5. The method according to claim 1, characterized in that, Step S1 also includes: The data to be transmitted is an instant messaging message. The first instant messaging main service obtains the message content and stores it in a local database.

6. The method according to claim 1, characterized in that, Step S1 also includes: The data to be transmitted is file data, and the initiator also includes a first file service, while the receiver also includes a second file service; In step S1, the first instant messaging user terminal uploads the file to be transmitted to the first file service, and the first instant messaging main service stores the file metadata information of the file to be transmitted in the local database and stores the file to be transmitted in the first file service. The domain of the recipient is determined. If the recipient and the initiator belong to the same domain, the file metadata information is directly pushed to the second instant messaging user terminal. The second instant messaging user terminal receives the message and displays a file download link. After clicking the link, the file is downloaded from the second file service. If the recipient and the initiator belong to different domains, the target domain information is added based on the file metadata information and then sent to the second transmission service.

7. The method according to claim 6, characterized in that, Step S4 also includes: After the second transmission service verifies the data, it sends the file metadata to the second security message service, downloads the file from the first transmission service, and uploads it to the second file service after the download is complete.

8. The method according to claim 7, characterized in that, Step S5 also includes: After receiving the file metadata, the second instant messaging main service verifies whether the second file service has prepared the file. If the file has been received, the file information and download link are pushed to the second instant messaging user terminal and displayed. The second instant messaging user terminal clicks the download link to receive the file from the second file service.

9. An instant messaging system, characterized in that, The instant messaging system includes an initiator and a receiver. The initiator includes a first instant messaging user terminal, a first instant messaging main service, a first secure message service, and a first transmission service. The receiver includes a second transmission service, a second secure message service, a second instant messaging main service, and a second instant messaging user terminal. When the initiator and the receiver interact, they perform the steps of the method described in any one of claims 1 to 8.

10. A computer program product, comprising a computer program / instructions, characterized in that, When the computer program / instructions are executed by the processor, they implement the steps of the method according to any one of claims 1 to 8.

Images