WO2018036233A1

WO2018036233A1 - Information processing method, device and computer storage medium

Info

Publication number: WO2018036233A1
Application number: PCT/CN2017/086016
Authority: WO
Inventors: 宋云霞
Original assignee: 深圳市中兴微电子技术有限公司
Priority date: 2016-08-22
Filing date: 2017-06-16
Publication date: 2018-03-01
Also published as: CN107770137A

Abstract

Disclosed in the embodiments of the present invention are an information processing method, device and computer storage medium, the method comprising: receiving user identity information sent by a first server; verifying the user identity information, and sending a verification result to the first server; receiving a determination result of a terminal device sent by the first server if the user identity information is verified successfully; receiving an operation request sent by the first server if the terminal device meets a preset condition; and determining whether a first operation corresponding to the operation request is within a preset permission, and sending a determination result of whether the first operation is within the preset permission to the first server.

Description

Information processing method, device and computer storage medium

Cross-reference to related applications

The present application is based on a Chinese patent application filed on Jan. 22, 2016, the filing date of

Technical field

The present invention relates to information processing technologies in the field of communications, and in particular, to an information processing method, apparatus, and computer storage medium.

Background technique

With the rapid development of Internet technology and the increasing popularity of various intelligent mobile terminals, the development and application based on intelligent mobile terminals has been greatly promoted, especially the development and application of intelligent mobile terminals in the mobile office process. Mobile conferences are the main form of important decisions made by each management department and each work link of each company. At present, the main form of mobile conferences is that the conference server controls the terminals of all participants, and realizes the transmission of audio or video inside the conference network or video. Sharing, etc. In the existing solution for improving the security of the conference server, the key is used to improve the security of the data transmission or the structure of the conference server to ensure the security of the conference when the terminal and the conference server transmit data.

However, in the conference solution in the prior art solution, when the conference participant accesses the external network or the company network through the conference server, it is easy for the virus program to obtain the control of the conference server to cause the server to be attacked, or when the conference personnel access the internal data of the company, The risk of leakage of important information of the company seriously affects the information security of the office system.

Summary of the invention

The embodiment of the invention provides an information processing method, a device and a computer storage medium, which can effectively solve the data leakage problem existing in the existing conference scheme.

The technical solution of the embodiment of the present invention is implemented as follows:

In a first aspect, an embodiment of the present invention provides an information processing method, where the method includes:

Receiving user identity information sent by the first server;

Verifying the user identity information and transmitting the verification result to the first server;

Receiving, by the first server, a determination result of the terminal device, if the user identity information is successfully verified;

Receiving an operation request sent by the first server, if the terminal device meets a preset condition;

Determining whether the first operation corresponding to the operation request is within the preset authority, and sending the determination result that the first operation is within the preset authority to the first server.

In an embodiment, the verifying the user identity information and sending the verification result to the first server includes:

Determining whether the user identity information is in the preset identity information, and sending the determination result to the first server;

If the user identity information is in the preset identity information, determining that the user identity information is successfully verified.

In an embodiment, the method further includes:

Obtaining the preset identity information, and storing the preset identity information.

The embodiment of the present invention provides a computer readable medium, where the computer readable medium stores executable instructions, and the executable instructions are used to execute the information processing method according to the embodiment of the present invention.

In a second aspect, an embodiment of the present invention provides an information processing method, where the method includes:

Obtaining user identity information, and sending the user identity information to the second server;

Receiving a verification result of the user identity information sent by the second server;

If the user identity information is successfully verified, determining whether the terminal device meets the preset condition, and sending the determination result to the second server;

Receiving, by the terminal device, an operation request sent by the terminal device, and forwarding the operation request to the second server;

Receiving a determination result of the operation request sent by the second server, if the first operation corresponding to the operation request is within the preset authority, performing the first operation.

In an embodiment, the method further includes:

If the verification of the user identity information fails, an alarm message is generated.

In an embodiment, if the user identity information is successfully verified, determining whether the terminal device meets the preset condition includes:

Obtaining identification information of the terminal device if the user identity information is successfully verified;

And determining, according to the identifier information, whether the terminal device meets the preset condition.

In an embodiment, the determining, according to the identifier information, whether the terminal device meets a preset condition, includes:

Determining whether the identification information matches the preset identification information;

And if the identifier information matches the preset identifier information, determining that the terminal device meets a preset condition.

The embodiment of the present invention further provides a computer readable medium, where the computer readable medium stores executable instructions, and the executable instructions are used to execute the information processing method according to the embodiment of the present invention.

In a third aspect, an embodiment of the present invention provides an information processing apparatus, where the apparatus includes: a first receiving unit, a first sending unit, a second receiving unit, a third receiving unit, and a first processing unit; wherein:

The first receiving unit is configured to receive user identity information sent by the first server;

The first sending unit is configured to verify the user identity information, and send a verification result to the first server;

The second receiving unit is configured to: if the user identity information is successfully verified, receive a determination result of the terminal device sent by the first server;

The third receiving unit is configured to receive an operation request sent by the first server if the terminal device meets a preset condition;

The first processing unit is configured to determine whether the first operation corresponding to the operation request is within the preset authority, and send the determination result that the first operation is within the preset authority to the first server.

