TWI712307B - Methods for encrypting and decrypting the group message and transporting the encrypted group message - Google Patents

Abstract

The invention related to methods for encrypting and decrypting the group message and transporting the encrypted group message. The method does not only encrypting a message under transmitted by an electronic device, but also further encrypting a public key for misunderstanding by a server to lower the chance of data leakage from the third party.

Description

Methods of encrypting and decrypting group messages and transmitting messages

The invention relates to a method of encrypting and decrypting messages and transmitting messages, in particular to a method of encrypting and decrypting group messages and transmitting messages.

With the popularity of the Internet, various instant messaging systems are widely used, such as Line, Wechat, and even social networking sites. Finally, they are developing platforms in the field of instant messaging, such as Facebook’s Messager. However, generally Most of the instant messaging system platforms are open communication platforms and cannot restrict users of the communication platform. Although the open communication platform has extremely low restrictions on users, it has a high degree of freedom for users.

Among the existing instant messaging technologies, one of them uses cloud, mobile communication devices, and push technologies to provide information exchange services within a single level of organization. In this case, the problem of official documents being overwhelmed by private documents (that is, it is not easy to find the article) Official document). Therefore, the cloud push method of instant messaging technology solves the problem of "the known person-to-person instant messaging system is not suitable for group/company use", and therefore provides "a fixed single group dynamic message to provide a single level of organization in Among them, share the message" effect. Another existing instant messaging technology uses cloud technology for computer and mobile communication devices to exchange messages, and can only provide a fixed single dynamic message, which means that the problem it faces is also "inability to distinguish between public and private uses." If you want to distinguish between public and private purposes, you need to set up different accounts or groups. For example, official documents are for Facebook at Work, and private documents are for Facebook. The technical effect of distinguishing between public and private uses is "providing a method suitable for four different situations, all with a fixed single dynamic message providing a single level of organization to share information in it".

However, the above two instant messaging system platforms are still unable to satisfy the groups with privacy needs, and cannot provide specific private dialogue messages for the groups with privacy needs, so there is still room for improvement. In view of this, an instant messaging system platform for enterprise internal use was invented. Even if the main purpose is to use instant messaging internally in the enterprise, it still fails to provide effective means of message encryption. Furthermore, for the encryption of messages in a specific encryption group, most of the existing instant messaging platforms use server-based encryption. The encryption processing performed by the server does not exclude the encryption processing role of the server, and the general encryption method is to encrypt through the server, and the client does not provide an effective encryption method, and the message will still be retrieved by interested parties during the transmission process. As a result, the internal business secrets of the enterprise were leaked by interested persons.

Based on the above-mentioned problems, the present invention provides a method for encrypting and decrypting group messages and transmitting messages. The electronic device itself provides encryption and decryption methods, and makes the server unable to identify, thereby eliminating the server and the transmission process from being outside. Leaking information further increases the security of group communication.

The main purpose of the present invention is to provide a method for encrypting and decrypting group messages and transmitting messages, which utilizes the electronic device used by the user to directly encrypt and decrypt, and make the server unable to identify, so as to improve the security of the communication process and the message itself Sex.

In order to achieve the above objective, the present invention discloses a method of transmitting messages, which is applied to a first electronic device, a second electronic device, a data server and a communication group server, the first electronic device is based on a The first account logs in the communication group server, the second electronic device logs in the communication group server according to a second account in order to receive the invitation of the first electronic device, and the first electronic device logs in according to the communication group The group server generates a first device key and a first public key corresponding to a group of data, the second electronic device generates a second device key and a second public key according to the group data, the The first electronic device generates a corresponding group key according to the group data for encrypting the first public key to correspondingly generate a first encryption key, and the first electronic device corresponds to one The first code and the previously obtained first encryption key are recorded in the data server, and the first electronic device further obtains the second public money sent from the second electronic device via the communication group server Key, the first electronic device encrypts the second public key according to the group key to generate a second encryption key, the first electronic device corresponds to a second code corresponding to the second electronic device and the The second encryption key is recorded in the data server. Based on the above conditions, the method of transmitting messages of the present invention first downloads the first encryption key to the data server by the first electronic device according to the first account number, thereby , The first electronic device generates the group key according to the first device key and the first encryption key, and then encrypts a first message according to the group key to generate a first encrypted message, and then The first electronic device uploads the first encrypted message to the communication group server according to the first account; the second electronic device downloads the second encryption key to the data server according to the second account and sends it to the The communication group server downloads the first encrypted message, and the second electronic device generates the group key according to the second device key and the second encryption key, whereby the second electronic device according to the group The key decrypts the first encrypted message to restore and display the first message on the second electronic device. That is, the second electronic device decodes the first encrypted message of the first electronic device and displays it on the On the second electronic device. In this way, the security of the communication process and the message itself is increased.

