WO2018014555A1

WO2018014555A1 - Data transmission control method and apparatus

Info

Publication number: WO2018014555A1
Application number: PCT/CN2017/074503
Authority: WO
Inventors: 刘雪原
Original assignee: 中兴通讯股份有限公司
Priority date: 2016-07-18
Filing date: 2017-02-23
Publication date: 2018-01-25
Also published as: CN107635230A

Abstract

Provided in present application is a data transmission control method and apparatus, the method comprising: acquiring authentication data by means of a first network; on the basis of the authentication data, assessing the security of a second network to obtain assessment results; on the basis of the assessment results, controlling the transmission of data over a transmission channel, the transmission channel comprising: at least one of the first network and the second network.

Description

Data transmission control method and device

Technical field

The present disclosure relates to the field of communications, for example, to a data transmission control method and apparatus.

Background technique

The mobile terminal device in the related art usually accesses the Internet by connecting to a mobile network or a WIFI (Wireless Fidelity) network. Since the mobile network service provided by the communication service provider has a slow network speed and a relatively high tariff, the terminal device uses a WIFI network with a fast network speed and a low tariff to connect to the Internet. However, in life, especially in public places, access to the network through public WIFI hotspots is prone to the risk of tampering with access data due to WIFI hotspots being attacked by others or connected to malicious WIFI hotspots. Criminals can easily point websites that users need to visit to phishing sites. And many mobile terminals will automatically connect to the hotspot of the same name of the operator, without any confirmation process.

The mobile data used in the terminal is provided by the operator, and the mobile data is highly secure compared to the public hotspot. However, due to the tariff problem, the mobile data of most users in the related art is not suitable for transmitting a large amount of video, pictures, applications, and the like, which consumes a lot of resources.

When connecting to a WIFI hotspot through a wireless router, the wireless router needs to enable the firewall. At the same time, because the mobile terminal and the WIFI hotspot are not trusted, the firewall software should also be preset. Moreover, dangerous hotspots are identified by maintaining a database of untrusted IP (Internet Protocol, network interconnection control) and MAC (Media Access Control). At present, the solution to improve the security of WIFI hotspots must be transformed into a network. Whether it is a hotspot or a mobile terminal, the firewall function must be enabled, which will increase the cost. In addition, fake WIFI hotspots will not open the firewall. To identify the firewall, the mobile terminal must pre-collect a list of IP addresses that store forged WIFI hotspots. Therefore, in the case of transmitting data only through one type of network (for example, a WIFI hotspot), it is vulnerable to attack and the security of data transmission cannot be ensured.

In view of the low security of transmitting data through only one type of network in the related art, there is currently no effective solution.

Summary of the invention

The embodiment provides a data transmission control method and apparatus to solve at least the problem of low security of transmitting data through only one network in the related art.

According to an embodiment of the present disclosure, a data transmission control method is provided, including: obtaining authentication data through a first network; evaluating security of the second network according to the authentication data, obtaining an evaluation result; The evaluation result control data is transmitted on a transmission channel, wherein the transmission channel includes at least one of the first network and the second network.

Optionally, the security of the second network is evaluated according to the authentication data, and the obtaining the evaluation result includes: determining that an IP address obtained when accessing the predetermined website by using the second network corresponds to the predetermined website Whether the IP addresses carried in the authentication data are consistent; if the determination result is negative, determining that the evaluation result is that the second network is the first security level; or, if the determination result is yes, determining The evaluation result is that the second network is a second security level; wherein the security indicated by the first security level is lower than the security indicated by the second security level.

Optionally, if the evaluation result is that the security level of the second network is the first security level, controlling the data to be transmitted on the transmission channel according to the evaluation result includes: sending the indication The prompt information of the security level of the second network is the first security level; the response information is received in response to the prompt information, where the response information is used to indicate that the first network is selected as the transmission channel, or The response information is used to indicate that the first network and the second network are selected as the transmission channel; and when the response information is used to indicate that the first network is selected as the transmission channel, the control station Transmitting the data on the first network; or, if the response information is used to indicate that the first network and the second network are selected as the transmission channel, controlling the data in the A network and the second network are transmitted.

