WO2016177050A1

WO2016177050A1 - Message transmission method and apparatus

Info

Publication number: WO2016177050A1
Application number: PCT/CN2016/075238
Authority: WO
Inventors: 钱宗文; 尤岩枫
Original assignee: 中兴通讯股份有限公司
Priority date: 2015-07-21
Filing date: 2016-03-01
Publication date: 2016-11-10
Also published as: CN106375177A

Abstract

Provided are a message transmission method and apparatus. The method comprises: acquiring an initial session dictionary; acquiring a message to be encoded, which is constituted by a first message unit and/or a second message unit; according to the initial session dictionary, performing compressed encoding on the first message unit of the message to be encoded, and obtaining a message to be sent, which is constituted by a dictionary pointer of the first message unit and/or the second message unit; and sending the message to be sent, and updating the initial session dictionary according to a pre-set policy, wherein updating the initial session dictionary comprises: adding the second message unit to the initial session dictionary, and obtaining a dictionary pointer of the second message unit. By means of the present invention, the problem of low security of real-time communication encryption is solved, and the security of real-time communication is improved.

Description

Message transmission method and device

Technical field

The present invention relates to the field of communications, and in particular to a message transmission method and apparatus.

Background technique

With the development and popularization of mobile communication services and social networks, the use of various real-time communication services is also increasing. Communication security in this environment is an unavoidable topic.

The encryption algorithms that may be used in communication are divided into two categories, one is symmetric encryption and the other is asymmetric encryption. Symmetric encryption is also called private key encryption and shared key encryption; asymmetric encryption is called public key encryption.

A symmetric encryption algorithm uses the same key for encryption and decryption, or two keys that can be easily extrapolated from each other. This set of keys is shared between two or more members to maintain a proprietary communication link. Compared with public key encryption, requiring both parties to obtain the same key is one of the main drawbacks of symmetric key encryption. The advantage is that it is much faster than public key encryption. Common symmetric encryption algorithms are DES, 3DES, AES, Blowfish, IDEA, RC5, and RC6.

Asymmetric encryption requires a pair of keys, one is a private key and the other is a public key. These two keys are mathematically related. The information obtained by encrypting with a user key can only be decrypted by using the decryption key of the user. If you know one of them, you can't figure out another one. Therefore, if one of a pair of keys is disclosed, it does not endanger the secret nature of the other. Compared with symmetric key encryption, the advantage is that there is no need to share a common key, and the decrypted private key is not sent to any user. Even if the public key is intercepted on the Internet, if there is no private key matching it, it cannot be decrypted, and the intercepted public key is of no use. Common public key encryption algorithms are: RSA, ElGamal, elliptic curve encryption algorithm.

Public key systems are usually master-slave architectures. Common methods for passing certificates are SSL/TLS protocols, digital certificates, etc., but this method is not used for common network communication tools.

Regarding some real-time communication tools, the encryption security related conditions are as follows:

1, not encrypted, such as MSN;

2. Most of the mainstream software adopts the server-client mode. On the one hand, it uses symmetric encryption. On the other hand, the message transmission will be stored by the server, and private data security cannot be guaranteed, such as QQ and Skype.

3. There are also public key-based algorithms such as encryption using the SSL/TLS protocol, but these protocols are no longer secure;

4. According to the current development situation, real-time communication will be further biased towards P2P (peer-to-peer) mode, and message transmission will not pass through the server. In this case, although the information will not be stored on the server, one more point is intercepted by the attacker. Possible.

Aiming at the problem that the real-time communication encryption in the related art has low security, an effective solution has not been proposed yet.

Summary of the invention

In order to solve the above technical problem, an embodiment of the present invention provides a message transmission method and apparatus.

According to an aspect of the embodiments of the present invention, a message transmission method is provided, including: acquiring an initial session dictionary, wherein a first message unit exists in the initial session dictionary and corresponds to the initial session dictionary one by one a dictionary pointer comprising: a starting position of the first message unit in the initial session dictionary and a length of the first message unit; obtaining by the first message unit and/or the second message unit a message to be encoded, according to the initial session dictionary, compressing and encoding the first message unit of the message to be encoded, to obtain a dictionary pointer and/or the second message unit of the first message unit Forming a to-be-sent message; sending the to-be-sent message, and updating the initial session dictionary according to a preset policy, wherein updating the initial session dictionary comprises: adding the second message unit to the initial session dictionary, A dictionary pointer of the second message unit.

Preferably, after acquiring the initial session dictionary, the method further comprises: receiving a message to be decoded composed of a dictionary pointer and/or a third message unit of the first message unit; according to the initial session dictionary and a dictionary pointer of the first message unit, decompressing the to-be-decoded message, obtaining a decoded message composed of the first message unit and/or the third message unit; updating the initial session according to the preset policy a dictionary, wherein updating the initial session dictionary comprises: adding the third message unit to the initial session dictionary to obtain a dictionary pointer of the third message unit.

Preferably, the obtaining the initial session dictionary includes one of the following methods: negotiating with the recipient of the to-be-sent message or exchanging the initial session dictionary through peer-to-peer secure communication; acquiring the method by loading a configuration file An initial session dictionary; the initial session dictionary is obtained by randomly generating and encoding a common character font encoding and performing negotiation and interleaving with the receiver of the to-be-sent message; according to a preset period of time with the receiver of the to-be-sent message The session record within, generating the initial session dictionary.

Preferably, after acquiring the initial session dictionary, the method further comprises: determining whether the initial session dictionary matches an initial session dictionary of a receiver of the to-be-sent message; and if the determination result is a match, performing Subsequent steps; otherwise, the initial session dictionary is reacquired.

Preferably, updating the initial session dictionary according to the preset policy comprises one of: updating the initial session dictionary in real time; updating the initial session dictionary according to a dictionary update instruction.

