WO2017028553A1

WO2017028553A1 - Message security control method, device and system

Info

Publication number: WO2017028553A1
Application number: PCT/CN2016/080545
Authority: WO
Inventors: 曹俊勇
Original assignee: 中兴通讯股份有限公司
Priority date: 2015-08-19
Filing date: 2016-04-28
Publication date: 2017-02-23
Also published as: CN106470107A

Abstract

A message security control method, device and system, wherein the message security control method includes: receiving a unique feature code generated according to the content of the message; based on the unique feature code, querying a feature code database; returning a validity verification result of the message corresponding to the unique feature code.

Description

Message security management method, device and system

Technical field

This paper relates to the field of security verification and management of messages, and more particularly to a method, device and system for verifying and controlling the security of message content.

Background technique

With the development of technology, more and more news services, from traditional business SMS and MMS, to new business WeChat and Rich Communication Suite (RCS, Rich Communication Suite), etc., the increase of message products, security control of message content The necessity is increasing, ensuring the stability and harmony of the network environment, and prohibiting the unintentional dissemination of reactionary information, which is the top priority of the business product operation department.

A typical message security control process is that the service system receives the message, forwards the original message to the management and control platform, and the management platform analyzes the data in real time, and feeds the result back to the service system. The service system continues to deliver or terminate the process according to the result.

The size of traditional business messages is limited, such as 140 bytes of text messages, 300K bytes of MMS, etc., and there is no problem with the typical security management process. With the popularity of new services, such as WeChat and RCS, there are more and more scenes for sending pictures, audio, video and files between users. There are two characteristics of such messages. One is that the message is large, from several megabytes. Up to several hundred megabytes; second, the message body data content is the same, such as pictures, audio, video, movies, etc., the message content is the same. In this case, sending the original message to the security management platform, waiting for the real-time processing mode of the management platform has many drawbacks. The transmission of large messages requires very high network transmission speed, and the transmission of repeated messages is extremely great for network bandwidth resources. Waste and duplication, the security check of the message is also a great waste of the processing power of the management platform.

Summary of the invention

The present invention will provide a message security management method, apparatus and system to alleviate the burden placed on a management platform by repeatedly initiating a full content verification request for the same message content.

In order to solve the above technical problems, the following technical solutions are adopted:

A method for security management of messages, comprising:

Generating a unique signature based on the message content;

Sending the unique feature code to the message legality verification function, and obtaining the query result returned by the message legality verification function.

Optionally, the query result includes: a message content validity or a sending identifier of the complete content of the message corresponding to the unique feature code, where the identifier is used to indicate that the complete content of the message corresponding to the unique feature code is sent to the Legality verification function.

Optionally, the method further includes:

And when the obtained query result includes the sending identifier of the complete content of the message corresponding to the unique feature code, sending the complete content of the message corresponding to the unique feature code to the message legality verification function; receiving the message The legality of the complete content of the message returned by the legality verification function.

A security management device for a message, comprising: a signature generation module and a data transceiver module, wherein

The feature code generating module is configured to: generate a unique feature code according to the message content;

The data transceiver module is configured to: send the unique feature code to a message legality verification function; and receive a query result returned by the message legality verification function.

Optionally, the data transceiving module is further configured to: when the query result includes a sending identifier of the complete content of the message corresponding to the unique feature code, refer to sending the complete content of the message corresponding to the unique feature code to the The message legality verification function; receiving the legality of the complete content of the message returned by the message legality verification function.

A method for security management of messages, comprising:

Receiving a unique signature generated based on the content of the message;

Querying a signature database according to the unique feature code;

Returning the query result of the message corresponding to the unique feature code.

Optionally, the step of returning the query result of the message corresponding to the unique signature includes:

Returning the legality of the message corresponding to the unique feature code when the legality record of the message corresponding to the unique feature code is found in the signature database;

Returning the complete content transmission identifier of the message corresponding to the unique signature, the identifier is used to indicate that the unique signature sender sends the unique signature when the unique legality record corresponding to the unique signature is not found. The complete content of the corresponding message.

Optionally, the method further includes:

Receiving the complete content of the message corresponding to the unique feature code sent by the sender of the unique signature, analyzing and determining the legitimacy of the complete content of the message, and returning the legitimacy of the complete content of the message.

