CN105227518A

CN105227518A - Server, client, interactive system and information method of sending and receiving

Info

Publication number: CN105227518A
Application number: CN201410236078.3A
Authority: CN
Inventors: 王欣
Original assignee: Sumavision Technologies Co Ltd
Current assignee: Sumavision Technologies Co Ltd
Priority date: 2014-05-29
Filing date: 2014-05-29
Publication date: 2016-01-06

Abstract

The invention discloses a kind of server, client, interactive system and information method of sending and receiving.Wherein, this message receiving method comprises: send the first message carrying default picture to client, presets picture and is provided with graphic code; Receive client send the second message carrying contact action record, contact action record represent client show preset picture time record at one or more contact action; Obtain and contact action record graph of a correspondence code information according to default picture.The invention solves in existing information transmission scheme because client has the technical problem of the Information Security deficiency that information waiting for transmission expressly causes.

Description

Server, client, interactive system and information method of sending and receiving

Technical field

The present invention relates to the communications field, in particular to a kind of server, client, interactive system and information method of sending and receiving.

Background technology

In the prior art; usually can adopt the information transmission mode of plain text encryption, specifically, first client can generate or obtain information to be sent expressly in this locality; then be sent to server by after information expressly coding and/or encryption, thus complete uploading of information.For the information that protected degree is lower; this transmission means may be applicable; but for the higher information of protected degree; because information expressly needs to appear at client this locality; when the safety prevention measure of client is not enough; the risk of easy generation information leakage, thus cause potential safety hazard.Such as, in mobile payment scene, the keyboard that user uses when inputting payment cipher is normally directly generated by terminal applies and shows soft keyboard on the terminal device, even if but adopt dynamic keyboard input technology, the encrypted message that user is inputted by soft keyboard still can expressly leave in internal memory by terminal applies, under this scene, if terminal exists the Malware monitoring internal memory, then easily cause the leakage of the payment cipher of user, thus cause potential safety hazard.

For above-mentioned problem, at present effective solution is not yet proposed.

Summary of the invention

Embodiments provide a kind of server, client, interactive system and information method of sending and receiving, at least to solve in existing information transmission scheme because client has the technical problem of the Information Security deficiency that information waiting for transmission expressly causes.

According to an aspect of the embodiment of the present invention, provide a kind of message receiving method, comprising: send the first message carrying default picture to client, above-mentioned default picture is provided with graphic code; Receive above-mentioned client send the second message carrying contact action record, above-mentioned contact action record represent above-mentioned client show above-mentioned default picture time record at one or more contact action; Obtain and above-mentioned contact action record graph of a correspondence code information according to above-mentioned default picture.

According to the another aspect of the embodiment of the present invention, additionally provide a kind of method for sending information, comprising: the first message carrying default picture that reception server sends, above-mentioned default picture is provided with graphic code; Show above-mentioned default picture to user and obtain contact action record, above-mentioned contact action record represent client show above-mentioned default picture time record at one or more contact action; Sending the second message carrying above-mentioned contact action record to above-mentioned server, obtaining and above-mentioned contact action record graph of a correspondence code information for making above-mentioned server.

According to the another aspect of the embodiment of the present invention, additionally provide a kind of server, comprising: the first transmitting element, for sending the first message carrying default picture to client, above-mentioned default picture is provided with graphic code; First receiving element, for receive above-mentioned client send the second message carrying contact action record, above-mentioned contact action record represent above-mentioned client show above-mentioned default picture time record at one or more contact action; Acquiring unit, for obtaining and above-mentioned contact action record graph of a correspondence code information according to above-mentioned default picture.

According to the another aspect of the embodiment of the present invention, additionally provide a kind of client, comprising: the first receiving element, for the first message carrying default picture that reception server sends, above-mentioned default picture is provided with graphic code; Record cell, for showing above-mentioned default picture to user and obtaining contact action record, above-mentioned contact action record represent that client records when showing above-mentioned default picture on touch screen at one or more contact action; First transmitting element, for sending the second message carrying above-mentioned contact action record to above-mentioned server, obtains and above-mentioned contact action record graph of a correspondence code information for making above-mentioned server.

According to the another aspect of the embodiment of the present invention, additionally provide a kind of interactive system, comprising: above-mentioned server; One or more above-mentioned client, and there is data cube computation between above-mentioned server.

In embodiments of the present invention, when server needs the information obtaining client upload, server first issues to client the default picture being provided with one or more graphic code, then client can show this default picture by user interface UI (UserInterface) to the user of this client, now, user can based on the identification to the graphic code in the default picture that UI shows, by the contact action such as touching or slip carried out on touch screen, to the graphic code information represented by the graphic code in the default picture of client " input " indicated by this touching operates, as the response to contact action, client can be kept in and be sent corresponding contact action record to server, and then server can restore the information that user inputs by the set-up mode in default picture according to the contact action record received and graphic code.Under above-mentioned scene, because client this locality only there will be default picture and contact action record usually, the plaintext of graphic code information can't be there is, thus the difficulty reading and decode the information that user inputs is increased, reduce transmitted information by the risk revealed, reach the technique effect improving Information Security, thus solve in existing information transmission scheme because client has the technical problem of the Information Security deficiency that information waiting for transmission expressly causes.

Accompanying drawing explanation

Accompanying drawing described herein is used to provide a further understanding of the present invention, and form a application's part, schematic description and description of the present invention, for explaining the present invention, does not form inappropriate limitation of the present invention.In the accompanying drawings:

Fig. 1 is the schematic diagram of a kind of optional message receiving method according to the embodiment of the present invention;

Fig. 2 is a kind of optional schematic diagram presetting picture according to the embodiment of the present invention;

Fig. 3 is the schematic diagram of a kind of optional method for sending information according to the embodiment of the present invention;

Fig. 4 is the schematic diagram of a kind of optional server according to the embodiment of the present invention;

Fig. 5 is the schematic diagram of a kind of optional client according to the embodiment of the present invention;

Fig. 6 is the schematic diagram of a kind of optional interactive system according to the embodiment of the present invention;

Fig. 7 is the workflow diagram according to the optional interactive system of the another kind of the embodiment of the present invention.