The present invention provides an embodiment, the content of which is that when the first electronic device does not read the first code, the first encryption key cannot be downloaded, and when the second electronic device does not read the second code , The second encryption key cannot be downloaded.

The present invention provides an embodiment. The content of the method of the present invention is that the second electronic device responds to the first message, so a second message is generated based on the first message, and the second electronic device is connected to The group key encrypts the second message to generate a second encrypted message, whereby the second electronic device uploads the second encrypted message to the communication group server according to the second account; continue, the first An electronic device downloads the second encrypted message from the communication group server, and then the first electronic device decrypts the second encrypted message according to the group key to restore the second encrypted message in the first electronic device message.

The present invention provides an embodiment wherein the first electronic device generates the first device key and the first public key according to an asymmetric cryptographic algorithm, and the second electronic device generates the first device key and the first public key according to the asymmetric cryptographic algorithm Generate the second device key and the second encryption key.

The present invention provides an embodiment, the content of which is that the method for transmitting a message further includes the step of transferring the first device key and the first public key to a third electronic device, which first uses the first electronic device according to the The encryption group obtains a first barcode and temporarily stores the first device key and the first public key corresponding to the encryption group on the server, and then the third electronic device obtains an authorization according to the first barcode Information, and then the third electronic device downloads and restores the first device key and the first public key from the server according to the authorization information, and then the third electronic device joins the encryption group according to the encryption group Encrypt the first public key to generate the first encryption key and record the third electronic device and the first encryption key on the server, thus completing the transfer of the first device key and the first public key The key to the third electronic device.

The present invention provides an embodiment, the content of which is that the first electronic device obtains a first barcode according to the communication group server and temporarily stores the first device key and the first public key in the data server In this case, the first electronic device encrypts the first device key and the first public key to generate a first encrypted data, which is temporarily stored in the data server.

The present invention provides an embodiment, the content of which is that the method of transmitting a message further includes the step of transferring the second device key and the second public key to the fourth electronic device, which first uses the second electronic device according to the The encryption group obtains a second barcode and temporarily stores the first device key and the first public key corresponding to the encryption group on the server, and then the fourth electronic device obtains an authorization according to the second barcode Information, and then the fourth electronic device downloads and restores the second device key and the second public key from the server according to the authorization information, and then the fourth electronic device joins the encryption group according to the encryption group Encrypt the second public key to generate the second encryption key and record the fourth electronic device and the second encryption key in the server.

The present invention provides an embodiment in which the content of the second electronic device obtains a second barcode according to the communication group server and temporarily stores the second device key and the second public key in the data server In the step, the second electronic device encrypts the second device key and the second public key to generate a second encrypted data, which is temporarily stored in the data server.

The present invention provides an embodiment, the content of which is that the communication group server and the data server are the same server.

In order to achieve the above objective, the present invention also discloses a method for encrypting group messages, which is applied to an electronic device to store an encryption key to a data server according to an account, the encryption key corresponding to a device of the electronic device In the method of encrypting group messages of the present invention, the electronic device downloads the encryption key according to the account number, and then the electronic device decrypts the encryption key according to the device key to generate a group key. Then the electronic device encrypts a message according to the group key to generate an encrypted message. In this way, the reliability of encrypted messages is improved.

The present invention provides another embodiment, the content of which is that in the step of decrypting according to a device key and the encryption key, the electronic device further decrypts according to an asymmetric cryptographic algorithm to generate the group key.

The present invention provides another embodiment, the content of which is that in the step of decrypting according to a device key and the encryption key, the encrypted message is further generated according to an Advanced Encryption Standard (AES) algorithm.

In order to achieve the above objective, the present invention also discloses a method for decrypting group messages, which is applied to an electronic device to store an encryption key to a data server according to an account, and the encryption key corresponds to a device of the electronic device In the method of decrypting group messages of the present invention, the electronic device downloads the encryption key according to the account number, and then the electronic device decrypts the encryption key according to the device key to generate a group key; The electronic device decrypts an encrypted message according to the group key to generate a decrypted message. In this way, the security of group messages is improved.

The present invention provides another embodiment, the content of which is that in the step of decrypting according to a device key and the encryption key, the electronic device further decrypts according to an asymmetric cryptographic algorithm to generate the group key.

The present invention provides another embodiment, the content of which is that in the step of generating and displaying a decrypted message based on the group key and an encrypted message, the encrypted message is further generated based on an Advanced Encryption Standard (AES) algorithm.

In order to enable your reviewer to have a further understanding and understanding of the features of the present invention and the effects achieved, the following examples and accompanying descriptions are provided. The description is as follows:

In view of the influence of conventional positioning technology on reliability, the present invention proposes a method for encrypting and decrypting group messages and transmitting messages to solve the problem of message reliability caused by conventional technologies.

