WO2016145849A1

WO2016145849A1 - Short message security management method, device and terminal

Info

Publication number: WO2016145849A1
Application number: PCT/CN2015/092325
Authority: WO
Inventors: 赵冬晓
Original assignee: 中兴通讯股份有限公司
Priority date: 2015-09-22
Filing date: 2015-10-20
Publication date: 2016-09-22
Also published as: CN106550357A

Abstract

Provided are a short message security method, device and terminal. The method comprises: detecting that a terminal receives a short message; then determining whether security protection processing is required to be performed on the short message; if so, then performing concealing processing on the short message and obtaining a replacement short message, saving the replacement short message to a short message database of the terminal, and saving the original short message corresponding to the replacement short message to a backup security database of the terminal; if the replacement short message in the short message database is detected to be accessed, then performing a security authentication on an accessing side, and if the authentication is passed, then retrieving, from the backup security database, the corresponding original short message for display. By the above technical solution, the present invention performs security protection processing on a short message, and then writes the short message to the short message database; in addition, when a replacement short message in the short message database is accessed, security authentication is performed on an accessing side, thus preventing short message theft from an malicious application, and ensuring and enhancing short message security.

Description

Short message security management method, device and terminal

Technical field

The present invention relates to the field of communications, and in particular, to a short message security management method, apparatus, and terminal.

Background technique

SMS plays an important role in people's lives. In addition to the normal sending and receiving of contact information, SMS has become the distribution center for invitation codes, verification codes, express messages, various advertisements, notification messages, and spam messages. It may contain very important personal information, which is closely related to personal financial security and account security. Recently, there have been many cases of hacking SMS messages based on the android platform to steal personal information and funds. In principle, it is also because maliciously implanted virus programs obtain SMS content from the background and spread out through the network, thereby causing personal information. Leakage, these important personal information may be used by criminals, resulting in the loss of personal economic interests.

Summary of the invention

The main technical problem to be solved by the present invention is to provide a method, a device and a terminal for short message security management, which solve the problem that the short message is easily stolen by a malicious application and the security of the short message is low in the prior art.

To solve the above technical problem, the present invention provides a short message security management method, including: monitoring a terminal to receive a short message; determining whether the short message is required to be securely protected; and if necessary, hiding the short message to obtain a replacement short message. And storing the replacement short message in the short message database of the terminal, and storing the original short message corresponding to the replacement short message into the backup security database of the terminal; and detecting that the replacement short message in the short message database is accessed, accessing The party performs security authentication, and if the authentication is passed, the corresponding original short message is retrieved from the backup security database for display.

In the embodiment of the present invention, the determining whether the security protection process needs to be performed on the short message includes any one of the following three manners:

A: determining whether the sending number of the short message is a preset number to be protected;

Second: determining whether the short message content of the short message includes the preset keyword;

3: Determine whether the sending number of the short message is a preset number to be protected, and whether the short message content of the short message includes a preset keyword.

In an embodiment of the present invention, the performing the hiding process of the short message to obtain the replacement short message comprises: when the sending number of the short message is a preset number to be protected, and determining that the short message needs to be subjected to security protection processing, The sending number of the short message is hidden; when the short message content of the short message includes a preset keyword, and the smart message is determined to be processed, the keyword in the short message content of the short message is hidden.

In the embodiment of the present invention, when the sending number of the short message is hidden, the method includes: covering, deleting, or replacing the sending number of the short message; and performing hidden processing on the short message content of the short message: The portion of the short message content of the short message that includes the keyword information is overwritten, deleted, or replaced.

In the embodiment of the present invention, after the short message is processed to obtain the replacement short message, before the replacement short message is stored in the short message database, the method further includes: adding, in the replacement short message, the characterizing message type to The identification identifier of the secure SMS.

In the embodiment of the present invention, the storing the replacement short message in the short message database of the terminal, and storing the original short message corresponding to the replacement short message into the backup security database of the terminal includes: saving the replacement short message Entering a first location of the short message database, and storing the original short message corresponding to the replacement short message into a location in the backup security database that is the same as the first location; or, in the replacement short message and its corresponding original The unique identification identifiers are respectively added to the short messages, and then stored in the short message database and the backup security database, respectively.

