WO2016165312A1

WO2016165312A1 - Encryption method, decryption method and device therefor

Info

Publication number: WO2016165312A1
Application number: PCT/CN2015/093432
Authority: WO
Inventors: 张冬明
Original assignee: 中兴通讯股份有限公司
Priority date: 2015-04-16
Filing date: 2015-10-30
Publication date: 2016-10-20
Also published as: CN106162625A

Abstract

The present invention provides an encryption method, a decryption method and device therefor. The encryption method comprises: acquiring encryption policy parameters, wherein the encryption policy parameters comprise at least one of the following: a time period range, a position range and an access network; acquiring current environmental parameters, wherein the environmental parameters comprise at least one of the following: a current time, a current position and a current access network; judging, according to the encryption policy parameters and the environmental parameters, whether to automatically encrypt a plain message; and if so, automatically encrypting the plain message. The present invention solves the problem of low usability of an encryption or decryption way in the related art, thereby improving the usability of encryption or decryption.

Description

Encryption method, decryption method and device thereof

Technical field

The present invention relates to the field of communications, and in particular to an encryption method, a decryption method, and an apparatus therefor.

Background technique

With the rapid development of mobile Internet and the popularity of smartphones, smartphone-based social software (such as instant messaging software) has dramatically changed the way people communicate and communicate. In the process of communication, it is often necessary to send some sensitive private information, such as bank card number, password, etc., or information such as important business secrets that only the two parties can know. If the information can be encrypted and sent during the sending process, the user will be provided with more security.

In the related art, the important information data is encrypted (for example, compressed into an encrypted compressed package file, or an encrypted text file, etc.) may be manually encrypted and then transmitted; the other party receives the encrypted information data and then manually decrypts it. the way. However, the method of encrypting the ordinary message sent and received by the instant communication software in this way will face the problem of frequent encryption and decryption operations when transmitting and receiving messages. Therefore, how to improve the ease of use of the message while ensuring security, or provide a certain degree of security while having good usability, and no guidance is given in the related art.

In view of the problem that the ease of use of the encryption or decryption method in the related art is not strong, an effective solution has not been proposed yet.

Summary of the invention

In order to solve the above technical problems, the present invention provides an encryption method, a decryption method, and an apparatus therefor.

According to an aspect of the embodiments of the present invention, an encryption method is provided, including: acquiring an encryption policy parameter, where the encryption policy parameter includes at least one of: a time range, a location range, an access network; and obtaining a current environment. a parameter, wherein the environment parameter includes at least one of: a current time, a current location, and a currently accessed network; determining, according to the encryption policy parameter and the environment parameter, whether to automatically encrypt the plaintext message; In the case of YES, the plaintext message is automatically encrypted.

Optionally, determining whether to automatically encrypt the plaintext message according to the encryption policy parameter and the environment parameter includes: determining whether the current time is within the time range, and/or determining whether the current location is Within the location range, and/or determining whether the access network includes the currently accessed network; if the determination result is yes, determining to automatically encrypt the plaintext message.

Optionally, determining whether to automatically encrypt the plaintext message according to the encryption policy parameter and the environment parameter includes: determining, according to the encryption policy parameter and the environment parameter, whether the current environment needs to improve security; When the result of the judgment is that the security needs to be improved, it is determined that the plaintext message is automatically encrypted.

Optionally, before determining whether to automatically encrypt the plaintext message, the method further includes: determining whether the current message is an unencrypted plaintext message; if the determination result is yes, continuing to use the encryption policy parameter And said The environment parameter determines whether the plaintext message is automatically encrypted. If the judgment result is negative, it is directly determined that the current message is not automatically encrypted.

Optionally, before determining whether the current message is the unencrypted plaintext message, the method further includes: receiving an instruction for manually encrypting the current message; and encrypting the current message.

According to another aspect of the embodiments of the present invention, a decryption method is provided, including: acquiring a decryption policy parameter, where the decryption policy parameter includes at least one of: a time range, a location range, an access network; The environment parameter, wherein the environment parameter comprises at least one of: a current time, a current location, and a currently accessed network; and determining, according to the decryption policy parameter and the environment parameter, whether to automatically decrypt the ciphertext message; In the case where the determination result is YES, the ciphertext message is automatically decrypted.

Optionally, determining whether to automatically decrypt the ciphertext message according to the decryption policy parameter and the environment parameter includes: determining whether the current time is within the time range, and/or determining whether the current location is Within the location range, and/or determining whether the access network includes the currently accessed network; if the determination result is yes, determining to automatically decrypt the ciphertext message.

Optionally, determining whether to automatically decrypt the ciphertext message according to the decryption policy parameter and the environment parameter includes: determining, according to the decryption policy parameter and the environment parameter, whether the current environment is safe; If the result is secure, it is determined that the ciphertext message is automatically decrypted.

Optionally, before determining whether to automatically decrypt the ciphertext message, the method further includes: determining whether the current message is the ciphertext message that is not decrypted; and if the determination result is yes, continuing to perform the decryption according to the decryption The policy parameter and the environment parameter determine whether to automatically decrypt the ciphertext message; if the judgment result is no, directly determine not to automatically decrypt the current message.

Optionally, the result of the determination is that the ciphertext message is not automatically decrypted, or that the ciphertext message is automatically decrypted but the automatic decryption fails, or the automatic decryption function of the ciphertext message is not enabled. In the case of the method, the method further includes: receiving an instruction for manually decrypting the ciphertext message; and decrypting the ciphertext message.

