CN110166410B - Method and terminal for safely transmitting data and multimode communication terminal - Google Patents

Method and terminal for safely transmitting data and multimode communication terminal Download PDF

Info

Publication number
CN110166410B
CN110166410B CN201810150515.8A CN201810150515A CN110166410B CN 110166410 B CN110166410 B CN 110166410B CN 201810150515 A CN201810150515 A CN 201810150515A CN 110166410 B CN110166410 B CN 110166410B
Authority
CN
China
Prior art keywords
terminal
narrowband
communication
communication link
broadband
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Active
Application number
CN201810150515.8A
Other languages
Chinese (zh)
Other versions
CN110166410A (en
Inventor
维克多·格哈德
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Hytera Communications Corp Ltd
Original Assignee
Hytera Communications Corp Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Hytera Communications Corp Ltd filed Critical Hytera Communications Corp Ltd
Priority to CN201810150515.8A priority Critical patent/CN110166410B/en
Publication of CN110166410A publication Critical patent/CN110166410A/en
Application granted granted Critical
Publication of CN110166410B publication Critical patent/CN110166410B/en
Active legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Images

Classifications

    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00Network architectures or network communication protocols for network security
    • H04L63/04Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks
    • H04L63/0428Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks wherein the data content is protected, e.g. by encrypting or encapsulating the payload

Abstract

The application provides a method, a terminal and a multimode communication terminal for safely transmitting data, wherein a first terminal encrypts data information to be transmitted; establishing a broadband communication link with a second terminal; transmitting the encrypted data information to the second terminal through the broadband communication link; acquiring preset key information related to data information to be transmitted, wherein the preset key information can be used for decrypting encrypted data information; establishing a narrowband communication link with the second terminal; and transmitting the preset key information to the second terminal through the narrow-band communication link. The invention achieves the purposes of improving the data transmission safety performance and reducing the data transmission cost.