Optionally, after analyzing and determining the legitimacy of the complete content of the message, generating a unique feature code according to the complete content of the message; generating a unique feature code according to the complete content of the message and the determined message The legality of the complete content is saved in the signature database;

The step of generating a unique feature code according to the complete content of the message includes generating a unique feature code by using the same algorithm as the unique feature code sender.

A message security management device includes: a communication module, a signature database, and a signature query module, wherein

The communication module is configured to: receive a unique feature code generated according to the message content;

The signature database is configured to: store a correspondence between a unique signature of the message and the legitimacy of the message;

The feature code querying module is configured to: query, according to the received unique feature code, whether the message corresponding to the unique feature code is legal from the feature code database, and return a query result.

Optionally, the signature query module is configured to return the query result as follows:

When the unique feature code is found, the unique feature code pair is found from the signature database When the validity of the message is returned, the legality of the message is returned to the sender of the unique signature;

When the validity of the message corresponding to the unique signature is not found, the complete content transmission identifier of the message corresponding to the unique signature is returned to the unique signature sender, and the unique signature sender is sent to send the The complete content of the message corresponding to the unique signature.

Optionally, the communication module is further configured to: receive the complete content of the message corresponding to the unique signature sent by the sender of the unique signature;

The device further includes: a legality verification module, the legality verification module is configured to: analyze and determine the legality of the complete content of the message corresponding to the unique feature code; and return the legality of the complete content of the message to The unique signature sender.

Optionally, the device further includes:

The feature code generating module is configured to: generate a unique feature code according to the complete content of the message corresponding to the unique feature code; generate a unique feature code and the legality check module according to the complete content of the message corresponding to the unique feature code Determining the legitimacy of the complete content of the message corresponding to the unique feature code in the signature database;

The method for generating the unique feature code by the feature code generating module is consistent with the method for generating the unique feature code received by the communication module.

A message security management system includes: any of the above-mentioned security management devices that can be executed on the service system side and any of the above-mentioned security management devices that can execute messages on the side of the message legality verification function.

A computer program comprising program instructions that, when executed by a business system, cause the business system to perform any of the above-described corresponding security management methods of messages.

A carrier carrying the computer program as described.

A computer program comprising program instructions that, when executed by a message validity verification function, cause the message validity verification function to perform a security tube of any of the corresponding messages described above Control method.

A carrier carrying the computer program as described.

A message security management system includes: a service module and a security management module, wherein

The service module is configured to: generate a unique feature code according to the message content, and send the unique feature code to the security management module;

The security management module is configured to: determine validity of the message according to the unique feature code, and return a result.

Optionally, the security management module includes: a feature code storage submodule and a feature code query submodule;

The feature code storage sub-module is configured to: store the validity of the unique feature code and the message corresponding to the unique feature code;

The feature code query sub-module is configured to: according to the unique feature code, query whether the message corresponding to the unique feature code is legal from the feature code storage sub-module, and return a query result.

The query result returned by the signature query sub-module includes:

When the legality record of the message corresponding to the unique feature code is found from the feature code storage sub-module according to the unique feature code, the corresponding legality is returned;

When the legality record of the message corresponding to the unique feature code is not found from the feature code storage submodule according to the unique feature code, returning a message complete content sending identifier, and notifying the service module to send the The complete content of the message corresponding to the unique signature.

Optionally, the service module is further configured to send the complete content of the message corresponding to the unique feature code to the security management module;

The security management module further includes: a legality verification submodule;

The validity check sub-module is configured to: receive the complete content of the message corresponding to the unique feature code; analyze and determine the legality of the complete content of the message corresponding to the unique feature code; and return the complete content of the message legality.

Optionally, the security management module further includes a feature code generation submodule configured to: according to Generating a unique feature code for the complete content of the message corresponding to the unique feature code; storing the generated unique feature code and the legality result of the complete content of the message corresponding to the unique feature code determined by the legality verification sub-module in the The feature code storage sub-module;

The method for generating the unique feature code by the feature code generation sub-module is consistent with the method for generating the unique feature code sent by the service module.