Embodiment

Hereinafter also describe the present invention in detail with reference to accompanying drawing in conjunction with the embodiments.It should be noted that, when not conflicting, the embodiment in the application and the feature in embodiment can combine mutually.

Embodiment 1

According to the embodiment of the present invention, provide a kind of message receiving method, as shown in Figure 1, the method comprises:

S102: send the first message carrying default picture to client, presets picture and is provided with graphic code;

S104: receive the second message carrying contact action record that client sends, contact action record represent that client records when showing default picture on touch screen at one or more contact action;

S106: obtain and contact action record graph of a correspondence code information according to default picture.

It will be clear that one of embodiment of the present invention problem to be solved is to provide a kind of method, so that realize the transmission of information from user end to server.Wherein, client alleged in the embodiment of the present invention can represent the terminal equipment that user uses usually, as the PC as fixed terminal or the smart mobile phone etc. as mobile terminal, but under some scenes, this client is outside the client as the information interaction service received shown in the embodiment of the present invention, also can simultaneously as client or the server of other business, similarly, server alleged in the embodiment of the present invention can represent the background devices being connected with one or more above-mentioned clients usually, so that provide above-mentioned information interaction service, but the present invention is not construed as limiting this.

For addressing this problem, in existing scheme, usually can adopt the information transmission mode of plain text encryption; specifically; first client can generate or obtain information to be sent expressly in this locality, be then sent to server by after information expressly coding and/or encryption, thus complete uploading of information.For the information that protected degree is lower; this transmission means may be applicable; but for the higher information of protected degree; because information expressly needs to appear at client this locality; when the safety prevention measure of client is not enough; the risk of easy generation information leakage, thus cause potential safety hazard.Such as, in mobile payment scene, the keyboard that user uses when inputting payment cipher is normally directly generated by terminal applies and shows soft keyboard on the terminal device, even if but adopt dynamic keyboard input technology, the encrypted message that user is inputted by soft keyboard still can expressly leave in internal memory by terminal applies, under this scene, if terminal exists the Malware monitoring internal memory, then easily cause the leakage of the payment cipher of user, thus cause potential safety hazard.

For solving the problem, in embodiments of the present invention, when server needs the information obtaining client upload, server first issues to client the default picture being provided with one or more graphic code, then client can show this default picture by UI to the user of this client, now, user can based on the identification to the graphic code in the default picture that UI shows, by the contact action such as touching or slip carried out on touch screen, to the graphic code information represented by the graphic code in the default picture of client " input " indicated by this touching operates, as the response to contact action, client can be kept in and be sent corresponding contact action record to server, and then server can restore the information that user inputs by the set-up mode in default picture according to the contact action record received and graphic code.Under above-mentioned scene, owing to generally only there will be default picture and contact action record in the internal memory of client this locality, the plaintext of graphic code information can't be there is, thus the difficulty reading and decode the information that user inputs is increased, reduce transmitted information by the risk revealed, reach the technique effect improving Information Security, thus solve in existing information transmission scheme because client has the technical problem of the Information Security deficiency that information waiting for transmission expressly causes.

Below with reference to accompanying drawing and specific embodiment, technical solution of the present invention and operation principle thereof are described in detail.

According to the message receiving method that the embodiment of the present invention provides, in step s 102, server, when needing the user's input information obtaining client-side, first can send to client the first message carrying default picture, and this default picture is provided with one or more graphic code.

In embodiments of the present invention, this first message can be embodied in HTML (Hypertext Markup Language) http (HypertextTransferProtocol) message usually, but the present invention is not limited in any way this, such as, in some embodiments of the invention, this first message also can be embodied in file transfer protocol (FTP) ftp (FileTransferProtocol) message, or with server, the message or message etc. of what other were feasible meet File Transfer form, correctly can identify that this first message and the entrained information content thereof are as the criterion.In addition, the concrete form that the present invention is loaded in this first message for information such as such as default pictures is not limited in any way, the default picture be such as loaded in the first message can adopt bitmap bmp (Bitmap) coded format, also the compressed encoding forms such as joint image expert group Jpeg (JointPhotographicExpertsGroup) can be adopted, or other feasible can the data format etc. that correctly identifies of serviced device, the present invention is not construed as limiting this.Correspondingly, the second message described in the embodiment of the present invention, the 3rd message ... be applicable to similar explanation Deng all, the present invention does not do tired stating at this.Also it should be noted that, " first ", " second " alleged in the embodiment of the present invention ... Deng, only as the differentiation in statement, so that the understanding of the present invention, and should not to be misinterpreted as be the restriction made multiple key element on the attributes of a relation such as order, position, significance level.

In embodiments of the present invention, the graphic code be arranged in default picture can represent the figure of certain information carried can be recognized by the user usually, and be not limited to be the coding of certain particular form, wherein, this statement of graphic code can be understood as because figure itself represents certain information, and therefore this figure just can be considered as being a kind of coding to information.Such as, particularly, in some embodiments of the invention, this graphic code may be used for representing following information one of at least: character information, Word message, geometry information, accordingly, the concrete figure forming graphic code can be such as Arabic numerals 0, 1, 2 ... 9 or English alphabet a, b, c ... the character forms such as z itself, also can be by the English words of these character combinations, such as it can be Tom, Mary etc. are as the English words of name or the pet name, certainly, this graphic code also can be middle word or other words etc., the present invention is not construed as limiting this.

