WO2012142863A1

WO2012142863A1 - Method and gateway device for handling media message security mechanism

Info

Publication number: WO2012142863A1
Application number: PCT/CN2012/070250
Authority: WO
Inventors: 卢艳; 丁欣; 陈军
Original assignee: 中兴通讯股份有限公司
Priority date: 2011-04-22
Filing date: 2012-01-12
Publication date: 2012-10-26
Also published as: CN102752231A

Abstract

The present invention relates to a method and gateway device for handling a media message security mechanism. The method comprises: the gateway device receiving a first media message, the first media message having attached thereto encryption support information and one or multiple encrypted media contents, the encryption support information comprising an encryption algorithm and/or key information; the gateway device converting the first media message into a second media message of a different format, comprising the extraction and transfer of the encryption support information in the first media message and of each encrypted media content; and the gateway device transmitting the second media message. The method and gateway device for handling the media message of the present invention ensure the security of partially encrypted media when different services are in communication.

Description

Media message security mechanism processing method and gateway device

Technical field

The present invention relates to the field of communications, and in particular, to a processing method and a gateway device for transferring a media message security mechanism.

Background technique

MIME (Multipurpose Internet Mail Extensions) is widely used in multimedia message encoding, such as (mobile) email, instant messaging, and multimedia messaging (network side).

MIME multimedia messages usually contain multiple media content. Sometimes, some media content is very important and sensitive content (such as text or pictures involving personal privacy or secrets). To prevent sensitive content from being notified by unauthorized parties, the media can be The message is encrypted. However, in some cases, media content has more impact on encryption and decryption speed, especially encryption and decryption on mobile phone terminals with limited resources, which will affect the user experience. To solve this problem, one or some media content may be targeted to MIME. Encryption is done without encrypting the entire message. In practical applications, MIME-encoded media messages, such as instant messages, often communicate with other encoding formats. When the messages are interworked, if the media messages contain locally encrypted media content, there is no technical solution yet. The transfer of encrypted local media cannot guarantee the security of the local encrypted media when different services are interworked.

Summary of the invention

The technical problem to be solved by the present invention is to provide a media message processing method and a gateway device to solve the problem that the security of the local encrypted media cannot be guaranteed when interworking between different services.

To solve the above technical problem, the present invention provides a media message processing method, the method comprising: a gateway device receiving a first media message, the first media message carrying encrypted auxiliary information and one or more encrypted media content, the encryption assistance The information includes an encryption algorithm and/or key information;

Translating, by the gateway device, the first media message into a second media message in a different format, where And extracting and transferring the encrypted auxiliary information and the respective encrypted media content in the first media message; the gateway device sends the second media message.

Preferably, the encryption auxiliary information is located in a message header of the first media message, and the gateway device extracts the encrypted auxiliary information and the encrypted media content in the first media message, and the message from the first media message Extracting, by the header, the encrypted auxiliary information, extracting the encrypted media content from a message body of the first media message; the gateway device transferring the encrypted auxiliary information and the encrypted media content finger in the first media message, Transmitting the encrypted media content to the message body of the second media message, transferring the encrypted auxiliary information to a message header of the second media message; or transferring the encrypted media content to the message body of the second media message And transferring the encrypted auxiliary information to a content head of a corresponding encrypted media content in the second media message.

Preferably, the encryption auxiliary information is located in a Content header of the first media message, where the encrypted media content is located, and the gateway device extracts the encrypted auxiliary information and the encrypted media content reference in the first media message. Extracting the encrypted auxiliary information from the content header of the encrypted media content in the first media message, extracting the encrypted media content from the message body of the first media message; and the gateway device transferring the first media message Encrypting the auxiliary information and the encrypted media content, transferring the encrypted media content to the message body of the second media message, and transferring the encrypted auxiliary information to a Content header of the corresponding encrypted media content in the second media message; Or transferring the encrypted media content to a message body of the second media message, and transferring the encrypted auxiliary information to a message header of the second media message. Preferably, the encrypted media content is local media content of the first media message; and the encrypted auxiliary information further includes tag information of the encrypted media content.