In the embodiment of the present invention, when the original short message corresponding to the replacement short message is stored in the same location as the first location in the backup security database, when the replacement short message is in the short message database When a location changes, the storage location of the original short message corresponding to the replacement short message in the backup security database is synchronously updated. .

In an embodiment of the invention, the accessing party comprises: a short message application or a third party application.

In an embodiment of the present invention, the security verification includes at least one of fingerprint identification verification, voice recognition verification, eye pattern verification, and password verification.

To solve the above technical problem, the present invention further provides a short message security management device, including a monitoring module, a determining module, a hidden processing module, a storage module, and a security verification module; the monitoring module is configured to monitor a terminal to receive a short message; the determining module The setting is performed to determine whether the short message is required to be subjected to security protection processing; the hiding processing module is configured to perform the hiding process of the short message to obtain a replacement short message; and the storage module is configured to store the replacement short message into the short message of the terminal a database, the original short message corresponding to the replacement short message is stored in the backup security database of the terminal; and the security verification module is configured to perform security authentication on the access party when the replacement short message in the short message database is accessed, for example, the authentication is passed. The corresponding original short message is retrieved from the backup security database for display.

In an embodiment of the present invention, the determining module includes any one of a first determining sub-module, a second determining sub-module, and a third determining sub-module; the first determining sub-module is configured to determine that the short message is sent. Whether the number is a preset number to be protected, and if so, determining that the short message needs to be subjected to security protection processing; and the second determining sub-module is configured to determine whether the short message content of the short message includes a preset keyword; Determining that the short message needs to be subjected to security protection processing; the third determining sub-module is configured to determine whether the sending number of the short message is a preset number to be protected, and whether the short message content of the short message includes a preset key Word; if yes, it is determined that the short message needs to be subjected to security protection processing.

In an embodiment of the present invention, the hidden processing module includes a number hiding processing sub-module and/or a content hiding processing sub-module; and the number hiding processing sub-module is configured to: when the sending number of the short message is a preset number to be protected, And determining, by the security protection process, that the sending number of the short message is hidden; the content hiding processing sub-module is configured to: when the short message content of the short message includes a preset keyword, and determine the When SMS needs to be secured, The keywords in the short message content of the short message are hidden.

In an embodiment of the present invention, the storage module includes a first storage submodule or a second storage submodule; the first storage submodule is configured to store the replacement short message in a first location in the short message database And storing the original short message corresponding to the replacement short message in the same location as the first location in the backup security database; the second storage submodule is configured to be in the replacement short message and its corresponding original short message. After the unique identification identifiers are respectively added, they are then stored in the short message database and the backup security database, respectively.

In order to solve the above technical problem, the present invention also provides a terminal, including the short message security management device as described above.

The beneficial effects of the invention are:

The invention provides a method, a device and a terminal for managing a short message. After receiving a short message, the terminal determines whether the short message needs to be protected and protected before storing the short message. If necessary, the short message is hidden. The replacement short message is obtained, and the obtained replacement short message is stored in the short message database of the terminal, and the original short message corresponding to the replacement short message is stored in the backup security database of the terminal, and when the replacement short message in the short message database is detected, the accessing party is performed. Security authentication, such as authentication, only retrieves the corresponding original SMS from the backup security database for display; otherwise, the access fails. It can be seen that the present invention performs security protection processing on the short message before the short message is written into the short message database, and when the replacement short message in the short message database is accessed, the malicious authentication is performed on the accessing party, thereby preventing the malicious application from stealing the short message and ensuring the short message. The security has improved the security of SMS.

DRAWINGS

FIG. 1 is a flowchart of a method for managing a short message security according to Embodiment 1;

2 is a schematic structural diagram of a short message security management apparatus provided in Embodiment 2;

FIG. 3 is a flowchart of a short message security management method provided in Embodiment 3.

detailed description

The present invention will be further described in detail below with reference to the accompanying drawings.