Optionally, controlling the data to be transmitted on the first network and the second network comprises: performing security verification on the second network by using the first network; and in case the verification is successful, the control station The data is transmitted on the second network.

Optionally, controlling the data to be transmitted on the first network and the second network, if the preset operation instruction is received, acquiring, by using the first network, the preset operation instruction Server address information; and in case the obtained server address information is consistent with the server address information carried by the authentication data, the data is controlled to be transmitted on the second network.

Optionally, controlling, according to the evaluation result, the data to be transmitted on the transmission channel, if the evaluation result is that the security level of the second network is a second security level, the control data is in the Transmission on the second network.

Optionally, the security of the first network is higher than the security of the second network.

Optionally, the first network includes: a mobile data network; and the second network includes: a WIFI network.

According to another embodiment of the present disclosure, there is provided a data transmission control apparatus, comprising: an acquisition module configured to acquire authentication data through a first network; and an evaluation module configured to perform a second network according to the authentication data The security is evaluated to obtain an evaluation result; and the control module is configured to control the transmission of the data on the transmission channel according to the evaluation result, wherein the transmission channel comprises: at least the first network and the second network One.

Optionally, the evaluation module includes: a determining unit, configured to determine whether an IP address obtained when accessing the predetermined website through the second network is consistent with an IP address carried in the authentication data corresponding to the predetermined website; a determining unit, configured to determine that the evaluation result is that the second network is a first security level if the determination result is negative; or, the second determining unit is configured to determine, in a case that the determination result is yes, The evaluation result is that the second network is a second security level; wherein the security indicated by the first security level is lower than the security indicated by the second security level.

According to another embodiment of the present disclosure, there is provided a data transmission control apparatus, comprising: an authentication data acquisition module configured to obtain authentication data through a mobile data network; and a WIFI security evaluation module configured to be based on the authentication data Evaluating the security of the currently connected WIFI hotspot to obtain an evaluation result; and the data transmission channel control module is configured to control the data to be transmitted on the transmission channel according to the evaluation result, wherein the transmission channel includes: the mobile data At least one of a network and the WIFI hotspot.

According to another embodiment of the present disclosure, there is provided a non-transitory computer readable storage medium storing computer executable instructions for performing the data transfer control method of any of the above.

Through the disclosure, the authentication data is obtained through the first network; the security of the second network is evaluated according to the authentication data, and the evaluation result is obtained; and the control data is transmitted on the transmission channel according to the evaluation result, wherein the transmission channel includes: At least one of the network and the second network, it can be seen that the security of the second network is evaluated according to the authentication data acquired from the first network by using the foregoing solution, and the data transmission channel is controlled according to the evaluation result, so The security of the transmitted data is improved, thereby solving the problem that the security of transmitting data through only one network in the related art is low.

BRIEF abstract

The accompanying drawings, which are set forth in the claims of the claims In the drawing:

1 is a block diagram showing the hardware structure of a mobile terminal of a data transmission control method according to this embodiment;

2 is a flowchart of a data transmission control method according to the embodiment;

3 is a block diagram 1 of a structure of a data transmission control apparatus according to the embodiment;

4 is a structural block diagram 2 of a data transmission control apparatus according to the embodiment;

FIG. 5 is a block diagram showing the structure of another data transmission control apparatus according to the present embodiment; FIG.

6 is a flowchart 1 of a data transmission control method according to this alternative embodiment;

FIG. 7 is a second flowchart of a data transmission control method according to this alternative embodiment.

detailed description

The present disclosure will be described in detail below with reference to the drawings in conjunction with the embodiments. It should be noted that the embodiments in the present application and the features in the embodiments may be combined with each other without conflict.

It is to be understood that the terms "first", "second", and the like in the specification and claims of the present disclosure are used to distinguish similar objects, and are not necessarily used to describe a particular order or order.