According to another aspect of the present invention, an encryption apparatus is provided, including: a first obtaining module, configured to acquire an encryption policy parameter, where the encryption policy parameter includes at least one of: a time range, a location range The first obtaining module is configured to obtain the current environment parameter, where the environment parameter includes at least one of the following: a current time, a current location, and a currently accessed network; and the first determining module is configured to be based on The encryption policy parameter and the environment parameter determine whether the plaintext message is automatically encrypted. The first encryption module is configured to automatically encrypt the plaintext message if the determination result of the first determination module is yes.

Optionally, the first determining module includes: a first determining unit, configured to determine whether the current time is within the time range, and/or determine whether the current location is within the location range And/or determining whether the access network includes the currently accessed network; the first determining unit is configured to determine, in the case that the determination result of the first determining unit is yes, determining the plaintext The message is automatically encrypted.

Optionally, the first determining module includes: a second determining unit, configured to be according to the encryption policy parameter and the The environment parameter determines whether the current environment needs to improve security; and the second determining unit is configured to determine to automatically encrypt the plaintext message if the judgment result of the second determining unit is that the security needs to be improved. .

Optionally, the device further includes: a second determining module, configured to determine whether the current message is an unencrypted plaintext message; and the first determining module is configured to determine, in the second determining module, a negative result In the case that the current message is not automatically encrypted, the first determining module is further configured to continue according to the encryption policy parameter and if the judgment result of the second determining module is yes. The environment parameter determines whether the plaintext message is automatically encrypted.

Optionally, the device further includes: a first receiving module, configured to receive an instruction for manually encrypting the current message; and a second encryption module configured to encrypt the current message.

According to another aspect of the embodiments of the present invention, a decryption apparatus is provided, including: a third obtaining module, configured to acquire a decryption policy parameter, wherein the decryption policy parameter includes at least one of: a time range, a location range The access module is configured to obtain the current environment parameter, where the environment parameter includes at least one of the following: a current time, a current location, and a currently accessed network; and a third determining module, configured to Decrypting the policy parameter and the environment parameter to determine whether to automatically decrypt the ciphertext message; the first decrypting module is configured to automatically decrypt the ciphertext if the judgment result of the third determining module is yes Message.

Optionally, the third determining module includes: a third determining unit, configured to determine whether the current time is within the time range, and/or determine whether the current location is within the location range, and Or determining whether the access network includes the currently accessed network, and determining, by the third determining unit, that the ciphertext message is determined if the determination result of the third determining unit is yes. Perform automatic decryption.

Optionally, the third determining module includes: a fourth determining unit, configured to determine, according to the decryption policy parameter and the environment parameter, whether the current environment is safe; the fourth determining unit is configured to be in the When the determination result of the fourth determining unit is safe, it is determined that the ciphertext message is automatically decrypted.

Optionally, the device further includes: a fourth determining module, configured to determine whether the current message is the ciphertext message that is not decrypted; and the second determining module is configured to determine whether the determining result in the fourth determining module is If it is determined that the current message is not automatically decrypted, the third determining module is further configured to continue according to the decryption policy parameter if the determination result of the fourth determining module is yes And determining, by the environment parameter, whether the ciphertext message is automatically decrypted.

Optionally, the device further includes: a second receiving module, configured to: when the third determining module determines that the ciphertext message is not automatically decrypted, or that the ciphertext message is automatically Decryption but automatic decryption fails, or, if the automatic decryption function of the ciphertext message is not enabled, receiving an instruction to manually decrypt the ciphertext message; the second decryption module is set to the ciphertext message Decrypt.

According to the embodiment of the present invention, the encryption policy parameter is used, where the encryption policy parameter includes at least one of the following: a time range, a location range, and an access network; and the current environment parameter is obtained, where the environment parameter includes at least one of the following: Time, current location, current access network; judge whether to clear the text according to the encryption policy parameters and environmental parameters The information is automatically encrypted; when the judgment result is yes, the manner of automatically encrypting the plaintext message solves the problem that the encryption or decryption method in the related art is not easy to use, and the usability of encryption or decryption is improved.

DRAWINGS

The drawings described herein are intended to provide a further understanding of the invention, and are intended to be a part of the invention. In the drawing:

1 is a flow chart of an encryption method in accordance with an embodiment of the present invention;

2 is a flow chart of a decryption method in accordance with an embodiment of the present invention;

FIG. 3 is a schematic structural diagram of an encryption apparatus according to an embodiment of the present invention; FIG.

4 is a schematic structural diagram 1 of an optional structure of an encryption device according to an embodiment of the present invention;

FIG. 5 is a second schematic diagram of an optional structure of an encryption device according to an embodiment of the present invention; FIG.

6 is a schematic structural diagram of a decryption apparatus according to an embodiment of the present invention;

FIG. 7 is a first schematic structural diagram 1 of a decryption apparatus according to an embodiment of the present invention; FIG.

FIG. 8 is a second schematic diagram of an optional structure of a decryption apparatus according to an embodiment of the present invention; FIG.

9 is a flow chart of an encryption method in accordance with an alternative embodiment of the present invention;

10 is a flow chart of a decryption method in accordance with an alternate embodiment of the present invention.

detailed description

The invention will be described in detail below with reference to the drawings in conjunction with the embodiments. It should be noted that the embodiments in the present application and the features in the embodiments may be combined with each other without conflict.

