WO2016045464A1 - 解密方法和移动终端 - Google Patents

解密方法和移动终端 Download PDF

Info

Publication number
WO2016045464A1
WO2016045464A1 PCT/CN2015/087040 CN2015087040W WO2016045464A1 WO 2016045464 A1 WO2016045464 A1 WO 2016045464A1 CN 2015087040 W CN2015087040 W CN 2015087040W WO 2016045464 A1 WO2016045464 A1 WO 2016045464A1
Authority
WO
WIPO (PCT)
Prior art keywords
ciphertext
decryption
information
key
session
Prior art date
Application number
PCT/CN2015/087040
Other languages
English (en)
French (fr)
Inventor
张冬明
Original Assignee
中兴通讯股份有限公司
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by 中兴通讯股份有限公司 filed Critical 中兴通讯股份有限公司
Publication of WO2016045464A1 publication Critical patent/WO2016045464A1/zh

Links

Images

Classifications

    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/32Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04WWIRELESS COMMUNICATION NETWORKS
    • H04W88/00Devices specially adapted for wireless communication networks, e.g. terminals, base stations or access point devices
    • H04W88/02Terminal devices

Definitions

  • This application relates to, but is not limited to, the field of communications.
  • the embodiment of the invention provides a decryption method and a mobile terminal, which solves the problem of session security of the mobile terminal.
  • a decryption method comprising:
  • the ciphertext display is replaced by the plaintext.
  • the method before the step of decrypting the ciphertext included in the information of the session record of the current session to obtain the plaintext corresponding to the ciphertext, the method further includes:
  • the information includes information that has been sent and information received from the correspondent peer.
  • the step of determining whether to enable the automatic decryption mode of the current session comprises:
  • the automatic decryption mode is turned on.
  • the step of determining whether to enable the automatic decryption mode of the current session comprises:
  • the automatic decryption mode is directly turned on.
  • the step of decrypting the ciphertext in the information in the session record of the current session to obtain the plaintext corresponding to the ciphertext includes:
  • the step of acquiring the decryption key includes:
  • the key successfully decrypted during the traversal process is used as the decryption key.
  • the method further includes:
  • the decryption key configuration information is locally maintained, and a plurality of keys are included in the decryption key configuration information.
  • the step of acquiring the decryption key includes:
  • the method further includes:
  • the ciphertext included in the information is always stored in cipher text.
  • the method further includes:
  • the second ciphertext display is replaced with the second plaintext.
  • the method further includes:
  • the ciphertext is restored to the ciphertext that has been decrypted and displayed as the corresponding plaintext.
  • the method further includes:
  • the automatic decryption mode of the session is closed; or,
  • the automatic decryption mode After detecting the indication that the automatic decryption mode is turned off, the automatic decryption mode is turned off according to the instruction information.
  • the method further includes:
  • the ciphertext in the one or more pieces of information is decrypted to obtain the plaintext corresponding to the ciphertext in the one or more pieces of information.
  • the session is a session of a communication application on the mobile terminal.
  • the embodiment of the invention further provides a mobile terminal, including:
  • Decrypting the execution module configured to decrypt the ciphertext included in the information of the session record of the current session, to obtain the plaintext corresponding to the ciphertext;
  • a display module configured to replace the ciphertext display with the plaintext.
  • the mobile terminal further includes:
  • a mode judging module configured to determine whether to enable an automatic decryption mode of the current session
  • the mode management module is configured to start the decryption process after determining to enable the automatic decryption mode.
  • the mode determining module includes:
  • the ciphertext detecting unit is configured to: after entering the session interface, detect information including the ciphertext in the session record of the current session;
  • the prompting unit is configured to display, when the information including the ciphertext is detected, prompt information of whether to enable the automatic decryption mode;
  • the mode on unit is set to turn on the automatic decryption mode when an indication that the automatic decryption mode is turned on is detected.
  • the mode-on unit is further configured to directly enable the automatic decryption mode when an indication that the automatic decryption mode is turned on is detected.
  • the decryption execution module includes:
  • a key obtaining unit configured to acquire a decryption key
  • the decryption unit is configured to decrypt the ciphertext in the information by using the decryption key to obtain a plaintext corresponding to the ciphertext.
  • the key obtaining unit includes:
  • a key traversal subunit configured to traverse the preset plurality of keys one by one for the information containing the ciphertext in the current session record, to attempt to use the each of the plurality of keys to the ciphertext Decrypted into plaintext;
  • the key determining unit is configured to use the key successfully decrypted during the traversal process as a decryption key to attempt to decrypt the ciphertext into plaintext using each of the plurality of keys.
  • the key obtaining unit further includes:
  • the key management subunit is configured to locally maintain decryption key configuration information, and the decryption key configuration information includes a plurality of keys.
  • the key obtaining unit further includes:
  • the external key acquisition unit is configured to acquire an externally input decryption key.
  • the mobile terminal further includes:
  • the storage module is set to be in the background of the system, and the ciphertext included in the information is always stored in cipher text.
  • the display module is further configured to: when the ciphertext indication is displayed, restore the ciphertext to the ciphertext that has been decrypted and displayed as the corresponding plaintext.
  • the mode management module is further configured to: after the session ends, close the automatic decryption mode of the session, or,
  • the automatic After detecting the indication that the automatic decryption mode is turned off, according to the indication information, the automatic is turned off. Decryption mode.
  • the decryption execution module is further configured to: when detecting the indication that one or more pieces of information including the ciphertext are decrypted, decrypt the ciphertext in the one or more pieces of information, to obtain The ciphertext corresponding to the plaintext in the one or more pieces of information.
  • the embodiment of the invention further provides a computer readable storage medium storing computer executable instructions for performing the above method.
  • the embodiment of the present invention provides a decryption method and a mobile terminal, which decrypts the ciphertext included in the session record information of the current session, obtains the plaintext corresponding to the ciphertext, and replaces the ciphertext display with the plaintext.
  • the batch decryption of the encrypted information in a one-to-one session or a multi-person session scenario is implemented, and the problem of the security of the session of the mobile terminal is solved.
  • Figure 1 is a schematic diagram of the input plaintext
  • FIG. 2 is a schematic diagram of performing encryption according to an embodiment of the present invention
  • FIG. 3 is a schematic diagram of displaying an automatic decryption floating button after detecting a ciphertext in a session record according to an embodiment of the present invention
  • FIG. 4 is a schematic diagram of a key for clicking an automatic decryption button according to an embodiment of the present invention
  • FIG. 5 is a schematic diagram of automatically decrypting a ciphertext after an automatic decryption mode is turned on according to an embodiment of the present invention
  • FIG. 6 is a schematic diagram of automatically decrypting a new ciphertext after continuing a bulk encryption session according to an embodiment of the present invention
  • FIG. 7 is a schematic diagram of displaying only ciphertext after automatic decryption is turned off according to an embodiment of the present invention.
  • FIG. 8 is a schematic diagram of a main flow of a bulk encryption session according to an embodiment of the present invention.
  • FIG. 9 is a schematic diagram of a main flow of a multi-person encryption session according to an embodiment of the present invention.
  • FIG. 10 is a flowchart of a decryption method according to Embodiment 2 of the present invention.
  • FIG. 11 is a schematic structural diagram of a mobile terminal according to Embodiment 3 of the present invention.
  • FIG. 12 is a schematic structural diagram of the mode determining module 1103 of FIG. 11;
  • FIG. 13 is a schematic structural diagram of the decryption execution module 1101 of FIG. 11;
  • FIG. 14 is a schematic structural diagram of the key acquisition unit 1301 of FIG.
  • the present invention provides a method for performing bulk encrypted chat and multi-person encrypted chat, and the chat content can be displayed in the form of cipher text, for the purpose of the batch communication and the multi-person session of the client, such as the instant messaging and the short message. Have the correct key to automatically decrypt and batch decrypt the plaintext.
  • the two sides of the communication open the automatic decryption mode and configure the automatic decryption key of the client before the batch session or the session.
  • the system will automatically decrypt the ciphertext in the session record and display the decrypted plaintext in the session record (only automatically displayed as the decrypted plaintext on the interface display, and still stored in ciphertext in the background session record), after the session ends or The session record will still be ciphertext the next time you check it, you must re-enter the key to decrypt it again.