Example 1

The data transmission control method provided by this embodiment and the following embodiments may be performed in a mobile terminal, a computer terminal or the like. 1 is a block diagram of a hardware structure of a mobile terminal according to a data transmission control method of the present embodiment. As shown in FIG. 1, the mobile terminal 10 may include one or more (only shown in the figure). The processor 102 (the processor 102 may be a processing circuit including a microprocessor MCU or a programmable logic device FPGA, etc.), a memory 104 for storing data, and a transmission circuit 106 for communication functions. It will be understood by those skilled in the art that the structure shown in FIG. 1 is merely illustrative and does not limit the structure of the above electronic device. For example, the mobile terminal 10 may also include more or fewer components than those shown in FIG. 1, or have a different configuration than that shown in FIG.

The memory 104 can be used to store software programs and modules of the application software, such as program instructions/modules corresponding to the data transfer control method in the embodiment, and the processor 102 executes various types by running software programs and modules stored in the memory 104. Functional application and data processing, that is, the above method is implemented. Memory 104 may include high speed random access memory, and may also include non-volatile memory such as one or more magnetic storage devices, flash memory, or other non-volatile solid state memory. In some examples, memory 104 may be further memory that is remotely located relative to processor 102, which may be connected to mobile terminal 10 over a network. Examples of the above network may include the Internet, Enterprise intranet, local area network, mobile communication network and combinations thereof.

Transmission circuitry 106 is for receiving or transmitting data via a network. The network instance described above may include a wireless network provided by a communication provider of the mobile terminal 10. In one example, the transmission circuit 106 includes a Network Interface Controller (NIC) that can be connected to other network devices through a base station to communicate with the Internet. In one example, the transmission circuit 106 can be a Radio Frequency (RF) module, and the transmission circuit 106 is configured to communicate with the Internet wirelessly.

In the embodiment, a data transmission control method is provided. FIG. 2 is a flowchart of a data transmission control method according to the embodiment. As shown in FIG. 2, the process includes the following steps:

In step S210, the authentication data is obtained through the first network;

In step S220, the security of the second network is evaluated according to the authentication data, and an evaluation result is obtained;

In step S230, control data is transmitted on the transmission channel according to the evaluation result, wherein the transmission channel includes at least one of the first network and the second network.

Optionally, the foregoing data transmission control method may be applied to a scenario in which data is transmitted through a network connection. For example, it may be: connecting at least one of a WIFI hotspot transmission data and a connection mobile data transmission data.

Optionally, the foregoing data transmission control method may be applied to a mobile terminal, and may be, for example, a mobile phone, a tablet computer, a notebook computer, a smart wearable device, or the like.

Through the above steps, the authentication data is obtained through the first network; the security of the second network is evaluated according to the authentication data, and the evaluation result is obtained; and the control data is transmitted on the transmission channel according to the evaluation result, wherein the transmission channel includes: At least one of the network and the second network, it can be seen that the security of the second network is evaluated according to the authentication data acquired from the first network by using the foregoing solution, and the data transmission channel is controlled according to the evaluation result, so The security of the transmitted data is improved, thereby solving the problem that the security of transmitting data through only one network in the related art is low.

Optionally, in the foregoing step S220, the security of the second network may be evaluated according to the IP address carried in the authentication data. For example, it is determined whether the IP address obtained when accessing the predetermined website through the second network is consistent with the IP address carried in the authentication data corresponding to the predetermined website. If the determination result is negative, the evaluation result is determined to be the second network. The security level, or, in the case of the determination result being YES, determining that the evaluation result is that the second network is the second security level, wherein the security indicated by the first security level is lower than the security indicated by the second security level.

Optionally, in a case that the security level of the second network is the first security level, in the foregoing step S230, the security of the second network may be prompted to be lower, and the manner in which the data is transmitted is selected by the user. For example, sending prompt information indicating that the security level of the second network is the first security level, and receiving response information in response to the prompt information, wherein the response information is used to indicate that the first network is selected as the transmission channel, or the response information is used. Instructing to select the first network and the second network as the transmission channel, and in case the response information is used to indicate that the first network is selected as the transmission channel, the control data is transmitted on the first network; or, the response information is used to indicate the selection In the case where a network and a second network are transmission channels, control data is transmitted on the first network and the second network.

Optionally, the manner in which the control data is transmitted on the first network and the second network may include the following two types:

In the first method, the second network is authenticated by the first network, and in the case that the verification is successful, the control data is transmitted on the second network.