In the following, the features included in the method of encrypting and decrypting group messages and transmitting messages of the present invention, the structure and the method thereof will be further described:

First, please refer to FIG. 1A, which is a flowchart of an embodiment of the present invention. As shown in the figure, a method of transmitting a message of the present invention includes the following steps:

Step S10: The first electronic device downloads the first encryption key to the data server according to the first account;

Step S20: The first electronic device decrypts the first encryption key according to the first device key to obtain the group key;

Step S30: The first electronic device encrypts the first message according to the group key to generate the first encrypted message;

Step S40: The first electronic device uploads the first encrypted message to the communication group server according to the first account;

Step S50: The second electronic device downloads the second encryption key from the data server according to the second account and downloads the first encrypted message to the communication group server;

Step S60: The second electronic device decrypts the second encryption key according to the second device key to obtain the group key;

Step S70: The second electronic device decrypts the first encrypted message according to the group key to restore the first message in the second electronic device.

Please also refer to FIGS. 2 to 4B, which are schematic diagrams of a system according to an embodiment of the present invention. As shown in the figure, the group system 1 used in the method of transmitting messages of the present invention includes a data server 10, a first electronic device 20, a second electronic device 30, and a communication group server 40. This embodiment In an example, the first electronic device 20 logs in to the communication group server 40 according to a first account A1, the first account A1 of the first electronic device 20 is in the communication group server 40, and the first account A1 is a communication group In 40A, as a manager, the first electronic device 20 invites the second electronic device 30 to log in to the communication group server according to a second account A2, and the first account A1 communicates with one of the communication group servers 40 Group G1 serves as the manager.

Following the above, the first electronic device 20 generates a first device key 22 and a first public key 24 according to the group data GD1 of the communication group G1, and the second electronic device 30 generates a first device key 22 and a first public key 24 according to the group data GD1. Two device keys 32 and a second public key 34. Therefore, the first electronic device 20 encrypts the first public key 22 according to a group key keyg corresponding to the group data GD1 to generate a first encryption key Key1 And the first electronic device 20 obtains the second public key 34 of the second electronic device 30 through the communication group server 40, that is, the second electronic device 30 transmits to the first electronic device 20 through the communication group server 40, The first electronic device 20 encrypts the second public key 34 according to the group key keyg to generate a second encryption key Key2, where the group data GD1 corresponds to the communication group 40A of the group communication server 40, so The key described in this embodiment is the application communication group 40A and cannot be used in other groups to enhance security. Both the first encryption key Key1 and the second encryption key Key2 correspond to the group key keyg.

Furthermore, in this embodiment, data storage and group broadcast messages are executed on different servers, that is, the data server 10 and the group communication server 40 are distinguished. Therefore, there are a data server 10 and a communication group server 40. . The data server 10 stores a first encryption key Key1 and a second encryption key Key2. The first encryption key key1 and the second encryption key key2 are respectively connected to a first code device1 and a second code device2, and the first code device1 and the second code device2 are codes corresponding to the first electronic device 20 and the second electronic device 30, so they are uploaded to the data server 10 through the first electronic device 20, and the data server 10 records the corresponding codes of the first electronic device 30 The first code device1 and the first encryption key key1, and the data server 10 record the second code device2 and the second encryption key key2 corresponding to the second electronic device 30. The first device key 22 and the first public key 24 are generated by the first electronic device 20 according to an asymmetric encryption algorithm, and the second device key 32 and the second public key 34 are the second electronic device 30 is generated according to the asymmetric encryption algorithm, such as the RSA encryption algorithm, so the first device key 22 is matched to the first public key 24, and the second device key 32 is matched to the second public key 34.

In step S10, as shown in FIG. 4, the first account A1 of the first electronic device 20 submits a data download request in the communication group server 40 to download the first encrypted money previously stored in the data server 10 The data server 10 provides the first electronic device 20 to download the first encryption key key1 in the internal storage space of the first electronic device 20 according to the first code device1. In step S20, as shown in Figure 4, the first electronic device 20 decrypts the first encryption key Key1, so that the first electronic device 20 obtains the group key keyg corresponding to the communication group 40A, and then in step In S30, the first electronic device 20 encrypts a first message M1 to be sent by the first electronic device 20 according to the group key keyg, thereby generating a first encrypted message M12.

In step S40, as shown in FIG. 4, the first electronic device 20 uploads the first encrypted message M12 to the communication group 40A. In step S50, as shown in Figure 5, the second electronic device 30 makes a data download request to the data server 10 for the second encryption key key2, so that the data server 10 downloads the second encryption according to the second code device2 Key2, while allowing the second electronic device 30 to download the first encrypted message M12 from the communication group 40A, and then in step S60, the second electronic device 30 decrypts according to the second device key 32 and the second encryption key key2 Therefore, the group key keyg corresponding to the communication group 40A is obtained, and the second electronic device 30 uses the group key keyg to decrypt the encrypted message M12 in step S70 to restore the first encrypted message M12 to the first message M1 is in the second electronic device 30, so that the second electronic device 30 can display the first message M1 instead of displaying the first encrypted message M12.