Preferably, the encrypted media content is local media content of the first media message; when the encrypted auxiliary information is located in a message header of the media message, the encrypted auxiliary information further includes tag information of the encrypted media content, where :

When the encryption auxiliary information is transferred from the message header of the first media message to the message header of the second media message, or the encrypted auxiliary information is transferred from the content header of the corresponding media content in the message body of the first media message to the first When the corresponding media content of the second media message is located in the Content header of the encrypted media content, the encrypted auxiliary information before and after the transfer is the same; When the encryption auxiliary information is transferred from the header of the Content or segment of the corresponding media content in the message body of the first media message to the message header of the second media message, if the encrypted media does not contain the identification information, the encryption auxiliary information is added. Corresponding to the content (content) or segment identification information of the encrypted media content. Preferably, the first media message and the second media message are multi-function internet mail extensions

(MIME) message or multimedia information service (MMS) message.

To solve the above technical problem, the present invention further provides a gateway device, where the gateway device includes: a media message receiving module, configured to: receive a first media message, where the first media message carries the encrypted auxiliary information and one or more Encrypting media content, the encryption assistance information comprising an algorithm or key information;

a media message processing module, configured to: convert the first media message into a second media message of a different format, including extracting and transferring the encrypted auxiliary information in the first media message and each encrypted media content; a module, configured to: send the second media message.

Preferably, the encryption auxiliary information is located in a message header of the first media message or the second media message, or is located in a content header of the corresponding encrypted media content in the first media message or the second media message.

Preferably, the encrypted media content is local media content of the first media message; when the encrypted auxiliary information is located in a message header of the first or second media message, the encrypted auxiliary information further includes the encrypted media content Tag information:

The media message processing module is further configured to: when the encrypted auxiliary information is transferred from a Content header of the corresponding encrypted media content in the message body of the first media message to a message header of the second media message, if the encrypted media does not include The identification information is added to the content of the corresponding encrypted media content or the identification information of the segment in the encryption auxiliary information.

Preferably, the encryption auxiliary information is located in a message header of the first media message, and the media message processing module is further configured to:

Extracting the encrypted auxiliary information from a message header of the first media message, and extracting the encrypted media content from a message body of the first media message; Transferring the encrypted media content to a message body of the second media message, transferring the encrypted auxiliary information to a message header of the second media message; or transferring the encrypted media content to the second media message The message body transfers the encrypted auxiliary information to a content head of a corresponding encrypted media content in the second media message.

Preferably, the encryption auxiliary information is located in a content header of the first media message, where the encrypted media content is located, and the media message processing module is further configured to:

Extracting, by the content header of the first media message, the encrypted auxiliary information, and extracting the encrypted media content from a message body of the first media message;

Transferring the encrypted media content to the message body of the second media message, and transferring the encrypted auxiliary information to a Content header of the corresponding encrypted media content in the second media message; or transferring the encrypted media content And to the message body of the second media message, transferring the encrypted auxiliary information to a message header of the second media message.

Preferably, the first media message and the second media message are Multi-Function Internet Mail Extensions (MIME) messages or Multimedia Information Service (MMS) messages.

The media message processing method and the gateway device in the embodiment of the present invention carry the encrypted auxiliary information and the encrypted media content in the media message, and are extracted and transferred by the gateway device, so that the encryption of the local media is still ensured when the different services are intercommunicated.

BRIEF abstract

1 is a schematic diagram of an embodiment of a media message processing method of the present invention;

2 is a block diagram showing the structure of a gateway device of the present invention.

Preferred embodiment of the invention

The main idea of the media message processing method and the gateway device of the present invention is to provide a conversion processing method between two different formats of media messages carrying the encrypted media content, so as to ensure the encryption of the local media when different services are interworked.

Embodiments of the present invention will be described in detail below with reference to the accompanying drawings. It should be noted that In the case of no conflict, the embodiments in the present application and the features in the embodiments may be combined with each other.

As shown in FIG. 1, the media message processing method of the present invention includes:

Step 101: The gateway device receives a first media message, where the first media message carries the encrypted auxiliary information and the encrypted media content.

The specific content of the encrypted auxiliary information may be flexibly set according to the encryption mechanism and the encryption information negotiation mechanism, such as the encryption auxiliary information including the encryption algorithm and/or the key information.

