WO2018205057A1 - 一种事件提醒方法和系统 - Google Patents
一种事件提醒方法和系统 Download PDFInfo
- Publication number
- WO2018205057A1 WO2018205057A1 PCT/CN2017/083371 CN2017083371W WO2018205057A1 WO 2018205057 A1 WO2018205057 A1 WO 2018205057A1 CN 2017083371 W CN2017083371 W CN 2017083371W WO 2018205057 A1 WO2018205057 A1 WO 2018205057A1
- Authority
- WO
- WIPO (PCT)
- Prior art keywords
- card module
- event
- unit
- application control
- control program
- Prior art date
Links
Images
Classifications
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- G06Q20/00—Payment architectures, schemes or protocols
- G06Q20/38—Payment protocols; Details thereof
Definitions
- the present invention relates to the field of communication security technologies, and in particular, to an event reminding method and system.
- mobile terminals such as mobile phones have entered various aspects of people's lives and work. People can carry out different mobile operations such as online payment through different application control programs installed in mobile terminals such as mobile phones, and the development of mobile terminals is convenient. People get different information and make mobile payments anytime, anywhere.
- the development of mobile terminal technology has promoted the development of various application control programs.
- illegal or malicious application control programs have been invaded into mobile terminals, and the information and operations of mobile terminals have been stolen and tampered with.
- the mobile terminal in the prior art is provided with a short-range field communication NFC unit, and the short-range field communication NFC unit usually stores privacy information such as a password for the mobile terminal user, and the short-range field communication NFC unit performs non-operation.
- an event operation notification message is sent to the control terminal, and the control terminal transmits the event operation notification message to the corresponding application control program, and the application control program completes the notification message according to the event operation notification message.
- the event operation in actual operation, as long as the application control program existing on the control terminal registry has the right to obtain the notification message, and the illegal or malicious application control program can steal the registry by tampering with the registry Privacy information in the event action message. It can be seen that when the existing mobile terminal operates through the NFC unit, there is a security risk that the private information is stolen.
- the technical problem to be solved by the present invention is that the illegal application control program existing in the mobile terminal in the prior art can be disguised as a legitimate application control program by tampering with the control terminal registry, and is moving.
- the terminal intercepts the event operation notification message pushed by the NFC unit, and steals the private information in the notification message, so that the mobile terminal has a security risk when performing the online communication operation. It is an object of the present invention to provide a time reminding method and system for preventing an illegal application control program from intercepting an event operation notification message, so as to ensure the security of the event operation notification by the NFC unit.
- an embodiment of the present invention provides an event reminding method, where the method includes:
- the card module operation mark is in the form of a multi-layer data structure including a card module type attribute tag, a card module key valid tag, and a card module trigger tag; the card The module operation tag can be updated according to different card module information;
- the event operation database establishes association information between the card module operation tag and the application control program tag, and the association information can perform pseudo-random transformation based on the form of the multi-layer data structure;
- the card module operation flag matched by the query to the event operation is specifically configured to obtain association information between the card module operation tag and the application control program tag, and save the association information.
- a cache unit capable of automatic flushing capable of automatic flushing
- the pushing manner of the event operation notification message includes a single-party application control program push or a multi-party application control program push.
- an embodiment of the present invention further provides an event reminding system, wherein the system includes a control unit, a database construction unit, an NFC unit, and a message pushing unit, where the control unit is configured to control the database construction unit, An operating state of the NFC unit and the message pushing unit;
- the database construction unit is configured to establish an event operation database of association information between the card module operation tag and the application control program tag;
- the NFC is used to sense the occurrence of an event operation
- the message pushing unit is capable of pushing an event operation push message to a specified application control program based on the associated information
- the data component unit is capable of operating on a plurality of layers of data based on the card module operation flag Constructing a pseudo-random transformation on the associated information;
- system further includes a cache unit, where the cache unit is configured to temporarily store the association information, so that the message pushing unit sets a message push path;
- the cache unit may clear the related information after the temporary event of the associated information exceeds a preset effective duration, or after the associated information is used by the message pushing unit;
- the message pushing unit can push the event operation push message to a single application control program or a plurality of application control programs.
- the present invention provides an event reminding method and system through the above technical solution, by constructing an event operation database marked with a saved card module operation mark and an application control program, and the card module operation mark and the application control program mark have a specific relationship.
- FIG. 1 is a schematic flowchart of an event reminding method according to an embodiment of the present invention.
- FIG. 2 is a schematic structural diagram of an event reminding system according to an embodiment of the present invention.
- FIG. 1 is a schematic flowchart of an event reminding method according to an embodiment of the present invention.
- the method includes:
- the event reminding method is used when the mobile terminal performs an operation on different types of card modules through the NFC function therein, and can ensure that only the application control program having the tag corresponding to the card module allows the event operation notification message to be obtained.