It can be seen from the above that the message transmission method of the present invention allows the server to no longer interpret or recognize the message sent by the first electronic device 20 to the second electronic device 30, thereby avoiding the leakage of information by a third party. In order to transmit encrypted messages, the reliability of message transmission is further improved.

As shown in FIG. 1B, the method of transmitting messages of the present invention can be applied to the transmission process of the reply message of the second electronic device 30. Therefore, according to node A, the steps of the method of the present invention are further continued to step S150, that is, The method of transmitting messages of the present invention further includes:

Step S80: The second electronic device generates a second message according to the first message;

Step S90: The second electronic device encrypts the second message according to the second device key and the second encryption key to generate a second encrypted message;

Step S100: The second electronic device uploads the second encrypted message to the communication group server according to the second account;

Step S110: the first electronic device downloads the second encrypted message from the communication group server; and

Step S120: The first electronic device decrypts the second encrypted message according to the first device key and the first encryption key to restore the second message in the first electronic device.

In step S110, the second electronic device 30 generates a corresponding reply message according to the first message M1, that is, correspondingly generates a second message M2. Then, in step S120, the second electronic device 30 generates a corresponding response message according to the second device key 32 The second message M2 is encrypted with the group key keyg generated by the decryption of the second encryption key key2, wherein the second electronic device 30 can download the second encryption key key2 again from the data server 10, and again Perform decryption of the second encryption key key2 to obtain the group key keyg, and encrypt the second message M2 to generate the corresponding second encrypted message M22, or the second electronic device to 30 according to the second device gold The key 32 directly uses the second encryption key key2 downloaded in the previous step S70 for decryption to obtain the group key keyg, and then encrypt the second message M2.

Then in step S130, the second electronic device 30 uploads the second encrypted message M22 to the communication group 40A of the communication group server 40, so that the first electronic device 20 is connected in step S140, from the communication group server The device 40 downloads the second encrypted message M22 to the internal storage space of the device. Next, in step S150, the first electronic device 20 decrypts the second encrypted message M22 according to the group key keyg generated by the decryption of the first device key 22 and the first encryption key key1 to restore it to the first The second message M2, where the first electronic device 20 can download the first encryption key key1 again from the data server 10, and perform the decryption of the first encryption key key1 again to obtain the group key keyg, and the second The encrypted message M22 is encrypted to restore the corresponding second message M2, or the first electronic device 20 directly uses the first encryption key key1 downloaded in the previous step S20 for decryption according to the first device key 22, to Obtain the group key keyg, and then decrypt the second encrypted message M22.

Please refer to Figure 6, which is a flowchart of the encrypted group message of the present invention. As shown in the figure, the method for encrypting group messages of the present invention includes the following steps:

Step S210: the electronic device downloads the encryption key stored in the server;

Step S220: Decrypt according to the device key and the encryption key to obtain the group key;

Step S230: Generate an encrypted message according to the group key and the group message, and send it to an encrypted group.

Referring again to Figure 4A, when the first electronic device 20 wants to encrypt the first message M1, it needs to download the first encryption key key1 that was originally uploaded to the data server 10 or the multifunction server 50, because the first encryption key key1 It is not encrypted by the data server 10 or the multifunction server 50. Therefore, the data server 10 or the multifunction server 50 cannot decrypt the first encryption key key1, and can only be used by the first electronic device 20 to decrypt the first encryption key key1 is decrypted. Therefore, in step S220, the first electronic device 20 performs decryption to obtain the group key keyg corresponding to the encrypted group 40. In step S230, the first electronic device 20 is based on the group key keyg The group message (ie, the first message M1) is encrypted to generate the corresponding first encrypted message M12, which is uploaded to the corresponding encrypted group.

In the above embodiment, the first electronic device 20 sends a group message to the encrypted group. If the second electronic device 30 sends a group message to the encrypted group, the above steps S210 to S230 are also followed.

Please refer to Figure 7, which is a flow chart of decrypting group messages of the present invention. As shown in the figure, the method for decrypting group messages of the present invention includes the following steps:

Step S310: An electronic device downloads an encryption key stored in a server;

Step S320: Decrypt according to a device key and the encryption key to obtain a group key;

Step S330: Generate a decrypted message based on the group key and an encrypted message and display it on the electronic device.