According to another aspect of the present invention, a message transmission apparatus is further provided, including: a first obtaining module, configured to acquire an initial session dictionary, wherein a first message unit exists in the initial session dictionary, and a dictionary pointer corresponding to the initial session dictionary, the dictionary pointer includes: a starting position of the first message unit in the initial session dictionary and a length of the first message unit; a second acquiring module, setting To obtain a message to be encoded which is composed of the first message unit and/or the second message unit; the encoding module is configured to perform compression coding on the first message unit of the message to be encoded according to the initial session dictionary Obtaining a to-be-sent message formed by the dictionary pointer of the first message unit and/or the second message unit; the sending module is configured to send the to-be-sent message; the first update module is set to be according to a preset policy Updating the initial session dictionary, wherein updating the initial session dictionary comprises: adding the second message unit to the initial session word To give the dictionary of the second message unit pointer.

Advantageously, the apparatus further comprises: a receiving module configured to receive a message to be decoded consisting of a dictionary pointer and/or a third message unit of the first message unit; a decoding module configured to be based on the initial session dictionary and a dictionary pointer of the first message unit, decompressing the to-be-decoded message, to obtain a decoded message composed of the first message unit and/or the third message unit; and a second update module, configured to The preset policy updates the initial session dictionary, wherein updating the initial session dictionary comprises: adding the third message unit to the initial session dictionary to obtain a dictionary pointer of the third message unit.

Preferably, the first obtaining module is configured to: negotiate with the receiver of the to-be-sent message or exchange the initial session dictionary through peer-to-peer secure communication; acquire the initial by loading a configuration file a session dictionary; the initial session dictionary is obtained by randomly generating and encoding the common character font encoding and performing negotiation and interleaving with the receiver of the to-be-sent message; according to the receiver with the to-be-sent message, within a preset time period The session record, the initial session dictionary is generated.

Preferably, the apparatus further includes: a verification module, configured to determine whether the initial session dictionary matches an initial conversation dictionary of a receiver of the to-be-sent message; wherein, if the determination result is a match, enabling Subsequent modules; otherwise, returning to the first acquisition module to reacquire the initial session dictionary.

Preferably, the first update module and/or the second update module are set to one of: updating the initial session dictionary in real time; updating the initial session dictionary according to a dictionary update instruction.

According to an embodiment of the present invention, an initial session dictionary is acquired, where the initial session dictionary includes a first message unit and a dictionary pointer of the first message unit; and a message to be encoded composed of the first message unit and/or the second message unit is acquired; Decoding, according to the initial session dictionary, the first message unit of the coded message, to obtain a to-be-sent message formed by the dictionary pointer and/or the second message unit of the first message unit; sending a to-be-sent message, and updating according to a preset policy An initial session dictionary, wherein updating the initial session dictionary comprises: adding a second message unit to the initial session dictionary, obtaining a dictionary pointer of the second message unit, solving the problem that the real-time communication encryption has low security, and improving real-time communication safety.

DRAWINGS

The drawings described herein are intended to provide a further understanding of the invention, and are intended to be a part of the invention. In the drawing:

1 is a flow chart of a message transmission method according to an embodiment of the present invention;

2 is a schematic diagram of encoding in accordance with a preferred embodiment of the present invention;

3 is a schematic diagram of a topology structure of a master-slave structure communication model according to a preferred embodiment of the present invention;

4 is a schematic diagram of a topology structure of a discrete structure communication model in accordance with a preferred embodiment of the present invention;

5 is a schematic diagram of a topology structure of a point-to-point structure communication model according to a preferred embodiment of the present invention;

6 is a flow chart of a basic session of a communication terminal in accordance with a preferred embodiment of the present invention;

7 is a flowchart of an asynchronous dictionary update in accordance with a preferred embodiment of the present invention;

FIG. 8 is a schematic structural diagram of a message transmission apparatus according to an embodiment of the present invention; FIG.

9 is a flowchart showing the operation of the communication extension tool according to a preferred embodiment of the present invention, which is applicable to the topology shown in FIG. 3 and FIG. 5;

FIG. 10 is another operational flowchart of a communication extension tool according to a preferred embodiment of the present invention, which is applicable to the topology shown in FIG. 4 and FIG.

detailed description

The invention will be described in detail below with reference to the drawings in conjunction with the embodiments. It should be noted that the embodiments in the present application and the features in the embodiments may be combined with each other without conflict.

It is to be understood that the terms "first", "second" and the like in the specification and claims of the present invention are used to distinguish similar objects, and are not necessarily used to describe a particular order or order.

The compression coding employed in the embodiments of the present invention is a dictionary code, such as an LZ series code. Wherein, the LZ77 encoding in the related art is taken as an example. In compression encoding, the compression function is implemented by replacing the current data with corresponding matching data information that has appeared in the encoder or the decoder. This matching information is encoded using a pair of data called a "length-distance pair" which is equivalent to "each character of a given length is equal to the uncompressed data stream at a subsequent specific distance character position". Both the encoder and the decoder hold a certain amount of the most recent data, such as the last 2 kilobytes (KB), 4 KB, or 32 KB of data. The structure that holds these data is called a sliding window, so LZ77 is sometimes called sliding window compression. The encoder saves this data to find the matching data, and the decoder saves the data to interpret the matching data pointed to by the encoder. So the encoder can use a smaller sliding window than the decoder, but the reverse is not.

The dictionary encoding method applied in the embodiment of the present invention improves the compression encoding in the related art, thereby making it suitable for encrypted transmission of real-time communication: generating the same encoding dictionary at both ends of the real-time communication, and the subsequent input data will be prioritized. Find the encoding dictionary: If the data can be matched in the dictionary, the data is replaced with the position and length in the dictionary, etc. If the data cannot be matched in the dictionary, the data is added to the dictionary. Because this dictionary is updated in real time, the data cannot be decoded without the initial encoding dictionary.

