WO2019109817A1 - Short message verification method, apparatus, storage medium, short message verification system, and terminal - Google Patents

Short message verification method, apparatus, storage medium, short message verification system, and terminal Download PDF

Info

Publication number
WO2019109817A1
WO2019109817A1 PCT/CN2018/117129 CN2018117129W WO2019109817A1 WO 2019109817 A1 WO2019109817 A1 WO 2019109817A1 CN 2018117129 W CN2018117129 W CN 2018117129W WO 2019109817 A1 WO2019109817 A1 WO 2019109817A1
Authority
WO
WIPO (PCT)
Prior art keywords
short message
verified
verification
verification report
receiving device
Prior art date
Application number
PCT/CN2018/117129
Other languages
French (fr)
Chinese (zh)
Inventor
谢小亮
曾伟
刘君
Original Assignee
中兴通讯股份有限公司
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by 中兴通讯股份有限公司 filed Critical 中兴通讯股份有限公司
Publication of WO2019109817A1 publication Critical patent/WO2019109817A1/en

Links

Images

Classifications

    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/40Network security protocols
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04WWIRELESS COMMUNICATION NETWORKS
    • H04W12/00Security arrangements; Authentication; Protecting privacy or anonymity
    • H04W12/12Detection or prevention of fraud
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04WWIRELESS COMMUNICATION NETWORKS
    • H04W4/00Services specially adapted for wireless communication networks; Facilities therefor
    • H04W4/12Messaging; Mailboxes; Announcements
    • H04W4/14Short messaging services, e.g. short message services [SMS] or unstructured supplementary service data [USSD]