Other features and advantages of the invention will be set forth in the description which follows, The objectives and other advantages of the invention may be realized and obtained by means of the structure particularly pointed in the appended claims.

The technical solutions in the embodiments of the present invention are clearly and completely described in the following with reference to the accompanying drawings in the embodiments of the present invention. It is an embodiment of the invention, but not all of the embodiments. All other embodiments obtained by those skilled in the art based on the embodiments of the present invention without creative efforts shall fall within the scope of the present invention.

It should be noted that the sequence of the process steps in the embodiment and the optional embodiment of the present invention is not strictly limited in the case of no conflict. For example, in the following steps, the order of steps S102 and S104 is interchangeable. A similar situation exists in other embodiments of the invention.

The embodiment of the invention provides an encryption method. FIG. 1 is a flowchart of an encryption method according to an embodiment of the present invention. As shown in FIG. 1, the process includes the following steps:

Step S102: Acquire an encryption policy parameter, where the encryption policy parameter includes, but is not limited to, at least one of the following: a time range, a location range, and an access network;

In step S104, the current environment parameter is obtained, where the environment parameter includes, but is not limited to, at least one of the following: a current time, a current location, and a currently accessed network;

Step S106: Determine, according to the encryption policy parameter and the environment parameter, whether to automatically encrypt the plaintext message.

In step S108, if the result of the determination is yes, the plaintext message is automatically encrypted.

Through the above steps, automatically determining whether to encrypt the plaintext message by comparing the information of the network including but not limited to the current time or the current location or the currently accessed network with the encryption policy parameter; compared with the related art, the human judgment is required. In the manner of manual encryption, the present invention solves the problem that the encryption or decryption method in the related art is not easy to use, and improves the usability of encryption or decryption.

It should be noted that the foregoing solution provided by the embodiment of the present invention may be applied to a terminal or an instant messaging software of the terminal; the foregoing plaintext message may be stored in the terminal with a specific feature (for example, located in a specific storage directory). The file can also be an instant message to be sent in the instant messaging software. Correspondingly, in the following embodiments, the ciphertext message may also be a file stored in the terminal with a specific feature, or may be an instant message received in the instant messaging software.

In the case that the above steps are applied to the encryption and decryption process of the instant messaging software, the above steps may further include:

In step S109, the encrypted plaintext message is sent.

Optionally, in step S106, when determining whether to perform encryption for the current time, the current location, and the currently accessed network, the following determining logic may be adopted: determining whether the current time is within the time range, and/or determining the current location. Whether it is within the location range, and/or, determining whether the access network includes the currently accessed network; and if the result of the above determination is yes, determining to automatically encrypt the plaintext message. In an actual application, the current time, the current location, and one or more of the currently accessed networks may be selected for the determination. In addition, in the embodiment of the present invention, the method is not limited to determining whether to perform the determination. The feature of encryption and decryption, for example, for a terminal that is logged in by a multi-user, it is also possible to determine whether the plaintext message needs to be encrypted by the currently logged-in user (for example, user authority).

In the above judgment for the current time, the current location, and the current access network, an example of the judgment is given. However, in practical applications, some parameters in the encryption policy parameters may have different meanings. For example, the “time period range” in the encryption policy parameter may be used to indicate the time period that needs to be encrypted, but in some other examples, “time range” Can also be used to indicate the time period when encryption is not required. Optionally, in order to improve the solution of the embodiment of the present invention, the following determining logic may be adopted in step S106 in some embodiments: determining whether the current environment needs to be improved according to the encryption policy parameter and the environmental parameter. Sexuality; in the case where the judgment result is that security needs to be improved, it is determined that the plaintext message is automatically encrypted. That is, regardless of how the meaning of the parameters in the encryption policy parameters change, as long as the encryption policy parameters and If the current environment parameter determines whether the environment in which the current terminal is located needs to improve security, it can further determine whether encryption is needed automatically.

In some cases, the plaintext message may have been manually encrypted, in which case it may not be necessary to continue encrypting the ciphertext message; at the same time, multiple encryption will also make the decryption more complicated. Therefore, in the embodiment of the present invention, before encrypting the plaintext message, the method may further: determine whether the current message is an unencrypted plaintext message; if the judgment result is yes, continue to determine according to the encryption policy parameter and the environment parameter. Whether to automatically encrypt the plaintext message; if the judgment result is no, directly determine not to automatically encrypt the current message. Further, in the case of encrypting the instant message, if it is determined that the current message is not automatically encrypted, the current message is directly sent.

Optionally, a manner of manual encryption is also provided in the embodiment of the present invention. For example, before determining whether the current message is an unencrypted plaintext message, it may also receive an instruction to manually encrypt the current message; and encrypt the current message according to the instruction of the instruction. In the implementation process, if the solution is applied in the instant messaging software, a control can be provided in the chat box of the instant messaging software to receive the user's manual encryption indication. After the user issues a manual encryption indication, the current message may be directly encrypted regardless of whether the current automatic encryption function is enabled or whether the determination result in step S106 is to determine encryption.