The embodiment of the present invention provides a message transmission method. FIG. 1 is a flowchart of a message transmission method according to an embodiment of the present invention. As shown in FIG. 1 , the process includes the following steps:

Step S102: Acquire an initial session dictionary, where the first message unit exists in the initial session dictionary and corresponds to a dictionary pointer of the initial session dictionary, and the dictionary pointer includes: a start of the first message unit in the initial session dictionary. The location and the length of the first message unit;

Step S104: Acquire a message to be encoded that is composed of the first message unit and/or the second message unit.

Step S106, performing compression coding on the first message unit of the to-be-coded message according to the initial session dictionary, to obtain a to-be-sent message formed by the dictionary pointer and/or the second message unit of the first message unit;

Step S108: Send a message to be sent, and update an initial session dictionary according to a preset policy, where updating the initial session dictionary includes: adding a second message unit to the initial session dictionary to obtain a dictionary pointer of the second message unit.

Through the above steps, the message is transmitted in a dictionary encoding manner, and the initial session dictionary is updated according to the transmitted message. First, in the case where the other party does not acquire the initial session dictionary, the received information cannot be decoded; secondly, even if the other party acquires the initial session dictionary by some way, since the initial session dictionary is based on the session record (for example, the message to be encoded) The second message unit is updated, so if the other party does not get the previous session record, the same message plaintext cannot be obtained. It can be seen that through the above steps, the problem that the real-time communication encryption has low security is solved, and the security of real-time communication is improved.

The embodiment of the invention further provides a communication terminal applying the above message transmission method, which comprises a communication terminal device and/or software used at both ends of the message transmission and reception. The communication terminal device and software are collectively referred to as communication terminals in the embodiments of the present invention.

Preferably, by updating the initial session dictionary, the information transmitted at any time T between the communication terminals can be encoded based on all or part of the information transmitted between the communication terminals before the time T.

Preferably, before the message transmission is performed, acquiring the initial session dictionary includes one of the following methods: through peer-to-peer secure communication, negotiating with the receiver of the message to be sent or exchanging the initial session dictionary; and acquiring the initial session by loading the configuration file a dictionary; an initial session dictionary is obtained by randomly generating a code for encoding a common character font and negotiating and interleaving with a receiver of the message to be sent; generating an initial session according to a session record with a receiver of the message to be sent within a preset time period dictionary.

For example, the communication terminal A and the communication terminal B of both communication parties can negotiate or exchange a conversation dictionary for message transmission through a secure channel or a secure path. Preferably, the secure channel may be a point-to-point transmission; the security path and the generation of the session dictionary may also be matching file inputs preset at both ends of the communication.

Preferably, the generation of the conversation dictionary may be performed by randomly generating and performing negotiation and interleaving of common character fonts and the like at both ends of the communication; preferably, the content of the conversation dictionary may be plain text, binary or hexadecimal A block of data, or a text that has been transformed by a certain algorithm.

Preferably, after the initial session dictionary is acquired, a message to be decoded composed of a dictionary pointer and/or a third message unit of the first message unit may also be received; and the dictionary is decompressed according to the initial session dictionary and the dictionary pointer of the first message unit. Decoding the message, obtaining a decoded message composed of the first message unit and/or the third message unit; updating the initial session dictionary according to a preset policy, wherein updating the initial session dictionary comprises: adding a third message unit to the initial session dictionary, obtaining the first A dictionary pointer for three message units. In this way, decoding of the received message is achieved, as well as an update of the initial session dictionary based on the received message. In this way, the transceiving message can be encrypted and transmitted by dictionary coding.

For example, after the session dictionary is confirmed, the following method is used for message transmission:

The communication terminal A receives the input message to be transmitted, and starts to retrieve the session dictionary. If the message unit in the message to be transmitted can find a matching value in the session dictionary, the position and length of the matching unit in the dictionary are directly or indirectly The substitute message unit is added as a dictionary pointer to the message to be transmitted; if the message unit in the input message cannot find a matching value in the session dictionary, the message unit is added to the session dictionary, and the message is added directly or indirectly Pending Lose the message. When the communication terminal A receives the transmission instruction, the message to be transmitted is transmitted to the communication terminal B.

The communication terminal B receives the message of the communication terminal A, reads the message according to a preset rule, and if the message fragment is recognized as a dictionary pointer, searches the session dictionary to restore the message unit, and adds the restored message unit to the message to be output; if the message If the fragment is recognized as a non-dictionary pointer, the message fragment is restored according to a preset rule, added to the message to be output, and the restored message unit is added to the session dictionary; if the communication terminal B receives the output instruction, the message to be output is output. .

It should be noted that the communication terminal A and the communication terminal B can exchange roles.

Preferably, after obtaining the initial session dictionary, the method further comprises: determining whether the initial session dictionary matches the initial conversation dictionary of the recipient of the message to be sent; and if the determination result is a match, performing the subsequent step; otherwise, re-acquiring the initial Conversation dictionary. For example, if a new session is initiated, the session record can be checked. If there is a session record, a session dictionary can be generated through the session record, and the feature values of the dictionary generated at both ends are matched. If the dictionary feature values at both ends match, Use this conversation dictionary.

Preferably, the negotiation process of the session dictionary and the transmission process of the message may be encapsulated by an encryption algorithm and/or a security protocol for additional encrypted transmission.

Preferably, the negotiation of the session dictionary and the transmission of the message can independently use different encryption and transmission paths.

During the entire transmission process of the embodiment of the present invention, the content of the session dictionary changes continuously with the content of the message transmission. According to the setting, the size of the session dictionary may be fixed or variable. Preferably, updating the initial session dictionary according to the preset policy comprises one of: updating the initial session dictionary in real time; and updating the initial session dictionary according to the dictionary update instruction.