Description

Method and terminal for safely transmitting data and multimode communication terminal
Technical Field
The present invention relates to the field of encryption technologies, and in particular, to a method, a terminal, and a multimode communication terminal for securely transmitting data.
Background
Along with the popularization and development of internet technology, the internet technology has currently entered the big data era. Both the transmission efficiency and the security of data are receiving great attention. Currently, two data transmission routes are commonly used, one is data transmission through a broadband link, and the other is data transmission through a private wireless network.
In the application process of the existing data transmission, although the transmission rate of the broadband link is high and the cost is low, the transmission security of the existing broadband link is low, because the data transmission of the broadband link is usually data encryption through an asymmetric encryption algorithm or a key authorized by a certificate, the encryption mode has wide application range and high universality, and even if the data is encrypted and then transmitted, the encrypted information is easy to crack. Therefore, when a user needs to ensure highly secure data transmission, a private wireless network is usually used for data transmission, but the transmission mode is charged by the data transmission flow, which causes high cost in the face of large data transmission. Therefore, the existing data transmission mode cannot meet the requirements of users on high safety performance and low cost.
Disclosure of Invention
In view of this, the present invention provides a method, a terminal and a multimode communication terminal for securely transmitting data, so as to achieve the purposes of improving the security performance of data transmission and reducing the cost of data transmission.
In order to achieve the purpose, the invention provides the following technical scheme:
a method for securely transmitting data is applied to a first terminal and comprises the following steps:
encrypting data information to be transmitted;
establishing a broadband communication link with a second terminal;
transmitting the encrypted data information to the second terminal through the broadband communication link;
acquiring preset key information related to data information to be transmitted, wherein the preset key information can be used for decrypting encrypted data information;
establishing a narrowband communication link with the second terminal; and
and transmitting the preset key information to the second terminal through the narrow-band communication link.
Preferably, the method further comprises:
and acquiring a narrowband number of the second terminal from the second terminal through the broadband communication link, and establishing the narrowband communication link with the second terminal according to the narrowband number.
Preferably, the preset key information includes a key generated in an encryption process.
Preferably, the method further comprises:
and acquiring the narrowband number of the first terminal and sending the narrowband number of the first terminal to the second terminal through the broadband communication link so as to acquire the narrowband number of the second terminal from the second terminal through the broadband communication link.
Preferably, the method further comprises:
and the first terminal further acquires session identifiers of the first terminal and the second terminal from the second terminal together with the narrowband number of the second terminal, wherein the session identifiers are used for identifying applications for data transmission.
Preferably, the method further comprises:
and transmitting the session identifier and the preset key information together to the second terminal through the narrow-band transmission link.
Preferably, the method further comprises:
and encrypting the data information to be transmitted by adopting an asymmetric encryption algorithm, wherein the preset key information comprises an asymmetric encryption key.
A method for securely transmitting data is applied to a second terminal, and comprises the following steps:
establishing a broadband communication link with a first terminal;
receiving the encrypted data information through the broadband communication link;
establishing a narrowband communication link with the first terminal;
receiving the preset key information from the first terminal through the narrowband communication link; and
and decrypting the encrypted data information through the preset key information.
Preferably, the method further comprises:
and sending the narrowband number of the second terminal to the first terminal through the broadband communication link, so that the first terminal establishes a narrowband communication link with the second terminal according to the narrowband number.
Preferably, the method further comprises:
and when receiving the narrowband number of the first terminal, sending the narrowband number of the second terminal to the first terminal through the broadband communication link.
Preferably, the second terminal further sends a session identifier of the second terminal and the first terminal to the first terminal together with the narrowband number of the second terminal, where the session identifier is used to identify an application for data transmission.
Preferably, the second terminal obtains the narrowband number of the second terminal and the session identifier with the first terminal by accessing a preset security module.
Preferably, the preset key information and the session identifier received from the first terminal through the narrowband transmission link are sent to the preset security module and the preset security module forwards the preset key information to a specific application based on the session identifier.
Preferably, the communication terminal includes:
the encryption unit is used for encrypting the data information to be transmitted;
the broadband communication unit is used for establishing a broadband communication link with other communication terminals and transmitting the encrypted data information to the other communication terminals through the broadband communication link;
the device comprises an acquisition unit, a processing unit and a processing unit, wherein the acquisition unit is used for acquiring preset key information related to data information to be transmitted, and the preset key information can be used for decrypting encrypted data information;
and the narrow-band communication unit is used for establishing a narrow-band communication link with the other communication terminal and transmitting the preset key information to the other communication terminal through the narrow-band communication link.
