WO2016187892A1

WO2016187892A1 - Data transmission method and terminal

Info

Publication number: WO2016187892A1
Application number: PCT/CN2015/080322
Authority: WO
Inventors: 董志伟; 刘碧波
Original assignee: 宇龙计算机通信科技(深圳)有限公司
Priority date: 2015-05-22
Filing date: 2015-05-29
Publication date: 2016-12-01
Also published as: CN105577631B; CN105577631A

Abstract

Disclosed is a data transmission method. The method comprises: when an acquiring module acquires first target data to be sent, the acquiring module encrypts the first target data to generate first encrypted target data, and sends the first encrypted target data to a transceiver module; and the transceiver module receives the first encrypted target data sent by the acquiring module, and transmits the first encrypted target data, so that a reception end connected to the transceiver module obtains the first target data. Also disclosed is a terminal. By using the present invention, a terminal can encrypt internally transmitted data, so as to prevent data from being thieved and improve security of the data.

Description

Method and terminal for data transmission

This application claims priority to Chinese Patent Application No. 201510267013.X, entitled "A Method and Terminal for Data Transmission" on May 22, 2015, the entire contents of which are incorporated by reference. In this application.

Technical field

The present invention relates to the field of electronic technologies, and in particular, to a data transmission method and terminal.

Background technique

At present, the data to be sent on the terminal that needs to interact with other receiving ends, for example, the user inputs an operation instruction on the operation page of the terminal to control the receiving end connected to the terminal, and the operation instruction needs to be sent by the terminal to the receiving end, The receiving end is configured to control the terminal in response to the operation instruction. The existing transmission path of the data to be sent in the terminal is specifically: the acquiring module of the terminal acquires the data to be sent, and the acquiring module does not perform any processing on the data to be sent, and directly sends the data to be sent to the transceiver module of the terminal, so that The transceiver module transmits to the receiving end through an air interface. In a specific application, the user may input data on the application layer, and the data needs to be sent to the receiving end, and the application layer of the terminal may directly transmit the data to the baseband processor (Modem), and the baseband processor passes the data through the air interface. The message is transmitted to the receiving end; or the short message application sends a clear text message to the baseband processor through the interface of the short message sending and receiving, and the baseband processor sends the short message to the corresponding receiving end. The transceiver module can also encrypt the data to be sent, and transmit the encrypted data to the receiving end, in order to improve the security of the data to be sent.

However, since the acquiring module sends the data to be sent to the transceiver module without any processing on the data to be sent, the data to be sent sent by the acquiring module to the transceiver module is plaintext content, and the existing third-party Trojan can perform monitoring and acquisition. The interface of the module and the interface of the transceiver module, that is, the third-party Trojan can monitor the transmission process of the acquisition module and the transceiver module, so that when the acquisition module sends the plaintext content to the transceiver module, the third-party Trojan can pass the monitoring system. In the broadcast mode, the transceiver module can intercept the data to be sent before the data is to be sent, thereby causing the loss of user data.

Similarly, the receiving data on the terminal interacting with other transmitting ends, for example, the terminal receives an operation instruction sent by the sending end. The existing transmission path of the received data in the terminal is specifically: the transceiver module of the terminal acquires the received data, and when the received data is not the encrypted data, the transceiver module can be docked. Receiving data without any processing, directly sending the received data to the acquisition module of the terminal; when the received data is encrypted data, the transceiver module may decrypt the received data, and send the decrypted received data to the acquisition module of the terminal.

However, since the transceiver module sends the plaintext content to the acquisition module, the third-party Trojan program currently exists can perform the transmission process of the interception acquisition module and the transceiver module, so that when the transceiver module sends the plaintext content to the acquisition module, The three-party Trojan can intercept and receive data from the receiving module before receiving the data to be sent through the monitoring system broadcast, etc., and also cause the loss of user data.

Therefore, the data acquisition between the existing acquisition module and the transceiver module cannot guarantee data security, resulting in data loss and data leakage, which brings inconvenience to the user.

Summary of the invention

The technical problem to be solved by the embodiments of the present invention is to provide a data transmission method and terminal. The terminal can encrypt the internally transmitted data, thereby preventing the data from being intercepted and being intercepted, thereby improving data security.

In order to solve the above technical problem, an embodiment of the present invention provides a data transmission method, including:

When the acquiring module acquires the first target data to be sent, the acquiring module encrypts the first target data, generates first encrypted target data, and sends the first encrypted target data to the transceiver module;

The transceiver module receives the first encryption target data sent by the acquiring module, and performs transmission processing on the first encryption target data, so that the receiving end connected to the transceiver module obtains the first target data. .