Definitions

  • the present invention relates to the field of communications, and in particular, to a short message verification method, apparatus, storage medium, short message verification system, and terminal.
  • SMS verification also called SMS verification
  • the user initiates SMS verification from the terminal and sends the SMS information to the server.
  • the server uses the received SMS information to compare with the sent SMS database. If it exists, it indicates that the SMS is secure. If it does not exist, it indicates a hidden danger.
  • Question 1 Due to the need to upload the user's SMS message to the server, this process may involve the risk of information leakage and infringement that may cause the server contractor to be fined a lot.
  • the existing short message identification and security identification are based on smart phones, while the marking methods of functional machines (for example, old people's machines, children's mobile phones) and the like are missing.
  • the embodiment of the invention provides a method, a device, a storage medium, a short message verification system and a terminal for verifying a short message, so as to at least solve the problem of high cost and large manpower and material resources in realizing short message verification in the related art. problem.
  • a method for verifying a short message includes: receiving a short message to be verified sent by a short message center or a short message gateway; calculating a check string corresponding to the short message to be verified; The verification string generates a verification report, and the verification report is sent to a receiving device configured to receive the short message to be verified, wherein the verification report is used by the receiving device to The authenticity of the SMS to be verified is verified.
  • a second method for verifying a short message including: receiving a verification report of the short message to be verified, wherein the verification report carries the calculated short message with the to be verified Corresponding verification string; comparing the verification string carried in the verification report with the locally stored verification string obtained by calculating the short message to be verified; determining the authenticity of the short message to be verified according to the comparison result .
  • a first type of short message verification apparatus including: a first receiving module, configured to receive a short message to be verified sent by a short message center or a short message gateway; and a first calculating module configured to calculate a verification string corresponding to the to-be-verified short message; the processing module is configured to generate a verification report according to the calculated verification string, and send the verification report to the receiving the to-be-verified The receiving device of the short message, wherein the verification report is used by the receiving device to verify the authenticity of the short message to be verified.
  • a second short message verification apparatus including: a second receiving module, configured to receive a verification report of the short message to be verified, wherein the verification report carries a calculation a check string corresponding to the short message to be verified; a comparison module, configured to compare a check string carried in the verification report with a locally stored check string obtained by calculating the short message to be verified; The module is configured to determine the authenticity of the short message to be verified according to the comparison result.
  • a storage medium comprising a stored program, wherein the program is executed to perform the method of any of the above.
  • processor being arranged to run a program, wherein the program is executed to perform the method of any of the above.
  • a short message verification system including a short message center or a short message gateway, and a first processor, wherein the short message center or the short message gateway is used to send a short message to be verified.
  • a receiving device and the first processor the first processor is connected to the short message center or the short message gateway, and is configured to receive the short message to be verified delivered by the short message center or the short message gateway, and calculate Determining a verification string corresponding to the verified short message, and generating a verification report according to the calculated verification string, and transmitting the verification report to the receiving device, where the verification report is used for The receiving device verifies the authenticity of the short message to be verified.
  • a terminal including a second processor, where the second processor is configured to receive a verification report of a short message to be verified, where the verification report carries Calculating a check string corresponding to the short message to be verified; comparing the check string carried in the verification report with a locally stored check string obtained by calculating the short message to be verified; determining according to the comparison result The authenticity of the short message to be verified.
  • the verification report of the to-be-verified short message can be generated by the server side (ie, the short message verification system side), so that the device receiving the short message can verify the authenticity of the short message according to the verification report.
  • the receiving device does not need to send the short message content to the server side, thereby ensuring the authenticity of the short message while ensuring the security of the user's information and property, and effectively solving the cost incurred in implementing the short message verification in the related art. Large human and material problems.
  • FIG. 1 is a block diagram showing the hardware structure of a mobile terminal of a short message verification method according to an embodiment of the present invention
  • FIG. 2 is a flowchart of a first method for verifying a short message according to an embodiment of the present invention
  • FIG. 3 is a flowchart of a second method for verifying a short message according to an embodiment of the present invention.
  • FIG. 4 is a flowchart of a method for short message verification based on a data network according to an embodiment of the present invention
  • FIG. 5 is a flowchart of a short message verification method based on a short message method according to an embodiment of the present invention
  • FIG. 6 is a structural block diagram of a first short message verification apparatus according to an embodiment of the present invention.
  • FIG. 7 is a structural block diagram of a second short message verification apparatus according to an embodiment of the present invention.
  • FIG. 8 is a structural block diagram of a short message verification system according to an embodiment of the present invention.
  • FIG. 9 is a flow chart of an online intelligent machine short message verification according to an embodiment of the present invention.
  • FIG. 10 is a flowchart of a short message verification of an offline intelligent machine according to an embodiment of the present invention.
  • FIG. 11 is a flow chart of a function machine short message verification according to an embodiment of the present invention.
  • FIG. 12 is a flow chart of a short message verification and verification report push according to an embodiment of the present invention.
  • FIG. 13 is a schematic diagram of displaying a “verified” identifier of a terminal short message interface according to an embodiment of the present invention.
  • FIG. 14 is a schematic diagram of a short message verification report popup window according to an embodiment of the present invention.
  • the short message verification mechanism mainly includes the following three types of mechanisms:
  • Mechanism 1 Encrypted transmission of SMS content. This kind of technology can solve the problem of illegal interception of user SMS information by criminals, but it cannot solve the problem of authenticity of SMS messages received by users;
  • Mechanism 2 Identify and classify SMS risks by SMS content keywords. Such mechanisms strongly rely on key information stored in the local database. Unidentified SMS messages such as pseudo base stations cannot be identified, and local database updates have time differences. This time difference is very prone to errors and omissions. ;
  • Mechanism 3 The big data SMS verification represented by some spam identification system relies entirely on big data analysis (all the user's SMS keyword information needs to be uploaded to their database, this process may have infringement on the user) At the same time, such applications are not connected to the operator, and the recognition rate is less than 100%;
  • the present invention provides a complete set of SMS security verification mechanisms for intelligent terminals and function machines that can be accessed within an operator.
  • the recognition rate can reach 100%; the method does not need to obtain any short message information from the terminal (ie, the receiving device), and can easily pass the requirements of the EU GDPR Act; the implementation system of the method belongs to a lightweight system, and can realize the industry SMS server provider (Service) Provider, referred to as SP) certification, has a high commercial value; it can directly perform SMS verification on the operator or the verification system, and push the SMS verification report to the terminal; after the terminal matches the specific SMS, it will display the verification according to the configured template.
  • Service Service
  • the user can identify junk and illegal text messages based on the verification results displayed by the terminal. In the entire interaction process, no message transmission of the user is involved. Greatly protect the user's information and property security, and reduce the success rate of SMS fraud in the telecommunications field.
  • FIG. 1 is a hardware structural block diagram of a mobile terminal of a short message verification method according to an embodiment of the present invention.
  • mobile terminal 10 may include one or more (only one shown in FIG. 1) processor 102 (processor 102 may include, but is not limited to, a processing device such as a microprocessor MCU or a programmable logic device FPGA. ), a memory 104 that is set to store data, and a transmission device 106 that is set to a communication function.
  • processor 102 may include, but is not limited to, a processing device such as a microprocessor MCU or a programmable logic device FPGA.
  • memory 104 that is set to store data
  • a transmission device 106 that is set to a communication function.
  • the structure shown in FIG. 1 is merely illustrative and does not limit the structure of the above electronic device.
  • the mobile terminal 10 may also include more or fewer components than those shown in FIG. 1, or have a different configuration than that shown in FIG.
  • the memory 104 can be configured as a software program and a module for storing application software, such as a program instruction/module corresponding to the short message verification method in the embodiment of the present invention, and the processor 102 executes each by executing a software program and a module stored in the memory 104.
  • a functional application and data processing, that is, the above method is implemented.
  • Memory 104 may include high speed random access memory, and may also include non-volatile memory such as one or more magnetic storage devices, flash memory, or other non-volatile solid state memory.
  • memory 104 may further include memory remotely located relative to processor 102, which may be connected to mobile terminal 10 over a network. Examples of such networks include, but are not limited to, the Internet, intranets, local area networks, mobile communication networks, and combinations thereof.
  • Transmission device 106 is arranged to receive or transmit data via a network.
  • the above-described network specific example may include a wireless network provided by a communication provider of the mobile terminal 10.
  • the transmission device 106 includes a Network Interface Controller (NIC) that can be connected to other network devices through a base station to communicate with the Internet.
  • the transmission device 106 can be a Radio Frequency (RF) module configured to communicate with the Internet wirelessly.
  • NIC Network Interface Controller
  • RF Radio Frequency
  • FIG. 2 is a flowchart of a first method for verifying a short message according to an embodiment of the present invention. As shown in FIG. 2, the process includes the following steps:
  • Step S202 receiving a short message to be verified sent by the short message center or the short message gateway;
  • Step S204 calculating a check string corresponding to the short message to be verified
  • Step S206 generating a verification report according to the calculated verification string, and sending the verification report to the receiving device configured to receive the short message to be verified, wherein the verification report is used by the receiving device to be verified. The authenticity of the text message is verified.
  • the device performing the foregoing operations may be a device on the server side, and when calculating the check string corresponding to the short message to be verified, the calculation may be performed according to a predetermined algorithm, and the algorithm may be flexibly set according to actual conditions, where the check string is
  • the generation method is not unique, and can be generated by a conventional report generation method, as long as the generated verification report has relevant information and a check string.
  • the verification report of the short message to be verified can be generated by the server side, so that the device receiving the short message can verify the authenticity of the short message according to the verification report, and the receiving device does not need to send the short message content to the server side.
  • the information and property security of the user can be ensured while verifying the authenticity of the short message, and the problem of high cost and large manpower and material resources in realizing the short message verification in the related technology is effectively solved.
  • calculating the check string corresponding to the short message to be verified includes: calculating, according to the sending device information of the short message to be verified, that the sending device has the short message verifying authority, calculating and verifying The verification string corresponding to the short message.
  • the sending device with the short message verification authority may be the sending device that has paid the short message verification fee. If it is determined that the sender of the short message to be verified does not have the short message verification authority, the short message sent is not verified.
  • generating the verification report according to the calculated verification string includes: determining related information of the short message to be verified, wherein the related information includes at least one of the following: sending the short message to be verified.
  • the sending the verification report to the receiving device configured to receive the short message to be verified includes: determining a device type of the receiving device; and transmitting the verification report to the receiving device according to the device type .
  • the transmission manners corresponding to different types of devices may be different.
  • determining the device type of the receiving device includes: determining a device type of the receiving device by querying the registration information of the receiving device; in this embodiment, the receiving device may report the device itself when registering in advance
  • the type of device for example, a smart phone or a feature machine.
  • the sending the verification report to the receiving device according to the device type includes: determining that the device type is a smart machine, determining a network connection status of the smart device; In the state, the verification report is sent to the receiving device through the data network or the wireless network; when it is the offline state of the unconnected network, the verification report is sent to the receiving device by means of the short message sending; the device type is determined to be the function machine. In the case of sending a verification report to the receiving device by means of short message transmission.
  • the information receiving manners supported by different types of receiving devices are different. For the smart phone, when it is connected to the network, it can receive information through the wireless network or the data network, but for the unconnected network.
  • the verification report when the verification report is sent to the receiving device by means of short message sending, the verification report may be sent to the receiving device by means of a shadow short message or a binary short message.
  • determining the network connection status of the smart machine includes: determining identification information of the receiving device; determining a network connection status of the smart machine by using the identification information to query a database, wherein the database is used for storing Correspondence between the identification information of the device and the network connection status of the device.
  • the server side needs to perform link keep-alive with the receiving device. Since the smart machine can perform data network connection and wireless network connection, data can be utilized during keep-alive operation.
  • the network or wireless network transmits bearer data as a bearer.
  • the receiving device can also actively report its own status at regular intervals.
  • FIG. 3 is a flowchart of a second short message verification method according to an embodiment of the present invention, as shown in FIG. The process includes the following steps:
  • Step S302 receiving a verification report of the short message to be verified, where the verification report carries the calculated verification string corresponding to the short message to be verified;
  • Step S304 comparing the check string carried in the verification report with the locally stored check string obtained by calculating the short message to be verified;
  • Step S304 determining the authenticity of the short message to be verified according to the comparison result.
  • the performing the above operation may be a receiving device of a short message, for example, a user equipment UE.
  • the received verification report may be sent by the server, and the verification string corresponding to the short message to be verified may be calculated according to a predetermined algorithm.
  • the verification report of the short message to be verified can be generated by the server side, so that the device receiving the short message can verify the authenticity of the short message according to the verification report, and the receiving device does not need to send the short message content to the server side. It can ensure the security of the user's information and property while verifying the authenticity of the text message, and effectively solve the problem that the related technology cannot effectively implement the short message verification.
  • the method before the comparison between the verification string carried in the verification report and the verification string calculated by the local pre-verification of the short message, the method further includes: receiving the short message to be verified. Calculating a check string corresponding to the short message to be verified; storing the check string and the sending device information of the short message to be verified in the short message check string library.
  • the receiving when receiving the short message to be verified, the receiving may be performed according to the conventional short message receiving manner.
  • the same algorithm as the server side is used for calculation. In the embodiment of the present invention, the same algorithm may be set in advance on the receiving device and the server side, or the algorithm may be determined by dynamic negotiation between the receiving device and the server side, but the algorithms on the receiving device and the server side need to be consistent.
  • comparing the check string carried in the verification report with the locally stored check string obtained by calculating the short message to be verified includes: sending device information carried in the verification report according to the foregoing The check string corresponding to the sending device information is searched in the short message check string library; the check string carried in the comparison report is compared with the found check string corresponding to the sending device information.
  • the receiving device side can compare whether the verification string generated by the calculation by the server side is consistent with the verification string generated by the local calculation, and if the two are consistent, the short message to be verified is true, if the two are inconsistent If the short message to be verified is forged, in the embodiment, the short message is true, indicating that the short message is sent by the legal base station, and the fake short message is sent by the pseudo base station.
  • the method further includes: adding a verified identifier to the short message to be verified when determining that the short message to be verified is true .
  • the verified identifier may be added to the verified text message, and the identifier may be in any form, which may be a way of adding text, or adding a symbol (for example, “ ⁇ ”), in some manners.
  • the method further includes: generating a verification report according to the comparison result; and linking the verified identifier with the verification report.
  • the verification report can be generated and saved to facilitate subsequent viewing, and the specific generated verification report can be automatically linked to and displayed when the verified identification is clicked. Therefore, in the related art, since the terminal side does not store the content of the verification result, the user needs to check the verification result again, and repeats the verification of the short message to consume more user traffic.
  • FIG. 4 is a flowchart of a method for verifying a short message based on a data network according to an embodiment of the present invention. The specific process is shown in FIG. 4, where
  • the first step indicates that the service provider (Service Provider, SP for short) sends the enterprise text message through the SMS center or the SMS gateway of the operator.
  • Service Provider Service Provider, SP for short
  • Steps 2 and 3 indicate that the short message center or the short message gateway is responsible for sending a short message to the short message receiver terminal (corresponding to the above receiving terminal) through the short message protocol.
  • Step 4 After the terminal receives the short message, the APP in the terminal reads the short message, and calculates a short message hash string (corresponding to the above check string) according to an algorithm consistent with the server, and stores it in the local database (corresponding to the above) SMS check string library).
  • the short message center or the short message gateway copies the short message to the short message verification server (corresponding to the above short message verification system) in the embodiment of the present invention, and the short message verification server receives the message.
  • the short message (corresponding to S202 in FIG. 2)
  • the hash string corresponding to the short message is calculated according to an algorithm consistent with the APP, and the SP message is queried by the short message sender, the verification time, etc., and combined into a verification report (corresponding to S204-206 in Fig. 2).
  • Steps 6 and 7 describe the process by which the SMS verification server pushes the verification report to the terminal over the data network.
  • Step 8 describes that after receiving the verification report, the APP takes out the hash string and matches the terminal local hash string library, and displays the flow of the verification report according to the matching result (corresponding to steps S302-S304 in FIG. 3).
  • FIG. 5 is a flowchart of a short message verification method based on a short message method according to an embodiment of the present invention. The specific process is shown in FIG. 5, wherein:
  • the first step indicates that the industry SMS SP sends the enterprise text message through the operator's SMS center or SMS gateway.
  • Steps 2 and 3 indicate that the short message center or the short message gateway is responsible for sending a short message to the short message receiver terminal through the short message protocol.
  • the smart phone After the terminal receives the short message, the smart phone reads the short message through the APP (the function machine through the short message receiving module), and calculates the short message hash string according to the algorithm consistent with the server, and stores it in the local database.
  • the APP the function machine through the short message receiving module
  • Step 5 indicates that after the enterprise SMS of the SP is successfully delivered, the SMS center or the SMS gateway copies the short message to the short message verification server of the patent, and the short message verification server receives the short message (corresponding to S202 of FIG. 2), according to
  • the algorithm consistent with the APP calculates a hash string corresponding to the short message (corresponding to S204 of FIG. 2), and simultaneously queries the SP information, the verification time, and the like by the short message sender, and combines them into a verification report (corresponding to S206 in FIG. 2).
  • a verification report is generated based on the calculated check string.
  • Steps 6 and 7 describe the process in which the short message verification server pushes the verification report to the terminal through the short message transmission protocol (shadow message or binary message) (corresponding to the verification report sent in S206 of FIG. 2 is set to receive The receiving device of the above-mentioned short message to be verified).
  • the short message transmission protocol shadow message or binary message
  • Step 8 describes the processing flow after the terminal receives the verification report.
  • the smart machine After receiving the verification report through the APP (the function machine through the short message receiving module), the smart machine takes out the hash string and matches the terminal local hash string library, and displays the flow of the verification report according to the matching result (corresponding to FIG. 3). Process).
  • the method according to the above embodiment can be implemented by means of software plus a necessary general hardware platform, and of course, by hardware, but in many cases, the former is A better implementation.
  • the technical solution of the present invention which is essential or contributes to the prior art, may be embodied in the form of a software product stored in a storage medium (such as ROM/RAM, disk,
  • the optical disc includes a number of instructions for causing a terminal device (which may be a cell phone, a computer, a server, or a network device, etc.) to perform the methods described in various embodiments of the present invention.
  • a short message verification device is provided, which is used to implement the foregoing embodiments and preferred embodiments, and has not been described again.
  • the term “module” may implement a combination of software and/or hardware of a predetermined function.
  • the apparatus described in the following embodiments is preferably implemented in software, hardware, or a combination of software and hardware, is also possible and contemplated.
  • FIG. 6 is a structural block diagram of a first short message verification apparatus according to an embodiment of the present invention. As shown in FIG. 6, the apparatus includes a first receiving module 62, a first calculating module 64, and a processing module 66. Description:
  • the first receiving module 62 is configured to receive the short message to be verified sent by the short message center or the short message gateway; the first calculating module 64 is connected to the first receiving module 62, and is configured to calculate the short message corresponding to the to-be-verified according to a predetermined algorithm.
  • the verification module 66 is connected to the first calculation module 64, and configured to generate a verification report according to the calculated verification string, and send the verification report to the short message set to receive the verification.
  • the receiving device wherein the verification report is used for verifying the authenticity of the short message to be verified by the device.
  • the first calculating module 64 includes: a calculating unit, configured to calculate, according to a predetermined algorithm, that the sending device has the short message verifying authority according to the sending device information of the short message to be verified. The check string corresponding to the short message to be verified.
  • the processing module 66 when the verification report is generated according to the calculated verification string, includes: a first determining unit, configured to determine related information of the short message to be verified, where The related information includes at least one of the following: a sending device information for sending the short message to be verified, a sending time information of the short message to be verified, a content of the short message to be verified, and information of the receiving device, and a generating unit configured to The related information and the check string generate the verification report.
  • the processing module 66 when the verification report is sent to the receiving device that is configured to receive the short message to be verified, the processing module 66 includes: a second determining unit, configured to determine the device of the receiving device. The type; the sending unit is configured to send the verification report to the receiving device according to the device type.
  • the second determining unit is configured to: determine the device type of the receiving device by querying the registration information of the receiving device; in this embodiment, the receiving device may report the self in the pre-registration
  • the type of device for example, a smart phone or a feature machine.
  • the sending unit is configured to determine a network connection status of the smart device when the device type is determined to be a smart phone, and a data network or a wireless network when the online state of the network is connected.
  • the verification report is sent to the receiving device; when it is the offline state of the unconnected network, the verification report is sent to the receiving device by means of short message sending; when the device type is determined to be the function machine, the method of sending the short message is sent Send the verification report to the receiving device.
  • the sending unit may determine the network connection status of the smart machine by determining the identification information of the receiving device by using the identification information to query the database, and determining the network connection status of the smart machine.
  • the database is used to store the correspondence between the identification information of the device and the network connection status of the device.
  • Figure 6 and related embodiments can be applied to the server side.
  • FIG. 7 is a structural block diagram of a second short message verification device according to an embodiment of the present invention. As shown in FIG. 7, the device includes a second receiving module 72. Comparing module 74 and determining module 76, the device is described below:
  • the second receiving module 72 is configured to receive a verification report of the short message to be verified, where the verification report carries a verification string corresponding to the to-be-verified short message calculated according to a predetermined algorithm; and the comparison module 74 is connected to The second receiving module 72 is configured to compare the check string carried in the verification report with the check string calculated by the locally stored short message to be verified, and the determining module 76 is connected to the comparison module 74 to set In order to determine the authenticity of the above-mentioned short message to be verified according to the comparison result.
  • the foregoing apparatus further includes: a third receiving module, configured to compare the check string carried in the verification report with the check string calculated by the local pre-verified short message Receiving the short message to be verified; the second calculating module is configured to calculate a check string corresponding to the short message to be verified according to the predetermined algorithm; and the storage module is configured to send the check string and the sending device information of the short message to be verified Correspondingly stored in the SMS check string library.
  • the comparison module includes: a searching unit, configured to search, in the short message check string library, a check string corresponding to the sending device information according to the sending device information carried in the verification report;
  • the comparing unit is configured to compare the check string carried in the verification report and the found check string corresponding to the sending device information.
  • the foregoing apparatus is further configured to: after determining the authenticity of the short message to be verified according to the comparison result, adding a verified identifier to the short message to be verified when determining that the short message to be verified is true .
  • the apparatus is further configured to: after adding the verified identifier to the short message to be verified, generate a verification report according to the comparison result; and link the verified identifier with the verification report.
  • FIG. 7 and related embodiments can be applied to the receiving device side (ie, the UE side).
  • FIG. 8 is a structural block diagram of a short message verification system according to an embodiment of the present invention, which mainly includes the following modules:
  • the native Native or Internet SMS verification APP on the smart terminal (The operations performed in the native Native or APP are consistent with the operations performed by the second receiving module 72, the comparison module 74 and the determining module 76 described above): responsible for receiving and The test truth information, the system client in this embodiment is displayed.
  • the same message verification string generation rule as the server is used to generate a short message check string, and is stored in the terminal short message check string library.
  • the SP information and the short message verification string information are parsed.
  • the check string is searched from the local short message check string library, and different verification results are displayed according to the result of the query.
  • the SMS verification module developed by the function machine is customized: (The operation performed in the SMS verification module customized by the function machine is the same as the operation performed by the second receiving module 72, the comparison module 74 and the determination module 76 described above):
  • the system client in this embodiment uses the same short message check string generation rule as the server to receive the short message, and generates a short message check string, which is stored in the terminal short message check string library.
  • the SP information and the short message verification string information are parsed.
  • the check string is searched from the local short message check string library, and different verification results are displayed according to the query result.
  • the new access module of the SMS is added.
  • the operation performed by the new access module of the SMS is the same as that of the first receiving module 62.
  • the module is responsible for the short message center (hereinafter referred to as SMSC) or the short message gateway (hereinafter referred to as SMGW).
  • SMSC short message center
  • SMGW short message gateway
  • the module is connected to receive the key information of the short message.
  • the module is part of the system server of the present invention.
  • the SMSC or SMGW module directly interfaces with the module to use the module to send short message information (including but not limited to the sender of the short message, the sending time, and the short message.
  • the content, the message recipient, and the like are delivered to the system described in the embodiment of the present invention.
  • the short message verification module (the operation performed by the short message verification module is consistent with the first calculation module 64 described above): the module is responsible for the short message verification, and can pass the verification result to the downstream module.
  • the sender's number information is queried through the industry SMS payment SP list, whether it exists, whether it is a paid SP, SP level, etc., and is also responsible for passing hash algorithms (including but not limited to MD5, SHA, etc.), symmetric encryption algorithms, or non-
  • hash algorithms including but not limited to MD5, SHA, etc.
  • symmetric encryption algorithm acquires a unique string representing the entire short message, and the above information will be transmitted to the short message verification report pushing module as part of the verification result.
  • the short message verification report pushing module (the operation performed by the short message verification report pushing module is consistent with the processing module 66 described above): the module is mainly responsible for encapsulating the real short message verification report, and selecting an appropriate pushing mode to send the report to the terminal.
  • the module mainly has several functions: firstly, according to the terminal type (including the smart machine or the function machine), the push mode is selected; the short message verification report is encapsulated according to the verification report template configured by the system; and finally the short message verification report is pushed to the terminal.
  • the link keep-alive module is responsible for processing the registration and link keep-alive process of the terminal client, and for other modules of the system to query the status of the smart terminal.
  • This module is mainly applicable to intelligent terminals, and uses the data network of the terminal or the WIFI network as the bearer mode to transmit keep-alive data.
  • the request needs to carry at least the terminal number (representing the identity of the recipient of the short message, such as the phone number of the recipient of the short message) and the type of the terminal (currently there are two main types: smart machine and function machine) To the server; at the same time, other modules of the system query the status of the smart terminal.
  • two states are defined: "smart machine terminal online” and “smart machine terminal offline", and the system updates the terminal status every time the system receives the keep-alive message sent by the terminal APP.
  • an online intelligent machine short message verification process is provided. As shown in FIG. 9, the method includes the following steps:
  • Step 1 The SP or MO terminal (sender sender) sends a text message through the operator, and the message is finally delivered to the SMSC or SMGW.
  • Step 2 After receiving the short message sending request, the SMSC or the SMGW sends a copy of the key information of the short message (including but not limited to the short message sender, the sending time, the short message content, the short message receiver, etc.) to the embodiment of the present invention.
  • the SMSC or the SMGW sends a copy of the key information of the short message (including but not limited to the short message sender, the sending time, the short message content, the short message receiver, etc.) to the embodiment of the present invention.
  • the SMSC or the SMGW sends a copy of the key information of the short message (including but not limited to the short message sender, the sending time, the short message content, the short message receiver, etc.) to the embodiment of the present invention.
  • the system corresponding to S202 in Fig. 2.
  • Step 3 The SMS new access module converts the external request into an internal request format and sends it to the short message verification module.
  • Step 4 After receiving the request, the short message verification module firstly stores the short message uniformly for traceability; at the same time, the module is responsible for the specific verification process, for example, querying the sender number information through the industry SMS payment SP list, whether it exists, whether Pay SP, SP level and other information, and also be responsible for obtaining a unique string representing the entire message by hash algorithm (including but not limited to MD5, SHA, etc.), symmetric encryption algorithm or asymmetric encryption algorithm (ie, calculation and above)
  • hash algorithm including but not limited to MD5, SHA, etc.
  • symmetric encryption algorithm ie, calculation and above
  • the verification string corresponding to the short message corresponds to S204) of FIG. 2, and the above information will be transmitted to the short message verification report pushing module as part of the verification result.
  • Step 5 After receiving the verification result, the short message verification report pushing module first finds the configured short message verification report template and encapsulates the real verification report.
  • Step 6 Next, the push module acquires the terminal type (the system sets the terminal type to include two types of "smartphone terminal” and “function machine terminal” for convenience of description), and assumes that the acquired terminal type is "smartphone terminal”.
  • Step 7 The short message verification report pushing module sends a terminal status query request to the link keep-alive module (must carry the terminal number information used for registration).
  • Step 8 After receiving the status query request, the link keep-alive module parses the request to obtain the terminal number information, and then queries the database to obtain the status of the terminal where the number is located. Assume that the acquired status is the "online" status.
  • Step 9 the push module selects the "online status" queried in step 8, selects the data network (IP network) mode to send the verification report to the smart terminal (corresponding to S206 of FIG. 2), and the terminal performs the short message matching and the verification result. Show.
  • IP network IP network
  • an offline smart phone short message verification process is provided, as shown in FIG. 10, including the following steps:
  • Step 1 The SP or MO terminal (sender sender) sends a text message through the operator, and the message is finally delivered to the SMSC or SMGW.
  • Step 2 After receiving the short message sending request, the SMSC or the SMGW sends a copy of the key information of the short message (including but not limited to the short message sender, the sending time, the short message content, the short message receiver, etc.) to the embodiment of the present invention.
  • the SMSC or the SMGW sends a copy of the key information of the short message (including but not limited to the short message sender, the sending time, the short message content, the short message receiver, etc.) to the embodiment of the present invention.
  • the SMSC or the SMGW sends a copy of the key information of the short message (including but not limited to the short message sender, the sending time, the short message content, the short message receiver, etc.) to the embodiment of the present invention.
  • the system corresponding to S202 of Fig. 2.
  • Step 3 The SMS newly added access module converts the external request into an internal request format and sends it to the short message verification module.
  • Step 4 After receiving the request, the short message verification module firstly stores the short message uniformly for traceability; at the same time, the module is responsible for the specific verification process, for example, querying the sender number information through the industry SMS payment SP list, whether it exists, whether Pay SP, SP level and other information, and also be responsible for obtaining a unique string representing the entire message by hash algorithm (including but not limited to MD5, SHA, etc.), symmetric encryption algorithm or asymmetric encryption algorithm (ie, calculation and above)
  • hash algorithm including but not limited to MD5, SHA, etc.
  • symmetric encryption algorithm ie, calculation and above
  • the verification string corresponding to the short message corresponds to S204) of FIG. 2, and the above information will be transmitted to the short message verification report pushing module as part of the verification result.
  • Step 5 After receiving the verification result, the short message verification report pushing module first finds the configured short message verification report template and encapsulates the real verification report.
  • Step 6 Next, the push module acquires the terminal type (the system sets the terminal type to include two types of "smartphone terminal” and “function machine terminal” for convenience of description), and assumes that the acquired terminal type is "smartphone terminal”.
  • Step 7 The short message verification report pushing module sends a terminal status query request to the link keep-alive module (must carry the terminal number information used for registration).
  • Step 8 After receiving the status query request, the link keep-alive module parses the request to obtain the terminal number information, and then queries the database to obtain the status of the terminal where the number is located. Assume that the acquired status is "not online”.
  • Step 9 The push module selects a shadow message or a binary message mode to send a verification report to the smart terminal according to the “not online status” queried in step 8 (corresponding to S206 in FIG. 2), and the terminal performs short message matching and verification result. Show. These two kinds of short messages belong to the invisible short message of the user, and are directly processed by the APP, and the user experience is good.
  • a function message short message verification process is provided, as shown in FIG. 11, including the following steps:
  • Step 1 The SP or MO terminal (sender sender) sends a text message through the operator, and the message is finally delivered to the SMSC or SMGW.
  • Step 2 After receiving the short message sending request, the SMSC or the SMGW sends a copy of the key information of the short message (including but not limited to the short message sender, the sending time, the short message content, the short message receiver, etc.) to the embodiment of the present invention.
  • the SMSC or the SMGW sends a copy of the key information of the short message (including but not limited to the short message sender, the sending time, the short message content, the short message receiver, etc.) to the embodiment of the present invention.
  • the SMSC or the SMGW sends a copy of the key information of the short message (including but not limited to the short message sender, the sending time, the short message content, the short message receiver, etc.) to the embodiment of the present invention.
  • the SMSC or the SMGW sends a copy of the key information of the short message (including but not limited to the short message sender, the sending time, the short message content, the short message receiver, etc.) to the embodiment of the present invention.
  • the described system
  • Step 3 The SMS newly added access module converts the external request into an internal request format and sends it to the short message verification module.
  • Step 4 After receiving the request, the short message verification module firstly stores the short message uniformly for traceability; at the same time, the module is responsible for the specific verification process, for example, querying the sender number information through the industry SMS payment SP list, whether it exists, whether Pay SP, SP level and other information, and also be responsible for obtaining a unique string representing the entire message by hash algorithm (including but not limited to MD5, SHA, etc.), symmetric encryption algorithm or asymmetric encryption algorithm (ie, calculation and above)
  • hash algorithm including but not limited to MD5, SHA, etc.
  • symmetric encryption algorithm or asymmetric encryption algorithm (ie, calculation and above)
  • the verification string corresponding to the short message corresponds to S204) of FIG. 2, and the above information will be transmitted as a part of the verification result to the short message verification report pushing module.
  • Step 5 After receiving the verification result, the short message verification report pushing module first queries whether the terminal type is “smartphone terminal” or “function machine terminal”, and assumes that the acquired terminal type is “function machine terminal”. Then the push module finds the configured SMS verification report template and encapsulates the real verification report.
  • step 6 the push module selects the shadow message or the binary message mode to send the verification report to the function machine (corresponding to S206 of FIG. 2), and the terminal performs the short message matching and the verification result display.
  • the function machine corresponding to S206 of FIG. 2
  • the terminal performs the short message matching and the verification result display.
  • Embodiment 5 is a diagrammatic representation of Embodiment 5:
  • a short message verification and verification report pushing process is provided, as shown in FIG. 12, including the following steps:
  • Step 1 The SMSC or the SMGW first delivers the short message sent by the SP to the user terminal.
  • the client needs to have the short message access right, and after receiving the short message, the terminal can use the four parameters of the short message sender, the sending time, the content, and the short message receiver to do HASH (The hash string calculation rule of MD5 and SHA algorithm generates a local short message hash string and stores it in the local database.
  • the client needs to record the correspondence between the hash string and the short message locally, so that it is convenient to quickly find the short message, and finally form a Local SMS hashing library.
  • Step 2 After the SMSC or the SMGW sends the short message to the terminal successfully, a short message information (corresponding to S204 in FIG. 2) is sent to the short message verification system mentioned in the embodiment of the present invention, and the system performs the short message verification. .
  • step 3 the system converts the external request in step 1 into an internal verification request format, and passes the verification module to continue processing.
  • Step 4 After receiving the request, the short message verification module first queries the sender's number information through the industry SMS payment SP list, whether there is information, whether the SP and the SP level are paid, and the sender of the short message, the sending time, the content, and the short message receiving.
  • the four parameters are combined to perform HASH (MD5, SHA algorithm) to obtain a hash string representing the entire short message (that is, a check string corresponding to the above short message is calculated, corresponding to S204 of FIG. 2).
  • HASH MD5, SHA algorithm
  • Step 5 After the verification result is obtained, the system will package the short report according to the result and the obtained short message verification template.
  • Step 6 the system needs to select a suitable push mode.
  • the selection is based on the terminal status ("online”, “offline”) and the terminal type ("smartphone terminal", “function machine terminal”).
  • Step 7 After the system successfully selects the appropriate push mode, the system directly pushes the verification report (corresponding to S206 of FIG. 2).
  • Step 8 After receiving the verification report (corresponding to S302 of FIG. 3), the terminal side parses out the SP information and the SMS hash string. Then, it is found whether the hash string exists in the hash string library calculated in step 1, and if so, the "verified" flag is displayed on the right side of the short message corresponding to the hash string. At the same time, according to the locally configured verification report detailed information module, a detailed report of the verification of the short message is obtained and stored for the user to view at any time. After the user sees the "verified" identifier of the APP or the short message interface, as shown in FIG. 13 and FIG. 14, the identification information can be directly clicked to view the verification report detailed information (corresponding to S304-S306 of FIG. 3).
  • the SMSC or the SMGW needs to write at least the sender of the short message, the specific sending time, the short message content, the recipient of the short message, and the like through the SMS new access module.
  • the SMSC or the SMGW needs to write at least the sender of the short message, the specific sending time, the short message content, the recipient of the short message, and the like through the SMS new access module.
  • the terminal and the authentication system are required to perform link keep-alive.
  • the data network or the WIFI network of the terminal is selected as the bearer mode, and the keep-alive data is transmitted.
  • communication and transmission methods must be secure and streamlined.
  • the terminal Before the keepalive, the terminal must log in first. The login request must carry at least the terminal number (representing the identity of the sender of the message, such as the phone number of the recipient of the message), the type of the terminal (“smartphone terminal", "function machine terminal”) and other data. After the login is successful, the terminal actively keeps alive.
  • the specific implementation mechanism (for example, the keep-alive transmission mode and the keep-alive protocol field format) is not limited, but the implementation needs to consider secure transmission and saving, for example, sending ⁇ r ⁇ n ⁇ r ⁇ n TLS keepalive message.
  • the smart terminal APP described in FIG. 8 of the present invention includes a short message verification application downloaded from each major application mall or AppStore, and also includes a native short message verification true APP of each smart phone.
  • the unique string information generation mechanism of the system-side short message is not limited.
  • an MD5 or SHA hashing algorithm may be used, and a short message sender, a sending time, a short message content, and a short message receiver may be combined to form a hash algorithm to generate a unique string; and the terminal also needs to adopt The same rules, otherwise the SMS match will fail.
  • the system push mode is not limited in the embodiment of the present invention.
  • the specific implementation can take into account the safe transmission, saving and the feasibility of the solution.
  • the smart terminal preferentially adopts the data network push, and the shadow or binary short message mode is adopted when the data network is not connected.
  • the function machine is mainly pushed by shadow or binary message.
  • the client side of the present invention needs to store the verification information pushed by the verification server into the local database, so as to be able to view the verification result in the "flight mode" or the scene without any signal (2G, 3G, 4G). .
  • the solution in the embodiment of the present invention can be applied to multiple scenarios, and can be applied to scenarios such as pseudo base station short message identification and operator industry SMS payment SP authentication.
  • scenarios such as pseudo base station short message identification and operator industry SMS payment SP authentication.
  • an example of an operator industry SMS payment SP authentication is illustrated.
  • the paid SP is a certain bank.
  • the certain bank wants to notify a certain bank cardholder by SMS to conduct SMS promotion (such as financial management, red envelopes or general merchandising, etc.).
  • SMS promotion such as financial management, red envelopes or general merchandising, etc.
  • a certain bank paid the operator for a text message verification value-added service.
  • the service is for each sales message sent from a certain bank, and the operator verification network element will actively push a short message verification report to the mobile terminal. After receiving the report, the cardholder mobile terminal will display the "verified" logo on the right side of the SMS or APP interface, as shown in Figure 13.
  • the cardholder can also click on the "verified” logo to display the detailed information of the verification report, such as "has passed the China Mobile certification, confirmed by a certain bank, verification time: 2011.07.0512:34:56", as shown in Figure 14. Shown.
  • each module in the embodiment of the present invention may be implemented by software or hardware.
  • the foregoing may be implemented by, but not limited to, the foregoing modules are all located in the same processor; The individual modules are located in different processors in any combination.
  • Embodiments of the present invention also provide a storage medium including a stored program, wherein the program described above executes the method of any of the above.
  • the foregoing storage medium may include, but is not limited to, a USB flash drive, a Read-Only Memory (ROM), and a Random Access Memory (RAM).
  • ROM Read-Only Memory
  • RAM Random Access Memory
  • Embodiments of the present invention also provide a processor configured to execute a program, wherein the program is operative to perform the steps of any of the above methods.
  • a short message verification system including a short message center or a short message gateway, and a first processor, wherein the short message center or the short message gateway is used to send a short message to be verified.
  • a receiving device and the first processor the first processor is connected to the short message center or the short message gateway, and is configured to receive the short message to be verified delivered by the short message center or the short message gateway, and calculate Determining a verification string corresponding to the verified short message, and generating a verification report according to the calculated verification string, and transmitting the verification report to the receiving device, where the verification report is used for
  • the receiving device verifies the authenticity of the short message to be verified.
  • the first processor is consistent with the foregoing first receiving module 62, the first computing module 64, and the processing module 66 when performing a specific operation, and details are not described herein again.
  • a terminal including a second processor, where the second processor is configured to receive a verification report of a short message to be verified, where the verification report carries Calculating a check string corresponding to the short message to be verified; comparing the check string carried in the verification report with a locally stored check string obtained by calculating the short message to be verified; determining according to the comparison result The authenticity of the short message to be verified.
  • the second processor is consistent with the foregoing second receiving module 72, the comparing module 74 and the determining module 76 when performing a specific operation, and details are not described herein again.
  • the method for identifying a pseudo base station short message based on big data or other schemes may involve any short message transmission of the user multiple times in the entire interaction process, increasing the transmission bandwidth, and endangering the identity information and property security of the user;
  • Effect 1 Introduce a new reliable and commercially valuable SMS verification mechanism for operators, which will not change existing network elements and increase the operator's right to speak in this field;
  • the terminal can display the “verified” flag on the short message or APP interface, and can also see the specific short message verification report after clicking;
  • Effect 6 The whole verification process does not involve the transmission of user SMS information, reducing network bandwidth and reducing the risk of user information leakage, and will not violate the GDP R-type legislation such as the EU, with the potential to join norms or standards;
  • Effect 7 The invention improves the success rate of short message verification, and can accurately determine whether the short message is from an illegal channel such as a trusted channel or a pseudo base station, and the pseudo base station short message recognition rate can reach 100%, and the short message sender identity verification success rate can be Up to 100%.
  • the present invention can effectively protect user information and property security, reduce the success rate of SMS fraud in the telecommunications field, and has a positive effect on identifying and preventing illegal criminal acts such as pseudo base stations, and has great commercial value and social value.
  • modules or steps of the present invention described above can be implemented by a general-purpose computing device that can be centralized on a single computing device or distributed across a network of multiple computing devices. Alternatively, they may be implemented by program code executable by the computing device such that they may be stored in the storage device by the computing device and, in some cases, may be different from the order herein.
  • the steps shown or described are performed, or they are separately fabricated into individual integrated circuit modules, or a plurality of modules or steps thereof are fabricated as a single integrated circuit module.
  • the invention is not limited to any specific combination of hardware and software.
  • the method, the device, the storage medium, the short message verification system, and the terminal provided by the embodiment of the present invention have the following beneficial effects: the receiving device does not need to send the short message content to the server side, so that the authenticity of the short message can be verified. It protects the user's information and property security, and effectively solves the problem of high cost and large manpower and material resources in the related technology when implementing SMS verification.