In the second mode, when the preset operation instruction is received, the server address information corresponding to the preset operation instruction is obtained through the first network, and the obtained server address information is consistent with the server address information carried in the authentication data, and is controlled. The data is transmitted on the second network.

Optionally, in the foregoing step S230, if the security level of the second network is high, the data may be controlled to be transmitted on the second network. For example, in the case that the evaluation result is that the security level of the second network is the second security level, the control data is transmitted on the second network.

Alternatively, the security of the first network may be higher than the security of the second network.

Optionally, the first network may include: a mobile data network; and the second network may include: a wireless fidelity WIFI network.

Example 2

In the embodiment, a data transmission control device is provided, which is used to implement the above-mentioned embodiments and optional embodiments, and has not been described again. As used below, the term "module" may implement a combination of software and/or hardware of a predetermined function. Although the devices described in the following embodiments may be implemented in software, hardware, or a combination of software and hardware, is also possible and contemplated.

FIG. 3 is a structural block diagram 1 of a data transmission control apparatus according to the embodiment. As shown in FIG. 3, the apparatus includes:

The obtaining module 32 is configured to obtain the authentication data by using the first network;

The evaluation module 34 is coupled to the acquisition module 32 and configured to secure the second network according to the authentication data. To conduct an assessment and obtain an assessment result;

The control module 36 is coupled to the evaluation module 34 and configured to control data transmission on the transmission channel according to the evaluation result, wherein the transmission channel comprises at least one of the first network and the second network.

Alternatively, the above data transmission control device may be applied to a scenario in which data is transmitted through a network connection. For example, connecting a WIFI hotspot to transmit data and connecting to a mobile data network to transmit data.

Optionally, the data transmission control device may be applied to a mobile terminal, such as a mobile phone, a tablet computer, a notebook computer, a smart wearable device, or the like.

The obtaining module obtains the authentication data through the first network, the evaluation module evaluates the security of the second network according to the authentication data, and obtains the evaluation result; the control module controls the data to be transmitted on the transmission channel according to the evaluation result, where The transmission channel includes: at least one of the first network and the second network, and thus, the security of the second network is evaluated according to the authentication data acquired from the first network by using the foregoing solution, and the data is compared according to the evaluation result. The transmission channel is controlled, thereby improving the security of transmitting data, thereby solving the problem of low security in transmitting data only through one network in the related art.

FIG. 4 is a block diagram showing the structure of a data transmission control apparatus according to the present embodiment. As shown in FIG. 4, optionally, the evaluation module 34 includes:

The determining unit 42 is configured to determine whether the IP address obtained when accessing the predetermined website through the second network is consistent with the IP address carried in the authentication data corresponding to the predetermined website;

The first determining unit 44 is coupled to the determining unit 42 and configured to determine that the evaluation result is that the second network is the first security level if the determination result is negative; or

The second determining unit 46 is coupled to the determining unit 42 and configured to determine that the evaluation result is that the second network is the second security level if the determination result is yes;

The security indicated by the first security level is lower than the security indicated by the second security level.

Optionally, the foregoing control module 36 is configured to: send, when the evaluation result is that the security level of the second network is the first security level, prompt information indicating that the security level of the second network is the first security level; And responsive to the response information of the prompt information, wherein the response information is used to indicate that the first network is selected as the transmission channel, or the response information is used to indicate that the first network and the second network are selected as the transmission channel; and the response information is used to indicate the selection In a case where the network is a transmission channel, the control data is transmitted on the first network; or, in the case where the response information is used to indicate that the first network and the second network are selected as the transmission channel, the control data is in the first network and the second Transmission on the network.

Optionally, the foregoing control module 36 is configured to perform a security check on the second network by using the first network. In the case where the verification is successful, the control data is transmitted on the second network.

Optionally, the foregoing control module 36 is configured to: obtain, by using the first network, server address information corresponding to the preset operation instruction, and obtain the server address information and the server carried by the authentication data, when the preset operation instruction is received; In the case where the address information is consistent, the control data is transmitted on the second network.

Optionally, the foregoing control module 36 is configured to: when the evaluation result is that the security level of the second network is the second security level, the control data is transmitted on the second network.

