WO2017050150A1 - 基于即时通讯的安全语音通讯方法及装置 - Google Patents

基于即时通讯的安全语音通讯方法及装置 Download PDF

Info

Publication number
WO2017050150A1
WO2017050150A1 PCT/CN2016/098818 CN2016098818W WO2017050150A1 WO 2017050150 A1 WO2017050150 A1 WO 2017050150A1 CN 2016098818 W CN2016098818 W CN 2016098818W WO 2017050150 A1 WO2017050150 A1 WO 2017050150A1
Authority
WO
WIPO (PCT)
Prior art keywords
voice communication
communication
security
secure
user
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Ceased
Application number
PCT/CN2016/098818
Other languages
English (en)
French (fr)
Inventor
任卿
陈航
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Alibaba Group Holding Ltd
Original Assignee
Alibaba Group Holding Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Alibaba Group Holding Ltd filed Critical Alibaba Group Holding Ltd
Priority to US15/760,172 priority Critical patent/US10867065B2/en
Publication of WO2017050150A1 publication Critical patent/WO2017050150A1/zh
Anticipated expiration legal-status Critical
Ceased legal-status Critical Current

Links

Images

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/16—Implementing security features at a particular protocol layer
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/60—Protecting data
    • G06F21/62—Protecting access to data via a platform, e.g. using keys or access control rules
    • G06F21/6218—Protecting access to data via a platform, e.g. using keys or access control rules to a system of files or objects, e.g. local or distributed file system or database
    • G06F21/6245—Protecting personal data, e.g. for financial or medical purposes
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04M—TELEPHONIC COMMUNICATION
    • H04M1/00—Substation equipment, e.g. for use by subscribers
    • H04M1/72—Mobile telephones; Cordless telephones, i.e. devices for establishing wireless links to base stations without route selection
    • H04M1/724—User interfaces specially adapted for cordless or mobile telephones
    • H04M1/72448—User interfaces specially adapted for cordless or mobile telephones with means for adapting the functionality of the device according to specific conditions
    • H04M1/72463—User interfaces specially adapted for cordless or mobile telephones with means for adapting the functionality of the device according to specific conditions to restrict the functionality of the device
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/60—Protecting data
    • G06F21/604—Tools and structures for managing or administering access control systems
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L51/00—User-to-user messaging in packet-switching networks, transmitted according to store-and-forward or real-time protocols, e.g. e-mail
    • H04L51/04—Real-time or near real-time messaging, e.g. instant messaging [IM]
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L51/00—User-to-user messaging in packet-switching networks, transmitted according to store-and-forward or real-time protocols, e.g. e-mail
    • H04L51/04—Real-time or near real-time messaging, e.g. instant messaging [IM]
    • H04L51/046—Interoperability with other network applications or services
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L51/00—User-to-user messaging in packet-switching networks, transmitted according to store-and-forward or real-time protocols, e.g. e-mail
    • H04L51/56—Unified messaging, e.g. interactions between e-mail, instant messaging or converged IP messaging [CPM]
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/04—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/10—Network architectures or network communication protocols for network security for controlling access to devices or network resources
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/20—Network architectures or network communication protocols for network security for managing network security; network security policies in general
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04M—TELEPHONIC COMMUNICATION
    • H04M1/00—Substation equipment, e.g. for use by subscribers
    • H04M1/72—Mobile telephones; Cordless telephones, i.e. devices for establishing wireless links to base stations without route selection
    • H04M1/724—User interfaces specially adapted for cordless or mobile telephones
    • H04M1/72403—User interfaces specially adapted for cordless or mobile telephones with means for local support of applications that increase the functionality
    • H04M1/7243—User interfaces specially adapted for cordless or mobile telephones with means for local support of applications that increase the functionality with interactive means for internal management of messages
    • H04M1/72433—User interfaces specially adapted for cordless or mobile telephones with means for local support of applications that increase the functionality with interactive means for internal management of messages for voice messaging, e.g. dictaphones
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04M—TELEPHONIC COMMUNICATION
    • H04M1/00—Substation equipment, e.g. for use by subscribers
    • H04M1/72—Mobile telephones; Cordless telephones, i.e. devices for establishing wireless links to base stations without route selection
    • H04M1/724—User interfaces specially adapted for cordless or mobile telephones
    • H04M1/72403—User interfaces specially adapted for cordless or mobile telephones with means for local support of applications that increase the functionality
    • H04M1/7243—User interfaces specially adapted for cordless or mobile telephones with means for local support of applications that increase the functionality with interactive means for internal management of messages
    • H04M1/72436—User interfaces specially adapted for cordless or mobile telephones with means for local support of applications that increase the functionality with interactive means for internal management of messages for text messaging, e.g. short messaging services [SMS] or e-mails
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W4/00—Services specially adapted for wireless communication networks; Facilities therefor
    • H04W4/12—Messaging; Mailboxes; Announcements