In an embodiment, the first sending unit includes: a first determining module and a processing module; wherein:

The first determining module is configured to determine whether the user identity information is in the preset identity information, and send the determination result to the first server;

The processing module is configured to determine that the terminal device is successfully verified if the user identity information is in the preset identity information.

In an embodiment, the apparatus further includes an acquisition unit; wherein:

The acquiring unit is configured to acquire the preset identity information, and store the preset identity information.

In a fourth aspect, an embodiment of the present invention provides an information processing apparatus, where the apparatus includes: a second processing unit, a fourth receiving unit, a determining unit, a second sending unit, a third processing unit, and a fourth processing unit; wherein:

The second processing unit is configured to acquire user identity information, and send the user identity information to the second server;

The fourth receiving unit is configured to receive the user identity sent by the second server The verification result of the information;

The determining unit is configured to determine, if the user identity information is successfully verified, whether the terminal device meets a preset condition;

The second sending unit is configured to send a determination result to the second server;

The third processing unit is configured to: if the terminal device meets a preset condition, receive an operation request sent by the terminal device, and forward the operation request to the second server;

The fourth processing unit is configured to receive a determination result of the operation request sent by the second server, and if the first operation corresponding to the operation request is within the preset authority, perform the first operation.

In an embodiment, the apparatus further includes: a generating unit; wherein:

The generating unit is configured to generate an alarm message if the verification of the user identity information fails.

In an embodiment, the determining unit includes: an obtaining module and a second determining module; wherein:

The acquiring module is configured to acquire the identifier information of the terminal device if the user identity information is successfully verified;

The second determining module is configured to determine, according to the identifier information, whether the terminal device meets the preset condition.

In an embodiment, the second determining module is further configured to determine whether the identifier information matches the preset identifier information; if the identifier information matches the preset identifier information, determining that the terminal device is consistent Preset conditions.

The information processing method and device and the computer storage medium provided by the embodiment of the present invention, after receiving the user identity information sent by the first server, the second server verifies the user identity information, and sends the verification result to the first server, if the user identity information If the verification succeeds, the first server determines whether the terminal device meets the preset condition. If the terminal device meets the preset condition, the first server receives the operation request sent by the terminal device and forwards the operation request to the second server, and then the second server determines the operation. Whether the first operation corresponding to the request is within the preset authority, and the determination result of whether the first operation is within the preset authority is sent to the first server, so that the first server can execute the first operation when the first operation is within the preset authority In this way, the security server can judge the authority of the operation request sent by the terminal device under the premise that the identity information of the participating conference personnel is legal and the terminal device is reliable, thereby ensuring the security of the participating conference personnel and the terminal used for the conference. The reliability of the device can further monitor the operations of the participating conference personnel, effectively solve the data leakage problem existing in the existing conference solution, thereby reducing the risk of data leakage and improving the information security of the office system.

DRAWINGS

1 is a schematic flowchart of an information processing method according to an embodiment of the present invention;

FIG. 2 is a schematic flowchart diagram of another information processing method according to an embodiment of the present disclosure;

FIG. 3 is a schematic flowchart diagram of still another information processing method according to an embodiment of the present disclosure;

FIG. 4 is a schematic flowchart diagram of still another information processing method according to an embodiment of the present disclosure;

FIG. 5 is a schematic structural diagram of a system according to an embodiment of the present disclosure;

FIG. 6 is a schematic structural diagram of an information processing apparatus according to an embodiment of the present disclosure;

FIG. 7 is a schematic structural diagram of another information processing apparatus according to an embodiment of the present disclosure;

FIG. 8 is a schematic structural diagram of still another information processing apparatus according to an embodiment of the present disclosure;

FIG. 9 is a schematic structural diagram of an information processing apparatus according to another embodiment of the present invention;

FIG. 10 is a schematic structural diagram of another information processing apparatus according to another embodiment of the present invention;

FIG. 11 is a schematic structural diagram of still another information processing apparatus according to another embodiment of the present invention.

detailed description

The technical solutions in the embodiments of the present invention will be clearly and completely described in the following with reference to the accompanying drawings.

An embodiment of the present invention provides an information processing method. Referring to FIG. 1, the method includes the following steps:

Step 101: Receive user identity information sent by the first server.

Specifically, the step 101 of receiving the user identity information sent by the first server may be implemented by the second server. The user identity information may be fingerprint information, iris information, face recognition information, and the like of the participating conference personnel. The first server can be a conference server and the second server can be a secure server.

Step 102: Verify user identity information, and send the verification result to the first server.

Specifically, step 102 validates the user identity information and sends the verification result to the first server, which can be implemented by the second server. The second server may perform matching analysis on the received user identity information with the preset identity information in the preset identity information database to verify the user identity information.

Step 103: If the user identity information is successfully verified, receiving a determination result of the terminal device sent by the first server.

Specifically, if the user identity information is successfully verified in step 103, the determination result of receiving the terminal device sent by the first server may be implemented by the second server. After the user identity information is successfully verified, the conference server can determine the reliability of the terminal device, and send the determination result to the security server, which can be implemented by determining whether the terminal device meets the preset condition.

Step 104: Receive an operation request sent by the first server if the terminal device meets the preset condition.