Preferably, the dictionary can be updated by specific instructions, such as rearranging, or varying lengths.

Preferably, the update of the conversation dictionary may be a periodic update or a random update.

Preferably, the update command of the session dictionary may contain/hide in the message to be transmitted for transmission. For example, it can be implemented as follows:

The communication terminal A triggers a dictionary update event, encodes the dictionary update command and parameters as an input message and adds it to the message to be transmitted, the communication terminal A updates the local session dictionary, and the communication terminal A transmits the message to be transmitted. The communication terminal B decodes after receiving the message, and when the read decoded content is recognized as an instruction, reads the instruction and the parameter, and the communication terminal B updates the session dictionary according to the instruction and the parameter content, and the instruction content is not added to the message to be output.

Preferably, in order to avoid the dictionary from being incorrectly synchronized due to the message receiving error, the communication terminal A may not perform the dictionary update when transmitting the message, and when the communication terminal B receives the message, it feeds back a successfully received message to the communication terminal A, and the communication Terminal A receives the feedback and then performs dictionary update.

Preferably, after receiving the message, the communication terminal B can feed back the check value of a session dictionary to the communication terminal A, and the communication terminal A matches the check value of the local dictionary. If the match is matched, the update is performed. If no match, the communication terminal B re-matches Negotiation session dictionary

Preferably, in order to avoid the conversation sequence error caused by the delay, the dictionary can be asynchronously updated, and the communication party communicates with one. After a certain time, or after the amount of exchanged information reaches a certain scale, the two ends initiate a dictionary update, and the session sequence or the check code in a window before the current message is extracted to match, and if the matching is successful, the dictionary is updated using the content in the window. If it cannot be matched, it will be re-matched.

Preferably, in order to avoid the dictionary synchronization error caused by the abnormal termination of the session, the session feedback mechanism may be increased. When the session is re-established, the communication parties return to the plurality of session windows according to the session record stored by the communication, and generate the content in each window. The check code is compared. When the two parties find a matching check code, the dictionary is generated using the content in the session window corresponding to the check code. If the matching content cannot be found, the original session dictionary is renegotiated or reset.

The above description shows that the dictionary-encoded compression algorithm used in the message transmission method provided by the embodiment of the present invention has the following advantages over the general encryption algorithm:

1. The input and output of the encryption algorithm are usually fixed length, and the input and output length of the compression algorithm are indefinite, because if you do not know the position and length of the pointer structure, you can not know the length of the data matching in the dictionary, and also Know that a message is actually divided into several paragraphs;

2. The encryption algorithm is slice encryption. Any encrypted segment of a certain length can be decoded independently; and the compression algorithm is continuous coding, and any part is lost. Generally, the subsequent part cannot be decoded;

3. The key used by the encryption algorithm is usually fixed. The dictionary used by the compression algorithm is a sliding window and will be updated continuously.

4. The encoding/decoding result of the encryption algorithm is unique, so it can judge the correctness of the data, and further can be exhausted by a specific method; while the encoding output of the compression algorithm is not unique, even if the output is forcibly exhausted, it is basically impossible to judge the correctness.

5. The compression algorithm originally did not have the encryption feature, but due to the vulnerability characteristics of the second point mentioned above, and the sliding window mechanism of the third point, and the uncertainty characteristic of the fourth point, in the scene of real-time message transmission. It has a very high security; on the other hand, the compressed code can also be encrypted by an encryption algorithm.

In order to make the description of the embodiments of the present invention more clear, the following description and description are given in conjunction with the preferred embodiments.

A preferred embodiment of the present invention provides a message transmission method based on compression coding, which can be used for real-time communication. The compression coding used therein may be one or more coding modes for lossless data compression; the compression coding has the following characteristics: First, data transmitted at any time depends on the transmission before the time when decoding is performed. Data, so data within a time segment cannot be decoded separately; second, the transmitted data can be further encrypted by other encryption algorithms or security protocols.

In the method provided by the preferred embodiment of the present invention, the session and encoding process is as shown in FIG. 2, assuming that the communication parties are communication terminal A (Terminal A in FIG. 2) and communication terminal B (Terminal B in FIG. 2), both parties start the session. Exchange/negotiate a conversation dictionary for the session (Dictionary in Figure 2). For convenience of explanation, it is assumed that the sequence of the dictionary generated by the initial negotiation is 201: HELOWARY.

When the communication terminal A sends a message to the communication terminal B: HELLO, the communication terminal A searches for the maximum matching field in the dictionary, first finds a HEL matching three characters, assuming that the encoding here uses one byte to indicate the starting position of the character, one Word The section indicates the length of the string (offset), then the encoding of the HEL in the initial dictionary can be expressed as 0x0003; then the LO matching 2 characters is also found, and the encoding can be expressed as 0x0202, so the communication terminal A is sent after encoding. The message of communication terminal B is 0x00030202.

After receiving the message, the communication terminal B decodes according to the same principle, reads two bytes at a time, one byte is the starting position, one byte is the string length, and then the content output is read from the dictionary.

Since HELLO does not have a complete match in the dictionary, HELLOW is added to the dictionary as a new string, resulting in a dictionary as shown in 202.

Then, the communication terminal B replies to the message HELLO to the communication terminal A, searches the dictionary for encoding, and the message sent after the encoding is 0x0805. Since the full character matches, the dictionary is not updated.

Security analysis: Assume that A sends a B message 0x00030203 intercepted by the attacker, but the attacker did not get the dictionary, even if he knows that this is a two-character pointer, he can only know that this is a 6-byte content, can't know specific contents. In the actual implementation, such a simple two-character pointer combination is not used, so it is impossible to break. Suppose again that the initial dictionary is intercepted, and intercepts the message 0x0806 sent by B to A, but does not intercept the message sent by A to B. Since the content of the 08th byte is not in the initial dictionary, I don't know what the front is. How much content or content is transferred, so it cannot be decoded.