In addition, it should be noted that, in the embodiment of the present invention, the content of the configuration parameters such as the encryption and decryption algorithm (for example, symmetric encryption and decryption algorithm, asymmetric encryption and decryption algorithm), encryption and decryption key, etc. are not involved, and therefore These parts are no longer described. For the technical content related to the encryption algorithm, reference may be made to the existing solutions in the related art. That is, the encryption and decryption algorithm used in the embodiment of the present invention includes, but is not limited to, an encryption and decryption algorithm existing in the prior art.

Corresponding to the above encryption method, an embodiment of the present invention further provides a decryption method. 2 is a flowchart of a decryption method according to an embodiment of the present invention. As shown in FIG. 2, the process includes the following steps:

Step S202, obtaining a decryption policy parameter, where the decryption policy parameter includes but is not limited to at least one of the following: a time range, a location range, and an access network;

In step S204, the current environment parameter is obtained, where the environment parameter includes but is not limited to at least one of the following: a current time, a current location, and a currently accessed network;

Step S206: Determine, according to the decryption policy parameter and the environment parameter, whether to automatically decrypt the ciphertext message;

In step S208, if the result of the determination is YES, the ciphertext message is automatically decrypted.

Through the above steps, the problem that the encryption or decryption method in the related art is not easy to use is solved, and the usability of encryption or decryption is improved.

It should be noted that the decryption policy parameter and the encryption policy parameter may be the same parameter or different parameters. Preferably, the decryption policy parameter and the encryption policy parameter may be separately set according to actual conditions.

Optionally, before step S202, the method may further include:

Step S201, receiving a ciphertext message.

Optionally, similar to the encryption method, in step S206, it may be determined whether the current time is within the time range, and/or, determining whether the current location is within the location range, and/or determining whether the access network includes The currently accessed network; if the judgment result is yes, it is determined that the ciphertext message is automatically decrypted.

Optionally, in step S206, it may be further determined whether the current environment is safe according to the decryption policy parameter and the environment parameter; and if the determination result is safe, determining to automatically decrypt the ciphertext message. That is, regardless of how the meaning of the parameter in the decryption policy parameter changes, as long as the environment in which the current terminal is located can be determined by the decryption policy parameter and the current environment parameter, it is possible to further automatically determine whether decryption is required.

In an actual application, the ciphertext message is generally decrypted. Optionally, before determining whether to automatically decrypt the ciphertext message, the method may further include: determining whether the current message is an undecrypted ciphertext message; In the case of YES, it is determined whether to automatically decrypt the ciphertext message according to the decryption policy parameter and the environment parameter; if the judgment result is no, it is directly determined that the current message is not automatically decrypted.

Optionally, if the result of the determination is that the ciphertext message is not automatically decrypted, or if the ciphertext message is automatically decrypted but the automatic decryption fails, or the automatic decryption function of the ciphertext message is not enabled, the method may also be The method includes: receiving an instruction for manually decrypting a ciphertext message; and decrypting the ciphertext message. In this way, manual decryption can be achieved, thereby further improving the flexibility of decrypting ciphertext messages. Similarly, in the case of manual decryption, it can also be triggered by the way the control receives the user's decryption command.

In this embodiment, an encryption device is also provided, which is used to implement the foregoing embodiment of the encryption method and optional embodiments. The descriptions of the modules involved in the device are described below. As used below, the term "module" may implement a combination of software and/or hardware of a predetermined function. Although the apparatus described in the following embodiments is preferably implemented in software, hardware, or a combination of software and hardware, is also possible and contemplated.

FIG. 3 is a schematic structural diagram of an encryption apparatus according to an embodiment of the present invention. As shown in FIG. 3, the apparatus includes: a first acquisition module 32, a second acquisition module 34, a first determination module 36, and a first encryption module 38, wherein The first obtaining module 32 is configured to obtain an encryption policy parameter, where the encryption policy parameter includes at least one of the following: a time range, a location range, and an access network; and the second obtaining module 34 is configured to obtain the current environmental parameter, where The environment parameter includes at least one of the following: a current time, a current location, and a currently accessed network; the first determining module 36 is coupled to the first obtaining module 32 and the second obtaining module 34, respectively, and is configured to be based on the encryption policy parameter and the environment. The parameter determines whether the plaintext message is automatically encrypted. The first encryption module 38 is coupled to the first determining module 36, and is configured to automatically encrypt the plaintext message if the determination result of the first determining module is yes.

Optionally, the first determining module 36 includes: a first determining unit 362, configured to determine whether the current time is within a time range, and/or determine whether the current location is within the location range, and/or determine access Whether the network includes the currently accessed network; the first determining unit 364 is coupled to the first determining unit 362, and is configured to determine that the plaintext message is automatically encrypted if the determination result of the first determining unit 362 is yes.

Optionally, the first determining module 36 includes: a second determining unit 366, configured to determine, according to the encryption policy parameter and the environment parameter, whether the current environment needs to improve security; the second determining unit 368 is coupled to the second determining The unit 366 is configured to determine that the plaintext message is self-determined if the determination result of the second determining unit 366 is that the security needs to be improved. Dynamic encryption.

FIG. 4 is a schematic diagram of an optional structure of an encryption device according to an embodiment of the present invention. As shown in FIG. 4, the device further includes: a second determining module 42 configured to determine whether the current message is an unencrypted plaintext message. The first determining module 44 is coupled to the second determining module 42 and configured to directly determine that the current message is not automatically encrypted if the determining result of the second determining module 42 is negative; wherein the first determining module 36 further The second judging module 42 is further configured to determine whether the plaintext message is automatically encrypted according to the encryption policy parameter and the environment parameter if the judgment result of the second judging module 42 is YES.