Optionally, the first network may include: a mobile data network; and the second network may include, but is not limited to, a wireless fidelity WIFI network.

It should be noted that the foregoing modules may be implemented by software or hardware. For the latter, the foregoing modules may be implemented by: the foregoing modules are all located in the same processor; or, the modules are respectively located in multiple processors.

Example 3

In the embodiment, a data transmission control device is further provided. FIG. 5 is a structural block diagram of another data transmission control device according to the embodiment. As shown in FIG. 5, the device includes:

The authentication data obtaining module 52 is configured to obtain authentication data through the mobile data network;

The WIFI security evaluation module 54 is coupled to the authentication data obtaining module 52, and is configured to evaluate the security of the currently connected WIFI hotspot according to the authentication data, and obtain an evaluation result;

The data transmission channel control module 56 is coupled to the WIFI security evaluation module 54 and configured to control data transmission on the transmission channel according to the evaluation result, wherein the transmission channel includes at least one of a mobile data network and a WIFI hotspot.

Optionally, the authentication data obtaining module is configured to acquire specific authentication data by using the mobile data with higher credibility.

Optionally, the WIFI security evaluation module is configured to determine the security of the current WIFI hotspot after the user connects to the WIFI hotspot, obtain the authentication data through the authentication data obtaining module, and evaluate the security of the current connection in real time when the user performs the security operation. .

Optionally, the data transmission channel control module is configured to adjust the channel of the data transmission according to the current service requirement, and can control the data to be simultaneously transmitted only through the wireless data or only through the WIFI or the mobile data and the WIFI. The module requests a data transmission channel from the system according to the data transmission mode required by the current service. Android (Android) system is set to enable WIFI by default when mobile data is transmitted simultaneously with WIFI. After the data is paused, the module will call the system preset interface to re-open the mobile data and control the data transmission channel through the iptable.

The above modules can be implemented by software or hardware. For the latter, the modules can be implemented in the following manner: the modules are all located in the same processor; or the modules are respectively located in multiple processors.

The following is a detailed description in conjunction with this alternative embodiment.

The optional embodiment provides a method for simultaneously networking using WIFI and mobile data to solve network security problems. A large amount of data transmission is still carried out by means of WIFI, and security inspection is carried out by moving data. The optional embodiment mainly uses the mobile terminal WIFI and mobile data to complete the secure transmission of data, and does not need to modify the wireless public hotspot. The method provided by the optional embodiment can solve the problem that the user's Internet security is greatly improved in a low-cost situation, and only a small amount of mobile data traffic is consumed, which can greatly improve the security of the Internet.

The optional embodiment uses the data transmission control method in the alternative embodiment by using a terminal device to connect to a public WIFI hotspot as an example. FIG. 6 is a flowchart 1 of a data transmission control method according to the present optional embodiment. As shown in FIG. 6, the process includes the following steps:

In step S601, when the user connects to the WIFI hotspot, the data transmission channel control module simultaneously performs data transmission through the mobile data and the WIFI hotspot.

In step S602, the authentication data obtaining module acquires corresponding authentication data by using the mobile data, and the authentication data may be a domain name, an IP address, a key file MD5 (Message-Digest Algorithm 5) value of the website, and the like. Wait. The authentication data obtained according to the required security level set by the user is different. If the user setting requires the detection of the general security, the authentication data only obtains the user's common website authentication data; if the low security detection is set, only Obtain authentication data of websites required for sensitive operations such as online banking and shopping; if high security detection is set, the authentication data of websites that may be used by users may be increased accordingly.

In step S603, the WIFI security evaluation module evaluates the current WIFI security according to the authentication data acquired in step S601. The evaluation method may be to check whether the IP address obtained by accessing the specific website through the WIFI hotspot is consistent with the record recorded in the authentication data. According to the results of the security assessment, users are reminded to pay attention to Internet security.

In step S604, the data transmission channel control module controls whether the data is transmitted through WIFI according to the security evaluation result. If the assessment is safe, the data is all transmitted via WIFI, if the evaluation is When there is risk, keep the mobile data and WIFI coexist, and if necessary, re-verify by moving the data.