  • the plaintext session record that realizes the batch encryption session and facilitates the intuitive viewing of the ciphertext during the communication process of the communication parties is achieved.
  • the multi-person encryption session is a promotion of the above-mentioned bulk encryption session method, and the object of the conversation may be a multi-crowd session of two or more people.
  • different people can configure different numbers of keys—you can configure a common key that everyone has in common, or you can configure a private key that only this part of the person has.
  • the universal key is used for the entire encrypted session; the private key can be used to encrypt and decrypt the exchange between only a part of the person who knows the key during the group session, and other group members can only see the ciphertext.
  • the main links of bulk encryption sessions are:
  • the communicating party inputs the plaintext in the information input box of the communication software, and encrypts the information in the input box by clicking a control or other interface having an encryption function to encrypt the information into a specific format.
  • the ciphertext replaces the plaintext in the input box, and then sends the ciphertext, and the ciphertext is sent to the other party through the existing communication function of the software.
  • the sending and receiving record interface of the communication parties pops up the automatic decryption floating button after monitoring the ciphertext of a specific format, and the one or both sides of the communication pops up the key dialog box of the automatic decryption after clicking the automatic floating button, and opens the key after inputting the key.
  • the client's automatic decryption mode pops up the automatic decryption floating button after monitoring the ciphertext of a specific format, and the one or both sides of the communication pops up the key dialog box of the automatic decryption after clicking the automatic floating button, and opens the key after inputting the key.
  • FIG. 3 The schematic diagram showing the automatic decryption floating button after detecting the ciphertext in the session record is shown in Fig. 3.
  • FIG. 4 The schematic diagram of inputting the key by clicking the automatic decryption button is shown in Fig. 4.
  • the ciphertext in the current session record is automatically decrypted into plaintext (only the plaintext after the decryption is automatically displayed on the interface display, and the ciphertext is still stored in the background session record).
  • plaintext only the plaintext after the decryption is automatically displayed on the interface display, and the ciphertext is still stored in the background session record.
  • the newly added ciphertext is automatically decrypted as The plain text is displayed, otherwise the new session content is not processed.
  • the automatic decryption mode is valid only for the communication party that opens the mode, and does not affect whether the other party is open. If the other party does not open the automatic decryption mode, the chat record is still displayed in cipher text.
  • the schematic diagram of automatically decrypting the ciphertext after opening the automatic decryption mode is shown in Fig. 5.
  • the schematic diagram of automatically decrypting the new ciphertext after continuing the bulk encryption session is shown in Fig. 6.
  • FIG. 7 A schematic diagram of displaying the ciphertext after the automatic decryption mode is turned off by the step (4) is shown in Fig. 7.
  • FIG. 1 A schematic diagram of the complete process of the bulk encryption session of the present invention is shown in FIG.
  • the multi-person encryption session is a promotion of the above-mentioned bulk encryption session, and is applicable to a group conversation situation of two or more people.
  • the main links of multi-person encryption sessions are:
  • the communicating party inputs the plaintext in the information input box of the communication software, and if it is necessary to encrypt, selects the information in the input box by clicking the control with the encryption function or other interface.
  • Encryption processing encrypting the plaintext in the input box with the ciphertext in a specific format, and then sending the ciphertext, and the ciphertext is sent to the other party through the existing communication function of the software.
  • the click encryption process if the sender has configured multiple encryption keys in advance (for example, both the universal key and the private key are configured), the sender needs to select the corresponding universal key according to the appropriate range of the content to be sent this time or Private key.
  • the public or private key in the key selection interface is only displayed with the name code set by step (1). Of course, the new key can also be added or modified in this key selection interface. .
  • the receiving and receiving record interface of the communication parties pops up the automatic decryption floating button after monitoring the ciphertext of a specific format, and the communicating parties pop up the key setting interface of the automatic decryption after clicking the automatic floating button, and open the key after inputting the key.
  • the client's automatic decryption mode If the user has multiple keys, multiple automatic decryption keys can be added to the key addition interface.
  • each decryption key configured in step (3) will be traversed, and each ciphertext in the current session record is automatically decrypted into plaintext by using each key (only the interface is automatically displayed as decryption on the interface display). After the plain text, it is still stored in ciphertext in the background session record). If the key can successfully decrypt the ciphertext during the traversal process, the other keys are not traversed; if all the keys cannot If the decryption is successful, the session content is left unprocessed. When the batch session is continued, each time a new session record is added, the key is automatically traversed in the above manner to decrypt the processing, and the effect of automatic decryption is achieved.
  • the automatic decryption mode is valid only for the communication party that opens the mode, and does not affect whether other communication parties are open. If the other communication party does not open the automatic decryption mode, the chat record is still displayed in cipher text.
  • FIG. 1 A schematic diagram of the complete process of the multi-person encryption session in the embodiment of the present invention is shown in FIG.
  • the automatic decryption mode is automatically displayed after detecting that the ciphertext exists in the session record, and the automatic decryption button is clicked, and then the decryption password is input and then opened.
  • the automatic decryption opening and encryption password configuration is separate and independent.
  • the two modules can be integrated: 1) The encryption and decryption keys are configured at the same time in the key configuration module, and the automatic decryption key directly invokes the encryption key. Key to decrypt;
  • the automatic decryption mode can be manually opened when the key is configured. It does not need to detect the ciphertext and then automatically hangs and needs to input the decryption key before it can be opened. 3) The automatic decryption mode can be configured globally, that is, as long as it is input After the correct security permission is controlled, the automatic decryption mode is turned on globally, and the function is turned off only when the automatic decryption mode is manually turned off, thereby eliminating the need to frequently open the automatic decryption mode.
  • the symmetric encryption/decryption method based on the same encryption and decryption key can be replaced by the asymmetric encryption and decryption method of public key encryption and private key decryption.
  • the sender selects the public key of some people in the group session for encryption, and the communication parties can only decrypt the ciphertext after receiving the ciphertext only the private key of the part of the selected public key.
  • the implementation scheme can be implemented only for the communication software itself or Embodiments of the invention are implemented by a mobile phone platform framework.
  • the ciphertext sent by the terminal that implements the embodiment of the present invention may also be received, but the function of automatic decryption cannot be provided. This can be replaced by providing a separate ciphertext decryption client application.
  • the user in addition to automatically decrypting all ciphertexts by turning on the automatic decryption mode, the user can also decrypt each encrypted session with ciphertext one by one when the automatic decryption mode is not turned on or cannot be turned on.
  • the input method of the encryption and decryption key may include, but is not limited to, other key modes in addition to numbers, letters, etc.: a) pattern key mode, that is, during encryption and decryption, the key For the pattern agreed in advance, the encryption is performed by the correspondence between the pattern and the specific key, and when the decryption is performed, the pattern is first input, and the pattern is decrypted by the correspondence relationship with the specific key.
  • gesture key mode that is, in the process of adding and decrypting, the key is a pre-agreed gesture, and the encryption is performed by the corresponding relationship between the gesture and the specific key, and the gesture is first input when the decryption is performed, and the correspondence between the gesture and the specific key is adopted. Relationship to decrypt; b) face, palm print, voiceprint, fingerprint and other biometric identification methods. The encryption and decryption process first establishes the correspondence between the relevant biometrics and the specific key to perform encryption and decryption processing.
  • the second embodiment of the present invention provides a decryption method, which can perform encrypted display and decryption display on the information in the communication application session of the mobile terminal to improve security.
  • the specific process is as shown in FIG. 10, and includes:
  • Step 1001 Determine whether to enable an automatic decryption mode of the current session