The first encryption target data carries a first encryption identifier;

Receiving, by the transceiver module, the first encryption target data sent by the acquiring module, and performing transmission processing on the first encryption target data includes:

The transceiver module sends the first encryption target data to the receiving end, or

The transceiver module parses the first encryption target data to obtain the first encryption identifier;

The transceiver module acquires a first decryption rule corresponding to the first encryption identifier according to the first encryption identifier;

The transceiver module decrypts the first encryption target data according to the first decryption rule. Obtaining the first target data.

The method further includes:

When the transceiver module receives the second target data sent by the sending end connected to the transceiver module, the transceiver module encrypts the second target data to generate second encrypted target data, and the Sending the encrypted target data to the acquiring module;

The acquiring module receives the second encryption target data sent by the transceiver module, and decrypts the second encryption target data to obtain the second target data;

The acquisition module processes the second target data.

The second encryption target data carries a second encryption identifier;

The acquiring module receives the second encryption target data sent by the transceiver module, and decrypts the second encryption target data, and obtaining the second target data includes:

Obtaining, by the acquiring module, the second decryption rule corresponding to the second encrypted identifier according to the second encrypted identifier;

The obtaining module decrypts the second encryption target data according to the second decryption rule to obtain the second target data.

The acquiring module receives the second encryption target data sent by the transceiver module, and decrypts the second encryption target data, and the obtaining the second target data includes:

The verification module verifies the acquisition module, and determines that the acquisition module is legal.

Correspondingly, the embodiment of the present invention further provides a terminal, where the terminal includes an obtaining module and a transceiver module connected to the acquiring module, where

The acquiring module is configured to: when the first target data to be sent is acquired, encrypt the first target data, generate first encrypted target data, and send the first encrypted target data to the transceiver module;

The first encryption target data carries a first encryption identifier;

The transceiver module is specifically configured to:

Transmitting the first encryption target data to the receiving end, or

Parsing the first encryption target data to obtain the first encryption identifier;

Obtaining, according to the first encryption identifier, a first decryption rule corresponding to the first encryption identifier;

Decrypting the first encryption target data according to the first decryption rule to obtain the first target data.

among them,

The transceiver module is specifically configured to:

When receiving the second target data sent by the transmitting end connected to the transceiver module, encrypting the second target data, generating second encrypted target data, and transmitting the second encrypted target data to the Acquisition module

The obtaining module is specifically configured to:

Receiving the second encryption target data sent by the transceiver module, and decrypting the second encryption target data to obtain the second target data;

Processing the second target data.

The second encryption target data carries a second encryption identifier;

The obtaining module is specifically configured to:

Obtaining, according to the second encryption identifier, a second decryption rule corresponding to the second encryption identifier;

Decrypting the second encryption target data according to the second decryption rule to obtain the second target data.

The terminal further includes a verification module, where

The verification module is configured to verify the acquisition module, and determine that the acquisition module is legal.

Embodiments of the present invention have the following beneficial effects:

In the embodiment of the present invention, when the acquiring module acquires the first target data to be sent, the acquiring module encrypts the first target data, generates the first encrypted target data, and sends the first encrypted target data to the transceiver module. The transceiver module receives the first encryption target data, and performs transmission processing on the first encryption target data, so that the receiving end connected to the transceiver module obtains the first target data, which enables the terminal to encrypt the internally transmitted data. Thereby avoiding data being intercepted and intercepted, and improving data security.

DRAWINGS

In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the following will be implemented BRIEF DESCRIPTION OF THE DRAWINGS The drawings, which are used in the description or the description of the prior art, are briefly described. It is obvious that the drawings in the following description are only some embodiments of the present invention, and no one skilled in the art Other drawings can also be obtained from these drawings.

1 is a schematic flow chart of a first embodiment of a method for data transmission according to the present invention;

2 is a schematic flow chart of a second embodiment of a method for data transmission according to the present invention;

3 is a first embodiment structural diagram of a terminal of the present invention;

Figure 4 is a block diagram showing a second embodiment of a terminal of the present invention.

detailed description

The technical solutions in the embodiments of the present invention are clearly and completely described in the following with reference to the accompanying drawings in the embodiments of the present invention. It is obvious that the described embodiments are only a part of the embodiments of the present invention, but not all embodiments. All other embodiments obtained by those skilled in the art based on the embodiments of the present invention without creative efforts are within the scope of the present invention.

The acquisition module, the transceiver module and the verification module mentioned in the present invention all belong to modules in the same terminal. The terminal may include: a mobile phone, a tablet computer, a palmtop computer, or a mobile Internet device (MID). The foregoing terminals are merely examples, and are not exhaustive, including but not limited to the above terminals.