Preferably, the broadband communication link is further configured to acquire a narrowband number of the other communication terminal from the other communication terminal;
the narrowband communication unit is also used for establishing the narrowband communication link with the other communication terminal according to the narrowband number.
Preferably, the broadband communication unit is further configured to send the narrowband number of the communication terminal to the other communication terminal through the broadband communication link so as to obtain the narrowband number of the other communication terminal from the other communication terminal through the broadband communication link.
Preferably, the broadband communication unit is further configured to, together with the narrowband number of the other communication terminal, the communication terminal further obtains a session identifier of the communication terminal and the other communication terminal from the other communication terminal, where the session identifier is used to identify an application for data transmission.
A communication terminal for secure transmission of data, comprising:
the broadband communication unit is used for establishing a broadband communication link with other communication terminals and receiving encrypted data information from the other communication terminals through the broadband communication link;
a narrowband communication unit, configured to establish a narrowband communication link with the other communication terminal, and receive the preset key information from the other communication terminal through the narrowband communication link; and
and the decryption unit is used for decrypting the encrypted data information through the preset key information.
Preferably, the broadband communication unit is further configured to send a narrowband number of the communication terminal to the other communication terminal through the broadband communication link, so that the other communication terminal establishes a narrowband communication link with the communication terminal according to the narrowband number.
A multimode communication terminal for securely transmitting data, the multimode communication terminal comprising:
a transceiver for transceiving data information;
a memory for storing a program;
and the processor is used for running the program, and when the processor runs the program, any one of the above methods for safely transmitting data is realized.
Through the technical scheme, compared with the prior art, the invention provides a method, a terminal and a multi-mode terminal for safely transmitting data, after a first terminal and a second terminal are in communication connection, a narrow-band transmission link between the first terminal and the second terminal is determined, data information to be transmitted is divided into two parts, one part is key information and is transmitted through the narrow-band transmission link, the other part is residual data information encrypted through key information and is transmitted through a broadband transmission link, wherein the key information is information such as a key or random number required by encryption, so that more important information is transmitted through the narrow-band link with higher security, the security of the key is ensured, on the other hand, the encrypted data information is transmitted through the broadband link with higher transmission rate, the transmission efficiency is ensured, and a special mobile network with higher flow cost is not used for data transmission in the scheme, but enables data information to have the same security as or higher security than data transmitted through a private mobile network, and thus, achieves the object of improving data transmission security performance and reducing data transmission cost.
Drawings
In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings used in the description of the embodiments or the prior art will be briefly described below, it is obvious that the drawings in the following description are only embodiments of the present invention, and for those skilled in the art, other drawings can be obtained according to the provided drawings without creative efforts.
Fig. 1 is a schematic flowchart of a method for securely transmitting data according to an embodiment of the present invention;
fig. 2 is a schematic flowchart of another method for securely transmitting data according to an embodiment of the present invention;
fig. 3 is a flowchart illustrating a method for dual-mode secure data transmission according to an embodiment of the present invention;
fig. 4 is a schematic structural diagram of a communication terminal according to an embodiment of the present invention;
fig. 5 is a schematic structural diagram of another communication terminal according to an embodiment of the present invention;
fig. 6 is a schematic structural diagram of a multimode communication terminal according to an embodiment of the present invention.
Detailed Description
The technical solutions in the embodiments of the present invention will be clearly and completely described below with reference to the drawings in the embodiments of the present invention, and it is obvious that the described embodiments are only a part of the embodiments of the present invention, and not all of the embodiments. All other embodiments, which can be derived by a person skilled in the art from the embodiments given herein without making any creative effort, shall fall within the protection scope of the present invention.
The terms "first" and "second," and the like in the description and claims of the present invention and the above-described drawings are used for distinguishing between different objects and not for describing a particular order. Furthermore, the terms "comprising" and "having," as well as any variations thereof, are intended to cover non-exclusive inclusions. For example, a process, method, system, article, or apparatus that comprises a list of steps or elements is not set forth for a listed step or element but may include steps or elements not listed.
An embodiment of the present invention provides a method for securely transmitting data, where the method is applied to a communication terminal for securely transmitting data, and when the method is applied to a first terminal, that is, a source terminal, and an originating terminal for data transmission, and a destination terminal at this time is denoted as a second terminal, please refer to fig. 1, the method may include:
s101, encrypting data information to be transmitted;
s102, establishing a broadband communication link with a second terminal;
and establishing a broadband communication link between the first terminal and the second terminal so as to ensure that the data to be transmitted is transmitted between the first terminal and the second terminal through the broadband communication link. It should be noted that the first terminal and the second terminal only distinguish different terminal names, and specifically, the first terminal and the second terminal may be understood as a source terminal and a destination terminal.
