WO2018121394A1

WO2018121394A1 - Mobile terminal, alarm information acquisition and sending method and device

Info

Publication number: WO2018121394A1
Application number: PCT/CN2017/117661
Authority: WO
Inventors: 袁虎; 李阿男
Original assignee: 中兴通讯股份有限公司
Priority date: 2016-12-30
Filing date: 2017-12-21
Publication date: 2018-07-05
Also published as: CN108270601A; CN108270601B

Abstract

A mobile terminal, alarm information acquisition and sending method and device, the method comprising: receiving an alarm message; authenticating a user identity in the alarm message according to user information inputted by the user; and decrypting encrypted alarm information carried in the alarm message under the condition that the user passes the authentication.

Description

Mobile terminal, alarm information acquisition, alarm information transmission method and device

Technical field

Embodiments of the present invention relate to, but are not limited to, the field of data network communication, in particular, a mobile terminal, an alarm information acquisition, and an alarm information transmission method and apparatus.

Background technique

In the case that an alarm occurs on the NMS and the maintenance personnel are not in the equipment room, the alarm needs to be sent to the maintenance personnel's mobile terminal device, such as a mobile phone or a tablet, so as to notify the maintenance personnel of the alarm.

Summary of the invention

The following is an overview of the topics detailed in this document. This Summary is not intended to limit the scope of the claims.

Generally, a monitoring port is opened on the network management server as the server, and the mobile device acts as a listening port of the client connection server. After the connection is established, the network management system can send an alarm notification to the mobile device. The general method requires the network management system to be on the public network (Internet) and has a legal IP address of the public network. This is in conflict with the requirement that the network management generally needs to be located on a private local area network to maintain the security of the network management system. When the network management system is located on the public network, the listening port is vulnerable to attacks by illegal users. For example, a large number of data packets are frequently sent to the listening port, which affects the normal operation of the network management system.

The embodiment of the invention provides a mobile terminal, an alarm information acquisition method, and an alarm information transmission method and device.

According to an aspect of the present invention, a method for acquiring alarm information includes: receiving an alarm message; authenticating a user identity in the alarm message according to user information input by the user; and decrypting the alarm message if the authentication is passed Encrypted alarm information carried in.

In an exemplary embodiment, the authenticating the user identity in the alarm message according to the user information input by the user includes: determining whether the user information exists in the unrestricted user information list; and determining that the result is yes Confirm that the certification is passed.

In an exemplary embodiment, determining whether the user information exists in the unrestricted user information list comprises: encrypting the user information input by the user; determining whether the encrypted user information exists in the unrestricted user In the information list.

In an exemplary embodiment, the encrypting the user information input by the user comprises: encrypting the user information by means of non-reversible encryption.

In an exemplary embodiment, the alarm message includes an authentication mark, or a content mark, or an authentication mark and a content mark, and the authentication message or the content mark, or the authentication mark and the content mark are used to distinguish the carried in the alarm message. Unrestricted user information list and the alarm information.

In an exemplary embodiment, where the alert message includes the authentication flag, the authentication flag includes a start tag of the unrestricted user information list and a length of the unrestricted user information list; In the case of including the content flag, the content flag includes a start tag of the alert information and a length of the alert message.

In an exemplary embodiment, the decrypting the encrypted alarm information carried in the alarm message includes: acquiring a secret key used to decrypt the alarm information; and decrypting, by using the secret key, the encrypted information carried in the alarm message Alarm information.

In an exemplary embodiment, the user information includes: a username and a password corresponding to the username.

Embodiments of the present invention provide a computer readable storage medium storing computer executable instructions that, when executed, implement the above-described alarm information acquisition method.

According to another aspect of the present invention, a method for transmitting an alarm information includes: sending an alarm message, where the alarm message carries encrypted alarm information and user information for authenticating a user identity, the authentication The user information is a basis for judging whether the authentication is passed, and whether the authentication passes the basis for whether the alarm message can be decrypted.