Referring again to Figure 4B, when the second electronic device 30 wants to decrypt the first encrypted message M12, it needs to download the second encryption key key2 originally uploaded to the data server 10, because the second encryption key key2 is not from the data server 10 or the multi-function server 50, so the data server 10 cannot decrypt the second encryption key key2, and only the second electronic device 30 can decrypt the second encryption key key2. Therefore, in step S220, The second electronic device 30 decrypts to generate the group key keyg corresponding to the encrypted group. In step S230, the second electronic device 30 decrypts the first encrypted message M12 according to the group key keyg, and restores The corresponding first message M1 (ie, group message) is formed, so that the second electronic device 30 can display the first message M1 instead of displaying the encrypted first encrypted message M12.

In the above embodiment, the second electronic device 30 wants to restore the encrypted message of the encrypted group. If the first electronic device 20 wants to restore the encrypted message of the encrypted group, the steps S310 to S330 are also followed.

In addition, when the first electronic device 20 and the second electronic device 30 are not registered in the key list 12, the first electronic device 20 and the second electronic device 30 cannot encrypt the sent group message or cannot decrypt the encrypted message. Therefore, when the first electronic device 20 and the second electronic device 30 are not registered in the key list 12, it is displayed that the messages in the encrypted group are all encrypted group messages and are displayed as unrecognizable garbled codes.

The following embodiment is to further illustrate that the communication group server 40 and the data server 10 are combined to form a multifunctional server 50, and the first electronic device 20 and the second electronic device 30 use the first account A1 and the second account A2 to log in to the multiple In the function server, the user of the first electronic device 20 replaces the electronic device to rejoin the encryption group 50A, and re-holds the description of the key related to the first electronic device 20.

Please refer to FIG. 8A and FIG. 8B, which are the flowcharts of replacing the first electronic device to the third electronic device of the present invention. As shown in the figure, the method of transmitting messages of the present invention further includes a step flow of replacing the first electronic device, and the steps include:

Step S410: The first electronic device downloads the first encryption key to the data server according to the first account;

Step S420: The first electronic device decrypts the first encryption key according to the first device key to obtain the group key;

Step S430: The first electronic device encrypts the first message according to the group key to generate the first encrypted message;

Step S440: The first electronic device uploads the first encrypted message to the communication group server according to the first account;

Step S450: The second electronic device downloads the second encryption key from the data server according to the second account and downloads the first encrypted message to the communication group server;

Step S460: The second electronic device decrypts the second encryption key according to the second device key to obtain the group key;

Step S470: The second electronic device decrypts the encrypted message according to the group key to restore the first message on the second electronic device;

Step S480: The second electronic device generates a second message according to the first message;

Step S490: The second electronic device encrypts the second message according to the group key obtained from the second device key and the second encryption key to generate a second encrypted message;

Step S500: The second electronic device uploads the second encrypted message to the communication group server according to the second account;

Step S510: The first electronic device downloads the second encrypted message from the communication group server;

Step S520: The first electronic device decrypts the second encrypted message according to the group key obtained by the first device key and the first encryption key to restore the second message in the first electronic device;

Step S530: The first electronic device obtains the first barcode according to the encryption group and temporarily stores the first device key and the first public key corresponding to the encryption group in the server;

Step S540: The third electronic device obtains authorization information according to the first barcode and joins the encryption group;

Step S550: The third electronic device downloads and restores the first device key and the first public key from the server according to the authorization information; and

Step S560: The third electronic device encrypts the first public key according to the encryption group to generate a first encryption key and records the third electronic device and the first encryption key on the server.

Please also refer to FIGS. 9 to 12, which are system diagrams of another embodiment of the present invention. The difference between FIGS. 2 to 4B and FIGS. 9 to 12 is that FIGS. 9 to 12 further include a third electronic device 60.

Steps S410 to S520 have been disclosed in steps S10 to S120 of the above-mentioned embodiment, so they will not be repeated. Since the first electronic device 20 sends the first encrypted message M12, the user of the first electronic device 20 will The third electronic device 60 is replaced by the third electronic device 60. Therefore, in step S530, as shown in FIG. 9, the first electronic device 10 obtains a first barcode QR1 for transfer from the encryption group 50A, and the first electronic device 20 will temporarily store the first device key 22 and the first public key 24 for encryption and decryption to the multi-function server 50, where the first electronic device 20 is to further compare the first device key 22 and the first public key 24 Encryption is performed to generate a corresponding first encrypted data D1, so that the multifunction server 50 will not recognize the first device key 22 and the first public key 24, thereby avoiding the problem of server-side leakage.