In order to increase the encryption and decryption speed, preferably, the encrypted media content is the local media content of the entire first media message. The local content may be a certain type of media content set by the system or media content of a specific location. Preferably, if the encrypted media content is not specific, the encrypted auxiliary information may further include marking information of the encrypted media content. The identification information referred to in the present invention should be an identifier that uniquely identifies the encrypted media content. After receiving the first media message, the gateway device needs to determine whether the first media message carries one or more encrypted media content, and determines that the first media message carries one or more encrypted media content, and then needs to determine whether to carry the receiver. Encrypted auxiliary information to decrypt, such as encryption algorithm and key information;

The gateway determines that the message carries the locally encrypted media content by the following method:

In the first method, it is checked whether the message header carries the relevant encryption auxiliary information field, for example, the encryption algorithm, the identifier of the encrypted media content, and the key information.

In the second method, the content header of each content of the message is checked one by one, and the related encryption auxiliary information field is carried, for example, including an encryption algorithm and key information.

Step 102: The gateway device converts the first media message into a second media message of a different format, including extracting and transferring each encrypted media content in the first media message, and encrypting auxiliary information.

The encryption assistance information may be located in the message header of the media message or in the Content header of the corresponding media content (ie, the subheader of the media message). There are two situations depending on the location of the encryption assistance information in the first media message:

Case 1: encrypting the auxiliary information in the message header of the first media message;

The gateway device extracts the encrypted auxiliary information and the encrypted media content in the first media message And extracting the encrypted auxiliary information from a message header of the first media message, extracting the encrypted media content from a message body of the first media message; and after extracting the information, transferring the encrypted media content to the a message body of the second media message, transferring the encrypted auxiliary information to a message header of the second media message; or transferring the encrypted media content to a message body of the second media message, the encrypted auxiliary information Transfer to the content of the corresponding encrypted media content in the second media message or the header of the segment.

Case 2: encrypting the auxiliary information in the message subheader of the message body of the first media message, the gateway device extracts the encrypted auxiliary information from the header of the content of the encrypted media content in the first media message, from the first The message body of a media message extracts the encrypted media content; after extracting the information, transferring the encrypted media content to the message body of the second media message, and transferring the encrypted auxiliary information to the corresponding encrypted media content in the second media message Or located in the Content header; or, transferring the encrypted media content to the message body of the second media message, and transferring the encrypted auxiliary information to the message header of the second media message.

When the source of the encrypted media content is local media content, the content of the encrypted media content corresponding to the encrypted auxiliary information or the identification information of the segment.

Preferably, when the encryption auxiliary information is located in the Content header of the corresponding encrypted media content, the identification information may not be included, and the marking information of the encrypted media content is included only when the encryption auxiliary information is located in the message header of the media message. When the gateway device transfers the encrypted auxiliary information, it can be specifically divided into three situations:

If the encryption auxiliary information is transferred from the message header of the first media message to the message header of the second media message, the encrypted auxiliary information does not need to be modified, and the encrypted auxiliary information in the header of the first and second media messages includes the media. The content of the content or the identification information of the segment, that is, the encryption auxiliary information in the header of the first media message and the second media message are the same;

If the encryption auxiliary information is transferred from the content header of the first media message corresponding to the content of the encrypted media content to the message header of the second media message, if the encrypted auxiliary information does not include the encrypted media identification information, the auxiliary information is encrypted. Adding identification information corresponding to the content (content) or segment of the encrypted media content;

If the encrypted auxiliary information is from the message body of the first media message, the corresponding encrypted media content is located L

. by

'^ Go to violence. ^ '^ 骅暴. color

- 1 aqd9 19l8Z8PbiJOPsaVlNS6rrqi3u zoqoioioo^9uraiA 69]A[aNAiz.q3⁄4-iqSs5t A3⁄45[aw ^o i£5pt+i+/ i8znNAAiHxicKq 90工i xqxf) θοηιννννην

.翁#翁n暴. oooo c ^

° οοοο ₄ =αι ^ H storm. ^

<0000>=V^}^ - ΐ aqd9 i9i8Z8pbiJopsaviNS6rrqi3u zoqoioioo^9uraiA 69]A[aNAiz.q3⁄4-iqSs5t A3⁄45[aw ^o i£5pt+i+/ i8znNAAiHxicKq 90工i xqxf) θοηιννννην ς \

'f 丄. f '%' -η^ ^[ ί^^ ^ Υί -— ^

° '^暴 ^ Find ^

ψ ^ ^mw 善善 ' ^ Speak svm ' ^ ^mw ^ 脊 o \

-^^ 'ί' 3⁄4 SMM talk Weng Shan

Weng storm? ^

Η- ( ) (sv

°[§1畔'^ 骅暴^

H storm. Fu

Hurricane. Go to ^

0SZ0.0/ZT0ZN3/X3d Z OAV The transfer of information is as follows:

If the MIME header contains the encryption auxiliary information, the encrypted auxiliary information is transferred to the MMS header (Header); or, if the encrypted auxiliary information corresponds to some or some of the locally encrypted media content, the encrypted auxiliary information may also be transferred The content (content) or the header of the segment (ie, the subheader of the media message) of the corresponding one or more encrypted media contents in the MMS.

