WO2012129928A1

WO2012129928A1 - Method, system and apparatus for secure transmission of media message

Info

Publication number: WO2012129928A1
Application number: PCT/CN2011/083611
Authority: WO
Inventors: 卢艳; 丁欣; 陈军
Original assignee: 中兴通讯股份有限公司
Priority date: 2011-03-31
Filing date: 2011-12-07
Publication date: 2012-10-04
Also published as: CN102739604A; CN102739604B

Abstract

Disclosed in the present invention are a method, system and apparatus for secure transmission media message. The method comprises the steps: a server generates a message corresponding to the media message, uses secret keys to encrypt the media message and the message respectively and obtain first and second encrypted information, and encrypt the secret key to obtain third encrypted information, and transmits the second and the third encrypted information. The receiver receives the second and the third encrypted information, and decrypts the third encrypted information with a private key to obtain the secret key, and then decrypts the second encrypted information with the secret key to obtain the message. The receiver accesses the server according to the message, and obtains the first encrypted information, then decrypts the first encrypted information with the secret key to obtain the media information. The method and the system of this invention can ensure the transmission of the media information in security.

Description

Method, system and device for secure transmission of media messages

Technical field

The present invention relates to the field of communications, and in particular, to a method, system and apparatus for secure transmission of media messages.

Background technique

Nowadays, multimedia messaging services, such as MMS, (mobile) email, and instant messaging services, have become more widely used. Some service systems, such as MMS, voicemail, instant messaging, etc., before the server sends the media message to the receiver, the server usually sends a notification message of the multimedia message to the receiver through other communication channels, such as the PUSH route. After receiving the notification message, the media message is received by the server according to the communication situation.

Figure 1 illustrates the flow of the server sending media information to the recipient:

1) The sender sends a media message M to the server;

2) The server generates a media message M corresponding message S, such as a notification message, sends a message S through the service system 2 to the receiver;

2) The receiver accesses the server according to the message S and obtains the media content M. The above solution brings a convenient and fast user experience to the user, and at the same time brings a series of security transmission problems. In the above communication process, if a false alarm occurs, the notification message and the media message may be read by an illegal recipient, thereby causing the sender's information to leak.

Summary of the invention

The technical problem to be solved by the present invention is to provide a method, system and device for secure transmission of media messages to solve the problem of sender information leakage in case of a false alarm.

To solve the above technical problem, the present invention provides a method for secure transmission of media messages, including:

The server generates a message corresponding to the media message, using the key pair to the media message and the The message corresponding to the media message is respectively encrypted to obtain the first encrypted information and the second encrypted information, and the key is encrypted to obtain the third encrypted information, and the second encrypted information and the third encrypted information are sent; Decrypting the third encrypted information with the recipient private key to obtain the key, and decrypting the second encrypted information by using the key to obtain the media and the second encrypted information The message corresponding to the message;

The receiving party accesses the server according to the message corresponding to the media message, acquires the first encrypted information, and decrypts the first encrypted information by using the key to obtain the media message.

The above method can also have the following characteristics:

The step of the server encrypting the key to obtain the third encrypted information comprises: the server encrypting the key with the recipient public key to obtain the third encrypted information.

The above method can also have the following characteristics:

The message corresponding to the media message is generated by the server based on the transport layer information and/or the media message content.

The above method can also have the following characteristics:

The symmetric encryption algorithm for encrypting or decrypting the media message, the first encrypted information, the message corresponding to the media message, or the second encrypted information by the server and the receiver is pre-negotiated by the server and the receiver, or The server or receiver temporarily notifies the other party;

The asymmetric encryption algorithm for encrypting or decrypting the key or the third encrypted information by the server and the recipient is pre-negotiated by the server and the recipient.