In step S540, as shown in FIG. 15, the third electronic device 60 reads the first barcode QR1, for example: using the built-in camera to capture the image of the first barcode QR1, thereby obtaining temporary third device gold The key 62 and the third public key 64 are added to the encryption group 50A, so the third public key 64 is encrypted to generate a third encryption key key3 and upload it to the key list 12, which is to temporarily authorize the third electronic The device 60 uses encryption and decryption corresponding to the encryption group 50A; in step S550, as shown in Figure 16, the third electronic device 60 downloads the temporarily stored first encrypted data D1 from the multifunction server 50, and the third electronic device The device 60 decrypts the first encrypted data D1 to restore the first device key 22 and the first public key 24 in the third electronic device 60, and then in step S560, the unlocked first public key The key 24 is encrypted, so that the first encryption key key1 corresponding to the third electronic device 60 is generated and uploaded to the key list 12 of the multifunction server 50. In this way, in the key list 12, the first encryption key key1 is changed to correspond to the third electronic device 60, where the third electronic device 60 replaces the first electronic device 20 as the manager of the encryption group 50A, so step In S560, the third electronic device 60 has obtained a complete asymmetric encryption key of the first device key 22 and the first public key 24, so the encryption process can be directly performed.

Please refer to FIG. 13A and FIG. 13B, which are flowcharts of replacing the second electronic device to the fourth electronic device. As shown in the figure, the method of transmitting messages of the present invention further includes a step flow of replacing the second electronic device, and the steps include:

Step S610: The first electronic device downloads the first encryption key to the data server according to the first account;

Step S620: The first electronic device decrypts the first encryption key according to the first device key to obtain the group key;

Step S630: The first electronic device encrypts the first message according to the group key to generate the first encrypted message;

Step S640: The first electronic device uploads the first encrypted message to the communication group server according to the first account;

Step S650: The second electronic device downloads the second encryption key from the data server according to the second account and downloads the first encrypted message to the communication group server;

Step S660: The second electronic device decrypts the second encryption key according to the second device key to obtain the group key;

Step S670: The second electronic device decrypts the encrypted message according to the group key to restore the first message on the second electronic device

Step S680: The second electronic device generates a second message according to the first message;

Step 690: The second electronic device encrypts the second message according to the group key obtained from the second device key and the second encryption key to generate a second encrypted message;

Step S700: The second electronic device uploads the second encrypted message to the communication group server according to the second account;

Step S710: The first electronic device downloads the second encrypted message from the communication group server;

Step S720: The first electronic device decrypts the second encrypted message according to the group key obtained from the first device key and the first encryption key to restore the second message in the first electronic device;

Step S730: The second electronic device obtains the second barcode according to the encryption group and temporarily stores the second device key and the second public key corresponding to the encryption group in the server;

Step S740: The fourth electronic device obtains authorization information according to the second barcode and joins the encryption group;

Step S750: The fourth electronic device downloads and restores the second device key and the second public key from the server according to the authorization information; and

Step S760: The fourth electronic device encrypts the second public key according to the encryption group to generate a second encryption key and records the fourth electronic device and the second encryption key on the server.

Please refer to FIG. 14 to FIG. 17 together, which are schematic diagrams of a system according to another embodiment of the present invention. The difference between Figures 9 to 12 and Figures 14 to 17 is that Figures 9 to 12 replace the first electronic device 20 with the third electronic device 60, and Figures 14 to 17 replace the second electronic device. The device 30 is a fourth electronic device 70.

Steps S610 to S720 have been disclosed in steps S10 to S120 of the above-mentioned embodiment, so they will not be repeated. Since the second electronic device 30 decrypts the first encrypted message M12 and displays it, the use of the second electronic device 30 The user will be replaced with the fourth electronic device 70. Therefore, in step S730, the second electronic device 30 obtains a second barcode QR2 for transfer from the encryption group 50A, and the second electronic device 30 will temporarily store it The second device key 32 and the second public key 34 for encryption and decryption are sent to the multifunction server 50, wherein the second electronic device 30 further encrypts the second device key 32 and the second public key 34, thereby generating Corresponding to a second encrypted data D2, so that the multi-function server 50 will not recognize the second device key 32 and the second public key 34, thereby avoiding the problem of server-side leakage.

In step S740, the fourth electronic device 70 reads the second barcode QR2, for example: using a built-in camera to capture the image of the second barcode QR2, thereby obtaining the temporary fourth device key 72 and the fourth public money The key 74 is added to the encryption group 50A, so the fourth public key 74 is encrypted and uploaded to the key list 12, that is, the fourth electronic device 70 is temporarily authorized to use the encryption and decryption corresponding to the encryption group 50A; proceed to step S750 The fourth electronic device 70 downloads the temporarily stored second encrypted data D2 from the multifunction server 50, and the fourth electronic device 70 decrypts the second encrypted data D2 to recover the second device key 32 and the second public The key 34 is stored in the fourth electronic device 70, and then in step S760, the unlocked second public key 34 is encrypted, thereby generating a second encryption key key2 corresponding to the fourth electronic device 70 and uploading it to The key list 12 of the function server 50. In this way, in the key list 12, the second encryption key key2 is changed to correspond to the fourth electronic device 70. Since the second electronic device 30 itself is not the manager of the encryption group 50A, the fourth electronic device 70 replaces the first After the second electronic device 30 joins the encryption group 50A, the fourth electronic device 70 still needs to be encrypted by the first electronic device 20 when the second public key 34 is encrypted into the second encryption key key2.