If the content (content) header of the (some) encrypted media content in the MIME message contains the encrypted auxiliary information, the encrypted auxiliary information is transferred to the content of the corresponding one or more encrypted media contents in the MMS (content) In the header, if only one encrypted media content is included, the gateway device may also transfer the encrypted auxiliary information to the head of the MMS, and then add the identification information of the corresponding encrypted media content in the encrypted auxiliary information. The above describes the specific method of encrypting the auxiliary transfer when the MIME message is converted to the MMS format message. Conversely, if the MMS message is converted to the MIME message, the method is the same.

Although the present invention uses MIME message and MMS interworking as an embodiment, the present invention is applicable to any "local encryption transfer" in both services when it is interoperable.

The first media message and the second media message of the present invention are MIME or MMS messages as specific embodiments, but the method of the present invention has generality, and is slightly modified, and is applicable to the first media message and the second media message being MMS or MIME messages. .

To implement the above method, the present invention further provides a gateway device. As shown in FIG. 2, the gateway device includes:

a media message receiving module, configured to receive a first media message, where the first media message carries encrypted auxiliary information and one or more encrypted media content, where the encrypted auxiliary information includes an algorithm or key information;

a media message processing module, configured to convert the first media message into a second media message of a different format, including extracting and transferring the encrypted auxiliary information and the respective encrypted media content in the first media message;

a media message sending module, configured to send the second media message. The encryption auxiliary information may be located in a message header of the first media message or the second media message, or located in a content header of the corresponding encrypted media content in the first media message or the second media message.

The encrypted media content is local media content of the first media message; the encrypted auxiliary information further includes tag information of the encrypted media content.

Preferably, when the encryption auxiliary information is located in a message header of the first or second media message, the encrypted auxiliary information includes the tag information of the encrypted media content, where:

When the media message processing module transfers the encrypted auxiliary information from the message header of the first media message to the message header of the second media message, or encrypts the auxiliary information from the corresponding encrypted media content in the message body of the first media message When the Content header is transferred to the Content header of the corresponding encrypted media content of the second media message, the encrypted auxiliary information before and after the transfer is the same;

When the media message processing module transfers the encrypted auxiliary information from the message header of the first media message to the content header of the corresponding encrypted media content in the message body of the second media message, the encrypted auxiliary information may be removed. Encrypting the content (content) or segment identification information of the media content;

When the media message processing module transfers the encrypted auxiliary information from the Content header of the corresponding encrypted media content in the message body of the first media message to the message header of the second media message, the corresponding encrypted media content is added to the encrypted auxiliary information. The identification information of the content (content) or section.

Extracting the encrypted auxiliary information from a message header of the first media message, and extracting the encrypted media content from a message body of the first media message;

Transferring the encrypted media content to a message body of the second media message, transferring the encrypted auxiliary information to a message header of the second media message; or transferring the encrypted media content to the second media message The message body transfers the encrypted auxiliary information to a content head of a corresponding encrypted media content in the second media message.

Preferably, the encryption assistance information is located in a Content header of the first media message where the encrypted media content is located, and the media message processing module is further configured to: Extracting, by the content header of the first media message, the encrypted auxiliary information, and extracting the encrypted media content from a message body of the first media message;

The first media message and the second media message are MIME messages or MMS messages.

One of ordinary skill in the art will appreciate that all or a portion of the above steps may be accomplished by a program instructing the associated hardware, such as a read-only memory, a magnetic disk, or an optical disk. Alternatively, all or part of the steps of the above embodiments may also be implemented using one or more integrated circuits. Correspondingly, each module in the foregoing embodiment may be implemented in the form of hardware, or may be implemented in the form of a software function module. The invention is not limited to any specific combination of hardware and software.