- Pushing wherein the mobile terminal can be, but is not limited to, an electronic terminal such as a smart phone, a tablet computer or a smart wearable device, and the NFC function refers to inductive communication between the mobile terminal and the other mobile terminal through the NFC unit therein
- the card module refers to various types of smart chip cards that the mobile terminal connects to the baseband operating unit inside the mobile terminal through a communication protocol such as a single-thread protocol SWP.
- the smart chip card can be a savings card or a credit card.
- the ID card, the recharge card or the time card, etc., the smart chip card stores the privacy information about the user through its internal chip.
- Each smart chip card is uniquely provided with a card module operation mark corresponding to an event operation that can be performed, for example, when the smart chip card is a bus recharge card, the bus card is set to be able to move The terminal performs the operation of recharging, and correspondingly, the bus card is given a mark of the bus card refill operation.
- the card module operation mark exists in the form of multi-layer data, that is, the card module operation mark includes a card module type attribute mark, a card module key valid mark, and a card module trigger mark.
- the card module type attribute tag refers to whether the card module has a type attribute of an identity authentication or a wallet transaction, and publisher information of the card module; the card module key valid tag refers to an open password key corresponding to the card module. Whether it is in the valid period, or whether the corresponding password key of the card module needs to be updated; the card module trigger flag refers to whether the card module generates a sensing operation with the NFC unit of the mobile terminal, and the card module trigger flag can be set.
- a tag code that is dynamically changed, and the tag code can be in different encoding forms in two states in which the card module is inductive or non-inductive.
- the database construction unit in the mobile terminal acquires card module information that the mobile terminal can connect according to the communication protocol of the mobile terminal, and the database construction unit can perform an update operation on the card module information for different card module applications.
- the mobile terminal is further equipped with an application control program corresponding to the operation of the different card modules, and the application control program serves as an upper control terminal of the operation of the card module, which can be controlled based on an operation executable by the card module.
- the application control program is installed in the mobile terminal in the form of a software client.
- the application control program can be an online payment refill client or an online communication client.
- Each application control program is set with an application control program flag, which is used to identify operation feature information of the application control program, and the operation feature information refers to an operation that the corresponding application control program can perform.
- each card module can only implement a specific operation through a preset application control program in the mobile terminal, which is based on the association information between the card module and the preset application control program, but the related information is If it is fixed and easily cloned and copied, if the mobile terminal has a Trojan program, the Trojan can easily copy the associated information for camouflage.
- the database component unit establishes an event operation database related to the card module operation tag and the application control program tag, and the event operation database establishes an operation association between the card module and the application control program. .
- the event operation database can perform the correspondence transformation within the definition of the multi-layer structure, and the correspondence transformation can be performed in a pseudo-random form, such that It can effectively prevent the Trojan horse from copying and stealing information in the event operation database.
- a field sensing action occurs between the non-contact sensing unit such as the NFC unit of the mobile terminal and the card module, and the NFC unit senses the presence of the card module.
- Sending a card module event operation trigger signal to the control unit after receiving the card module event operation trigger signal, the control unit performs an access query on the event operation database to obtain a unique application control program flag corresponding to the card module.
- the card module event operation trigger signal further includes an opening key for accessing the event operation database, and the control unit decodes the opening key, obtains a random code in the opening key, and obtains the random The encoding is matched with the event operation database, and if the random encoding matches the event operation database, the control unit can obtain the permission to access the event operation database.
- the control unit further accesses the event operation database according to an access rule, where the access rule specifically obtains association information between a card module operation tag and an application control program operation tag in one access process. And, each time the control unit performs an access operation, the event operation database is based on the association information structure between the card module operation mark and the application control program in the data multi-layer structural change database of the card module operation mark. To prevent the Trojan from manipulating data on the event All associated information in the library is stolen and copied, and the effective duration of all associated information in the event operation database is also shortened.
- the control unit saves the association information between the obtained card module operation flag and the application control program operation flag in the cache unit.
- the cache unit only temporarily saves the association information by the user. For example, the control unit sets the validity time of the association information to the cache unit, and when the storage time of the association information in the cache unit exceeds the effective duration, the cache unit The unit will automatically clear the associated information. If the control unit does not perform any operation on the associated information within the valid duration, the control unit must access the event operation database again to obtain new associated information; or When the associated information stored in the cache unit is used, the cache unit automatically deletes the associated information; further, when the mobile terminal is in a standby or hibernation state, the cache unit automatically deletes the associated information.
- the associated information can be prevented from remaining in the cache unit, thereby preventing the cache unit from becoming the target of the illegal application control program to obtain the private information of the card module, and the manner in which the event operation database is opened by random coding ensures the The security of the information in the event operations database.
- the message pushing unit locates the application control program specified in the association information according to the association information saved in the cache unit to determine a push path of the event operation message.