  • the information includes the sent information and the information received from the communication peer.
  • the mobile terminal may be prompted to prompt the user to enable the automatic decryption mode when the ciphertext is detected, or may receive the user indication at any time, as follows:
  • the mobile terminal prompts the user to enable the automatic decryption mode when detecting the ciphertext
  • the automatic decryption mode is turned on.
  • Step 1002 Decrypt the ciphertext included in the information of the session record of the current session, and obtain the plaintext corresponding to the ciphertext;
  • this step There are two implementations of this step. One is to prompt the user to input the decryption key in real time, and use the decryption key to decrypt; the second is to decrypt using one or more preset decryption keys. details as follows:
  • the decryption key input by the user is detected; then, the ciphertext in the information is decrypted using the decryption key to obtain a plaintext corresponding to the ciphertext.
  • the information including the ciphertext in the current session record is traversed by a preset plurality of decryption keys one by one to try to decrypt the ciphertext into plaintext with each of the plurality of keys, and then The ciphertext of the corresponding decryption key successfully decrypted during the traversal process is decrypted, and the plaintext corresponding to the ciphertext is obtained. The ciphertext without the corresponding decryption key after traversal is not decrypted.
  • the decryption key configuration information needs to be locally maintained in the mobile terminal, and the decryption key configuration information includes a plurality of decryption keys. Adding a new decryption key to the decryption key configuration information, or deleting a decryption key included in the decryption key configuration information, or modifying a decryption key included in the decryption key configuration information to update The decryption key information.
  • Step 1003 replace the ciphertext display with the plaintext
  • the plaintext display can be replaced by the plaintext; for one piece of information, including the encrypted ciphertext and the plaintext, the ciphertext is replaced with the corresponding plaintext display, and the original plaintext is unchanged.
  • the ciphertext is still stored in the background of the system.
  • the subsequent information can continue to receive new information or issue a new one.
  • the newly received or newly sent information containing the ciphertext is decrypted, and the plaintext corresponding to the ciphertext in the information is obtained, and the ciphertext display is replaced by the plaintext.
  • the automatic decryption mode can be turned off, mainly by the following two methods:
  • the automatic decryption mode of the session is closed, and when the user enters the same session again, the automatic decryption mode operation needs to be performed again.
  • the indication information for turning off the automatic decryption mode is detected, and the automatic decryption mode is turned off according to the indication information;
  • the ciphertext is restored to the ciphertext that has been decrypted and displayed as the corresponding plaintext.
  • the automatic decryption mode when the automatic decryption mode is off, when the user specifies that the one or more pieces of information containing the ciphertext are decrypted, the ciphertext in the one or more pieces of information is decrypted to obtain the secret.
  • the corresponding plain text Increased system flexibility.
  • the embodiment of the invention provides a mobile terminal, and its structure is as shown in FIG. 11 and includes:
  • the decryption execution module 1101 is configured to decrypt the ciphertext included in the information of the session record of the current session, to obtain the plaintext corresponding to the ciphertext;
  • the display module 1102 is configured to replace the ciphertext display with the plaintext.
  • the mobile terminal further includes:
  • the mode determining module 1103 determines whether to enable the automatic decryption mode of the current session
  • the mode management module 1104 is configured to initiate the decryption process after determining to enable the automatic decryption mode.
  • the structure of the mode determining module 1103 is as shown in FIG. 12, and includes:
  • the ciphertext detecting unit 1201 is configured to: after entering the session interface, detect information including the ciphertext in the session record of the current session;
  • the prompting unit 1202 is configured to display, when the information including the ciphertext is detected, the prompt information of whether to enable the automatic decryption mode;
  • the mode on unit 1203 is configured to turn on the automatic decryption mode when an indication to turn on the automatic decryption mode is detected.
  • the mode-on unit 1203 is further configured to directly turn on the automatic decryption mode when an indication that the automatic decryption mode is turned on is detected.
  • the structure of the decryption execution module 1101 is as shown in FIG. 13, and further includes:
  • the key obtaining unit 1301 is configured to acquire a decryption key
  • the decryption unit 1302 is configured to decrypt the ciphertext in the information by using the decryption key to obtain a plaintext corresponding to the ciphertext.
  • the structure of the key obtaining unit 1301 is as shown in FIG. 14 , and includes:
  • the key traversal subunit 1401 is configured to traverse the preset plurality of keys one by one for the information including the ciphertext in the current session record, to try to use the each of the plurality of keys to set the secret
  • the text is decrypted as plain text
  • the key determining unit 1402 is configured to use the key successfully decrypted during the traversal process as the decryption key.
  • the key obtaining unit 1301 further includes:
  • the key management sub-unit 1403 is configured to locally maintain decryption key configuration information, and the decryption key configuration information includes a plurality of keys.
  • the key obtaining unit 1301 further includes:
  • the external key acquisition unit 1404 is configured to acquire an externally input decryption key.
  • the mobile terminal further includes:
  • the storage module 1105 is configured to store the ciphertext included in the information in a ciphertext form in the background of the system.
  • the display module 1102 is further configured to: when the ciphertext indication is displayed, restore the ciphertext to the ciphertext that has been decrypted and displayed as the corresponding plaintext.
  • the mode management module 1104 is further configured to: after the session ends, close the automatic decryption mode of the session, or,
  • the automatic decryption mode After detecting the indication that the automatic decryption mode is turned off, the automatic decryption mode is turned off according to the instruction information.
  • the decryption execution module 1101 is further configured to: when detecting the indication that one or more pieces of information including the ciphertext are decrypted, decrypt the ciphertext in the one or more pieces of information, to obtain the The plaintext corresponding to the ciphertext in one or more pieces of information.
  • the embodiment of the invention further provides a computer readable storage medium storing computer executable instructions for performing the above method.
  • An embodiment of the present invention provides a decryption method and a mobile terminal, which decrypts a ciphertext included in information of a session record of a current session, obtains a plaintext corresponding to the ciphertext, and replaces the ciphertext display with the plaintext. .
  • the batch decryption of the encrypted information in a one-to-one session or a multi-person session scenario is implemented, and the problem of the security of the session of the mobile terminal is solved.
  • the encrypted content itself is bulk-encrypted or multi-person conversation
  • the encrypted ciphertext can be directly sent or saved through the relevant transmission channel or the related communication client, and has the advantages of wide adaptability and low cost.
  • the embodiment of the present invention encrypts the content, and the user can directly see the encrypted ciphertext effect, and the security effect is visually visible, and has a good confidentiality experience.
  • the technical solution provided by the embodiments of the present invention is particularly suitable for a commercial user or a user with high confidential communication requirements to conduct a confidential session and a multi-crowd session based on the existing universal instant messaging software.
  • all or part of the steps of the above embodiments may also be implemented by using an integrated circuit. These steps may be separately fabricated into individual integrated circuit modules, or multiple modules or steps may be fabricated into a single integrated circuit module. achieve. Thus, embodiments of the invention are not limited to any specific combination of hardware and software.
  • the devices/function modules/functional units in the above embodiments may be implemented by a general-purpose computing device, which may be centralized on a single computing device or distributed over a network of multiple computing devices.
  • each device/function module/functional unit in the above embodiment When each device/function module/functional unit in the above embodiment is implemented in the form of a software function module and sold or used as a stand-alone product, it can be stored in a computer readable storage medium.
  • the above mentioned computer readable storage medium may be a read only memory, a magnetic disk or an optical disk or the like.
  • the decryption method and the mobile terminal of the embodiment of the present invention decrypt the ciphertext included in the information of the session record of the current session, and obtain the plaintext corresponding to the ciphertext, and replace the ciphertext display with the plaintext.
  • the batch decryption of the encrypted information in a one-to-one session or a multi-person session scenario is implemented, and the problem of the security of the session of the mobile terminal is solved.