In summary, the method of encrypting and decrypting group messages and transmitting messages of the present invention is based on the fact that after the electronic device enters the encryption group, the group manager receives the public key from other electronic devices and encrypts it for The server creates a list of corresponding keys, so that the server cannot read or recognize the public key, so that the electronic device only encrypts and decrypts the group information. Furthermore, the electronic device can be encrypted by the encryption principle of the present invention to be applied to the user to replace the electronic device.

Therefore, the present invention is really novel, progressive, and available for industrial use. It should meet the patent application requirements of my country's patent law. Undoubtedly, I filed an invention patent application in accordance with the law. I pray that the Bureau will grant the patent as soon as possible.

However, the above are only the preferred embodiments of the present invention, and are not used to limit the scope of implementation of the present invention. For example, the shapes, structures, features and spirits described in the scope of the patent application of the present invention are equally changed and modified. , Should be included in the scope of patent application of the present invention.

1: Group system 2: Group system 10: Data server 12: Key list 20: The first electronic device 22: The first device key 24: The first public key 30: second electronic device 32: The second device key 34: The second public key 40: Communication group server 40A: Encrypted group 50: Multi-function server 50A: Encrypted group 60: third electronic device 62: third device key 64: Third public key 70: The fourth electronic device 72: The fourth device key 74: The fourth public key D1: The first encrypted data D2: The second encrypted data device1: first code device2: second code key1: the first encryption key key2: the second encryption key keyg: group key M1: First message M12: The first encrypted message M2: Second message M22: Second encrypted message QR1: The first barcode QR2: The second barcode S10-S120: steps S210-S230: steps S310-S330: steps S410-S560: steps S610-S760: steps

Figure 1A: It is a partial flowchart of an embodiment of the present invention; Figure 1B: It is a partial flowchart of an embodiment of the present invention; Figure 2: It is a system diagram of the first encryption key in an embodiment of the present invention; Figure 3: It is a schematic diagram of the system of the second encryption key according to an embodiment of the present invention; Figure 4A: It is a schematic diagram of a system for encrypting messages with a first electronic device according to an embodiment of the present invention; Figure 4B: It is a schematic diagram of a system for decrypting messages by a second electronic device according to an embodiment of the present invention; Figure 5A: It is a schematic diagram of a system for encrypting messages with a second electronic device according to an embodiment of the present invention; Figure 5B: It is a schematic diagram of a system for decrypting messages by the first electronic device according to an embodiment of the present invention; Figure 6: It is a flowchart of the encrypted group message of the present invention; Figure 7: It is a flow chart of decrypting group messages of the present invention; Figure 8A: It is a partial flowchart of the replacement of the first electronic device to the third electronic device of the present invention; Figure 8B: It is a partial flowchart of the replacement of the first electronic device to the third electronic device of the present invention; Figure 9: It is a system diagram of the first encryption key in an embodiment of the present invention; Figure 10: It is a schematic diagram of a second encryption key system according to an embodiment of the present invention; Figure 11: It is a schematic diagram of an encrypted message system according to an embodiment of the present invention; Figure 12: It is a schematic diagram of a system for decrypting messages according to an embodiment of the present invention; Figure 13A: It is a partial flowchart of the replacement of the second electronic device to the fourth electronic device of the present invention; Figure 13B: It is a partial flowchart of the replacement of the second electronic device to the fourth electronic device of the present invention; Figure 14: It is a system diagram of the first encryption key according to an embodiment of the present invention; Figure 15: It is a schematic diagram of a second encryption key system according to an embodiment of the present invention; Figure 16: It is a schematic diagram of an encrypted message system according to an embodiment of the present invention; and Figure 17: It is a schematic diagram of a system for decrypting messages according to an embodiment of the present invention.

S10-S120: steps

Claims (15)