FIG. 5 is a second schematic diagram of an optional structure of an encryption apparatus according to an embodiment of the present invention. As shown in FIG. 5, the apparatus further includes: a first receiving module 52 configured to receive an instruction for manually encrypting a current message; The second encryption module 54, coupled to the first receiving module 52 and the second determining module 42, is configured to encrypt the current message.

It should be noted that the first determining module 36 and the second determining module 42 may be combined; the first encryption module 38 and the second encryption module 54 may be combined.

In this embodiment, a decryption device is provided, which is configured to implement the above-described decryption method and an optional implementation manner. The descriptions of the modules involved in the device will be described below.

FIG. 6 is a schematic structural diagram of a decryption apparatus according to an embodiment of the present invention. As shown in FIG. 6, the apparatus includes: a third acquisition module 62, a fourth acquisition module 64, a third determination module 66, and a first decryption module 68, wherein The third obtaining module 62 is configured to obtain a decryption policy parameter, where the decryption policy parameter includes at least one of the following: a time range, a location range, and an access network; and the fourth obtaining module 64 is configured to obtain the current environmental parameter, where The environment parameter includes at least one of the following: the current time, the current location, and the currently accessed network; the third determining module 66 is coupled to the third obtaining module 62 and the fourth obtaining module 64, respectively, and is configured to be based on the decryption policy parameter and the environment. The parameter determines whether the ciphertext message is automatically decrypted. The first decryption module 68 is coupled to the third determining module 66, and is configured to automatically decrypt the ciphertext message if the determination result of the third determining module 66 is YES.

Optionally, the third determining module 66 includes: a third determining unit 662, configured to determine whether the current time is within a time range, and/or determine whether the current location is within the location range, and/or determine access Whether the network includes the currently accessed network; the third determining unit 664 is coupled to the third determining unit 662, and is configured to determine that the ciphertext message is automatically decrypted if the determination result of the third determining unit 662 is yes.

Optionally, the third determining module 66 includes: a fourth determining unit 666, configured to determine, according to the decryption policy parameter and the environment parameter, whether the current environment is safe; the fourth determining unit 668 is coupled to the fourth determining unit 666, It is set to determine that the ciphertext message is automatically decrypted in a case where the determination result of the fourth judging unit 666 is safe.

FIG. 7 is a schematic diagram of an optional structure of a decryption apparatus according to an embodiment of the present invention. As shown in FIG. 7, the apparatus further includes: a fourth determining module 72, configured to determine whether the current message is an undecrypted ciphertext. The second determining module 74 is coupled to the fourth determining module 72, and is configured to directly determine that the current message is not automatically decrypted if the determining result of the fourth determining module 72 is negative; wherein the third determining module 66, It is further coupled to the fourth determining module 72, and is further configured to continue to determine whether the password is confidential according to the decryption policy parameter and the environmental parameter if the determination result of the fourth determining module 72 is YES. Automatic decryption of text messages;

FIG. 8 is a second schematic diagram of an optional structure of a decryption apparatus according to an embodiment of the present invention. As shown in FIG. 8 , the apparatus further includes: a second receiving module 82 configured to determine that the result of the third determining module is incorrect. The ciphertext message is automatically decrypted, or it is determined that the ciphertext message is automatically decrypted but the automatic decryption fails, or the automatic decryption function of the ciphertext message is not turned on, and the instruction for manually decrypting the ciphertext message is received; The two decryption module 84, coupled to the second receiving module 82 and the fourth determining module 72, is configured to decrypt the ciphertext message.

It should be noted that the third determining module 66 and the fourth determining module 72 may be combined; the first decrypting module 68 and the second decrypting module 84 may be combined.

In addition, each functional unit in each embodiment of the present invention may be integrated into one processing unit, or each unit may exist physically separately, or two or more units may be integrated into one unit. The above integrated unit can be implemented in the form of hardware or in the form of a software functional unit.

In order to make the description of the embodiments of the present invention more clear, the following description and description are made in conjunction with the exemplary embodiments.

In the optional embodiment of the present invention, the encryption and decryption of the instant information is taken as an example to provide an automatic encryption and decryption method for the instant information.

The purpose of the optional embodiment of the present invention is to perform encryption and decryption control on an instant message in an instant messaging process, including but not limited to one or more of parameters such as location, network hotspot, time, etc., to perform automatic encryption and decryption strategy calculation. Automatically encrypt and decrypt messages sent and received in a specific location and in a specific time period.

Since the specific location and the specific time period itself have a high security credibility difference, it means a certain security feature information, and the automatic encryption and decryption process means that the encryption and decryption link is transparent to the user, so that The user's sending and receiving encryption and decryption messages in a specific location and a specific time period will have a better user experience with certain security guarantees.

FIG. 9 is a flowchart of an encryption method according to an alternative embodiment of the present invention. As shown in FIG. 9, the method includes the following steps:

Step S902, initializing the parameter configuration.