Especially, in some embodiments of the invention, this graphic code can also be as geometric figures such as circle, rectangle or triangles, under this scene, user still can make differentiation usually between the graphic code that multiple size, shape or color are different, and can carry out corresponding contact action according to the information identified from these graphic codes.Such as, in one embodiment, payment cipher set by user is " △, ■, zero, ★ ", then when needs upload encrypted message to server, server can issue the default picture with the multiple graphic codes comprising these 4 graphic codes to client, and then when client shows this default picture to user, user just can click the region corresponding with these 4 graphic codes on default picture in other words by touching successively on touch screen and input encrypted message.Under above-mentioned scene, to show by default picture due to graphic code itself and represented information thereof and identified by user, therefore this graphic code itself and represented information thereof do not need to appear in the internal memory of client this locality with form expressly, this just causes encrypted message itself to be not easy to be revealed, thus improves the fail safe of information.

As can be seen here, in embodiments of the present invention, the concrete form of graphic code can have multiple, wherein, if preset in picture and be provided with multiple graphic code, then the plurality of graphic code both can all have same size and/or color, and made user identify the different information represented by it by the shape of figure itself, and in the plurality of graphic code any two also can be of different sizes and/or color, and the different size of user's composition graphs shape code and/or color can be made to identify.

Certainly, more than just some exemplary descriptions, are not limitation of the invention.Such as, in embodiments of the present invention, it is touching operation that user is not limited in based on the contact action carried out the identification of graphic code, such as this graphic code also can be one or more sliding trace with different shaping, then user also by confirming its information that will input to the identification of these sliding traces, and can realize the input of information waiting for transmission by the slide on different sliding traces.In addition, in embodiments of the present invention, it is the figure of graphic code itself that the graphic code information that graphic code specifically represents also is not limited in, such as in some instances, this graphic code can be the passage being similar to " please marking the numeral that you will input on touch screen ", information expressed by it should not be interpreted as merely this section of word itself, but a kind of can be recognized by the user instructional information, thus should be understood to its graph of a correspondence code information is the numeral that slide that user carries out under this instruction will represent, but server still need be resolved the contact action record comprising this slide that client is uploaded based on this section of word, also be, if server does not learn the implication expressed by this section of word, this server does not obtain the resolution logic corresponding with formation logic during this default picture of pre-generatmg in other words, then this server still correctly cannot parse the digital information that user is really inputted by client.

More specifically, the present invention composition graphs 2 and example are provided a kind of preferred preset picture and on the set-up mode of graphic code.Wherein, as shown in Figure 2, this default picture is equivalent to a number word keyboard, be provided with graphic code 0 to 9, and these 10 graphic codes are arranged on numeric keypad randomly, in other words, when generating default picture, these 10 graphic code positions are separately stochastic generation.Under above-mentioned scene, when user wants input numerical ciphers, such as when carrying out mobile-phone payment and need input to pay 6 payment ciphers applying the bank card bound, then can be applied by this payment or third-party application carrys out requirement server and issues default picture as shown in Figure 2, and on the touch screen of client-side, click corresponding numeral, client then can catch when showing this default picture and the touching that recording user carries out operates, and then the contact action record of correspondence is uploaded to server, thus in step s 106, which 6 numeral what server then can parse that user will input according to contact action record is, and the front and back input sequence of these numerals.

As can be seen here, in embodiments of the present invention, for the dissection process that server side performs, above-mentioned steps S106 can comprise:

S2: judge the region corresponding to each touch coordinate in touch coordinate queue in multiple regions that default picture comprises, wherein, contact action record comprises touch coordinate queue;

S4: inquire about the graphic code information represented by the graphic code corresponding with the region judged, to obtain and the message queue of touch coordinate queue graph of a correspondence code.

Wherein, touch coordinate queue can comprise multiple touch coordinate, such as default picture as shown in Figure 2, suppose that its dimension of picture is 720 pixel * 720 pixels, and client obtains and the touch coordinate queue of uploading onto the server is: { 710, 250}, { 120, 680}, { 30, 40}, { 400, 320}, { 320, 510}, { 424, 200}, { 373, 486}, { 654, 333}, { 600, 100}, if then with the lower left corner of this picture for the origin of coordinates, and x reference axis is arranged in the horizontal direction, y reference axis is arranged on vertically, then can judge that the region corresponding to it corresponds respectively to graphic code " 7, 2, rollback, 6, 4, 6, 4, 7, determine " region at respective place, and then can show that the numerical ciphers that user will input is " 764647 ".

Certainly, above-mentioned example only exemplarily proposes, and can't form any unnecessary restriction to the present invention.Such as, in some other embodiment of the present invention, graphic code 0 to 9 also can not in accordance with random regularly arranged on this numeric keypad, and other feasible preset rules also can be adopted to limit its arrangement, and the present invention is not construed as limiting this.

Accordingly, in embodiments of the present invention, client can before server side pre-generatmg presets picture, this client is sent for showing the screen resolution screen size in other words of the touch screen of this default picture to server, or send this client for showing the window size information of the window in the touch screen of this default picture to server, so that server generates the default picture matched with client UI according to these dimension informations, the such as default picture of above-mentioned 720 pixel * 720 pixels, this default picture mistake on the client default picture also can avoided on the other hand not mate with client UI and cause shows, and then avoid the contact action record showing the user caused due to mistake cannot correctly resolve the problem appearance causing server to obtain wrong graphic code information or message queue by serviced device.

Accordingly, in embodiments of the present invention, before step S102, above-mentioned method of reseptance can also comprise:

S6: multiple graphic code is arranged on randomly to form default picture in the multiple regions on picture frame, the multiple graphic code after arranging and multiple regions one_to_one corresponding;

S8: store the graphic code information represented by the corresponding relation between multiple graphic code and multiple region and each in multiple graphic code.

In embodiments of the present invention, server can generate the default picture being provided with one or more graphic code in advance, so that provide the identification reference of input information for client and user thereof, wherein, because picture generates at server side, and corresponding relation between multiple region in picture and multiple graphic code can be preserved at server side, therefore server can resolve to the contact action record received the input information restoring user easily on the one hand, picture can be avoided in client on the other hand to generate the potential safety hazard brought, wherein, this default picture both can be generated by server voluntarily, the information transmission request that also can be proposed in response to client by server generates accordingly, thus make the default picture dynamic as basis of characterization stronger, and improve the fail safe of transmission information further.