For WIFI hotspots with low security results, users can send prompts to users when performing sensitive operations. The optional embodiment further provides a data transmission control method in a case where the security of the WIFI hotspot is low. FIG. 7 is a second flowchart of a data transmission control method according to this alternative embodiment. As shown in FIG. 7, the process includes the following steps:

In step S701, in a network environment where the WIFI hotspot evaluation result is low in security, the sensitive operation that the user needs to perform is reminded. Let the user choose to transmit all data by mobile data during transmission or to perform security verification during transmission.

In step S702, the data transmission channel control module controls the data transmission channel to transmit only through the mobile data or through the mobile data and the WIFI data according to the user selection.

In step S703, when the mobile data and the WIFI data are transmitted together, the WIFI security evaluation module obtains the server address information that needs to be accessed through the mobile data when the user needs to access the network, and is not deceived by the DNS (Domain Name System). attack.

By detecting the security of the WIFI hotspot through the mobile data, the security of the user network operation can be greatly improved when a small amount of data traffic is consumed. At the same time, these security detection operations are performed in the background, and will not affect the user experience. Only when there is a problem in the security of the WIFI network environment will the user be reminded.

Two alternative scenarios of data transmission control are also provided in this alternative embodiment.

In scenario 1, the user connects to the public WIFI to perform a shopping operation, and according to the security level set by the user, the current WIFI hotspot is authenticated through the disclosure, and the IP address of the shopping website A obtained through the hotspot is tampered with, and actually points to a phishing website. . The data transmission control provided by the alternative embodiment can remind the user to avoid operating at the shopping website A when using the hotspot.

In scenario 2, the user connects to a public WIFI hotspot to access the Internet, and the online banking transfer request is generated during use. Since the security of the hotspot is not high when the WIFI hotspot is connected through the present disclosure, the data transmission control provided by the alternative embodiment may prompt the user that there may be a risk in the transfer process, and whether the mobile data is only used during the transfer operation. data transmission.

Example 4

Through the description of the above embodiments, those skilled in the art can clearly understand that the method according to the above embodiments can be implemented by means of software plus a necessary general hardware platform, and of course, by hardware. Based on such understanding, the technical solution of the present disclosure may be embodied in the form of a software product in essence or in a contribution to the related art, and the computer software product is stored in one storage. A storage medium (such as a ROM/RAM, a magnetic disk, an optical disk) includes a plurality of instructions for causing a terminal device (which may be a mobile phone, a computer, a server, or a network device, etc.) to perform the method described in various embodiments of the present disclosure. .

Embodiments of the present disclosure also provide a storage medium. Optionally, in the embodiment, the foregoing storage medium may be configured to store program code for performing the following steps:

In S1, the authentication data is obtained through the first network;

In S2, the security of the second network is evaluated according to the authentication data, and the evaluation result is obtained;

In S3, control data is transmitted on the transmission channel according to the evaluation result, wherein the transmission channel includes at least one of the first network and the second network.

Optionally, in this embodiment, the foregoing storage medium may include: a USB flash drive, a read-only memory (ROM), a random access memory (RAM), a mobile hard disk, a magnetic disk, or A variety of media such as optical discs that can store program code.

Optionally, in this embodiment, the processor executes the method steps described in the foregoing embodiments according to the stored program code in the storage medium.

For example, the examples in this embodiment may refer to the examples described in the foregoing embodiments and the optional embodiments, and details are not described herein again.

The embodiment further provides a non-transitory computer readable storage medium storing computer executable instructions for executing the data transmission control method of any of the above embodiments.

Those skilled in the art will appreciate that the above-described modules or steps of the present disclosure may be implemented in a general-purpose computing device, which may be centralized on a single computing device or distributed over a network of multiple computing devices, optionally They may be implemented by program code executable by a computing device such that they may be stored in a storage device for execution by the computing device and, in some cases, may be performed in a different order than that illustrated herein or The steps described are either made separately into a plurality of integrated circuit modules, or a plurality of modules or steps are fabricated as a single integrated circuit module. As such, the disclosure is not limited to any specific combination of hardware and software.

The above description is only an alternative embodiment of the present disclosure, and is not intended to limit the disclosure, and various changes and modifications may be made to the present disclosure.