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Computer Security & Cryptography (AREA)
  • Mobile Radio Communication Systems (AREA)

Abstract

一种解密方法和移动终端。该方法包括:对当前会话的会话记录的信息中包含的密文进行解密,得到所述密文相应的明文;以所述明文代替所述密文显示。本发明提供的技术方案适用于通信软件,实现了在一对一会话或多人会话场景下对被加密的信息批量解密。

Description

解密方法和移动终端 技术领域
本申请涉及但不限于通信领域。
背景技术
当前移动互联网飞速发展,智能手机已经普及,基于智能手机的社交软件,即时通信软件极大的改变了人们的通信和沟通方式。在通信过程中,往往需要发送一些敏感的私人信息,例如银行卡号、密码,或者仅能让双方知道的重要的商业机密等信息。如果在发送过程中能够对这些信息进行加密发送,将为用户提供更加放心的安全保障。目前像短信等客户端在传输过程中是没有加密处理的,极易被截获或泄露,而诸如微信、QQ等客户端在发送过程中虽然在底层传输时进行了加密处理,但是在客户端展现显示时是直接显示出来的明文,如果手机遗失,或者他人共用手机,或者服务器账号被他人盗取,过去的敏感聊天记录依然会泄露,给用户造成巨大损失。
发明内容
以下是对本文详细描述的主题的概述。本概述并非是为了限制权利要求的保护范围。
本发明实施例提供了一种解密方法和移动终端,解决了移动终端会话安全性的问题。
一种解密方法,包括:
对当前会话的会话记录的信息中包含的密文进行解密,得到所述密文相应的明文;
以所述明文代替所述密文显示。
可选地,所述对当前会话的会话记录的信息中包含的密文进行解密,得到所述密文相应的明文的步骤之前,还包括:
判定是否开启当前会话的自动解密模式;
在确定开启自动解密模式后,启动解密流程。
可选地,所述信息包括已发出的信息和自通信对端接收到的信息。
可选地,判定是否开启当前会话的自动解密模式的步骤包括:
在进入会话界面后,检测当前会话的会话记录中的包含密文的信息;
在检测到包含密文的信息时,显示是否开启自动解密模式的提示信息;
在检测到开启自动解密模式的指示时,开启自动解密模式。
可选地,判定是否开启当前会话的自动解密模式的步骤包括:
在检测到开启自动解密模式的指示时,直接开启自动解密模式。
可选地,所述对当前会话的会话记录中的信息中的密文进行解密,得到所述密文相应的明文的步骤包括:
获取解密密钥;
使用所述解密密钥对所述信息中的密文进行解密,得到所述密文相应的明文。
可选地,所述获取解密密钥的步骤包括:
对所述当前会话记录中的包含密文的信息逐条遍历预置的多个密钥,以尝试用所述多个密钥中的每个来将所述密文解密为明文;
将遍历过程中成功解密的密钥作为解密密钥。
可选地,该方法还包括:
在本地维护解密密钥配置信息,在该解密密钥配置信息中包含多个密钥。
可选地,所述获取解密密钥的步骤包括:
获取外部输入的解密密钥。
可选地,该方法还包括:
在移动终端内部存储中,始终以密文形式存储所述信息中包含的密文。
可选地,所述以所述明文代替所述密文显示的步骤之后,还包括:
对新接收到的或新发送出的包含有第二密文的的第二信息进行解密,得到所述第二信息中所述第二密文相应的第二明文;
以所述第二明文替换所述第二密文显示。
可选地,以所述明文代替所述密文显示的步骤之后,还包括:
在检测到显示密文指示时,对已被解密并显示为相应明文的密文,恢复显示密文。
可选地,所述显示密文指示为关闭自动解密模式的指示,该方法还包括:
在会话结束后,关闭所述会话的自动解密模式;或,
在检测到关闭自动解密模式的指示信息后,依照该指示信息,关闭自动解密模式。
可选地,该方法还包括:
检测到指定对一条或多条包含密文的信息进行解密的指示时,对该一条或多条信息中的密文进行解密,得到该一条或多条信息中的所述密文相应的明文。
可选地,所述会话为移动终端上的通信应用的会话。
本发明实施例还提供了一种移动终端,包括:
解密执行模块,设置为对当前会话的会话记录的信息中包含的密文进行解密,得到所述密文相应的明文;
显示模块,设置为以所述明文代替所述密文显示。
可选地,该移动终端还包括:
模式判断模块,设置为判定是否开启当前会话的自动解密模式;
模式管理模块,设置为在确定开启自动解密模式后,启动解密流程。
可选地,所述模式判断模块包括:
密文检测单元,设置为在进入会话界面后,检测当前会话的会话记录中的包含密文的信息;
提示单元,设置为在检测到包含密文的信息时,显示是否开启自动解密模式的提示信息;
模式开启单元,设置为在检测到开启自动解密模式的指示时,开启自动解密模式。
可选地,所述模式开启单元,还设置为在检测到开启自动解密模式的指示时,直接开启自动解密模式。
可选地,所述解密执行模块包括:
密钥获取单元,设置为获取解密密钥;
解密单元,设置为使用所述解密密钥对所述信息中的密文进行解密,得到所述密文相应的明文。
可选地,所述密钥获取单元包括:
密钥遍历子单元,设置为对所述当前会话记录中的包含密文的信息逐条遍历预置的多个密钥,以尝试用所述多个密钥中的每个来将所述密文解密为明文;
密钥确定单元,设置为将遍历过程中成功解密的密钥作为解密密钥,以尝试用所述多个密钥中的每个来将所述密文解密为明文。
可选地,所述密钥获取单元还包括:
密钥管理子单元,设置为在本地维护解密密钥配置信息,在该解密密钥配置信息中包含多个密钥。
可选地,所述密钥获取单元还包括:
外部密钥获取单元,设置为获取外部输入的解密密钥。
可选地,该移动终端还包括:
存储模块,设置为在系统后台,始终以密文形式存储所述信息中包含的密文。
可选地,所述显示模块,还设置为在检测到显示密文指示时,对已被解密并显示为相应明文的密文,恢复显示密文。
可选地,所述模式管理模块,还设置为在会话结束后,关闭所述会话的自动解密模式,或,
在检测到关闭自动解密模式的指示信息后,依照该指示信息,关闭自动 解密模式。
可选地,所述解密执行模块,还设置为在检测到指定对一条或多条包含密文的信息进行解密的指示时,对该一条或多条信息中的所述密文进行解密,得到该一条或多条信息中的所述密文相应的明文。
本发明实施例还提供一种计算机可读存储介质,存储有计算机可执行指令,所述计算机可执行指令用于执行上述方法。
本发明实施例提供了一种解密方法和移动终端,对当前会话的会话记录的信息中包含的密文进行解密,得到所述密文相应的明文,以所述明文代替所述密文显示。实现了在一对一会话或多人会话场景下对被加密的信息批量解密,解决了移动终端会话安全性的问题。
在阅读并理解了附图和详细描述后,可以明白其他方面。
附图概述
图1为输入明文的示意图;
图2为本发明实施例的进行加密的示意图;
图3为本发明实施例的会话记录中检测到密文后显示自动解密悬浮按钮的示意图;
图4为本发明实施例的点击自动解密按钮输入密钥的示意图;
图5为本发明实施例的打开自动解密模式后自动解密密文的示意图;
图6为本发明实施例的继续批量加密会话后自动解密新的密文的示意图;
图7为本发明实施例的自动解密关闭后只显示密文的示意图;
图8为本发明实施例的批量加密会话主流程示意图;
图9为本发明实施例的多人加密会话主流程示意图;
图10为本发明的实施例二提供的一种解密方法的流程图;
图11为本发明的实施例三提供的一种移动终端的结构示意图;
图12为图11中模式判断模块1103的结构示意图;
图13为图11中解密执行模块1101的结构示意图;
图14为图13中密钥获取单元1301的结构示意图。
本发明的实施方式
针对移动终端等设备上即时通信、短信等客户端批量会话和多人会话的特点,本发明实施例提出进行批量加密聊天和多人加密聊天的方法,聊天内容可以以密文的形式展现,只有具有正确的密钥才能自动解密和批量解密显示明文。
下文中将结合附图对本发明的实施例进行详细说明。需要说明的是,在不冲突的情况下,本申请中的实施例及实施例中的特征可以相互任意组合。