Definitions

  • the present application relates to the field of communications technologies, and in particular, to a secure voice communication method and apparatus based on instant messaging.
  • the prior art has a scheme such as a bathhouse mode or a post-burning mode, which is used to solve the problem of text information security in an instant messaging scenario.
  • a scheme such as a bathhouse mode or a post-burning mode, which is used to solve the problem of text information security in an instant messaging scenario.
  • the security of voice communication in instant messaging scenarios has not been solved very well.
  • aspects of the present application provide a secure voice communication method and apparatus based on instant messaging, which are used to solve the security problem of voice communication in an instant messaging scenario and improve the security of instant messaging.
  • An aspect of the present application provides a method for secure voice communication based on instant messaging, including:
  • the occurrence of a risk operation that is not conducive to the security of the voice communication is prohibited.
  • the receiving, by the user, a secure communication instruction for performing voice communication with the at least one peer in a secure communication mode including:
  • the occurrence of a security risk operation that is not conducive to the voice communication is prohibited, including at least one of the following implementation manners:
  • system level functions for implementing the risky operation are prohibited from being invoked.
  • the occurrence of a risk operation that is not conducive to the security of the voice communication is prohibited, including:
  • the occurrence of a risk operation that is detrimental to the security of the voice communication and matches the security level of the voice communication is prohibited.
  • a security level of the voice communication is determined according to the security level command.
  • the risk operation includes at least one of the following:
  • Recording operation external release operation, external device operation, communication record saving operation, operation of displaying the identity information of the user and the at least one opposite end, and screen capture operation.
  • Another aspect of the present application provides a secure voice communication device based on instant messaging, including:
  • the instruction receiving module is configured to receive a safety communication command that is sent by the user to perform voice communication with the at least one opposite end in a secure communication mode;
  • connection establishing module configured to establish with the at least one peer according to the secure communication command Voice communication connection
  • the security processing module is configured to prohibit, in the voice communication with the at least one peer end, the occurrence of a risk operation that is not conducive to the security of the voice communication.
  • the instruction receiving module is specifically configured to:
  • the security processing module is specifically configured to perform at least one of the following operations:
  • system level functions for implementing the risky operation are prohibited from being invoked.
  • the security processing module is specifically configured to:
  • the occurrence of a risk operation that is detrimental to the security of the voice communication and matches the security level of the voice communication is prohibited.
  • the instruction receiving module is further configured to:
  • a security level of the voice communication is determined according to the security level command.
  • the risk operation includes at least one of the following:
  • Recording operation external release operation, external device operation, communication record saving operation, operation of displaying the identity information of the user and the at least one opposite end, and screen capture operation.
  • the user is allowed to perform voice communication with at least one opposite party in a secure communication mode, and when the user needs to perform voice communication with the at least one opposite party in a secure communication mode, a secure communication command may be issued; according to the instruction issued by the user Secure communication mode with at least one peer voice
  • the communication safety communication instruction establishes a voice communication connection with at least one opposite end, and in the voice communication with at least one opposite end, prohibits the occurrence of risk operation which is not conducive to the security of the voice communication, thereby solving the security of the voice communication in the instant communication scene
  • the problem is to improve the security of instant messaging.
  • FIG. 1 is a schematic flowchart of a method for secure voice communication based on instant messaging according to an embodiment of the present application
  • FIG. 2 is a schematic structural diagram of a secure voice communication device based on instant messaging according to an embodiment of the present application.
  • FIG. 1 is a schematic flowchart of a method for secure voice communication based on instant messaging according to an embodiment of the present application. As shown in Figure 1, the method includes:
  • the embodiment provides a secure voice communication method based on instant messaging, which can be implemented by a secure voice communication device based on instant messaging (referred to as a secure voice communication device), and is mainly used to solve the security problem of voice communication in an instant communication scenario, and satisfies The privacy requirements of user call privacy improve the security of instant messaging.
  • the method of this embodiment can be applied to various types of instant messaging applications, such as nailing, Want Want, Contacts, QQ, WeChat, and the like.
  • the voice communication in this embodiment generally refers to all communication scenarios including voice in an instant messaging scenario, such as video chat, voice chat, toll-free telephone, real-time intercom, conference call, video conference, and voice reminder provided by the application.
  • the secure voice communication device provides a secure communication mode to the user, allowing the user to perform voice communication with at least one peer in the secure communication mode.
  • the secure communication mode in this embodiment is a communication mode for ensuring the security of voice communication by prohibiting risk operations that are not conducive to voice communication security.
  • the name of the secure communication mode can be different depending on the instant messaging application. In the case of nailing, the safe communication mode provided is called a bathhouse mode, but is not limited to this name.
  • the name of the secure communication mode provided by this embodiment may also be a private chat mode, a secure mode, a secret mode, or the like.
  • a secure communication instruction indicating that the voice communication with the at least one peer is performed in the secure communication mode may be issued.
  • a secure communication command for receiving a voice communication with at least one peer in a secure communication mode is received by the user.
  • the secure voice communication device can set a secure communication interface for the secure communication mode, and the voice call in the secure communication mode is completed on the secure communication interface.
  • a start command to start the secure communication mode can be issued.
  • the user may issue a start command via a secure communication portal provided by the secure voice communication device, which may be a menu item, icon or button, or the like.
  • a start command issued by the user to activate the secure communication mode is received; and according to the start command, the user is presented with a secure communication interface. The user sends a secure communication finger through the secure communication interface. make.
  • a control for the user to issue a secure communication command such as an icon or a button, is set, and the user issues a secure communication command by clicking the control.
  • the gesture corresponding to the secure communication command is set in advance, and the user can issue a gesture indicating a voice communication in the secure communication mode on the secure communication interface, thereby issuing a secure communication command.
  • the voice communication between the user and the at least one peer may be a user-initiated communication process with the at least one peer user, or may be a voice reminder function provided by the user through the nail.
  • the process of voice reminder (referred to as nail phone) by the peer user.
  • the at least one peer user When the user needs to perform voice interaction with the at least one peer, the at least one peer user may be found in the address book, and the at least one peer user is clicked to enter an instant messaging interface with the at least one peer user, in the instant messaging interface.
  • the navigation bar displays an icon pointing to the secure communication interface (or entering the secure communication mode). In the nail, the icon is specifically a "glasses" icon, but is not limited thereto.
  • the user can issue a start command to start the secure communication mode by clicking on the "glasses" icon.
  • the secure voice communication device displays a secure communication interface to the user according to the startup command, and the secure communication interface is a communication interface of the bathhouse mode.
  • the user issues a secure communication command through the controls set on the communication interface of the bathhouse mode, or the user issues a secure communication command by issuing a preset gesture.
  • At least one peer user may be found in the address book, and at least one peer user is clicked to enter the personal information page of the at least one peer user.
  • a pin icon or button is set on the personal information page. The user clicks the icon or button to issue a start command for starting the secure communication mode, and the secure voice communication device displays the secure communication interface to the user according to the start command, and the secure communication interface is actually a nail interface.
  • a common nail reminder button and a safety nail reminder button can be set on the nail interface for the user to select a normal nail phone and a safety nail phone.
  • the user can click the security button to issue a secure communication command, and the secure voice communication device sends the voice reminder information to at least one peer in a secure communication mode.
  • the secure voice communication device After receiving the secure communication command issued by the user, the secure voice communication device establishes a voice communication connection with at least one opposite end according to the secure communication command.
  • the secure communication command carries an identifier of at least one peer, and the identifier of the at least one peer may be an account number or a mobile phone number or an IP address. How can I uniquely identify the identity of the peer.
  • the at least one peer end may be one, and is applicable to an end-to-end secure call scenario; the at least one peer end may also be multiple, and is applicable to a scenario in which multiple people conduct secure calls, such as group chat, conference call, and video conference. Wait for the scene.
  • the secure voice communication device can establish a voice communication connection with at least one peer by using two protocols, a Transmission Control Protocol (TCP) and a User Datagram Protocol (UDP). Alternatively, the secure voice communication device can also establish a voice communication connection with at least one peer through a network socket (Socket).
  • TCP Transmission Control Protocol
  • UDP User Datagram Protocol
  • Socket a network socket
  • the user After establishing a voice communication connection, the user can perform voice communication with at least one peer.
  • some operations may adversely affect the security of voice communications, such as recording operations, external playback operations, external device operations, communication record saving operations, and operation of displaying user and at least one peer identity information.
  • screen capture operations, etc. may cause leakage of related information of voice communication, which brings security risks to voice communication.
  • existing instant messaging generally supports recording of a voice communication process, which is stored either locally on the terminal device or uploaded to the server.
  • the recorded content is easily acquired by criminals or third parties, for example.
  • the criminals steal the local recording content of the terminal device through the Trojan horse, or obtain the recording content by intercepting the uploading process, thereby causing the leakage of the voice communication content, causing incalculable loss to the user. Therefore, in order to ensure the security of voice communication, the recording operation can be prohibited during the voice communication process.
  • existing instant messaging generally supports external playback functions, such as speaker or hands-free function, and the use of external playback function can more clearly hear at least one peer voice, but the communication content may be heard by other users, resulting in voice communication.
  • the disclosure of content causing incalculable loss to the user or leakage of user privacy. Therefore, in order to ensure the security of voice communication, in the process of voice communication, the external release operation can be prohibited.
  • the user can be prohibited from using the speaker or hands-free function.