Embodiment 1

FIG. 1 is a flowchart of a method for managing a short message security according to an embodiment of the present invention. The short message in this embodiment includes, but is not limited to, a short message sent by a short message function of the terminal, and includes a third party application, such as a Fetion and a WeChat phone book. Please send a text message; please refer to Figure 1, the specific steps of the SMS security management method include:

S101: Monitoring that the terminal receives the short message;

S102: determining whether it is necessary to perform security protection processing on the short message, if necessary, go to step S103; otherwise, go to step 106;

S103: hiding the short message to obtain a replacement short message;

S104: The replacement short message is stored in the short message database of the terminal, and the original short message corresponding to the replacement short message is stored in the backup security database of the terminal;

S105: When detecting that the replacement short message in the short message database is accessed, performing security authentication on the accessing party, for example, the authentication succeeds, and the corresponding original short message is retrieved from the backup security database for display;

S106: The short message is stored in the short message database of the terminal.

Preferably, when the terminal is started, the action of the monitoring terminal receiving the short message is also automatically started, which avoids the problem that the security protection processing of some short messages is missed, and ensures that all the short messages received by the terminal can be judged whether it is to be safe. The protection process, and before S101, the highest system authority of the terminal has been acquired to ensure that the above steps can operate normally. It should be understood that, in S101, the terminal receives the short message, and at this time, the short message has not been stored in the short message database, and the short message is stored in the database after the short message is hidden in S103 to obtain the replacement short message.

Preferably, the foregoing S102 determines whether the security protection process needs to be performed on the short message, and includes any one of the following three methods:

Method 1: Determine whether the sending number of the short message is a preset number to be protected; specifically, compare the sending number of the short message with the preset number to be protected, and if the comparison result is the sending number of the short message and the preset to be protected If the number is the same, the SMS needs to be securely protected. If the result of the comparison is that the sending number of the short message is different from the preset number to be protected, the short message is not protected, that is, according to the normal process, the short message is stored in the short message database. The preset protection number can be set by the user directly inputting the number that the user wants to set. The number to be protected can be flexibly customized by the user according to his own needs; the number to be protected can also be the system's own The number related to the security information, such as the number of each bank, the number of the three major operators, etc.;

Method 2: judging whether the short message content of the short message includes a preset keyword; specifically, searching for the content of the short message, and whether there is a preset keyword in the short message content, if there is a preset keyword, The short message is used for security protection; if there is no preset keyword, the short message is not protected by the security process, that is, according to the normal process, the short message is stored in the short message database; the preset keyword in the short message content can be directly input by the user. The keyword that you want to set, the keyword can be flexibly customized by the user according to his own needs; the preset keyword in the short message content can also be a keyword related to the security information, such as a password, Verification code, account balance, etc.;

Manner 3: determining whether the sending number of the short message is a preset number to be protected, and whether the short message content of the short message includes a preset keyword; specifically, comparing the sending number of the short message with the preset number to be protected, and Searching the content of the short message to retrieve whether there is a preset keyword in the short message content; if the comparison result is that the sending number of the short message is the same as the preset to-be-protected number, and there is a preset keyword, the short message needs to be performed. Security protection processing; if the result of the comparison is that the sending number of the short message is the same as the preset to-be-protected number, and there is no preset keyword, the short message is not subjected to security protection processing, that is, according to the normal process, the short message is saved into the short message. Database; if the result of the comparison is that the sending number of the short message is different from the preset number to be protected, and there is no preset keyword, the short message is not protected by the security process, that is, according to the normal process, the short message is stored in the short message database; The preset protection number can be set by the user directly Enter the number that the user wants to set. The number to be protected can be flexibly customized by the user according to his own needs. The number to be protected can also be the number associated with the security information that comes with the system, such as the number of each bank, three. The number of the big operator; the preset keyword in the short message content can be directly input by the user to the keyword that the user wants to set, and the keyword can be flexibly customized according to the user's needs; the preset in the short message content The keyword can also be a keyword related to security information, such as a password, a verification code, an account balance, and the like.