下面结合附图,对本发明的实施例一进行说明。
批量加密会话时,通信的双方在进行批量的会话前或会话过程中,事先打开自动解密模式并配置好自己客户端的自动解密密钥,这样在批量会话过程中,通信的双方收发加密信息后,系统将自动解密会话记录中的密文并在会话记录中显示解密后的明文(只是在界面显示上自动显示为解密后的明文,在后台会话记录中依然以密文存储),会话结束后或下次查阅时会话记录仍然会密文,必须重新输入密钥才能再次解密。这样达到既实现了批量加密会话,又便于通信双方通信过程中直观的查看密文的明文会话记录。
多人加密会话是上述批量加密会话方法的推广,会话的对象可以是两人及两人以上的多人群会话。多人加密会话时,不同的人可以配置不同数量的密钥——可以配置所有人都共有的通用密钥,也可以部分人配置只有这部分人才具有的私用密钥。通用密钥用于全体的加密会话;私用密钥可用于在群会话过程中,仅掌握该密钥的部分人之间才能进行加密解密交流,其它群会话成员仅能看到密文。在会话过程中,全体参与会话的人或者部分会话的人事先打开自动解密模式并配置好自己客户端的自动解密密钥,这样在会话过程中,当有加密密文会话出现后,具有相关密钥的人能自动解密密文,没有 密钥或者密钥不正确的一方只能看到他人的密文会话记录。
批量加密会话的主要环节是:
(1)通信的双方事先约定好会话的密钥,在会话前或者会话过程中,在系统中配置好信息加密的加密密钥。
(2)通信的一方在通信软件的信息输入框中输入明文,在有必要加密的情况下,通过点击具有加密功能的控件或其它界面对输入框中的信息进行加密处理,加密为特定格式的密文替换输入框中的明文,之后发送密文,密文通过软件已有的通信功能发送给对方。
输入明文和点击具有加密功能悬浮按钮对明文进行加密的示意图见图1~图2。
(3)通信双方的收发记录界面在监测到特定格式的密文后弹出自动解密悬浮按钮,通信的一方或者双方在点击自动悬浮按钮后弹出自动解密的密钥对话框,输入密钥后打开自己客户端的自动解密模式。
会话记录中检测到密文后显示自动解密悬浮按钮的示意图见图3,点击自动解密按钮输入密钥的示意图见图4。
自动解密模式打开后,自动将当前会话记录中的密文解密为明文(只是在界面显示上自动显示为解密后的明文,在后台会话记录中依然以密文存储)。当继续批量会话时,每新增一条会话记录时,若会话记录也为特定的密文格式,且当前自动解密模式的密钥与密文匹配时,则自动的将新增的密文解密为明文显示,否则对新增的会话内容不作处理。自动解密模式仅对打开该模式的通信一方有效,对另一方是否打开不影响,若另一方未打开自动解密模式,聊天记录依然为密文显示。
打开自动解密模式后自动解密密文的示意图见图5,继续批量加密会话后自动解密新的密文的示意图见图6。
会话过程中,在打开自动解密模式的情况下,再次点击自动解密按钮,将关闭自动解密功能,此时所有已经解密的明文将恢复显示为密文。
(4)当会话结束,再次打开原会话记录,或者当会话界面被置于后台后又恢复到前台界面,自动解密模式都自动默认关闭。再次打开自动解密模式 需要重新输入解密密钥。
自动解密模式通过步(4)情形关闭后显示密文的示意图见图7。
本发明批量加密会话的完整流程示意图见图8。
多人加密会话是上述批量加密会话的推广,适用于两人及两人以上的群会话情形。多人加密会话的主要环节是:
(1)通信的各方部分或者所有成员事先约定好会话的密钥,在会话前或者会话过程中,在系统中配置好信息加密的加密密钥。由于是多人群会话,不同的人可以配置不同数量的密钥。例如,可以配置所有人都共有的通用密钥,也可以部分人配置只有这部分人才具有的私用密钥。在密钥的配置过程中,需要对各个密钥配置相应的自定义名称代号,便于后续解密时选择。
(2)在多人会话过程中,通信的一方在通信软件的信息输入框中输入明文,在有必要加密的情况下,选择通过点击具有加密功能的控件或其它界面对输入框中的信息进行加密处理,加密为特定格式的密文替换输入框中的明文,之后发送密文,密文通过软件已有的通信功能发送给对方。在点击加密过程中,如果发送方事先配置了多个加密密钥(如同时配置了通用密钥和私人密钥),则需要发送方根据本次发送内容的适合范围选择对应的通用密钥或私人密钥。出于密钥的安全性,密钥选择界面中的公用或私人密钥的只以步(1)设置的名称代号来展示,当然,在此密钥选择界面也可添加或者修改新的密钥。
(3)通信各方的收发记录界面在监测到特定格式的密文后弹出自动解密悬浮按钮,通信的各方在点击自动悬浮按钮后弹出自动解密的密钥添加界面,输入密钥后打开自己客户端的自动解密模式。如果用户具有多个密钥,则可在密钥添加界面添加多个自动解密密钥。
(4)自动解密模式打开后,将遍历步(3)配置的各个解密密钥,尝试以各个密钥来自动将当前会话记录中的密文解密为明文(只是在界面显示上自动显示为解密后的明文,在后台会话记录中依然以密文存储)。如果遍历过程中有密钥能成功解密密文,则不再遍历其它密钥;如果所有密钥都不能 解密成功,则保持会话内容不作处理。当继续批量会话时,每新增一条会话记录时,则自动按照上面的方式自动遍历密钥来解密处理,达到自动解密的效果。自动解密模式仅对打开该模式的通信一方有效,对其他通信方是否打开不影响,若其他通信方未打开自动解密模式,聊天记录依然为密文显示。
(5)会话过程中,在打开自动解密模式的情况下,再次点击自动解密按钮,将关闭自动解密功能,此时所有已经解密的明文将恢复显示为密文。
(6)当会话结束,再次打开原会话记录,或者当会话界面被置于后台后又恢复到前台界面,自动解密模式都自动默认关闭。再次打开自动解密模式需要重新输入解密密钥。
本发明实施例的多人加密会话的完整流程示意图见图9。
对于上述的批量加密会话和多人加密会话,可以在交互方式、加解密方式、密钥配置等方面进行修改,包括但不限于其它替代技术方案:
在上述解密方法中,自动解密模式的打开是在检测到会话记录中存在密文后自动悬浮显示出来,且点击自动解密按钮后再输入解密密码再打开的。自动解密的打开和加密时的密码配置是分开和独立的,简化起见这两个模块可以整合在一起:1)在密钥配置模块同时配置好加解密密钥,自动解密密钥直接调用加密密钥来解密;
2)自动解密模式可以在配置密钥时就手动打开,而不需要检测出密文后才自动悬浮且需要输入解密密钥后才能打开;3)自动解密模式可以全局配置打开,即只要输入了正确的安全权限控制后就全局打开自动解密模式,只有手动关闭自动解密模式才关闭该功能,从而省去频繁打开自动解密模式的操作。
在上述解密方法中,基于加解密密钥相同的对称加解密方式,可以替换为公钥加密、私钥解密的非对称加解密方式。例如,多人加密会话方法中,发送方选择群会话中的部分人的公钥进行加密,通信各方在收到密文后只有被选中公钥的部分人的私钥才能解密密文。
例如:
1、在上述解密方法中,实现方案上可以只针对通信软件本身来实现或者 通过手机平台框架实现本发明实施例。对于未实现本发明实施例的手机终端来说,也可以收到实现本发明实施例的终端发来的密文,但不能具备自动解密的功能。这可以通过提供单独的密文解密客户端应用来替代。
2、在上述解密方法中,除了打开自动解密模式自动解密所有密文外,用户也可以在未打开或不能打开自动解密模式时逐条解密各个带密文的加密会话。
3、加解密过程中,加解密的密钥的输入方式除了数字、字母等文本外,还可以包括但不限于其他密钥方式:a)图案密钥方式,即加、解密过程中,密钥为事先约定的图案,通过图案与特定密钥的对应关系来进行加密,而解密时先输入图案,通过图案与特定密钥的对应关系来解密。b)手势密钥方式,即加、解密过程中,密钥为事先约定的手势,通过手势与特定密钥的对应关系来进行加密,而解密时先输入手势,通过手势与特定密钥的对应关系来解密;b)人脸、掌纹、声纹、指纹等其它生物识别等方式,加解密过程都是先建立相关生物特征与特定的密钥的对应关系来进行加解密处理。
下面结合附图,对本发明的实施例二进行说明。
本发明实施例二提供了一种解密方法,使用该方法,可以在移动终端的通信应用的会话中对信息进行加密显示和解密显示,提高安全性,具体流程如图10所示,包括:
步骤1001、判定是否开启当前会话的自动解密模式;
本发明实施例中,所述信息包括已发出的信息和自通信对端接收到的信息。
本步骤中,可设置移动终端在检测到密文时提示用户开启自动解密模式,也可以随时接收用户指示开启,具体如下:
1、移动终端在检测到密文时提示用户开启自动解密模式;
首先,在进入会话界面后,检测当前会话的会话记录中的包含密文的信息;在检测到包含密文的信息时,显示是否开启自动解密模式的提示信息;在检测到用户输入的开启自动解密模式的指示时,开启自动解密模式。
2、随时接收用户指示开启;
即在检测到用户输入的开启自动解密模式的指示时,开启自动解密模式。
需要说明的是,选择使用自动解密模式对开启或关闭解密功能只是多种实现方式的其中之一,其他在移动终端上能够实现开启或关闭功能的实现方式均在本发明保护范围之中。
步骤1002、对所述当前会话的会话记录的信息中包含的密文进行解密,得到所述密文相应的明文;
本步骤具体有两种实现方式,一是实时提示用户输入解密密钥,使用该解密密钥进行解密;二是使用预置的一个或多个解密密钥解密。具体如下:
1、实时提示用户输入解密密钥,使用该解密密钥进行解密;
首先,检测用户输入的解密密钥;然后使用所述解密密钥对所述信息中的密文进行解密,得到所述密文相应的明文。
2、使用预置的一个或多个解密密钥解密;
首先,对所述当前会话记录中的包含密文的信息逐条遍历预置的多个解密密钥以尝试用所述多个密钥中的每个来将所述密文解密为明文,然后对遍历过程中成功解密的相应解密密钥的密文进行解密,得到该密文对应的明文。对遍历后无相应解密密钥的密文,不进行解密操作。
相应的,需要在移动终端本地维护解密密钥配置信息,在该解密密钥配置信息中包含多个解密密钥。向所述解密密钥配置信息中添加新的解密密钥,或删除所述解密密钥配置信息中包含的解密密钥,或修改所述解密密钥配置信息中包含的解密密钥,以更新该解密密钥信息。
步骤1003、以所述明文代替所述密文显示;
本步骤中,在解密完成后,即可以明文代替密文显示;对于一条信息中,包含加密的密文和明文两种内容的,将密文替换为相应的明文显示,原有的明文不变。
与此同时,在系统后台,仍存储所述密文。
在所述自动解密模式开启状态下,后续可继续接收新的信息或发出新的 信息。对新接收到的或新发送出的包含有密文的信息进行解密,得到所述信息中密文对应的明文,以所述明文替换所述密文显示。
在自动解密模式开启后,可将该自动解密模式关闭,主要通过如下两种方式:
1、在会话结束后,关闭所述会话的自动解密模式;
即,在用户退出当前会话后,即关闭该会话的自动解密模式,用户再进入同一会话时,仍需要进行再次开启自动解密模式的操作。
2、检测到关闭自动解密模式的指示信息,依照该指示信息,关闭自动解密模式;
此种方式下,用户可以随时根据需要关闭自动解密模式。
当处于会话中且自动解密模式由开启变为关闭时,对已被解密并显示为相应明文的密文,恢复显示密文。
此外,在所述自动解密模式关闭状态下,检测到用户指定对一条或多条包含密文的信息进行解密的指示时,对该一条或多条信息中的密文进行解密,得到所述密文相应的明文。增加了系统的灵活性。
下面结合附图,对本发明的实施例三进行说明。
本发明实施例提供了一种移动终端,其结构如图11所示,包括:
解密执行模块1101,设置为对当前会话的会话记录的信息中包含的密文进行解密,得到所述密文相应的明文;
显示模块1102,设置为以所述明文代替所述密文显示。
可选地,该移动终端还包括:
模式判断模块1103,判定是否开启当前会话的自动解密模式;
模式管理模块1104,设置为在确定开启自动解密模式后,启动解密流程。
可选地,所述模式判断模块1103的结构如图12所示,包括:
密文检测单元1201,设置为在进入会话界面后,检测当前会话的会话记录中的包含密文的信息;
提示单元1202,设置为在检测到包含密文的信息时,显示是否开启自动解密模式的提示信息;
模式开启单元1203,设置为在检测到开启自动解密模式的指示时,开启自动解密模式。
可选地,所述模式开启单元1203,还设置为在检测到开启自动解密模式的指示时,直接开启自动解密模式。
可选地,所述解密执行模块1101的结构如图13所示,还包括:
密钥获取单元1301,设置为获取解密密钥;
解密单元1302,设置为使用所述解密密钥对所述信息中的密文进行解密,得到所述密文相应的明文。
可选地,所述密钥获取单元1301的结构如图14所示,包括:
密钥遍历子单元1401,设置为对所述当前会话记录中的包含密文的信息逐条遍历预置的多个密钥,以尝试用所述多个密钥中的每个来将所述密文解密为明文;
密钥确定单元1402,设置为将遍历过程中成功解密的密钥作为解密密钥。
可选地,所述密钥获取单元1301还包括:
密钥管理子单元1403,设置为在本地维护解密密钥配置信息,在该解密密钥配置信息中包含多个密钥。
可选地,所述密钥获取单元1301还包括:
外部密钥获取单元1404,设置为获取外部输入的解密密钥。
可选地,该移动终端还包括:
存储模块1105,设置为在系统后台,始终以密文形式存储所述信息中包含的密文。
可选地,所述显示模块1102,还设置为在检测到显示密文指示时,对已被解密并显示为相应明文的密文,恢复显示密文。
可选地,所述模式管理模块1104,还设置为在会话结束后,关闭所述会话的自动解密模式,或,
在检测到关闭自动解密模式的指示信息后,依照该指示信息,关闭自动解密模式。
可选地,所述解密执行模块1101,还设置为在检测到指定对一条或多条包含密文的信息进行解密的指示时,对该一条或多条信息中的密文进行解密,得到该一条或多条信息中的所述密文相应的明文。
本发明实施例还提供一种计算机可读存储介质,存储有计算机可执行指令,所述计算机可执行指令用于执行上述方法。
本发明的实施例提供了一种解密方法和移动终端,对当前会话的会话记录的信息中包含的密文进行解密,得到所述密文相应的明文,以所述明文代替所述密文显示。实现了在一对一会话或多人会话场景下对被加密的信息批量解密,解决了移动终端会话安全性的问题。
本发明的实施例中仅对加密内容本身进行批量加密或者多人会话,加密后的密文可以通过相关的传输信道或者相关的通信客户端直接发送或者保存,具有适应面广、成本低廉的优势。
本发明的实施例对内容进行加密,用户直接可以看到加密后的密文效果,保密效果直观可见,具有良好的保密体验。
本发明的实施例提供的技术方案特别适用于商业用户或保密通信要求高的用户基于现有通用即时通信软件进行保密会话和多人群会话。
本领域普通技术人员可以理解上述实施例的全部或部分步骤可以使用计算机程序流程来实现,所述计算机程序可以存储于一计算机可读存储介质中,所述计算机程序在相应的硬件平台上(如系统、设备、装置、器件等)执行,在执行时,包括方法实施例的步骤之一或其组合。
可选地,上述实施例的全部或部分步骤也可以使用集成电路来实现,这些步骤可以被分别制作成一个个集成电路模块,或者将它们中的多个模块或步骤制作成单个集成电路模块来实现。这样,本发明实施例不限制于任何特定的硬件和软件结合。
上述实施例中的各装置/功能模块/功能单元可以采用通用的计算装置来实现,它们可以集中在单个的计算装置上,也可以分布在多个计算装置所组成的网络上。
上述实施例中的各装置/功能模块/功能单元以软件功能模块的形式实现并作为独立的产品销售或使用时,可以存储在一个计算机可读取存储介质中。上述提到的计算机可读取存储介质可以是只读存储器,磁盘或光盘等。
任何熟悉本技术领域的技术人员在本发明实施例揭露的技术范围内,可轻易想到变化或替换,都应涵盖在本发明的保护范围之内。因此,本发明的保护范围应以权利要求所述的保护范围为准。
工业实用性
本发明实施例的解密方法和移动终端,对当前会话的会话记录的信息中包含的密文进行解密,得到所述密文相应的明文,以所述明文代替所述密文显示。实现了在一对一会话或多人会话场景下对被加密的信息批量解密,解决了移动终端会话安全性的问题。