Special Case 1: The dictionary 203 of Figure 2 shows an example of a real-time updated encoding, ie the dictionary is updated during the encoding process. On the basis of the dictionary 202, A sends a message HOW ARE YOU to B, first finds H (0x0001), then finds OW (0x0302), because the HOW is not in the dictionary, joins the dictionary, then the space, the dictionary does not, Add the dictionary (0x1001). At this time, the space character needs to add the information to be transmitted according to the preset rules. The simple point we make here is directly output in ASCII code. Of course, there is usually a way to recognize new characters, such as specifying a pointer. The position starts with FF to indicate a new character, and ends with the next FF (or specifies a random position value to indicate a new character, and ends at the next random position value, skipping the two positions when actually encoding); 0x0502), E (0x0101), because ARE is not in the dictionary, added to the dictionary, the next space has been added to the dictionary (0x1001), but the string with ARE followed by the space is not in the dictionary, so the space is still added to the dictionary. , then Y (0x0701), O (0x0C01), YO is not in the dictionary, add a dictionary, and finally U is a new character, add a dictionary, U as a new character output. If the new character is converted to hexadecimal, then the space is represented as 0xFF20FF, U is represented as 0xFF55FF, and the information sent by A to B is: 0x00010302FF20FF05020101100107010301FF55FF, and when B receives the information for decoding, if the read two bytes is FF At the beginning of the new character, continue to read the remaining bytes, until the second FF is read, extract new characters, and join the dictionary.

The probability that the above situation occurs in the actual implementation is actually small, because in the actual implementation, a large dictionary is negotiated. If the dictionary is the smallest unit in bytes, the combination of FF is 256, that is, the dictionary of 256 bytes or more. You can use new characters instead.

According to the introduction of the related art, the dictionary code can also be called sliding window coding, so the dictionary is not infinitely extended, and sliding backward according to the setting is the correct method. For example, in this example, if the dictionary size is set to 16 words Section, then the final output of the dictionary should be moved back 9 bytes, the dictionary of 203 should be as follows:

Then the initial dictionary is completely ineffective for the attacker. However, in this case, if the real-time encoding in this example is used, the encoding output becomes complicated, the transmission fault tolerance is also low, and problems occur, so in fact, more asynchronous updates described later are used.

The communication terminal shown in the preferred embodiment of the present invention can generally have the following three types of work communication structures:

The master-slave structure communication model shown in FIG. 3, that is, the server-client architecture, the communication terminal registers information with the server, and after logging in to the server, sends a message to the peer communication terminal ID, and the message is forwarded to the peer through the server.

Figure 4 shows the discrete structure communication model. The communication terminal discovers other communication terminals on the network and directly communicates without a server.

FIG. 5 shows a peer-to-peer structure communication model. The communication terminal obtains the peer information by registering or reporting its own information to the server, and directly obtains the peer address, and then directly communicates with the peer end, and the session process information may not pass through the server.

In practical applications, a communication terminal can simultaneously use several of the structures in the above three structures.

The communication terminal of the preferred embodiment of the present invention can generally operate independently under the topology shown in FIG. 4 or 5. At this point, the basic workflow of the communication terminal is as shown in FIG. 6.

Assuming that the communication terminal A is the calling party and the communication terminal B is the called party, the communication process is divided into two phases. The first phase (Phase) 1 confirms the initial session dictionary for communication, and Phase 2 performs communication. Among them, the roles of Phase 2 communication terminals A and B can be exchanged.

Step S601, the communication terminals A and B negotiate an encrypted channel, which is generally a direct connection without going through the server;

In step S602, the communication terminals A and B generate an initial session dictionary through the encrypted channel exchange or negotiation, and the local common word sequence of the two communication terminals can be matched and randomly changed. The dictionary size can take a random value within a certain range. If it is not the first communication, the initial session dictionary can be generated based on the past communication records, so that the actual dictionary information is not included in the interaction information.

Step S603, after the initial session dictionary is agreed, the encrypted channel is removed. After the communication is required, a new encrypted channel can be reconstructed. At this point, Phase1 ends.

Step S604, the communication terminal A receives the message to be sent by the input terminal, and performs coding according to the coding method shown in FIG. 1;

Step S605, the communication terminal A sends the encoded message to the communication terminal B;

Step S606, the communication terminal B performs decoding after receiving the message;

Step S607, the communication terminal B outputs the decoded message;

Step S608, the communication terminal B confirms that the message is received, and sends a receipt or a check code to the communication terminal A;

Step S609, the communication terminal A updates the dictionary after receiving the receipt, and the communication terminal B updates the dictionary;

The communication terminal B transmits a message to the communication terminal A also following the steps of steps S601 to S609.

The flow shown in FIG. 6 is slightly different from the real-time update shown in the above special case 1, because the real-time update is not performed, so the second space in the code of the communication terminal A in the special case 1 will be replaced by the new character, but the final update is performed. There is no difference in the dictionary.

For more reliable dictionary updates, you can use the asynchronous update process shown in Figure 7.

Step S701, a trigger triggers an update process. The trigger event can be time, message threshold, and the like.

Step S702, after receiving the input message, the communication terminal A generates an update signal, and the update signal is usually an instruction including several parameters, such as a dictionary update rule, a dictionary length, etc.; the communication terminal A will update the signal and the received input message. Mix according to certain rules and define the update signal by a specific method.

Step S703, the communication terminal A encodes the mixed message;

Step S704, the communication terminal A sends the encoded message to the communication terminal B;

Step S705, the communication terminal B performs decoding after receiving the message;

Step S706, the communication terminal B reads the decoded message, identifies the update signal delimiter, and separates the message into an update signal and a message to be output according to a specific rule;

Step S707, the communication terminal B outputs the output message.