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Computer Security & Cryptography (AREA)
  • Mobile Radio Communication Systems (AREA)
  • Telephonic Communication Services (AREA)

Abstract

The embodiments of the present invention provide a short message verification method, an apparatus, a storage medium, a short message verification system, and a terminal. The method comprises: receiving a short message to be verified, issued by a short message center or a short message gateway; calculating a check string corresponding to said short message; generating a verification report according to the calculated check string, and issuing the verification report to a receiving device configured to receive said short message, the verification report being used by said receiving device to verify the authenticity of said short message. By means of the embodiments of the present invention, the information and property safety of a user can be guaranteed while verifying the authenticity of a short message without the need for the receiving device to send the content of the short message to a server side, thereby effectively solving the problem in the related art of high expenses and large manpower and material resources consumed during the verification of the short message.

Description

短信验证方法、装置、存储介质、短信验证系统及终端SMS verification method, device, storage medium, short message verification system and terminal 技术领域Technical field
本发明涉及通信领域,具体而言,涉及一种短信验证方法、装置、存储介质、短信验证系统及终端。The present invention relates to the field of communications, and in particular, to a short message verification method, apparatus, storage medium, short message verification system, and terminal.
背景技术Background technique
随着通信技术的迅猛发展,一些不法分子经常利用伪基站发送虚假信息,由于伪基站危害巨大,会使得用户权益受到极大的威胁,例如,由于短信诈骗的高发,使得屡屡有群众受骗。而群众受骗的主要原因还是由于无法区分哪些短信是真的哪些短信是假的,对于短信验真(也可以称为短信验证)手段还是有所欠缺的,因此,电信领域中急需一套快速、准确的系统方法来解决该技术问题。With the rapid development of communication technology, some criminals often use fake base stations to send false information. Due to the huge harm of pseudo base stations, users' rights and interests are greatly threatened. For example, due to the high incidence of SMS fraud, people are often deceived. The main reason why the masses are deceived is that it is impossible to distinguish which text messages are true and which text messages are fake. The method of SMS verification (also called SMS verification) is still lacking. Therefore, there is an urgent need for a fast set in the field of telecommunications. An accurate system approach to solve this technical problem.
在现有技术中,短信验真主要是利用如下方式来实现的:In the prior art, the short message verification is mainly implemented by the following methods:
由用户主动从终端发起短信验证,并将短信信息发送给服务器,服务器利用收到的短信信息跟已发送短信数据库对比,如果存在则表明该短信安全,不存在则提示有隐患。The user initiates SMS verification from the terminal and sends the SMS information to the server. The server uses the received SMS information to compare with the sent SMS database. If it exists, it indicates that the SMS is secure. If it does not exist, it indicates a hidden danger.
但是,上述的验真方式会存在如下问题:However, the above-mentioned method of verification will have the following problems:
问题1:由于需要将用户的短信信息上传到服务端,这个过程可能涉及信息泄漏和侵权行为有可能导致服务器承建商被大量罚款的风险。Question 1: Due to the need to upload the user's SMS message to the server, this process may involve the risk of information leakage and infringement that may cause the server contractor to be fined a lot.
问题2:由于短信验证主动方为用户终端,由用户付费其实现的可能性是很低的。Question 2: Since the SMS verification active party is the user terminal, the possibility of implementation by the user is very low.
问题3:需要建立庞大的短信缓存数据库,属于很重型的服务端系统,部署和运维成本极高。Question 3: A huge SMS cache database needs to be established, which is a very heavy server system, and the deployment and operation and maintenance costs are extremely high.
问题4:因为所有待验证短信都需要再次从终端发送到服务器,所以会对带宽要求很高。Question 4: Because all messages to be verified need to be sent from the terminal to the server again, the bandwidth requirements are very high.
此外,目前已有的短信标识和安全性识别都是基于智能机的,而功能机(例如,老人机、儿童手机)等的标记方法有缺失。In addition, the existing short message identification and security identification are based on smart phones, while the marking methods of functional machines (for example, old people's machines, children's mobile phones) and the like are missing.
针对相关技术中存在的在实现短信验证时,需要耗费较高的费用以及较大的人力物力的问题,目前尚未提出有效的解决方案。In view of the problems associated with the related art in implementing SMS verification, it requires a relatively high cost and a large manpower and material resources, and no effective solution has been proposed yet.
发明内容Summary of the invention
本发明实施例提供了一种短信验证方法、装置、存储介质、短信验证系统及终端,以至少解决相关技术中存在的在实现短信验证时,需要耗费较高的费用以及较大的人力物力的问题。The embodiment of the invention provides a method, a device, a storage medium, a short message verification system and a terminal for verifying a short message, so as to at least solve the problem of high cost and large manpower and material resources in realizing short message verification in the related art. problem.
根据本发明的一个实施例,提供了第一种短信验证方法,包括:接收短信中心或短信网关下发的待验证的短信;计算与所述待验证的短信对应的校验串;根据计算出的所述校验串生成验真报告,并将所述验真报告下发给设置为接收所述待验证的短信的接收设备,其中,所述验真报告用于所述接收设备对所述待验证的短信的真伪进行验证。According to an embodiment of the present invention, a method for verifying a short message is provided, which includes: receiving a short message to be verified sent by a short message center or a short message gateway; calculating a check string corresponding to the short message to be verified; The verification string generates a verification report, and the verification report is sent to a receiving device configured to receive the short message to be verified, wherein the verification report is used by the receiving device to The authenticity of the SMS to be verified is verified.
根据本发明的另一个实施例,还提供了第二种短信验证方法,包括:接收待验证的短信的验真报告,其中,所述验真报告中携带有计算的与所述待验证的短信对应的校验串;对比所述验真报告中携带的校验串与本地存储的对所述待验证的短信进行计算得到的校验串;根据对比结果确定所述待验证的短信的真伪。According to another embodiment of the present invention, a second method for verifying a short message is provided, including: receiving a verification report of the short message to be verified, wherein the verification report carries the calculated short message with the to be verified Corresponding verification string; comparing the verification string carried in the verification report with the locally stored verification string obtained by calculating the short message to be verified; determining the authenticity of the short message to be verified according to the comparison result .
根据本发明的另一个实施例,还提供了第一种短信验证装置,包括:第一接收模块,设置为接收短信中心或短信网关下发的待验证的短信;第一计算模块,设置为计算与所述待验证的短信对应的校验串;处理模块,设置为根据计算出的所述校验串生成验真报告,并将所述验真报告下发给设置为接收所述待验证的短信的接收设备,其中,所述验真报告用于所述接收设备对所述待验证的短信的真伪进行验证。According to another embodiment of the present invention, a first type of short message verification apparatus is provided, including: a first receiving module, configured to receive a short message to be verified sent by a short message center or a short message gateway; and a first calculating module configured to calculate a verification string corresponding to the to-be-verified short message; the processing module is configured to generate a verification report according to the calculated verification string, and send the verification report to the receiving the to-be-verified The receiving device of the short message, wherein the verification report is used by the receiving device to verify the authenticity of the short message to be verified.
根据本发明的另一个实施例,还提供了第二种短信验证装置,包括:第二接收模块,设置为接收待验证的短信的验真报告,其中,所述验真报告中携带有计算的与所述待验证的短信对应的校验串;对比模块,设置为 对比所述验真报告中携带的校验串与本地存储的对所述待验证的短信进行计算得到的校验串;确定模块,设置为根据对比结果确定所述待验证的短信的真伪。According to another embodiment of the present invention, a second short message verification apparatus is further provided, including: a second receiving module, configured to receive a verification report of the short message to be verified, wherein the verification report carries a calculation a check string corresponding to the short message to be verified; a comparison module, configured to compare a check string carried in the verification report with a locally stored check string obtained by calculating the short message to be verified; The module is configured to determine the authenticity of the short message to be verified according to the comparison result.
根据本发明的另一个实施例,还提供了一种存储介质,所述存储介质包括存储的程序,其中,所述程序运行时执行上述任一项所述的方法。According to another embodiment of the present invention, there is also provided a storage medium comprising a stored program, wherein the program is executed to perform the method of any of the above.
根据本发明的又一个实施例,还提供了一种处理器,所述处理器设置为运行程序,其中,所述程序运行时执行上述任一项所述的方法。According to still another embodiment of the present invention, there is also provided a processor, the processor being arranged to run a program, wherein the program is executed to perform the method of any of the above.
根据本发明的又一个实施例,还提供了一种短信验证系统,包括短信中心或短信网关,还包括第一处理器,其中,所述短信中心或短信网关用于将待验证的短信下发至接收设备以及所述第一处理器;所述第一处理器连接至所述短信中心或短信网关,设置为接收所述短信中心或短信网关下发的所述待验证的短信,计算与所述待验证的短信对应的校验串,以及根据计算出的所述校验串生成验真报告,并将所述验真报告下发给所述接收设备,其中,所述验真报告用于所述接收设备对所述待验证的短信的真伪进行验证。According to still another embodiment of the present invention, a short message verification system is provided, including a short message center or a short message gateway, and a first processor, wherein the short message center or the short message gateway is used to send a short message to be verified. a receiving device and the first processor; the first processor is connected to the short message center or the short message gateway, and is configured to receive the short message to be verified delivered by the short message center or the short message gateway, and calculate Determining a verification string corresponding to the verified short message, and generating a verification report according to the calculated verification string, and transmitting the verification report to the receiving device, where the verification report is used for The receiving device verifies the authenticity of the short message to be verified.
根据本发明的又一个实施例,还提供了一种终端,包括第二处理器,所述第二处理器设置为接收待验证的短信的验真报告,其中,所述验真报告中携带有计算的与所述待验证的短信对应的校验串;对比所述验真报告中携带的校验串与本地存储的对所述待验证的短信进行计算得到的校验串;根据对比结果确定所述待验证的短信的真伪。According to still another embodiment of the present invention, a terminal is provided, including a second processor, where the second processor is configured to receive a verification report of a short message to be verified, where the verification report carries Calculating a check string corresponding to the short message to be verified; comparing the check string carried in the verification report with a locally stored check string obtained by calculating the short message to be verified; determining according to the comparison result The authenticity of the short message to be verified.
通过本发明中的实施例,可以由服务器侧(即,短信验真系统侧)生成待验证短信的验真报告,从而可以使得接收短信的设备依据该验真报告来对短信的真伪进行验证,无需接收设备向服务器侧发送短信内容,从而可以在验证短信真伪的同时保障了用户的信息和财产安全,有效解决了相关技术中存在的在实现短信验证时,需要耗费较高的费用以及较大的人力物力问题。Through the embodiment of the present invention, the verification report of the to-be-verified short message can be generated by the server side (ie, the short message verification system side), so that the device receiving the short message can verify the authenticity of the short message according to the verification report. The receiving device does not need to send the short message content to the server side, thereby ensuring the authenticity of the short message while ensuring the security of the user's information and property, and effectively solving the cost incurred in implementing the short message verification in the related art. Large human and material problems.
附图说明DRAWINGS
此处所说明的附图用来提供对本发明的进一步理解,构成本申请的一部分,本发明的示意性实施例及其说明用于解释本发明,并不构成对本发明的不当限定。在附图中:The drawings described herein are intended to provide a further understanding of the invention, and are intended to be a part of the invention. In the drawing:
图1是本发明实施例的一种短信验证方法的移动终端的硬件结构框图;1 is a block diagram showing the hardware structure of a mobile terminal of a short message verification method according to an embodiment of the present invention;
图2是根据本发明实施例的第一种短信验证方法的流程图;2 is a flowchart of a first method for verifying a short message according to an embodiment of the present invention;
图3是根据本发明实施例的第二种短信验证方法的流程图;3 is a flowchart of a second method for verifying a short message according to an embodiment of the present invention;
图4是根据本发明实施例的基于数据网络的短信验真方法流程图;4 is a flowchart of a method for short message verification based on a data network according to an embodiment of the present invention;
图5是根据本发明实施例的基于短信方式的短信验真方法流程图;FIG. 5 is a flowchart of a short message verification method based on a short message method according to an embodiment of the present invention; FIG.
图6是根据本发明实施例的第一种短信验证装置的结构框图;6 is a structural block diagram of a first short message verification apparatus according to an embodiment of the present invention;
图7是根据本发明实施例的第二种短信验证装置的结构框图;7 is a structural block diagram of a second short message verification apparatus according to an embodiment of the present invention;
图8是根据本发明实施例的短信验真系统的结构框图;FIG. 8 is a structural block diagram of a short message verification system according to an embodiment of the present invention; FIG.
图9是根据本发明实施例的在线智能机短信验真流程图;9 is a flow chart of an online intelligent machine short message verification according to an embodiment of the present invention;
图10是根据本发明实施例的离线智能机短信验真流程图;10 is a flowchart of a short message verification of an offline intelligent machine according to an embodiment of the present invention;
图11是根据本发明实施例的功能机短信验真流程图;11 is a flow chart of a function machine short message verification according to an embodiment of the present invention;
图12是根据本发明实施例的短信验真及验证报告推送流程图;12 is a flow chart of a short message verification and verification report push according to an embodiment of the present invention;
图13是根据本发明实施例的终端短信界面显示“已验证”标识示意图;FIG. 13 is a schematic diagram of displaying a “verified” identifier of a terminal short message interface according to an embodiment of the present invention;
图14是根据本发明实施例的短信验证报告弹窗示意图。FIG. 14 is a schematic diagram of a short message verification report popup window according to an embodiment of the present invention.
具体实施方式Detailed ways
下文中将参考附图并结合实施例来详细说明本发明。需要说明的是,在不冲突的情况下,本申请中的实施例及实施例中的特征可以相互组合。The invention will be described in detail below with reference to the drawings in conjunction with the embodiments. It should be noted that the embodiments in the present application and the features in the embodiments may be combined with each other without conflict.
需要说明的是,本发明的说明书和权利要求书及上述附图中的术语“第一”、“第二”等是用于区别类似的对象,而不必用于描述特定的顺序或先后次序。It is to be understood that the terms "first", "second" and the like in the specification and claims of the present invention are used to distinguish similar objects, and are not necessarily used to describe a particular order or order.
在相关技术中短信验证机制主要包括以下三类机制:In the related art, the short message verification mechanism mainly includes the following three types of mechanisms:
机制1:对短信内容进行加密传输,这类技术可以解决不法分子非法截取用户短信信息的问题,但无法解决用户收到的短信信息真伪问题;Mechanism 1: Encrypted transmission of SMS content. This kind of technology can solve the problem of illegal interception of user SMS information by criminals, but it cannot solve the problem of authenticity of SMS messages received by users;
机制2:通过短信内容关键字识别短信风险并进行分类,这类机制强烈依赖于本地数据库存储的关键信息,对于伪基站等非法短信无法识别,而且本地数据库更新有时间差,这个时间差非常容易出现错漏;Mechanism 2: Identify and classify SMS risks by SMS content keywords. Such mechanisms strongly rely on key information stored in the local database. Unidentified SMS messages such as pseudo base stations cannot be identified, and local database updates have time differences. This time difference is very prone to errors and omissions. ;
机制3:在某些垃圾短信识别系统为代表的大数据短信校验,完全靠大数据分析(需要将用户的所有短信关键字信息上传到它们的数据库中,这个过程可能存在对用户的侵权行为);同时这类应用没有跟运营商对接,识别率达不到100%;Mechanism 3: The big data SMS verification represented by some spam identification system relies entirely on big data analysis (all the user's SMS keyword information needs to be uploaded to their database, this process may have infringement on the user) At the same time, such applications are not connected to the operator, and the recognition rate is less than 100%;
由此可知,相关技术中的上述短信验证机制的验证能力有限且验证准确率是比较低的。It can be seen that the verification capability of the above-mentioned short message verification mechanism in the related art is limited and the verification accuracy is relatively low.
为了解决相关技术中存在的至少之一的问题,本发明实施例中提供了一整套可以接入运营商内部的针对智能终端和功能机的短信安全校验机制。识别率可达100%;该方法不需要从终端(即,接收设备)获取任何短信信息,能够轻松通过欧盟GDPR法案要求;该方法的实现系统属于轻型系统,能够实现行业短信服务器提供者(Service Provider,简称为SP)认证,商用价值极高;可以直接在运营商或验真系统进行短信验真,并将短信验证报告推送至终端;终端匹配到具体短信后,再根据配置的模板显示验证结果,用户可根据终端显示的验证结果识别垃圾和非法短信。在整个交互流程中,不涉及用户任何短信信息传输。极大地保护了用户的信息和财产安全,降低电信领域短信诈骗成功率。下面对本发明中的各实施例进行说明:In order to solve the problem of at least one of the related technologies, the present invention provides a complete set of SMS security verification mechanisms for intelligent terminals and function machines that can be accessed within an operator. The recognition rate can reach 100%; the method does not need to obtain any short message information from the terminal (ie, the receiving device), and can easily pass the requirements of the EU GDPR Act; the implementation system of the method belongs to a lightweight system, and can realize the industry SMS server provider (Service) Provider, referred to as SP) certification, has a high commercial value; it can directly perform SMS verification on the operator or the verification system, and push the SMS verification report to the terminal; after the terminal matches the specific SMS, it will display the verification according to the configured template. As a result, the user can identify junk and illegal text messages based on the verification results displayed by the terminal. In the entire interaction process, no message transmission of the user is involved. Greatly protect the user's information and property security, and reduce the success rate of SMS fraud in the telecommunications field. The following describes various embodiments of the present invention:
本申请实施例中提供的方法实施例可以在移动终端、计算机终端或者类似的运算装置中执行。以运行在移动终端上为例,图1是本发明实施例的一种短信验证方法的移动终端的硬件结构框图。如图1所示,移动终端10可以包括一个或多个(图1中仅示出一个)处理器102(处理器102可以包括但不限于微处理器MCU或可编程逻辑器件FPGA等的处理装置)、 设置为存储数据的存储器104、以及设置为通信功能的传输装置106。本领域普通技术人员可以理解,图1所示的结构仅为示意,其并不对上述电子装置的结构造成限定。例如,移动终端10还可包括比图1中所示更多或者更少的组件,或者具有与图1所示不同的配置。The method embodiments provided in the embodiments of the present application may be executed in a mobile terminal, a computer terminal, or the like. Taking a mobile terminal as an example, FIG. 1 is a hardware structural block diagram of a mobile terminal of a short message verification method according to an embodiment of the present invention. As shown in FIG. 1, mobile terminal 10 may include one or more (only one shown in FIG. 1) processor 102 (processor 102 may include, but is not limited to, a processing device such as a microprocessor MCU or a programmable logic device FPGA. ), a memory 104 that is set to store data, and a transmission device 106 that is set to a communication function. It will be understood by those skilled in the art that the structure shown in FIG. 1 is merely illustrative and does not limit the structure of the above electronic device. For example, the mobile terminal 10 may also include more or fewer components than those shown in FIG. 1, or have a different configuration than that shown in FIG.
存储器104可设置为存储应用软件的软件程序以及模块,如本发明实施例中的短信验证方法对应的程序指令/模块,处理器102通过运行存储在存储器104内的软件程序以及模块,从而执行各种功能应用以及数据处理,即实现上述的方法。存储器104可包括高速随机存储器,还可包括非易失性存储器,如一个或者多个磁性存储装置、闪存、或者其他非易失性固态存储器。在一些实例中,存储器104可进一步包括相对于处理器102远程设置的存储器,这些远程存储器可以通过网络连接至移动终端10。上述网络的实例包括但不限于互联网、企业内部网、局域网、移动通信网及其组合。The memory 104 can be configured as a software program and a module for storing application software, such as a program instruction/module corresponding to the short message verification method in the embodiment of the present invention, and the processor 102 executes each by executing a software program and a module stored in the memory 104. A functional application and data processing, that is, the above method is implemented. Memory 104 may include high speed random access memory, and may also include non-volatile memory such as one or more magnetic storage devices, flash memory, or other non-volatile solid state memory. In some examples, memory 104 may further include memory remotely located relative to processor 102, which may be connected to mobile terminal 10 over a network. Examples of such networks include, but are not limited to, the Internet, intranets, local area networks, mobile communication networks, and combinations thereof.
传输装置106设置为经由一个网络接收或者发送数据。上述的网络具体实例可包括移动终端10的通信供应商提供的无线网络。在一个实例中,传输装置106包括一个网络适配器(Network Interface Controller,简称为NIC),其可通过基站与其他网络设备相连从而可与互联网进行通讯。在一个实例中,传输装置106可以为射频(Radio Frequency,简称为RF)模块,其设置为通过无线方式与互联网进行通讯。Transmission device 106 is arranged to receive or transmit data via a network. The above-described network specific example may include a wireless network provided by a communication provider of the mobile terminal 10. In one example, the transmission device 106 includes a Network Interface Controller (NIC) that can be connected to other network devices through a base station to communicate with the Internet. In one example, the transmission device 106 can be a Radio Frequency (RF) module configured to communicate with the Internet wirelessly.
在本发明实施例中还提供了一种短信验证方法,图2是根据本发明实施例的第一种短信验证方法的流程图,如图2所示,该流程包括如下步骤:A method for verifying a short message is also provided in the embodiment of the present invention. FIG. 2 is a flowchart of a first method for verifying a short message according to an embodiment of the present invention. As shown in FIG. 2, the process includes the following steps:
步骤S202,接收短信中心或短信网关下发的待验证的短信;Step S202, receiving a short message to be verified sent by the short message center or the short message gateway;
步骤S204,计算与上述待验证的短信对应的校验串;Step S204, calculating a check string corresponding to the short message to be verified;
步骤S206,根据计算出的上述校验串生成验真报告,并将该验真报告下发给设置为接收上述待验证的短信的接收设备,其中,该验真报告用于上述接收设备对待验证的短信的真伪进行验证。Step S206, generating a verification report according to the calculated verification string, and sending the verification report to the receiving device configured to receive the short message to be verified, wherein the verification report is used by the receiving device to be verified. The authenticity of the text message is verified.