  • the button or the hands-free function of the button can be processed in grayscale, which becomes inoperable to the user, thereby prohibiting the user from using the speaker or the hands-free function.
  • existing instant messaging generally supports headset or Bluetooth headset functions, and some users prefer to use a headset or Bluetooth headset during voice communication, which can eliminate external interference and make it clearer.
  • the voice of the other party is clearly heard, but if the user connects an external device such as a headset or a Bluetooth headset to other devices, such as recording a voice communication process on the recording device, the content of the voice communication may also be leaked. Therefore, in order to ensure the security of voice communication, the external device operation can be prohibited during the voice communication process.
  • the external device function can be disabled, and when the user attaches a headset or a Bluetooth headset, the user can be prompted that the function is not available.
  • existing instant messaging generally has the function of automatically saving a call record, and the saved call record is either stored locally on the terminal device or uploaded to the server.
  • the call record is easily acquired by criminals or third parties.
  • the criminals steal the local call record of the terminal device through the Trojan, or obtain the call record by intercepting the upload process, thereby causing the leakage of the voice communication content, causing incalculable loss to the user. Therefore, in order to ensure the security of voice communication, the communication record saving operation can be prohibited during the voice communication process.
  • existing instant messaging generally supports screen capture operations.
  • the user may transmit or input other content in an instant messaging interface with at least one peer.
  • the user can easily send the chat information to other users through the screen capture.
  • This embodiment refers to the above-mentioned operation that is not conducive to voice communication security as a risk operation, and the risk operation mainly refers to various operations that can or may cause leakage of voice communication.
  • the risk operation that is not conducive to voice communication security may include at least one of the following: a recording operation, an external playback operation, an external device operation, a communication record saving operation, an operation of displaying user and at least one peer identity information, and a screen capture operation.
  • the voice communication with the at least one opposite end is implemented in the secure communication mode, and the secure voice communication device is prohibited in the voice communication between the user and the at least one opposite end. Conducive to the risk operation of the voice communication security, thus ensuring the security of voice communication.
  • the implementation manner of prohibiting the occurrence of the risk operation that is not conducive to the security of the voice communication includes at least one of the following:
  • One implementation manner is: in the process of implementing the secure communication mode, it is prohibited to implement an application-level function for implementing the above-mentioned risk operation that is not conducive to voice communication security.
  • This implementation is primarily directed to risk operations implemented by the functions implemented by the secure voice communication device itself.
  • the secure voice communication device itself can implement some functions, which are implemented by the secure voice communication device itself, so it is called an application level function. If these application-level functions are capable of generating risky operations that are detrimental to voice communication security, implementation-level functions for implementing these risky operations can be prohibited when implementing secure communication modes. For example, it is assumed that the secure voice communication device implements the recording function itself, but the recording operation generated by the recording function is not conducive to the security of voice communication. Therefore, when the secure communication mode is implemented, the recording function is prohibited, that is, in the secure communication mode.
  • the secure voice communication device does not have a recording function, and thus does not generate a recording operation for voice communication.
  • Another implementation manner is: shielding the application-level function for implementing the above-mentioned risk operation that is not conducive to voice communication security in voice communication with at least one peer.
  • This implementation is primarily directed to risk operations implemented by the functions implemented by the secure voice communication device itself.
  • the secure voice communication device itself can implement some functions, which are implemented by the secure voice communication device itself, so it is called an application level function. If some of these functions result in operations that are not conducive to voice communication, application-level functions for implementing these risky operations can be masked in the user's voice communication with at least one peer.
  • the secure voice communication device itself implements the screen capture function, the communication record storage function, etc., but the screen capture operation and the communication record storage operation realized by the screen capture function and the communication record storage function may adversely affect the security of the voice communication, so These functions can be masked during voice communication.
  • the secure voice communication device can implement these functions, which is convenient for other communication modes, and in the secure communication mode, shielding these functions can ensure the security of voice communication.
  • Yet another implementation manner is: in the voice communication between the user and the at least one peer, it is prohibited to invoke a system-level function for implementing the above-mentioned risk operation that is not conducive to voice communication security.
  • This implementation is primarily for risky operations that need to be invoked by the functionality provided by the operating system. There are some functions that are The security voice communication device provided by the operating system needs to call the corresponding functions provided by the operating system to complete the corresponding operations, and the functions provided by the operating system are called system level functions. If the operation implemented by the system level function is not conducive to voice communication security, the secure voice communication device can prohibit the call of system level functions that implement these risk operations in the secure communication mode.
  • the recording function is provided by the operating system, but the recording operation generated by the recording function is not conducive to the security of voice communication. Therefore, in the secure communication mode, the recording function can be prohibited from being called, so that voice communication is not generated. Recording operation to ensure the security of voice communication.
  • the secure voice communication device can set a level of secure communication for the user in addition to providing a secure communication mode to the user, and allows the user to select a security level of the voice communication.
  • the secure voice communication device can preset a security level, such as security level 1-3, and the user can select one of the security levels of the voice communication to be one of the levels 1-3.
  • Different security levels correspond to different risk operations. The higher the security level, the more risk operations are required to be prohibited during the voice communication process.
  • the risk operation corresponding to the security level 1 includes: a recording operation and an external release operation;
  • the risk operation corresponding to the security level 2 includes: a recording operation, an external release operation, an external device operation, a communication record saving operation, and a risk operation corresponding to the security level 3;
  • the security level here is not limited to level 3.
  • the risk operation corresponding to each security level is merely exemplary and is not limited thereto.
  • the secure voice communication device can also receive a security level command issued by the user, which indicates the security level selected by the user for its voice communication; the secure voice communication device determines the security level of the voice communication according to the security level command of the user.
  • the secure voice communication device prohibits the occurrence of a risk operation that is not conducive to the security of the voice communication and matches the security level of the voice communication.
  • the user is allowed to select a security level and is more flexible to use.
  • the secure voice communication device prohibits the occurrence of risk operation that is not conducive to the security of the voice communication in the voice communication with the at least one peer end, and solves the security problem of the voice communication in the instant communication scenario, and improves Instant messaging security.
  • the apparatus includes an instruction receiving module 21, a connection establishing module 22, and a security processing module 23.
  • the command receiving module 21 is configured to receive a safety communication command that is sent by the user to perform voice communication with the at least one opposite end in a secure communication mode.
  • the connection establishing module 22 is configured to establish a voice communication connection with at least one peer according to the secure communication command received by the instruction receiving module 21.
  • the security processing module 23 is configured to prohibit the occurrence of a risk operation that is not conducive to the security of the voice communication in the voice communication with the at least one peer.
  • the instruction receiving module 21 is specifically configured to:
  • the security processing module 23 is specifically configured to perform at least one of the following operations:
  • the security processing module 23 is specifically configured to:
  • the occurrence of a risk operation that is not conducive to voice communication security and matches the security level of the voice communication is prohibited.
  • the instruction receiving module 21 is further configured to:
  • the security level of the voice communication is determined according to the security level instruction.
  • the foregoing risk operation includes at least one of the following:
  • Recording operation external operation, external device operation, communication record saving operation, operation of displaying user and at least one opposite party identity information, and screen capture operation.
  • the instant messaging-based secure voice communication device provided in this embodiment can be implemented as a client of various instant messaging applications, but is not limited thereto.
  • the instant messaging-based secure voice communication device allows the user to perform voice communication with at least one opposite party in a secure communication mode, and can perform secure communication with at least one opposite party in a secure communication mode according to an instruction issued by the user.
  • the instruction establishes a voice communication connection with at least one opposite end, and in the voice communication with the at least one opposite end, prohibits the occurrence of a risk operation that is not conducive to the security of the voice communication, thereby solving the security problem of the voice communication in the instant communication scenario, and improving the instant The security of communication.
  • the disclosed system, apparatus, and method may be implemented in other manners.
  • the device embodiments described above are merely illustrative.
  • the division of the unit is only a logical function division.
  • there may be another division manner for example, multiple units or components may be combined or Can be integrated into another system, or some features can be ignored or not executed.
  • Another point that is shown or discussed between each other The coupling or direct coupling or communication connection may be an indirect coupling or communication connection through some interface, device or unit, and may be in an electrical, mechanical or other form.
  • the units described as separate components may or may not be physically separated, and the components displayed as units may or may not be physical units, that is, may be located in one place, or may be distributed to multiple network units. Some or all of the units may be selected according to actual needs to achieve the purpose of the solution of the embodiment.
  • each functional unit in each embodiment of the present application may be integrated into one processing unit, or each unit may exist physically separately, or two or more units may be integrated into one unit.
  • the above integrated unit can be implemented in the form of hardware or in the form of hardware plus software functional units.
  • the above-described integrated unit implemented in the form of a software functional unit can be stored in a computer readable storage medium.
  • the software functional unit described above is stored in a storage medium and includes instructions for causing a computer device (which may be a personal computer, a server, or a network device, etc.) or a processor to perform the methods described in various embodiments of the present application. Part of the steps.
  • the foregoing storage medium includes: a U disk, a mobile hard disk, a read-only memory (ROM), a random access memory (RAM), a magnetic disk, or an optical disk, and the like, which can store program codes. .