By above embodiment, technical solution of the present invention and operation principle thereof are set forth, but should be understood that, above-described embodiment only for the understanding of the present invention, and should not be considered as being limitation of the invention, such as, in some embodiments of the invention, above-mentioned default picture also can and can't help this server and generate in advance, its also can from the plurality of picture prestored extract real-time etc., the present invention is not limited in any way this.It should be noted that the similar replacement of the equivalence to inventive embodiments or the execution mode of obvious modification, all should be considered as within protection scope of the present invention.

Still it should be noted that; in embodiments of the present invention; above-mentioned message transmitting procedure can be combined in a more complete interaction flow usually; such as this interaction flow can be complete payment flow; and in this payment flow, need the numerical value password inputted by user end to server upload user as one of them step; or this interaction flow also can be the login process for shielded website, and in this login process, need access password client inputted to web page server upload user as one of them step etc.Generally speaking; the present invention can't limit the embody rule scene of the above-mentioned method of reseptance provided according to embodiment; in fact; in embodiments of the present invention; based on the interactive interface that step S102 and step S106 provides separately; can easily in above-mentioned complete interaction flow design and the suitable front and back actuating logic of this method of reseptance with the data transmission procedure utilizing the fail safe that completed by the method higher; should be understood that, the similar execution mode based on the embodiment of the present invention all should be considered as within protection scope of the present invention.

Such as, as the optional mode of one, in embodiments of the present invention, before carrying the first message of default picture to client transmission, above-mentioned method of reseptance can also comprise:

S10: receive client send for asking the 3rd message issuing default picture.

Accordingly, in embodiments of the present invention, after step s 106, above-mentioned method of reseptance can also comprise:

S12: the graphic code information obtained is verified;

S14: the result returning checking to client.

Such as, aforesaid user's input information is reduced to the example of " 764647 ", server after this numerical value password of acquisition, can be verified this password, and can return the result of checking further to client.Under above-mentioned scene, the risk revealed due to password reduces, and thus improves the safety and reliability of whole verification system.Similarly, above-mentioned method of reseptance can also be applied in other scenes, the present invention does not repeat one by one at this.

Embodiment 2

According to the embodiment of the present invention, additionally provide a kind of method for sending information, as shown in Figure 3, the method comprises:

S302: the first message carrying default picture that reception server sends, presets picture and is provided with graphic code;

S304: show default picture to user and obtain contact action record, contact action record represent client show on touch screen preset picture time record at one or more contact action;

S306: send the second message carrying contact action record to server, obtains and contact action record graph of a correspondence code information for making server.

According to the method for sending information that the embodiment of the present invention provides, client is when needing to send to server the information inputted by the user of client-side, first can send by server the first message carrying default picture to client, and this default picture is provided with one or more graphic code, and then in step s 302, client can reception server send this first message.

In embodiments of the present invention, this first message can be embodied in http message usually, but the present invention is not limited in any way this, such as, in some embodiments of the invention, this first message also can be embodied in ftp message, or other feasible message meeting File Transfer form or messages etc., correctly can identify that this first message and the entrained information content thereof are as the criterion with server.In addition, the concrete form that the present invention is loaded in this first message for information such as such as default pictures is not limited in any way, the default picture be such as loaded in the first message can adopt bmp coded format, also the compressed encoding forms such as Jpeg can be adopted, or other feasible can the data format etc. that correctly identifies of serviced device, the present invention is not construed as limiting this.Correspondingly, the second message described in the embodiment of the present invention, the 3rd message ... be applicable to similar explanation Deng all, the present invention does not do tired stating at this.Also it should be noted that, " first ", " second " alleged in the embodiment of the present invention ... Deng, only as the differentiation in statement, so that the understanding of the present invention, and should not to be misinterpreted as be the restriction made multiple key element on the attributes of a relation such as order, position, significance level.

More specifically, the present invention composition graphs 2 and example are provided a kind of preferred preset picture and on the set-up mode of graphic code.Wherein, as shown in Figure 2, this default picture is equivalent to a number word keyboard, be provided with graphic code 0 to 9, and these 10 graphic codes are arranged on numeric keypad randomly, in other words, when generating default picture, these 10 graphic code positions are separately stochastic generation.Under above-mentioned scene, when user wants input numerical ciphers, such as when carrying out mobile-phone payment and need input to pay 6 payment ciphers applying the bank card bound, then can be applied by this payment or third-party application carrys out requirement server and issues default picture as shown in Figure 2, and on the touch screen of client-side, click corresponding numeral, client then can be caught when showing this default picture by step S304 and the touching that recording user carries out operates, and then by step S306, the contact action record of correspondence is uploaded to server, thus server then can parse that user will input according to contact action record is which 6 numeral, and the front and back input sequence of these numerals.

As can be seen here, in embodiments of the present invention, for the operation of the acquisition contact action record that client-side performs, above-mentioned steps S304 specifically can comprise:

S16: obtain touch coordinate queue as contact action record, touch coordinate queue comprises the touch coordinate indicated by each the touching operation in contact action that client obtains when showing and presetting picture.

Accordingly, the dissection process performed at server side then can comprise:

S18: judge the region corresponding to each touch coordinate in touch coordinate queue in multiple regions that default picture comprises, wherein, contact action record comprises touch coordinate queue;

S20: inquire about the graphic code information represented by the graphic code corresponding with the region judged, to obtain and the message queue of touch coordinate queue graph of a correspondence code.

Further, in embodiments of the present invention, client can before server side pre-generatmg presets picture, this client is sent for showing the screen resolution screen size in other words of the touch screen of this default picture to server, or send this client for showing the window size information of the window in the touch screen of this default picture to server, so that server generates the default picture matched with client UI according to these dimension informations, the such as default picture of above-mentioned 720 pixel * 720 pixels, this default picture mistake on the client default picture also can avoided on the other hand not mate with client UI and cause shows, and then avoid the contact action record showing the user caused due to mistake cannot correctly resolve the problem appearance causing server to obtain wrong graphic code information or message queue by serviced device.Also namely, in embodiments of the present invention, before step S302, above-mentioned sending method can also comprise:

S22: send the screen resolution of client or the forms dimension information for showing default picture to server, default picture is generated according to screen resolution or forms dimension information for making server, wherein, multiple graphic code is randomly dispersed on default picture.