Preferably, in S103, when the sending number of the short message is a preset number to be protected, and the short message is determined to be subjected to security protection processing, the sending number of the short message is hidden; when the sending number of the short message is hidden, the hidden manner may be The method of covering, deleting, or replacing the sending number of the short message may be to cover, delete or replace any number of the sending number of the short message, or may overwrite, delete or replace all the sending numbers of the short message. Processing; the coverage may be a fixed number built into the system to cover the sending number of the short message, or the number, letter, character, picture, etc. set by the user according to the needs of the user to cover the sending number of the short message; the replacement may be by the system The built-in fixed number replaces the sending number of the short message, or the number, letter, character, picture, etc. set by the user according to the needs of the user to replace the sending number of the short message; thereby overcoming the privacy of the short message sender is easily The problem that others have seen. When the short message content of the short message includes a preset keyword, and the short message is determined to be subjected to security protection processing, the keyword in the short message content of the short message is hidden; when the short message content of the short message is hidden, the hidden manner includes : Overwriting, deleting or replacing the part of the short message including the keyword information in the short message content of the short message; the covering may be fixed content built in the system to cover the content of the short message, or may be a number set by the user according to his own needs, Letters, characters, pictures, etc. to cover the content of the short message; the replacement may be the fixed content built in the system to replace the content of the short message, for example, the format of the fixed content is the identification identifier + the setting number + the keyword + the preset content, such as Oh, the fixed content is "/*Security*/95559 verification code, the message is encrypted", or the content of the text message can be replaced by the number, letter, character, picture, etc. set by the user according to his own needs; SMS security.

Preferably, after the short message is hidden to obtain the replacement short message, before the replacement short message is stored in the short message database, an identification identifier for characterizing the short message type as a secure short message is added to the number or content of the replaced short message, thereby identifying the identifier It can be determined that the short message type is a security-processed short message, and the format of the identifier includes, but is not limited to, a specific character + an English mark + a specific character format, such as /*Security*/, if the message starts with an identification identifier , you can use a way to add a specific layer of characters, such as modifying the identification identifier to /*/*Security*/*/.

Preferably, in S104, the replacement short message is stored in the first location in the short message database of the terminal, and the original short message corresponding to the replacement short message is stored in the same location as the first location in the backup security database, so as to ensure that the replacement short message corresponds to the replacement short message. The original SMS corresponds; when the user clicks on the replacement SMS in the SMS database, since the location of the original SMS in the backup security database and the location of the replacement SMS in the SMS database are the same, the corresponding backup security database can be found. Original message; or, after adding the unique identification identifier in the replacement SMS and its corresponding original SMS, then storing the replacement SMS in the SMS database, and storing the original SMS corresponding to the replacement SMS in the backup security database, when When the user clicks on the replacement short message in the short message database, the original short message in the corresponding backup security database can be found according to the unique identification identifier.

Preferably, when the original short message corresponding to the replacement short message is stored in the same location as the first location in the backup security database, when the first location of the replacement short message in the short message database changes, the original short message corresponding to the replacement short message in the backup security database is short. The storage location of the letter is updated synchronously, so that the location of the replacement short message in the short message database corresponds to the location of the original short message corresponding to the replacement short message in the backup security database.

Preferably, when it is detected in S104 that the replacement short message in the short message database is accessed, the access party performs security authentication, and the access party includes but is not limited to a short message application, a third party application, such as WeChat, Tencent QQ, Sina Weibo, etc.; Including, but not limited to, at least one of fingerprint identification verification, voice recognition verification, eye pattern verification, and password verification. If the security authentication is passed, the corresponding original short message is retrieved from the backup security database and displayed at the location of the substitute short message. The replacement SMS is not displayed, so that the user can view and operate the corresponding original SMS normally; if the security authentication fails, the security verification or the SMS application can be re-executed; the security of the SMS is improved by the above security verification.