Specifically, if the terminal device meets the preset condition, the operation request sent by the first server may be implemented by the second server. The operation request is sent by the participating conference personnel to the conference server by using the terminal device, and the operation request may be sent by the participating conference personnel by voice, touch screen, keyboard input, or the like.

Step 105: Determine whether the first operation corresponding to the operation request is within the preset authority, and send the determination result of whether the first operation is within the preset authority to the first server.

Specifically, step 105 determines whether the first operation corresponding to the operation request is within the preset authority, and sends the determination result of whether the first operation is within the preset authority to the first server, and may be performed by the second The server is implemented. The conference server can run in a secure environment with a processor with security isolation function, and can manage the conference process and store conference information, be responsible for reliability authentication and login of the terminal device, update stored conference records and data, and update user identity information. A mobile router can also be integrated in the conference server to form a local area network between the terminal device that can log in to the conference server and the conference server. The preset authority may be an operation that is allowed to be performed in advance according to the company's confidentiality regulations, and the preset authority may restrict the permission of some operation requests, and may be stored in the security server.

In the information processing method provided by the embodiment of the present invention, the second server receives the user identity information sent by the first server and verifies the user identity information, and then sends the verification result to the first server, and when the user identity information is successfully verified, receiving The judgment result of the terminal device sent by the first server, when the terminal device also meets the preset condition, receives an operation request sent by the first server, and determines whether the first operation corresponding to the operation request is within the preset authority, and then the first Whether the operation result is sent to the first server in the preset authority, so that the first server can perform the first operation when the first operation is within the preset authority; thus, the security server can be legal in the identity information of the participating conference personnel. On the premise that the terminal device is reliable, the authority of the operation request sent by the terminal device is judged to ensure the security of the participants and the reliability of the terminal device used for the conference, thereby monitoring the operation of the participating conference personnel and effectively solving the problem. Information leaks in existing conference programs , Thereby reducing the risk of data leakage, improve information security office system.

An embodiment of the present invention provides an information processing method. Referring to FIG. 2, the method includes the following steps:

Step 201: Acquire user identity information, and send user identity information to the second server.

Specifically, step 201 acquires user identity information, and sending the user identity information to the second server may be implemented by the first server.

Step 202: Receive a verification result of user identity information sent by the second server.

Specifically, the verification result that the step 202 receives the user identity information sent by the second server may be implemented by the first server.

Step 203: If the user identity information is successfully verified, determine whether the terminal device meets the preset condition, and send the determination result to the second server.

Specifically, if the user identity information is successfully verified in step 203, it is determined whether the terminal device meets the preset condition, and the sending of the determination result to the second server may be implemented by the first server. The terminal device that meets the preset condition may be a security intelligent terminal based on the TrustZone technology produced by a specific manufacturer, for example, a security intelligent terminal such as a smart phone or a tablet computer.

Step 204: If the terminal device meets the preset condition, receive an operation request sent by the terminal device and forward the request to the second server.

Specifically, in step 204, if the terminal device meets the preset condition, receiving the operation request sent by the terminal device and forwarding to the second server may be implemented by the first server.

Step 205: Receive a determination result of the operation request sent by the second server, and if the first operation corresponding to the operation request is within the preset authority, perform the first operation.

Specifically, the step 205 receives the determination result of the operation request sent by the second server. If the first operation corresponding to the operation request is within the preset authority, the performing the first operation may be implemented by the second server. The security server can run in a secure environment with a processor with security isolation. It can securely monitor all conference servers in the company and collect all conference information. The security server has the highest operational authority and can operate conference records (such as deleting Or finding, etc., when it is found that a terminal device connected to the conference server has a confidential behavior, it may issue an alarm, terminate the conference, or conduct internal company notification according to the confidentiality level corresponding to the confidentiality behavior of the terminal device. After the conference server receives the judgment result of the operation request sent by the security server, the conference server performs the operation The processing flow corresponding to the request judgment result is sent, and the judgment result of the operation request can be sent to the terminal device, so that the user can know whether the first operation corresponding to the operation request initiated by the user can be performed. The judgment result of the operation request may be that the authority of the first operation is within the preset authority, or the authority of the first operation may exceed the preset authority.

In the information processing method provided by the embodiment of the present invention, the first server receives the user identity information and sends the user identity information to the second server, and then receives the verification result of the user identity information sent by the second server, and when the user identity information is successfully verified, Determining whether the terminal device meets the preset condition and sending the determination result to the second server, receiving the operation request sent by the terminal device and forwarding the operation request to the second server when the terminal device meets the preset condition, and finally receiving the operation request sent by the second server As a result of the judgment, if the first operation corresponding to the operation request is within the preset authority, the first operation is performed; thus, the security server may perform the operation on the terminal device under the premise that the identity information of the participating conference personnel is legal and the terminal device is reliable. The requested authority is judged to ensure the security of the participants and the reliability of the terminal equipment used for the conference, and thus the operation of the participating conference personnel can be monitored, and the data leakage problem existing in the existing conference scheme can be solved, thereby reducing the data. The risk of being leaked, Information security high office system.

An embodiment of the present invention provides an information processing method. Referring to FIG. 3, the method includes the following steps:

Step 301: The first server acquires user identity information, and sends the user identity information to the second server.