FIG. 1 is a schematic flowchart diagram of a first embodiment of a method for data transmission according to the present invention. As shown in FIG. 1, a method for data transmission according to this embodiment includes the following steps:

S100, when the acquiring module acquires the first target data to be sent, the acquiring module encrypts the first target data, generates first encrypted target data, and sends the first encrypted target data to the transceiver module. .

In the embodiment of the present invention, the acquiring module may be a module for acquiring data to be sent by the terminal, where the terminal needs to send the data to be sent to the receiving end that establishes a network communication connection with the terminal. In a specific application, the obtaining module may be an application layer of the terminal, and the application layer may include an application that provides an application service by the terminal, such as a short message application, an internet application, and an email application. Further, the obtaining module may also be a session layer of the terminal, and the session layer may include an application for providing a session by the terminal, such as a call application. Further, the data to be sent needs to be communicated through the baseband processor (Modem) of the terminal, and the acquiring module may be another module that interacts with the modem, and details are not described herein.

In the embodiment of the present invention, the first target data may include data that can be sent to the receiving end, such as a short message, a multimedia message, control information, and data service information (email, Internet browsing record). The obtaining module may obtain the first target data, which may be: when the user inputs the short message to be sent through the short message application, the short message application of the application layer acquires the short message; when the user enters the web address through the browser to browse the webpage, the browser This URL is available.

In the embodiment of the present invention, when the acquiring module acquires the first target data, the acquiring module may read the preset usage mode of the terminal, and determine whether the first target data needs to be encrypted. The terminal can provide a setting page for the user to select and set the usage mode. The usage mode includes a secure transmission mode and a normal transmission mode, and the terminal can provide a corresponding display interface according to the usage mode selected by the user on the setting page, and the obtaining module is also based on The user selects the usage mode of the setting on the setting page, and performs corresponding processing. When the acquiring module reads that the usage mode set by the user is the secure transmission mode, the acquiring module encrypts the first target data; when the acquiring module reads that the usage mode set by the user is the normal transmission mode, the acquiring module is not correct. The target data is processed, and the first target data is directly sent to the transceiver module.

In the embodiment of the present invention, when the acquiring module needs to encrypt the first target data, the acquiring module calls the corresponding first encryption rule to perform encryption processing on the first target data. The terminal may preset a first encryption rule of the acquiring module, where the first encryption rule may include a key, an encryption algorithm, an encryption algorithm type, and the like. When the acquiring module needs to encrypt the first target data, the acquiring module may encrypt the first target data according to the preset first encryption rule to generate the first encrypted target data, and perform encryption by using a preset CP_DECODE_SI encryption algorithm; Alternatively, the acquiring module may acquire an important level of the first target data, obtain a corresponding first encryption rule according to the important level, and then encrypt the first target data according to the first encryption rule to generate the first encrypted target data, where the acquiring module The priority level may be determined according to the second target data, and the terminal may preset the correspondence between the important level and the second encryption rule; or the terminal may provide the setting page by the user to select the first encryption rule, so that the acquiring module selects the first according to the user. The encryption rule encrypts the first target data, generates the first encryption target data, and transmits the first encryption target data to the transceiver module. The transceiver module may be a modem of the terminal, where the Modem is responsible for network communication of the terminal. The terminal calls, accesses the Internet, and sends text messages. The process is sent by the upper system to the Modem for processing. After the Modem completes processing, a network channel is established between the terminal and the receiving end. The obtaining module can send voice, short message or internet data packets to the modem, and the modem can send the data to the receiving end through the network channel. Thus making The third-party application of the terminal monitors the data sent by the acquisition module, and the data monitored by the terminal is encrypted data, thereby improving data security.

Further, in the embodiment of the present invention, after the obtaining module obtains the first encryption rule to encrypt the first target data, the obtaining module may further acquire the first encrypted identifier corresponding to the first encryption rule, and obtain the first encryption. The identifier is added to the first encryption target data, wherein the first encryption identifier is used to identify the first encryption rule.

S101. The transceiver module receives the first encryption target data sent by the acquiring module, and performs transmission processing on the first encryption target data, so that the receiving end connected to the transceiver module obtains the first Target data.

In the embodiment of the present invention, the receiving end may be a receiving end such as a mobile phone, a tablet computer, and a base station, wherein the receiving end may establish a Bluetooth connection, a WIFI (Wireless Fidelity) connection, and a NFC (Near Field Communication). Short-range wireless communication) A communication connection such as a communication connection, wherein the receiving end can establish a communication connection with the transceiver module of the terminal. After the transceiver module receives the first encryption target data, the transceiver module can directly forward the first encryption target data to the receiving end through the communication network, so that the receiving end can decrypt the first encrypted target data to obtain the first target data. Thereby processing is performed according to the first target data.