- the message pushing unit may further generate the event operation notification message according to the privacy information about the card module acquired by the control unit, and then the message pushing unit pushes the event operation notification message as an application control of the receiving target according to the pushing path. program.
- the message pushing unit can select to transmit the event operation notification message by using a single push or a multi-party push, wherein the single push mode is suitable for the card module to complete a corresponding operation only by using a single application control program.
- the event operation notification message will only be pushed to a specified application control program; the multi-party push mode is applicable to the card module requiring multiple application control programs to complete the corresponding operation, and the event operation notification message will be pushed multiple times. In the specified application control program. Through the push mode of the event operation notification message, it can be ensured that the private information in the card module can only be transmitted to the specified application control program in a targeted manner, thereby ensuring the security of the private information.
- the event reminding method is constructed by constructing a saved card module operation target.
- an event operation database marked by the application control program, and the card module operation mark and the application control program mark have specific associated information, and the related information can respectively correspond to different types of card modules and different application control programs;
- the event operation database can also perform a pseudo-random transformation based on the data structure on the association information, and the association information is also saved in a cache unit capable of automatically performing the clear operation, and the method can effectively avoid the card module in the above manner.
- the privacy information is stolen by the spoofed illegal application control program to ensure the security of the private information.
- FIG. 2 is a schematic structural diagram of an event reminding system according to an embodiment of the present invention.
- the event reminding system can perform operations on different types of card modules through the NFC function in the mobile terminal.
- the application control program having only the tag corresponding to the card module can be guaranteed to obtain the event operation notification message push, thereby ensuring the orientation and security of the event operation notification message push.
- the event reminding system includes a control unit, a database component unit, a cache unit, a message push unit, and an NFC unit.
- the control unit is configured to control the working states of the database component unit, the buffer unit, the message pushing unit, and the NFC unit, and the information data communication between each other.