INDUSTRIAL APPLICABILITY The media message processing method and the gateway device carry the encrypted auxiliary information and the encrypted media content in the media message, and are extracted and transferred by the gateway device, so as to ensure the encryption of the local media when interworking between different services. Sex.

Claims

Claim

A method for processing a media message, the method comprising:

The gateway device receives the first media message, where the first media message carries the encrypted auxiliary information and one or more encrypted media content, the encrypted auxiliary information includes an encryption algorithm and/or key information; the gateway device will be the first Converting the media message into a second media message of a different format, including extracting and transferring the encrypted auxiliary information and the respective encrypted media content in the first media message; the gateway device sending the second media message.

2. The method according to claim 1, wherein the encryption auxiliary information is located in a message header of the first media message, and the gateway device extracts the encrypted auxiliary information and the encrypted media content identifier in the first media message. Extracting the encrypted auxiliary information from a message header of the first media message, extracting the encrypted media content from a message body of the first media message; and the gateway device transferring the encryption assist in the first media message The information and the encrypted media content are: transferring the encrypted media content to a message body of the second media message, transferring the encrypted auxiliary information to a message header of the second media message; or transferring the encrypted media content And to the message body of the second media message, transferring the encrypted auxiliary information to a content head of a corresponding encrypted media content in the second media message.

3. The method of claim 1, wherein the encryption assistance information is located in a Content header of the first media message in which the encrypted media content is located, and the gateway device extracts an encryption in the first media message The auxiliary information and the encrypted media content refer to extracting the encrypted auxiliary information from the Content header of the first media message in the content header of the encrypted media content, and extracting the encrypted media content from the message body of the first media message; Transmitting, by the device, the encrypted auxiliary information and the encrypted media content in the first media message, transferring the encrypted media content to a message body of the second media message, and transferring the encrypted auxiliary information to the second media message Corresponding encrypted media content is located in a Content header; or, the encrypted media content is transferred to a message body of the second media message, and the encrypted auxiliary information is transferred to a message header of the second media message.

The method according to any one of claims 1 to 3, wherein the encrypted media content is partial media content of the first media message; the encrypted auxiliary information further includes the encrypted media Tag information for the content.

The method according to any one of claims 1 to 3, wherein the encrypted media content is partial media content of the first media message; and the encrypted auxiliary information is located at a message header of a media message, The encryption auxiliary information further includes tag information of the encrypted media content, where:

When the encryption auxiliary information is transferred from the message header of the first media message to the message header of the second media message, or the encrypted auxiliary information is transferred from the content header of the corresponding media content in the message body of the first media message to the first When the corresponding media content of the second media message is located in the Content header of the encrypted media content, the encrypted auxiliary information before and after the transfer is the same;

When the encryption auxiliary information is transferred from the header of the Content or segment of the corresponding media content in the message body of the first media message to the message header of the second media message, if the encrypted media does not contain the identification information, the encryption auxiliary information is added. Corresponding to the content (content) or segment identification information of the encrypted media content.

6. The method of claim 1, wherein the first media message and the second media message are Multi-Function Internet Mail Extensions (MIME) messages or Multimedia Information Service (MMS) messages.

7. A gateway device, the gateway device comprising:

a media message receiving module, configured to: receive a first media message, the first media message carries encrypted auxiliary information and one or more encrypted media content, where the encrypted auxiliary information includes an algorithm or key information;

The gateway device according to claim 7, wherein the encrypted auxiliary information is located in a message header of the first media message or the second media message, or is located in a corresponding media of the first media message or the second media message. The content of the content ( content ) header.

9. The method of claim 7, wherein the encrypted media content is the first medium The local media content of the message; when the encryption auxiliary information is located in a message header of the first or second media message, the encrypted auxiliary information further includes tag information of the encrypted media content:

The gateway device according to claim 7, wherein the encryption auxiliary information is located in a message header of the first media message, and the media message processing module is further configured to: a message header from the first media message Extracting the encrypted auxiliary information, and extracting the encrypted media content from a message body of the first media message;

The gateway device of claim 7, wherein the encryption assistance information is located in a Content header of the first media message in which the encrypted media content is located, and the media message processing module is further configured to:

12. The gateway device of claim 7, wherein the first media message and the second media message are Multi-Function Internet Mail Extensions (MIME) messages or Multimedia Information Service (MMS) messages.