Embodiment 2

2 is a schematic structural diagram of a short message security management apparatus according to the embodiment. The short message in this embodiment includes but is not limited to a short message sent by a short message function of the terminal, and includes a third party application, such as a Fetion and a WeChat phone book. Please refer to FIG. 2, the SMS security management device 20 includes: a monitoring module 201, a determining module 202, a hidden processing module 203, a storage module 204, and a security verification module 205; the monitoring module 201 is configured to monitor the terminal receiving The short message; the determining module 202 is configured to determine whether the short message security protection process is needed; the hidden processing module 203 is configured to hide the short message to obtain a replacement short message; the storage module 204 is configured to store the replacement short message into the short message database of the terminal, and replace the short message. The corresponding original short message is stored in the backup security database of the terminal; when the security verification module 205 is configured to access the replacement short message in the short message database, the security verification is performed on the accessing party, and if the authentication is passed, the corresponding original short message is retrieved from the backup security database. Displayed at the location where the SMS is replaced.

Preferably, when the terminal is started, the monitoring module 201 is also automatically started, which avoids the problem that the security protection processing of some short messages is missed, and ensures that all the short messages received by the terminal can be judged whether to perform security protection processing, and Before the monitoring module 201 works, the highest system authority of the terminal has been acquired to ensure that the monitoring module 201 can operate normally. It should be understood that the monitoring module 201 detects that the terminal receives the short message. At this time, the short message has not been stored in the short message database, and the hidden processing module 203 hides the short message to obtain the replacement short message, and then saves the short message into the database. of.

Preferably, the determining module 202 includes any one of the first determining submodule 2021, the second determining submodule 2022, and the third determining submodule 2023. The first determining submodule 2021 is configured to determine whether the sending number of the short message is preset. The number to be protected, if yes, it is determined that the short message needs to be protected by security; specifically, the sending number of the short message is compared with the preset number to be protected, and if the comparison result is that the sending number of the short message is the same as the preset to-be-protected number If the result of the comparison is that the sending number of the short message is different from the preset number to be protected, the short message is not protected, that is, according to the normal process, the short message is stored in the short message database; The protection number can be set by the user directly inputting the number that the user wants to set. The number to be protected can be flexibly customized by the user according to his own needs; the number to be protected can also be the system's own and security information. Related numbers, such as the number of each bank, the number of the three major operators, etc.;

The second determining sub-module 2022 is configured to determine whether the short message content of the short message includes a preset keyword; if yes, determining that the short message needs to be subjected to security protection processing; specifically, searching for the content of the short message to retrieve whether the short message content exists If there is a preset keyword, the user needs to perform security protection on the short message. If there is no preset keyword, the short message is not protected by the security process, that is, according to the normal process, the short message is stored. The short message database; the preset keyword in the short message content can be directly input by the user to the keyword that the user wants to set, and the keyword can be flexibly customized according to the user's needs; the preset keyword in the short message content is also It can be the security-related keywords that the system comes with, such as passwords, verification codes, account balances, etc.

The third determining sub-module 2023 is configured to determine whether the sending number of the short message is a preset number to be protected, and whether the short message content of the short message includes a preset keyword; if yes, determining that the short message needs to be protected by security; Comparing the sending number of the short message with the preset number to be protected, and searching the content of the short message to retrieve whether there is a preset keyword in the short message content; if the comparison result is the sending number of the short message and the preset to be protected If the number is the same and there is a preset keyword, you need to perform security protection on the short message. If the result of the comparison is that the sending number of the short message is the same as the preset number to be protected, and there is no preset keyword, the message is not correct. Perform security protection processing, that is, process according to the normal process, and save the short message into the short message database; if the comparison result is that the sending number of the short message is different from the preset to-be-protected number, and there is no preset keyword, the short message is not secured. Protection processing, that is, processing according to the normal process, storing the short message into the short message database; the preset protection number The setting method may be that the user directly inputs the number that the user wants to set, and the to-protected number can be flexibly customized according to the user's needs; the number to be protected may also be the number associated with the security information that is included in the system. For example, the number of each bank, the number of the three major operators, etc.; the preset keyword in the short message content can be directly input by the user to the keyword that the user wants to set, and the keyword can be flexibly customized according to the user's needs. The preset keyword in the short message content may also be a keyword related to the security information, such as a password, a verification code, an account balance, and the like.