S103, transmitting the encrypted data information to the second terminal through the broadband communication link;
s104, acquiring preset key information related to the data information to be transmitted, wherein the preset key information can be used for decrypting the encrypted data information;
s105, establishing a narrow-band communication link with the second terminal;
specifically, before establishing a narrowband communication link, obtaining a narrowband number of the second terminal from the second terminal through the wideband communication link, and establishing the narrowband communication link with the second terminal according to the narrowband number;
and acquiring the narrowband number of the first terminal and sending the narrowband number of the first terminal to the second terminal through the broadband communication link so as to acquire the narrowband number of the second terminal from the second terminal through the broadband communication link.
The narrowband numbers corresponding to the first terminal and the second terminal are required to be acquired because there may be a plurality of narrowband numbers corresponding to the communication terminal, and the narrowband numbers corresponding to the first terminal and the second terminal are required to be authenticated first, so as to determine whether the first terminal and the second terminal have the authority of data interaction in the narrowband network.
And the first terminal further acquires session identifiers of the first terminal and the second terminal from the second terminal together with the narrowband number of the second terminal, wherein the session identifiers are used for identifying applications for data transmission.
Because the first terminal transmits the own narrowband number to the second terminal, the second terminal also transmits the own narrowband number to the first terminal, and the session identifier is transmitted to the first terminal, the first terminal and the second terminal can determine the narrowband transmission link after acquiring the own narrowband number, the narrowband number of the other side and the session identifier, wherein the session identifier and the preset key information are transmitted to the second terminal through the narrowband transmission link. A session is identified as a scene in which data information is transferred or the origin of an application, i.e. it is clear in which application the data transfer message is transmitted. Because there can be a plurality of narrowband transmission links, only after the source narrowband number and the destination narrowband number are determined, the corresponding unique narrowband transmission link can be determined.
S106, transmitting the preset key information to the second terminal through the narrow-band communication link;
after confirming the data information to be transmitted between the first terminal and the second terminal, the data to be transmitted generally includes not only the data information itself but also relevant information generated by an encryption mode, such as a key sequence or a random number. If the part of key information is not included in the data information to be transmitted under certain conditions, the part of key information can be generated through a preset encryption mode, the part of key information is transmitted between the first terminal and the second terminal through a narrow-band transmission link, meanwhile, the rest data information, namely the data information except the key information or the data information to be transmitted, is encrypted through the key information, and the encrypted data information is transmitted through a universal broadband transmission link.
It is to be understood that the order of implementation of the steps of the method is not limited to the order presented in the present embodiment. For example, the order of transmitting the key information and the remaining data information to the second terminal may not be the stated order, that is, the preset key information may be first transmitted to the second terminal through the narrowband communication link and then the data information encrypted with the preset key information may be transmitted to the second terminal through the broadband communication link, or the data information encrypted with the preset key information may be first transmitted to the second terminal through the broadband communication link and then the preset key information may be transmitted to the second terminal through the narrowband communication link.
Further to ensure the security of the transmission of the narrowband transmission link, the security of the narrowband transmission link may be protected by the PMR (private mobile radio communication) standard in some embodiments of the invention. The corresponding encryption mode may be selected according to the specific context of the user, for example, related encryption technical means such as an air interface encryption mode, an end-to-end encryption mode, an encryption algorithm, and the like. This also ensures the security of data interaction between the terminal and the narrowband transmission link.
On the basis of the embodiment, another embodiment of the present invention further includes:
and encrypting the data information to be transmitted by adopting an asymmetric encryption algorithm, wherein the preset key information comprises an asymmetric encryption key.
It can be understood that the preset key information is encryption information generated by encrypting data to be transmitted, and corresponds to an adopted encryption algorithm, for example, when an asymmetric encryption algorithm is adopted, the generated preset key information is recorded as an asymmetric key.
Similarly, a transmission format of the preset key information, that is, a corresponding narrow-band transmission link format, may be set, and the preset key information may further improve the security of the key information through a specific transmission format, for example, may be used as a transmission format according to a data format defined by a user, and may specifically be transmitted for a channel for sending a short message, that is, input in a specific data format is required, without depending on other environment templates.
In an embodiment of the present invention, another method for securely transmitting data is provided, where the method is applied to a second terminal, that is, a destination terminal, and referring to fig. 2, the method may include the following steps:
s201, establishing a broadband communication link with a first terminal;
s202, receiving encrypted data information through the broadband communication link;