- the database component unit is configured to establish an event operation database related to the card module operation tag and the application control program tag, the event operation database establishing an operational association between the card module and the application control program.
- the cache unit is configured to save association information between the card module operation tag and the application control program tag; the cache unit is only used to temporarily store the association information, and when the association information is saved in the cache unit for more than a preset After the effective duration or the associated information is used, the cache unit can automatically clear the associated information, thereby preventing the cache unit from becoming the target of the illegal application control program to obtain the card module private information.
- the NFC unit enables the mobile terminal to perform inductive communication with other mobile terminals through it, thereby implementing different types of online operations;
- the sensing communication object of the NFC unit can be an NFC unit of another mobile terminal or a card existing in an independent form.
- the module may be, but is not limited to, a smart card such as a savings card, a credit card, an ID card, a prepaid card, or a time card.
- the message pushing unit can locate the application control program specified in the association information according to the association information saved in the cache unit to determine a push path of the event operation message.
- the message pushing unit can select to transmit the event by using a one-way push or a multi-party push. As a notification message.
- the event reminding system has a specific operation information between the card module operation mark and the application control program mark by constructing an event operation database marked with the saved card module operation mark and the application control program mark.
- the association information can respectively match different types of card modules with different application control programs; in addition, the event operation database can also perform pseudo-random transformation based on the data structure on the association information and the association information is also saved to be automatically executed.
- the system can effectively prevent the private information in the card module from being stolen and copied by the spoofed illegal application control program, thereby ensuring the security of the private information.
- the storage medium may be a magnetic disk, an optical disk, a read-only memory (ROM), or a random access memory (RAM).
Landscapes
- Business, Economics & Management (AREA)
- Accounting & Taxation (AREA)
- Finance (AREA)
- Strategic Management (AREA)
- Physics & Mathematics (AREA)
- General Business, Economics & Management (AREA)
- General Physics & Mathematics (AREA)
- Engineering & Computer Science (AREA)