In an exemplary embodiment, the alert message carries an encrypted list of unrestricted user information, the alert message including an authentication mark, or a content mark, or an authentication mark and a content mark, the authentication message, or a content mark, or an authentication mark And the content identifier is used to distinguish the unrestricted user information list and the alarm information carried in the alarm message.

In an exemplary embodiment, in the case that the alert message includes the authentication flag, the recognition The certificate flag includes a start tag of the unrestricted user information list and a length of the unrestricted user information list; if the alert message includes the content flag, the content flag includes a start tag of the alert information and the The length of the alarm information.

Embodiments of the present invention provide a computer readable storage medium storing computer executable instructions that, when executed, implement the above-described alarm information transmitting method.

According to another aspect of the present invention, a mobile terminal is provided, including: a receiving module, configured to receive an alarm message; and an authentication module, configured to authenticate a user identity in the alarm message according to user information input by the user; The encrypted alarm information carried in the alarm message is decrypted in the case that the authentication is passed.

In an exemplary embodiment, the authentication module includes a determining unit, configured to determine whether the user information exists in the unrestricted user information list; and if the determination result is yes, determine that the authentication is passed.

According to another aspect of the present invention, an apparatus for transmitting alarm information includes: a sending module, configured to send an alarm message, where the alarm message carries encrypted alarm information and a user for authenticating a user identity The user information of the authentication is a basis for judging whether the authentication is passed, and whether the authentication passes the basis of whether the alarm message can be decrypted.

The invention adopts the technical solution of authenticating the identity of the user in the alarm message according to the user information, and decrypting the encrypted alarm information carried in the alarm message when the authentication is passed, and obtaining the network management alarm information more securely.

Other aspects will be apparent upon reading and understanding the drawings and detailed description.

BRIEF abstract

1 is a flowchart of a method for acquiring alarm information according to an embodiment of the present invention;

2 is a schematic diagram of a method for transmitting alarm information according to another embodiment of the present invention;

FIG. 3 is a flowchart of a method for acquiring alarm information according to an embodiment of the present invention; FIG.

4 is a flowchart of a method for acquiring alarm information according to an embodiment of the present invention;

FIG. 5 is a structural block diagram of a mobile terminal according to an embodiment of the present invention; FIG.

FIG. 6 is a structural block diagram of a mobile terminal according to an embodiment of the present invention; FIG.

FIG. 7 is a structural block diagram of an alarm information transmitting apparatus according to another embodiment of the present invention.

Embodiments of the invention

The invention will be described in detail below with reference to the drawings in conjunction with the embodiments.

In this embodiment, a mobile terminal, an alarm information acquisition, and an alarm information transmission method and apparatus are provided. FIG. 1 is a flowchart of a method for acquiring alarm information according to an embodiment of the present invention. As shown in FIG. 1, the method includes steps S102 to S106.

Step S102, receiving an alarm message;

Step S104: Authenticate the user identity in the alarm message according to the user information input by the user;

In step S106, if the authentication is passed, the encrypted alarm information carried in the alarm message is decrypted.

The embodiment of the invention relates to a method for acquiring alarm information, which can obtain network management alarm information more securely.

The execution entities of the above process steps include, but are not limited to, a network management system. In an exemplary embodiment, the user information includes a username and a password corresponding to the username. The foregoing alarm message may be a short message of the operator, and the alarm information is sent to the maintenance personnel by sending a short message. The mobile terminal number of the above maintenance personnel is recorded in advance on the network management. In the case that the real-time requirement of the sent alarm information is not high, the alarm message may carry multiple pieces of alarm information, and the alarm cost is reduced in a manner that sacrifices part of the alarm information in real time.

There are many ways to implement authentication based on user information. For example, a non-restricted list can be used, and users in the list are trusted. This method is similar to the implementation of blacklist and whitelist. Of course, other methods can be used for authentication. No matter which method is used for authentication, the technical problem to be solved by the present application can be solved as long as the authentication function can be implemented.

When the unrestricted list mode is adopted, the following steps may be implemented to implement the step of authenticating the user identity in the alarm message according to the user information input by the user:

Determining whether the user information exists in the unrestricted user information list; determining that the user information exists in the unrestricted user information list, determining that the authentication is passed, and decrypting the encrypted alarm information carried in the alarm message.