Preferably, the hidden processing module 203 includes a number hiding processing sub-module 2031 and/or a content hiding processing sub-module 2032. The number hiding processing sub-module 2031 is configured to: when the sending number of the short message is a preset number to be protected, and determining that the short message needs to be performed When the security protection is processed, the sending number of the short message is hidden; when the sending number of the short message is hidden, the hidden way may be to cover, delete or replace the sending number of the short message, which may be any of the sending number of the short message. Several numbers can be overwritten, deleted or replaced. It can also cover, delete or replace all the sending numbers of the short message. The coverage can be a fixed number built into the system to cover the sending number of the short message, or it can be The user overwrites the sending number of the short message according to the number, letter, character, picture, etc. set by the user; the replacement may be a fixed number of the built-in system to replace the sending number of the short message, or may be set by the user according to his own needs. The number, letter, character, picture, etc. to replace the sending of the text message The number; thereby overcoming the problem that the privacy of the sender of the message is easily viewed by others.

The content hiding processing sub-module 2032 is configured to: when the short message content of the short message includes a preset keyword, and determine that the short message needs to perform security protection processing, hide the keyword in the short message content of the short message; When the content of the short message is hidden, the hidden manner includes: covering, deleting or replacing the part of the short message including the keyword information; the overlay may be a fixed content built in the system to cover the content of the short message. The content of the short message may be covered by the number, letter, character, picture, etc. set by the user according to his own needs; the replacement may be the fixed content built in the system to replace the content of the short message, for example, the format of the fixed content is the identification identifier + Set the number + keyword + preset content, such as the fixed content is "/*Security*/95559 verification code, the message is encrypted", or it can be the number, letter, character, picture set by the user according to his own needs. Waiting to replace the content of the text message; thus improving the security of the text message Fullness.

Preferably, the short message security management device 20 further includes an identification identifier generating module 206. After the short message is hidden to obtain a replacement short message, the identifier generating module 206 generates a message for characterizing the short message type as a secure short message in the number or content of the replaced short message. The identification module can determine whether the short message type is a secure short message according to the identification identifier; add an identification identifier for characterizing the short message type to the secure short message in the content of the replacement short message, thereby identifying the identifier Determining that the short message type is a security-processed short message, and the format of the identifier includes, but is not limited to, a specific character + an English mark + a specific character format, such as /*Security*/, if the start of the short message is an identification identifier, You can use a way to add a specific character, such as modifying the identification identifier to /*/*Security*/*/.

Preferably, the storage module 204 includes a first storage submodule 2041 or a second storage submodule 2042; the first storage submodule 2041 is configured to store the replacement short message in a first location in the short message database, and replace the original short message corresponding to the short message. Stored in the backup security database in the same location as the first location, ensuring that the replacement SMS corresponds to the original SMS corresponding to the replacement SMS; when the user clicks on the replacement SMS in the SMS database, the location and replacement of the original SMS in the backup security database The location of the short message in the short message database is the same, so the original short message in the corresponding backup security database can be found;

The second storage sub-module 2042 is configured to add a unique identification identifier to the replacement short message and the corresponding original short message, and then store the replacement short message in the short message database, and store the original short message corresponding to the replacement short message in the backup security database. When the user clicks on the replacement short message in the short message database, the original short message in the corresponding backup security database can be found according to the unique identification identifier.

Preferably, the short message security management device 20 further includes a location update module 207, when the original short message corresponding to the replacement short message is stored in the same location as the first location in the backup security database, when the first location of the short message database in the short message database changes, The location update module 207 is configured to synchronously update the storage location of the original short message corresponding to the replacement short message in the backup security database, so that the location of the replacement short message in the short message database corresponds to the location of the original short message corresponding to the replacement short message in the backup security database. .