A method for transmitting information, which is applied to a first electronic device, a second electronic device, a data server and a communication group server, the first electronic device logs in the communication group server according to a first account The first electronic device invites the second electronic device to log in to the communication group server according to a second account, and the first electronic device generates a first device gold according to a group data corresponding to the communication group server Key and a first public key, the second electronic device generates a second device key and a second public key according to the group data, and the first electronic device generates a group gold corresponding to the group data Key, the first electronic device encrypts the first public key according to the group key to generate a first encryption key and records a first code corresponding to the first electronic device and the first encryption key in The data server, the second electronic device transmits the second public key to the first electronic device via the communication group server, and the first electronic device encrypts the second public key according to the group key, To generate a second encryption key and record a second code corresponding to the second electronic device and the second encryption key in the data server, the method steps include: the first electronic device according to the first account Download the first encryption key to the data server; the first electronic device decrypts the first encryption key according to the first device key to obtain the group key; the first electronic device according to the group The key encrypts a first message to generate a first encrypted message; the first electronic device uploads the first encrypted message to the communication group server according to the first account; the second electronic device according to the second account Download the second encryption key from the data server and download the first encrypted message to the communication group server; the second electronic device decrypts the second encryption key according to the second device key to obtain the Group key; and The second electronic device decrypts the first encrypted message according to the group key to restore the first message in the second electronic device. For example, the method for transmitting messages described in the first item of the scope of patent application, wherein when the first electronic device does not read the first code, the first encryption key cannot be downloaded, and when the second electronic device has not read When the second code is obtained, the second encryption key cannot be downloaded. For example, the method for transmitting a message described in claim 1 further includes: the second electronic device generates a second message according to the first message; the second electronic device encrypts the second message according to the group key , To generate a second encrypted message; the second electronic device uploads the second encrypted message to the communication group server according to the second account; the first electronic device downloads the second encrypted message from the communication group server Message; and the first electronic device decrypts the second encrypted message according to the group key to restore the second message in the first electronic device. According to the method for transmitting messages described in claim 1, wherein the first electronic device further generates the first device key and the first public key according to an asymmetric cryptographic algorithm, and the second electronic device The second device key and the second public key are generated according to the asymmetric cryptographic algorithm. For example, the method for transmitting messages described in the scope of the patent application further includes: the first electronic device obtains a first barcode according to the communication group server and temporarily stores the first device key and the first public fund Key to the data server; a third electronic device obtains authorization information according to the first barcode and logs in to the communication group server according to the first account; the third electronic device downloads from the data server according to the authorization information And restore the first device key and the first public key; and the third electronic device encrypts the first public key to generate the first encryption key and record the third electronic device and the first public key The encryption key is on the data server. Such as the method for transmitting messages described in item 5 of the scope of patent application, wherein the first electronic device obtains a first barcode according to the communication group server and temporarily stores the first device key and the first public key In the step of the data server, the first electronic device encrypts the first device key and the first public key to generate a first encrypted data, which is temporarily stored in the data server. For example, the method for transmitting messages described in the first item of the scope of patent application further includes: the second electronic device obtains a second barcode according to the communication group server and temporarily stores the second device key and the second public fund Key to the data server; a fourth electronic device obtains authorization information according to the second barcode and logs in to the communication group server according to the second account; the fourth electronic device downloads from the data server according to the authorization information And restore the second device key and the second public key; and the fourth electronic device encrypts the second public key to generate the second encryption key and record the fourth electronic device and the second encryption The key is on the data server. For example, the method for transmitting messages as described in item 7 of the scope of patent application, wherein the second electronic device obtains a second barcode according to the communication group server and temporarily stores the second device key and the second public key In the step of the data server, the second electronic device encrypts the second device key and the second public key to generate a second encrypted data, which is temporarily stored in the data server. Such as the method of transmitting messages described in the first item of the patent application, wherein the communication group server and the data server are the same server. A method for encrypting group messages is applied to an electronic device storing an encryption key to a data server according to an account, the electronic device encrypting a public key according to a group key to generate the encryption key, and the encryption The key corresponds to the group key, and the public key is matched with a device key of the electronic device. The steps of the method include: the electronic device downloads the encryption key according to the account; The electronic device decrypts the encryption key according to the device key to obtain the group key; and the electronic device encrypts a message according to the group key to generate an encrypted message. For example, in the method for encrypting group messages described in claim 10, in the step of decrypting the encryption key by the electronic device according to the device key, the electronic device further according to an asymmetric cryptographic algorithm Perform decryption to generate the group key. For example, the method for encrypting a group message described in item 10 of the scope of patent application, wherein in the step of generating an encrypted message by the electronic device encrypting a message according to the group key, an advanced encryption standard ( AES) algorithm generates the encrypted message. A method for decrypting group messages is applied to an electronic device storing an encryption key to a data server according to an account, the electronic device encrypting the public key according to the group key to generate the encryption key, and the encryption The key corresponds to the group key, and the public key is matched to a device key of the electronic device. The steps of the method include: the electronic device downloads the encryption key according to the account; and the electronic device according to the device key The key decrypts the encryption key to obtain the group key; and the electronic device decrypts an encrypted message according to the group key to restore the group message. For example, the method for decrypting group messages described in claim 13, wherein in the step of decrypting the electronic device according to the device key and the encryption key, the electronic device further according to an asymmetric cryptographic algorithm Perform decryption to generate the group key. For example, the method for decrypting group messages described in item 13 of the scope of patent application, in which the electronic device generates a group message according to the group key and an encrypted message in the step of the electronic device, further according to an advanced The encryption standard (AES) algorithm generates the decrypted message.

Images