The invention provides a message security management and control method, device and system, which change the manner in which the complete message content is sent to the security management platform for message security verification in the related technical solution, and the existing message content is unchanged, and the message body The new feature of the message type service is that the unique feature code of the message is extracted from the message to be verified, and the unique feature code is sent to the security management platform for verification; the unique feature is not saved only on the security management platform. The complete message is sent to the security management platform when the code and the security verification result of the corresponding message are obtained. The invention provides a message security management and control method, device and system, which avoids the network bandwidth pressure caused by repeatedly initiating a complete content verification request for the same message content, and at the same time, after verifying the validity of the complete message content once, The unique signature and legality verification result corresponding to the message are saved, and the subsequent verification results only perform the query verification result according to the unique signature, which greatly improves the security verification efficiency.

BRIEF abstract

FIG. 1 is a flowchart of a method for security management and control of a message according to Embodiment 1 of the present invention;

2 is a structural diagram of a message security management device according to Embodiment 2 of the present invention;

3 is a flowchart of a method for security management and control of a message according to Embodiment 3 of the present invention;

4 is a structural diagram of a message security management device according to Embodiment 4 of the present invention;

FIG. 5 is a structural diagram of a message security management system according to Embodiment 5 of the present invention.

Preferred embodiment of the invention

The following is an overview of the topics detailed in this document. This Summary is not intended to limit the scope of the claims.

The invention will be further described in detail below with reference to the drawings and specific embodiments. Need to say It is to be understood that the embodiments of the present application and the features of the embodiments can be arbitrarily combined with each other without conflict.

Embodiment 1

The embodiment provides a security management and control method for a message, which can be executed on the service system side, as shown in FIG. 1 , and includes:

Step 101: Generate a unique feature code according to the content of the message;

Step 102: Send the unique feature code to the message legality verification function, and obtain a query result returned by the message legality verification function.

In the step 101, the unique feature code is generated according to the content of the message, and the content of the message may be processed by using the message digest MD5 algorithm; or the content of the message may be processed by using the secure hash SHA1 algorithm; or It can also be generated by using other unique feature code generation algorithms, and the generated unique feature code can uniquely represent the content of the message. When the message content is different, the unique feature code generated by the corresponding feature code is also different; those skilled in the art according to the embodiment The specific generation algorithm described above can be modified or replaced reasonably to implement the technical solution of the present invention.

In step 102, the message legality verification function queries the signature database according to the unique signature, and when the validity verification result of the message corresponding to the unique signature can be found from the signature database, the verification result is returned to the unique feature. The sender of the code includes the legality of the content of the message, indicating the legality of the message corresponding to the unique feature code; when the validity of the message legality corresponding to the unique feature code cannot be found from the signature database, the result is returned. The query result includes a sending identifier of the complete content of the unique signature corresponding to the message, and indicates that the unique signature sender sends the complete content of the message corresponding to the unique feature to the message legality verification function.

Optionally, when the message security query result obtained in step 102 indicates that the complete content of the message corresponding to the unique feature code is sent, the complete content of the message corresponding to the unique feature code is sent to the message legality verification function; The verification result returned by the legality verification function according to the complete content of the message; at this time, the verification result includes the legality of the message content, indicating the legitimacy of the complete message.

According to the content of the message, the legality verification function performs legality verification on the complete content of the message, and the legality of the message content can be verified by using the solution in the related technology; at the same time, different service platforms define the legitimacy of the message content. Different standards are different, and the corresponding legality verification methods are also different; the specific implementation of the solution of the present invention is not limited to the specific verification scheme of the message content legality;

The function of the legality verification function in this embodiment is a software module that has the capability of verifying the validity of the message, and may be a software module that implements the security management method described in the third embodiment; or it may be implemented in the third embodiment. The hardware management module of the security management system of the fourth embodiment of the present invention; or the security management and control module of the security management system of the fifth embodiment.

Embodiment 2

The embodiment provides a message security management device, as shown in FIG. 2, including: a first feature code generating module 201 and a data transceiver module 202, wherein

The first feature code generating module 201 is configured to: generate a unique feature code according to the message content;

The data transceiver module 202 is configured to: send the unique feature code to the message legality verification function; and receive the query result returned by the message legality verification function.

The query result includes: a message content validity or a sending identifier of a complete content of the message corresponding to the unique feature code.

Optionally, the data transceiver module 202 is further configured to: when the query result includes a sending identifier of the complete content of the message corresponding to the unique feature code, indicating that the complete content of the message corresponding to the unique feature code is sent And transmitting the complete content of the message corresponding to the unique feature code to the message legality verification function; and receiving the verification result of the message legality verification function.