Through the above steps, it is easier to implement by using the manifest, and an interface can also be provided to allow the content in the list to be modified. In the exemplary embodiment, not only the contents of the list but also the contents of the list can be modified. Modify the attributes of the list, for example, the list is a whitelist or a blacklist, or the read permission, edit permission, etc. of the list. It is the use of an implementation such as a list that makes the above functions possible.

In an exemplary embodiment, determining whether the user information exists in the unrestricted user information list includes at least the following manner:

Encrypting the user information input by the user; determining whether the encrypted user information exists in the unrestricted user information list. In an exemplary embodiment, the user information is encrypted by means of non-reversible encryption. The irreversible encryption is opposite to the reversible encryption, and refers to the content that cannot be encrypted by using the algorithm or the original pre-encrypted content. More commonly used are MD5 (Message Digest Algorithm 5, Message Digest Algorithm Fifth Edition), SHA (Secure Hash Algorithm), and the like. Compared with the reversible encryption method, the irreversible encryption method is more secure and reliable because the original encrypted content cannot be pushed out through the encrypted content.

In an exemplary embodiment, the alert message may include an authentication flag, may include a content flag, or may be a combination of an authentication flag and a content flag. The authentication message and the content identifier are used to distinguish the unrestricted user information list and the alarm information carried in the alarm message.

In an exemplary embodiment, where the alert message includes the authentication flag, the authentication flag may include a start tag of the unrestricted user information list and a length of the unrestricted user information list; the authentication flag A start tag of the unrestricted user information list and a termination tag of the unrestricted user information list may also be included. Similarly, in the case that the alarm message may include the content flag, the content flag includes a start tag of the alarm information and a length of the alarm information; the content flag may also include a start tag of the alarm information and the alarm The end tag of the message.

According to another embodiment of the present invention, an alarm information sending method is as shown in FIG. 2, and the method includes the following steps:

Step S201: Send an alarm message, where the alarm message carries an encrypted alarm message. And the user information for authenticating the user identity, the authenticated user information is a basis for determining whether the authentication is passed, and whether the authentication passes the basis for whether the alarm message can be decrypted.

FIG. 3 is a flowchart of a method for acquiring alarm information according to an embodiment of the present invention. As shown in FIG. 3, the method includes steps S302-S308.

Step S302, recording the number of the mobile terminal of the maintenance personnel to the network management;

Step S304, after the network management generates an alarm, encrypt the user name and password information having the reading authority as the file header AA by using the irreversible encryption algorithm A, and encrypt the alarm content as the file body BB by using the reversible encryption algorithm B and the encryption key K1. And combining the encrypted content to generate an alarm message. The alarm message is also the alarm report file mentioned below. The above list of users with read access is also the list of unrestricted users mentioned above.

The non-reversible encryption algorithm refers to that the original encrypted content cannot be calculated or inverted by using the content encrypted by the algorithm. Now more commonly used are MD5, SHA algorithm and so on.

The reversible encryption algorithm means that the original encrypted content can be calculated or inverted by using the content encrypted by the algorithm. The more commonly used is the symmetric encryption algorithm, which is to set the secret key only known by the encryption end and the decryption end. The encryption end uses the secret key to encrypt, and the decryption end can use the secret key to decrypt the encrypted content to obtain the original text, which is more commonly used now. There are DES, RC algorithms, etc.

Step S306, the network management device sends the alarm message to the mobile terminal of the maintenance personnel in a short message manner. Since the network management is not required to be on the public network in this embodiment, the security of the network management is ensured.

Step S308, the mobile terminal installs a dedicated alarm reading program to read the received short message, and asks the maintenance personnel to input the user name and password. If the user name and password are calculated by the irreversible encryption algorithm A, the result can be reported in the alarm report file. Found in the AA section, the BB part of the alarm report file is decrypted using the reversible encryption algorithm B and the encryption key K1 to obtain the original text of the alarm information and displayed; if the user name and password are calculated by the non-reversible encryption algorithm A, the result is obtained. If the alarm report file cannot be found in the AA part, the user is prompted to fail authentication and the alarm information is not displayed. Because the user and the password are verified, and the checked content is stored in the short message, the user of the mobile terminal is not required to connect to the network management device to perform the permission check, thereby further ensuring the security of the alarm content of the network management.