Specifically, after the conference participant opens the conference application in the terminal device and switches to the security interface, the terminal device may send a communication request message to the conference server, and establish a communication connection with the conference server after receiving the response information of the conference server for the communication request message. After the terminal device can To send the user identity information to the first server, and the first server forwards the user identity information to the second server, for example, the communication request message may be a hello message. After the conference server establishes a connection with the terminal device, the command for collecting the identity information of the user may be sent to the user identity information collection device to collect the identity information of the user. For example, the user identity information is the fingerprint information of the user, and the user identity information collection device may be a fingerprint collection device. The fingerprint collection device sends the fingerprint information of the participant to the conference server, and then the conference server can send the fingerprint information of the participant to the conference. server.

Step 302: The second server receives user identity information sent by the first server.

Step 303: The second server verifies the user identity information, and sends the verification result to the first server.

Step 304: The first server receives a verification result of the user identity information sent by the second server.

Step 305: If the user identity information is successfully verified, the first server determines whether the terminal device meets the preset condition, and sends the determination result to the second server.

Specifically, if the user identity information matches the preset identity information, the user identity information of the participant is successfully verified, and the first server may determine whether the terminal device meets the preset condition.

Step 306: The second server receives a determination result of the terminal device sent by the first server.

Step 307: If the terminal device meets the preset condition, the first server receives the operation request sent by the terminal device and forwards the request to the second server.

Specifically, the security server receives the judgment result of the terminal device sent by the conference server that the terminal device meets the preset condition, that is, the terminal device is reliable, and the security server continues to receive the operation request sent by the conference server. For example, after receiving the operation request sent by the user, the terminal device may encrypt and transmit the operation request to the conference server by using the private key of the user, and the conference server decrypts the encrypted operation request by using the public key of the terminal device to obtain the operation request. The operation request is then forwarded to the secure server.

Step 308: The second server receives an operation request sent by the first server.

Step 309: The second server determines whether the first operation corresponding to the operation request is within the preset authority, and sends the determination result of whether the first operation is within the preset authority to the first server.

Specifically, the user needs to access the first file and the second file in the remote computer as an example: the conference server sends an operation request for accessing the first file and the second file in the remote computer to the security server, and the security server determines the conference. Whether the server can remotely log in to the computer, if the security server determines that the computer can log in remotely, the conference server is notified that the computer can log in to the computer, and then the conference server establishes a communication connection with the computer; meanwhile, the security server determines whether the first file and the second file are Allow access and send the judgment to the conference server.

Step 310: The first server receives a determination result of the operation request sent by the second server, and if the first operation corresponding to the operation request is within the preset authority, performing the first operation.

Specifically, if the first operation corresponding to the operation request is not within the preset authority, the first server generates the alarm information. If the access right of the first file is within the preset permission range, the conference server drives the projection device to project the first file onto the large screen or send to the terminal device; if the access right of the second file exceeds the range of the preset permission The second file is not allowed to access the confidential file. At this time, the security server stores the record and sends the information that the second file does not allow access to the conference server. After receiving the information, the conference server generates an alarm message to drive the alarm. The system alarms and drives the projection device to project the cause of the alarm onto a large screen or to the terminal device.

It should be noted that the description of the same steps or concepts in the other embodiments may be referred to in other embodiments, and details are not described herein again.

According to the information processing method provided by the embodiment of the present invention, after receiving the user identity information sent by the first server, the second server verifies the user identity information, and sends the verification result to the first service. If the user identity information is successfully verified, the first server determines whether the terminal device meets the preset condition. If the terminal device meets the preset condition, the first server receives the operation request sent by the terminal device and forwards the request to the second server, and then the second The server determines whether the first operation corresponding to the operation request is within the preset authority, and sends the determination result of whether the first operation is within the preset authority to the first server, so that the first server may be within the preset authority when the first operation is The first operation is performed. In this way, the security server can judge the authority of the operation request sent by the terminal device under the premise that the identity information of the participating conference personnel is legal and the terminal device is reliable, thereby ensuring the security of the participating conference personnel and participating in the conference. The reliability of the terminal device can further monitor the operation of the participating conference personnel, and can effectively solve the problem of data leakage in the existing conference solution, thereby reducing the risk of data leakage and improving the information security of the office system.

An embodiment of the present invention provides an information processing method. Referring to FIG. 4, the method includes the following steps:

Step 401: The first server acquires user identity information, and sends the user identity information to the second server.

Step 402: The second server receives user identity information sent by the first server.

Step 403: The second server acquires preset identity information, and stores preset identity information.

Specifically, the preset identity information may be the identity information of all the employees of the company, and may be obtained by the conference server controlling the user identity information collection device, and the conference server may store the collected user identity information in a non-secure security. In the volatile database.

Step 404: The second server determines whether the user identity information is in the preset identity information, and sends the determination result to the first server.

Specifically, for example, the user identity information is fingerprint information, and the security server can retrieve the pre-stored finger. The feature value of the fingerprint information in the database is compared with the fingerprint information feature value of the participating conference personnel and the fingerprint information feature value in the pre-stored fingerprint database, if the fingerprint information feature value of the participating conference personnel and the pre-stored fingerprint database are The at least one fingerprint information feature value is the same, indicating that the identity information of the person is legal; if the feature value of the fingerprint information of the participating conference personnel is different from the feature value of all the fingerprint information in the pre-stored fingerprint database, the identity information of the person is illegal. The fingerprint information feature value comparison verification method can be implemented by referring to the prior art, and details are not described herein again.