The invention also provides a system for secure transmission of media messages, comprising:

a message generating module of the server, configured to: generate a message corresponding to the media message; the encryption module of the server is configured to: encrypt the media message and the message corresponding to the media message by using a key respectively Encrypting the information and encrypting the key to obtain the third encrypted information;

a sending module of the server, configured to: send the second encrypted information and the third encrypted information;

a receiving module of the receiver, configured to: receive the second encrypted information and the third encryption Information

a decryption module of the receiver, configured to: decrypt the third encrypted information by using a recipient private key to obtain the key, and decrypt the second encrypted information by using the key to obtain the corresponding to the media message And decrypting the first encrypted information using the key to obtain the media message;

The access module of the receiver is configured to: access the server according to the message corresponding to the media message, and acquire the first encrypted information.

The above system can also have the following characteristics:

The encryption module of the server is configured to encrypt the key with the recipient public key to obtain the third encrypted information.

The above system can also have the following characteristics:

a symmetric encryption algorithm for encrypting or decrypting the media message, the first encrypted information, the message corresponding to the media message, or the second encrypted information by the encryption module or the decryption module of the server and the receiver is the server and the receiver in advance Negotiated, or, temporarily notified to the other party by the server or receiver;

The asymmetric encryption algorithm for encrypting or decrypting the key or the third encrypted information by the encryption module or the decryption module of the server and the receiver is pre-negotiated by the server and the receiver.

The invention also provides a server comprising:

a message generating module, configured to: generate a message corresponding to the media message;

An encryption module, configured to: encrypt the media message and the message corresponding to the media message by using a key to obtain first encrypted information and second encrypted information, and encrypt the key to obtain third encrypted information;

a sending module, configured to: send the second encrypted information and the third encrypted information to a receiver;

The message corresponding to the media message is used to indicate the manner in which the receiving end acquires the first encryption information.

The above server can also have the following characteristics: The encryption module is configured to encrypt the key with a recipient public key to obtain the third encrypted information.

The invention also provides a media message receiver, comprising:

a receiving module, configured to: receive second encrypted information and third encrypted information sent by the server; and a decrypting module, configured to: decrypt the third encrypted information by using a recipient private key to obtain a key, and use the key Decrypting the second encrypted information to obtain a message corresponding to the media message; and decrypting the first encrypted information by using the key to obtain a media message;

The access module is configured to: access the server according to the message corresponding to the media message, and acquire the first encrypted information.

The above receivers can also have the following characteristics:

The third encrypted information is obtained by the server encrypting the key with a recipient public key. The above solution encrypts the content to be transmitted (such as media messages, keys or messages), and finally transmits the message or media message securely to the legitimate recipient. If the message is sent by mistake or intercepted by a third party, the media message or the notification message will not be transmitted. Was leaked.

BRIEF abstract

FIG. 1 is a schematic diagram of a sender sending media information to a receiver;

2 is a schematic diagram of an embodiment of a method for secure transmission of media messages according to the present invention;

3 is a schematic flowchart of a server execution according to an embodiment of the present invention;

4 is a schematic flowchart of a process performed by a receiver in an embodiment of the present invention;

FIG. 5 is a schematic structural diagram of a module of a system for secure transmission of media messages according to the present invention.

Preferred embodiment of the invention

Embodiments of the present invention provide a method and system for secure transmission of media messages, by encrypting a content to be transmitted (such as a media message, a key, or a message), and finally transmitting the message or media message securely to a legitimate recipient. Sended or intercepted by a third party, media messages or notification messages will not be revealed.

Embodiments of the present invention will be described in detail below with reference to the accompanying drawings. It should be noted that In the case of no conflict, the features in the embodiments and the embodiments in the present application may be arbitrarily combined with each other. As shown in FIG. 2, the method for secure transmission of media messages in the embodiment of the present invention includes:

Step 201: The server generates a message S corresponding to the media message, and encrypts the media message M and the message S by using the key K to obtain the first encrypted information C and the second encrypted information S, respectively, and uses the public key pair of the receiver. The key K is encrypted to obtain the third encrypted information K, and the second encrypted information S, and the third encrypted information κ are transmitted;

Step 202: The receiver receives the second and third encrypted information, decrypts the third encrypted information with its private key, obtains the key Κ, and decrypts the second encryption by using the key. Information gets the message S;

Step 203: The receiver accesses the server according to the message, acquires the first encrypted information C, and decrypts the first encrypted information by using the key to obtain the media message.