- Theoretical Computer Science (AREA)
- Telephone Function (AREA)
Abstract
本发明实施例公开了一种事件提醒方法，所述方法包括：S101、构建事件操作数据库，所述事件操作数据库中保存有与不同类型卡模块对应的卡模块操作标记、以及与所述卡模块对应的应用控制程序标记；S102、确定所述卡模块是否进行事件操作时，若是，则从所述事件操作数据库中查询与所述事件操作匹配的卡模块操作标记；S103、基于所述查询获得的卡模块操作标记，将事件操作通知消息推送至具有与所述卡模块操作标记对应的应用控制程序标记的应用控制程序。本发明实施例还公开了一种事件提醒系统。采用本发明，能提供一种高效和高安全性的事件提醒方法。
Description
本发明涉及通信安全技术领域，尤其涉及一种事件提醒方法和系统。
随着移动通信技术的发展，手机等移动终端已经进入人们生活和工作的方方面面，人们通过手机等移动终端中安装的不同应用控制程序能够进行如线上支付等不同移动操作，移动终端的发展方便人们随时随地地获取不同资讯和进行移动支付。移动终端技术的发展促进了各种应用控制程序的开发，同时也衍生了非法或者恶意应用控制程序入侵到移动终端中，并对移动终端的信息和操作进行窃取和窜改。现有技术中的移动终端内都设置有近距离场通信NFC单元，该近距离场通信NFC单元内部通常保存有关于移动终端用户的如密码等隐私信息，该近距离场通信NFC单元在进行非接触感应时间操作时都会向控制终端推送事件操作通知消息，该控制终端会将该事件操作通知消息传送至对应的应用控制程序中，该应用控制程序基于该事件操作通知消息会完成该通知消息对应的事件操作，在实际操作中，只要该控制终端注册表上存在的应用控制程序都具有获取该通知消息的权限，而非法或者恶意应用控制程序都可通过窜改该注册表的方式，来窃取该事件操作消息中的隐私信息。可见，现有的移动终端通过NFC单元进行操作时，存在隐私信息被窃取的安全隐患。
发明内容
针对上述现有技术存在的缺陷，本发明所要解决的技术问题在于现有技术中的移动终端内部存在的非法应用控制程序可通过窜改控制终端注册表的方式伪装为合法应用控制程序，并在移动终端采用NFC单元进行非接触感应操作时截取该NFC单元推送的事件操作通知消息，并窃取该通知消息内的隐私信息，从而使移动终端在进行线上通信操作时存在安全隐患。本发明的目的在于提供一种避免非法应用控制程序截取事件操作通知消息的时间提醒方法和系统，以保证NFC单元进行事件操作通知的安全性。
为了解决上述技术问题，本发明实施例提供一种事件提醒方法，其特征在于，所述方法包括：
S101、构建事件操作数据库，所述事件操作数据库中保存有与不同类型卡模块对应的卡模块操作标记、以及与所述卡模块对应的应用控制程序标记；
S102、确定所述卡模块是否进行事件操作时，若是，则从所述事件操作数据库中查询与所述事件操作匹配的卡模块操作标记；
S103、基于所述查询获得的卡模块操作标记，将事件操作通知消息推送至具有与所述卡模块操作标记对应的应用控制程序标记的应用控制程序；
进一步，在S101中，所述卡模块操作标记是以多层数据结构的形式存在，所述多层数据结构包括卡模块类型属性标记、卡模块密钥有效标记和卡模块触发标记；所述卡模块操作标记能够根据不同的卡模块信息进行更新；
进一步，在S101中，所述事件操作数据库建立所述卡模块操作标记与所述应用控制程序标记之间的关联信息，所述关联信息能够基于所述多层数据结构的形式进行伪随机变换；
进一步，在S102中，所述查询与所述事件操作匹配的卡模块操作标记具体为查询获得所述卡模块操作标记与所述应用控制程序标记之间的关联信息，并将所述关联信息保存在能够进行自动清空操作的缓存单元中；
进一步，在S103中，所述事件操作通知消息的推送方式包括单方应用控制程序推送或者多方应用控制程序推送。
相应地，本发明实施例还提供一种事件提醒系统，其特征在于，所述系统包括控制单元、数据库构建单元、NFC单元和消息推送单元，所述控制单元用于控制所述数据库构建单元、所述NFC单元和所述消息推送单元的工作状态；
所述数据库构建单元用于建立卡模块操作标记与应用控制程序标记之间关联信息的事件操作数据库；
所述NFC用于感应事件操作的发生与否；
所述消息推送单元能够基于所述关联信息将事件操作推送消息推送至指定的应用控制程序；
进一步，所述数据构件单元能够基于所述卡模块操作标记的多层数据结
构，对所述关联信息进行伪随机变换；
进一步，所述系统还包括缓存单元，所述缓存单元用于暂存所述关联信息，以供所述消息推送单元设定消息推送路径之用；
进一步，所述缓存单元能够在所述关联信息的暂存事件超过预设有效时长后、或者所述关联信息被所述消息推送单元使用后，对所述关联信息进行清除；
进一步，所述消息推送单元能够将所述事件操作推送消息向单个应用控制程序或者多个应用控制程序推送。
本发明通过上述技术方案提供一种事件提醒方法和系统通过构建保存有的卡模块操作标记和应用控制程序标记的事件操作数据库，并且该卡模块操作标记和应用控制程序标记之间具有特定的关联信息，该关联信息能够将不同类型的卡模块与不同的应用控制程序一一对应；此外，事件操作数据库还能对该关联信息进行基于数据结构的伪随机变换并且该关联信息也被保存到能够自动执行清空操作的缓存单元中，该方法和系统通过上述方式能够有效地避免卡模块中的隐私信息被伪装的非法应用控制程序窃取复制，从而保证该隐私信息的安全性。
为了更清楚地说明本发明实施例或现有技术中的技术方案，下面将对实施例或现有技术描述中所需要使用的附图作简单地介绍，显而易见地，下面描述中的附图仅仅是本发明的一些实施例，对于本领域普通技术人员来讲，在不付出创造性劳动的前提下，还可以根据这些附图获得其他的附图。
图1是本发明实施例提供的一种事件提醒方法的流程示意图；
图2是本发明实施例提供的一种事件提醒系统的结构示意图。
下面将结合本发明实施例中的附图，对本发明实施例中的技术方案进行清楚、完整地描述，显然，所描述的实施例仅仅是本发明一部分实施例，而不是全部的实施例。基于本发明中的实施例，本领域普通技术人员在没有作出创造性劳动前提下所获得的所有其他实施例，都属于本发明保护的范围。
参见图1，为本发明实施例提供的一种事件提醒方法的流程示意图，在本发明实施例中，所述方法包括：
S101、构建事件操作数据库，该事件操作数据库中保存有与不同类型卡模块对应的卡模块操作标记、以及与该卡模块对应的应用控制程序标记。