Step 405: The first server receives a determination result of the user identity information sent by the second server.

Step 406: If the user identity information is not in the preset identity information, the first server generates an alarm message.

Step 407: If the user identity information is in the preset identity information, the first server acquires the identity information of the terminal device.

Specifically, the identifier information of the terminal device may be a digital certificate of the terminal device. In the present invention, the identification information of the terminal device may be information of the manufacturer of the terminal device carried in the digital certificate. The terminal device can encrypt the digital certificate carrying the manufacturer information and send it to the conference server. The encryption processing technology for the digital certificate of the terminal device can refer to the implementation method of the prior art, and details are not described herein.

Step 408: The first server determines, according to the identifier information, whether the terminal device meets the preset condition.

It should be noted that step 408 can be implemented in the following specific manner:

The first server determines whether the identification information matches the preset identification information.

Specifically, the conference server receives the digital certificate sent by the terminal device, decrypts it, obtains the information of the manufacturer in the digital certificate of the terminal device, and then determines whether the manufacturer information of the terminal device is in the manufacturer information of the terminal device stored in advance. If the manufacturer information of the terminal device is in the manufacturer information of the terminal device pre-stored in advance, the conference server determines The terminal device meets the preset condition. If the manufacturer information of the terminal device is not in the manufacturer information of the terminal device pre-stored in advance, the conference server determines that the terminal device does not meet the preset condition.

Step 409: The first server sends the determination result of the terminal device to the second server.

Step 410: The second server receives a determination result of the terminal device sent by the first server.

Step 411: If the terminal device meets the preset condition, the first server receives the operation request sent by the terminal device and forwards the request to the second server.

Specifically, if the terminal device does not meet the preset condition, the first server generates an alarm message.

Exemplarily, if the manufacturer information of the terminal device is in the manufacturer information stored in advance, the terminal device receives the operation request for recording the conference issued by the participating conference personnel and encrypts the operation request using its own private key. Then, it is sent to the conference server, and the conference server receives the operation request and decrypts with the public key of the terminal device to obtain an operation request for recording the conference, and sends the operation request to the security server. The operation request for recording the conference sent by the terminal device may further include information about department information, conference topic information, and leadership of the conference.

Step 412: The second server receives an operation request sent by the first server.

Step 413: The second server determines whether the first operation corresponding to the operation request is within the preset authority, and sends the determination result of whether the first operation is within the preset authority to the first server.

Specifically, the security server determines whether the conference can be recorded by the conference, and can determine whether the information of the department participating in the conference, the content of the conference, and/or the leadership of the conference meet the recording requirements. For example, if the content of the meeting involves company confidential documents and/or the department participating in the meeting is the core department of the company, etc., the meeting at this time cannot be recorded.

Step 414: The first server receives the determination result of the operation request sent by the second server, and if the first operation corresponding to the operation request is within the preset authority, performing the first operation.

Exemplarily, if the conference server receives the judgment sent by the security server, it is allowed to The video is recorded in the conference, and the conference server drives the camera device controlled by the conference server to record; the conference server sends the video information to the security server in real time, and the security server uses the video security analysis software to analyze the video. If the security server analyzes the video information, it finds that the video server analyzes the video information. When the actual participation of the conference personnel information does not match the preset personnel information, the security server sends an alarm message and sends the alarm information to the conference server. The conference server can directly send a command to the camera device to stop recording and drive the projection device to stop. The reason for the recording is projected onto the large screen or the reason for stopping the recording can be sent to the terminal device and the recording is stopped. If the security server analyzes the recording information and finds that the actual participating conference personnel and the preset personnel information completely match, the conference is finished after the conference recording is finished. The server can encrypt the recorded video by using the public key of the terminal device, save the encrypted video to the non-volatile memory, and send a message to the terminal device that the recording is completed and saved successfully. When the terminal device wants to view the video of the corresponding conference, it needs to send an application to the conference server. After the conference server passes the application, the terminal device can use the private key to decrypt the video and view the video.

In the present invention, the terminal device, the first server, and the second server may be connected through a limited network, a wireless network, a virtual private network (VPN), a File Transfer Protocol (FTP), or the like. Communicate.