Embodiment 3

The embodiment further provides a message security control method, which can be executed on the message legality verification function side, as shown in FIG. 3, including:

Step 301: Receive a unique feature code generated according to the content of the message;

Step 302: Query a feature code database according to the unique feature code; return the unique feature The validity of the message corresponding to the message.

Optionally, in step 302, the validity verification result of the message corresponding to the unique feature code is returned, including: when the legality record of the message corresponding to the unique feature code is found in the feature code database, returning The legality of the message corresponding to the unique feature code;

When the message validity record corresponding to the unique feature code is not found, returning a complete content transmission identifier of the unique signature corresponding message, indicating that the unique signature sender sends the complete message corresponding to the unique signature content.

After receiving the complete content of the message corresponding to the unique signature, analyzing and determining the legitimacy of the complete content of the message, and returning the legitimacy of the complete content of the message.

Optionally, after determining the legitimacy of the complete content of the message, generating a unique feature code according to the complete content of the message; generating a unique feature code according to the complete content of the message and determining the complete content of the message The legality result is saved in the signature database;

The step of generating a unique feature code according to the complete content of the message includes: generating a unique feature code by using the same algorithm as the unique feature code sender; that is, for the same message, the unique feature code sent by the sender The unique signature generated based on the full content of the message is the same.

The unique feature code is generated by using the message digest MD5 algorithm to process the content of the message; or the content of the message may be processed by using the secure hash SHA1 algorithm; or other unique feature codes may be generated. The algorithm generates, and the generated unique feature code can uniquely represent the content of the message. When the message content is different, the corresponding unique feature code generated is also different.

An algorithm for generating a unique feature code, including but not limited to the above algorithm, may be made by a person skilled in the art without any departure from the concept of the present invention. It is considered to be within the scope of protection of the present invention.

The signature database is configured to: save a correspondence between the unique signature of the message and the legality of the content of the message, for example:

唯一特征码Unique signature	合法性legality
35b8569127e3c91a87aa52dc494ee4d635b8569127e3c91a87aa52dc494ee4d6	合法legitimate
271b551d60307f4233a8509aff67a2d6271b551d60307f4233a8509aff67a2d6	合法legitimate
d5edec82547a3b7b0628472927936d78D5edec82547a3b7b0628472927936d78	不合法illegal
a85120db0def4e0c930194ea09210475A85120db0def4e0c930194ea09210475	合法legitimate

The legality of the content of the message may be verified according to the complete content of the message, and the legality of the message content may be verified by using a solution in the related technology. Meanwhile, different service platforms define different standards for the legality of the message content, and corresponding The legality verification method is also different; the specific implementation of the solution of the present invention is not limited to the specific message content legality verification scheme.

Embodiment 4

The embodiment further provides a message security management device, which can be located on the message legality verification function side, as shown in FIG. 4, including: a communication module 401, a signature database 402, and a signature query module 403.

The communication module 401 is configured to: receive a unique feature code generated according to the content of the message;

The signature database 402 is configured to: store a correspondence between a unique signature of the message and the legitimacy of the message;

The signature query module 403 is configured to query, from the signature database 402, whether the message corresponding to the unique signature is legal according to the received unique signature, and return a query result.

The feature code query module 403 returns the query result, including: when the validity of the corresponding message is found from the feature code database according to the unique feature code, the corresponding legality is returned; Corresponding to the validity of the message, the complete content sending identifier of the unique signature corresponding message is returned, and the sender of the unique signature is sent to send the complete content of the message corresponding to the unique signature.

Optionally, the communication module 401 is further configured to: receive the complete content of the message corresponding to the unique feature code;

The device further includes: a validity check module 404, configured to: analyze and determine the validity of the complete content of the message corresponding to the unique feature code; and return the legitimacy of the complete content of the message.

Optionally, the device further includes:

The second feature code generating module 405 is configured to: generate a unique feature code according to the complete content of the message corresponding to the unique feature code; generate a unique feature code and the legality according to the complete content of the message corresponding to the unique feature code The validity result of the complete content of the message corresponding to the unique feature code determined by the verification module is saved in the signature database;

The method for generating the unique feature code by the second feature code generating module 405 is consistent with the method for generating the unique feature code received by the communication module.