Further, after the transceiver module receives the first encryption target data, the transceiver module may decrypt the first encryption target data to obtain the first target data, so that the first target data is sent to the receiving end through the communication network, so as to receive The terminal processes according to the first target data.

The transceiver module decrypts the first encryption target data, the transceiver module decrypts the first encryption target data according to the preset first decryption rule, and obtains the first target data, such as using a preset CP_DECODE_SI decryption algorithm for encryption. . Further, the transceiver module parses the first encryption target data to obtain a first encryption identifier, and the transceiver module obtains a corresponding first decryption rule according to the first encryption identifier, such as the first encryption identifier identifier CP_DECODE_SI encryption algorithm. The transceiver module can find the corresponding CP_DECODE_SI decryption algorithm according to the CP_DECODE_SI encryption algorithm. The transceiver module decrypts the first encryption target data according to the obtained first decryption rule to obtain the first target data.

In the embodiment of the present invention, when the acquiring module acquires the first target data to be sent, the acquiring module encrypts the first target data, generates the first encrypted target data, and sends the first encrypted target data to the transceiver module. The transceiver module receives the first encrypted target data and enters the first encrypted target data The line transmission process is such that the receiving end connected to the transceiver module obtains the first target data, which enables the terminal to encrypt the internally transmitted data, thereby preventing the data from being intercepted and intercepted, thereby improving data security.

2 is a schematic flowchart of a second embodiment of a method for data transmission according to the present invention. As shown in FIG. 2, a method for data transmission according to this embodiment includes the following steps:

S200, when the transceiver module receives the second target data sent by the sending end connected to the transceiver module, the transceiver module encrypts the second target data to generate a second encrypted target data, and The second encryption target data is sent to the acquisition module.

In the embodiment of the present invention, the sending end may be a sending end that establishes a communication connection with the terminal, and the sending end may be a transmitting end such as a mobile phone, a tablet computer, and a base station. The sending end can establish a communication connection with the terminal, wherein the communication connection can be a network communication connection such as a Bluetooth communication connection, a WIFI communication connection, and an NFC communication connection. Specifically, the sending end can establish a communication connection with the transceiver module of the terminal. When the sending end sends the second target data to the terminal, the transceiver module of the terminal receives the second target data. For example, when the base station sends a short message to the terminal, the transceiver module of the terminal receives the short message sent by the base station through the air interface. The second target data may include data that the base station can send to the terminal, such as a short message, a multimedia message, control information, and data service information (email) sent by the base station to the terminal.

In the embodiment of the present invention, when the transceiver module acquires the second target data, the transceiver module can read the preset usage mode of the terminal, and determine whether the second target data needs to be encrypted. The terminal can provide a setting page for the user to select and set the usage mode. The usage mode includes a secure transmission mode and a normal transmission mode, and the terminal can provide a corresponding display interface according to the usage mode selected by the user on the setting page, and the transceiver module is also based on The user selects the usage mode of the setting on the setting page, and performs corresponding processing. When the transceiver module reads that the usage mode set by the user is the secure transmission mode, the transceiver module encrypts the second target data; when the transceiver module reads that the usage mode set by the user is the normal transmission mode, the transceiver module will not be the second. The target data is processed, and the second target data is directly sent to the acquisition module.

In the embodiment of the present invention, when the transceiver module needs to encrypt the second target data, the transceiver module invokes the corresponding second encryption rule to perform encryption processing on the second target data. The terminal may preset a second encryption rule of the transceiver module, where the second encryption rule may include a key, an encryption algorithm, an encryption algorithm type, and the like. The transceiver module may encrypt the second target data according to the preset second encryption rule to generate the second encrypted target data, for example, the transceiver module adopts a preset CP_DECODE_SI encryption calculation. The method performs encryption; or the transceiver module can acquire an important level of the second target data, obtain a corresponding second encryption rule according to the important level, and then encrypt the second target data according to the second encryption rule to generate the second encrypted target data. The second target data may carry an important level, and the terminal may preset a correspondence between the important level and the second encryption rule; or the terminal may set the page to be selected by the user to select an encryption rule, so that the transceiver module selects the second encryption rule according to the user selection. The second target data is encrypted, the second encrypted target data is generated, and the second encrypted target data is sent to the acquisition module.

Further, in the embodiment of the present invention, after the transceiver module obtains the second encryption rule to encrypt the second target data, the obtaining module may further acquire the second encryption identifier corresponding to the second encryption rule, and encrypt the second encryption The identifier is added to the second encryption target data, wherein the second encryption identifier is used to identify the second encryption rule.

S201. The acquiring module receives the second encryption target data sent by the transceiver module, and decrypts the second encryption target data to obtain the second target data.