The information processing method of the present invention can be applied to the system shown in FIG. 5, the system can include a terminal device, a conference server, and a security server; the conference server includes: an input module, configured to receive an operation request sent by the terminal device, and distribute and receive The operation request to the security confirmation module, the security control module and the audio and video codec; the shared memory is used for data transmission between the terminal device and the conference server; the fingerprint information collection device is mainly used to adopt the feature value of the user fingerprint information; security control The module is configured to receive an operation request sent by the terminal device and information sent by the security server, and perform an operation corresponding to the information sent by the security server, for example, driving the camera to perform video recording by using a camera driver, and driving the alarm to drive the alarm; Module for ensuring the legitimacy of the terminal device and the security of the transmitted data; secure storage module, data The library and the non-volatile storage device are mainly used for storing conference information, conference records, conference recordings, conference materials, and the like of the terminal device, wherein the database may be a storage module in the non-volatile storage device; the audio and video codec is mainly It is used to play audio and video sent by the terminal device or the company's internal computer. The sound is driven by the speaker driver of the conference server to drive the speaker. The screen part can be projected to the VGA interface of the video graphics array (VGA) line and the conference server. Displayed on a connected projector or TV terminal; the network communication module is used for intranet data and command transmission with the secure server. The security server includes: a security display module, configured to display a certain conference of interest when a conference keyword is input, or display a conference leader and conference information when a terminal device in the conference server has a confidential behavior; The module is used to store fingerprint information of all employees in the company, and verify the fingerprint information sent by the conference server and return the verification result; the security control module is used to monitor the operation request of the terminal device sent by the conference server, when the operation request exceeds the preset When the authority is granted, the warning message is sent; the network communication module is used for intranet data and command transmission with the conference server; the conference record processing module is used to export the conference record, search for a conference record according to the keyword or delete some Meeting minutes, etc.

According to the information processing method provided by the embodiment of the present invention, after receiving the user identity information sent by the first server, the second server verifies the user identity information, and sends the verification result to the first server. If the user identity information is successfully verified, the first server Determining whether the terminal device meets the preset condition, if the terminal device meets the preset condition, the first server receives the operation request sent by the terminal device and forwards the operation request to the second server, and then the second server determines whether the first operation corresponding to the operation request is preset. Within the authority, and sending the determination result of whether the first operation is within the preset authority to the first server, so that the first server can perform the first operation when the first operation is within the preset authority; thus, the security server can participate in the conference The identity information of the personnel is legal and the terminal equipment is reliable before In addition, the authority of the operation request sent by the terminal device is judged to ensure the security of the participants and the reliability of the terminal equipment used for the conference, thereby monitoring the operation of the participating conference personnel, and effectively solving the existing conference solution. There is a problem of data leakage, which reduces the risk of data leakage and improves the information security of the office system.

The embodiment of the present invention provides a second server 5, which can be applied to an information processing method provided by the embodiment corresponding to FIG. 1 and FIG. 3, and the device includes: a first receiving unit 51, The first transmitting unit 52, the second receiving unit 53, the third receiving unit 54, and the first processing unit 55, wherein:

The first receiving unit 51 is configured to receive user identity information sent by the first server.

The first sending unit 52 is configured to verify user identity information and send the verification result to the first server.

The second receiving unit 53 is configured to receive the determination result of the terminal device sent by the first server if the user identity information is successfully verified.

The third receiving unit 54 is configured to receive an operation request sent by the first server if the terminal device meets the preset condition.

The first processing unit 55 is configured to determine whether the first operation corresponding to the operation request is within the preset authority, and send the determination result of whether the first operation is within the preset authority to the first server.

According to the information processing apparatus provided by the embodiment of the present invention, the second server receives the user identity information sent by the first server and verifies the user identity information, and then sends the verification result to the first server, and when the user identity information is successfully verified, receiving The judgment result of the terminal device sent by the first server, when the terminal device also meets the preset condition, receives an operation request sent by the first server, and determines whether the first operation corresponding to the operation request is within the preset authority, and then the first Fuck Whether the result of the determination within the preset authority is sent to the first server, so that the first server can perform the first operation when the first operation is within the preset authority; thus, the security server can be legal in the identity information of the participating conference personnel On the premise that the terminal device is reliable, the authority of the operation request sent by the terminal device is judged to ensure the security of the participants and the reliability of the terminal device used for the conference, thereby monitoring the operation of the participating conference personnel and effectively solving the problem. There are data leakage problems in the existing conference programs, which in turn reduces the risk of data leakage and improves the information security of the office system.

Specifically, referring to FIG. 7, the first sending unit 52 includes: a first determining module 521 and a processing module 522, where:

The first determining module 521 is configured to determine whether the user identity information is in the preset identity information, and send the determination result to the first server.

The processing module 522 is configured to determine that the terminal device is successfully verified if the user identity information is in the preset identity information.

Specifically, referring to FIG. 8, the apparatus further includes: an obtaining unit 56, wherein:

The obtaining unit 56 is configured to acquire preset identity information, and store preset identity information.

It should be noted that, in the interaction process between the units and the modules in this embodiment, reference may be made to the interaction process in an information processing method provided by the embodiment corresponding to FIG. 1 and FIG. 3 to FIG. 4, and details are not described herein again.

According to the information processing apparatus provided by the embodiment of the present invention, the second server receives the user identity information sent by the first server and verifies the user identity information, and then sends the verification result to the first server, and when the user identity information is successfully verified, receiving The judgment result of the terminal device sent by the first server, when the terminal device also meets the preset condition, receives an operation request sent by the first server, and determines whether the first operation corresponding to the operation request is within the preset authority, and then the first Whether the operation results in the preset authority are sent to the first server, so that the first server can perform the first operation when the first operation is within the preset authority; thus, the security server can participate in Under the premise that the identity information of the conference personnel is legal and the terminal equipment is reliable, the authority for the operation request sent by the terminal device is judged, so as to ensure the security of the participants and the reliability of the terminal equipment used for the conference, and thus the participation in the conference can be monitored. The operation of personnel can effectively solve the problem of data leakage in existing conference programs, thereby reducing the risk of data leakage and improving the information security of office systems.