the encrypted data information is data information transmitted through the broadband communication link after the destination terminal, that is, the first terminal in the previous embodiment, encrypts the data to be transmitted.
S203, establishing a narrow-band communication link with the first terminal;
s204, receiving the preset key information from the first terminal through the narrow-band communication link;
s205, decrypting the encrypted data information through the preset key information.
In the method for securely transmitting data disclosed in the embodiment of the present invention, after the first terminal and the second terminal establish a communication connection, a narrowband transmission link between the first terminal and the second terminal is determined, the data information to be transmitted is divided into two parts, one part is key information and is transmitted through the narrowband transmission link, the other part is remaining data information encrypted through the key information and is transmitted through a broadband transmission link, wherein the key information is information such as a key or a random number required for encryption, so that the security of the key is ensured by transmitting more important information through the narrowband link with higher security, on the other hand, the transmission efficiency is ensured by transmitting the encrypted data information through the broadband link with higher transmission rate, and in the scheme, a dedicated mobile network with higher traffic cost is not used for data transmission, but enables data information to have the same security as or higher security than data transmitted through a private mobile network, and thus, achieves the object of improving data transmission security performance and reducing data transmission cost.
The following describes a method for securely transmitting data according to the present invention by taking a specific application scenario as an example, referring to fig. 3, fig. 3 is a schematic diagram of securely transmitting data of a dual-mode entity, which includes a source terminal and a destination terminal, where the source terminal and the destination terminal both include an application module, a security module, and a transmission module.
The application modules transmit general messages through a transmission link, such as transmission of information of a narrowband number acquisition request, narrowband number transmission or exchange and the like; the security module provides narrowband numbers for the source terminal and the destination terminal, and is used as a storage module of the narrowband numbers; the transmission modules are connected through narrow-band links and used for transmitting preset key information.
The application module of the source terminal needs to provide its narrowband ID to the destination terminal, and the destination terminal needs to return its own narrowband ID and session ID to the source terminal.
The destination terminal should request to obtain its own narrowband ID and session ID from the security module (Interface B in fig. 3), and receive data marked as relevant session ID from the narrowband link through one of a callback function, API (Application Programming Interface), message, and the like.
After the source terminal receives the narrowband ID and the session ID sent by the destination terminal, the source terminal may send the encrypted transmission data and the preset key information to the security module (via interface B in fig. 3), and the security module establishes a short data message including the session ID and the preset key information. In order for the destination terminal to receive security information that the narrowband application can recognize as belonging to an interaction between the unwanted applications, a dedicated protocol may be used to identify the session ID.
The end data message of the session ID and the preset key information can be transferred to the data interface C of the terminal together with the narrowband identity of the communication terminal, so that the above messages can be transmitted over a secure narrowband link. The interface for this part of information can identify the session ID according to the set protocol to further determine the content of the message, and then pass to the data interface C. Therefore, the security module may forward the received preset critical information to the destination terminal based on the session ID.
After the source terminal and the destination terminal obtain the preset key information, the source terminal may encrypt the data to be transmitted by using the preset key information, and the destination terminal may decrypt the encrypted data by using the preset key information.
Compared with the traditional information transmission and exchange mode, the technical scheme provided by the embodiment of the invention does not need to store additional keys or process certificates and related verification work, and does not need to transmit application information through an IP link. The existing security policies and functions (e.g., authentication, key distribution and management, etc.) of the PMR can be directly multiplexed to protect the key information of the broadband side, e.g., important information transmission for protecting the subsequent broadband link, or directly transmit some key data such as user password or verification code. After preset key information is interacted through the narrow-band link, subsequent data transmission of the IP-based wide-band link can be protected through a higher and safe encryption strategy.
In another embodiment of the present invention, there is also provided a communication terminal for securely transmitting data, referring to fig. 4, the communication terminal 10 includes:
an encryption unit 101 configured to encrypt data information to be transmitted;
a broadband communication unit 102, configured to establish a broadband communication link with another communication terminal, and transmit the encrypted data information to the other communication terminal through the broadband communication link;
an obtaining unit 103, configured to obtain preset key information related to data information to be transmitted, where the preset key information can be used to decrypt encrypted data information;
a narrowband communication unit 104, configured to establish a narrowband communication link with the other communication terminal, and transmit the preset critical information to the other communication terminal through the narrowband communication link.
Optionally, the broadband communication link is further configured to obtain a narrowband number of the other communication terminal from the other communication terminal;
the narrowband communication unit is also used for establishing the narrowband communication link with the other communication terminal according to the narrowband number.