其中,执行上述操作的可以是服务器侧的设备,在计算与上述待验证的短信对应的校验串时,可以按照预定算法进行计算,该算法可以根据实际情况进行灵活设置,其中,校验串生成方式并不唯一,可以采用常规的报告生成方式生成,只要生成的验真报告中有相关信息和校验串即可。The device performing the foregoing operations may be a device on the server side, and when calculating the check string corresponding to the short message to be verified, the calculation may be performed according to a predetermined algorithm, and the algorithm may be flexibly set according to actual conditions, where the check string is The generation method is not unique, and can be generated by a conventional report generation method, as long as the generated verification report has relevant information and a check string.
通过本实施例,可以由服务器侧生成待验证短信的验真报告,从而可以使得接收短信的设备依据该验真报告来对短信的真伪进行验证,无需接收设备向服务器侧发送短信内容,从而可以在验证短信真伪的同时保障了用户的信息和财产安全,有效解决了相关技术中存在的在实现短信验证时,需要耗费较高的费用以及较大的人力物力问题。In this embodiment, the verification report of the short message to be verified can be generated by the server side, so that the device receiving the short message can verify the authenticity of the short message according to the verification report, and the receiving device does not need to send the short message content to the server side. The information and property security of the user can be ensured while verifying the authenticity of the short message, and the problem of high cost and large manpower and material resources in realizing the short message verification in the related technology is effectively solved.
在一个可选的实施例中,计算与上述待验证的短信对应的校验串包括:在根据上述待验证的短信的发送设备信息确定发送设备具备短信验证权限的情况下,计算与上述待验证的短信对应的校验串。在本实施例中,具备短信验证权限的发送设备可以是缴纳了短信验证费用的发送设备。如果确定待验证的短信的发送者不具备短信验证权限,则不对其发送的短信进行验证。In an optional embodiment, calculating the check string corresponding to the short message to be verified includes: calculating, according to the sending device information of the short message to be verified, that the sending device has the short message verifying authority, calculating and verifying The verification string corresponding to the short message. In this embodiment, the sending device with the short message verification authority may be the sending device that has paid the short message verification fee. If it is determined that the sender of the short message to be verified does not have the short message verification authority, the short message sent is not verified.
在一个可选的实施例中,根据计算出的上述校验串生成验真报告包括:确定上述待验证的短信的相关信息,其中,该相关信息包括以下至少之一:发送上述待验证的短信的发送设备信息、上述待验证的短信的发送时间信息、上述待验证的短信的内容以及接收设备的信息;将上述相关信息和校验串生成验真报告。在本实施例中,在实际操作时,最好至少携带发送设备信息,从而方便接收设备根据发送设备信息进行对应的查找操作。In an optional embodiment, generating the verification report according to the calculated verification string includes: determining related information of the short message to be verified, wherein the related information includes at least one of the following: sending the short message to be verified. The sending device information, the sending time information of the short message to be verified, the content of the short message to be verified, and the information of the receiving device; generating the verification report by the related information and the check string. In this embodiment, in actual operation, it is preferable to carry at least the sending device information, so as to facilitate the receiving device to perform a corresponding searching operation according to the sending device information.
在一个可选的实施例中,将上述验真报告下发给设置为接收上述待验证的短信的接收设备包括:确定接收设备的设备类型;根据该设备类型将验真报告下发给接收设备。在本实施例中,不同类型的设备对应的发送方式可以是不同的。In an optional embodiment, the sending the verification report to the receiving device configured to receive the short message to be verified includes: determining a device type of the receiving device; and transmitting the verification report to the receiving device according to the device type . In this embodiment, the transmission manners corresponding to different types of devices may be different.
在一个可选的实施例中,确定上述接收设备的设备类型包括:通过查询接收设备的注册信息确定该接收设备的设备类型;在本实施例中,接收 设备可以在预先进行注册时上报自身的设备类型(例如,是智能机还是功能机)。In an optional embodiment, determining the device type of the receiving device includes: determining a device type of the receiving device by querying the registration information of the receiving device; in this embodiment, the receiving device may report the device itself when registering in advance The type of device (for example, a smart phone or a feature machine).
在一个可选的实施例中,根据上述设备类型将验真报告下发给接收设备包括:在确定所述设备类型为智能机时,确定该智能机的网络连接状态;当为连接网络的在线状态时,通过数据网络或无线网络将验真报告发送给接收设备;当为未连接网络的离线状态时,通过短信发送的方式将验真报告发送给接收设备;在确定该设备类型为功能机的情况下,通过短信发送的方式将验真报告发送给接收设备。在本实施例中,不同类型的接收设备所能支持的信息接收方式是不同的,对于智能机而言,当其联网时,是能够通过无线网络或数据网络接收信息的,而对于未联网的智能机,以及功能机而言,是无法通过无线网络或数据网络接收信息,只能通过接收短信的方式接收信息。在本实施例中,在通过短信发送的方式将验真报告发送给接收设备时,可以通过影子短信或二进制短信的方式将验真报告发送给接收设备。In an optional embodiment, the sending the verification report to the receiving device according to the device type includes: determining that the device type is a smart machine, determining a network connection status of the smart device; In the state, the verification report is sent to the receiving device through the data network or the wireless network; when it is the offline state of the unconnected network, the verification report is sent to the receiving device by means of the short message sending; the device type is determined to be the function machine. In the case of sending a verification report to the receiving device by means of short message transmission. In this embodiment, the information receiving manners supported by different types of receiving devices are different. For the smart phone, when it is connected to the network, it can receive information through the wireless network or the data network, but for the unconnected network. In the case of an intelligent machine and a function machine, it is impossible to receive information through a wireless network or a data network, and information can only be received by receiving a short message. In this embodiment, when the verification report is sent to the receiving device by means of short message sending, the verification report may be sent to the receiving device by means of a shadow short message or a binary short message.
在一个可选的实施例中,确定上述智能机的网络连接状态包括:确定上述接收设备的标识信息;通过利用该标识信息查询数据库,确定智能机的网络连接状态,其中,该数据库用于存储设备的标识信息和设备的网络连接状态的对应关系。在本实施例中,为了能够查询到接收设备状态,服务器侧需要和接收设备进行链路保活,由于智能机能够进行数据网络连接以及无线网络连接,因此,在进行保活时,可以利用数据网络或无线网络作为承载传输保活数据。此外,在实际应用中,接收设备也可以定时主动上报自身的状态。In an optional embodiment, determining the network connection status of the smart machine includes: determining identification information of the receiving device; determining a network connection status of the smart machine by using the identification information to query a database, wherein the database is used for storing Correspondence between the identification information of the device and the network connection status of the device. In this embodiment, in order to be able to query the status of the receiving device, the server side needs to perform link keep-alive with the receiving device. Since the smart machine can perform data network connection and wireless network connection, data can be utilized during keep-alive operation. The network or wireless network transmits bearer data as a bearer. In addition, in practical applications, the receiving device can also actively report its own status at regular intervals.
在本发明实施例中还提供了一种可以运行在如图1所示的终端上的短信验证方法,图3是根据本发明实施例的第二种短信验证方法的流程图,如图3所示,该流程包括如下步骤:In the embodiment of the present invention, a short message verification method that can be run on the terminal shown in FIG. 1 is provided. FIG. 3 is a flowchart of a second short message verification method according to an embodiment of the present invention, as shown in FIG. The process includes the following steps:
步骤S302,接收待验证的短信的验真报告,其中,该验真报告中携带有计算的与所述待验证的短信对应的校验串;Step S302, receiving a verification report of the short message to be verified, where the verification report carries the calculated verification string corresponding to the short message to be verified;
步骤S304,对比该验真报告中携带的校验串与本地存储的对该待验证的短信进行计算得到的校验串;Step S304, comparing the check string carried in the verification report with the locally stored check string obtained by calculating the short message to be verified;
步骤S304,根据对比结果确定上述待验证的短信的真伪。Step S304, determining the authenticity of the short message to be verified according to the comparison result.
其中,执行上述操作的可以是短信的接收设备,例如,用户设备UE。接收的验真报告可以是服务器发送的,上述与待验证的短信对应的校验串可以是按照预定算法进行计算所得到的。The performing the above operation may be a receiving device of a short message, for example, a user equipment UE. The received verification report may be sent by the server, and the verification string corresponding to the short message to be verified may be calculated according to a predetermined algorithm.
通过本实施例,可以由服务器侧生成待验证短信的验真报告,从而可以使得接收短信的设备依据该验真报告来对短信的真伪进行验证,无需接收设备向服务器侧发送短信内容,从而可以在验证短信真伪的同时保障了用户的信息和财产安全,有效解决了相关技术中存在的无法有效实现短信验证的问题。In this embodiment, the verification report of the short message to be verified can be generated by the server side, so that the device receiving the short message can verify the authenticity of the short message according to the verification report, and the receiving device does not need to send the short message content to the server side. It can ensure the security of the user's information and property while verifying the authenticity of the text message, and effectively solve the problem that the related technology cannot effectively implement the short message verification.
在一个可选的实施例中,在对比上述验真报告中携带的校验串与本地预先对该待验证的短信进行计算得到的校验串之前,上述方法还包括:接收该待验证的短信;计算与待验证的短信对应的校验串;将该校验串以及待验证的短信的发送设备信息对应存储到短信校验串库中。在本实施例中,在接收待验证的短信时,可以按照常规的短信接收方式进行接收,在计算校验串时,需要采用和服务器侧相同的算法进行计算。在本发明实施例中,可以预先在接收设备和服务器侧设置相同的算法,也可以由接收设备和服务器侧动态协商确定该算法,但是接收设备和服务器侧的算法是需要保持一致的。In an optional embodiment, before the comparison between the verification string carried in the verification report and the verification string calculated by the local pre-verification of the short message, the method further includes: receiving the short message to be verified. Calculating a check string corresponding to the short message to be verified; storing the check string and the sending device information of the short message to be verified in the short message check string library. In this embodiment, when receiving the short message to be verified, the receiving may be performed according to the conventional short message receiving manner. When calculating the check string, the same algorithm as the server side is used for calculation. In the embodiment of the present invention, the same algorithm may be set in advance on the receiving device and the server side, or the algorithm may be determined by dynamic negotiation between the receiving device and the server side, but the algorithms on the receiving device and the server side need to be consistent.
在一个可选的实施例中,对比该验真报告中携带的校验串与本地存储的对该待验证的短信进行计算得到的校验串包括:根据上述验真报告中携带的发送设备信息在上述短信校验串库中查找与该发送设备信息对应的校验串;对比验真报告中携带的校验串与查找到的与发送设备信息对应的校验串。在本实施例中,接收设备侧可以对比服务器侧通过计算生成的校验串与本地通过计算生成的校验串是否一致,若二者一致,则说明待验证的短信为真,如果二者不一致,说明待验证的短信为伪造的,在本实施例 中,短信为真,说明该短信是由合法基站发送的,伪造的短信是由伪基站发送的。In an optional embodiment, comparing the check string carried in the verification report with the locally stored check string obtained by calculating the short message to be verified includes: sending device information carried in the verification report according to the foregoing The check string corresponding to the sending device information is searched in the short message check string library; the check string carried in the comparison report is compared with the found check string corresponding to the sending device information. In this embodiment, the receiving device side can compare whether the verification string generated by the calculation by the server side is consistent with the verification string generated by the local calculation, and if the two are consistent, the short message to be verified is true, if the two are inconsistent If the short message to be verified is forged, in the embodiment, the short message is true, indicating that the short message is sent by the legal base station, and the fake short message is sent by the pseudo base station.
在一个可选的实施例中,在根据对比结果确定所述待验证的短信的真伪之后,上述方法还包括:在确定待验证的短信为真时,在待验证的短信上添加已验证标识。在本实施例中,可以在验证为真的短信上添加已验证的标识,该标识的形式不限,可以是添加文字的方式,或者是添加符号(例如,“√”)的方式,在一些情况下,也可以通过调整短信的显示方式(例如,显示的颜色、字体)的形式(在该情况下,可以额外为验证过的短信创建一个链接,以使使用者能够通过链接获知验证报告)。In an optional embodiment, after determining the authenticity of the short message to be verified according to the comparison result, the method further includes: adding a verified identifier to the short message to be verified when determining that the short message to be verified is true . In this embodiment, the verified identifier may be added to the verified text message, and the identifier may be in any form, which may be a way of adding text, or adding a symbol (for example, “√”), in some manners. In this case, you can also adjust the form of the text message display (for example, the displayed color, font) (in this case, you can create a link for the verified text message to enable the user to know the verification report through the link) .
在一个可选的实施例中,在上述待验证的短信上添加已验证标识之后,上述方法还包括:根据对比结果生成验证报告;将已验证标识与该验证报告进行链接。在本实施例中,可以生成并保存验证报告,从而方便后续的查看,且可以在点击已验证标识时,自动链接到并显示具体的已生成的验证报告。从而解决相关技术中由于终端侧不会存储验证结果内容,导致用户如果需要再次查看验证结果,又要重复进行短信验证,消耗更多用户流量的问题。In an optional embodiment, after the verified identifier is added to the short message to be verified, the method further includes: generating a verification report according to the comparison result; and linking the verified identifier with the verification report. In this embodiment, the verification report can be generated and saved to facilitate subsequent viewing, and the specific generated verification report can be automatically linked to and displayed when the verified identification is clicked. Therefore, in the related art, since the terminal side does not store the content of the verification result, the user needs to check the verification result again, and repeats the verification of the short message to consume more user traffic.
上述各实施例是分别从服务器侧和接收设备侧单独进行说明的,下面结合服务器侧和接收设备侧对本发明进行整体说明:The above embodiments are separately described from the server side and the receiving device side respectively, and the present invention is generally described below in conjunction with the server side and the receiving device side:
图4是根据本发明实施例的基于数据网络的短信验真方法流程图,具体流程见图4所示,其中,4 is a flowchart of a method for verifying a short message based on a data network according to an embodiment of the present invention. The specific process is shown in FIG. 4, where
第1步表示行业短信服务器提供者(Service Provider,简称为SP)通过运营商的短信中心或短信网关下发企业短信。The first step indicates that the service provider (Service Provider, SP for short) sends the enterprise text message through the SMS center or the SMS gateway of the operator.
第2、3步说明短信中心或短信网关负责通过短信协议向短信接收者终端(对应于上述的接收终端)下发短信。Steps 2 and 3 indicate that the short message center or the short message gateway is responsible for sending a short message to the short message receiver terminal (corresponding to the above receiving terminal) through the short message protocol.
第4步说明终端收到短信后,终端中的APP读取该短信,并根据和服务器一致的算法计算短信散列串(对应于上述的校验串),存储到本地数据库(对应于上述的短信校验串库)中。Step 4: After the terminal receives the short message, the APP in the terminal reads the short message, and calculates a short message hash string (corresponding to the above check string) according to an algorithm consistent with the server, and stores it in the local database (corresponding to the above) SMS check string library).
第5步说明SP的企业短信下发成功后,短信中心或短信网关将该短信抄送到本发明实施例中的短信验真服务器(对应于上述的短信验真系统),短信验真服务器收到短信后(对应于图2中的S202),根据和APP一致的算法计算出该短信对应的散列串,同时通过短信发送者查询SP信息,验证时间等,组合成验真报告(对应于图2中的S204-206)。After the step 5 indicates that the enterprise short message of the SP is successfully delivered, the short message center or the short message gateway copies the short message to the short message verification server (corresponding to the above short message verification system) in the embodiment of the present invention, and the short message verification server receives the message. After the short message (corresponding to S202 in FIG. 2), the hash string corresponding to the short message is calculated according to an algorithm consistent with the APP, and the SP message is queried by the short message sender, the verification time, etc., and combined into a verification report (corresponding to S204-206 in Fig. 2).
第6、7步描述了短信验真服务器通过数据网络将验证报告推送到终端的过程。Steps 6 and 7 describe the process by which the SMS verification server pushes the verification report to the terminal over the data network.
第8步描述了APP收到验真报告后,取出散列串,并跟终端本地散列串库匹配,根据匹配结果显示验真报告的流程(对应于图3中的步骤S302-S304)。Step 8 describes that after receiving the verification report, the APP takes out the hash string and matches the terminal local hash string library, and displays the flow of the verification report according to the matching result (corresponding to steps S302-S304 in FIG. 3).
图5是根据本发明实施例的基于短信方式的短信验真方法流程图,具体流程见图5所示,其中:FIG. 5 is a flowchart of a short message verification method based on a short message method according to an embodiment of the present invention. The specific process is shown in FIG. 5, wherein:
第1步表示行业短信SP通过运营商的短信中心或短信网关下发企业短信。The first step indicates that the industry SMS SP sends the enterprise text message through the operator's SMS center or SMS gateway.
第2、3步说明短信中心或短信网关负责通过短信协议向短信接收者终端下发短信。Steps 2 and 3 indicate that the short message center or the short message gateway is responsible for sending a short message to the short message receiver terminal through the short message protocol.
第4步终端收到短信后,智能机通过APP(功能机通过短信接收模块)读取该短信,并根据和服务器一致的算法计算短信散列串,并存储到本地数据库中。After the terminal receives the short message, the smart phone reads the short message through the APP (the function machine through the short message receiving module), and calculates the short message hash string according to the algorithm consistent with the server, and stores it in the local database.
第5步说明SP的企业短信下发成功后,短信中心或短信网关将该短信抄送到本专利的短信验真服务器,短信验真服务器收到短信后(对应于图2的S202),根据和APP一致的算法计算出该短信对应的散列串(对应于图2的S204),同时通过短信发送者查询SP信息,验证时间等,组合成验真报告(对应于图2的S206中的根据计算出的上述校验串生成验真报告)。Step 5 indicates that after the enterprise SMS of the SP is successfully delivered, the SMS center or the SMS gateway copies the short message to the short message verification server of the patent, and the short message verification server receives the short message (corresponding to S202 of FIG. 2), according to The algorithm consistent with the APP calculates a hash string corresponding to the short message (corresponding to S204 of FIG. 2), and simultaneously queries the SP information, the verification time, and the like by the short message sender, and combines them into a verification report (corresponding to S206 in FIG. 2). A verification report is generated based on the calculated check string.
第6、7步描述了短信验真服务器通过短信传输协议(影子短信或二进制短信)将验证报告推送到终端的过程(对应于图2的S206中的将该验真 报告下发给设置为接收上述待验证的短信的接收设备)。Steps 6 and 7 describe the process in which the short message verification server pushes the verification report to the terminal through the short message transmission protocol (shadow message or binary message) (corresponding to the verification report sent in S206 of FIG. 2 is set to receive The receiving device of the above-mentioned short message to be verified).
第8步描述了终端收到验真报告后的处理流程。智能机通过APP(功能机通过短信接收模块)收到验真报告后,取出散列串,并跟终端本地散列串库匹配,根据匹配结果显示验真报告的流程(对应于图3所示流程)。Step 8 describes the processing flow after the terminal receives the verification report. After receiving the verification report through the APP (the function machine through the short message receiving module), the smart machine takes out the hash string and matches the terminal local hash string library, and displays the flow of the verification report according to the matching result (corresponding to FIG. 3). Process).
通过以上的实施方式的描述,本领域的技术人员可以清楚地了解到根据上述实施例的方法可借助软件加必需的通用硬件平台的方式来实现,当然也可以通过硬件,但很多情况下前者是更佳的实施方式。基于这样的理解,本发明的技术方案本质上或者说对现有技术做出贡献的部分可以以软件产品的形式体现出来,该计算机软件产品存储在一个存储介质(如ROM/RAM、磁碟、光盘)中,包括若干指令用以使得一台终端设备(可以是手机,计算机,服务器,或者网络设备等)执行本发明各个实施例所述的方法。Through the description of the above embodiments, those skilled in the art can clearly understand that the method according to the above embodiment can be implemented by means of software plus a necessary general hardware platform, and of course, by hardware, but in many cases, the former is A better implementation. Based on such understanding, the technical solution of the present invention, which is essential or contributes to the prior art, may be embodied in the form of a software product stored in a storage medium (such as ROM/RAM, disk, The optical disc includes a number of instructions for causing a terminal device (which may be a cell phone, a computer, a server, or a network device, etc.) to perform the methods described in various embodiments of the present invention.
在本实施例中还提供了一种短信验证装置,该装置用于实现上述实施例及优选实施方式,已经进行过说明的不再赘述。如以下所使用的,术语“模块”可以实现预定功能的软件和/或硬件的组合。尽管以下实施例所描述的装置较佳地以软件来实现,但是硬件,或者软件和硬件的组合的实现也是可能并被构想的。In the embodiment, a short message verification device is provided, which is used to implement the foregoing embodiments and preferred embodiments, and has not been described again. As used below, the term "module" may implement a combination of software and/or hardware of a predetermined function. Although the apparatus described in the following embodiments is preferably implemented in software, hardware, or a combination of software and hardware, is also possible and contemplated.
图6是根据本发明实施例的第一种短信验证装置的结构框图,如图6所示,该装置包括第一接收模块62,第一计算模块64和处理模块66,下面对该装置进行说明:FIG. 6 is a structural block diagram of a first short message verification apparatus according to an embodiment of the present invention. As shown in FIG. 6, the apparatus includes a first receiving module 62, a first calculating module 64, and a processing module 66. Description:
第一接收模块62,设置为接收短信中心或短信网关下发的待验证的短信;第一计算模块64,连接至上述第一接收模块62,设置为按照预定算法计算与上述待验证的短信对应的校验串;处理模块66,连接至上述第一计算模块64,设置为根据计算出的上述校验串生成验真报告,并将该验真报告下发给设置为接收待验证的短信的接收设备,其中,该验真报告用于接收设备对待验证的短信的真伪进行验证。The first receiving module 62 is configured to receive the short message to be verified sent by the short message center or the short message gateway; the first calculating module 64 is connected to the first receiving module 62, and is configured to calculate the short message corresponding to the to-be-verified according to a predetermined algorithm. The verification module 66 is connected to the first calculation module 64, and configured to generate a verification report according to the calculated verification string, and send the verification report to the short message set to receive the verification. The receiving device, wherein the verification report is used for verifying the authenticity of the short message to be verified by the device.
