WO2023030305A1 - 群组通话管理方法、装置、终端、电子设备及存储介质 - Google Patents

群组通话管理方法、装置、终端、电子设备及存储介质 Download PDF

Info

Publication number
WO2023030305A1
WO2023030305A1 PCT/CN2022/115805 CN2022115805W WO2023030305A1 WO 2023030305 A1 WO2023030305 A1 WO 2023030305A1 CN 2022115805 W CN2022115805 W CN 2022115805W WO 2023030305 A1 WO2023030305 A1 WO 2023030305A1
Authority
WO
WIPO (PCT)
Prior art keywords
terminal
group
security
request
validity period
Prior art date
Application number
PCT/CN2022/115805
Other languages
English (en)
French (fr)
Inventor
孟军
Original Assignee
中兴通讯股份有限公司
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by 中兴通讯股份有限公司 filed Critical 中兴通讯股份有限公司
Publication of WO2023030305A1 publication Critical patent/WO2023030305A1/zh

Links

Images

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L65/00—Network arrangements, protocols or services for supporting real-time applications in data packet communication
    • H04L65/1066—Session management
    • H04L65/1073—Registration or de-registration
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L65/00—Network arrangements, protocols or services for supporting real-time applications in data packet communication
    • H04L65/40—Support for services or applications
    • H04L65/403—Arrangements for multi-party communication, e.g. for conferences
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/40—Network security protocols
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
    • H04N7/00—Television systems
    • H04N7/14—Systems for two-way working
    • H04N7/15—Conference systems