具体而言，该事件提醒方法是用于移动终端通过其中的NFC功能对不同类型的卡模块实施操作时，能够保证只具有与该卡模块对应的标记的应用控制程序才允许获得事件操作通知消息推送；其中，该移动终端可为但不限于是智能手机、平板电脑或者智能可穿戴设备等电子终端，并且该NFC功能是指该移动终端通过其中的NFC单元与其他移动终端之间进行感应通信，从而实现不同类型的线上操作。该卡模块是指该移动终端通过如单线程协议SWP等通信协议与该移动终端内部的基带操作单元进行连接的各种类型的智能芯片卡，优选地，该智能芯片卡可为储蓄卡、信用卡、身份证、充值卡或者考勤卡等，该智能芯片卡通过其内部的芯片保存有关于用户的隐私信息。每个智能芯片卡都唯一对应地设置有与其能够执行的事件操作相对应的卡模块操作标记，举例而言，当该智能芯片卡为公交充值卡时，该公交卡被设定了能够通过移动终端进行充值的操作，对应地，该公交卡被赋予了公交卡充值操作的标记。该卡模块操作标记以多层数据的形式存在，即该卡模块操作标记包括卡模块类型属性标记、卡模块密钥有效标记和卡模块触发标记。其中，该卡模块类型属性标记是指该卡模块是具有身份认证还是钱包交易的类型属性、以及该卡模块的发行商信息；该卡模块密钥有效标记是指该卡模块对应的开启密码钥匙是否处于有效期间内，或者该卡模块对应的开启密码钥匙是否需要进行更新；该卡模块触发标记是指该卡模块是否与移动终端的NFC单元之间产生感应操作，该卡模块触发标记可设定为动态变化的标记码，该标记码能够在该卡模块为感应操作或者非感应操作的两种状态下处于不同的编码形式。移动终端中的数据库构建单元根据移动终端的通信协议获取该移动终端能够进行连接的卡模块信息，该数据库构建单元能够针对不同的卡模块应用来对卡模块信息进行更新操作。
进一步，该移动终端还安装有与不同卡模块的操作相对应的应用控制程序，该应用控制程序作为该卡模块操作的上层控制端，其能够基于卡模块可执行的操作进行控制。该应用控制程序是软件客户端的形式安装于移动终端内，
该应用控制程序可为在线支付充值客户端或者在线通信客户端等。每个应用控制程序都被设定有应用控制程序标记，该应用控制程序标记是用于标识应用控制程序的操作特征信息的，该操作特征信息是指其对应的应用控制程序能够执行的操作。理论上，每个卡模块都只能通过移动终端中预设的应用控制程序来实施特定的操作，这是基于卡模块与该预设应用控制程序之间的关联信息，但是这种关联信息是固定不变并且容易被克隆复制的，若移动终端内存在木马程序，该木马程序就很容易复制出该关联信息来进行伪装。为了避免上述伪装事件的发生，该数据库构件单元建立出该卡模块操作标记与该应用控制程序标记之间相关的事件操作数据库，该事件操作数据库建立卡模块与应用控制程序之间的操作关联性。此外，基于该卡模块操作标记在数据上的多层结构性，该事件操作数据库能够在该多层结构的限定内进行该对应性变换，并且该对应性变换能够以伪随机的形式进行，这样能够有效防止木马程序对该事件操作数据库中信息的复制和窃用。
S102、确定该卡模块是否进行事件操作时，若是，则从该事件操作数据库中查询与该事操作匹配的卡模块操作标记。
具体而言，当用户将卡模块靠近移动终端设置时，该移动终端的NFC单元等非接触感应单元与该卡模块之间发生场感应动作，此时该NFC单元感应到卡模块的存在后会向控制单元发送卡模块事件操作触发信号，该控制单元接收到该卡模块事件操作触发信号后，对该事件操作数据库进行访问查询以获取与该卡模块相对应的唯一的应用控制程序标记。进一步，该卡模块事件操作触发信号还包含对该事件操作数据库进行访问的开启密匙，该控制单元将该开启密匙进行解码处理，从中获取该开启密匙中的随机编码，并将该随机编码与该事件操作数据库进行匹配处理，若该随机编码匹配于该事件操作数据库，则该控制单元能够获得访问该事件操作数据库的权限。此外，该控制单元还依据以访问规则对该事件操作数据库进行访问，该访问规则具体为该控制单元只能在一次访问过程中获取一个卡模块操作标记与应用控制程序操作标记之间的关联信息，并且当该控制单元每进行一次访问操作后，该事件操作数据库都会基于上述卡模块操作标记的数据多层结构性变更数据库中该卡模块操作标记与该应用控制程序之间的关联性信息结构，从而避免木马程序对该事件操作数据
库中的所有关联性信息进行窃取复制，同时也缩短了该事件操作数据库中所有关联信息的有效时长。
随后，该控制单元将访问获得的卡模块操作标记与应用控制程序操作标记之间的关联信息保存在缓存单元中。该缓存单元只是用户暂时保存该关联信息的，比如，该控制单元对该缓存单元设定了关联信息保存有效时长，当该关联信息在该缓存单元中的保存时间超过该有效时长时，该缓存单元就会自动将该关联信息清除，若在该有效时长内，该控制单元没有进行任何关于该关联信息的操作，该控制单元就必须再次访问该事件操作数据库以获取新的关联信息；或者，当该缓存单元中保存的该关联信息被使用后，该缓存单元就会自动删除该关联信息；再者，当该移动终端处于待机或者休眠等状态时，该缓存单元也会自动删除该关联信息，通过上述方式能够避免该关联信息存留在该缓存单元中，从而防止该缓存单元成为非法应用控制程序获取卡模块隐私信息的目标，并且，该事件操作数据库采用随机编码才能开启的方式也确保该事件操作数据库中信息的安全性。
S103、基于该查询获得的卡模块操作标记，将事件操作通知消息推送至具有与该卡模块操作标记对应的应用控制程序标记的应用控制程序。
具体而言，消息推送单元依据该缓存单元中保存的关联信息，对该关联信息中指定的应用控制程序进行定位，以确定该事件操作消息的推送路径。该消息推送单元还能根据该控制单元获取的关于该卡模块的隐私信息来生成该事件操作通知消息，随后，该消息推送单元根据该推送路径将该事件操作通知消息推送作为接收目标的应用控制程序。特别地，该消息推送单元能够选择采用单方推送或者多方推送的方式来传送该事件操作通知消息，其中，该单方推送的方式适用于该卡模块只需要单一的应用控制程序就可完成相应操作，该事件操作通知消息也只会被推送到一个指定的应用控制程序中；该多方推送的方式适用于该卡模块需要多个应用控制程序才能完成相应操作，该事件操作通知消息会被推送多个指定的应用控制程序中。通过该事件操作通知消息的推送方式，能够保证卡模块中的隐私信息只能定向地传送到指定的应用控制程序中，从而保证该隐私信息的安全性。
从上述实施例可以看出，该事件提醒方法通过构建保存有的卡模块操作标
记和应用控制程序标记的事件操作数据库，并且该卡模块操作标记和应用控制程序标记之间具有特定的关联信息，该关联信息能够将不同类型的卡模块与不同的应用控制程序一一对应；此外，事件操作数据库还能对该关联信息进行基于数据结构的伪随机变换并且该关联信息也被保存到能够自动执行清空操作的缓存单元中，该方法通过上述方式能够有效地避免卡模块中的隐私信息被伪装的非法应用控制程序窃取复制，从而保证该隐私信息的安全性。
参见图2，为本发明实施例提供的一种事件提醒系统的结构示意图，在本发明实施例中，该事件提醒系统能够在移动终端中将通过其中的NFC功能对不同类型的卡模块实施操作时，能够保证只具有与该卡模块对应的标记的应用控制程序才允许获得事件操作通知消息推送，从而保证该事件操作通知消息推送的定向性和安全性。
该事件提醒系统包括控制单元、数据库构件单元、缓存单元、消息推送单元和NFC单元。该控制单元用于控制该数据库构件单元、缓存单元、消息推送单元和NFC单元的工作状态以及相互之间的信息数据通信。
该数据库构件单元用于建立该卡模块操作标记与该应用控制程序标记之间相关的事件操作数据库，该事件操作数据库建立卡模块与应用控制程序之间的操作关联性。