Accordingly, in embodiments of the present invention, the pregenerated operation of picture performed at server side can comprise:

S24: multiple graphic code is arranged on randomly to form default picture in the multiple regions on picture frame, the multiple graphic code after arranging and multiple regions one_to_one corresponding;

S26: store the graphic code information represented by the corresponding relation between multiple graphic code and multiple region and each in multiple graphic code.

Still it should be noted that; in embodiments of the present invention; above-mentioned message transmitting procedure can be combined in a more complete interaction flow usually; such as this interaction flow can be complete payment flow; and in this payment flow, need the numerical value password inputted by user end to server upload user as one of them step; or this interaction flow also can be the login process for shielded website, and in this login process, need access password client inputted to web page server upload user as one of them step etc.Generally speaking; the present invention can't limit the embody rule scene of the above-mentioned sending method provided according to embodiment; in fact; in embodiments of the present invention; based on the interactive interface that step S302 and step S306 provides separately; can easily in above-mentioned complete interaction flow design and the suitable front and back actuating logic of this sending method with the data transmission procedure utilizing the fail safe that completed by the method higher; should be understood that, the similar execution mode based on the embodiment of the present invention all should be considered as within protection scope of the present invention.

Such as, as the optional mode of one, in embodiments of the present invention, before step S302, above-mentioned sending method can also comprise:

S28: send for asking the 3rd message issuing default picture to server.

Accordingly, in embodiments of the present invention, after step S306, above-mentioned sending method can also comprise:

S30: the result that the graphic code information obtained is verified that reception server returns.

Such as, aforesaid user's input information is reduced to the example of " 764647 ", server after this numerical value password of acquisition, can be verified this password, and can return the result of checking further to client.Under above-mentioned scene, the risk revealed due to password reduces, and thus improves the safety and reliability of whole verification system.Similarly, above-mentioned sending method can also be applied in other scenes, the present invention does not repeat one by one at this.

Embodiment 3

According to the embodiment of the present invention, additionally provide a kind of server for implementing message receiving method as described in Example 1, as shown in Figure 4, this server comprises:

1) the first transmitting element 402, for sending the first message carrying default picture to client, presets picture and is provided with graphic code;

2) the first receiving element 404, for receive client send the second message carrying contact action record, contact action record represent client show preset picture time record at one or more contact action;

3) acquiring unit 406, for obtaining and contact action record graph of a correspondence code information according to presetting picture.

It will be clear that one of embodiment of the present invention problem to be solved is to provide a kind of server, so that realize the transmission of information from user end to server.Wherein, client alleged in the embodiment of the present invention can represent the terminal equipment that user uses usually, as the PC as fixed terminal or the smart mobile phone etc. as mobile terminal, but under some scenes, this client is outside the client as the information interaction service received shown in the embodiment of the present invention, also can simultaneously as client or the server of other business, similarly, server alleged in the embodiment of the present invention can represent the background devices being connected with one or more above-mentioned clients usually, so that provide above-mentioned information interaction service, but the present invention is not construed as limiting this.

According to the server that the embodiment of the present invention provides, when needing the user's input information obtaining client-side, first can send by the first transmitting element 402 the first message carrying default picture to client, and this default picture is provided with one or more graphic code.

More specifically, the present invention composition graphs 2 and example are provided a kind of preferred preset picture and on the set-up mode of graphic code.Wherein, as shown in Figure 2, this default picture is equivalent to a number word keyboard, be provided with graphic code 0 to 9, and these 10 graphic codes are arranged on numeric keypad randomly, in other words, when generating default picture, these 10 graphic code positions are separately stochastic generation.Under above-mentioned scene, when user wants input numerical ciphers, such as when carrying out mobile-phone payment and need input to pay 6 payment ciphers applying the bank card bound, then can be applied by this payment or third-party application carrys out requirement server and issues default picture as shown in Figure 2, and on the touch screen of client-side, click corresponding numeral, client then can catch when showing this default picture and the touching that recording user carries out operates, and then the contact action record of correspondence is uploaded to server, thus by acquiring unit 406, which 6 numeral what server then can parse that user will input according to contact action record is, and the front and back input sequence of these numerals.

As can be seen here, in embodiments of the present invention, for the dissection process that server side performs, above-mentioned acquiring unit 406 can comprise:

1) judge module, for judging the region corresponding to each touch coordinate in touch coordinate queue in multiple regions of comprising at default picture, wherein, contact action record comprises touch coordinate queue;

2) enquiry module, for the graphic code information represented by the graphic code that the region inquired about with judge is corresponding, to obtain and the message queue of touch coordinate queue graph of a correspondence code.

Accordingly, in embodiments of the present invention, above-mentioned server can also comprise:

1) generation unit, for multiple graphic code being arranged on randomly to form default picture in the multiple regions on picture frame, the multiple graphic code after arranging and multiple regions one_to_one corresponding;

2) memory cell, for storing the graphic code information represented by the corresponding relation between multiple graphic code and multiple region and each in multiple graphic code.

Still it should be noted that; in embodiments of the present invention; above-mentioned message transmitting procedure can be combined in a more complete interaction flow usually; such as this interaction flow can be complete payment flow; and in this payment flow, need the numerical value password inputted by user end to server upload user as one of them step; or this interaction flow also can be the login process for shielded website, and in this login process, need access password client inputted to web page server upload user as one of them step etc.Generally speaking, the present invention can't limit the embody rule scene of above-mentioned server and the functional module thereof provided according to embodiment, in fact, in embodiments of the present invention, based on the interactive interface that the first transmitting element 402 provides separately with acquiring unit 406, can easily in above-mentioned complete interaction flow design and this server and the suitable front and back actuating logic of functional module thereof with the data transmission procedure utilizing the fail safe that completed by this server and functional module thereof higher, should be understood that, similar execution mode based on the embodiment of the present invention all should be considered as within protection scope of the present invention.