In this step, the encryption key, the automatic encryption function switch, and the relevant parameters of the automatic encryption policy are mainly configured; wherein the parameters of the automatic encryption policy (corresponding to the above encryption policy parameters) include an automatically encrypted location range, a network hotspot, and a time range. Parameters such as parameters that determine whether automatic encryption is performed when a message is sent. Wherein, the location range is determined by using the basic functions of the mobile terminal such as map and location positioning to calibrate the automatically encrypted position reference reference point, and the position range is determined by the effective radius on the basis of the reference point, and the position range may be the area within the effective radius. It can also be an area outside the radius, or it can be a union or intersection of multiple areas. The network hotspot is mainly to set the credibility of the common WIFI network. The location range and the network hotspot can be used together to indicate the location security determination, or can be used independently to determine the security location. The time range is used to indicate the time period that requires automatic encryption.

Step S904, monitoring the input state and manual encryption, and real-time monitoring the input state of the input frame of the instant communication software interface;

In step S906, it is determined whether manual encryption is performed. Wherein, a manually encrypted interactive control is provided during the input process (example) For example, a floating button for triggering manual encryption). When the manual encryption control is triggered, indicating that manual encryption is performed, step S908 is performed, otherwise proceeds to step S910;

Step S908, the original text of the input box is directly encrypted into a ciphertext according to the encryption key configured in step S902, and the original text in the input box is replaced with the encrypted ciphertext;

Step S910, triggering a message sending process;

Step S912, when the message is triggered to send, first determine whether the input content in the text box is the ciphertext manually encrypted in step S908, and if so, proceeds to step S922 to directly send the message in the input box; otherwise, proceeds to step S914;

Step S914, it is determined whether the automatic encryption function is turned on; if automatic encryption is turned on, the process proceeds to step S916, otherwise step S922 is performed;

Step S916, automatic encryption strategy calculation;

Step S918, automatically determining, according to the result of the automatic encryption policy calculation, whether the message in the input box needs to be encrypted;

Optionally, the automatic encryption policy calculation module obtains the current location, the connected WIFI hotspot, and the current time information in real time, and compares the parameters with the location range, the network hotspot, the time range, and the like set in step S902. If the condition is met, go to step S920, otherwise, go to step S922;

Step S920, automatically encrypting the content of the input box according to the encryption key set in step S902 into a ciphertext under the condition that the automatic encryption is satisfied;

In step S922, the ciphertext is sent out.

FIG. 10 is a flowchart of a decryption method according to an alternative embodiment of the present invention. As shown in FIG. 10, the method includes the following steps:

Step S1002, initializing parameter configuration;

In this step, the decryption key, the automatic decryption function switch, and the relevant parameters of the automatic decryption policy are configured. The parameters of the automatic decryption policy (corresponding to the above-mentioned decryption policy parameters) include parameters such as a location range of automatic decryption, a network hotspot, a time range, and the like, and these parameters are used to determine whether to perform automatic decryption when sending a message. Wherein, the location range is determined by using the basic functions of the mobile terminal, such as map and location positioning, to calibrate the position reference point of the automatic decryption, and the position range is determined by the effective radius on the basis of the reference point, and the position range may be the area within the effective radius. It can also be an area outside the radius, or it can be a union or intersection of multiple areas. The network hotspot is mainly to set the credibility of the common WIFI network. The location range and the network hotspot can be used together to indicate the location security determination, or can be used independently to determine the security location. The time range is used to indicate the time period that requires automatic decryption.

Step S1004, monitoring the received message;

Step S1006, it is determined whether the received message is a ciphertext, if not a ciphertext, step S1008 is performed; otherwise, step S1010 is performed;

Step S1008, directly displaying the received original plaintext message;

Step S1010, if it is cipher text, determine whether the automatic decryption function is enabled, if not, step S1022, directly display the original ciphertext message; otherwise, step S1012;

Step S1012, automatic decryption strategy calculation;

In step S1014, according to the calculation result of the decryption strategy, it is automatically determined whether the received message needs to be automatically decrypted. Optionally, the automatic decryption policy calculation module obtains the current location, the connected WIFI hotspot, and the current time information in real time, and compares it with the location range, network hotspot, time range, and other parameters set in step S1002, when the setting is met. If the condition is met, go to step S1016; otherwise, execute step S1022 to directly display the original ciphertext message;

Step S1016: automatically, after receiving the automatic decryption condition, automatically decrypt the received message according to the decryption key set in step S1002;

Step S1018, it is determined whether the decryption is successful, if the decryption is successful, step S1020 is performed; otherwise, step S1022 is performed;

Step S1020, displaying the decrypted plaintext;

Step S1022, directly displaying the original ciphertext message;

Step S1024, determining whether to perform manual decryption;

Wherein, in the case that the automatic decryption is not turned on, the automatic decryption condition is not satisfied, or the automatic decryption fails, the received message is the original ciphertext. At this time, the interface displays the interactive control for manual decryption (for example, a floating button for triggering manual decryption); if manual decryption is performed, step S1026 is performed; otherwise, the process returns to step S1020 and the flow is ended.

Step S1026, when the manual decryption control is triggered, the manual decryption interface is popped up, and the decryption key can be input;

Step S1028, when the manually input key matches the decryption key set in step S1002, decrypt the received message;

In step S1030, it is determined whether the decryption is successful. If the decryption is successful, step S1020 is executed to display the decrypted plaintext; if the decryption fails, step S1022 is performed, the original ciphertext message is still displayed, and the prompt information of the decryption failure is given.