In the embodiment of the present invention, before the obtaining module receives the second encrypted target data sent by the transceiver module, the terminal may also check whether the acquiring module is legal. Wherein, the verification module of the terminal may check whether the acquisition module is legal. Specifically, when the acquiring module that receives the second encrypted target data is an application, the verification module determines whether the application includes security information trusted by the verification module, such as an authentication certificate. When the application contains security information that the verification module trusts, the verification module can confirm that the application is legitimate. When the verification module determines that the acquisition module is legal, the verification module may allow the acquisition module to call the second encryption rule to decrypt the second encryption target data, such as providing an API (Application Programming Interface) to decrypt the authorized application. When the verification module determines that the acquisition module is illegal, the verification module will not allow the acquisition module to decrypt the second encryption target data, thereby effectively improving data security.

In the embodiment of the present invention, when the verification module allows the acquisition module to call the second encryption rule to decrypt the second encryption target data, the obtaining module may decrypt the second encryption target data according to the preset second decryption rule, and obtain the first The second target data is encrypted by using a preset CP_DECODE_SI decryption algorithm. Further, the acquiring module parses the second encrypted target data to obtain a second encrypted identifier, and the obtaining module obtains a corresponding second decrypting rule according to the second encrypted identifier, such as the second encrypted identifier identifying the CP_DECODE_SI encryption algorithm. The obtaining module can find the corresponding CP_DECODE_SI decryption algorithm according to the CP_DECODE_SI encryption algorithm. Thereby, the acquiring module calls the second decryption rule to decrypt the second encrypted target data to obtain the second target data.

S202. The acquiring module processes the second target data.

After the acquiring module obtains the second target data, the acquiring module may perform corresponding processing according to the function of the second component and the attribute of the second target data. For example, when the acquisition module is a short message application and the second target data is a short message, the short message application displays the short message on the user interface to enable the user to read the short message; when the acquisition module is setting the application, the second target data is setting parameters. The setup application will modify its own parameters based on the setup parameters.

In the embodiment of the present invention, when the transceiver module receives the second target data sent by the sending end connected to the transceiver module, the transceiver module encrypts the second target data to generate a second encrypted target. Data, and the second encryption target data is sent to the acquisition module, the acquisition module receives the second encryption target data, decrypts the second encryption target data, and obtains the second target data. The acquiring module processes the second target data, which enables the terminal to encrypt the internally transmitted data, thereby preventing the data from being intercepted and intercepted, and improving the security of the data.

FIG. 3 is a schematic structural diagram of a first embodiment of a terminal according to an embodiment of the present invention. The terminal described in this embodiment includes:

The obtaining module 100 is configured to: when acquiring the first target data to be sent, encrypt the first target data, generate first encrypted target data, and send the first encrypted target data to the transceiver module.

The transceiver module 200 is configured to receive the first encryption target data sent by the acquiring module, and perform transmission processing on the first encryption target data, so that the receiving end connected to the transceiver module obtains the first Target data.

In the embodiment of the present invention, the acquiring module 100 may be a module for acquiring data to be sent by the terminal, where the terminal needs to send the data to be sent to the receiving end that establishes a network communication connection with the terminal. In a specific application, the obtaining module 100 may be an application layer of the terminal, and the application layer may include an application that provides an application service by the terminal, such as a short message application, an internet application, and an email application. Further, the obtaining module 100 may also be a session layer of the terminal, and the session layer may include an application for providing a session by the terminal, such as a call application. Further, the data to be sent needs to be communicated through the baseband processor (Modem) of the terminal, and the acquiring module 100 may be another module that interacts with the modem, and details are not described herein.

In the embodiment of the present invention, the first target data may include data that can be sent to the receiving end, such as a short message, a multimedia message, control information, and data service information (email, Internet browsing record). Acquisition module The obtaining the first target data may be: when the user inputs the short message to be sent through the short message application, the short message application of the application layer acquires the short message; when the user enters the web address through the browser to browse the webpage, the browser may Get the URL.

In the embodiment of the present invention, when the acquiring module 100 acquires the first target data, the obtaining module 100 may read the usage mode preset by the terminal, and determine whether the first target data needs to be encrypted. The terminal can provide a setting page for the user to select and use the usage mode. The usage mode includes a secure transmission mode and a normal transmission mode, and the terminal can provide a corresponding display interface according to the usage mode selected by the user on the setting page, and the obtaining module 100 also The corresponding processing is performed according to the usage mode in which the user selects the setting on the setting page. When the acquisition module 100 reads that the usage mode set by the user is the secure transmission mode, the acquisition module 100 encrypts the first target data; when the acquisition module 100 reads that the usage mode set by the user is the normal transmission mode, the acquisition module 100 The first target data will not be processed, and the first target data is directly sent to the transceiver module.