在一个可选的实施例中,上述第一计算模块64包括:计算单元,设置为在根据上述待验证的短信的发送设备信息确定上述发送设备具备短信验证权限的情况下,按照预定算法计算与该待验证的短信对应的校验串。In an optional embodiment, the first calculating module 64 includes: a calculating unit, configured to calculate, according to a predetermined algorithm, that the sending device has the short message verifying authority according to the sending device information of the short message to be verified. The check string corresponding to the short message to be verified.
在一个可选的实施例中,在根据计算出的所述校验串生成验真报告时,上述处理模块66包括:第一确定单元,设置为确定待验证的短信的相关信息,其中,该相关信息包括以下至少之一:发送上述待验证的短信的发送设备信息、上述待验证的短信的发送时间信息、上述待验证的短信的内容以及上述接收设备的信息;生成单元,设置为将上述相关信息和校验串生成所述验真报告。In an optional embodiment, when the verification report is generated according to the calculated verification string, the processing module 66 includes: a first determining unit, configured to determine related information of the short message to be verified, where The related information includes at least one of the following: a sending device information for sending the short message to be verified, a sending time information of the short message to be verified, a content of the short message to be verified, and information of the receiving device, and a generating unit configured to The related information and the check string generate the verification report.
在一个可选的实施例中,在将上述验真报告下发给设置为接收上述待验证的短信的接收设备时,上述处理模块66包括:第二确定单元,设置为确定上述接收设备的设备类型;下发单元,设置为根据上述设备类型将验真报告下发给接收设备。In an optional embodiment, when the verification report is sent to the receiving device that is configured to receive the short message to be verified, the processing module 66 includes: a second determining unit, configured to determine the device of the receiving device. The type; the sending unit is configured to send the verification report to the receiving device according to the device type.
在一个可选的实施例中,所述第二确定单元设置为:通过查询接收设备的注册信息确定该接收设备的设备类型;在本实施例中,接收设备可以在预先进行注册时上报自身的设备类型(例如,是智能机还是功能机)。In an optional embodiment, the second determining unit is configured to: determine the device type of the receiving device by querying the registration information of the receiving device; in this embodiment, the receiving device may report the self in the pre-registration The type of device (for example, a smart phone or a feature machine).
在一个可选的实施例中,上述下发单元设置为:在确定上述设备类型为智能机时,确定该智能机的网络连接状态;当为连接网络的在线状态时,通过数据网络或无线网络将验真报告发送给接收设备;当为未连接网络的离线状态时,通过短信发送的方式将验真报告发送给接收设备;在确定该设备类型为功能机的情况下,通过短信发送的方式将验真报告发送给接收设备。In an optional embodiment, the sending unit is configured to determine a network connection status of the smart device when the device type is determined to be a smart phone, and a data network or a wireless network when the online state of the network is connected. The verification report is sent to the receiving device; when it is the offline state of the unconnected network, the verification report is sent to the receiving device by means of short message sending; when the device type is determined to be the function machine, the method of sending the short message is sent Send the verification report to the receiving device.
在一个可选的实施例中,上述下发单元可以通过如下方式确定上述智能机的网络连接状态:确定上述接收设备的标识信息;通过利用该标识信息查询数据库,确定智能机的网络连接状态,其中,该数据库用于存储设备的标识信息和设备的网络连接状态的对应关系。In an optional embodiment, the sending unit may determine the network connection status of the smart machine by determining the identification information of the receiving device by using the identification information to query the database, and determining the network connection status of the smart machine. The database is used to store the correspondence between the identification information of the device and the network connection status of the device.
图6及相关实施例可以应用于服务器侧。Figure 6 and related embodiments can be applied to the server side.
在本发明实施例中,还提供了一种短信验证装置,图7是根据本发明实施例的第二种短信验证装置的结构框图,如图7所示,该装置包括第二接收模块72,对比模块74和确定模块76,下面对该装置进行说明:In the embodiment of the present invention, a short message verification device is provided. FIG. 7 is a structural block diagram of a second short message verification device according to an embodiment of the present invention. As shown in FIG. 7, the device includes a second receiving module 72. Comparing module 74 and determining module 76, the device is described below:
第二接收模块72,设置为接收待验证的短信的验真报告,其中,该验真报告中携带有按照预定算法计算的与上述待验证的短信对应的校验串;对比模块74,连接至上述第二接收模块72,设置为对比上述验真报告中携带的校验串与本地存储的对上述待验证的短信进行计算得到的校验串;确定模块76,连接至上述对比模块74,设置为根据对比结果确定上述待验证的短信的真伪。The second receiving module 72 is configured to receive a verification report of the short message to be verified, where the verification report carries a verification string corresponding to the to-be-verified short message calculated according to a predetermined algorithm; and the comparison module 74 is connected to The second receiving module 72 is configured to compare the check string carried in the verification report with the check string calculated by the locally stored short message to be verified, and the determining module 76 is connected to the comparison module 74 to set In order to determine the authenticity of the above-mentioned short message to be verified according to the comparison result.
在一个可选的实施例中,上述装置还包括:第三接收模块,设置为在对比上述验真报告中携带的校验串与本地预先对上述待验证的短信进行计算得到的校验串之前,接收上述待验证的短信;第二计算模块,设置为按照上述预定算法计算与待验证的短信对应的校验串;存储模块,设置为将上述校验串以及待验证的短信的发送设备信息对应存储到短信校验串库中。In an optional embodiment, the foregoing apparatus further includes: a third receiving module, configured to compare the check string carried in the verification report with the check string calculated by the local pre-verified short message Receiving the short message to be verified; the second calculating module is configured to calculate a check string corresponding to the short message to be verified according to the predetermined algorithm; and the storage module is configured to send the check string and the sending device information of the short message to be verified Correspondingly stored in the SMS check string library.
在一个可选的实施例中,上述对比模块包括:查找单元,设置为根据上述验真报告中携带的发送设备信息在上述短信校验串库中查找与上述发送设备信息对应的校验串;对比单元,设置为对比上述验真报告中携带的校验串与查找到的与上述发送设备信息对应的校验串。In an optional embodiment, the comparison module includes: a searching unit, configured to search, in the short message check string library, a check string corresponding to the sending device information according to the sending device information carried in the verification report; The comparing unit is configured to compare the check string carried in the verification report and the found check string corresponding to the sending device information.
在一个可选的实施例中,上述装置还设置为在根据对比结果确定所述待验证的短信的真伪之后,在确定待验证的短信为真时,在待验证的短信上添加已验证标识。In an optional embodiment, the foregoing apparatus is further configured to: after determining the authenticity of the short message to be verified according to the comparison result, adding a verified identifier to the short message to be verified when determining that the short message to be verified is true .
在一个可选的实施例中,上述装置还设置为在上述待验证的短信上添加已验证标识之后,根据对比结果生成验证报告;将已验证标识与该验证报告进行链接。In an optional embodiment, the apparatus is further configured to: after adding the verified identifier to the short message to be verified, generate a verification report according to the comparison result; and link the verified identifier with the verification report.
图7及相关实施例可以应用于接收设备侧(即,UE侧)。FIG. 7 and related embodiments can be applied to the receiving device side (ie, the UE side).
下面结合具体实施例对本发明进行具体说明:The present invention will be specifically described below in conjunction with specific embodiments:
具体实施例一:Embodiment 1
在本具体实施例中提供了一种系统,其框架如图8所示,图8是根据本发明实施例的短信验真系统的结构框图,主要包括以下模块:In this embodiment, a system is provided, the framework of which is shown in FIG. 8. FIG. 8 is a structural block diagram of a short message verification system according to an embodiment of the present invention, which mainly includes the following modules:
智能终端上的原生Native或互联网短信验真APP:(该原生Native或APP中所执行的操作与上述的第二接收模块72,对比模块74和确定模块76所执行的操作一致):负责接收和显示示验真信息,本实施例中的系统客户端。收到短信后利用跟服务端相同的短信校验串生成规则,生成短信校验串,并存储到终端短信校验串库中。在接收到验真结果后,解析出SP信息和短信校验串信息。从本地短信校验串库中查找该校验串,根据查询的结果显示不同的验真结果。The native Native or Internet SMS verification APP on the smart terminal: (The operations performed in the native Native or APP are consistent with the operations performed by the second receiving module 72, the comparison module 74 and the determining module 76 described above): responsible for receiving and The test truth information, the system client in this embodiment is displayed. After receiving the short message, the same message verification string generation rule as the server is used to generate a short message check string, and is stored in the terminal short message check string library. After receiving the verification result, the SP information and the short message verification string information are parsed. The check string is searched from the local short message check string library, and different verification results are displayed according to the result of the query.
功能机定制开发的短信验真模块:(该功能机定制开发的短信验真模块中所执行的操作与上述的第二接收模块72,对比模块74和确定模块76所执行的操作一致):负责接收和显示验真信息,本实施例中的系统客户端收到短信后利用跟服务端相同的短信校验串生成规则,生成短信校验串,并存储到终端短信校验串库中。在接收到验真结果后,解析出SP信息和短信校验串信息。从本地短信校验串库中查找该校验串,根据查询结果显示不同的验真结果。The SMS verification module developed by the function machine is customized: (The operation performed in the SMS verification module customized by the function machine is the same as the operation performed by the second receiving module 72, the comparison module 74 and the determination module 76 described above): After receiving the short message, the system client in this embodiment uses the same short message check string generation rule as the server to receive the short message, and generates a short message check string, which is stored in the terminal short message check string library. After receiving the verification result, the SP information and the short message verification string information are parsed. The check string is searched from the local short message check string library, and different verification results are displayed according to the query result.
SMS新增接入模块(该SMS新增接入模块所执行的操作与上述的第一接收模块62一致):本模块负责跟短信中心(后文简称SMSC)或短信网关(后文简称SMGW)模块对接,接收短信关键信息,本模块为本发明所述系统服务端的一部分,SMSC或SMGW模块直接跟本模块对接,以通过本模块将短信信息(包括但不限于短信发送者、发送时间、短信内容、短信接收者等信息)投递到本发明实施例所述的系统中。The new access module of the SMS is added. The operation performed by the new access module of the SMS is the same as that of the first receiving module 62. The module is responsible for the short message center (hereinafter referred to as SMSC) or the short message gateway (hereinafter referred to as SMGW). The module is connected to receive the key information of the short message. The module is part of the system server of the present invention. The SMSC or SMGW module directly interfaces with the module to use the module to send short message information (including but not limited to the sender of the short message, the sending time, and the short message. The content, the message recipient, and the like are delivered to the system described in the embodiment of the present invention.
短信验真模块(该短信验真模块所执行的操作与上述的第一计算模块64一致):本模块负责短信验真,并且可以将验真结果传递给下游模块。比如通过行业短信付费SP名单查询发送者号码信息,是否存在,是否为 付费SP,SP等级等信息,同时还负责通过散列算法(包括但不限于MD5、SHA等算法)、对称加密算法或非对称加密算法等获取代表整条短信的唯一串,以上的这些信息都将会作为验真结果的一部分传递下短信验证报告推送模块。The short message verification module (the operation performed by the short message verification module is consistent with the first calculation module 64 described above): the module is responsible for the short message verification, and can pass the verification result to the downstream module. For example, the sender's number information is queried through the industry SMS payment SP list, whether it exists, whether it is a paid SP, SP level, etc., and is also responsible for passing hash algorithms (including but not limited to MD5, SHA, etc.), symmetric encryption algorithms, or non- The symmetric encryption algorithm acquires a unique string representing the entire short message, and the above information will be transmitted to the short message verification report pushing module as part of the verification result.
短信验证报告推送模块(该短信验证报告推送模块所执行的操作与上述的处理模块66一致):该模块主要负责封装真正的短信验证报告,并选择合适的推送方式,将报告发送到终端上。该模块主要有几个功能:首先根据终端类型(包括智能机或功能机)选择推送方式;根据系统配置的验证报告模板封装短信验证报告;最终向终端推送短信验证报告。The short message verification report pushing module (the operation performed by the short message verification report pushing module is consistent with the processing module 66 described above): the module is mainly responsible for encapsulating the real short message verification report, and selecting an appropriate pushing mode to send the report to the terminal. The module mainly has several functions: firstly, according to the terminal type (including the smart machine or the function machine), the push mode is selected; the short message verification report is encapsulated according to the verification report template configured by the system; and finally the short message verification report is pushed to the terminal.
链路保活模块:负责处理终端客户端的注册和链路保活流程,同时供系统其它模块查询智能机终端的状态。本模块主要适用于智能终端,且使用终端的数据网络或WIFI网络作为承载方式,传输保活数据。终端每一次启动会向本系统发送登录请求,请求中至少需要携带终端号码(代表短信接收者身份的,如短信接收者电话号码)、终端类型(目前主要有两类:智能机和功能机)给服务端;同时供系统其它模块查询智能机终端的状态。这里定义两种状态:“智能机终端在线”、“智能机终端离线”,系统每收到一次终端APP发送的保活消息,就更新一次终端状态。The link keep-alive module is responsible for processing the registration and link keep-alive process of the terminal client, and for other modules of the system to query the status of the smart terminal. This module is mainly applicable to intelligent terminals, and uses the data network of the terminal or the WIFI network as the bearer mode to transmit keep-alive data. Each time the terminal starts, it sends a login request to the system. The request needs to carry at least the terminal number (representing the identity of the recipient of the short message, such as the phone number of the recipient of the short message) and the type of the terminal (currently there are two main types: smart machine and function machine) To the server; at the same time, other modules of the system query the status of the smart terminal. Here, two states are defined: "smart machine terminal online" and "smart machine terminal offline", and the system updates the terminal status every time the system receives the keep-alive message sent by the terminal APP.
具体实施例二:Specific embodiment 2:
在本实施例中提供了一种在线智能机短信验真流程,如图9所示,包括如下步骤:In this embodiment, an online intelligent machine short message verification process is provided. As shown in FIG. 9, the method includes the following steps:
步骤1,SP或MO终端(短信发送者)通过运营商发送短信,该消息最终会传递到SMSC或SMGW中去。Step 1. The SP or MO terminal (sender sender) sends a text message through the operator, and the message is finally delivered to the SMSC or SMGW.
步骤2,SMSC或SMGW收到短信发送请求后,将该条短信的关键信息(包括但不限于短信发送者、发送时间、短信内容、短信接收者等信息)抄送一份到本发明实施例所述系统中(对应于图2中的S202)。Step 2: After receiving the short message sending request, the SMSC or the SMGW sends a copy of the key information of the short message (including but not limited to the short message sender, the sending time, the short message content, the short message receiver, etc.) to the embodiment of the present invention. In the system (corresponding to S202 in Fig. 2).
步骤3,SMS新增接入模块将外部请求转为内部请求格式,发送给短 信验真模块。Step 3: The SMS new access module converts the external request into an internal request format and sends it to the short message verification module.
步骤4,短信验真模块收到请求后,首先将短信统一存储起来,以便于追溯;同时本模块负责具体的验真流程,比如通过行业短信付费SP名单查询发送者号码信息,是否存在,是否付费SP,SP等级等信息,同时还负责通过散列算法(包括但不限于MD5、SHA等算法)、对称加密算法或非对称加密算法等获取代表整条短信的唯一串(即,计算与上述短信对应的校验串,对应于图2的S204),以上的这些信息都将会作为验真结果的一部分传递下短信验证报告推送模块。Step 4: After receiving the request, the short message verification module firstly stores the short message uniformly for traceability; at the same time, the module is responsible for the specific verification process, for example, querying the sender number information through the industry SMS payment SP list, whether it exists, whether Pay SP, SP level and other information, and also be responsible for obtaining a unique string representing the entire message by hash algorithm (including but not limited to MD5, SHA, etc.), symmetric encryption algorithm or asymmetric encryption algorithm (ie, calculation and above) The verification string corresponding to the short message corresponds to S204) of FIG. 2, and the above information will be transmitted to the short message verification report pushing module as part of the verification result.
步骤5,短信验证报告推送模块收到验真结果后,首先找到配置的短信验证报告模板,封装真正的验真报告。Step 5: After receiving the verification result, the short message verification report pushing module first finds the configured short message verification report template and encapsulates the real verification report.
步骤6,接下来推送模块获取终端类型(系统为了方便描述设定终端类型包括“智能机终端”和“功能机终端”两种),假定获取到的终端类型为“智能机终端”。Step 6: Next, the push module acquires the terminal type (the system sets the terminal type to include two types of "smartphone terminal" and "function machine terminal" for convenience of description), and assumes that the acquired terminal type is "smartphone terminal".
步骤7,短信验证报告推送模块再向链路保活模块发送终端状态查询请求(必须携带注册时使用的终端号码信息)。Step 7: The short message verification report pushing module sends a terminal status query request to the link keep-alive module (must carry the terminal number information used for registration).
步骤8,链路保活模块收到状态查询请求后,解析该请求得到终端号码信息,然后查询数据库,获取该号码所在终端的状态。假定获取到的状态为“在线”状态。Step 8: After receiving the status query request, the link keep-alive module parses the request to obtain the terminal number information, and then queries the database to obtain the status of the terminal where the number is located. Assume that the acquired status is the "online" status.
步骤9,推送模块根据步骤8查询到的“在线状态”,选择数据网络(IP网络)方式下发验真报告到智能终端上(对应于图2的S206),由终端进行短信匹配、验证结果展示。Step 9, the push module selects the "online status" queried in step 8, selects the data network (IP network) mode to send the verification report to the smart terminal (corresponding to S206 of FIG. 2), and the terminal performs the short message matching and the verification result. Show.
具体实施例三:Specific embodiment 3:
在本实施例中提供了一种离线智能机短信验真流程,如图10所示,包括如下步骤:In this embodiment, an offline smart phone short message verification process is provided, as shown in FIG. 10, including the following steps:
步骤1,SP或MO终端(短信发送者)通过运营商发送短信,该消息 最终会传递到SMSC或SMGW中去。Step 1. The SP or MO terminal (sender sender) sends a text message through the operator, and the message is finally delivered to the SMSC or SMGW.
步骤2,SMSC或SMGW收到短信发送请求后,将该条短信的关键信息(包括但不限于短信发送者、发送时间、短信内容、短信接收者等信息)抄送一份到本发明实施例所述系统中(对应于图2的S202)。Step 2: After receiving the short message sending request, the SMSC or the SMGW sends a copy of the key information of the short message (including but not limited to the short message sender, the sending time, the short message content, the short message receiver, etc.) to the embodiment of the present invention. In the system (corresponding to S202 of Fig. 2).
步骤3,SMS新增接入模块将外部请求转为内部请求格式,发送给短信验真模块。Step 3: The SMS newly added access module converts the external request into an internal request format and sends it to the short message verification module.
步骤4,短信验真模块收到请求后,首先将短信统一存储起来,以便于追溯;同时本模块负责具体的验真流程,比如通过行业短信付费SP名单查询发送者号码信息,是否存在,是否付费SP,SP等级等信息,同时还负责通过散列算法(包括但不限于MD5、SHA等算法)、对称加密算法或非对称加密算法等获取代表整条短信的唯一串(即,计算与上述短信对应的校验串,对应于图2的S204),以上的这些信息都将会作为验真结果的一部分传递下短信验证报告推送模块。Step 4: After receiving the request, the short message verification module firstly stores the short message uniformly for traceability; at the same time, the module is responsible for the specific verification process, for example, querying the sender number information through the industry SMS payment SP list, whether it exists, whether Pay SP, SP level and other information, and also be responsible for obtaining a unique string representing the entire message by hash algorithm (including but not limited to MD5, SHA, etc.), symmetric encryption algorithm or asymmetric encryption algorithm (ie, calculation and above) The verification string corresponding to the short message corresponds to S204) of FIG. 2, and the above information will be transmitted to the short message verification report pushing module as part of the verification result.
步骤5,短信验证报告推送模块收到验真结果后,首先找到配置的短信验证报告模板,封装真正的验真报告。Step 5: After receiving the verification result, the short message verification report pushing module first finds the configured short message verification report template and encapsulates the real verification report.
步骤6,接下来推送模块获取终端类型(系统为了方便描述设定终端类型包括“智能机终端”和“功能机终端”两种),假定获取到的终端类型为“智能机终端”。Step 6: Next, the push module acquires the terminal type (the system sets the terminal type to include two types of "smartphone terminal" and "function machine terminal" for convenience of description), and assumes that the acquired terminal type is "smartphone terminal".
步骤7,短信验证报告推送模块再向链路保活模块发送终端状态查询请求(必须携带注册时使用的终端号码信息)。Step 7: The short message verification report pushing module sends a terminal status query request to the link keep-alive module (must carry the terminal number information used for registration).
步骤8,链路保活模块收到状态查询请求后,解析该请求得到终端号码信息,然后查询数据库,获取该号码所在终端的状态。假定获取到的状态为“不在线”状态。Step 8: After receiving the status query request, the link keep-alive module parses the request to obtain the terminal number information, and then queries the database to obtain the status of the terminal where the number is located. Assume that the acquired status is "not online".
步骤9,推送模块根据步骤8查询到的“不在线状态”,选择影子短信或二进制短信方式下发验真报告到智能终端上(对应于图2的S206),由终端进行短信匹配、验证结果展示。这两种短信属于用户不可见短信,直接交由APP处理,用户体验良好。Step 9: The push module selects a shadow message or a binary message mode to send a verification report to the smart terminal according to the “not online status” queried in step 8 (corresponding to S206 in FIG. 2), and the terminal performs short message matching and verification result. Show. These two kinds of short messages belong to the invisible short message of the user, and are directly processed by the APP, and the user experience is good.
具体实施例四:Specific Embodiment 4:
在本实施例中提供了一种功能机短信验真流程,如图11所示,包括如下步骤:In this embodiment, a function message short message verification process is provided, as shown in FIG. 11, including the following steps:
步骤1,SP或MO终端(短信发送者)通过运营商发送短信,该消息最终会传递到SMSC或SMGW中去。Step 1. The SP or MO terminal (sender sender) sends a text message through the operator, and the message is finally delivered to the SMSC or SMGW.