Such as, as the optional mode of one, in embodiments of the present invention, above-mentioned server can also comprise:

1) the second receiving element, for receiving the 3rd message for asking to issue default picture that client sends; And/or,

2) authentication unit, for verifying the graphic code information obtained; Second transmitting element, for returning the result of checking to client.

Such as, aforesaid user's input information is reduced to the example of " 764647 ", server after this numerical value password of acquisition, can be verified this password, and can return the result of checking further to client.Under above-mentioned scene, the risk revealed due to password reduces, and thus improves the safety and reliability of whole verification system.Similarly, above-mentioned server can also be applied in other scenes, the present invention does not repeat one by one at this.

Embodiment 4

According to the embodiment of the present invention, additionally provide a kind of client for implementing method for sending information as described in Example 2, as shown in Figure 5, this client comprises:

1) the first receiving element 502, for the first message carrying default picture that reception server sends, presets picture and is provided with graphic code;

2) record cell 504, for showing default picture to user and obtaining contact action record, contact action record represent client show on touch screen preset picture time record at one or more contact action;

3) the first transmitting element 506, for sending the second message carrying contact action record to server, obtains and contact action record graph of a correspondence code information for making server.

It will be clear that one of embodiment of the present invention problem to be solved is to provide a kind of client, so that realize the transmission of information from user end to server.Wherein, client alleged in the embodiment of the present invention can represent the terminal equipment that user uses usually, as the PC as fixed terminal or the smart mobile phone etc. as mobile terminal, but under some scenes, this client is outside the client as the information interaction service received shown in the embodiment of the present invention, also can simultaneously as client or the server of other business, similarly, server alleged in the embodiment of the present invention can represent the background devices being connected with one or more above-mentioned clients usually, so that provide above-mentioned information interaction service, but the present invention is not construed as limiting this.

According to the client that the embodiment of the present invention provides, when needing to send to server the information inputted by the user of client-side, first can send by server the first message carrying default picture to client, and this default picture is provided with one or more graphic code, and then this first message that client can be sent by the first receiving element 502 reception server.

More specifically, the present invention composition graphs 2 and example are provided a kind of preferred preset picture and on the set-up mode of graphic code.Wherein, as shown in Figure 2, this default picture is equivalent to a number word keyboard, be provided with graphic code 0 to 9, and these 10 graphic codes are arranged on numeric keypad randomly, in other words, when generating default picture, these 10 graphic code positions are separately stochastic generation.Under above-mentioned scene, when user wants input numerical ciphers, such as when carrying out mobile-phone payment and need input to pay 6 payment ciphers applying the bank card bound, then can be applied by this payment or third-party application carrys out requirement server and issues default picture as shown in Figure 2, and on the touch screen of client-side, click corresponding numeral, client then can be caught when showing this default picture by record cell 504 and the touching that recording user carries out operates, and then by the first transmitting element 506, the contact action record of correspondence is uploaded to server, thus server then can parse that user will input according to contact action record is which 6 numeral, and the front and back input sequence of these numerals.

As can be seen here, in embodiments of the present invention, for the operation of the acquisition contact action record that client-side performs, above-mentioned record cell 504 specifically can comprise:

1) logging modle, for obtaining touch coordinate queue as contact action record, touch coordinate queue comprises the touch coordinate indicated by each the touching operation in contact action that client obtains when showing and presetting picture.

Accordingly, for the dissection process performed at server side, then server can comprise:

Further, in embodiments of the present invention, client can before server side pre-generatmg presets picture, this client is sent for showing the screen resolution screen size in other words of the touch screen of this default picture to server, or send this client for showing the window size information of the window in the touch screen of this default picture to server, so that server generates the default picture matched with client UI according to these dimension informations, the such as default picture of above-mentioned 720 pixel * 720 pixels, this default picture mistake on the client default picture also can avoided on the other hand not mate with client UI and cause shows, and then avoid the contact action record showing the user caused due to mistake cannot correctly resolve the problem appearance causing server to obtain wrong graphic code information or message queue by serviced device.Also namely, in embodiments of the present invention, above-mentioned client can also comprise:

1) the second transmitting element, for sending the screen resolution of client or the forms dimension information for showing default picture to server, default picture is generated according to screen resolution or forms dimension information for making server, wherein, multiple graphic code is randomly dispersed on default picture.

Accordingly, in embodiments of the present invention, for the picture pre-generatmg operation performed at server side, then server can comprise:

Still it should be noted that; in embodiments of the present invention; above-mentioned message transmitting procedure can be combined in a more complete interaction flow usually; such as this interaction flow can be complete payment flow; and in this payment flow, need the numerical value password inputted by user end to server upload user as one of them step; or this interaction flow also can be the login process for shielded website, and in this login process, need access password client inputted to web page server upload user as one of them step etc.Generally speaking, the present invention can't limit the embody rule scene of above-mentioned client and the functional module thereof provided according to embodiment, in fact, in embodiments of the present invention, based on the interactive interface that the first receiving element 502 and the first transmitting element 506 provide separately, can easily in above-mentioned complete interaction flow design and this client and the suitable front and back actuating logic of functional module thereof with the data transmission procedure utilizing the fail safe that completed by this client and functional module thereof higher, should be understood that, similar execution mode based on the embodiment of the present invention all should be considered as within protection scope of the present invention.

Such as, as the optional mode of one, in embodiments of the present invention, above-mentioned client can also comprise:

1) the 3rd transmitting element, for sending for asking the 3rd message issuing default picture to server; And/or,

2) the second receiving element, for the result verified the graphic code information obtained that reception server returns.