Embodiment 5

The embodiment further provides a message security management and control system, as shown in FIG. 5, comprising: a service module and a security management module, wherein

a service module, configured to: generate a unique feature code according to the message content, and send the unique feature code to the security management module;

The security management module is configured to: determine the validity of the message according to the unique feature code, and return a result.

The feature code storage submodule is configured to: store the unique feature code and the only The legitimacy of a message corresponding to a signature;

Specifically, the query result returned by the signature query sub-module includes:

Optionally, the service module is further configured to: send the complete content of the message corresponding to the unique feature code to the security management module;

The security management module further includes: a legality verification submodule, configured to: receive the complete content of the message corresponding to the unique signature; analyze and determine the legality of the complete content of the message corresponding to the unique signature; The legitimacy of the complete content of the message.

Optionally, the security management module further includes: a feature code generation sub-module, configured to: generate a unique feature code according to the complete content of the message corresponding to the unique feature code; and generate the unique feature code and the legality The validity result of the complete content of the message corresponding to the unique feature code determined by the test module is saved in the feature code storage submodule;

The method for generating the unique feature code by the feature code generation sub-module is consistent with the method for generating the unique feature code sent by the service module, that is, for the same message, the unique feature code sent by the sender is generated according to the complete content of the message. The unique signature is the same.

The unique feature code is generated by using the message digest MD5 algorithm to process the content of the message; or the content of the message may be processed by using the secure hash SHA1 algorithm; or other unique feature code generation algorithms may be used. Generated, the generated unique feature code can uniquely represent the content of the message, and when the message content is different, the corresponding unique feature code generated is also different.

The algorithm for generating a unique feature code includes, but is not limited to, the above-mentioned algorithm. For those skilled in the art to which the present invention pertains, a number of simple deductions or substitutions may be made without departing from the inventive concept. It is considered to be within the scope of protection of the present invention.

In the embodiment of the present invention, the signature database is configured to: store the validity of the message corresponding to the unique signature and the unique signature, and may be stored in a database manner or in a file manner, and is not limited to the implementation. In the specific manner, the technical solution of the present invention can be implemented by a person skilled in the art according to the manner of storing the database table exemplified in the embodiment, which can be reasonably modified or replaced.

Further examples are as follows: The signature storage sub-module in the security management module of the security management system stores the legality records of the unique signature and the corresponding message in the form of a database table as shown in the following table:

Table 1: Signature Legality Table

Application example one:

The message 1 to be verified is a multimedia message whose content is picture file 1;

The service module sends a unique signature corresponding to the picture file 1 - 35b8569127e3c91a87aa52dc494ee3d6 to the security management module;

The security management module receives the unique signature, and the signature query sub-module queries the upper table in the signature storage sub-module to obtain the validity of the message corresponding to the unique signature: legal, the security management module returns the legal Sexual results to the business module.

The service module processes the picture file 1 by using the MD5 algorithm to obtain a unique feature code.

Application example two:

The message 2 to be verified is a multimedia message whose content is short video file 2;

The service module sends a unique signature corresponding to the video file 2, d5edec82547a3b7b0628472927934d78, to the security management module;

The security management module receives the unique signature, and the signature query sub-module queries the upper table in the signature storage sub-module to obtain the validity of the message corresponding to the unique signature: the file is invalid, and the security control module returns the The result of the legality is given to the business module.

The service module processes the video file 2 by using the MD5 algorithm to obtain a unique feature code.

Application example three:

The message 3 to be verified is a multimedia message whose content is a short video file 3;

The service module sends a unique feature code corresponding to the video file 3, 611e33d077b007142a613b1f05ef681a, to the security management module;

The service module processes the video file 3 by using the MD5 algorithm to obtain the above unique feature code.

The security management module receives the unique signature, and the signature query sub-module queries from the upper table in the signature storage sub-module, and fails to find the message legality result corresponding to the unique signature; then returns the complete content of the message. Sending an identifier, informing the service module to send the complete content of the message corresponding to the unique signature.

The service module sends the video file 3 of the message 3 to the security management module;

The security management module receives the video file 3, and the legality verification sub-module analyzes and processes the video file 3 to determine that the legality of the video file 3 is legal: the security control module returns the validity result to the service module.