步骤2,SMSC或SMGW收到短信发送请求后,将该条短信的关键信息(包括但不限于短信发送者、发送时间、短信内容、短信接收者等信息)抄送一份到本发明实施例所述的系统中(对应于图2的S202)。Step 2: After receiving the short message sending request, the SMSC or the SMGW sends a copy of the key information of the short message (including but not limited to the short message sender, the sending time, the short message content, the short message receiver, etc.) to the embodiment of the present invention. In the described system (corresponding to S202 of Fig. 2).
步骤3,SMS新增接入模块将外部请求转为内部请求格式,发送给短信验真模块。Step 3: The SMS newly added access module converts the external request into an internal request format and sends it to the short message verification module.
步骤4,短信验真模块收到请求后,首先将短信统一存储起来,以便于追溯;同时本模块负责具体的验真流程,比如通过行业短信付费SP名单查询发送者号码信息,是否存在,是否付费SP,SP等级等信息,同时还负责通过散列算法(包括但不限于MD5、SHA等算法)、对称加密算法或非对称加密算法等获取代表整条短信的唯一串(即,计算与上述短信对应的校验串,对应于图2的S204),以上的这些信息都将会做为验真结果的一部分传递下短信验证报告推送模块。Step 4: After receiving the request, the short message verification module firstly stores the short message uniformly for traceability; at the same time, the module is responsible for the specific verification process, for example, querying the sender number information through the industry SMS payment SP list, whether it exists, whether Pay SP, SP level and other information, and also be responsible for obtaining a unique string representing the entire message by hash algorithm (including but not limited to MD5, SHA, etc.), symmetric encryption algorithm or asymmetric encryption algorithm (ie, calculation and above) The verification string corresponding to the short message corresponds to S204) of FIG. 2, and the above information will be transmitted as a part of the verification result to the short message verification report pushing module.
步骤5,短信验证报告推送模块收到验真结果后,首先查询获取到终端类型是“智能机终端”还是“功能机终端”,假定获取到的终端类型为“功能机终端”。接着推送模块找到配置的短信验证报告模板,封装真正的验真报告。Step 5: After receiving the verification result, the short message verification report pushing module first queries whether the terminal type is “smartphone terminal” or “function machine terminal”, and assumes that the acquired terminal type is “function machine terminal”. Then the push module finds the configured SMS verification report template and encapsulates the real verification report.
步骤6,推送模块选择影子短信或二进制短信方式下发验真报告到功能机上(对应于图2的S206),由终端进行短信匹配、验证结果展示。这两种短信属于用户不可见短信,直接交由终端CLIENT处理,用户体验良好。In step 6, the push module selects the shadow message or the binary message mode to send the verification report to the function machine (corresponding to S206 of FIG. 2), and the terminal performs the short message matching and the verification result display. These two kinds of short messages belong to the invisible short message of the user, and are directly handled by the terminal CLIENT, and the user experience is good.
具体实施例五:Embodiment 5:
在本实施例中提供了一种短信验真及验证报告推送流程,如图12所示,包括如下步骤:In this embodiment, a short message verification and verification report pushing process is provided, as shown in FIG. 12, including the following steps:
步骤1,SMSC或SMGW首先将SP发送的短信下发到用户终端上。而本发明实施例中的客户端需具有短信访问权限,它可以在终端收到该条短信后,就利用将短信发送者、发送时间、内容、短信接收者四个参数合在一起做HASH(MD5、SHA算法)的散列串计算规则生成本地短信散列串,并存储到本地数据库中,同时客户端需在本地记录散列串跟短信的对应关系,方便快速查找短信,最终就形成了本地短信散列串库。Step 1: The SMSC or the SMGW first delivers the short message sent by the SP to the user terminal. In the embodiment of the present invention, the client needs to have the short message access right, and after receiving the short message, the terminal can use the four parameters of the short message sender, the sending time, the content, and the short message receiver to do HASH ( The hash string calculation rule of MD5 and SHA algorithm generates a local short message hash string and stores it in the local database. At the same time, the client needs to record the correspondence between the hash string and the short message locally, so that it is convenient to quickly find the short message, and finally form a Local SMS hashing library.
步骤2,SMSC或SMGW下发短信到终端成功后,会向本发明实施例中提到的短信验真系统抄送一份短信信息(对应于图2的S204),供本系统进行短信验真。Step 2: After the SMSC or the SMGW sends the short message to the terminal successfully, a short message information (corresponding to S204 in FIG. 2) is sent to the short message verification system mentioned in the embodiment of the present invention, and the system performs the short message verification. .
步骤3,本系统将步骤1中的外部请求转为内部验真请求格式,并交由验真模块继续处理。In step 3, the system converts the external request in step 1 into an internal verification request format, and passes the verification module to continue processing.
步骤4,短信验真模块收到请求后,首先通过行业短信付费SP名单查询发送者号码信息,是否存在,是否付费SP和SP等级等信息;同时将短信发送者、发送时间、内容、短信接收者四个参数合在一起做HASH(MD5、SHA算法)获取代表整条短信的散列串(即,计算与上述短信对应的校验串,对应于图2的S204)。前面获取到的SP信息和散列串将成为验真结果的一部分。Step 4: After receiving the request, the short message verification module first queries the sender's number information through the industry SMS payment SP list, whether there is information, whether the SP and the SP level are paid, and the sender of the short message, the sending time, the content, and the short message receiving. The four parameters are combined to perform HASH (MD5, SHA algorithm) to obtain a hash string representing the entire short message (that is, a check string corresponding to the above short message is calculated, corresponding to S204 of FIG. 2). The previously obtained SP information and hash string will be part of the verification result.
步骤5,得到验真结果后,本系统会依据该结果和查找到的短信验真模板封装短验报告。Step 5: After the verification result is obtained, the system will package the short report according to the result and the obtained short message verification template.
步骤6,接着系统需要选择合适推送方式,这里选择依据是终端状态(“在线”、“离线”)和终端类型(“智能机终端”、“功能机终端”)。Step 6. Next, the system needs to select a suitable push mode. The selection here is based on the terminal status ("online", "offline") and the terminal type ("smartphone terminal", "function machine terminal").
步骤7,系统成功选择合适推送方式后,直接向涉及终端推送验真报告(对应于图2的S206)。Step 7. After the system successfully selects the appropriate push mode, the system directly pushes the verification report (corresponding to S206 of FIG. 2).
步骤8,终端侧收到了验真报告后(对应于图3的S302),解析出SP 信息和短信散列串。然后查找该散列串是否存在于步骤1计算出的散列串库中,如果存在,则在该散列串对应的短信右方显示“已验证”标识。同时根据本地配置的验证报告详细信息模块得到该条短信的验证详细报告,并存储起来,供用户随时查看。用户在看到APP或短信界面的“已验证”标识后,如图13和图14所示,可以直接点击该标识,查看验证报告详细信息(对应于图3的S304-S306)。Step 8. After receiving the verification report (corresponding to S302 of FIG. 3), the terminal side parses out the SP information and the SMS hash string. Then, it is found whether the hash string exists in the hash string library calculated in step 1, and if so, the "verified" flag is displayed on the right side of the short message corresponding to the hash string. At the same time, according to the locally configured verification report detailed information module, a detailed report of the verification of the short message is obtained and stored for the user to view at any time. After the user sees the "verified" identifier of the APP or the short message interface, as shown in FIG. 13 and FIG. 14, the identification information can be directly clicked to view the verification report detailed information (corresponding to S304-S306 of FIG. 3).
另外,图9、图10和图11的短信新增流程中,SMSC或SMGW至少需要将短信的发送者、具体发送时间、短信内容、短信的接收者等信息通过SMS新增接入模块写入本发明实施例所述的系统中。In addition, in the SMS adding process of FIG. 9, FIG. 10 and FIG. 11, the SMSC or the SMGW needs to write at least the sender of the short message, the specific sending time, the short message content, the recipient of the short message, and the like through the SMS new access module. In the system described in the embodiment of the invention.
本发明实施例中为了能够查询到智能机终端的状态(“在线”、“离线”),需要终端跟验真系统的进行链路保活。本发明实施例中选择终端的数据网络或WIFI网络作为承载方式,传输保活数据。为了保证数据不被截获、伪造,通信和传输方式必须是安全的、省流的。保活前,终端必须先登录,登录请求中至少需要携带终端号码(代表短信接收者身份的,如短信接收者电话号码)、终端类型(“智能机终端”、“功能机终端”)等数据,登录成功后由终端主动定时保活。同时本发明实施例中不对保活具体实现机制(例如保活传输方式、保活协议字段格式)做限定,但优选实现上需要考虑安全传输和省流,例如发送\r\n\r\n的TLS保活报文。In the embodiment of the present invention, in order to be able to query the status of the smart terminal ("online" or "offline"), the terminal and the authentication system are required to perform link keep-alive. In the embodiment of the present invention, the data network or the WIFI network of the terminal is selected as the bearer mode, and the keep-alive data is transmitted. In order to ensure that data is not intercepted or forged, communication and transmission methods must be secure and streamlined. Before the keepalive, the terminal must log in first. The login request must carry at least the terminal number (representing the identity of the sender of the message, such as the phone number of the recipient of the message), the type of the terminal ("smartphone terminal", "function machine terminal") and other data. After the login is successful, the terminal actively keeps alive. In the embodiment of the present invention, the specific implementation mechanism (for example, the keep-alive transmission mode and the keep-alive protocol field format) is not limited, but the implementation needs to consider secure transmission and saving, for example, sending \r\n\r\n TLS keepalive message.
本发明图8中描述的智能终端APP,即包括了从各大应用商场或AppStore下载的短信验真APP,也包括了各能智能手机的原生短信验真Native APP。The smart terminal APP described in FIG. 8 of the present invention includes a short message verification application downloaded from each major application mall or AppStore, and also includes a native short message verification true APP of each smart phone.
本发明实施例中不对系统端短信的唯一串信息产生机制做限定。例如,在具体实现时,可以采用MD5或SHA散列算法,同时可以将短信发送者、发送时间、短信内容、短信接收者合在一起,做散列算法,产生唯一串;同时终端也需要采用相同的规则,否则短信匹配会失败。In the embodiment of the present invention, the unique string information generation mechanism of the system-side short message is not limited. For example, in a specific implementation, an MD5 or SHA hashing algorithm may be used, and a short message sender, a sending time, a short message content, and a short message receiver may be combined to form a hash algorithm to generate a unique string; and the terminal also needs to adopt The same rules, otherwise the SMS match will fail.
本发明实施例中不对系统推送方式做限定。在具体实现时可以综合考 虑安全传输、省流以及方案的可行性。例如智能终端优先采用数据网络推送,没有连接数据网时采用影子或二进制短信方式。而功能机主要采用影子或二进制短信方式推送。The system push mode is not limited in the embodiment of the present invention. The specific implementation can take into account the safe transmission, saving and the feasibility of the solution. For example, the smart terminal preferentially adopts the data network push, and the shadow or binary short message mode is adopted when the data network is not connected. The function machine is mainly pushed by shadow or binary message.
本发明所述的客户端侧需要将验证服务器推送下来的验真信息存储到本地数据库中,以便于“飞行模式”或完全没有信号(2G、3G、4G)的场景下也能够浏览验真结果。The client side of the present invention needs to store the verification information pushed by the verification server into the local database, so as to be able to view the verification result in the "flight mode" or the scene without any signal (2G, 3G, 4G). .
本发明实施例中的方案可以适应于多种场景,可以应用于伪基站短信识别、运营商行业短信付费SP认证等场景中。本发明中是以运营商行业短信付费SP认证举例说明的。The solution in the embodiment of the present invention can be applied to multiple scenarios, and can be applied to scenarios such as pseudo base station short message identification and operator industry SMS payment SP authentication. In the present invention, an example of an operator industry SMS payment SP authentication is illustrated.
假设付费SP为某某银行。该某某银行想通过短信方式通知某某银行持卡人,进行短信推销(例如理财、红包或者普通商品推销等)。为了取信于某某银行持卡人,同时也为了避免伪造短信诈骗,某某银行向运营商付费申请了短信验真增值业务。该业务针对每条从某某银行发出的推销短信,运营商验真网元都会主动向该手机终端推送一条短信验真报告。持卡人手机终端收到该报告后将在短信或APP界面右方显示“已验证”标识,如图13所示。Assume that the paid SP is a certain bank. The certain bank wants to notify a certain bank cardholder by SMS to conduct SMS promotion (such as financial management, red envelopes or general merchandising, etc.). In order to win the trust of a certain bank card holder, and also to avoid forgery of SMS fraud, a certain bank paid the operator for a text message verification value-added service. The service is for each sales message sent from a certain bank, and the operator verification network element will actively push a short message verification report to the mobile terminal. After receiving the report, the cardholder mobile terminal will display the "verified" logo on the right side of the SMS or APP interface, as shown in Figure 13.
同时持卡人还可以点击该“已验证”标识,显示验证报告详细信息,例如“已通过中国移动认证,确认由某某银行发送,验证时间:2017.07.0512:34:56”,如图14所示。At the same time, the cardholder can also click on the "verified" logo to display the detailed information of the verification report, such as "has passed the China Mobile certification, confirmed by a certain bank, verification time: 2011.07.0512:34:56", as shown in Figure 14. Shown.
需要说明的是,本发明实施例中的各模块是可以通过软件或硬件来实现的,对于后者,可以通过以下方式实现,但不限于此:上述模块均位于同一处理器中;或者,上述各个模块以任意组合的形式分别位于不同的处理器中。It should be noted that each module in the embodiment of the present invention may be implemented by software or hardware. For the latter, the foregoing may be implemented by, but not limited to, the foregoing modules are all located in the same processor; The individual modules are located in different processors in any combination.
本发明的实施例还提供了一种存储介质,该存储介质包括存储的程序,其中,上述程序运行时执行上述任一项所述的方法。Embodiments of the present invention also provide a storage medium including a stored program, wherein the program described above executes the method of any of the above.
可选地,在本实施例中,上述存储介质可以包括但不限于:U盘、只 读存储器(Read-Only Memory,简称为ROM)、随机存取存储器(Random Access Memory,简称为RAM)、移动硬盘、磁碟或者光盘等各种可以存储程序代码的介质。Optionally, in the embodiment, the foregoing storage medium may include, but is not limited to, a USB flash drive, a Read-Only Memory (ROM), and a Random Access Memory (RAM). A variety of media that can store program code, such as a hard disk, a disk, or an optical disk.
本发明的实施例还提供了一种处理器,该处理器设置为运行程序,其中,该程序运行时执行上述任一项方法中的步骤。Embodiments of the present invention also provide a processor configured to execute a program, wherein the program is operative to perform the steps of any of the above methods.
根据本发明的又一个实施例,还提供了一种短信验证系统,包括短信中心或短信网关,还包括第一处理器,其中,所述短信中心或短信网关用于将待验证的短信下发至接收设备以及所述第一处理器;所述第一处理器连接至所述短信中心或短信网关,设置为接收所述短信中心或短信网关下发的所述待验证的短信,计算与所述待验证的短信对应的校验串,以及根据计算出的所述校验串生成验真报告,并将所述验真报告下发给所述接收设备,其中,所述验真报告用于所述接收设备对所述待验证的短信的真伪进行验证。在本实施例中,第一处理器在执行具体的操作时与前述的第一接收模块62,第一计算模块64和处理模块66一致,在此,不再赘述。According to still another embodiment of the present invention, a short message verification system is provided, including a short message center or a short message gateway, and a first processor, wherein the short message center or the short message gateway is used to send a short message to be verified. a receiving device and the first processor; the first processor is connected to the short message center or the short message gateway, and is configured to receive the short message to be verified delivered by the short message center or the short message gateway, and calculate Determining a verification string corresponding to the verified short message, and generating a verification report according to the calculated verification string, and transmitting the verification report to the receiving device, where the verification report is used for The receiving device verifies the authenticity of the short message to be verified. In this embodiment, the first processor is consistent with the foregoing first receiving module 62, the first computing module 64, and the processing module 66 when performing a specific operation, and details are not described herein again.
根据本发明的又一个实施例,还提供了一种终端,包括第二处理器,所述第二处理器设置为接收待验证的短信的验真报告,其中,所述验真报告中携带有计算的与所述待验证的短信对应的校验串;对比所述验真报告中携带的校验串与本地存储的对所述待验证的短信进行计算得到的校验串;根据对比结果确定所述待验证的短信的真伪。在本实施例中,第二处理器在执行具体的操作时与前述的第二接收模块72,对比模块74和确定模块76一致,在此,不再赘述。According to still another embodiment of the present invention, a terminal is provided, including a second processor, where the second processor is configured to receive a verification report of a short message to be verified, where the verification report carries Calculating a check string corresponding to the short message to be verified; comparing the check string carried in the verification report with a locally stored check string obtained by calculating the short message to be verified; determining according to the comparison result The authenticity of the short message to be verified. In this embodiment, the second processor is consistent with the foregoing second receiving module 72, the comparing module 74 and the determining module 76 when performing a specific operation, and details are not described herein again.
通过本发明实施例中的方案,可以解决相关技术中存在的如下问题:Through the solution in the embodiment of the present invention, the following problems existing in the related art can be solved:
缺少了一套全自动的,并由运营商主动发起的,对短信发送者身份、发送时间和内容完整性等信息进行校验的一整套机制;Lack of a fully automated set of mechanisms for verifying the identity of the sender of the message, the time of transmission, and the integrity of the content, initiated by the operator;
缺少功能机(老人机、儿童手机)等的标记和识别方法;Lack of marking and identification methods for functional machines (senior machines, children's mobile phones);
目前基于大数据或其它方案的识别伪基站短信的方法,在整个交互流程中可能多次涉及用户任何短信信息传输,增加传输带宽,而且危及用户 的身份信息和财产安全;At present, the method for identifying a pseudo base station short message based on big data or other schemes may involve any short message transmission of the user multiple times in the entire interaction process, increasing the transmission bandwidth, and endangering the identity information and property security of the user;
目前缺少一套可靠地、伪基站短信识别率达100%的方法。At present, there is a lack of a reliable and pseudo base station short message recognition rate of 100%.
本发明实施例中提供了一整套接入运营商内部的针对智能终端和功能机的短信安全校验机制,可以取得如下有益效果:In the embodiment of the present invention, a complete set of short message security verification mechanism for the intelligent terminal and the function machine is provided in the access operator, and the following beneficial effects can be obtained:
效果1:为运营商引入了一种新的可靠的、商用价值极高的短信验真机制,不会变更现有网元,增加了运营商在该领域的发言权;Effect 1: Introduce a new reliable and commercially valuable SMS verification mechanism for operators, which will not change existing network elements and increase the operator's right to speak in this field;
效果2:该专利适应的验真场景从普通短信验真扩展到了行业短信SP认证,而行业短信SP是存在短信验真需求的,并愿意付费,所以本发明商用价值巨大;Effect 2: The patent-accepted verification scene extends from the ordinary SMS verification to the industry SMS SP certification, while the industry SMS SP is required for SMS verification and is willing to pay, so the commercial value of the invention is huge;
效果3:采用本发明所述系统后,终端能够在短信或APP界面显示“已验证”标志,点击后还可看到具体的短信验证报告;Effect 3: After adopting the system of the present invention, the terminal can display the “verified” flag on the short message or APP interface, and can also see the specific short message verification report after clicking;
效果4:同时增加了一种功能机的短信验真机制,填补了这一领域的空白;Effect 4: At the same time, a text message verification mechanism of a function machine is added to fill the gap in this field;
效果5:没有连接数据网络的智能终端也可以通过影子或二进制短信方式实现短信验真,应用场景更广泛;Effect 5: Smart terminals that are not connected to the data network can also implement SMS verification by shadow or binary SMS, and the application scenario is wider;
效果6:整个验真过程不涉及用户短信信息传输,减少网络带宽和降低用户信息泄漏风险,而且不会违反如欧盟的GDPR类法案,具有加入规范或标准的潜力;Effect 6: The whole verification process does not involve the transmission of user SMS information, reducing network bandwidth and reducing the risk of user information leakage, and will not violate the GDP R-type legislation such as the EU, with the potential to join norms or standards;
效果7:本发明提高了短信校验成功率,能够准确地判断该短信是来自于可信渠道还是伪基站等非法渠道,伪基站短信识别率可达100%,短信发送者身份验证成功率可达100%。Effect 7: The invention improves the success rate of short message verification, and can accurately determine whether the short message is from an illegal channel such as a trusted channel or a pseudo base station, and the pseudo base station short message recognition rate can reach 100%, and the short message sender identity verification success rate can be Up to 100%.
综上所述,本发明能够有效地保护用户的信息和财产安全,降低电信领域短信诈骗成功率,对于识别和防范伪基站等违法犯罪行为有积极的作用,具有极大的商业价值和社会价值In summary, the present invention can effectively protect user information and property security, reduce the success rate of SMS fraud in the telecommunications field, and has a positive effect on identifying and preventing illegal criminal acts such as pseudo base stations, and has great commercial value and social value.
显然,本领域的技术人员应该明白,上述的本发明的各模块或各步骤 可以用通用的计算装置来实现,它们可以集中在单个的计算装置上,或者分布在多个计算装置所组成的网络上,可选地,它们可以用计算装置可执行的程序代码来实现,从而,可以将它们存储在存储装置中由计算装置来执行,并且在某些情况下,可以以不同于此处的顺序执行所示出或描述的步骤,或者将它们分别制作成各个集成电路模块,或者将它们中的多个模块或步骤制作成单个集成电路模块来实现。这样,本发明不限制于任何特定的硬件和软件结合。It will be apparent to those skilled in the art that the various modules or steps of the present invention described above can be implemented by a general-purpose computing device that can be centralized on a single computing device or distributed across a network of multiple computing devices. Alternatively, they may be implemented by program code executable by the computing device such that they may be stored in the storage device by the computing device and, in some cases, may be different from the order herein. The steps shown or described are performed, or they are separately fabricated into individual integrated circuit modules, or a plurality of modules or steps thereof are fabricated as a single integrated circuit module. Thus, the invention is not limited to any specific combination of hardware and software.
以上所述仅为本发明的优选实施例而已,并不用于限制本发明,对于本领域的技术人员来说,本发明可以有各种更改和变化。凡在本发明的原则之内,所作的任何修改、等同替换、改进等,均应包含在本发明的保护范围之内。The above description is only the preferred embodiment of the present invention, and is not intended to limit the present invention, and various modifications and changes can be made to the present invention. Any modifications, equivalent substitutions, improvements, etc. made within the scope of the present invention are intended to be included within the scope of the present invention.
工业实用性Industrial applicability
如上所述,本发明实施例提供的一种短信验证方法、装置、存储介质、短信验证系统及终端具有以下有益效果:无需接收设备向服务器侧发送短信内容,从而可以在验证短信真伪的同时保障了用户的信息和财产安全,有效解决了相关技术中存在的在实现短信验证时,需要耗费较高的费用以及较大的人力物力的问题。As described above, the method, the device, the storage medium, the short message verification system, and the terminal provided by the embodiment of the present invention have the following beneficial effects: the receiving device does not need to send the short message content to the server side, so that the authenticity of the short message can be verified. It protects the user's information and property security, and effectively solves the problem of high cost and large manpower and material resources in the related technology when implementing SMS verification.