Step S708, the communication terminals A and B record the backtracking message according to the parameters in the update signal, generate a message window, and roll back a number of message sequences, and generate a check code by generating a check code for each content in the message window, and generate a plurality of schools. Code check

Step S709, the communication terminal B sends a check code sequence to the communication terminal A;

Step S710, the communication terminal A compares the self-check code, selects a matching transmission to the communication terminal B;

Step S711, the communication terminals A and B update the dictionary according to the content in the message window corresponding to the selected check code;

The advantage of using this method is that the dictionary will not be updated when there is a communication exception or a delay in the message sequence caused by the transmission delay.

Through the description of the above embodiments, those skilled in the art can clearly understand the square according to the above embodiments. The method can be implemented by means of software plus the necessary general hardware platform, of course, it can also be through hardware, but in many cases the former is a better implementation. Based on such understanding, the technical solution of the present invention, which is essential or contributes to the prior art, may be embodied in the form of a software product stored in a storage medium (such as ROM/RAM, disk, The optical disc includes a number of instructions for causing a terminal device (which may be a cell phone, a computer, a server, or a network device, etc.) to perform the methods of various embodiments of the present invention.

A message transmission device is also provided in the embodiment to implement the above-mentioned embodiments and preferred embodiments. The descriptions of the modules involved in the device will be described below. As used below, the term "module" may implement a combination of software and/or hardware of a predetermined function. Although the apparatus described in the following embodiments is preferably implemented in software, hardware, or a combination of software and hardware, is also possible and contemplated.

FIG. 8 is a schematic structural diagram of a message transmission apparatus according to an embodiment of the present invention. As shown in FIG. 8, the apparatus includes: a first acquisition module 80, a second acquisition module 82, an encoding module 84, a sending module 86, and a first update module. 88, of which,

The first obtaining module 80 is configured to obtain an initial session dictionary, where the first message unit exists in the initial session dictionary and corresponds to a dictionary pointer of the initial session dictionary, the dictionary pointer includes: the first message unit is in the initial session a starting position in the dictionary and a length of the first message unit; a second obtaining module 82, configured to acquire a message to be encoded consisting of the first message unit and/or the second message unit; and an encoding module 84 coupled to the first acquisition The module 80 and the second obtaining module 82 are configured to perform compression coding on the first message unit of the message to be encoded according to the initial session dictionary, to obtain a to-be-sent message formed by the dictionary pointer and/or the second message unit of the first message unit; The sending module 86 is coupled to the encoding module 84 and configured to send a message to be sent. The first updating module 88 is coupled to the second obtaining module 82, and is configured to update the initial session dictionary according to a preset policy, where updating the initial session dictionary comprises: Adding the second message unit to the initial session dictionary to obtain a dictionary pointer of the second message unit.

Preferably, the apparatus further comprises: a receiving module configured to receive a message to be decoded consisting of a dictionary pointer and/or a third message unit of the first message unit; a decoding module coupled to the receiving module, configured to be based on the initial session dictionary and a dictionary pointer of a message unit, decompressing the message to be decoded, to obtain a decoded message composed of the first message unit and/or the third message unit; and a second update module coupled to the receiving module, configured to update the initial session according to a preset policy a dictionary, wherein updating the initial session dictionary comprises: adding a third message unit to the initial session dictionary to obtain a dictionary pointer of the third message unit.

Preferably, the first obtaining module 80 is configured to: negotiate with the receiver of the message to be sent or exchange the initial session dictionary through peer-to-peer secure communication; obtain the initial session dictionary by loading the configuration file; The font encoding is randomly generated and negotiated and interleaved with the receiver of the message to be sent to obtain an initial session dictionary; and an initial session dictionary is generated according to the session record with the receiver of the message to be transmitted within a preset time period.

Preferably, the device further includes: a verification module, coupled to the first acquisition module, configured to determine whether the initial session dictionary matches the initial conversation dictionary of the recipient of the message to be sent; wherein, in the case that the determination result is a match, The module can be followed; otherwise, the first acquisition module 80 is returned to reacquire the initial session dictionary.

Preferably, the first update module and/or the second update module are set to one of: updating the initial session dictionary in real time; updating the initial session dictionary according to the dictionary update instruction.

A preferred embodiment of the present invention also provides an extension tool for a real-time communication tool for providing data protection for a server-client structured communication tool. The extension tool A acts on the communication tool A, and the extension tool B acts on the communication tool B, where the communication tool can be different from the communication terminal in the embodiment of the present invention.

The extension tool in the preferred embodiment of the present invention is used for monitoring the input and output interface and the communication port of the communication tool; the extension tool obtains the address of the opposite end and performs interactive confirmation information to the peer extension tool. If the confirmation is successful, the extension tool bypasses the server. Directly negotiate dictionary information with the peer extension tool. When the communication tool A starts the information input, the extension tool A intercepts the input information for encoding, and sends the encoded message to the input interface of the communication tool. When the communication tool B receives the information, the extension tool B intercepts the output, performs decoding, and then sends the decoded message to the output interface.

Preferably, the extension tools can communicate directly around the server.

Preferably, the extension tool can provide a dictionary file input function to input a matching file preset at both ends of the communication as a conversation dictionary.

Figure 9 provides an example of a workflow for a preferred embodiment of the present invention for use in the expansion of communication tools for communication tools that use point-to-point connections. Terminal A and Terminal B shown in FIG. 9 are existing communication tools, and Plugin A and Plugin B are extension tools of a preferred embodiment of the present invention, in which Plugin A acts on Terminal A and Plugin B acts on Terminal B.

Phase 1 shown in Figure 9 is an initialization process for the extension tool to find the peer node for subsequent P2P sessions. Phase 2 is a dictionary negotiation between extension tools, which can be used to generate an initial session dictionary and subsequent dictionary updates, and the process is similar to the steps S601 to S603 shown in FIG. 6. Phase3 is the information transmission phase.