Claims (28)

  1. 一种解密方法,其中,包括:
    对当前会话的会话记录的信息中包含的密文进行解密,得到所述密文相应的明文;
    以所述明文代替所述密文显示。
  2. 根据权利要求1所述的解密方法,其中,所述对当前会话的会话记录的信息中包含的密文进行解密,得到所述密文相应的明文的步骤之前,还包括:
    判定是否开启当前会话的自动解密模式;
    在确定开启自动解密模式后,启动解密流程。
  3. 根据权利要求1所述的解密方法,其中,所述信息包括已发出的信息和自通信对端接收到的信息。
  4. 根据权利要求2所述的解密方法,其中,判定是否开启当前会话的自动解密模式的步骤包括:
    在进入会话界面后,检测当前会话的会话记录中的包含密文的信息;
    在检测到包含密文的信息时,显示是否开启自动解密模式的提示信息;
    在检测到开启自动解密模式的指示时,开启自动解密模式。
  5. 根据权利要求2所述的解密方法,其中,判定是否开启当前会话的自动解密模式的步骤包括:
    在检测到开启自动解密模式的指示时,直接开启自动解密模式。
  6. 根据权利要求1所述的解密方法,其中,所述对当前会话的会话记录中的信息中的密文进行解密,得到所述密文相应的明文的步骤包括:
    获取解密密钥;
    使用所述解密密钥对所述信息中的密文进行解密,得到所述密文相应的明文。
  7. 根据权利要求6所述的解密方法,其中,所述获取解密密钥的步骤包 括:
    对所述当前会话记录中的包含密文的信息逐条遍历预置的多个密钥,以尝试用所述多个密钥中的每个来将所述密文解密为明文;
    将遍历过程中成功解密的密钥作为解密密钥。
  8. 根据权利要求7所述的解密方法,其中,该方法还包括:
    在本地维护解密密钥配置信息,在该解密密钥配置信息中包含所述多个密钥。
  9. 根据权利要求6所述的解密方法,其中,所述获取解密密钥的步骤包括:
    获取外部输入的解密密钥。
  10. 根据权利要求1所述的解密方法,其中,该方法还包括:
    在移动终端内部存储中,始终以密文形式存储所述信息中包含的密文。
  11. 根据权利要求1所述的解密方法,其中,所述以所述明文代替所述密文显示的步骤之后,还包括:
    对新接收到的或新发送出的包含有第二密文的第二信息进行解密,得到所述第二信息中所述第二密文相应的第二明文;
    以所述第二明文替换所述第二密文显示。
  12. 根据权利要求1或2所述的解密方法,其中,所述以所述明文代替所述密文显示的步骤之后,还包括:
    在检测到显示密文指示时,对已被解密并显示为相应明文的密文,恢复显示密文。
  13. 根据权利要求12所述的解密方法,其中,所述显示密文指示为关闭自动解密模式的指示,该方法还包括:
    在会话结束后,关闭所述会话的自动解密模式;或,
    在检测到关闭自动解密模式的指示信息后,依照该指示信息,关闭自动解密模式。
  14. 根据权利要求1所述的解密方法,其中,该方法还包括:
    检测到指定对一条或多条包含密文的信息进行解密的指示时,对该一条或多条信息中的密文进行解密,得到该一条或多条信息中的所述密文相应的明文。
  15. 根据权利要求1所述的解密方法,其中,所述会话为移动终端上的通信应用的会话。
  16. 一种移动终端,其中,包括:
    解密执行模块,设置为对当前会话的会话记录的信息中包含的密文进行解密,得到所述密文相应的明文;
    显示模块,设置为以所述明文代替所述密文显示。
  17. 根据权利要求16所述的移动终端,其中,该移动终端还包括:
    模式判断模块,设置为判定是否开启当前会话的自动解密模式;
    模式管理模块,设置为在确定开启自动解密模式后,启动解密流程。
  18. 根据权利要求17所述的移动终端,其中,所述模式判断模块包括:
    密文检测单元,设置为在进入会话界面后,检测当前会话的会话记录中的包含密文的信息;
    提示单元,设置为在检测到包含密文的信息时,显示是否开启自动解密模式的提示信息;
    模式开启单元,设置为在检测到开启自动解密模式的指示时,开启自动解密模式。
  19. 根据权利要求17所述的移动终端,其中:
    所述模式开启单元,还设置为在检测到开启自动解密模式的指示时,直接开启自动解密模式。
  20. 根据权利要求16所述的移动终端,其中,所述解密执行模块包括:
    密钥获取单元,设置为获取解密密钥;
    解密单元,设置为使用所述解密密钥对所述信息中的密文进行解密,得到所述密文相应的明文。
  21. 根据权利要求22所述的移动终端,其中,所述密钥获取单元包括:
    密钥遍历子单元,设置为对所述当前会话记录中的包含密文的信息逐条遍历预置的多个密钥,以尝试用所述多个密钥中的每个来将所述密文解密为明文;
    密钥确定单元,设置为将遍历过程中成功解密的的密钥作为解密密钥。
  22. 根据权利要求21所述的移动终端,其中,所述密钥获取单元还包括:
    密钥管理子单元,设置为在本地维护解密密钥配置信息,在该解密密钥配置信息中包含所述多个密钥。
  23. 根据权利要求21所述的移动终端,其中,所述密钥获取单元还包括:
    外部密钥获取单元,设置为获取外部输入的解密密钥。
  24. 根据权利要求16所述的移动终端,其中,该移动终端还包括:
    存储模块,设置为在系统后台,始终以密文形式存储所述信息中包含的密文。
  25. 根据权利要求16或17所述的移动终端,其中,
    所述显示模块,还设置为在检测到显示密文指示时,对已被解密并显示为相应明文的密文,恢复显示密文。
  26. 根据权利要求25所述的移动终端,其中,
    所述模式管理模块,还设置为在会话结束后,关闭所述会话的自动解密模式,或,
    在检测到关闭自动解密模式的指示信息后,依照该指示信息,关闭自动解密模式。
  27. 根据权利要求16所述的移动终端,其中,
    所述解密执行模块,还设置为在检测到指定对一条或多条包含密文的信息进行解密的指示时,对该一条或多条信息中的密文进行解密,得到该一条或多条信息中的所述密文相应的明文。
  28. 一种计算机可读存储介质,存储有计算机可执行指令,所述计算机可执行指令用于执行权利要求1至15中任一项所述的方法。
PCT/CN2015/087040 2014-09-23 2015-08-14 解密方法和移动终端 WO2016045464A1 (zh)