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Computer Security & Cryptography (AREA)
  • Computer Hardware Design (AREA)
  • General Engineering & Computer Science (AREA)
  • Computing Systems (AREA)
  • Human Computer Interaction (AREA)
  • Theoretical Computer Science (AREA)
  • Health & Medical Sciences (AREA)
  • Bioethics (AREA)
  • General Health & Medical Sciences (AREA)
  • General Business, Economics & Management (AREA)
  • Business, Economics & Management (AREA)
  • Physics & Mathematics (AREA)
  • Software Systems (AREA)
  • General Physics & Mathematics (AREA)
  • Automation & Control Theory (AREA)
  • Medical Informatics (AREA)
  • Databases & Information Systems (AREA)
  • Telephone Function (AREA)
  • Telephonic Communication Services (AREA)

Abstract

本申请提供一种基于即时通讯的安全语音通讯方法及装置。方法包括：接收用户发出的指示以安全通讯模式与至少一个对端进行语音通讯的安全通讯指令；根据安全通讯指令，与至少一个对端建立语音通讯连接；在与至少一个对端的语音通讯中，禁止不利于语音通讯安全的风险操作的发生。本申请通过提供安全通讯模式，可以解决即时通讯场景中语音通讯的安全问题，提高即时通讯的安全性。

Description

基于即时通讯的安全语音通讯方法及装置 【技术领域】
本申请涉及通信技术领域，尤其涉及一种基于即时通讯的安全语音通讯方法及装置。
【背景技术】
随着互联网及通讯技术的发展，即时通讯逐渐兴起，并已成为目前最为流行的通讯方式。即时通讯使人们之间的通讯更加方便、及时，但同时也带来了信息安全问题。例如，在即时通讯过程中，用户可以随时截屏，将通讯内容发送给其它好友，导致信息被泄露。
为了解决即时通讯带来的信息安全问题，现有技术出现了类似澡堂模式或阅后即焚模式等方案，用以解决即时通讯场景中文本信息的安全问题。但是，对于即时通讯场景中语音通讯的安全问题，目前尚未很好的解决。
【发明内容】
本申请的多个方面提供一种基于即时通讯的安全语音通讯方法及装置，用以解决即时通讯场景中语音通讯的安全问题，提高即时通讯的安全性。
本申请的一方面，提供一种基于即时通讯的安全语音通讯方法，包括：
接收用户发出的指示以安全通讯模式与至少一个对端进行语音通讯的安全通讯指令；
根据所述安全通讯指令，与所述至少一个对端建立语音通讯连接；
在与所述至少一个对端的语音通讯中，禁止不利于所述语音通讯安全的风险操作的发生。
在本申请的一可选实施方式中，所述接收用户发出的指示以安全通讯模式与至少一个对端进行语音通讯的安全通讯指令，包括：
接收所述用户发出的启动安全通讯模式的启动指令；
根据所述启动指令，向所述用户展示安全通讯界面；
接收所述用户通过所述安全通讯界面发出的所述安全通讯指令。
在本申请的一可选实施方式中，所述在与所述至少一个对端的语音通讯中，禁止不利于所述语音通讯的安全的风险操作的发生，包括以下至少一种实现方式：
在实现所述安全通讯模式的过程中，禁止实现用于实现所述风险操作的应用级功能；
在与所述至少一个对端的语音通讯中，屏蔽用于实现所述风险操作的应用级功能；
在与所述至少一个对端的语音通讯中，禁止调用用于实现所述风险操作的系统级功能。
在本申请的一可选实施方式中，所述在与所述至少一个对端的语音通讯中，禁止不利于所述语音通讯安全的风险操作的发生，包括：
在与所述至少一个对端的语音通讯中，禁止不利于所述语音通讯安全且与所述语音通讯的安全等级相匹配的风险操作的发生。
在本申请的一可选实施方式中，所述在与所述至少一个对端的语音通讯中，禁止不利于所述语音通讯安全且与所述语音通讯的安全等级相匹配的风险操作的发生之前，包括：
接收所述用户发出的安全等级指令；
根据所述安全等级指令，确定所述语音通讯的安全等级。
在本申请的一可选实施方式中，所述风险操作包括以下至少一种：
录音操作、外放操作、外接设备操作、通讯记录保存操作、显示所述用户与所述至少一个对端的身份信息的操作以及截屏操作。
本申请的另一方面，提供一种基于即时通讯的安全语音通讯装置，包括：
指令接收模块，用于接收用户发出的指示以安全通讯模式与至少一个对端进行语音通讯的安全通讯指令；
连接建立模块，用于根据所述安全通讯指令，与所述至少一个对端建立 语音通讯连接；
安全处理模块，用于在与所述至少一个对端的语音通讯中，禁止不利于所述语音通讯安全的风险操作的发生。
在本申请的一可选实施方式中，所述指令接收模块具体用于：
接收所述用户发出的启动安全通讯模式的启动指令；
根据所述启动指令，向所述用户展示安全通讯界面；
接收所述用户通过所述安全通讯界面发出的所述安全通讯指令。
在本申请的一可选实施方式中，所述安全处理模块具体用于执行以下至少一种操作：
在实现所述安全通讯模式的过程中，禁止实现用于实现所述风险操作的应用级功能；
在与所述至少一个对端的语音通讯中，屏蔽用于实现所述风险操作的应用级功能；
在与所述至少一个对端的语音通讯中，禁止调用用于实现所述风险操作的系统级功能。
在本申请的一可选实施方式中，所述安全处理模块具体用于：
在与所述至少一个对端的语音通讯中，禁止不利于所述语音通讯安全且与所述语音通讯的安全等级相匹配的风险操作的发生。
在本申请的一可选实施方式中，所述指令接收模块还用于：
接收所述用户发出的安全等级指令；
根据所述安全等级指令，确定所述语音通讯的安全等级。
在本申请的一可选实施方式中，所述风险操作包括以下至少一种：
录音操作、外放操作、外接设备操作、通讯记录保存操作、显示所述用户与所述至少一个对端的身份信息的操作以及截屏操作。
在本申请中，允许用户以安全通讯模式与至少一个对端进行语音通讯，则当用户需要与至少一个对端以安全通讯模式进行语音通讯时，可以发出安全通讯指令；根据用户发出的指示以安全通讯模式与至少一个对端进行语音 通讯的安全通讯指令，与至少一个对端建立语音通讯连接，并在与至少一个对端的语音通讯中，禁止不利于该语音通讯安全的风险操作的发生，从而解决即时通讯场景中语音通讯的安全问题，提高即时通讯的安全性。
【附图说明】
为了更清楚地说明本申请实施例中的技术方案，下面将对实施例或现有技术描述中所需要使用的附图作一简单地介绍，显而易见地，下面描述中的附图是本申请的一些实施例，对于本领域普通技术人员来讲，在不付出创造性劳动性的前提下，还可以根据这些附图获得其他的附图。
图1为本申请一实施例提供的基于即时通讯的安全语音通讯方法的流程示意图；
图2为本申请一实施例提供的基于即时通讯的安全语音通讯装置的结构示意图。
【具体实施方式】
为使本申请实施例的目的、技术方案和优点更加清楚，下面将结合本申请实施例中的附图，对本申请实施例中的技术方案进行清楚、完整地描述，显然，所描述的实施例是本申请一部分实施例，而不是全部的实施例。基于本申请中的实施例，本领域普通技术人员在没有作出创造性劳动前提下所获得的所有其他实施例，都属于本申请保护的范围。
图1为本申请一实施例提供的基于即时通讯的安全语音通讯方法的流程示意图。如图1所示，该方法包括：
101、接收用户发出的指示以安全通讯模式与至少一个对端进行语音通讯的安全通讯指令。
102、根据上述安全通讯指令，与至少一个对端建立语音通讯连接。
103、在与至少一个对端的语音通讯中，禁止不利于语音通讯安全的风险操作的发生。