The non-reversible encryption algorithm A, the reversible encryption algorithm B and the encryption key K1 are known only to the network management developer, and have been fixedly used in the development of installing a dedicated alarm reading program on the network management system and the mobile terminal. For security reasons, it cannot be known by other people, such as network management users.

In this embodiment, the user and the password are verified, and the verified comparison content exists in the short message, and the user of the mobile terminal is not required to connect to the network management device to perform permission verification, thereby ensuring the security of the alarm content of the network management. At the same time, the user name and password are combined and encrypted together, and the user information of the network management is not obtained through the short message content, thereby ensuring the security of the network management user.

The invention may be further illustrated in conjunction with specific embodiments.

As shown in FIG. 4, the method for acquiring an alarm information includes the steps S602 to S608.

Step S602: Record the mobile phone number of the mobile terminal of each maintenance personnel to the network management.

In the case of 5 maintenance personnel, for example, their user names are U1, U2, U3, U4, U5, and the corresponding mobile phone numbers are TEL1, TEL2, TEL3, TEL4, TEL5, and the user name and mobile phone number information need to be input. Go to the network management and record. The above username and mobile number can be added, deleted and modified.

Step S604: After the network management generates an alarm, the non-reversible encryption algorithm A is used to encrypt all the user name and password information having the reading authority as the file header AA, and the reversible encryption algorithm B is used to encrypt the alarm content as the file body BB. And the above encrypted content is combined to generate an alarm report file.

The users U1, U2, U3, U4, and U5 have their own passwords for accessing the NMS, such as P1, P2, P3, P4, and P5.

For example, users with alarm access rights are U1, U3, U5, and their username and password are combined and encrypted using the MD5 algorithm. For the sake of simplicity, in the case where the delimiter does not appear in the above username, the combination method may use a delimiter such as ":" as a separator of the username and password to splicing the username and password, that is, "U1:P1", " U3: P3", "U5: P5". The three combinations are encrypted by the MD5 algorithm to generate the contents of the file header AA, assuming that the contents of the file header AA are:

1111111111111111111111111111111

3333333333333333333333333333333

5555555555555555555555555555555

Set a fixed secret key K1 that is known to both the network administrator and the alarm reader on the mobile terminal. After the network administrator encrypts the alarm by using the key K1, the alarm reading program can use the secret key K1 to decrypt and obtain the original text of the alarm. For security reasons, this key K1 is known only to the developers of the network management. Others, including the network management users, do not know, and can avoid illegal user theft to crack the alarm information.

In an exemplary embodiment, a reversible encryption algorithm RC5 is used, which is a symmetric encryption algorithm that satisfies the requirements for encrypting alarm content.

It is assumed that the content of the alarm is generated by the public key K1 using RC5 encryption, and the content of the file body CC is assumed to be:

After the contents of the file header AA and the file body BB are merged, the contents of the entire alarm report file are:

File header flag

1111111111111111111111111111111

3333333333333333333333333333333

5555555555555555555555555555555

Document body mark

The file header flag may be the start flag of the file header plus the length of the file header, and the file body flag may be the start flag of the file body plus the length of the file body.

Step S606: The network management system sends the alarm report file to the mobile terminal of the maintenance personnel in a short message manner.

In this embodiment, the network management device sends the alarm report file generated in step 2 to the mobile terminal of the mobile phone numbers TEL1, TEL3, and TEL5 corresponding to the users U1, U3, and U5 having the alarm access authority by means of short messages.

Step S608: The mobile terminal installs a dedicated alarm reading program to read the received short message, and the maintenance personnel inputs the user name and password. If the user name and password are calculated by the irreversible encryption algorithm A, the result can be obtained in the alarm report file AA. Found in the section, the reversible encryption algorithm B is used to decrypt the BB part of the alarm report file to obtain the original text of the alarm information and display it; if the user name and password are calculated by the irreversible encryption algorithm A, the result is obtained in the AA part of the alarm report file. If it cannot be found, the user is prompted to fail authentication and the alarm information is not displayed.