Such as, aforesaid user's input information is reduced to the example of " 764647 ", server after this numerical value password of acquisition, can be verified this password, and can return the result of checking further to client.Under above-mentioned scene, the risk revealed due to password reduces, and thus improves the safety and reliability of whole verification system.Similarly, can also by above-mentioned client application in other scenes, the present invention does not repeat one by one at this.

Embodiment 5

According to the embodiment of the present invention, additionally provide a kind of interactive system, as shown in Figure 6, this system comprises:

1) server 602 as described in Example 2;

2) one or more client 604,606,608 as described in Example 3 ..., and there is data cube computation between server 602.

In embodiments of the present invention, when one or more needs in client 604,606,608 are to server transmission information, can send respectively to server 602 and issue for asking the message presetting picture separately, and then server 602 can send to client 604 the first message carrying the first default picture, send to client 606 and carry the first message that second presets picture, and the first message carrying the 3rd default picture is sent to client 608, wherein, this first to the 3rd default picture both can be same, also can be different separately.And then client 604,606 and 608 can obtain the contact action record of respective user respectively, and upload onto the server 602, server 602 can parse the user's input information that client 604,606 and 608 needs transmission separately according to the contact action record uploaded.

Further, for convenience of to server 602 in response to from the management of the first message of multiple client and the lifting for the treatment of effeciency, the each authentication request from multiple client and the multiple authentication request in front and back from same client can be distinguished by session identification code, wherein, each in these different authentication request is all assigned unique session identification code, in order to avoid there is errored response.

Further alternatively, in some embodiments of the invention, server 602 can also be verified the user's input information parsed, and the result of checking is returned to the client of correspondence, and then client can continue to perform corresponding subsequent operation after receiving the result be proved to be successful, such as can continue to perform the accessing operation to target data.In addition, in embodiments of the present invention, this system can also comprise server 610, this server 610 can be the data server for management objectives data, to distinguish over the server 602 for providing the service for checking credentials, but this is not meant to be limitation of the invention, such as in certain embodiments, this server 602 also can form as one with server 610, and corresponding service in other words also can be provided by same station server.It should be noted that, the concrete form of the present invention to server 602 and 610 and client 604,606 and 608 is not limited in any way, and it is interpreted as the arbitrary equipment possessing above-mentioned functions.

As can be seen here, in embodiments of the present invention, when server needs the information obtaining client upload, server first issues to client the default picture being provided with one or more graphic code, then client can show this default picture by user interface UI (UserInterface) to the user of this client, now, user can based on the identification to the graphic code in the default picture that UI shows, by the contact action such as touching or slip carried out on touch screen, to the graphic code information represented by the graphic code in the default picture of client " input " indicated by this touching operates, as the response to contact action, client can be kept in and be sent corresponding contact action record to server, and then server can restore the information that user inputs by the set-up mode in default picture according to the contact action record received and graphic code.Under above-mentioned scene, because client this locality only there will be default picture and contact action record usually, the plaintext of graphic code information can't be there is, thus the difficulty reading and decode the information that user inputs is increased, reduce transmitted information by the risk revealed, reach the technique effect improving Information Security, thus solve in existing information transmission scheme because client has the technical problem of the Information Security deficiency that information waiting for transmission expressly causes.

Below with reference to Fig. 7 and more specifically embodiment the server in above-mentioned Verification System and this system, client and reciprocal process are wherein described in detail.

As shown in Figure 7, in the present embodiment, Mobile banking's application can have been run in the operating system of the smart mobile phone that user uses, and the application of this Mobile banking can and Mobile banking backstage between carry out mutual, so that make user can should be used for the checking of completing user identity by Mobile banking, and successful access is carried out, to complete mobile-phone payment to payment related data.Wherein, on the smart mobile phone that Mobile banking's application may operate in as client, Mobile banking backstage can be maintained on the background server that bank provides.

Under above-mentioned scene, when user wants to complete payment by smart mobile phone, the concrete reciprocal process between each application that each equipment and equipment run realizes by following flow process:

S602: Mobile banking's application sends for asking the message issuing numeric keypad picture to Mobile banking backstage, and sends the screen resolution of user ID and smart mobile phone to Mobile banking backstage;

S604: Mobile banking backstage generates and is similar to the random digit keyboard picture shown in Fig. 2, and records the numeral corresponding to coordinates regionals different on this picture;

S606: the numeric keypad picture of generation sends to Mobile banking to apply by Mobile banking backstage;

S608: the screen that Mobile banking is applied in smart mobile phone shows numeric keypad picture to user, and the repeatedly touching operation catching that user carries out after the touch screen of smart mobile phone is gone forward, be designated as touch coordinate queue;

S610: touch coordinate queue is sent to Mobile banking backstage by Mobile banking's application;

S612: Mobile banking backstage judges which coordinates regional is each touch coordinate in touch coordinate queue belong to, and inquire corresponding numeral, thus touch coordinate queue is reduced to the numerical ciphers of user's input;

S614: Mobile banking backstage finds out the prestore password corresponding with user ID, and judge whether the numerical ciphers that user inputs mates with the password that prestores, if coupling, then jump to step S616, if do not mate, then jump to step S618;

S616: Mobile banking backstage returns the result and/or payment affirmation information of mating and being proved to be successful to Mobile banking's application;

S618: Mobile banking backstage returns the coupling result of authentication failed and/or the information of refusal to pay to Mobile banking's application.

The invention provides some preferred embodiments to make an explanation to the present invention further, but it should be noted that the preferred embodiment is just in order to better describe the present invention, does not form and limits improperly the present invention.

The foregoing is only the preferred embodiments of the present invention, be not limited to the present invention, for a person skilled in the art, the present invention can have various modifications and variations.Within the spirit and principles in the present invention all, any amendment done, equivalent replacement, improvement etc., all should be included within protection scope of the present invention.

Claims

1. a message receiving method, is characterized in that, comprising:

Send the first message carrying default picture to client, described default picture is provided with graphic code;

Receive the second message carrying contact action record that described client sends, described contact action record represent that described client records when showing described default picture on touch screen at one or more contact action;

Obtain and described contact action record graph of a correspondence code information according to described default picture.