Industrial applicability

The disclosure obtains the authentication data through the first network; the security of the second network is evaluated according to the authentication data, and the evaluation result is obtained; and the control data is transmitted on the transmission channel according to the evaluation result, wherein the transmission channel includes: the first network and At least one of the second networks, it can be seen that the above solution is adopted The security of the second network is evaluated according to the authentication data obtained from the first network, and the data transmission channel is controlled according to the evaluation result, thereby improving the security of the transmitted data, thereby solving the related art only A problem of low security of network transmission data.

Claims

A data transmission control method includes:

Obtaining authentication data through the first network;

Assessing the security of the second network according to the authentication data, and obtaining an evaluation result;

Control data is transmitted on the transmission channel according to the evaluation result, wherein the transmission channel includes at least one of the first network and the second network.
The method according to claim 1, wherein the security of the second network is evaluated according to the authentication data, and the evaluation result is obtained by:

Determining whether the IP address obtained by accessing the predetermined website through the second network is consistent with the IP address carried in the authentication data corresponding to the predetermined website;

If the determination result is negative, determining that the evaluation result is that the second network is the first security level; or

If the determination result is yes, determining that the evaluation result is that the second network is a second security level;

The security indicated by the first security level is lower than the security indicated by the second security level.
The method according to claim 2, wherein, in a case where the evaluation result is that the security level of the second network is the first security level, the data is controlled to be transmitted on the transmission channel according to the evaluation result. include:

Sending prompt information indicating that the security level of the second network is the first security level;

Receiving response information in response to the prompt information, wherein the response information is used to indicate that the first network is selected as the transmission channel, or the response information is used to indicate selection of the first network and the The second network is the transmission channel;

And controlling, when the response information is used to select the first network as the transmission channel, to transmit the data on the first network; or

And controlling the data to be transmitted on the first network and the second network if the response information is used to indicate that the first network and the second network are selected as the transmission channel.
The method of claim 3 wherein controlling the transmission of the data on the first network and the second network comprises:

Performing security verification on the second network through the first network;

In case the verification is successful, the data is controlled to be transmitted on the second network.
The method of claim 3 wherein said data is controlled at said first network and said The transmission on the second network includes:

Obtaining, by the second network, server address information corresponding to the preset operation instruction, in a case that a preset operation instruction is received;

And if the obtained server address information is consistent with the server address information carried by the authentication data, the data is controlled to be transmitted on the second network.
The method of claim 2, wherein controlling the transmission of the data on the transmission channel based on the evaluation result comprises:

In the case where the evaluation result is that the security level of the second network is the second security level, the control data is transmitted on the second network.
The method of any of claims 1 to 6, wherein the security of the first network is higher than the security of the second network.
The method according to any one of claims 1 to 6, wherein

The first network includes: a mobile data network;

The second network includes: a wireless fidelity WIFI network.
A data transmission control device includes:

Obtaining a module, configured to obtain authentication data through the first network;

An evaluation module, configured to evaluate the security of the second network according to the authentication data, to obtain an evaluation result;

And a control module configured to control data transmission on the transmission channel according to the evaluation result, wherein the transmission channel comprises: at least one of the first network and the second network.
The apparatus of claim 9 wherein said evaluating module comprises:

The determining unit is configured to determine whether the IP address obtained when accessing the predetermined website through the second network is consistent with the IP address carried in the authentication data corresponding to the predetermined website;

a first determining unit, configured to determine, in a case that the determination result is negative, that the evaluation result is that the second network is a first security level; or

a second determining unit, configured to determine, in a case that the determination result is yes, that the evaluation result is that the second network is a second security level;

The security indicated by the first security level is lower than the security indicated by the second security level.
A data transmission control device includes:

The authentication data obtaining module is configured to obtain the authentication data through the mobile data network;

The WIFI security evaluation module is configured to evaluate the security of the currently connected WIFI hotspot according to the authentication data, and obtain an evaluation result;

And a data transmission channel control module, configured to control data transmission on the transmission channel according to the evaluation result, wherein the transmission channel comprises: at least one of the mobile data network and the WIFI hotspot.
A non-transitory computer readable storage medium storing computer executable instructions for performing the method of any of claims 1-8.