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
CN201410491631.8A CN104270516B (zh) 2014-09-23 2014-09-23 解密方法和移动终端
CN201410491631.8 2014-09-23

Publications (1)

Publication Number Publication Date
WO2016045464A1 true WO2016045464A1 (zh) 2016-03-31

Family

ID=52162004

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/CN2015/087040 WO2016045464A1 (zh) 2014-09-23 2015-08-14 解密方法和移动终端

Country Status (2)

Country Link
CN (1) CN104270516B (zh)
WO (1) WO2016045464A1 (zh)

Families Citing this family (9)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN104270516B (zh) * 2014-09-23 2019-05-24 中兴通讯股份有限公司 解密方法和移动终端
CN106156638B (zh) * 2015-04-22 2020-12-04 腾讯科技(深圳)有限公司 消息记录处理方法及设备
CN105260887A (zh) * 2015-09-11 2016-01-20 上海斐讯数据通信技术有限公司 一种nfc支付方法、系统及智能终端
CN107453975A (zh) * 2016-05-31 2017-12-08 北京北信源软件股份有限公司 一种即时通信群内密聊方法
CN107563216A (zh) * 2016-07-01 2018-01-09 四川秘无痕信息安全技术有限责任公司 一种安卓系统qq聊天记录解密方法
CN108667796A (zh) * 2018-03-23 2018-10-16 河南芯盾网安科技发展有限公司 基于剪贴板的数据解密方法及系统
CN110943849B (zh) * 2019-12-26 2023-04-18 中国平安财产保险股份有限公司 通信组建立方法、装置、计算机设备及存储介质
CN116170533A (zh) * 2022-12-27 2023-05-26 维沃移动通信有限公司 消息提醒方法、装置、电子设备及可读存储介质
CN116112458A (zh) * 2023-02-09 2023-05-12 网易(杭州)网络有限公司 通信方法、装置、设备及存储介质

Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US4809327A (en) * 1986-09-02 1989-02-28 Unisys Corporation Encrtption of messages employing unique control words and randomly chosen encryption keys
CN101789865A (zh) * 2010-03-04 2010-07-28 深圳市华信安创科技有限公司 一种用于加密的专用服务器及加密方法
CN101867898A (zh) * 2010-07-02 2010-10-20 中国电信股份有限公司 一种短信加密通信系统、方法及密钥中心
CN104270516A (zh) * 2014-09-23 2015-01-07 中兴通讯股份有限公司 解密方法和移动终端

Family Cites Families (10)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US7409061B2 (en) * 2000-11-29 2008-08-05 Noatak Software Llc Method and system for secure distribution of subscription-based game software
CN101060670A (zh) * 2007-05-24 2007-10-24 深圳市杰特电信控股有限公司 一种手机短信加解密方法
CN101800799A (zh) * 2009-02-11 2010-08-11 英华达(西安)通信科技有限公司 短信加密方法及利用该方法进行短信加密的移动通讯装置
FI20096404A (fi) * 2009-12-29 2011-06-30 Kabuto Oy Menetelmä ja järjestelmä tiedon siirtoon salattuna
EP2418800B1 (en) * 2010-08-12 2014-10-08 BlackBerry Limited Method and device for automatically distributing updated key material
DE102010035098A1 (de) * 2010-08-23 2012-02-23 Giesecke & Devrient Gmbh Verfahren zum Authentisieren eines portablen Datenträgers
US8958559B2 (en) * 2011-06-03 2015-02-17 Apple Inc. System and method for secure instant messaging
KR101808188B1 (ko) * 2011-07-04 2017-12-13 삼성전자주식회사 이동 기기에 대한 그룹 키 관리를 위한 방법 및 장치
WO2014027725A1 (ko) * 2012-08-13 2014-02-20 한국과학기술원 모바일 인스턴트 메신저를 이용한 인터랙티브 방송 프로그램의 사용자 인터페이스 제공 방법 및 그 시스템
CN103023653B (zh) * 2012-12-07 2017-03-29 哈尔滨工业大学深圳研究生院 低功耗的物联网安全组通信方法及装置

Patent Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US4809327A (en) * 1986-09-02 1989-02-28 Unisys Corporation Encrtption of messages employing unique control words and randomly chosen encryption keys
CN101789865A (zh) * 2010-03-04 2010-07-28 深圳市华信安创科技有限公司 一种用于加密的专用服务器及加密方法
CN101867898A (zh) * 2010-07-02 2010-10-20 中国电信股份有限公司 一种短信加密通信系统、方法及密钥中心
CN104270516A (zh) * 2014-09-23 2015-01-07 中兴通讯股份有限公司 解密方法和移动终端

Also Published As

Publication number Publication date
CN104270516B (zh) 2019-05-24
CN104270516A (zh) 2015-01-07

Similar Documents

Publication Publication Date Title
WO2016045464A1 (zh) 解密方法和移动终端
CN106716914B (zh) 用于漫游的受保护内容的安全密钥管理
JP6307665B2 (ja) 再生不能通信セッションのためのシステムおよび方法
WO2018133686A1 (zh) 一种密码保护方法、装置及存储介质
CN106104562B (zh) 机密数据安全储存和恢复系统及方法
KR102330538B1 (ko) 디바이스를 통한 콘텐츠 와이핑 동작 로밍 기법
US9226147B2 (en) System and method of securing instant messaging sessions
WO2016045469A1 (zh) 信息加密方法和移动终端
US20180219688A1 (en) Information Transmission Method and Mobile Device
US10708237B2 (en) System and method for chat messaging in a zero-knowledge vault architecture
EP2953320B1 (en) System and method for switching between messaging security policies
WO2016115889A1 (zh) 一种对信息进行加密控制、解析信息的方法、系统和终端
CN103763091B (zh) 一种应用程序加密、解密方法及加密、解密装置
CN104270353B (zh) 一种信息安全传递方法及系统、接收终端、发送终端
US10791124B2 (en) Method and terminal device for encrypting message
CA3178204A1 (en) Secure messaging between cryptographic hardware modules
CN105743917B (zh) 消息传输方法及终端
US11245530B2 (en) System and method for secure communication
CN103020504A (zh) 基于指纹认证的图片管理系统及图片管理方法
CN107154916A (zh) 一种认证信息获取方法、提供方法及装置
WO2017080356A1 (zh) 一种安全输入方法、装置和系统
US20150156173A1 (en) Communication system utilizing fingerprint information and use thereof
WO2016146046A1 (zh) 数据访问方法及装置
CN110912683B (zh) 密码存储方法及装置、密码验证方法及装置
WO2016165312A1 (zh) 加密方法、解密方法及其装置

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 15843563

Country of ref document: EP

Kind code of ref document: A1

NENP Non-entry into the national phase

Ref country code: DE

122 Ep: pct application non-entry in european phase

Ref document number: 15843563

Country of ref document: EP

Kind code of ref document: A1