2. method according to claim 1, is characterized in that, described to client send carry the first message of default picture before, described method also comprises:

Multiple graphic code is arranged on randomly to form described default picture in the multiple regions on picture frame, the described multiple graphic code after arranging and described multiple regions one_to_one corresponding;

Store the graphic code information represented by the corresponding relation between described multiple graphic code and described multiple region and each in described multiple graphic code.

3. method according to claim 1, is characterized in that, described acquisition according to described default picture comprises with described contact action record graph of a correspondence code information:

In multiple regions that described default picture comprises, judge the region corresponding to each touch coordinate in touch coordinate queue, wherein, described contact action record comprises described touch coordinate queue;

Inquire about graphic code information graphic code represented by corresponding with the described region judged, to obtain and the message queue of described touch coordinate queue graph of a correspondence code.

4. according to the method in any one of claims 1 to 3, it is characterized in that,

Described to client send carry the first message of default picture before, described method also comprises: receive described client send the 3rd message for asking to issue described default picture; And/or,

Described to obtain according to described default picture with described contact action record graph of a correspondence code information after, described method also comprises: verify the described graphic code information obtained; The result of checking is returned to described client.

5. according to the method in any one of claims 1 to 3, it is characterized in that,

Described graphic code comprise following one of at least: character, word, geometry, and in multiple described graphic code any two have identical or different size and/or color, and/or, be distributed in described default picture to multiple described graphic code array; Or,

Described default picture is numeric keypad, and described graphic code at least comprises numeral 0 to 9, and described digital 0 to 9 is arranged on described numeric keypad by preset rules.

6. a method for sending information, is characterized in that, comprising:

The first message carrying default picture that reception server sends, described default picture is provided with graphic code;

Show described default picture to user and obtain contact action record, described contact action record represent that client records when showing described default picture on touch screen at one or more contact action;

Sending the second message carrying described contact action record to described server, obtaining and described contact action record graph of a correspondence code information for making described server.

7. method according to claim 6, is characterized in that, described reception server send carry the first message of default picture before, described method also comprises:

The screen resolution of described client or the forms dimension information for showing described default picture is sent to described server, described default picture is generated according to described screen resolution or described forms dimension information for making described server, wherein, multiple described graphic code is randomly dispersed on described default picture.

8. method according to claim 6, is characterized in that, described show described default picture to user and obtain contact action record comprise:

Obtain touch coordinate queue as described contact action record, described touch coordinate queue comprises the touch coordinate indicated by each the touching operation in described contact action that described client obtains when showing described default picture.

9. the method according to any one of claim 6 to 8, is characterized in that,

Described reception server send carry the first message of default picture before, described method also comprises: send for asking the 3rd message issuing described default picture to described server; And/or,

Described to send to described server carry the second message of described contact action record after, described method also comprises: receive the result verified the described graphic code information obtained that described server returns.

10. the method according to any one of claim 6 to 8, is characterized in that,

11. 1 kinds of servers, is characterized in that, comprising:

First transmitting element, for sending the first message carrying default picture to client, described default picture is provided with graphic code;

First receiving element, for receive described client send the second message carrying contact action record, described contact action record represent described client show described default picture time record at one or more contact action;

Acquiring unit, for obtaining and described contact action record graph of a correspondence code information according to described default picture.

12. servers according to claim 11, is characterized in that, also comprise:

Generation unit, for multiple graphic code being arranged on randomly to form described default picture in the multiple regions on picture frame, the described multiple graphic code after arranging and described multiple regions one_to_one corresponding;

Memory cell, for storing the graphic code information represented by the corresponding relation between described multiple graphic code and described multiple region and each in described multiple graphic code.

13. servers according to claim 11, is characterized in that, described acquiring unit comprises:

Judge module, for judging the region corresponding to each touch coordinate in touch coordinate queue in multiple regions of comprising at described default picture, wherein, described contact action record comprises described touch coordinate queue;

Enquiry module, for the graphic code information represented by the graphic code that the described region inquired about with judge is corresponding, to obtain and the message queue of described touch coordinate queue graph of a correspondence code.

14., according to claim 11 to the server according to any one of 13, is characterized in that, also comprise:

Second receiving element, for receiving the 3rd message for asking to issue described default picture that described client sends; And/or,

Authentication unit, for verifying the described graphic code information obtained; Second transmitting element, for returning the result of checking to described client.

15., according to claim 11 to the server according to any one of 13, is characterized in that,

16. 1 kinds of clients, is characterized in that, comprising:

First receiving element, for the first message carrying default picture that reception server sends, described default picture is provided with graphic code;

Record cell, for showing described default picture to user and obtaining contact action record, described contact action record represent that client records when showing described default picture on touch screen at one or more contact action;

First transmitting element, for sending the second message carrying described contact action record to described server, obtains and described contact action record graph of a correspondence code information for making described server.

17. clients according to claim 16, is characterized in that, also comprise:

Second transmitting element, for sending the screen resolution of described client or the forms dimension information for showing described default picture to described server, described default picture is generated according to described screen resolution or described forms dimension information for making described server, wherein, multiple described graphic code is randomly dispersed on described default picture.

18. clients according to claim 16, is characterized in that, described record cell comprises:

Logging modle, for obtaining touch coordinate queue as described contact action record, described touch coordinate queue comprises the touch coordinate indicated by each the touching operation in described contact action that described client obtains when showing described default picture.

19., according to claim 16 to the client according to any one of 18, is characterized in that, also comprise:

3rd transmitting element, for sending for asking the 3rd message issuing described default picture to described server; And/or,

Second receiving element, for receiving the result verified the described graphic code information obtained that described server returns.

20., according to claim 16 to the client according to any one of 18, is characterized in that,

21. 1 kinds of interactive systems, is characterized in that, comprising:

Server according to any one of embodiment 11 to 15;

One or more client according to any one of embodiment 16 to 20, and there is data cube computation between described server.