本实施例提供一种基于即时通讯的安全语音通讯方法，可由基于即时通讯的安全语音通讯装置(简称为安全语音通讯装置)来实现，主要用于解决即时通讯场景中语音通讯的安全问题，满足用户通话隐私的保密需求，提高即时通讯的安全性。本实施例的方法可用于各种类型的即时通讯应用，例如钉钉、旺旺、来往、QQ、微信等。本实施例所述的语音通讯泛指即时通讯场景中一切包括语音的通讯场景，例如视频聊天、语音聊天、免费电话、实时对讲、电话会议、视频会议以及应用提供的语音提醒等。
在本实施例中，安全语音通讯装置向用户提供一种安全通讯模式，允许用户在安全通讯模式下与至少一个对端进行语音通讯。本实施例中的安全通讯模式是一种通过禁止不利于语音通讯安全的风险操作来保证语音通讯的安全性的通讯模式。值得说明的是，根据即时通讯应用的不同，该安全通讯模式的名称可以不同。以钉钉为例，其提供的安全通讯模式称为澡堂模式，但不限于此名称。举例说明，本实施例提供的安全通讯模式的名称还可以是私聊模式、安全模式、保密模式等。
具体的，当用户与至少一个对端之间的语音通讯需要保密时，可以发出指示以安全通讯模式与至少一个对端进行语音通讯的安全通讯指令。对安全语音通讯装置来说，接收用户发出的指示以安全通讯模式与至少一个对端进行语音通讯的安全通讯指令。
可选的，安全语音通讯装置可以为安全通讯模式设置一安全通讯界面，以安全通讯模式进行的语音通话在安全通讯界面上完成。当用户需要以安全通讯模式与至少一个对端进行语音通讯时，可以发出启动该安全通讯模式的启动指令。例如，用户可以通过安全语音通讯装置提供的安全通讯入口发出启动指令，所述安全通讯入口可以是一菜单项、图标或按钮等。对安全语音通讯装置来说，接收用户发出的启动安全通讯模式的启动指令；根据该启动指令，向用户展示安全通讯界面。用户通过该安全通讯界面发出安全通讯指 令。可选的，在该安全通讯界面上，设置有供用户发出安全通讯指令的控件，例如图标或按钮，用户通过点击该控件发出安全通讯指令。或者，预先设置安全通讯指令对应的手势，用户可以在安全通讯界面上发出指示以安全通讯模式进行语音通讯的手势，从而发出安全通讯指令。
以钉钉为例，用户与至少一个对端之间的语音通讯可以是用户发起的与至少一个对端用户进行语音交互的通讯过程，也可以是用户通过钉钉提供的语音提醒功能对至少一个对端用户进行语音提醒(简称为钉电话)的过程。
当用户需要与至少一个对端进行语音交互时，可以在通讯录中找到至少一个对端用户，点击该至少一个对端用户进入与该至少一个对端用户的即时通讯界面，在该即时通讯界面的导航栏上显示一指向安全通讯界面(或进入安全通讯模式)的图标，在钉钉中，该图标具体为一“眼镜”图标，但不限于此。用户通过点击该“眼镜”图标可以发出启动安全通讯模式的启动指令。安全语音通讯装置根据该启动指令，向用户展示安全通讯界面，该安全通讯界面为澡堂模式的通讯界面。用户通过澡堂模式的通讯界面上设置的控件发出安全通讯指令，或者用户通过发出预设的手势从而发出安全通讯指令。
当用户通过钉钉提供的语音提醒功能对至少一个对端用户进行语音提醒时，可以在通讯录中找到至少一个对端用户，点击至少一个对端用户进入至少一个对端用户的个人信息页，在该个人信息页上设置有钉一下图标或按钮。用户点击钉一下图标或按钮可以发出启动安全通讯模式的启动指令，安全语音通讯装置根据该启动指令，向用户展示安全通讯界面，该安全通讯界面实际上为一钉界面。在该钉界面上可以设置普通钉提醒按钮和安全钉提醒按钮，以供用户选择普通钉电话和安全钉电话。用户可以在录入语音提醒信息后，点击安全钉按钮发出安全通讯指令，安全语音通讯装置以安全通讯模式将语音提醒信息发送给至少一个对端。
在接收到用户发出的安全通讯指令后，安全语音通讯装置根据该安全通讯指令，与至少一个对端建立语音通讯连接。该安全通信指令携带有至少一个对端的标识，所述至少一个对端的标识可以是账号或手机号或IP地址等任 何能够唯一标识对端身份的信息。所述至少一个对端可以是一个，适用于端到端的安全通话场景；所述至少一个对端也可以是多个，适用于多人进行安全通话的场景，例如群聊、电话会议、视频会议等场景。其中，安全语音通讯装置可以采用传输控制协议(Transmission Control Protocol，TCP)和用户数据包协议(User Datagram Protocol，UDP)这两种协议与至少一个对端建立语音通讯连接。或者，安全语音通讯装置也可以通过网络套接字(Socket)与至少一个对端建立语音通讯连接。
在建立语音通讯连接后，用户可以与至少一个对端进行语音通讯。在现有即时通讯应用中，一些操作可能会对语音通讯的安全性产生不利影响，例如录音操作、外放操作、外接设备操作、通讯记录保存操作、显示用户与至少一个对端的身份信息的操作以及截屏操作等可能会造成语音通讯的相关信息的泄露，给语音通讯带来安全隐患。
例如，现有即时通讯一般都支持对语音通讯过程进行录音，该录音内存要么存储于终端设备本地，要么上传至服务器，在这些过程中，录音内容很容易被不法分子或第三人获取，例如不法分子通过木马盗取终端设备本地的录音内容，或者通过拦截上传过程获取录音内容，从而造成该语音通讯内容的泄露，给用户带来不可估量的损失。因此，为了保证语音通讯的安全，在语音通讯过程中，可以禁止录音操作。
例如，现有即时通讯一般都支持外放功能，例如扬声器或免提功能，使用外放功能，能够更加清晰的听到至少一个对端的声音，但是通讯内容可能被其它用户听到，造成语音通讯内容的泄露，从而给用户带来不可估量的损失或者造成用户隐私的泄露。因此，为了保证语音通讯的安全，在语音通讯过程中，可以禁止外放操作。例如，可以禁止用户使用扬声器或免提功能。在产品具体实现上，可以将扬声器或免提功能的按钮灰度处理，对用户变得不可操作，从而禁止用户使用扬声器或免提功能。
例如，现有即时通讯一般都支持耳麦或蓝牙耳机功能，而且一些用户在语音通讯过程中喜欢使用耳麦或蓝牙耳机，这样可以排除外界干扰，更加清 晰的听到对方的声音，但是如果用户将耳麦或蓝牙耳机等外接设备接入其它设备上，例如接入录音设备上对语音通讯过程进行录音等，也会造成语音通讯内容的泄露。因此，为了保证语音通讯的安全，在语音通讯过程中，可以禁止外接设备操作。例如，可以禁用外接设备功能，当用户外接耳麦或蓝牙耳机时，可以提示用户该功能不可用。
例如，现有即时通讯一般都具有自动保存通话记录的功能，所保存的通话记录要么存储于终端设备本地，要么上传至服务器，在这些过程中，通话记录很容易被不法分子或第三人获取，例如不法分子通过木马盗取终端设备本地的通话记录，或者通过拦截上传过程获取通话记录，从而造成该语音通讯内容的泄露，给用户带来不可估量的损失。因此，为了保证语音通讯的安全，在语音通讯过程中，可以禁止通讯记录保存操作。
例如，现有即时通讯一般都支持截屏操作，用户在语音通讯过程中可能会在与至少一个对端的即时通讯界面中传输或输入其它内容，用户通过截屏可以轻易将聊天信息发送给其它用户，从而造成语音通讯过程中有关信息的泄露。因此，为了保证语音通讯的安全，在语音通讯过程中，可以禁止截屏操作。
本实施例将上述不利于语音通讯安全的操作称为风险操作，风险操作主要是指能够或者可能对语音通讯造成泄露的各种操作。所述不利于语音通讯安全的风险操作可以包括以下至少一种：录音操作、外放操作、外接设备操作、通讯记录保存操作、显示用户与至少一个对端的身份信息的操作以及截屏操作等。
在本实施例中，为了降低风险操作给语音通讯带来的安全隐患，实现以安全通讯模式与至少一个对端进行语音通讯，安全语音通讯装置在用户与至少一个对端的语音通讯中，禁止不利于该语音通讯安全的风险操作的发生，从而保证语音通讯的安全性。
其中，根据不利于语音通讯安全的风险操作的实现形式的不同，在与至少一个对端的语音通讯中，禁止这些风险操作的实现方式也会有所不同。
可选的，在与至少一个对端的语音通讯中，禁止不利于该语音通讯安全的风险操作的发生的实现方式包括以下至少一种：
一种实现方式为：在实现安全通讯模式的过程中，禁止实现用于实现上述不利于语音通讯安全的风险操作的应用级功能。该实现方式主要针对那些由安全语音通讯装置自身实现的功能所实现的风险操作。安全语音通讯装置自身可以实现一些功能，这些功能是由安全语音通讯装置自身实现的，所以称为应用级功能。如果这些应用级功能能够产生不利于语音通讯安全的风险操作，则在实现安全通讯模式时可以禁止实现用于实现这些风险操作的应用级功能。举例说明，假设安全语音通讯装置自身实现录音功能，但通过该录音功能产生的录音操作不利于语音通讯的安全，因此，在实现安全通讯模式时，禁止实现录音功能，即在安全通讯模式下，安全语音通讯装置不具有录音功能，也就不会对语音通讯产生录音操作。