It should be noted that the encryption and decryption methods described in the optional embodiments of the present invention may be used in combination, that is, in automatic encryption, and also in automatic decryption, or may be implemented independently, using only automatic encryption or automatic decryption. In addition, in an optional embodiment of the present invention, a scheme of automatically encrypting and decrypting while integrating manual encryption and decryption is provided; in an actual application, automatic encryption and decryption may be used according to actual needs, only the manual encryption and decryption method is used, or only automatic encryption and decryption is used. Instead of using manual encryption and decryption methods.

In addition, for the automatic encryption and decryption method, in the parameter selection of the automatic encryption and decryption strategy calculation, the three parameters of position, WIFI hotspot and time period can take only some parameters, or can be used in combination with three parameters, and even select other directions such as orientation. The type of parameter. If all parameters are not distinguished, the automatic encryption and decryption method is degraded to automatically encrypt or automatically decrypt the message in all cases, so that the message itself is still secure during transmission, but there is some ease of use on the receiving and receiving side of the terminal. Security loss.

In summary, according to the above-mentioned embodiments, optional embodiments, and implementations of the present invention, the automatic encryption and decryption provided by the embodiments of the present invention is transparent to the user, and has good security. User experience; above In the solution of the embodiment, the encrypted content itself is encrypted, and the encrypted ciphertext can be directly sent or saved through the existing transmission channel or the existing communication client, and has the advantages of wide adaptability and low cost; The content is encrypted, and the user can directly see the encrypted ciphertext effect. The security effect is visually visible and has a good security experience. In addition, the solution provided by the embodiment of the present invention is simple and easy to use, and the user is very convenient to learn and use.

In another embodiment, software is also provided for performing the technical solutions described in the above embodiments and alternative embodiments.

In another embodiment, a storage medium is further provided, wherein the software includes the above-mentioned software, including but not limited to: an optical disk, a floppy disk, a hard disk, an erasable memory, and the like.

Industrial Applicability: As can be seen from the above description, the embodiment of the present invention solves the problem that the encryption or decryption method in the related art is not easy to use, and improves the usability of encryption or decryption.

It is to be understood that the terms "first", "second" and the like in the specification and claims of the present invention are used to distinguish similar objects, and are not necessarily used to describe a particular order or order. It is to be understood that the objects so used are interchangeable, where appropriate, so that the embodiments of the invention described herein can be carried out in a sequence other than those illustrated or described herein. In addition, the terms "comprises" and "comprises" and "the" and "the" are intended to cover a non-exclusive inclusion, for example, a process, method, system, product, or device that comprises a series of steps or units is not necessarily limited to Those steps or units may include other steps or units not explicitly listed or inherent to such processes, methods, products or devices.

It will be apparent to those skilled in the art that the various modules or steps of the present invention described above can be implemented by a general-purpose computing device that can be centralized on a single computing device or distributed across a network of multiple computing devices. Alternatively, they may be implemented by program code executable by the computing device such that they may be stored in the storage device by the computing device and, in some cases, may be different from the order herein. The steps shown or described are performed, or they are separately fabricated into individual integrated circuit modules, or a plurality of modules or steps thereof are fabricated as a single integrated circuit module. Thus, the invention is not limited to any specific combination of hardware and software.

The above description is only an alternative embodiment of the present invention, and is not intended to limit the present invention, and various modifications and changes can be made to the present invention. Any modifications, equivalent substitutions, improvements, etc. made within the spirit and scope of the present invention are intended to be included within the scope of the present invention.

Claims

An encryption method, including:

Obtaining an encryption policy parameter, where the encryption policy parameter includes at least one of the following: a time range, a location range, and an access network;

Obtaining a current environment parameter, where the environment parameter includes at least one of the following: a current time, a current location, and a currently accessed network;

Determining whether to automatically encrypt the plaintext message according to the encryption policy parameter and the environment parameter;

In the case where the determination result is YES, the plaintext message is automatically encrypted.
The method according to claim 1, wherein determining whether to automatically encrypt the plaintext message according to the encryption policy parameter and the environment parameter comprises:

Determining whether the current time is within the time range, and/or determining whether the current location is within the location range, and/or determining whether the access network includes the currently accessed The internet;

If the result of the determination is yes, it is determined that the plaintext message is automatically encrypted.
The method according to claim 1, wherein determining whether to automatically encrypt the plaintext message according to the encryption policy parameter and the environment parameter comprises:

Determining, according to the encryption policy parameter and the environment parameter, whether the current environment needs to improve security;

When the result of the judgment is that the security needs to be improved, it is determined that the plaintext message is automatically encrypted.
The method according to any one of claims 1 to 3, wherein before determining whether to automatically encrypt the plaintext message, the method further comprises:

Determining whether the current message is the unencrypted plaintext message;

If the result of the determination is yes, determining whether to automatically encrypt the plaintext message according to the encryption policy parameter and the environment parameter;

If the result of the determination is no, it is directly determined that the current message is not automatically encrypted.
The method of claim 4, wherein before the determining whether the current message is the unencrypted plaintext message, the method further comprises:

Receiving an instruction to manually encrypt the current message;

Encrypting the current message.
A decryption method comprising:

Obtaining a decryption policy parameter, where the decryption policy parameter includes at least one of the following: a time range, a location range, and an access network;

Obtaining a current environment parameter, where the environment parameter includes at least one of the following: a current time, a current location, and a currently accessed network;