该缓存单元用于保存该卡模块操作标记与该应用控制程序标记之间的关联信息；该缓存单元只是用于暂存该关联信息，并当该关联信息在缓存单元中的保存时间超过预设有效时长或者该关联信息被使用后，该缓存单元能够自动清除该关联信息，从而防止该缓存单元成为非法应用控制程序获取卡模块隐私信息的目标。
该NFC单元使移动终端通过其能够与与其他移动终端之间进行感应通信，从而实现不同类型的线上操作；该NFC单元的感应通信对象可以其他移动终端的NFC单元或者以独立形式存在的卡模块，该卡模块可为但不限于是储蓄卡、信用卡、身份证、充值卡或者考勤卡等智能芯片卡。
该消息推送单元能够依据该缓存单元中保存的关联信息，对该关联信息中指定的应用控制程序进行定位，以确定该事件操作消息的推送路径。优选地，该消息推送单元能够选择采用单方推送或者多方推送的方式来传送该事件操
作通知消息。
关于本实施例涉及的术语的含义以及举例，可以参考图1对应的实施例。此处不再赘述。
从上述实施例可以看出，该事件提醒系统通过构建保存有的卡模块操作标记和应用控制程序标记的事件操作数据库，并且该卡模块操作标记和应用控制程序标记之间具有特定的关联信息，该关联信息能够将不同类型的卡模块与不同的应用控制程序一一对应；此外，事件操作数据库还能对该关联信息进行基于数据结构的伪随机变换并且该关联信息也被保存到能够自动执行清空操作的缓存单元中，该系统通过上述方式能够有效地避免卡模块中的隐私信息被伪装的非法应用控制程序窃取复制，从而保证该隐私信息的安全性。
本领域普通技术人员可以理解实现上述实施例方法中的全部或部分流程，是可以通过计算机程序来指令相关的硬件来完成，所述的程序可存储于一计算机可读取存储介质中，该程序在执行时，可包括如上述各方法的实施例的流程。其中，所述的存储介质可为磁碟、光盘、只读存储记忆体(Read-Only Memory，ROM)或随机存储记忆体(Random Access Memory，RAM)等。
以上所揭露的仅为本发明一种较佳实施例而已，当然不能以此来限定本发明之权利范围，本领域普通技术人员可以理解实现上述实施例的全部或部分流程，并依本发明权利要求所作的等同变化，仍属于发明所涵盖的范围。
Claims (10)
- 一种事件提醒方法，其特征在于，所述方法包括：S101、构建事件操作数据库，所述事件操作数据库中保存有与不同类型卡模块对应的卡模块操作标记、以及与所述卡模块对应的应用控制程序标记；S102、确定所述卡模块是否进行事件操作时，若是，则从所述事件操作数据库中查询与所述事件操作匹配的卡模块操作标记；S103、基于所述查询获得的卡模块操作标记，将事件操作通知消息推送至具有与所述卡模块操作标记对应的应用控制程序标记的应用控制程序。
- 根据权利要求1所述的方法，其特征在于，在S101中，所述卡模块操作标记是以多层数据结构的形式存在，所述多层数据结构包括卡模块类型属性标记、卡模块密钥有效标记和卡模块触发标记；所述卡模块操作标记能够根据不同的卡模块信息进行更新。
- 根据权利要求2所述的方法，其特征在于，在S101中，所述事件操作数据库建立所述卡模块操作标记与所述应用控制程序标记之间的关联信息，所述关联信息能够基于所述多层数据结构的形式进行伪随机变换。
- 根据权利要求1所述的方法，其特征在于，在S102中，所述查询与所述事件操作匹配的卡模块操作标记具体为查询获得所述卡模块操作标记与所述应用控制程序标记之间的关联信息，并将所述关联信息保存在能够进行自动清空操作的缓存单元中。
- 根据权利要求1所述的方法，其特征在于，在S103中，所述事件操作通知消息的推送方式包括单方应用控制程序推送或者多方应用控制程序推送。
- 一种事件提醒系统，其特征在于，所述系统包括控制单元、数据库构建单元、NFC单元和消息推送单元，所述控制单元用于控制所述数据库构建单元、所述NFC单元和所述消息推送单元的工作状态；所述数据库构建单元用于建立卡模块操作标记与应用控制程序标记之间关联信息的事件操作数据库；所述NFC用于感应事件操作的发生与否；所述消息推送单元能够基于所述关联信息将事件操作推送消息推送至指定的应用控制程序。
- 根据权利要求6所述的系统，其特征在于，所述数据构件单元能够基于所述卡模块操作标记的多层数据结构，对所述关联信息进行伪随机变换。
- 根据权利要求6所述的系统，其特征在于，所述系统还包括缓存单元，所述缓存单元用于暂存所述关联信息，以供所述消息推送单元设定消息推送路径之用。
- 根据权利要求8所述的系统，其特征在于，所述缓存单元能够在所述关联信息的暂存事件超过预设有效时长后、或者所述关联信息被所述消息推送单元使用后，对所述关联信息进行清除。
- 根据权利要求6所述的系统，其特征在于，所述消息推送单元能够将所述事件操作推送消息向单个应用控制程序或者多个应用控制程序推送。
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| PCT/CN2017/083371 WO2018205057A1 (zh) | 2017-05-07 | 2017-05-07 | 一种事件提醒方法和系统 |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| PCT/CN2017/083371 WO2018205057A1 (zh) | 2017-05-07 | 2017-05-07 | 一种事件提醒方法和系统 |
Publications (1)
| Publication Number | Publication Date |
|---|---|
| WO2018205057A1 true WO2018205057A1 (zh) | 2018-11-15 |
Family
ID=64104129
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| PCT/CN2017/083371 WO2018205057A1 (zh) | 2017-05-07 | 2017-05-07 | 一种事件提醒方法和系统 |
Country Status (1)
| Country | Link |
|---|---|
| WO (1) | WO2018205057A1 (zh) |
Citations (4)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US20140316879A1 (en) * | 2010-10-15 | 2014-10-23 | Kt Corporation | Integrated payment method using near field communication and mobile terminal using the same |
| CN104166917A (zh) * | 2014-07-31 | 2014-11-26 | 宇龙计算机通信科技(深圳)有限公司 | Nfc交易事件的通知方法及系统 |
| CN104463272A (zh) * | 2014-11-28 | 2015-03-25 | 郭宏志 | 通过nfc标签建立信息通信的方法与移动设备终端及nfc通信系统 |