In this embodiment, for example, the maintenance personnel U1 has an alarm reading program installed on the mobile phone. After receiving the short message of the alarm notification, the alarm reading program is used to read the short message, and the alarm reading program prompts the maintenance personnel U1 to input the password. If the maintenance personnel U1 enters the correct password P1, the alarm reader combines the username U1 and the password P1 and encrypts it using the MD5 algorithm. The result is necessarily

1111111111111111111111111111111

This content can be found in the file header AA of the alarm report file, and the alarm reading program decrypts the message body BB using the secret key K1, and the original text of the alarm can be obtained and displayed.

If the user does not have permission or enters the wrong username and password, for example, the maintenance personnel U2 enters the password P2, the alarm reader combines the username U2 and the password P2 and encrypts it using the MD5 algorithm. The result is necessarily

2222222222222222222222222222222

This content cannot be found in the file header AA of the alarm report file, then the alarm reading program will prompt the user to fail authentication and not display the alarm information.

If the maintenance personnel U1 has entered the wrong password P6, the alarm reader will give the user name. U1 and password P6 are combined and encrypted using the MD5 algorithm. The result is a different content than all previous encryptions, such as

6666666666666666666666666666666

This content can not be found in the file header AA of the alarm report file, then the alarm reader will prompt the user to fail authentication and not display the alarm information.

FIG. 5 is a structural block diagram of a mobile terminal according to an embodiment of the present invention. As shown in FIG. 5, the mobile terminal includes:

The receiving module 32 is configured to receive an alarm message;

The authentication module 34 is configured to authenticate the user identity in the alarm message according to the user information input by the user;

The decryption module 36 is configured to decrypt the encrypted alarm information carried in the alarm message when the authentication is passed.

FIG. 6 is a structural block diagram of a mobile terminal according to an embodiment of the present invention. As shown in FIG. 6, the authentication module 34 further includes:

The determining unit 42 is configured to determine whether the user information exists in the unrestricted user information list; and determine that the authentication is passed if it is determined that the user information exists in the unrestricted user information list.

As shown in FIG. 7, an alarm information transmitting apparatus according to another embodiment of the present invention includes:

The sending module 56 is configured to send an alarm message, where the alarm message carries the encrypted alarm information and user information used for authenticating the user identity, and the authenticated user information is a judgment basis for whether the authentication passes, and the authentication Whether to pass the basis for whether the alarm message can be decrypted.

Those of ordinary skill in the art will appreciate that all or some of the steps, systems, and functional blocks/units of the methods disclosed above may be implemented as software, firmware, hardware, and suitable combinations thereof. In a hardware implementation, the division between functional modules/units mentioned in the above description does not necessarily correspond to the division of physical components; for example, one physical component may have multiple functions, or one function or step may be composed of several physical The components work together. Some or all of the components may be implemented as software executed by a processor, such as a digital signal processor or microprocessor, or as hardware, or as an integrated circuit, such as an application specific integrated circuit. Such software may be distributed on a computer readable medium, which may include computer storage media (or non-transitory media) and communication media (or transitory media). As is well known to those of ordinary skill in the art, the term computer storage medium includes volatile and nonvolatile, implemented in any method or technology for storing information, such as computer readable instructions, data structures, program modules or other data. Sex, removable and non-removable media. Computer storage media include, but are not limited to, Random Access Memory (RAM), Read-Only Memory (ROM), and Electrically Erasable Programmable Read-only Memory (EEPROM). Flash memory or other memory technology, compact disc read-only memory (CD-ROM), digital versatile disc (DVD) or other optical disc storage, magnetic cassette, magnetic tape, disk storage or other magnetic storage device, or Any other medium used to store the desired information and that can be accessed by the computer. Moreover, it is well known to those skilled in the art that communication media typically includes computer readable instructions, data structures, program modules, or other data in a modulated data signal, such as a carrier wave or other transport mechanism, and can include any information delivery media. .