另一种实现方式为：在与至少一个对端的语音通讯中，屏蔽用于实现上述不利于语音通讯安全的风险操作的应用级功能。该实现方式主要针对那些由安全语音通讯装置自身实现的功能所实现的风险操作。在实际应用中，安全语音通讯装置自身可以实现一些功能，这些功能是由安全语音通讯装置自身实现的，所以称为应用级功能。如果这些功能中有一些功能产生的操作不利于语音通讯，则可以在用户与至少一个对端的语音通讯中，屏蔽用于实现这些风险操作的应用级功能。例如，假设安全语音通讯装置自身实现截屏功能、通讯记录保存功能等，但截屏功能、通讯记录保存功能所实现的截屏操作、通讯记录保存操作可能会对语音通讯的安全性带来不利影响，于是在语音通讯过程中，可以屏蔽掉这些功能。在该实施方式中，安全语音通讯装置可以实现这些功能，这样便于其它通讯模式使用，而在安全通讯模式下，将这些功能屏蔽掉可以保证语音通讯的安全性。
又一种实现方式为：在用户与至少一个对端的语音通讯中，禁止调用用于实现上述不利于语音通讯安全的风险操作的系统级功能。该实现方式主要针对那些需要调用操作系统提供的功能所实现的风险操作。有一些功能是由 操作系统提供的，安全语音通讯装置需要调用操作系统提供的相应功能完成相应操作，这些由操作系统提供的功能称为系统级功能。如果系统级功能所实现的操作不利于语音通讯安全，则安全语音通讯装置可以在安全通讯模式下禁止调用实现这些风险操作的系统级功能。例如，假设录音功能是由操作系统提供的，但通过该录音功能产生的录音操作不利于语音通讯的安全，因此，在安全通讯模式下，可以禁止调用该录音功能，从而不会对语音通讯产生录音操作，以保证语音通讯的安全性。
在一可选实施方式中，安全语音通讯装置除了向用户提供安全通讯模式之外，还可以为用户设置安全通讯的等级，允许用户选择语音通讯的安全等级。例如，安全语音通讯装置可以预先设定安全等级，例如安全等级1-3，则用户可以选择其语音通讯的安全等级为等级1-3中之一。不同安全等级对应不同的风险操作，安全等级越高，在语音通讯过程中需要禁止的风险操作越多。例如，安全等级1对应的风险操作包括：录音操作和外放操作；安全等级2对应的风险操作包括：录音操作、外放操作、外接设备操作、通讯记录保存操作；安全等级3对应的风险操作包括：录音操作、外放操作、外接设备操作、通讯记录保存操作、显示用户与至少一个对端的身份信息的操作以及截屏操作。值得说明的是，这里的安全等级并不限于3级，同理，每一安全等级对应的风险操作仅仅是示例性的，并不受限于此。
基于上述，安全语音通讯装置还可以接收用户发出的安全等级指令，该安全等级指令指示用户为其语音通讯选择的安全等级；安全语音通讯装置根据用户的安全等级指令，确定语音通讯的安全等级。相应的，安全语音通讯装置在用户与至少一个对端的语音通讯中，禁止不利于该语音通讯安全且与该语音通讯的安全等级相匹配的风险操作的发生。在该实施方式中，允许用户进行安全等级的选择，使用起来更加灵活。例如，如果用户的语音通讯安全性较高，可以选择较高的安全等级，保证语音通讯的安全性；如果用户的语音通讯需要保证一定安全性，但对安全性要求又不是特别高，此时可以选择较低的安全等级，在保证安全性需求的同时，用户可以选择使用一些功能， 例如通讯记录保存操作、显示用户与至少一个对端的身份信息的操作等，有利于提高即时通讯的灵活性。由此可见，在本实施例中，安全语音通讯装置在与至少一个对端的语音通讯中，禁止不利于该语音通讯安全的风险操作的发生，解决了即时通讯场景中语音通讯的安全问题，提高即时通讯的安全性。
需要说明的是，对于前述的各方法实施例，为了简单描述，故将其都表述为一系列的动作组合，但是本领域技术人员应该知悉，本申请并不受所描述的动作顺序的限制，因为依据本申请，某些步骤可以采用其他顺序或者同时进行。其次，本领域技术人员也应该知悉，说明书中所描述的实施例均属于优选实施例，所涉及的动作和模块并不一定是本申请所必须的。
在上述实施例中，对各个实施例的描述都各有侧重，某个实施例中没有详述的部分，可以参见其他实施例的相关描述。
图2为本申请一实施例提供的基于即时通讯的安全语音通讯装置的结构示意图。如图2所示，该装置包括：指令接收模块21、连接建立模块22和安全处理模块23。
指令接收模块21，用于接收用户发出的指示以安全通讯模式与至少一个对端进行语音通讯的安全通讯指令。
连接建立模块22，用于根据指令接收模块21接收的安全通讯指令，与至少一个对端建立语音通讯连接。
安全处理模块23，用于在与至少一个对端的语音通讯中，禁止不利于该语音通讯安全的风险操作的发生。
在一可选实施方式中，指令接收模块21具体用于：
接收用户发出的启动安全通讯模式的启动指令；
根据启动指令，向用户展示安全通讯界面；
接收用户通过安全通讯界面发出的安全通讯指令。
在一可选实施方式中，安全处理模块23具体用于执行以下至少一种操作：
在实现安全通讯模式的过程中，禁止实现用于实现风险操作的应用级功能；
在与至少一个对端的语音通讯中，屏蔽用于实现风险操作的应用级功能；
在与至少一个对端的语音通讯中，禁止调用用于实现风险操作的系统级功能。
在一可选实施方式中，安全处理模块23具体用于：
在与至少一个对端的语音通讯中，禁止不利于语音通讯安全且与语音通讯的安全等级相匹配的风险操作的发生。
基于上述，指令接收模块21还用于：
接收用户发出的安全等级指令；
根据安全等级指令，确定语音通讯的安全等级。
在一可选实施方式中，上述风险操作包括以下至少一种：
录音操作、外放操作、外接设备操作、通讯记录保存操作、显示用户与至少一个对端的身份信息的操作以及截屏操作。
本实施例提供的基于即时通讯的安全语音通讯装置可以作为各种即时通讯应用的客户端实现，但不限于此。
本实施例提供的基于即时通讯的安全语音通讯装置，允许用户以安全通讯模式与至少一个对端进行语音通讯，可以根据用户发出的指示以安全通讯模式与至少一个对端进行语音通讯的安全通讯指令，与至少一个对端建立语音通讯连接，并在与至少一个对端的语音通讯中，禁止不利于该语音通讯安全的风险操作的发生，从而解决即时通讯场景中语音通讯的安全问题，提高即时通讯的安全性。
所属领域的技术人员可以清楚地了解到，为描述的方便和简洁，上述描述的系统，装置和单元的具体工作过程，可以参考前述方法实施例中的对应过程，在此不再赘述。
在本申请所提供的几个实施例中，应该理解到，所揭露的系统，装置和方法，可以通过其它的方式实现。例如，以上所描述的装置实施例仅仅是示意性的，例如，所述单元的划分，仅仅为一种逻辑功能划分，实际实现时可以有另外的划分方式，例如多个单元或组件可以结合或者可以集成到另一个系统，或一些特征可以忽略，或不执行。另一点，所显示或讨论的相互之间 的耦合或直接耦合或通信连接可以是通过一些接口，装置或单元的间接耦合或通信连接，可以是电性，机械或其它的形式。
所述作为分离部件说明的单元可以是或者也可以不是物理上分开的，作为单元显示的部件可以是或者也可以不是物理单元，即可以位于一个地方，或者也可以分布到多个网络单元上。可以根据实际的需要选择其中的部分或者全部单元来实现本实施例方案的目的。
另外，在本申请各个实施例中的各功能单元可以集成在一个处理单元中，也可以是各个单元单独物理存在，也可以两个或两个以上单元集成在一个单元中。上述集成的单元既可以采用硬件的形式实现，也可以采用硬件加软件功能单元的形式实现。
上述以软件功能单元的形式实现的集成的单元，可以存储在一个计算机可读取存储介质中。上述软件功能单元存储在一个存储介质中，包括若干指令用以使得一台计算机设备(可以是个人计算机，服务器，或者网络设备等)或处理器(processor)执行本申请各个实施例所述方法的部分步骤。而前述的存储介质包括：U盘、移动硬盘、只读存储器(Read-Only Memory，ROM)、随机存取存储器(Random Access Memory，RAM)、磁碟或者光盘等各种可以存储程序代码的介质。
最后应说明的是：以上实施例仅用以说明本申请的技术方案，而非对其限制；尽管参照前述实施例对本申请进行了详细的说明，本领域的普通技术人员应当理解：其依然可以对前述各实施例所记载的技术方案进行修改，或者对其中部分技术特征进行等同替换；而这些修改或者替换，并不使相应技术方案的本质脱离本申请各实施例技术方案的精神和范围。