Optionally, the broadband communication unit is further configured to send the narrowband number of the communication terminal to the other communication terminal through the broadband communication link, so as to obtain the narrowband number of the other communication terminal from the other communication terminal through the broadband communication link.
Optionally, the broadband communication unit is further configured to obtain, together with the narrowband number of the other communication terminal, a session identifier of the communication terminal and the other communication terminal from the other communication terminal, where the session identifier is used to identify an application for data transmission.
In an embodiment of the present invention, another communication terminal for securely transmitting data is further provided, and referring to fig. 5, the communication terminal 20 includes:
a broadband communication unit 201, configured to establish a broadband communication link with another communication terminal, and receive encrypted data information from the other communication terminal through the broadband communication link;
a narrowband communication unit 202, configured to establish a narrowband communication link with the other communication terminal, and receive the preset critical information from the other communication terminal through the narrowband communication link; and
and the decryption unit 203 is configured to decrypt the encrypted data information through the preset key information.
Optionally, the broadband communication unit is further configured to send a narrowband number of the communication terminal to the other communication terminal through the broadband communication link, so that the other communication terminal establishes a narrowband communication link with the communication terminal according to the narrowband number.
In another embodiment of the present invention, there is further provided a multimode communication terminal for securely transmitting data, referring to fig. 6, the multimode communication terminal including:
a transceiver 30 for transceiving data information;
a memory 31 for storing a program;
and a processor 32, configured to run the program, and when the processor runs the program, implement any one of the methods for securely transmitting data provided in the embodiments of the present invention.
It should be noted that the second terminal obtains its own second narrowband number through the security module, and may store the preset key information in the security module, and may be provided with a data interface module to ensure selection and application of the data transmission link.
Meanwhile, referring to the first terminal in the embodiment, the first terminal and the second terminal are only distinguished in terms of naming, and specifically, the first terminal and the second terminal can be understood as a source terminal and a destination terminal, so that when the first terminal transmits data to the second terminal, the first terminal can encrypt the data by adopting the technical scheme provided in the embodiment of the invention, and the second terminal as the destination terminal can decrypt the data according to corresponding preset key information to obtain corresponding source data. Similarly, if the second terminal is used as a source terminal to transmit data to the first terminal, the second terminal may encrypt the data by using the scheme proposed in the embodiment of the present invention, and the first terminal may decrypt the encrypted data according to the preset key information as a destination terminal to obtain the source data. Since transmission is bidirectional during broadband transmission, functions and roles of the first terminal and the second terminal can be mutually referred to, that is, the first terminal and the second terminal both have related functions of receiving data, transmitting data, encrypting data, decrypting data and the like, and in specific applications, the functions and roles can be mutually referred to according to the descriptions in the second embodiment and the third embodiment.
Therefore, no extra key is required to be stored or certificate generation and verification are not required to be processed in the first terminal or the second terminal, and the existing security policy can be directly used for data information protection without developing an extra encryption algorithm.
In addition, the broadband transmission link can be 4G/3G or WIFI, and the narrowband transmission link can be DMR or TETRA.
To sum up, in the technical solutions of the communication terminal and the multi-mode communication terminal disclosed in the embodiments of the present invention, after the first terminal establishes a communication connection with the second terminal, a narrowband transmission link between the first terminal and the second terminal is determined, the data information to be transmitted is divided into two parts, one part is the key information and is transmitted through the narrowband transmission link, the other part is the remaining data information encrypted through the key information and is transmitted through the broadband transmission link, wherein the key information is the key or the random number and the like required for encryption, so that the security of the key is ensured by transmitting the more important information through the narrowband link with higher security, on the other hand, the transmission efficiency is ensured by transmitting the encrypted data information through the broadband link with higher transmission rate, and in the solution, a dedicated mobile network with higher traffic cost is not used for data transmission, but enables data information to have the same security as or higher security than data transmitted through a private mobile network, and thus, achieves the object of improving data transmission security performance and reducing data transmission cost.
The embodiments in the present description are described in a progressive manner, each embodiment focuses on differences from other embodiments, and the same and similar parts among the embodiments are referred to each other. The device disclosed by the embodiment corresponds to the method disclosed by the embodiment, so that the description is simple, and the relevant points can be referred to the method part for description.
The previous description of the disclosed embodiments is provided to enable any person skilled in the art to make or use the present invention. Various modifications to these embodiments will be readily apparent to those skilled in the art, and the generic principles defined herein may be applied to other embodiments without departing from the spirit or scope of the invention. Thus, the present invention is not intended to be limited to the embodiments shown herein but is to be accorded the widest scope consistent with the principles and novel features disclosed herein.