The embodiment of the present invention provides a first server 6, which can be applied to an information processing method provided by the embodiment corresponding to FIG. 2 to FIG. 4. Referring to FIG. 9, the device includes: a second processing unit 61, and a fourth The receiving unit 62, the determining unit 63, the second transmitting unit 64, the third processing unit 65, and the fourth processing unit 66, wherein:

The second processing unit 61 is configured to acquire user identity information and send the user identity information to the second server.

The fourth receiving unit 62 is configured to receive a verification result of the user identity information sent by the second server.

The determining unit 63 is configured to determine whether the terminal device meets the preset condition if the user identity information is successfully verified.

The second sending unit 64 is configured to send the determination result to the second server.

The third processing unit 65 is configured to receive an operation request sent by the terminal device and forward the request to the second server if the terminal device meets the preset condition.

The fourth processing unit 66 is configured to receive a determination result of the operation request sent by the second server, and if the first operation corresponding to the operation request is within the preset authority, perform the first operation.

In the information processing apparatus provided by the embodiment of the present invention, the first server receives the user identity information and sends the user identity information to the second server, and then receives the verification result of the user identity information sent by the second server, and when the user identity information is successfully verified, Determining whether the terminal device meets the preset condition and sending the determination result to the second server, and receiving the operation request sent by the terminal device when the terminal device meets the preset condition, and forwarding the operation request to the second server, and finally receiving the second server to send If the first operation corresponding to the operation request is within the preset authority, the first operation is performed; thus, the security server can perform the first operation on the premise that the identity information of the participating conference personnel is legal and the terminal device is reliable. The authority of the operation request sent by the device is judged, which ensures the security of the participants and the reliability of the terminal devices used in the conference, and can monitor the operations of the participating conference personnel, and can effectively solve the data leakage in the existing conference solution. The problem is to reduce the risk of data leakage and improve the information security of the office system.

Specifically, referring to FIG. 10, the apparatus further includes: a generating unit 67, wherein:

The generating unit 67 is configured to generate an alarm message if the verification of the user identity information fails.

Specifically, referring to FIG. 11, the determining unit 63 includes: an obtaining module 631 and a second determining module 632, where:

The obtaining module 631 is configured to obtain the identifier information of the terminal device if the user identity information is successfully verified.

The second determining module 632 is configured to determine, according to the identifier information, whether the terminal device meets the preset condition.

Further, the second determining module 632 is further configured to: determine whether the identifier information matches the preset identifier information. If the identification information matches the preset identification information, it is determined that the terminal device meets the preset condition.

It should be noted that, in the interaction process between the units and the modules in this embodiment, reference may be made to the interaction process in the voice information processing method provided by the embodiment corresponding to FIG. 2 to FIG. 4, and details are not described herein again.

In the information processing apparatus provided by the embodiment of the present invention, the first server receives the user identity information and sends the user identity information to the second server, and then receives the verification result of the user identity information sent by the second server, and when the user identity information is successfully verified, Determining whether the terminal device meets the preset condition and sending the determination result to the second server, and receiving the operation request sent by the terminal device when the terminal device meets the preset condition, and forwarding the operation request to the second server, and finally receiving the second server to send If the first operation corresponding to the operation request is within the preset authority, the first operation is performed; thus, the security server can perform the first operation on the premise that the identity information of the participating conference personnel is legal and the terminal device is reliable. The authority of the operation request sent by the device is judged to ensure the security of the participants and the reliability of the terminal devices used for the conference. In addition, the operations of the participating conference personnel can be monitored, and the data leakage in the existing conference solution can be effectively solved. The problem is to reduce the risk of data leakage and improve the information security of the office system.

In a practical application, the first receiving unit 51, the first sending unit 52, the second receiving unit 53, the third receiving unit 54, the first processing unit 55, the obtaining unit 56, the first determining module 521, the processing module 522, and the The second processing unit 61, the fourth receiving unit 62, the determining unit 63, the second transmitting unit 64, the third processing unit 65, the fourth processing unit 66, the generating unit 67, the obtaining module 631, and the second determining module 632 may all be located in the wireless A Central Processing Unit (CPU), a Micro Processor Unit (MPU), a Digital Signal Processor (DSP), or a Field Programmable Gate Array (Field Programmable Gate Array) in a data transmitting device. FPGA) and other implementations.

Those skilled in the art will appreciate that embodiments of the present invention can be provided as a method, system, or computer program product. Accordingly, the present invention can take the form of a hardware embodiment, a software embodiment, or a combination of software and hardware. Moreover, the invention can take the form of a computer program product embodied on one or more computer-usable storage media (including but not limited to disk storage and optical storage, etc.) including computer usable program code.

The present invention has been described with reference to flowchart illustrations and/or block diagrams of methods, apparatus (system), and computer program products according to embodiments of the invention. It will be understood that each flow and/or block of the flowchart illustrations and/or FIG. These computer program instructions can be provided to a processor of a general purpose computer, special purpose computer, embedded processor, or other programmable data processing device to produce a machine for the execution of instructions for execution by a processor of a computer or other programmable data processing device. Realize A means of function specified in a flow or a flow and/or a block diagram of a block or blocks.