Claims (12)

  1. 一种基于即时通讯的安全语音通讯方法，其特征在于，包括：
    接收用户发出的指示以安全通讯模式与至少一个对端进行语音通讯的安全通讯指令；
    根据所述安全通讯指令，与所述至少一个对端建立语音通讯连接；
    在与所述至少一个对端的语音通讯中，禁止不利于所述语音通讯安全的风险操作的发生。
  2. 根据权利要求1所述的方法，其特征在于，所述接收用户发出的指示以安全通讯模式与至少一个对端进行语音通讯的安全通讯指令，包括：
    接收所述用户发出的启动安全通讯模式的启动指令；
    根据所述启动指令，向所述用户展示安全通讯界面；
    接收所述用户通过所述安全通讯界面发出的所述安全通讯指令。
  3. 根据权利要求1所述的方法，其特征在于，所述在与所述至少一个对端的语音通讯中，禁止不利于所述语音通讯的安全的风险操作的发生，包括以下至少一种实现方式：
    在实现所述安全通讯模式的过程中，禁止实现用于实现所述风险操作的应用级功能；
    在与所述至少一个对端的语音通讯中，屏蔽用于实现所述风险操作的应用级功能；
    在与所述至少一个对端的语音通讯中，禁止调用用于实现所述风险操作的系统级功能。
  4. 根据权利要求1所述的方法，其特征在于，所述在与所述至少一个对端的语音通讯中，禁止不利于所述语音通讯安全的风险操作的发生，包括：
    在与所述至少一个对端的语音通讯中，禁止不利于所述语音通讯安全且与所述语音通讯的安全等级相匹配的风险操作的发生。
  5. 根据权利要求4所述的方法，其特征在于，所述在与所述至少一个对端 的语音通讯中，禁止不利于所述语音通讯安全且与所述语音通讯的安全等级相匹配的风险操作的发生之前，包括：
    接收所述用户发出的安全等级指令；
    根据所述安全等级指令，确定所述语音通讯的安全等级。
  6. 根据权利要求1-5任一项所述的方法，其特征在于，所述风险操作包括以下至少一种：
    录音操作、外放操作、外接设备操作、通讯记录保存操作、显示所述用户与所述至少一个对端的身份信息的操作以及截屏操作。
  7. 一种基于即时通讯的安全语音通讯装置，其特征在于，包括：
    指令接收模块，用于接收用户发出的指示以安全通讯模式与至少一个对端进行语音通讯的安全通讯指令；
    连接建立模块，用于根据所述安全通讯指令，与所述至少一个对端建立语音通讯连接；
    安全处理模块，用于在与所述至少一个对端的语音通讯中，禁止不利于所述语音通讯安全的风险操作的发生。
  8. 根据权利要求7所述的装置，其特征在于，所述指令接收模块具体用于：
    接收所述用户发出的启动安全通讯模式的启动指令；
    根据所述启动指令，向所述用户展示安全通讯界面；
    接收所述用户通过所述安全通讯界面发出的所述安全通讯指令。
  9. 根据权利要求7所述的装置，其特征在于，所述安全处理模块具体用于执行以下至少一种操作：
    在实现所述安全通讯模式的过程中，禁止实现用于实现所述风险操作的应用级功能；
    在与所述至少一个对端的语音通讯中，屏蔽用于实现所述风险操作的应用级功能；
    在与所述至少一个对端的语音通讯中，禁止调用用于实现所述风险操作的系统级功能。
  10. 根据权利要求7所述的装置，其特征在于，所述安全处理模块具体用于：
    在与所述至少一个对端的语音通讯中，禁止不利于所述语音通讯安全且与所述语音通讯的安全等级相匹配的风险操作的发生。
  11. 根据权利要求10所述的装置，其特征在于，所述指令接收模块还用于：
    接收所述用户发出的安全等级指令；
    根据所述安全等级指令，确定所述语音通讯的安全等级。
  12. 根据权利要求7-11任一项所述的装置，其特征在于，所述风险操作包括以下至少一种：
    录音操作、外放操作、外接设备操作、通讯记录保存操作、显示所述用户与所述至少一个对端的身份信息的操作以及截屏操作。
PCT/CN2016/098818 2015-09-22 2016-09-13 基于即时通讯的安全语音通讯方法及装置 Ceased WO2017050150A1 (zh)

Priority Applications (1)

Application Number Priority Date Filing Date Title
US15/760,172 US10867065B2 (en) 2015-09-22 2016-09-13 Secure voice communication method and device based on instant communication

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
CN201510608978.0A CN105323243A (zh) 2015-09-22 2015-09-22 基于即时通讯的安全语音通讯方法及装置
CN201510608978.0 2015-09-22

Publications (1)

Publication Number Publication Date
WO2017050150A1 true WO2017050150A1 (zh) 2017-03-30

Family

ID=55249838

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/CN2016/098818 Ceased WO2017050150A1 (zh) 2015-09-22 2016-09-13 基于即时通讯的安全语音通讯方法及装置

Country Status (4)

Country Link
US (1) US10867065B2 (zh)
CN (1) CN105323243A (zh)
HK (1) HK1219585A1 (zh)
WO (1) WO2017050150A1 (zh)

Cited By (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
WO2019052465A1 (zh) * 2017-09-14 2019-03-21 西安中兴新软件有限责任公司 通话的方法及终端
US10296477B2 (en) 2017-03-30 2019-05-21 United States of America as represented by the Secretary of the AirForce Data bus logger
US10432730B1 (en) 2017-01-25 2019-10-01 United States Of America As Represented By The Secretary Of The Air Force Apparatus and method for bus protection

Families Citing this family (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN105323243A (zh) 2015-09-22 2016-02-10 阿里巴巴集团控股有限公司 基于即时通讯的安全语音通讯方法及装置
CN107276772A (zh) * 2016-04-06 2017-10-20 中兴通讯股份有限公司 一种云会议系统的应用方法及支付服务平台系统
CN107171935A (zh) * 2017-05-05 2017-09-15 浙江翼信科技有限公司 进行安全模式消息收发的方法、设备、用户终端和存储介质
CN109561407B (zh) * 2017-09-27 2021-09-10 中国移动通信有限公司研究院 一种通话处理方法及通话终端
JP7767767B2 (ja) * 2021-08-19 2025-11-12 富士フイルムビジネスイノベーション株式会社 情報処理装置、情報処理システム、およびプログラム

Citations (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN102045712A (zh) * 2011-01-04 2011-05-04 奇智软件（北京）有限公司 一种用于移动终端的防监听方法及系统
CN102955904A (zh) * 2011-08-18 2013-03-06 网秦无限（北京）科技有限公司 防止移动通讯设备泄密的方法和系统
US20130347084A1 (en) * 2012-06-20 2013-12-26 Futurewei Technologies, Inc. Security Mode for Mobile Communications Devices
CN104038614A (zh) * 2013-03-04 2014-09-10 德信无线通讯科技（北京）有限公司 一种安全手机的专有安全键
CN105323243A (zh) * 2015-09-22 2016-02-10 阿里巴巴集团控股有限公司 基于即时通讯的安全语音通讯方法及装置