Claims (14)

1. A method for securely transmitting data, applied to a first terminal, includes:
encrypting data information to be transmitted;
establishing a broadband communication link with a second terminal;
transmitting the encrypted data information to the second terminal through the broadband communication link;
acquiring preset key information related to data information to be transmitted, wherein the preset key information can be used for decrypting encrypted data information; obtaining a narrowband number of the first terminal and sending the narrowband number of the first terminal to the second terminal through the broadband communication link so as to obtain the narrowband number of the second terminal from the second terminal through the broadband communication link; acquiring a narrowband number of the second terminal from the second terminal through the broadband communication link, and establishing the narrowband communication link with the second terminal according to the narrowband number;
and transmitting the preset key information to the second terminal through the narrow-band communication link.
2. The method of claim 1, wherein the predetermined key information comprises a key generated in an encryption process.
3. The method of claim 1, further comprising:
and the first terminal further acquires session identifiers of the first terminal and the second terminal from the second terminal together with the narrowband number of the second terminal, wherein the session identifiers are used for identifying applications for data transmission.
4. The method of claim 3, further comprising:
and transmitting the session identification and the preset key information together to the second terminal through the narrow-band communication link.
5. The method of claim 2, further comprising:
and encrypting the data information to be transmitted by adopting an asymmetric encryption algorithm, wherein the preset key information comprises an asymmetric encryption key.
6. A method for securely transmitting data, applied to a second terminal, includes:
establishing a broadband communication link with a first terminal;
receiving the encrypted data information through the broadband communication link;
when receiving the narrowband number of the first terminal, sending the narrowband number of the second terminal to the first terminal through the broadband communication link; sending the narrowband number of the second terminal to the first terminal through the broadband communication link, so that the first terminal establishes a narrowband communication link with the second terminal according to the narrowband number;
receiving preset key information from the first terminal through the narrowband communication link; and
and decrypting the encrypted data information through the preset key information.
7. The method according to claim 6, wherein the second terminal further sends a session identifier of the second terminal and the first terminal to the first terminal together with the narrowband number of the second terminal, wherein the session identifier is used for identifying an application for data transmission.
8. The method according to claim 7, wherein the second terminal obtains the narrowband number of the second terminal and the session identifier with the first terminal by accessing a preset security module.
9. The method of claim 8, wherein the preset critical information and the session identifier received from the first terminal through the narrowband communication link are sent to the preset security module and the preset security module forwards the preset critical information to a specific application based on the session identifier.
10. A communication terminal for securely transmitting data, the communication terminal comprising:
the encryption unit is used for encrypting the data information to be transmitted;
the broadband communication unit is used for establishing a broadband communication link with other communication terminals and transmitting the encrypted data information to the other communication terminals through the broadband communication link; the broadband communication link is also used for acquiring the narrowband numbers of the other communication terminals from the other communication terminals;
the device comprises an acquisition unit, a processing unit and a processing unit, wherein the acquisition unit is used for acquiring preset key information related to data information to be transmitted, and the preset key information can be used for decrypting encrypted data information;
the narrowband communication unit is used for establishing a narrowband communication link with the other communication terminal and transmitting the preset key information to the other communication terminal through the narrowband communication link; the narrowband communication unit is also used for establishing the narrowband communication link with the other communication terminal according to the narrowband number.
11. The communication terminal according to claim 10,
the broadband communication unit is further configured to send the narrowband number of the communication terminal to the other communication terminal through the broadband communication link so as to obtain the narrowband number of the other communication terminal from the other communication terminal through the broadband communication link.
12. The communication terminal according to claim 10,
the broadband communication unit is further configured to obtain, by the communication terminal, session identifiers of the communication terminal and the other communication terminals from the other communication terminals together with the narrowband numbers of the other communication terminals, where the session identifiers are used to identify applications for data transmission.
13. A communication terminal for securely transmitting data, comprising:
the broadband communication unit is used for establishing a broadband communication link with other communication terminals and receiving encrypted data information from the other communication terminals through the broadband communication link; the broadband communication unit is further configured to send a narrowband number of the communication terminal to the other communication terminal through the broadband communication link, so that the other communication terminal establishes a narrowband communication link with the communication terminal according to the narrowband number;
a narrowband communication unit for establishing a narrowband communication link with the other communication terminal and receiving preset key information from the other communication terminal through the narrowband communication link; and
and the decryption unit is used for decrypting the encrypted data information through the preset key information.
14. A multimode communication terminal for securely transmitting data, the multimode communication terminal comprising:
a transceiver for transceiving data information;
a memory for storing a program;
a processor for executing the program, the processor when executing the program implementing the method of any of claims 1-9.
CN201810150515.8A 2018-02-13 2018-02-13 Method and terminal for safely transmitting data and multimode communication terminal Active CN110166410B (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN201810150515.8A CN110166410B (en) 2018-02-13 2018-02-13 Method and terminal for safely transmitting data and multimode communication terminal