The computer program instructions can also be stored in a computer readable memory that can direct a computer or other programmable data processing device to operate in a particular manner, such that the instructions stored in the computer readable memory produce an article of manufacture comprising the instruction device. The apparatus implements the functions specified in one or more blocks of a flow or a flow and/or block diagram of the flowchart.

These computer program instructions can also be loaded onto a computer or other programmable data processing device such that a series of operational steps are performed on a computer or other programmable device to produce computer-implemented processing for execution on a computer or other programmable device. The instructions provide steps for implementing the functions specified in one or more of the flow or in a block or blocks of a flow diagram.

The above is only the preferred embodiment of the present invention and is not intended to limit the scope of the present invention.

Claims

An information processing method, the method comprising:

Receiving user identity information sent by the first server;

Verifying the user identity information, and transmitting the verification result to the first server;

Receiving, by the first server, a determination result of the terminal device, when the user identity information is successfully verified;

Receiving an operation request sent by the first server when the terminal device meets a preset condition;

Determining whether the first operation corresponding to the operation request is within the preset authority, and sending the determination result of whether the first operation is within the preset authority to the first server.
The method of claim 1, wherein the verifying the user identity information and transmitting the verification result to the first server comprises:

Determining whether the user identity information is in the preset identity information, and sending the determination result to the first server;

When the user identity information is in the preset identity information, determining that the user identity information is successfully verified.
The method of claim 1 or 2, wherein the method further comprises:

Obtaining the preset identity information, and storing the preset identity information.
An information processing method, the method comprising:

Obtaining user identity information, and sending the user identity information to the second server;

Receiving a verification result of the user identity information sent by the second server;

If the user identity information is successfully verified, determining whether the terminal device meets the preset condition, and sending the determination result to the second server;

Receiving, by the terminal device, an operation request sent by the terminal device, and forwarding the operation request to the second server;

Receiving a determination result of the operation request sent by the second server, when the first operation corresponding to the operation request is within the preset authority, performing the first operation.
The method of claim 4 wherein the method further comprises:

When the user identity information verification fails, an alarm message is generated.
The method according to claim 4 or 5, wherein the determining whether the terminal device meets the preset condition when the user identity information is successfully verified comprises:

Obtaining identification information of the terminal device when the user identity information is successfully verified;

And determining, according to the identifier information, whether the terminal device meets the preset condition.
The method according to claim 6, wherein the determining, according to the identification information, whether the terminal device meets a preset condition comprises:

Determining whether the identification information matches the preset identification information;

When the identifier information matches the preset identifier information, determining that the terminal device meets a preset condition.
An information processing apparatus, the apparatus comprising: a first receiving unit, a first transmitting unit, a second receiving unit, a third receiving unit, and a first processing unit;

The first receiving unit is configured to receive user identity information sent by the first server;

The first sending unit is configured to verify the user identity information, and send a verification result to the first server;

The second receiving unit is configured to: when the user identity information is successfully verified, receive a determination result of the terminal device sent by the first server;

The third receiving unit is configured to receive an operation request sent by the first server when the terminal device meets a preset condition;

The first processing unit is configured to determine whether the first operation corresponding to the operation request is within the preset authority, and send a determination result of whether the first operation is within the preset authority to the first server.
The apparatus according to claim 8, wherein the first sending unit comprises: a first determining module and a processing module;

The first determining module is configured to determine whether the user identity information is in the preset identity information, and send the determination result to the first server;

The processing module is configured to determine that the terminal device is successfully verified when the user identity information is in the preset identity information.
The apparatus according to claim 8 or 9, wherein said apparatus further comprises an acquisition unit;

The acquiring unit is configured to acquire the preset identity information, and store the preset identity information.
An information processing apparatus, the apparatus comprising: a second processing unit, a fourth receiving unit, a determining unit, a second transmitting unit, a third processing unit, and a fourth processing unit;

The second processing unit is configured to acquire user identity information, and send the user identity information to the second server;

The fourth receiving unit is configured to receive a verification result of the user identity information sent by the second server;

The determining unit is configured to determine whether the terminal device meets the preset condition when the user identity information is successfully verified;

The second sending unit is configured to send a determination result to the second server;

The third processing unit is configured to receive an operation request sent by the terminal device and forward the operation request to the second server when the terminal device meets a preset condition;

The fourth processing unit is configured to receive a determination result of the operation request sent by the second server, and perform the first operation when the first operation corresponding to the operation request is within the preset authority.
The apparatus of claim 11 wherein said apparatus further comprises: generating a single yuan;

The generating unit is configured to generate an alarm message when the verification of the user identity information fails.
The device according to claim 11 or 12, wherein the determining unit comprises: an obtaining module and a second determining module;

The obtaining module is configured to acquire the identifier information of the terminal device when the user identity information is successfully verified;

The second determining module is configured to determine, according to the identifier information, whether the terminal device meets the preset condition.
The device according to claim 13, wherein

The second determining module is further configured to determine whether the identifier information matches the preset identifier information; and when the identifier information matches the preset identifier information, determining that the terminal device meets a preset condition.
A computer storage medium storing executable instructions for performing the information processing method according to any one of claims 1 to 3.
A computer storage medium storing executable instructions for performing the information processing method according to any one of claims 4 to 7.