In the embodiment of the present invention, when the acquiring module 100 needs to encrypt the first target data, the obtaining module 100 invokes the corresponding first encryption rule to perform encryption processing on the first target data. The terminal may preset the first encryption rule of the obtaining module 100, where the first encryption rule may include a key, an encryption algorithm, an encryption algorithm type, and the like. When the acquiring module 100 needs to encrypt the first target data, the obtaining module 100 may encrypt the first target data according to the preset first encryption rule to generate the first encrypted target data, such as using a preset CP_DECODE_SI encryption algorithm. Encryption; or, the obtaining module 100 may acquire an important level of the first target data, obtain a corresponding first encryption rule according to the important level, and then encrypt the first target data according to the first encryption rule to generate the first encrypted target data, where The obtaining module 100 may determine the importance level according to the second target data, and the terminal may preset the correspondence between the important level and the second encryption rule; or the terminal may provide the setting page by the user to select the first encryption rule, so that the obtaining module 100 is configured according to The first encryption rule selected by the user encrypts the first target data, generates the first encryption target data, and sends the first encryption target data to the transceiver module. The transceiver module may be a modem of the terminal, where the Modem is responsible for network communication of the terminal. The terminal calls, accesses the Internet, and sends text messages. The process is sent by the upper system to the Modem for processing. After the Modem completes processing, a network channel is established between the terminal and the receiving end. The obtaining module 100 can send the voice, short message or Internet data packet to the Modem, and the Modem can send the data to the receiving end through the network channel. Therefore, even if the third-party application monitors the data sent by the obtaining module 100, the data monitored by the terminal is the encrypted data, thereby improving the data. Security.

Further, in the embodiment of the present invention, after the obtaining module 100 obtains the first encryption rule to encrypt the first target data, the obtaining module 100 may further acquire the first encrypted identifier corresponding to the first encryption rule, and An encryption identifier is added to the first encryption target data, wherein the first encryption identifier is used to identify the first encryption rule.

In the embodiment of the present invention, the receiving end may be a receiving end such as a mobile phone, a tablet computer, and a base station, wherein the receiving end may establish a Bluetooth connection, a WIFI (Wireless Fidelity) connection, and the like with the terminal, where The terminal can establish a communication connection with the transceiver module 200 of the terminal. After receiving the first encryption target data, the transceiver module 200 can directly forward the first encryption target data to the receiving end through the communication network, so that the receiving end can decrypt the first encrypted target data to obtain the first target. The data is processed according to the first target data.

Further, after the transceiver module 200 receives the first encryption target data, the transceiver module 200 may decrypt the first encryption target data to obtain the first target data, thereby transmitting the first target data to the receiving end through the communication network, to The receiving end is processed according to the first target data.

The transceiver module 200 decrypts the first encryption target data, the transceiver module 200 decrypts the first encryption target data according to the preset first decryption rule, and obtains the first target data, such as adopting a preset CP_DECODE_SI decryption algorithm. Encrypt. Further, the transceiver module 200 parses the first encryption target data to obtain a first encryption identifier, and the transceiver module 200 obtains a corresponding first decryption rule according to the first encryption identifier, such as the first encryption identifier identifier CP_DECODE_SI. The encryption algorithm, the transceiver module 200 can find the corresponding CP_DECODE_SI decryption algorithm according to the CP_DECODE_SI encryption algorithm. The transceiver module 200 decrypts the first encryption target data according to the obtained first decryption rule to obtain the first target data.

In the embodiment of the present invention, when the acquiring module 100 acquires the first target data to be sent, the acquiring module 100 encrypts the first target data, generates the first encrypted target data, and sends the first encrypted target data to the transceiver. The module 200, the transceiver module 200 receives the first encryption target data, and performs transmission processing on the first encryption target data, so that the receiving end connected to the transceiver module 200 obtains the first target data, which enables the terminal to transmit internally The data is encrypted to prevent data from being intercepted and intercepted, improving data security.

FIG. 4 is a schematic structural diagram of a first embodiment of a terminal according to an embodiment of the present invention. The terminal described in this embodiment includes an obtaining module 100 and a transceiver module 200, where

The transceiver module 200 is specifically configured to:

The obtaining module 100 is specifically configured to:

Processing the second target data.

The terminal further includes:

Verification module 300, wherein

The verification module 300 is configured to verify the acquisition module, and determine that the acquisition module is legal.

In the embodiment of the present invention, the sending end may be a sending end that establishes a communication connection with the terminal, and the sending end may be a transmitting end such as a mobile phone, a tablet computer, and a base station. The transmitting end can establish a communication connection with the terminal, wherein the communication connection can be a network communication connection such as a Bluetooth communication connection, a WIFI communication connection, and an NFC communication connection. Specifically, the sending end can establish a communication connection with the transceiver module 200 of the terminal. When the sending end sends the second target data to the terminal, the transceiver module 200 of the terminal receives the second target data. For example, when the base station sends a short message to the terminal, the transceiver module 200 of the terminal receives the short message sent by the base station through the air interface. The second target data may include data that the base station can send to the terminal, such as a short message, a multimedia message, control information, and data service information (email) sent by the base station to the terminal.