The premise of applying the above method is:

1) The server and the receiver have been certified;

2) The recipient has a pair of public and private keys;

3) The server obtains the recipient's public key through a secure means (such as a third-party certificate authority). At some point, the server will send the media message to the terminal, and check that the network is not online. Then the server performs the following steps, as shown in Figure 3:

Step 301: Generate a message S related to the media content M (such as a short message notification); the message is a notification message generated by the server according to the transport layer information, for example, the notification message carries the sender information and the receiver information.

Alternatively, the message may also be a notification message generated by the server according to the media message, where the notification message may carry a partial keyword of the content of the media message, etc.; or, the notification message is generated according to the transport layer information and the media message, that is, the part of the notification message. The content is the transport layer information, and some of the content is generated according to the media message.

Step 302: randomly generate a key K;

Step 303: Encrypt C with M to obtain ciphertext C, and encrypt S to obtain S,;

Considering the content length of S, when encrypting S, the RC5 - CTS algorithm can be selected. To make s, and s equal length.

Step 304: Encrypt K with the public key of the receiver to obtain K,;

Understandably, the encryption process in step 303 and step 304 is in no particular order.

Step 305: Forward S, and Κ to the recipient through the service system (for example, a short message center).

When the server forwards S, and Κ to the receiver through the service system, it can be sent separately or twice in consideration of the content length.

Figure 4 illustrates the steps performed by the recipient in an embodiment of the invention:

Step 401: The receiving party receives S' and Κ, ;

Step 402: Decrypt 用 with Α's private key to obtain Κ;

Step 403: Decrypt S with Κ to obtain S;

Step 404: According to the information indication of S, establish a link (such as the Internet Data Access Protocol 4 (IMAP4) link) to access the server to obtain data C;

Assuming a communication protocol between the receiver and the server ΙΜΑΡ4, the receiver uses the ΙΜΑΡ4 protocol to extract multimedia messages.

Step 405: Use Κ decrypt C to get the media content Μ.

Based on the above scheme, when a false transmission occurs or is intercepted by a third party, since it does not know the private key of the recipient, it is impossible to know the flaw, and of course, the contents of S and Μ cannot be known.

In the embodiment of the present invention, the symmetric encryption algorithm used by the server and the receiver to encrypt or decrypt the M, C, S or S' is pre-negotiated by the server and the receiver, or temporarily by the server or the receiver. Notify the other party;

The asymmetric encryption algorithm used by the server and the receiver to encrypt or decrypt K or K is pre-negotiated by the server and the recipient.

An embodiment of the present invention further provides a server for sending a media message, including:

a message generating module, configured to: generate a message corresponding to the media message; An encryption module, configured to: encrypt the media message and the message corresponding to the media message by using a key to obtain first encrypted information and second encrypted information, and encrypt the key to obtain third encrypted information;

The message corresponding to the media message is used to indicate how the receiving end acquires the first encrypted information. Wherein: the encryption module is configured to encrypt the key with a recipient public key to obtain the third encrypted information. An embodiment of the present invention further provides a media message receiver, including:

a receiving module, configured to: receive second encrypted information and third encrypted information sent by the server; and a decrypting module, configured to: decrypt the third encrypted information by using a recipient private key to obtain the key, and use the Decrypting the second encrypted information to obtain the message corresponding to the media message; and decrypting the first encrypted information by using the key to obtain the media message;

The embodiment of the present invention further provides a system for secure transmission of media messages. Specifically, as shown in FIG. 5, the system includes, but is not limited to:

a message generating module of the server, configured to generate a message corresponding to the media message;

The encryption module of the server is configured to separately encrypt the media message and the message by using a key to obtain first and second encrypted information, and encrypt the key to obtain third encrypted information;

The sending module of the server is configured to send the second and third encrypted information; the receiving module of the receiving party is configured to receive the second and third encrypted information; and the decrypting module of the receiving party is set Decrypting the third encrypted information with its private key to obtain the key, and decrypting the second encrypted information by using the key to obtain the message; Decrypting the first encrypted information with the key to obtain the media message;

The access module of the receiver is configured to access the server according to the message to obtain the first encrypted information.