The Phase1 process is as follows:

The extension tool monitors the network interface and the input and output interfaces of the communication tool, assuming that the communication tool A is the main character and the communication tool B is the called party.

Step S901, the communication tools A and B are registered on the server;

Step S902, the communication tool A wants the server to query the status of the communication tool B;

Step S903, the extension tool A acquires the state of the communication tool B by monitoring the communication tool A, including the communication address;

Since the extension tool interacts with the peer extension tool, it is generally sufficient to obtain the peer communication address, and Phase1 ends; then Phase 2 phase extension tool A initiates dictionary negotiation.

The Phase 3 phase process is as follows:

Step S904: When the extension tool A intercepts the input information of the communication tool A, encodes the information;

Step S905: the extension tool A transmits the encoded information to the input interface of the communication tool A;

Step S906: When the communication tool A sends the encoded information to the communication tool B via the point-to-point connection;

Step S907: or when the communication tool A forwards the encoded information to the communication tool B via the server;

Step S908: the extension tool B listens to the information received by the communication tool B, intercepts the output, and decodes the information;

Step S909: The extension tool B transmits the decoded information to the output interface of the communication tool B and outputs it.

Figure 10 provides another workflow example for a preferred embodiment of the present invention for use in the expansion of communication tools, suitable for use with communication tools without point-to-point connections, such as the topology shown in Figure 3. Terminal A and Terminal B shown in Fig. 10 are existing communication tools, and Plugin A and Plugin B are extension tools of a preferred embodiment of the present invention, in which Plugin A acts on Terminal A and Plugin B acts on Terminal B.

Phase 1 shown in Figure 10 is an initialization process used by the extension tool to find the peer node for subsequent sessions between extension tools. Phase 2 is a dictionary negotiation between extension tools, which can be used to generate an initial session dictionary and subsequent dictionary updates, and the process is similar to the steps S601 to S603 shown in FIG. 6. Phase 3 is an information transmission phase similar to steps S905 to S909 of the example shown in FIG. The following mainly describes the process of the Phase1 phase:

Step S1001, the communication tool is registered on the server, and the opposite end is found;

Step S1002, the extension tool detects that the network status of the communication tool changes, that is, starts detecting the local communication address;

Step S1003, the extension tool A sends the local communication address to the communication tool B through the communication tool A;

Step S1004, the extension tool B intercepts the message received by the communication tool B, and extracts the communication address of the communication tool A;

Step S1005, the extension tool B sends the local communication address to the communication tool A through the communication tool B;

Step S1006, at the same time, the extension tool B initiates a connection to the extension tool A;

In step S1007, the extension tool A intercepts the message received by the communication tool A, extracts the communication address of the communication tool B, and after confirming, matches the source address connected in step S1006, and then receives the request, otherwise rejects the connection.

As shown in Figure 9 and Figure 10, the dictionary interaction and information transmission are done in different ways, and the server is encoded information, even if it is stored by the server, it will not reveal private information, which is a very safe method. .

It should be noted that each of the above modules may be implemented by software or hardware. For the latter, the foregoing may be implemented by, but not limited to, the foregoing modules are all located in the same processor; or, the modules are located in multiple In the processor.

Embodiments of the present invention also provide a software for performing the technical solutions described in the above embodiments and preferred embodiments.

Embodiments of the present invention also provide a storage medium. In this embodiment, the above storage medium may be configured to store program code for performing the following steps:

S1, obtaining an initial session dictionary, wherein the first message unit exists in the initial session dictionary, and corresponds to a dictionary pointer of the initial session dictionary, the dictionary pointer includes: a starting position of the first message unit in the initial session dictionary with The length of the first message unit;

S2. Acquire a message to be encoded that is formed by the first message unit and/or the second message unit.

S3. Perform compression coding on the first message unit of the to-be-coded message according to the initial session dictionary, to obtain a to-be-sent message formed by the dictionary pointer and/or the second message unit of the first message unit.

S4: Send a message to be sent, and update an initial session dictionary according to a preset policy, where updating the initial session dictionary includes: adding a second message unit to the initial session dictionary to obtain a dictionary pointer of the second message unit.

Optionally, in this embodiment, the foregoing storage medium may include, but not limited to, a USB flash drive, a Read-Only Memory (ROM), a Random Access Memory (RAM), a mobile hard disk, and a magnetic memory. A variety of media that can store program code, such as a disc or a disc.

For example, the specific examples in this embodiment may refer to the examples described in the foregoing embodiments and the optional embodiments, and details are not described herein again.

In summary, the above embodiments and preferred embodiments of the present invention provide an enhanced message encryption transmission method that uses the sliding window mechanism in the data compression algorithm to ensure private data security. The above scheme can be used independently as a message transmission method or provide secondary encryption for existing communication tools, thereby providing higher security on the basis of current popular real-time communication and providing further privacy protection for existing tools. The existing security protocols themselves provide data validation and certain data compression capabilities, but there are still many security risks. The present invention provides a private data security method by using the above embodiments and preferred embodiments, and data integrity can be ensured by a transport layer protocol; although the compression coding principle is used in the above embodiment, the purpose is not compression, due to use. The encoding process of compression coding is a continuous process. The coding dictionary is a sliding window with high uncertainty, so that a single encoded data segment can not be cracked, and it has higher security in real-time communication.

It will be apparent to those skilled in the art that the various modules or steps of the present invention described above can be implemented by a general-purpose computing device that can be centralized on a single computing device or distributed across a network of multiple computing devices. Alternatively, they may be implemented by program code executable by the computing device such that they may be stored in the storage device by the computing device and, in some cases, may be different from the order herein. The steps shown or described are performed, or they are separately fabricated into individual integrated circuit modules, or a plurality of modules or steps thereof are fabricated as a single integrated circuit module. Thus, the invention is not limited to any specific combination of hardware and software.