Family Cites Families (48)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US3849603A (en) * 1972-10-30 1974-11-19 Mosler Safe Co Remote banking intercom system
US4411017A (en) 1980-03-14 1983-10-18 Harris Corporation Secure mobile telephone system
US6571212B1 (en) 2000-08-15 2003-05-27 Ericsson Inc. Mobile internet protocol voice system
US20020078153A1 (en) 2000-11-02 2002-06-20 Chit Chung Providing secure, instantaneous, directory-integrated, multiparty, communications services
US7076657B2 (en) 2001-12-28 2006-07-11 Siemens Communications, Inc. Use of short message service (SMS) for secure transactions
CA2499524C (en) * 2002-09-19 2011-02-01 Research In Motion Limited Apparatus and method of wireless instant messaging
US7131003B2 (en) * 2003-02-20 2006-10-31 America Online, Inc. Secure instant messaging system
US20060156063A1 (en) * 2004-12-20 2006-07-13 Travel Sciences, Inc. Instant messaging transaction integration
US7852831B2 (en) 2005-02-22 2010-12-14 Akbar Imran M Method and system for providing private virtual secure Voice over Internet Protocol communications
US20060189278A1 (en) * 2005-02-24 2006-08-24 Research In Motion Limited System and method for making an electronic handheld device more accessible to a disabled person
US7949138B2 (en) 2005-06-30 2011-05-24 Microsoft Corporation Secure instant messaging
US7949873B2 (en) 2005-06-30 2011-05-24 Microsoft Corporation Secure instant messaging
US8266219B2 (en) * 2005-07-20 2012-09-11 Research In Motion Limited Method and system for instant messaging conversation security
WO2007056499A2 (en) * 2005-11-08 2007-05-18 Ipdev Co. Ordering system and method goods and services using a stateless communication protocol
US20070143408A1 (en) * 2005-12-15 2007-06-21 Brian Daigle Enterprise to enterprise instant messaging
US7904056B2 (en) * 2006-03-01 2011-03-08 Ipc Systems, Inc. System, method and apparatus for recording and reproducing trading communications
US7861175B2 (en) * 2006-09-29 2010-12-28 Research In Motion Limited IM contact list entry as a game in progress designate
US8705720B2 (en) * 2007-02-08 2014-04-22 Avaya Inc. System, method and apparatus for clientless two factor authentication in VoIP networks
BRPI0810243A2 (pt) * 2007-04-20 2014-10-29 Stephen Murphy Método e sistema implementado por processador, e meio acessível por processador para responder às pesquisas de seqüência de texto de usuário, e, aparelho para responder às pesquisas da seqüência de texto do usuário
US7885641B2 (en) * 2007-06-18 2011-02-08 Research In Motion Limited Method and system for using subjects in instant messaging sessions on a mobile device
US8769268B2 (en) * 2007-07-20 2014-07-01 Check Point Software Technologies, Inc. System and methods providing secure workspace sessions
US8320943B2 (en) * 2008-02-27 2012-11-27 Research In Motion Limited System and method for enabling instant messages to be exchanged between mobile devices
US20090282115A1 (en) * 2008-05-09 2009-11-12 Research In Motion Limited System and method for updating instant messaging conversations
US9160753B2 (en) * 2009-05-22 2015-10-13 Raytheon Company Analog voice bridge
CN101720088A (zh) * 2009-12-28 2010-06-02 中兴通讯股份有限公司 手机通话过程中防窃听的方法和手机
US20120020297A1 (en) * 2010-07-23 2012-01-26 Albert Cecchini Mobile handheld for voice communication over the internet
CA2714710C (en) * 2010-09-03 2016-05-10 Research In Motion Limited System and method for incorporating short message service (sms) and multimedia messaging service (mms) contacts into an instant messaging interface
US8832251B2 (en) * 2011-01-06 2014-09-09 Blackberry Limited System and method for enabling a peer-to-peer (P2P) connection
US20120197967A1 (en) * 2011-01-27 2012-08-02 Sivapathalingham Sivavakeesar Socializing System, Framework and Methods thereof
WO2012109657A2 (en) * 2011-02-11 2012-08-16 Ari Backholm Automatic provisioning of instant messaging and social networking services
US8909717B2 (en) * 2011-05-19 2014-12-09 Blackberry Limited Presenting instant messaging contacts listed by proximity to set location
US8958559B2 (en) * 2011-06-03 2015-02-17 Apple Inc. System and method for secure instant messaging
US10129211B2 (en) * 2011-09-15 2018-11-13 Stephan HEATH Methods and/or systems for an online and/or mobile privacy and/or security encryption technologies used in cloud computing with the combination of data mining and/or encryption of user's personal data and/or location data for marketing of internet posted promotions, social messaging or offers using multiple devices, browsers, operating systems, networks, fiber optic communications, multichannel platforms
CN103136472B (zh) * 2011-11-29 2016-08-31 腾讯科技（深圳）有限公司 一种防应用程序窃取隐私的方法及移动设备
EP2856383A1 (en) * 2012-04-05 2015-04-08 Thakker, Mitesh L. Systems and methods to input or access data using remote submitting mechanism
CN103379482A (zh) * 2012-04-26 2013-10-30 腾讯科技（深圳）有限公司 一种在通话过程中防止录音的方法及装置
US8948391B2 (en) 2012-11-13 2015-02-03 Lenovo Enterprise Solutions (Singapore) Pte. Ltd. Secure communication method
CN103152705B (zh) * 2013-02-04 2016-05-25 贵阳朗玛信息技术股份有限公司 短信的处理方法、装置及系统
US20140324995A1 (en) * 2013-04-27 2014-10-30 Xiaolong ZHANG Notifying a public user in instant messaging
US9935979B2 (en) * 2014-06-02 2018-04-03 Blackberry Limited System and method for assigning security levels for instant messaging contacts across device partitions
US9226147B2 (en) * 2014-06-02 2015-12-29 Blackberry Limited System and method of securing instant messaging sessions
US9462112B2 (en) * 2014-06-19 2016-10-04 Microsoft Technology Licensing, Llc Use of a digital assistant in communications
CN105933512B (zh) * 2014-09-23 2019-03-15 厦门美图移动科技有限公司 一种安全通话方法、装置和移动终端
US20160125155A1 (en) * 2014-10-31 2016-05-05 Paul Shelter Mobile application for reporting workplace injuries and/or for consulting for employee/personal healthcare issues
CN104333662A (zh) * 2014-11-14 2015-02-04 深圳市中兴移动通信有限公司 一种移动终端及其电话接听的加密方法和装置
CN104468988B (zh) * 2014-11-20 2016-04-06 努比亚技术有限公司 一种移动终端及其在非安全模式下的电话接听方法和装置
CN104980447A (zh) * 2015-07-07 2015-10-14 珠海赞友科技有限公司 一种聊天等信息网络安全传送的方法
US9591479B1 (en) 2016-04-14 2017-03-07 Wickr Inc. Secure telecommunications

Patent Citations (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN102045712A (zh) * 2011-01-04 2011-05-04 奇智软件（北京）有限公司 一种用于移动终端的防监听方法及系统
CN102955904A (zh) * 2011-08-18 2013-03-06 网秦无限（北京）科技有限公司 防止移动通讯设备泄密的方法和系统
US20130347084A1 (en) * 2012-06-20 2013-12-26 Futurewei Technologies, Inc. Security Mode for Mobile Communications Devices
CN104038614A (zh) * 2013-03-04 2014-09-10 德信无线通讯科技（北京）有限公司 一种安全手机的专有安全键
CN105323243A (zh) * 2015-09-22 2016-02-10 阿里巴巴集团控股有限公司 基于即时通讯的安全语音通讯方法及装置

Cited By (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US10432730B1 (en) 2017-01-25 2019-10-01 United States Of America As Represented By The Secretary Of The Air Force Apparatus and method for bus protection
US10296477B2 (en) 2017-03-30 2019-05-21 United States of America as represented by the Secretary of the AirForce Data bus logger
WO2019052465A1 (zh) * 2017-09-14 2019-03-21 西安中兴新软件有限责任公司 通话的方法及终端

Also Published As

Publication number Publication date
US10867065B2 (en) 2020-12-15
US20180253565A1 (en) 2018-09-06
CN105323243A (zh) 2016-02-10
HK1219585A1 (zh) 2017-04-07

Similar Documents

Publication Publication Date Title
WO2017050150A1 (zh) 基于即时通讯的安全语音通讯方法及装置
KR102327571B1 (ko) 영상 통화 데이터의 디스플레이
US11811827B2 (en) Securing endpoints for virtual meetings
EP3266192B1 (en) Communication system and method of using the same
US9263029B2 (en) Instant communication voice recognition method and terminal
US12339940B2 (en) Cross-device interaction method and terminal device
CN107409060A (zh) 在视频/音频电信中的邻近资源池化
US10609606B2 (en) Controlling a delivery of voice communications over a cellular data network or a wireless network based on user's profile
CN104335562A (zh) 从移动设备传送启动细节
CN103888600B (zh) 一种即时通信客户端
CN106303350A (zh) 一种多模式的视频通话方法及装置
CN108737765A (zh) 一种视频通话处理方法、装置、终端设备及存储介质
CN109994115B (zh) 通讯方法及装置、数据处理方法及设备
CN113993092A (zh) 一种紧急呼叫方法、装置、移动终端和网络侧设备
CN108809894B (zh) 一种网络电话处理的方法及终端
WO2015184877A1 (zh) 一种演示文档的操作方法和系统及控制装置、演示装置
EP3174244B1 (en) Video communication ending method and apparatus, computer program and recording medium
JP6458125B2 (ja) セキュリティチャットサービス提供方法、セキュリティチャットサービス提供システム、通信端末、及びチャットアプリケーション
CN105959952A (zh) 网络安全接入方法及装置
CN109964533B (zh) 用于提供对移动通信服务的访问的系统、用户设备和方法
WO2022166864A1 (zh) 通信建立方法、装置及存储介质
US20200296219A1 (en) Messaging for voip application and external apparatus
JP6642992B2 (ja) 通信システム、通信管理方法及び通信管理プログラム
KR102402412B1 (ko) 디지털 보조 장치를 이용한 음성 통화 서비스 시스템, 그 방법 및 컴퓨터 프로그램이 기록된 비휘발성 기록매체
US20210383398A1 (en) Methods, devices, and systems for mobile device operations during telephone calls

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 16848032

Country of ref document: EP

Kind code of ref document: A1

NENP Non-entry into the national phase

Ref country code: DE

122 Ep: pct application non-entry in european phase

Ref document number: 16848032

Country of ref document: EP

Kind code of ref document: A1