Optionally, the security management module also processes the video file 3 by using the MD5 algorithm, and obtains the unique feature code 611e33d077b007142a613b1f05ef681a, and saves the validity result determined by the unique signature and the validity check submodule into the signature storage submodule, in the table. The new corresponding record in 1 is as follows:

The legality verification sub-module analyzes and determines the legality of the message content according to the complete content of the message, and can verify the legality of the message content by using the solution in the related technology; at the same time, different service platforms define the legality of the message content. Different standards are different, and the corresponding legality verification methods are also different; the specific implementation of the solution of the present invention is not limited to the specific message content legality verification scheme.

The embodiment of the invention further discloses a message security management system, comprising: any of the above-mentioned security management devices that can be executed on the service system side and any of the above-mentioned security management devices that can execute messages on the message legality verification function side.

The embodiment of the invention further discloses a computer program, comprising program instructions, when the program instruction is executed by the service system, so that the service system can execute the security management method of any of the above messages.

The embodiment of the invention also discloses a carrier carrying the computer program.

The embodiment of the invention further discloses a computer program, comprising program instructions, when the program instruction is executed by the message legality verification function, so that the message legality verification function can execute the security management method of any of the above messages.

Other aspects will be apparent upon reading and understanding the drawings and detailed description.

The embodiment provided by the present invention changes the related information scheme to send the complete message content each time to The security management platform performs message security verification. In view of the new characteristics of the existing message content service and the large amount of message volume, the message is extracted from the message to be verified. The unique signature is verified by the security management platform; the complete message is sent to the security management platform only when the security verification platform does not save the security verification result of the unique signature and the corresponding message. Compared with the related technical solution, the network bandwidth pressure caused by repeatedly initiating the complete content verification request for the same message content is avoided, and at the same time, after verifying the validity of the complete message content, the unique signature corresponding to the message is saved. And the validity verification result, for subsequent verification, only the unique feature code is used to perform the query verification result, which greatly improves the security verification efficiency.

One of ordinary skill in the art will appreciate that all or a portion of the steps of the above-described embodiments can be implemented using a computer program flow, which can be stored in a computer readable storage medium, such as on a corresponding hardware platform (eg, The system, device, device, device, etc. are executed, and when executed, include one or a combination of the steps of the method embodiments.

Alternatively, all or part of the steps of the above embodiments may also be implemented by using an integrated circuit. These steps may be separately fabricated into individual integrated circuit modules, or multiple modules or steps may be fabricated into a single integrated circuit module. achieve. Thus, the invention is not limited to any specific combination of hardware and software.

The devices/function modules/functional units in the above embodiments may be implemented by a general-purpose computing device, which may be centralized on a single computing device or distributed over a network of multiple computing devices.

When each device/function module/functional unit in the above embodiment is implemented in the form of a software function module and sold or used as a stand-alone product, it can be stored in a computer readable storage medium. The above mentioned computer readable storage medium may be a read only memory, a magnetic disk or an optical disk or the like.

The above is only a specific embodiment of the present invention, but the scope of the present invention is not limited thereto, and any person skilled in the art can easily think of changes or substitutions within the technical scope of the present invention. It should be covered by the scope of the present invention. Therefore, the scope of the invention should be determined by the scope of the claims.

Industrial applicability

The technical solution of the present invention changes the manner in which the message security verification is performed every time the complete message content is sent to the security management platform in the related technical solution, and the new message content is unchanged, and the message volume data is large. The feature is that the unique feature code of the message is extracted from the message to be verified, and the unique feature code is sent to the security management platform for verification; only when the security verification platform does not save the security verification result of the unique feature code and the corresponding message. Only send a complete message to the security management platform. The invention provides a message security management and control method, device and system, which avoids the network bandwidth pressure caused by repeatedly initiating a complete content verification request for the same message content, and at the same time, after verifying the validity of the complete message content once, The unique signature and legality verification result corresponding to the message are saved, and the subsequent verification results only perform the query verification result according to the unique signature, which greatly improves the security verification efficiency. Therefore, the present invention has strong industrial applicability.