The above description is only the preferred embodiment of the present invention, and is not intended to limit the present invention, and various modifications and changes can be made to the present invention. Any modifications, equivalent substitutions, improvements, etc. made within the spirit and scope of the present invention are intended to be included within the scope of the present invention.

Industrial applicability

In the message transmission process of the embodiment of the present invention, an initial session dictionary is acquired, wherein the initial session dictionary includes a first message unit and a dictionary pointer of the first message unit; and the acquisition is composed of the first message unit and/or the second message unit. The message to be encoded; according to the initial session dictionary, the first message unit of the message to be encoded is compression-encoded, and the first message is obtained. a dictionary pointer formed by the information unit and/or a message to be sent formed by the second message unit; the message to be sent is sent, and the initial session dictionary is updated according to a preset policy, wherein updating the initial session dictionary includes: adding the second message unit to the initial session dictionary The method of obtaining the dictionary pointer of the second message unit solves the problem that the real-time communication encryption has low security and improves the security of real-time communication.

Claims

A message transmission method includes:

Obtaining an initial session dictionary, wherein a first message unit exists in the initial session dictionary and corresponds one-to-one to a dictionary pointer of the initial session dictionary, the dictionary pointer comprising: the first message unit in the initial session a starting position in the dictionary and a length of the first message unit;

Acquiring a message to be encoded formed by the first message unit and/or the second message unit;

Decoding, according to the initial session dictionary, the first message unit of the to-be-encoded message, to obtain a to-be-sent message formed by a dictionary pointer of the first message unit and/or the second message unit;

Sending the to-be-sent message, and updating the initial session dictionary according to a preset policy, where updating the initial session dictionary includes: adding the second message unit to the initial session dictionary, and obtaining the second message unit Dictionary pointer.
The method of claim 1, wherein after obtaining the initial session dictionary, the method further comprises:

Receiving a message to be decoded consisting of a dictionary pointer and/or a third message unit of the first message unit;

Decompressing the to-be-decoded message according to the initial session dictionary and a dictionary pointer of the first message unit, to obtain a decoded message composed of the first message unit and/or the third message unit;

Updating the initial session dictionary according to the preset policy, wherein updating the initial session dictionary comprises: adding the third message unit to the initial session dictionary to obtain a dictionary pointer of the third message unit.
The method of claim 1 wherein obtaining the initial session dictionary comprises one of:

Securely communicating with the recipient of the to-be-sent message or exchanging the initial session dictionary through peer-to-peer secure communication;

Obtaining the initial session dictionary by loading a configuration file;

Obtaining the initial session dictionary by randomly generating a random code generated by a common character font and negotiating and interleaving with a receiver of the to-be-sent message;

The initial session dictionary is generated according to a session record with a recipient of the to-be-sent message within a preset time period.
The method of claim 1, wherein after obtaining the initial session dictionary, the method further comprises:

Determining whether the initial session dictionary matches the initial session dictionary of the receiver of the to-be-sent message;

In the case where the judgment result is a match, the subsequent steps are performed; otherwise, the initial session dictionary is re-acquired.
The method according to any one of claims 1 to 4, wherein updating the initial session dictionary according to the preset policy comprises one of the following:

Updating the initial session dictionary in real time;

The initial session dictionary is updated according to a dictionary update instruction.
A message transmission device comprising:

a first obtaining module, configured to acquire an initial session dictionary, wherein the first message unit exists in the initial session dictionary, and corresponds to a dictionary pointer of the initial session dictionary, the dictionary pointer includes: the first a starting position of the message unit in the initial session dictionary and a length of the first message unit;

a second acquiring module, configured to acquire a message to be encoded that is formed by the first message unit and/or the second message unit;

An encoding module, configured to perform compression coding on the first message unit of the to-be-encoded message according to the initial session dictionary, to obtain a dictionary pointer and/or the second message unit of the first message unit To be sent message;

a sending module, configured to send the to-be-sent message;

a first update module, configured to update the initial session dictionary according to a preset policy, where updating the initial session dictionary comprises: adding the second message unit to the initial session dictionary to obtain the second message unit Dictionary pointer.
The apparatus of claim 6 wherein said apparatus further comprises:

a receiving module, configured to receive a message to be decoded that is formed by a dictionary pointer and/or a third message unit of the first message unit;

a decoding module, configured to decompress the to-be-decoded message according to the initial session dictionary and a dictionary pointer of the first message unit, to obtain a decoding composed of the first message unit and/or the third message unit Message

a second update module, configured to update the initial session dictionary according to the preset policy, where updating the initial session dictionary comprises: adding the third message unit to the initial session dictionary, to obtain the third message The dictionary pointer for the unit.
The apparatus of claim 6, wherein the first acquisition module is set to one of the following:

Securely communicating with the recipient of the to-be-sent message or exchanging the initial session dictionary through peer-to-peer secure communication;

Obtaining the initial session dictionary by loading a configuration file;

Obtaining the initial session dictionary by randomly generating a random code generated by a common character font and negotiating and interleaving with a receiver of the to-be-sent message;

The initial session dictionary is generated according to a session record with a recipient of the to-be-sent message within a preset time period.
The apparatus of claim 6 wherein said apparatus further comprises:

a verification module, configured to determine whether the initial session dictionary matches an initial session dictionary of a receiver of the to-be-sent message;

Wherein, in the case that the judgment result is a match, the subsequent module is enabled; otherwise, the first acquisition module is returned to re-acquire the initial session dictionary.
The apparatus according to any one of claims 6 to 9, wherein the first update module and/or the second update module are set to one of the following:

Updating the initial session dictionary in real time;

The initial session dictionary is updated according to a dictionary update instruction.