Claims (21)

  1. 一种短信验证方法,包括:A method for verifying a short message, comprising:
    接收短信中心或短信网关下发的待验证的短信;Receiving a short message to be verified sent by the short message center or the short message gateway;
    计算与所述待验证的短信对应的校验串;Calculating a check string corresponding to the short message to be verified;
    根据计算出的所述校验串生成验真报告,并将所述验真报告下发给设置为接收所述待验证的短信的接收设备,其中,所述验真报告用于所述接收设备对所述待验证的短信的真伪进行验证。Generating a verification report according to the calculated verification string, and transmitting the verification report to a receiving device configured to receive the short message to be verified, wherein the verification report is used for the receiving device Verifying the authenticity of the short message to be verified.
  2. 根据权利要求1所述的方法,其中,计算与所述待验证的短信对应的校验串包括:The method according to claim 1, wherein calculating a check string corresponding to the short message to be verified comprises:
    在根据所述待验证的短信的发送设备信息确定所述发送设备具备短信验证权限的情况下,计算与所述待验证的短信对应的校验串。And determining, in the case that the sending device has the short message verification authority according to the sending device information of the short message to be verified, calculating a check string corresponding to the short message to be verified.
  3. 根据权利要求1所述的方法,其中,根据计算出的所述校验串生成验真报告包括:The method of claim 1, wherein generating the verification report based on the calculated verification string comprises:
    确定所述待验证的短信的相关信息,其中,所述相关信息包括以下至少之一:发送所述待验证的短信的发送设备信息、所述待验证的短信的发送时间信息、所述待验证的短信的内容以及所述接收设备的信息;And determining the related information of the short message to be verified, where the related information includes at least one of: sending device information of the short message to be verified, sending time information of the short message to be verified, and the to-be-verified The content of the short message and the information of the receiving device;
    将所述相关信息和所述校验串生成所述验真报告。The related information and the check string are generated to generate the verification report.
  4. 根据权利要求1所述的方法,其中,将所述验真报告下发给设置为接收所述待验证的短信的接收设备包括:The method of claim 1, wherein the sending the verification report to the receiving device configured to receive the short message to be verified comprises:
    确定所述接收设备的设备类型;Determining a device type of the receiving device;
    根据所述设备类型将所述验真报告下发给所述接收设备。And sending the verification report to the receiving device according to the device type.
  5. 根据权利要求4所述的方法,其中,包括以下至少之一:The method of claim 4, comprising at least one of the following:
    确定所述接收设备的设备类型包括:通过查询所述接收设备的注册信息确定所述接收设备的设备类型;Determining the device type of the receiving device includes: determining a device type of the receiving device by querying registration information of the receiving device;
    根据所述设备类型将所述验真报告下发给所述接收设备包括:And sending the verification report to the receiving device according to the device type includes:
    在确定所述设备类型为智能机时,确定所述智能机的网络连接状态;当为连接网络的在线状态时,通过数据网络或无线网络将所述验真报告发送给所述接收设备;当为未连接网络的离线状态时,通过短信发送的方式将所述验真报告发送给所述接收设备;Determining, by the data network or the wireless network, the verification report to the receiving device when determining that the device type is a smart phone; When the offline state of the network is not connected, the verification report is sent to the receiving device by means of sending a short message;
    在确定所述设备类型为功能机的情况下,通过短信发送的方式将所述验真报告发送给所述接收设备。In the case that the device type is determined to be a function machine, the verification report is sent to the receiving device by means of short message transmission.
  6. 根据权利要求5所述的方法,其中,确定所述智能机的网络连接状态包括:The method of claim 5, wherein determining the network connection status of the smartphone comprises:
    确定所述接收设备的标识信息;Determining identification information of the receiving device;
    通过利用所述标识信息查询数据库,确定所述智能机的网络连接状态,其中,所述数据库用于存储设备的标识信息和设备的网络连接状态的对应关系。The network connection status of the smart machine is determined by querying the database by using the identifier information, wherein the database is used to store a correspondence between the identification information of the device and the network connection status of the device.
  7. 一种短信验证方法,包括:A method for verifying a short message, comprising:
    接收待验证的短信的验真报告,其中,所述验真报告中携带有计算的与所述待验证的短信对应的校验串;Receiving a verification report of the short message to be verified, where the verification report carries a calculated verification string corresponding to the short message to be verified;
    对比所述验真报告中携带的校验串与本地存储的对所述待验证的短信进行计算得到的校验串;Comparing the check string carried in the verification report with the locally stored check string calculated by the short message to be verified;
    根据对比结果确定所述待验证的短信的真伪。Determining the authenticity of the short message to be verified according to the comparison result.
  8. 根据权利要求7所述的方法,其中,在对比所述验真报告中携带的校验串与本地预先对所述待验证的短信进行计算得到的校验串之前,所述方法还包括:The method according to claim 7, wherein the method further comprises: comparing the check string carried in the verification report with the check string calculated by the local pre-verified short message, the method further comprising:
    接收所述待验证的短信;Receiving the short message to be verified;
    计算与所述待验证的短信对应的校验串;Calculating a check string corresponding to the short message to be verified;
    将所述校验串以及所述待验证的短信的发送设备信息对应存储 到短信校验串库中。And correspondingly storing the check string and the sending device information of the short message to be verified into the short message check string library.
  9. 根据权利要求8所述的方法,其中,对比所述验真报告中携带的校验串与本地存储的对所述待验证的短信进行计算得到的校验串包括:The method according to claim 8, wherein comparing the check string carried in the verification report with the locally stored check string calculated for the short message to be verified includes:
    根据所述验真报告中携带的发送设备信息在所述短信校验串库中查找与所述发送设备信息对应的校验串;Searching, in the short message check string library, a check string corresponding to the sending device information according to the sending device information carried in the verification report;
    对比所述验真报告中携带的校验串与查找到的与所述发送设备信息对应的校验串。Comparing the check string carried in the verification report with the found check string corresponding to the sending device information.
  10. 根据权利要求7所述的方法,其中,在根据所述对比结果确定所述待验证的短信的真伪之后,所述方法还包括:The method according to claim 7, wherein after determining the authenticity of the short message to be verified according to the comparison result, the method further comprises:
    在确定所述待验证的短信为真时,在所述待验证的短信上添加已验证标识。When it is determined that the short message to be verified is true, the verified identifier is added to the short message to be verified.
  11. 根据权利要求10所述的方法,其中,在所述待验证的短信上添加已验证标识之后,所述方法还包括:The method of claim 10, wherein after the verified identifier is added to the short message to be verified, the method further includes:
    根据所述对比结果生成验证报告;Generating a verification report based on the comparison result;
    将所述已验证标识与所述验证报告进行链接。Linking the verified identification to the verification report.
  12. 一种短信验证装置,包括:A short message verification device includes:
    第一接收模块,设置为接收短信中心或短信网关下发的待验证的短信;The first receiving module is configured to receive the short message to be verified sent by the short message center or the short message gateway;
    第一计算模块,设置为计算与所述待验证的短信对应的校验串;a first calculating module, configured to calculate a check string corresponding to the short message to be verified;
    处理模块,设置为根据计算出的所述校验串生成验真报告,并将所述验真报告下发给设置为接收所述待验证的短信的接收设备,其中,所述验真报告用于所述接收设备对所述待验证的短信的真伪进行验证。a processing module, configured to generate a verification report according to the calculated verification string, and send the verification report to a receiving device configured to receive the short message to be verified, where the verification report is used And verifying, by the receiving device, the authenticity of the short message to be verified.
  13. 根据权利要求12所述的装置,其中,所述第一计算模块包括:The apparatus of claim 12, wherein the first computing module comprises:
    计算单元,设置为在根据所述待验证的短信的发送设备信息确定所述发送设备具备短信验证权限的情况下,计算与所述待验证的短信对应的校验串。The calculating unit is configured to calculate a check string corresponding to the short message to be verified if the sending device has the short message verifying authority according to the sending device information of the short message to be verified.
  14. 根据权利要求12所述的装置,其中,在根据计算出的所述校验串生成验真报告时,所述处理模块包括:The apparatus of claim 12, wherein when the verification report is generated based on the calculated verification string, the processing module comprises:
    第一确定单元,设置为确定所述待验证的短信的相关信息,其中,所述相关信息包括以下至少之一:发送所述待验证的短信的发送设备信息、所述待验证的短信的发送时间信息、所述待验证的短信的内容以及所述接收设备的信息;a first determining unit, configured to determine related information of the short message to be verified, where the related information includes at least one of: sending device information of the short message to be verified, and sending the short message to be verified Time information, content of the short message to be verified, and information of the receiving device;
    生成单元,设置为将所述相关信息和所述校验串生成所述验真报告。And generating a unit, configured to generate the verification report by using the related information and the verification string.
  15. 根据权利要求12所述的装置,其中,在将所述验真报告下发给设置为接收所述待验证的短信的接收设备时,所述处理模块包括:The apparatus according to claim 12, wherein, when the verification report is sent to a receiving device configured to receive the short message to be verified, the processing module includes:
    第二确定单元,设置为确定所述接收设备的设备类型;a second determining unit, configured to determine a device type of the receiving device;
    下发单元,设置为根据所述设备类型将所述验真报告下发给所述接收设备。And a sending unit, configured to send the verification report to the receiving device according to the device type.
  16. 一种短信验证装置,包括:A short message verification device includes:
    第二接收模块,设置为接收待验证的短信的验真报告,其中,所述验真报告中携带有计算的与所述待验证的短信对应的校验串;a second receiving module, configured to receive a verification report of the short message to be verified, where the verification report carries a calculated verification string corresponding to the short message to be verified;
    对比模块,设置为对比所述验真报告中携带的校验串与本地存储的对所述待验证的短信进行计算得到的校验串;a comparison module, configured to compare a verification string carried in the verification report with a locally stored verification string obtained by calculating the short message to be verified;
    确定模块,设置为根据对比结果确定所述待验证的短信的真伪。The determining module is configured to determine the authenticity of the short message to be verified according to the comparison result.
  17. 根据权利要求16所述的装置,其中,所述装置还包括:The apparatus of claim 16 wherein said apparatus further comprises:
    第三接收模块,设置为在对比所述验真报告中携带的校验串与本地预先对所述待验证的短信进行计算得到的校验串之前,接收所述待 验证的短信;The third receiving module is configured to receive the short message to be verified before comparing the check string carried in the verification report with the check string calculated by the local pre-verified short message;
    第二计算模块,设置为计算与所述待验证的短信对应的校验串;a second calculating module, configured to calculate a check string corresponding to the short message to be verified;
    存储模块,设置为将所述校验串以及所述待验证的短信的发送设备信息对应存储到短信校验串库中。The storage module is configured to store the check string and the sending device information of the short message to be verified in a short message check string library.
  18. 根据权利要求17所述的装置,其中,所述对比模块包括:The apparatus of claim 17 wherein said comparing module comprises:
    查找单元,设置为根据所述验真报告中携带的发送设备信息在所述短信校验串库中查找与所述发送设备信息对应的校验串;a search unit, configured to search, in the short message check string library, a check string corresponding to the sending device information according to the sending device information carried in the verification report;
    对比单元,设置为对比所述验真报告中携带的校验串与查找到的与所述发送设备信息对应的校验串。The comparing unit is configured to compare the check string carried in the verification report with the found check string corresponding to the sending device information.
  19. 一种存储介质,所述存储介质包括存储的程序,其中,所述程序运行时执行权利要求1至6中任一项所述的方法,或者,执行权利要求7至11中任一项所述的方法。A storage medium, the storage medium comprising a stored program, wherein the program is executed to perform the method of any one of claims 1 to 6, or the execution of any one of claims 7 to Methods.
  20. 一种短信验证系统,包括短信中心或短信网关,还包括第一处理器,其中,A short message verification system, including a short message center or a short message gateway, and a first processor, wherein
    所述短信中心或短信网关用于将待验证的短信下发至接收设备以及所述第一处理器;The short message center or the short message gateway is configured to send the short message to be verified to the receiving device and the first processor;
    所述第一处理器连接至所述短信中心或短信网关,设置为接收所述短信中心或短信网关下发的所述待验证的短信,计算与所述待验证的短信对应的校验串,以及根据计算出的所述校验串生成验真报告,并将所述验真报告下发给所述接收设备,其中,所述验真报告用于所述接收设备对所述待验证的短信的真伪进行验证。The first processor is connected to the short message center or the short message gateway, and is configured to receive the short message to be verified sent by the short message center or the short message gateway, and calculate a check string corresponding to the short message to be verified. And generating a verification report according to the calculated verification string, and sending the verification report to the receiving device, where the verification report is used by the receiving device to send the short message to be verified. The authenticity is verified.
  21. 一种终端,包括第二处理器,所述第二处理器设置为接收待验证的短信的验真报告,其中,所述验真报告中携带有计算的与所述待验证的短信对应的校验串;对比所述验真报告中携带的校验串与本地存储的对所述待验证的短信进行计算得到的校验串;根据对比结果确定所述待验证的短信的真伪。A terminal includes a second processor, the second processor is configured to receive a verification report of the short message to be verified, where the verification report carries a calculated school corresponding to the short message to be verified The check string is carried out; the check string carried in the verification report is compared with the locally stored check string obtained by calculating the short message to be verified; and the authenticity of the short message to be verified is determined according to the comparison result.
PCT/CN2018/117129 2017-12-06 2018-11-23 Short message verification method, apparatus, storage medium, short message verification system, and terminal WO2019109817A1 (en)