| CN104580159A (zh) * | 2014-12-12 | 2015-04-29 | 西安酷派软件科技有限公司 | 一种事件通知的方法、装置及终端设备 |
-
2017
- 2017-05-07 WO PCT/CN2017/083371 patent/WO2018205057A1/zh active Application Filing
Patent Citations (4)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US20140316879A1 (en) * | 2010-10-15 | 2014-10-23 | Kt Corporation | Integrated payment method using near field communication and mobile terminal using the same |
| CN104166917A (zh) * | 2014-07-31 | 2014-11-26 | 宇龙计算机通信科技(深圳)有限公司 | Nfc交易事件的通知方法及系统 |
| CN104463272A (zh) * | 2014-11-28 | 2015-03-25 | 郭宏志 | 通过nfc标签建立信息通信的方法与移动设备终端及nfc通信系统 |
| CN104580159A (zh) * | 2014-12-12 | 2015-04-29 | 西安酷派软件科技有限公司 | 一种事件通知的方法、装置及终端设备 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| US10264433B2 (en) | System and method for using an electronic lock with a smartphone | |
| CN108012268B (zh) | 一种保证应用软件在手机终端上安全使用的sim卡 | |
| JP6321023B2 (ja) | 内部不揮発性メモリを有しないデバイスにおいてアンチロールバック保護を与えるための方法 | |
| US10600298B1 (en) | Exit-code-based RFID loss-prevention system | |
| CN110826043B (zh) | 一种数字身份申请系统及方法、身份认证系统及方法 | |
| CN103400068B (zh) | 使用多级验证控制用户对受保护资源的访问的系统和方法 | |
| US10038607B2 (en) | System for aggregated machine-initiated resource distribution | |
| US11062050B2 (en) | Devices, systems, and methods for securely storing and managing sensitive information | |
| CN103839313A (zh) | 访问控制系统 | |
| US20140282857A1 (en) | Systems and methods to synchronize data to a mobile device based on a device usage context | |
| US8744403B2 (en) | Method and system for remote control of a smart card | |
| US8768300B2 (en) | Remote control method and system for smart card | |
| JP2007041954A (ja) | 価値情報移動システム，価値情報移動方法 | |
| WO2016202108A1 (zh) | Nfc支付方法、nfc支付系统和移动终端 | |
| US20160103716A1 (en) | Method for using shared device in apparatus capable of operating two operating systems | |
| CN113239375B (zh) | 基于区块链的隐私要素数据共享系统、方法、计算机设备及介质 | |
| US20220374902A1 (en) | Providing irrevocable evidence of physical presence using proximity technology and a distributed ledger | |
| Alattar et al. | Host-based card emulation: Development, security, and ecosystem impact analysis | |
| TW202004635A (zh) | 用於使用商用現成或物聯網裝置之處理安全金融交易之方法 | |
| CN114241631A (zh) | 一种智能门锁的管控方法、注册方法及相关装置 | |
| US20210209574A1 (en) | Security protection of association between a user device and a user | |
| US20220131685A1 (en) | Method and apparatus for registering shared key | |
| US11507958B1 (en) | Trust-based security for transaction payments | |
| US12002040B2 (en) | Device driver for contactless payments | |
| WO2018205057A1 (zh) | 一种事件提醒方法和系统 |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| 121 | Ep: the epo has been informed by wipo that ep was designated in this application |
Ref document number: 17908971 Country of ref document: EP Kind code of ref document: A1 |
|
| NENP | Non-entry into the national phase |
Ref country code: DE |
|
| 122 | Ep: pct application non-entry in european phase |
Ref document number: 17908971 Country of ref document: EP Kind code of ref document: A1 |