Definitions

  • the present disclosure relates to the field of communication technologies, and in particular to a group call management method, a group call management device, a terminal, an electronic device, and a computer storage medium.
  • an embodiment of the present disclosure provides a group call management method, including: responding to a group joining request sent by a requesting terminal, obtaining terminal identity information carried in the group joining request; information and the terminal identity information to determine whether the requesting terminal is the target member terminal of the group corresponding to the request to join the group, and perform security on the requesting terminal according to the locally pre-stored security identification information and the terminal identity information. verification, wherein the security identification information includes a terminal security level and a terminal validity period; and, when it is determined that the requesting terminal is a target member terminal of the group and the requesting terminal passes the security verification, allowing the Requesting the terminal to join the group for talking.
  • an embodiment of the present disclosure provides a method for group call management, including: sending a request to join a group carrying terminal identity information to a group call management device, so that the group call management device can Member identification information, security identification information, and terminal identity information carried in the request to join the group determine whether the current terminal is allowed to join the group corresponding to the request to join the group for conversation; wherein the security identification information includes the terminal security level and terminal validity period.
  • an embodiment of the present disclosure provides a group call management device, including: an acquisition module configured to acquire terminal identity information carried therein in response to a request for joining a group sent by a requesting terminal; a verification module configured to Prestored member identification information and the terminal identity information determine whether the requesting terminal is a target member terminal of the group corresponding to the request to join the group, and according to the locally stored security identification information and the terminal identity information Requesting the terminal to perform security verification; wherein, the security identification information includes a terminal security level and a terminal validity period; and a processing module configured to determine that the requesting terminal is a target member terminal of the group and the requesting terminal passes the security In the case of verification, it is determined that the requesting terminal is allowed to join the group for conversation.
  • an embodiment of the present disclosure provides a terminal, including: a sending module configured to send a request to join a group carrying terminal identity information to a group call management device, so that the group call management device can use it according to the local pre-stored Member identification information, security identification information and the terminal identity information carried in the request to join the group determine whether the current terminal is allowed to join the group corresponding to the request to join the group for conversation; wherein the security identification information includes terminal security Level and terminal validity period.
  • an embodiment of the present disclosure provides a group call management system, including: the aforementioned group call management apparatus; and at least two aforementioned terminals.
  • an embodiment of the present disclosure provides an electronic device, including: one or more processors; and a storage device, on which one or more programs are stored, wherein, when the one or more programs are executed by the When the one or more processors are executed, the one or more processors implement the above-mentioned group call management method.
  • an embodiment of the present disclosure provides a computer storage medium, on which a computer program is stored, wherein, when the program is executed, the aforementioned group call management method is implemented.
  • FIG. 1 is a first schematic flow diagram of a group call management method provided by the present disclosure
  • FIG. 2 is a schematic flow diagram of creating a group provided by the present disclosure
  • FIG. 3 is a schematic flow diagram of determining a list of registered terminals provided by the present disclosure
  • FIG. 4 is a schematic flow diagram of generating and delivering terminal verification information provided by the present disclosure
  • FIG. 5 is a schematic flow diagram of security verification of a requesting terminal provided by the present disclosure.
  • FIG. 6 is a second schematic flow diagram of the group call management method provided by the present disclosure.
  • FIG. 7 is a first block diagram of a group call management device provided by the present disclosure.
  • FIG. 8 is a second block diagram of the group call management device provided by the present disclosure.
  • FIG. 9 is a schematic diagram of modules of a terminal provided by the present disclosure.
  • FIG. 10 is a schematic diagram of a group call management system provided by the present disclosure.
  • FIG. 11 is a schematic diagram of a video conferencing system provided by the present disclosure.
  • Fig. 12 is a block diagram of an electronic device provided by the present disclosure.
  • FIG. 13 is a schematic diagram of a computer storage medium provided by the present disclosure.
  • Embodiments described herein may be described with reference to plan views and/or cross-sectional views by way of idealized schematic illustrations of the present disclosure. Accordingly, the example illustrations may be modified according to manufacturing techniques and/or tolerances. Therefore, the embodiments are not limited to the ones shown in the drawings but include modifications of configurations formed based on manufacturing processes. Accordingly, the regions illustrated in the figures have schematic properties, and the shapes of the regions shown in the figures illustrate the specific shapes of the regions of the elements, but are not intended to be limiting.
  • the common methods used to solve the security problems of terminal access to video conferencing include conference password authentication, terminal number authentication, terminal IP (Internet Protocol, Internet Protocol) address authentication, etc., mainly by comparing the conference password provided by the terminal with the It can be realized by means of whether the preset meeting password is consistent, whether the terminal number and terminal IP address are legal or not.
  • the conference password, terminal number, and terminal IP address used by the terminal to access the conference are vulnerable to leakage, tampering, and counterfeiting, it is very easy for information thieves to steal information after accessing the video conference through an illegal terminal.
  • Video conference content because the conference password, terminal number, and terminal IP address used by the terminal to access the conference are vulnerable to leakage, tampering, and counterfeiting, it is very easy for information thieves to steal information after accessing the video conference through an illegal terminal.
  • Video conference content because the conference password, terminal number, and terminal IP address used by the terminal to access the conference are vulnerable to leakage, tampering, and counterfeiting, it is very easy for information thieves to steal information