Preferably, when the security verification module 205 detects that the replacement short message in the short message database is accessed, the security verification is performed on the accessing party, and the accessing party includes, but is not limited to, a short message application, a third party application, such as WeChat, Tencent QQ, Sina Weibo, and the like; The security verification includes, but is not limited to, at least one of fingerprint identification verification, voice recognition verification, eye pattern verification, and password verification. If the security authentication is passed, the corresponding original short message is retrieved from the backup security database and displayed at the location of the substitute short message. At the same time, instead of displaying the short message, the user can view and operate the corresponding original short message normally; if the security authentication fails, the security verification can be resumed or the short message application can be exited; the security of the short message is improved by the above security verification.

The invention also provides a terminal, which comprises the above-mentioned short message security management device.

Embodiment 3

In order to better understand the present invention, this embodiment provides a specific short message security management method as an example for further implementation. For example, FIG. 3 is a flowchart of a specific short message security management method according to the embodiment, which is shown in FIG. 3, and the specific steps are as follows:

S301: The terminal is started, the monitoring module 201 is also automatically started, and the monitoring module 201 monitors the terminal to receive the short message in real time;

S302: When the monitoring module 201 detects that the terminal receives the short message sending number 95559, the determining module 202 determines that the number is the bank number, and the content of the short message is modified to “/*Security*/95559 verification code, the short message content is Secure SMS, please use fingerprint verification to view the correct SMS.” Write the modified SMS to the SMS database, the location value in the SMS database is 0x000FF, and write the SMS content before modification to the backup security database. The location value in the database is 0x000FF;

S303: When the user opens the short message application, the short message sending content corresponding to 95559 is “/*Security*/95559 verification code, and the short message content is a secure short message, please use fingerprint verification to view the correct short message.” The determining module 202 checks/ After *Security*/, it is judged that the short message is a modified short message. When the user wants to view the short message before the SMS sending number is 95559, the user clicks the short message before the modification, and the security verification module 205 prompts the user to perform fingerprint identification verification. If the authentication is passed, the location value of the location value of 0x000FF is searched in the backup security database according to the modified SMS message location value 0x000FF, and the location value of the SMS before the modification is 0x000FF in the SMS database. Position display;

S304: When the user deletes a short message, the short message location in the short message database whose value is 0x000FF is changed to 0x000FE, and the location in the backup security database is found to be 0x000FF, and is modified to 0x000FE;

S305: When the short message in the short message database has a location value of 0x000FF, the monitoring module 201 searches for a short message with a location value of 0x000FF in the backup security database, and then deletes the short message.

The above is a further detailed description of the present invention in connection with the specific embodiments, and the specific embodiments of the present invention are not limited to the description. It will be apparent to those skilled in the art that the present invention may be made without departing from the spirit and scope of the invention.

Industrial applicability

According to the foregoing technical solution provided by the embodiment of the present invention, the security protection processing of the short message is performed before the short message is written into the short message database, and when the replacement short message in the short message database is accessed, the malicious authentication is performed to prevent the malicious party from being authenticated. The application steals the short message to ensure the security of the short message and improve the security of the short message.

Claims

A method for SMS security management includes the following steps:

Monitoring that the terminal receives the short message;

Determining whether it is necessary to perform security protection processing on the short message;

If necessary, the short message is hidden to obtain a replacement short message;

Depositing the replacement short message into the short message database of the terminal, and storing the original short message corresponding to the replacement short message into the backup security database of the terminal;

When it is detected that the replacement short message in the short message database is accessed, the access party is authenticated by security, for example, the authentication is passed, and the corresponding original short message is retrieved from the backup security database for display.
The short message security management method according to claim 1, wherein the determining whether the security protection process needs to be performed on the short message comprises any one of the following three methods:

A: determining whether the sending number of the short message is a preset number to be protected;

Second: determining whether the short message content of the short message includes the preset keyword;

3: Determine whether the sending number of the short message is a preset number to be protected, and whether the short message content of the short message includes a preset keyword.
The short message security management method according to claim 2, wherein the performing the hiding process of the short message to obtain a replacement short message comprises:

When the sending number of the short message is a preset number to be protected, and determining that the short message needs to be subjected to security protection processing, the sending number of the short message is hidden;

When the short message content of the short message includes a preset keyword, and the smart message is determined to be processed, the keyword in the short message content of the short message is hidden.
The short message security management method according to claim 3, wherein when the sending number of the short message is hidden, the method comprises: covering, deleting or replacing the sending number of the short message;

When the short message processing is performed on the short message content of the short message, the method includes: covering, deleting, or replacing the portion of the short message content of the short message that includes the keyword information.
The short message security management method according to any one of claims 1 to 4, wherein after the short message is hidden to obtain a replacement short message, the replacement short message is stored in the short message database, and is further included in the An identification identifier for characterizing the short message type as a secure short message is added to the replacement short message.
The short message security management method according to any one of claims 1 to 4, wherein the storing the replacement short message in the short message database of the terminal, and storing the original short message corresponding to the replacement short message into the terminal Backup security databases include:

And storing the replacement short message in a first location of the short message database, and the original short message corresponding to the replacement short message The letter is stored in the same location as the first location in the backup security database;

Or, after adding the unique identification identifiers to the replacement short messages and their corresponding original short messages, respectively, and then storing them in the short message database and the backup security database respectively.
The short message security management method according to claim 6, wherein the original short message corresponding to the replacement short message is stored in the same location as the first location in the backup security database, when the short message database is When the first location of the replacement short message changes, the storage location of the original short message corresponding to the replacement short message in the backup security database is synchronously updated.
The short message security management method according to any one of claims 1 to 5, wherein the accessing party comprises: a short message application or a third party application.
The short message security management method according to any one of claims 1 to 5, wherein the security verification comprises at least one of fingerprint identification verification, voice recognition verification, eye pattern verification, and password verification.
A short message security management device includes a monitoring module, a judging module, a hidden processing module, a storage module and a security verification module;

The monitoring module is configured to monitor the terminal to receive the short message;

The determining module is configured to determine whether a security protection process needs to be performed on the short message;

The hiding processing module is configured to perform the hiding process on the short message to obtain a replacement short message;

The storage module is configured to store the replacement short message in the short message database of the terminal, and store the original short message corresponding to the replacement short message into the backup security database of the terminal;

The security verification module is configured to perform security authentication on the access party when the replacement short message in the short message database is accessed, for example, the authentication succeeds, and the corresponding original short message is retrieved from the backup security database for display.
The short message security management device according to claim 10, wherein the determining module comprises any one of a first determining sub-module, a second determining sub-module and a third determining sub-module;

The first determining sub-module is configured to determine whether the sending number of the short message is a preset number to be protected, and if yes, determining that the short message needs to be subjected to security protection processing;

The second determining sub-module is configured to determine whether the short message content of the short message includes a preset keyword; if yes, determining that the short message needs to be subjected to security protection processing;

The third determining sub-module is configured to determine whether the sending number of the short message is a preset number to be protected, and whether the short message content of the short message includes a preset keyword; if yes, determining that the short message needs to be performed Security protection processing.
The short message security management device according to claim 11, wherein the hidden processing module comprises a number hiding processing sub-module and/or a content hiding processing sub-module;

The number hiding processing sub-module is configured to hide the sending number of the short message when the sending number of the short message is a preset number to be protected, and determining that the short message needs to be subjected to security protection processing;

The content hiding processing sub-module is configured to hide a keyword in the short message content of the short message when the short message content of the short message includes a preset keyword, and when the short message is determined to be subjected to security protection processing.
The short message security management device according to any one of claims 10 to 12, wherein the storage module comprises a first storage submodule or a second storage submodule; the first storage submodule is configured to replace the short message Storing in a first location in the short message database, and storing the original short message corresponding to the replacement short message in a location in the backup security database that is the same as the first location;

The second storage submodule is configured to respectively add a unique identification identifier to the replacement short message and its corresponding original short message, and then separately store into the short message database and the backup security database.
A terminal comprising the short message security management device according to any one of claims 10-13.