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
CN201711276214.1A CN109889469B (en) 2017-12-06 2017-12-06 Short message verification method, device, storage medium, short message verification system and terminal
CN201711276214.1 2017-12-06

Publications (1)

Publication Number Publication Date
WO2019109817A1 true WO2019109817A1 (en) 2019-06-13

Family

ID=66750786

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/CN2018/117129 WO2019109817A1 (en) 2017-12-06 2018-11-23 Short message verification method, apparatus, storage medium, short message verification system, and terminal

Country Status (2)

Country Link
CN (1) CN109889469B (en)
WO (1) WO2019109817A1 (en)

Cited By (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN110913397A (en) * 2019-12-17 2020-03-24 腾讯云计算(北京)有限责任公司 Short message verification method and device, storage medium and computer equipment
CN111859036A (en) * 2020-08-19 2020-10-30 深圳市富之富信息科技有限公司 Short message data detection method and device, computer equipment and storage medium
CN113316153A (en) * 2020-04-02 2021-08-27 阿里巴巴集团控股有限公司 Short message inspection method, device and system
CN115002779A (en) * 2022-07-29 2022-09-02 杭州宇链科技有限公司 Pseudo base station prevention and control method and system based on block chain and security chip

Families Citing this family (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN111163428B (en) * 2019-12-10 2021-08-10 深圳市云智融科技有限公司 Method and server for generating short message bill
CN114302403A (en) * 2021-12-29 2022-04-08 中国建设银行股份有限公司 Short message authenticity verifying method and device, electronic equipment and storage medium
CN115379403B (en) * 2022-08-17 2023-08-11 福建天晴在线互动科技有限公司 Optimization method and system for identifying mobile phone short message verification code

Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN105392124A (en) * 2015-10-12 2016-03-09 中国联合网络通信集团有限公司 Short message verification method, mobile terminal, server and system
US20170032360A9 (en) * 2002-09-09 2017-02-02 U.S. Encode Corporation Systems and methods for enrolling a token in an online authentication program
CN106911661A (en) * 2016-09-23 2017-06-30 阿里巴巴集团控股有限公司 A kind of short-message verification method, device, client, server and system

Family Cites Families (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US7634280B2 (en) * 2005-02-17 2009-12-15 International Business Machines Corporation Method and system for authenticating messages exchanged in a communications system
CN102202010A (en) * 2011-05-09 2011-09-28 韩平亮 Message transmission client and communication method with combination of short message and network
CN103327446A (en) * 2013-05-07 2013-09-25 苏州海客科技有限公司 Method for obtaining information through non-smart phone in group tourism
CN106470404B (en) * 2015-08-18 2019-10-01 中国电信股份有限公司 Realize that short message receives method, signature service platform and the system of personalized signature
CN106231572A (en) * 2016-07-29 2016-12-14 宇龙计算机通信科技(深圳)有限公司 Pseudo-base station refuse messages discrimination method and system

Patent Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20170032360A9 (en) * 2002-09-09 2017-02-02 U.S. Encode Corporation Systems and methods for enrolling a token in an online authentication program
CN105392124A (en) * 2015-10-12 2016-03-09 中国联合网络通信集团有限公司 Short message verification method, mobile terminal, server and system
CN106911661A (en) * 2016-09-23 2017-06-30 阿里巴巴集团控股有限公司 A kind of short-message verification method, device, client, server and system

Cited By (8)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN110913397A (en) * 2019-12-17 2020-03-24 腾讯云计算(北京)有限责任公司 Short message verification method and device, storage medium and computer equipment
CN110913397B (en) * 2019-12-17 2023-05-30 腾讯云计算(北京)有限责任公司 Short message verification method, device, storage medium and computer equipment
CN113316153A (en) * 2020-04-02 2021-08-27 阿里巴巴集团控股有限公司 Short message inspection method, device and system
CN113316153B (en) * 2020-04-02 2024-03-26 阿里巴巴集团控股有限公司 Short message inspection method, device and system
CN111859036A (en) * 2020-08-19 2020-10-30 深圳市富之富信息科技有限公司 Short message data detection method and device, computer equipment and storage medium
CN111859036B (en) * 2020-08-19 2024-02-13 深圳市富之富信息科技有限公司 Short message data detection method and device, computer equipment and storage medium
CN115002779A (en) * 2022-07-29 2022-09-02 杭州宇链科技有限公司 Pseudo base station prevention and control method and system based on block chain and security chip
CN115002779B (en) * 2022-07-29 2022-11-22 杭州宇链科技有限公司 Pseudo base station prevention and control method and system based on block chain and security chip

Also Published As

Publication number Publication date
CN109889469B (en) 2021-11-30
CN109889469A (en) 2019-06-14

Similar Documents

Publication Publication Date Title
WO2019109817A1 (en) Short message verification method, apparatus, storage medium, short message verification system, and terminal
TWI672648B (en) Business process method and device, data share system, and storage medium
JP6355742B2 (en) Signature verification method, apparatus, and system
US10623388B2 (en) Account association systems and methods
US10607016B2 (en) Decrypting files for data leakage protection in an enterprise network
US10681081B2 (en) Secure content and encryption methods and techniques
WO2015169158A1 (en) Information protection method and system
US9917817B1 (en) Selective encryption of outgoing data
US10243829B2 (en) Communication protocol testing method, and tested device and testing platform thereof
JP6880055B2 (en) Message anti-counterfeiting implementation method and device
CN107979615B (en) Message encryption sending and authentication method, device, client and firewall
US20210176234A1 (en) Cooperative communication validation
CN109714370B (en) HTTP (hyper text transport protocol) -based cloud security communication implementation method
CN103905194A (en) Identity traceability authentication method and system
CN105516054B (en) A kind of method and device of subscriber authentication
CN106453353A (en) Method for authenticating cloud by user terminal
CN109769010B (en) Method, device, equipment and storage medium for accessing CloudStack server based on SDK
US20180234412A1 (en) Online authentication method based on smart card, smart card and authentication server
WO2016037489A1 (en) Method, device and system for monitoring rcs spam messages
CN105634561B (en) A kind of information interacting method and device
CN110890979A (en) Automatic deploying method, device, equipment and medium for fortress machine
US20160044028A1 (en) Message authentication
CN111385258A (en) Data communication method, device, client, server and storage medium
CN111385750B (en) Communication system and communication method
WO2021027505A1 (en) Smart contract-based data processing method, and related device

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 18886033

Country of ref document: EP

Kind code of ref document: A1

NENP Non-entry into the national phase

Ref country code: DE

32PN Ep: public notification in the ep bulletin as address of the adressee cannot be established

Free format text: NOTING OF LOSS OF RIGHTS PURSUANT TO RULE 112(1) EPC (EPO FORM 1205 DATED 06.10.2020)

122 Ep: pct application non-entry in european phase

Ref document number: 18886033

Country of ref document: EP

Kind code of ref document: A1