In the embodiment of the present invention, when the transceiver module 200 acquires the second target data, the transceiver module 200 can read the preset usage mode of the terminal, and determine whether the second target data needs to be encrypted. The terminal can provide a setting page for the user to select and set the usage mode. The usage mode includes a secure transmission mode and a normal transmission mode, and the terminal can provide a corresponding display interface according to the usage mode selected by the user on the setting page, and the transceiver module 200 also The corresponding processing is performed according to the usage mode in which the user selects the setting on the setting page. When the transceiver module 200 reads that the usage mode set by the user is the secure transmission mode, the transceiver module 200 encrypts the second target data; when the transceiver module 200 reads that the usage mode set by the user is the normal transmission mode, the transceiver module 200 The second target data will not be processed, and the second target data is directly sent to the acquisition module.

In the embodiment of the present invention, when the transceiver module 200 needs to encrypt the second target data, the transceiver module 200 The module 200 invokes the corresponding second encryption rule to perform encryption processing on the second target data. The terminal may preset the second encryption rule of the transceiver module 200, where the second encryption rule may include a key, an encryption algorithm, an encryption algorithm type, and the like. The transceiver module 200 can encrypt the second target data according to the preset second encryption rule to generate the second encryption target data, for example, the transceiver module 200 encrypts by using a preset CP_DECODE_SI encryption algorithm; or the transceiver module 200 can obtain the second The important level of the target data is obtained according to the important level, and the second target data is encrypted according to the second encryption rule to generate the second encrypted target data, wherein the second target data can carry the important level, the terminal The correspondence between the importance level and the second encryption rule may be preset; or the terminal may set the page to be selected by the user to select an encryption rule, so that the transceiver module 200 encrypts the second target data according to the second encryption rule selected by the user to generate a second The target data is encrypted, and the second encrypted target data is sent to the acquisition module.

Further, in the embodiment of the present invention, after the transceiver module 200 obtains the second encryption rule to encrypt the second target data, the acquiring module may further acquire the second encryption identifier corresponding to the second encryption rule, and The encryption identifier is added to the second encryption target data, wherein the second encryption identifier is used to identify the second encryption rule.

In the embodiment of the present invention, before the obtaining module 200 receives the second encrypted target data sent by the transceiver module 100, the terminal may also check whether the acquiring module 100 is legal. The verification module 300 of the terminal may check whether the acquisition module 100 is legal. Specifically, when the obtaining module 100 that receives the second encrypted target data is an application, the verification module 300 determines whether the application includes security information trusted by the verification module, such as an authentication certificate. When the application contains security information that the verification module trusts, the verification module 300 can confirm that the application is legitimate. When the verification module 300 determines that the acquisition module 100 is legal, the verification module 300 may allow the acquisition module 100 to call the second encryption rule to decrypt the second encryption target data, such as providing an API (Application Programming Interface) to the authorized one. The application performs decryption; when the verification module 300 determines that the acquisition module 100 is illegal, the verification module 300 will not allow the acquisition module 100 to decrypt the second encryption target data, thereby effectively improving data security.

In the embodiment of the present invention, when the verification module 300 allows the acquisition module 100 to invoke the second encryption rule to decrypt the second encryption target data, the obtaining module 100 may decrypt the second encryption target data according to the preset second decryption rule. Obtaining the second target data, such as using a preset CP_DECODE_SI decryption algorithm for encryption. Further, the acquisition module 100 may also be The second encryption target data is obtained, and the second encryption identifier is obtained. The obtaining module 100 obtains a corresponding second decryption rule according to the second encryption identifier. For example, the second encryption identifier identifies the CP_DECODE_SI encryption algorithm, and the obtaining module 100 can perform the encryption algorithm according to the CP_DECODE_SI. Find the corresponding CP_DECODE_SI decryption algorithm. Thereby, the obtaining module 100 calls the second decryption rule to decrypt the second encrypted target data to obtain the second target data.

After the obtaining module 100 acquires the second target data, the obtaining module 100 may perform corresponding processing according to the function of the second component and the attribute of the second target data. For example, when the obtaining module 100 is a short message application and the second target data is a short message, the short message application displays the short message on the user interface to enable the user to read the short message; when the obtaining module 100 is the setting application, the second target data is When setting parameters, the setup application will modify its own parameters based on the setup parameters.