A person skilled in the art can understand that the technical solutions of the present disclosure may be modified or equivalent, without departing from the spirit and scope of the present disclosure, and should be included in the scope of the claims of the present disclosure.

Industrial applicability

The embodiment of the present invention provides a mobile terminal, an alarm information acquisition method, and an alarm information transmission method and device, which use the alarm information to authenticate the user identity according to the user information, and decrypt the information carried in the alarm message when the authentication is passed. The technical solution of the encrypted alarm information is used to obtain the network management alarm information more securely.

Claims

A method for acquiring alarm information includes:

Receiving an alarm message;

User identity is authenticated in the alarm message according to user information input by the user;

In the case that the authentication is passed, the encrypted alarm information carried in the alarm message is decrypted.
The method according to claim 1, wherein the authenticating the user identity in the alarm message according to the user information input by the user comprises:

Determining whether the user information exists in the unrestricted user information list;

The authentication is determined to be determined in the case where it is judged that the user information exists in the unrestricted user information list.
The method according to claim 2, wherein the determining whether the user information exists in the unrestricted user information list comprises:

Encrypting the user information input by the user;

It is determined whether the encrypted user information exists in the unrestricted user information list.
The method of claim 3 wherein said encrypting said user information entered by a user comprises:

The user information is encrypted by means of non-reversible encryption.
The method according to claim 2, wherein said alert message comprises an authentication flag, or a content flag, or an authentication flag and a content flag, said authentication message, or content flag, or authentication flag and content flag are used to distinguish The unrestricted user information list and the alarm information carried in the alarm message.
The method according to claim 5, wherein

In the case that the alarm message includes the authentication flag, the authentication flag includes a start tag of the unrestricted user information list and a length of the unrestricted user information list;

In the case that the alarm message includes the content flag, the content flag includes a start tag of the alarm information and a length of the alarm information.
The method of claim 1 wherein said decrypting out said alert message carries The encrypted alarm information with the following includes:

Obtaining a secret key for decrypting the alarm information;

The encrypted alarm information carried in the alarm message is decrypted by the secret key.
The method according to claim 1, wherein said user information comprises: a username and a password corresponding to said username.
A method for sending alarm information includes:

Sending an alarm message, where the alarm message carries the encrypted alarm information and the user information for authenticating the user identity, and the authenticated user information is a judgment basis for whether the authentication is passed, and whether the authentication is passed Whether the basis of the alarm message can be decrypted.
The method according to claim 9, wherein the alarm message carries an encrypted list of unrestricted user information, the alarm message comprising an authentication mark, or a content mark, or an authentication mark and a content mark, the authentication message, Or the content identifier, or the authentication identifier and the content identifier, are used to distinguish the unrestricted user information list and the alarm information carried in the alarm message.
The method according to claim 10, wherein

In the case that the alarm message includes the authentication flag, the authentication flag includes a start tag of the unrestricted user information list and a length of the unrestricted user information list;

In the case that the alarm message includes the content flag, the content flag includes a start tag of the alarm information and a length of the alarm information.
A mobile terminal includes:

a receiving module, configured to receive an alarm message;

The authentication module is configured to authenticate the user identity in the alarm message according to the user information input by the user;

The decryption module is configured to decrypt the encrypted alarm information carried in the alarm message when the authentication is passed.
The mobile terminal according to claim 12, wherein the authentication module comprises:

a determining unit, configured to determine whether the user information exists in the unrestricted user information list; and in the case of determining that the user information exists in the unrestricted user information list, Pass the certification.
An alarm information sending device includes:

The sending module is configured to send an alarm message, where the alarm message carries the encrypted alarm information and the user information used to authenticate the user identity, and the authenticated user information is a judgment basis for whether the authentication is passed. Whether the authentication passes is the basis for whether the alarm message can be decrypted.
A computer readable storage medium storing computer executable instructions that, when executed, implement the alarm information acquisition method of claim 1.
A computer readable storage medium storing computer executable instructions that, when executed, implement the alarm information transmitting method of claim 9.