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN201810150515.8A CN110166410B (en) 2018-02-13 2018-02-13 Method and terminal for safely transmitting data and multimode communication terminal

Publications (2)

Publication Number Publication Date
CN110166410A CN110166410A (en) 2019-08-23
CN110166410B true CN110166410B (en) 2021-11-02

Family

ID=67635375

Family Applications (1)

Application Number Title Priority Date Filing Date
CN201810150515.8A Active CN110166410B (en) 2018-02-13 2018-02-13 Method and terminal for safely transmitting data and multimode communication terminal

Country Status (1)

Country Link
CN (1) CN110166410B (en)

Families Citing this family (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN112995101B (en) * 2019-12-16 2022-08-30 成都鼎桥通信技术有限公司 Service message transmission method and device
CN112584435B (en) * 2020-11-19 2023-12-26 广东沃科融合通讯有限公司 Wide-narrow-band fusion communication transmission method and device and electronic equipment
CN116233032B (en) * 2023-03-02 2023-10-20 深圳市中创鑫和科技有限公司 Broadband narrowband fusion networking system and method

Citations (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN1198868A (en) * 1995-08-16 1998-11-11 Gpt有限公司 Data delivery services
CN1249586A (en) * 1998-09-21 2000-04-05 电话通有限公司 Method and device for establishing safety connection on single data channel
CN102098672A (en) * 2011-03-16 2011-06-15 北京邮电大学 Method and system for transmitting key information, transmitting end and receiving end
KR20140087202A (en) * 2012-12-28 2014-07-09 (주)링크일렉트로닉스 Frequency of two kinds of smart phones that work with crime prevention system that utilizes wireless
CN106789919A (en) * 2016-11-25 2017-05-31 上海交通大学 A kind of self adaptation multiband Cooperative Security transmission method and device

Family Cites Families (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN102025844A (en) * 2010-12-06 2011-04-20 中兴通讯股份有限公司 Color bell business implementation method and device

Patent Citations (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN1198868A (en) * 1995-08-16 1998-11-11 Gpt有限公司 Data delivery services
CN1249586A (en) * 1998-09-21 2000-04-05 电话通有限公司 Method and device for establishing safety connection on single data channel
CN102098672A (en) * 2011-03-16 2011-06-15 北京邮电大学 Method and system for transmitting key information, transmitting end and receiving end
KR20140087202A (en) * 2012-12-28 2014-07-09 (주)링크일렉트로닉스 Frequency of two kinds of smart phones that work with crime prevention system that utilizes wireless
CN106789919A (en) * 2016-11-25 2017-05-31 上海交通大学 A kind of self adaptation multiband Cooperative Security transmission method and device

Also Published As

Publication number Publication date
CN110166410A (en) 2019-08-23

Similar Documents

Publication Publication Date Title
CN110192381B (en) Key transmission method and device
US11863541B2 (en) System and method for end-to-end secure communication in device-to-device communication networks
US8295488B2 (en) Exchange of key material
CN103166958B (en) A kind of guard method of file and system
US7689211B2 (en) Secure login method for establishing a wireless local area network connection, and wireless local area network system
CN101772024B (en) User identification method, device and system
EP2879421B1 (en) Terminal identity verification and service authentication method, system, and terminal
CN105376239A (en) Method and device for supporting mobile terminal to perform IPSec VPN message transmission
WO2015164999A1 (en) Virtual card downloading method, terminal and intermediate device
CN110166410B (en) Method and terminal for safely transmitting data and multimode communication terminal
CN101895882A (en) Data transmission method, system and device in WiMAX system
CN104244237A (en) Data transmitting and receiving method, receiving and transmitting terminal and data transmitter-receiver set
WO2015100974A1 (en) Terminal authentication method, device and system
JP2020533853A (en) Methods and equipment for managing digital certificates
KR20160123558A (en) Apparatus and method for Mobile Trusted Module based security of Short Message Service
CN109151823B (en) eSIM card authentication method and system
CN104243452A (en) Method and system for cloud computing access control
CN112187757A (en) Multilink privacy data circulation system and method
CN108353279A (en) A kind of authentication method and Verification System
CN108882233B (en) IMSI encryption method, core network and user terminal
CN100499453C (en) Method of the authentication at client end
CN115868189A (en) Method, vehicle, terminal and system for establishing vehicle safety communication
CN105471896A (en) Agent method, device and system based on SSL (Secure Sockets Layer)
US20040255121A1 (en) Method and communication terminal device for secure establishment of a communication connection
KR101979157B1 (en) Non-address network equipment and communication security system using it

Legal Events

Date Code Title Description
PB01 Publication
PB01 Publication
SE01 Entry into force of request for substantive examination
SE01 Entry into force of request for substantive examination
GR01 Patent grant
GR01 Patent grant