In the embodiment of the present invention, when the transceiver module 200 receives the second target data sent by the sending end connected to the transceiver module 200, the transceiver module 200 encrypts the second target data to generate a second And encrypting the target data, and sending the second encrypted target data to the acquiring module 100, the acquiring module 100 receiving the second encrypted target data, and decrypting the second encrypted target data to obtain the The second target data, the obtaining module 100 processes the second target data, which enables the terminal to encrypt the internally transmitted data, thereby preventing the data from being intercepted and intercepted, and improving the security of the data.

One of ordinary skill in the art can understand that all or part of the process of implementing the foregoing embodiments can be completed by a computer program to instruct related hardware, and the program can be stored in a computer readable storage medium. When executed, the flow of an embodiment of the methods as described above may be included. The storage medium may be a magnetic disk, an optical disk, a read-only memory (ROM), or a random access memory (RAM).

The above is only the preferred embodiment of the present invention, and the scope of the present invention is not limited thereto, and thus equivalent changes made in the claims of the present invention are still within the scope of the present invention.

Claims

A method of data transmission, characterized in that the method comprises:

When the acquiring module acquires the first target data to be sent, the acquiring module encrypts the first target data, generates first encrypted target data, and sends the first encrypted target data to the transceiver module;

The transceiver module receives the first encryption target data sent by the acquiring module, and performs transmission processing on the first encryption target data, so that the receiving end connected to the transceiver module obtains the first target data. .
The method of claim 1, wherein the first encrypted target data carries a first encrypted identifier;

Receiving, by the transceiver module, the first encryption target data sent by the acquiring module, and performing transmission processing on the first encryption target data includes:

The transceiver module sends the first encryption target data to the receiving end, or

The transceiver module parses the first encryption target data to obtain the first encryption identifier;

The transceiver module acquires a first decryption rule corresponding to the first encryption identifier according to the first encryption identifier;

The transceiver module decrypts the first encryption target data according to the first decryption rule to obtain the first target data.
The method of claim 1 wherein the method further comprises:

When the transceiver module receives the second target data sent by the sending end connected to the transceiver module, the transceiver module encrypts the second target data to generate second encrypted target data, and the Sending the encrypted target data to the acquiring module;

The acquiring module receives the second encryption target data sent by the transceiver module, and decrypts the second encryption target data to obtain the second target data;

The acquisition module processes the second target data.
The method of claim 3 wherein said second encrypted target data is carried Second encrypted identifier;

The acquiring module receives the second encryption target data sent by the transceiver module, and decrypts the second encryption target data, and obtaining the second target data includes:

Obtaining, by the acquiring module, the second decryption rule corresponding to the second encrypted identifier according to the second encrypted identifier;

The obtaining module decrypts the second encryption target data according to the second decryption rule to obtain the second target data.
The method of claim 4, wherein the obtaining module receives the second encrypted target data sent by the transceiver module, decrypts the second encrypted target data, and obtains the second target data. Previously included:

The verification module verifies the acquisition module, and determines that the acquisition module is legal.
A terminal, comprising: an obtaining module and a transceiver module connected to the acquiring module, wherein

The acquiring module is configured to: when the first target data to be sent is acquired, encrypt the first target data, generate first encrypted target data, and send the first encrypted target data to the transceiver module;

The transceiver module is configured to receive the first encryption target data sent by the acquiring module, and perform transmission processing on the first encryption target data, so that the receiving end connected to the transceiver module obtains the first A target data.
The terminal according to claim 6, wherein the first encryption target data carries a first encryption identifier;

The transceiver module is specifically configured to:

Transmitting the first encryption target data to the receiving end, or

Parsing the first encryption target data to obtain the first encryption identifier;

Obtaining, according to the first encryption identifier, a first decryption rule corresponding to the first encryption identifier;

Decrypting the first encryption target data according to the first decryption rule to obtain the first Target data.
The terminal of claim 6 wherein:

The transceiver module is specifically configured to:

When receiving the second target data sent by the transmitting end connected to the transceiver module, encrypting the second target data, generating second encrypted target data, and transmitting the second encrypted target data to the Acquisition module

The obtaining module is specifically configured to:

Receiving the second encryption target data sent by the transceiver module, and decrypting the second encryption target data to obtain the second target data;

Processing the second target data.
The terminal according to claim 8, wherein the second encrypted target data carries a second encrypted identifier;

The obtaining module is specifically configured to:

Obtaining, according to the second encryption identifier, a second decryption rule corresponding to the second encryption identifier;

Decrypting the second encryption target data according to the second decryption rule to obtain the second target data.
The terminal according to claim 9, wherein the terminal further comprises a verification module, wherein

The verification module is configured to verify the acquisition module, and determine that the acquisition module is legal.