Determining whether to automatically decrypt the ciphertext message according to the decryption policy parameter and the environment parameter;

In the case where the determination result is YES, the ciphertext message is automatically decrypted.
The method according to claim 6, wherein determining whether to automatically decrypt the ciphertext message according to the decryption policy parameter and the environment parameter comprises:

Determining whether the current time is within the time range, and/or determining whether the current location is within the location range, and/or determining whether the access network includes the currently accessed network;

In the case where the determination result is yes, it is determined that the ciphertext message is automatically decrypted.
The method according to claim 6, wherein determining whether to automatically decrypt the ciphertext message according to the decryption policy parameter and the environment parameter comprises:

Determining whether the current environment is safe according to the decryption policy parameter and the environment parameter;

In the case where the judgment result is safe, it is determined that the ciphertext message is automatically decrypted.
The method according to claim 6, wherein before determining whether to automatically decrypt the ciphertext message, the method further comprises:

Determining whether the current message is the ciphertext message that is not decrypted;

If the determination result is yes, proceed to determine whether to automatically decrypt the ciphertext message according to the decryption policy parameter and the environment parameter;

If the result of the determination is negative, it is directly determined that the current message is not automatically decrypted.
The method according to any one of claims 6 to 9, wherein the result of the judgment is that the ciphertext message is not automatically decrypted, or that the ciphertext message is automatically decrypted but the automatic decryption fails, or In the case that the automatic decryption function of the ciphertext message is not enabled, the method further includes:

Receiving an instruction to manually decrypt the ciphertext message;

Decrypt the ciphertext message.
An encryption device comprising:

The first obtaining module is configured to obtain an encryption policy parameter, where the encryption policy parameter includes at least one of the following: a time range, a location range, and an access network;

The second obtaining module is configured to obtain the current environment parameter, where the environment parameter includes at least one of the following: a current time, a current location, and a currently accessed network;

The first determining module is configured to determine, according to the encryption policy parameter and the environment parameter, whether to automatically encrypt the plaintext message;

The first encryption module is configured to automatically encrypt the plaintext message if the determination result of the first determining module is yes.
The apparatus of claim 11, wherein the first determining module comprises:

a first determining unit, configured to determine whether the current time is within the time range, and/or determine whether the current location is within the location range, and/or determine whether the access network is Include the currently accessed network;

The first determining unit is configured to determine to automatically encrypt the plaintext message if the determination result of the first determining unit is yes.
The apparatus of claim 11, wherein the first determining module comprises:

a second determining unit, configured to determine, according to the encryption policy parameter and the environment parameter, whether the current environment needs to improve security;

The second determining unit is configured to determine to automatically encrypt the plaintext message if the result of the determination by the second determining unit is that security needs to be improved.
The device according to any one of claims 11 to 13, wherein the device further comprises:

a second determining module, configured to determine whether the current message is an unencrypted plaintext message;

The first determining module is configured to directly determine that the current message is not automatically encrypted if the determining result of the second determining module is negative;

The first determining module is further configured to: when the determination result of the second determining module is yes, continue to determine whether to automatically encrypt the plaintext message according to the encryption policy parameter and the environment parameter. .
The apparatus of claim 14 wherein said apparatus further comprises:

a first receiving module, configured to receive an instruction for manually encrypting the current message;

The second encryption module is configured to encrypt the current message.
A decryption device comprising:

a third obtaining module, configured to obtain a decryption policy parameter, where the decryption policy parameter includes at least one of the following: a time range, a location range, and an access network;

The fourth obtaining module is configured to obtain the current environment parameter, where the environment parameter includes at least one of the following: a current time, a current location, and a currently accessed network;

a third determining module, configured to determine, according to the decryption policy parameter and the environment parameter, whether to confiscate Automatic decryption;

The first decryption module is configured to automatically decrypt the ciphertext message if the determination result of the third determining module is YES.
The apparatus of claim 16, wherein the third determining module comprises:

a third determining unit, configured to determine whether the current time is within the time range, and/or determine whether the current location is within the location range, and/or determine whether the access network includes The currently accessed network;

The third determining unit is configured to determine to automatically decrypt the ciphertext message if the determination result of the third determining unit is yes.
The apparatus of claim 16, wherein the third determining module comprises:

a fourth determining unit, configured to determine, according to the decryption policy parameter and the environment parameter, whether the current environment is safe;

The fourth determining unit is configured to determine to automatically decrypt the ciphertext message if the determination result of the fourth determining unit is safe.
The apparatus of claim 16 wherein said apparatus further comprises:

a fourth determining module, configured to determine whether the current message is the ciphertext message that is not decrypted;

a second determining module, configured to directly determine that the current message is not automatically decrypted if the determining result of the fourth determining module is negative;

The third determining module is further configured to: if the determination result of the fourth determining module is yes, continue to determine whether to perform the ciphertext message according to the decryption policy parameter and the environment parameter. Automatic decryption.
The device according to any one of claims 16 to 19, wherein the device further comprises:

The second receiving module is configured to: in the third determining module, the result of the determination is that the ciphertext message is not automatically decrypted, or that the ciphertext message is automatically decrypted but the automatic decryption fails, or When the automatic decryption function of the ciphertext message is not enabled, receiving an instruction for manually decrypting the ciphertext message;

The second decryption module is configured to decrypt the ciphertext message.