Claims

A method for security management of messages, comprising:

Generating a unique signature based on the message content;

Sending the unique feature code to the message legality verification function, and obtaining the query result returned by the message legality verification function.
A security management method for a message according to claim 1, wherein

The query result includes: a message content validity or a sending identifier of the complete content of the message corresponding to the unique feature code, where the identifier is used to indicate that the complete content of the message corresponding to the unique feature code is sent to the legality verification function. .
The method for security management of a message according to claim 2, the method further comprising:

And when the obtained query result includes the sending identifier of the complete content of the message corresponding to the unique feature code, sending the complete content of the message corresponding to the unique feature code to the message legality verification function; receiving the message The legality of the complete content of the message returned by the legality verification function.
A security management device for a message, comprising: a signature generation module and a data transceiver module, wherein

The feature code generating module is configured to: generate a unique feature code according to the message content;

The data transceiver module is configured to: send the unique feature code to a message legality verification function; and receive a query result returned by the message legality verification function.
A security management device for a message according to claim 4, wherein

The query result includes: a message content validity or a sending identifier of the complete content of the message corresponding to the unique feature code, where the identifier is used to indicate that the complete content of the message corresponding to the unique feature code is sent to the legality verification function. .
A security management device for a message according to claim 5, wherein

The data transceiver module is further configured to: when the query result includes the unique feature code corresponding When the identity of the complete content of the message is sent, the complete content of the message corresponding to the unique feature code is sent to the message legality verification function; and the validity of the complete content of the message returned by the message legality verification function is received. .
A method for security management of messages, comprising:

Receiving a unique signature generated based on the content of the message;

Querying a signature database according to the unique feature code;

Returning the query result of the message corresponding to the unique feature code.
A security management method for a message according to claim 7, wherein

The step of returning the query result of the message corresponding to the unique feature code includes:

Returning the legality of the message corresponding to the unique feature code when the legality record of the message corresponding to the unique feature code is found in the signature database;

Returning the complete content transmission identifier of the message corresponding to the unique signature, the identifier is used to indicate that the unique signature sender sends the unique signature when the unique legality record corresponding to the unique signature is not found. The complete content of the corresponding message.
The method for security management of a message according to claim 8, further comprising:

Receiving the complete content of the message corresponding to the unique feature code sent by the sender of the unique signature, analyzing and determining the legitimacy of the complete content of the message, and returning the legitimacy of the complete content of the message.
A security management method for a message according to claim 9, wherein

After analyzing and determining the legitimacy of the complete content of the message, generating a unique feature code according to the complete content of the message; a unique feature code generated according to the complete content of the message and the determined complete content of the message Legality is saved in the signature database;

The step of generating a unique feature code according to the complete content of the message includes generating a unique feature code by using the same algorithm as the unique feature code sender.
A message security management device includes: a communication module, a signature database, and a signature query module, wherein

The communication module is configured to: receive a unique feature code generated according to the message content;

The signature database is configured to: store a correspondence between a unique signature of the message and the legitimacy of the message;

The feature code querying module is configured to: query, according to the received unique feature code, whether the message corresponding to the unique feature code is legal from the feature code database, and return a query result.
The security management device for a message according to claim 11, wherein said signature query module is arranged to return a query result as follows:

When the validity of the message corresponding to the unique feature code is found from the feature code database according to the unique feature code, the legality of the message is returned to the unique feature code sender;

When the validity of the message corresponding to the unique signature is not found, the complete content transmission identifier of the message corresponding to the unique signature is returned to the unique signature sender, and the unique signature sender is sent to send the The complete content of the message corresponding to the unique signature.
A security management device for a message according to claim 12, wherein

The communication module is further configured to: receive the complete content of the message corresponding to the unique feature code sent by the sender of the unique signature code;

The device further includes: a legality verification module, the legality verification module is configured to: analyze and determine the legality of the complete content of the message corresponding to the unique feature code; and return the legality of the complete content of the message to The unique signature sender.
The security management device for a message according to claim 13, further comprising:

The feature code generating module is configured to: generate a unique feature code according to the complete content of the message corresponding to the unique feature code; generate a unique feature code and the legality check module according to the complete content of the message corresponding to the unique feature code Determining the legitimacy of the complete content of the message corresponding to the unique feature code in the signature database;

The method for generating the unique feature code by the feature code generating module is consistent with the method for generating the unique feature code received by the communication module.
A message security management system, comprising: the security tube of the message according to any one of 4-6 A control device and a security management device for a message according to any one of claims 11-14.