Optionally, the encryption module of the server encrypts the key with the recipient public key to obtain the third encrypted information.

Optionally, the symmetric encryption algorithm used by the encryption module or the decryption module of the server and the receiver to encrypt or decrypt the media message, the first encrypted information, the message, or the second encrypted information is the server and the receiver. Pre-negotiating, or temporarily notifying the other party by the server or the receiver; the asymmetric encryption algorithm used by the encryption module or the decryption module of the server and the receiver to encrypt or decrypt the key or the third encrypted information is The server and the receiver are pre-negotiated.

The present invention has generality, and is applicable to, for example, a multimedia message service system, a voice mail service system, an instant messaging service system, and the like.

One of ordinary skill in the art will appreciate that all or a portion of the above steps may be accomplished by a program that instructs the associated hardware to be stored in a computer readable storage medium, such as a read only memory, a magnetic disk, or an optical disk. Alternatively, all or part of the steps of the above embodiments may also be implemented using one or more integrated circuits. Correspondingly, each module/unit in the above embodiment may be implemented in the form of hardware or in the form of a software function module. The invention is not limited to any specific form of combination of hardware and software.

The above embodiments are only intended to illustrate the technical solutions of the present invention and are not to be construed as limiting the invention. It should be understood by those skilled in the art that the present invention may be modified or equivalently substituted without departing from the spirit and scope of the invention.

Industrial applicability

The above method and system encrypts the content to be transmitted (such as a media message, a key or a message), and finally transmits the message or the media message securely to the legal recipient. If the error is transmitted or intercepted by a third party, the media message or the notification message is Will not be leaked.

Claims

Claim

A method for secure transmission of media messages, comprising:

The server generates a message corresponding to the media message, and encrypts the media message and the message corresponding to the media message by using a key to obtain the first encrypted information and the second encrypted information, and encrypts the key to obtain the third encrypted information. Transmitting the second encrypted information and the third encrypted information; the receiving party receives the second encrypted information and the third encrypted information, and decrypting the third encrypted information by using a receiver private key to obtain the a key, and decrypting the second encrypted information by using the key to obtain the message corresponding to the media message;

2. The method of claim 1 wherein:

3. The method of claim 1, wherein: the message corresponding to the media message is generated by the server based on transport layer information and/or media message content.

4. The method of claim 1 wherein:

5. A system for secure transmission of media messages, comprising:

a message generating module of the server, configured to: generate a message corresponding to the media message; the encryption module of the server is configured to: encrypt the media message and the message corresponding to the media message by using a key respectively An encrypted information and a second encrypted information, the secret Key encryption to obtain third encrypted information;

The receiving module of the receiving end is configured to: receive the second encrypted information and the third encrypted information;

6. The system of claim 5 wherein:

7. The method of claim 5, wherein:

8. A server comprising:

An encryption module, configured to: encrypt the media message and the message corresponding to the media message by using a key to obtain first encrypted information and second encrypted information, and encrypt the key to obtain third encrypted information; a sending module, configured to: send the second encrypted information and the third encrypted information to a receiver;

9. The server of claim 8 wherein:

The encryption module is configured to encrypt the key with a recipient public key to obtain the third encrypted information.

10. A media message receiver, comprising:

11. The receiver of claim 10, wherein:

The third encrypted information is obtained by the server encrypting the key with a recipient public key.