  • the present disclosure proposes a group call management method, in which the terminal needs to submit terminal identity information when requesting to join the group for a call, and the group call management device needs to pre-store member identification information and terminal security level locally Security identification information and terminal validity period. Verify whether the terminal is the target member terminal of the group according to the member identification information and terminal identity information, and verify the security of the terminal according to the security identification information and terminal identity information. When both are verified, the terminal can be considered to be eligible for group call access security requirements.
  • an embodiment of the present disclosure provides a group call management method, which may include the following steps S11 to S13.
  • step S11 in response to the group joining request sent by the requesting terminal, the terminal identity information carried therein is acquired.
  • step S12 determine whether the requesting terminal is the target member terminal of the group corresponding to the group request according to the locally pre-stored member identification information and terminal identity information, and conduct the requesting terminal according to the locally pre-stored security identification information and terminal identity information Security verification; wherein, the security identification information includes terminal security level and terminal validity period.
  • step S13 if it is determined that the requesting terminal is a target member terminal of the group and the requesting terminal passes the security verification, the requesting terminal is allowed to join the group for conversation.
  • the requesting terminal is a terminal requesting to join the group.
  • the target member terminal is a pre-determined terminal that is allowed to join the group (the group is the group that the requesting terminal requests to join) for conversation.
  • the terminal identity information may include any information that can be used to uniquely identify the terminal identity.
  • the member identification information is information used to record the identity of the target member terminal.
  • the security identification information may include terminal security level and terminal validity period. The terminal security level and the terminal validity period may be pre-generated for all terminals by the group call management device (or terminal).
  • the security level of the terminal may include, for example, common level, secret level, confidential level, top secret level, etc., which increase sequentially.
  • the terminal validity period can be an expiration date or a period of time starting from a certain moment.
  • the request to join a group may be a call response signaling returned by the requesting terminal in response to the group call call of the group call management device, or may be sent by the requesting terminal to the group call management device actively.
  • the terminal identity information is not obtained from the group joining request sent by the requesting terminal, it can be directly determined that the terminal is neither a target member terminal of the group nor has passed the security verification.
  • the requesting terminal can be allowed to join the group for conversation. It can effectively verify the security of the terminals that request to join the group to make a call, so as to ensure the security of the group call, and compared with only verifying the password, number, IP address and other security verification methods provided by the terminal, the group
  • the group call management method can more accurately verify the security of the terminal, and further improve the security of the group call.
  • the terminal that can join the group to make a call is not selected when the group is created, but after the group is created, it is selected again or directly when the terminal requests to join the group to make a call.
  • the terminal is authenticated. Or, even if a terminal that can join the group for a call is selected when the group is created, the selected terminal will not be verified, which is equivalent to verifying the terminal when the terminal requests to join the group for a call. This will reduce the efficiency of the terminal joining the group, and there may be a situation where the terminal has certain security but the group call requires higher security.
  • the embodiment of the present disclosure proposes to select a terminal that can join the group for conversation when creating the group, and compare the security level of the selected terminal with the security level of the group.
  • the security identification information includes the corresponding relationship between the terminal serial number and the terminal security level and the terminal validity period.
  • the method may further include the following steps S21 to S23.
  • step S21 the group security level and candidate member terminals of the group are determined.
  • step S22 the terminal security level and the terminal validity period of the candidate member terminal are determined according to the terminal serial number and the corresponding relationship of the candidate member terminal.
  • step S23 a group is created when the terminal security level of each candidate member terminal is not lower than the group security level, and the terminal validity period of each candidate member terminal has not expired.
  • the group security level may include common level, secret level, confidential level, top secret level, etc. which increase sequentially.
  • Terminal security levels may include common level, secret level, confidential level, top secret level, etc., which increase in sequence.
  • the candidate member terminals are the selected terminals that can join the group for conversation. Each terminal has a serial number that can uniquely identify the terminal.
  • the serial number is a string of numbers, letters and symbols or any combination of them. For example, it can be "123456789012".
  • the user interface for product information is shown.
  • each candidate member terminal When creating a group, you can select the group security level and the candidate member terminal of the group to be created. Since the terminal security level and terminal validity period of all terminals are pre-stored locally with the terminal serial number as an index, you can Query the terminal security level and terminal validity period of the candidate member terminal through the serial number of the terminal. Determine whether the security of the terminal meets the security requirements of the group by comparing the security level of the group and the security level of the terminal, and determine whether the security of the terminal is valid by judging whether the validity period of the terminal has expired. The terminal security level of each candidate member terminal is not low Create a group under the condition that the group security level and the validity period of each candidate member terminal have not expired. At this time, each candidate member terminal becomes the target member terminal of the group, which can ensure the security of the target member terminal of the group Both meet the security requirements of the group, ensure the smooth progress of the group call, and help to improve the efficiency of the terminal joining the group.
  • the method may further include the following steps: when the terminal security level of each candidate member terminal is not lower than the group security level, and the terminal validity period of each candidate member terminal has not expired , generating and storing member identification information according to the terminal serial numbers of each candidate member terminal.
  • the terminal serial number can be used as the terminal identity information. Since the member identification information has been generated and saved according to the terminal serial number of each candidate member terminal, when a request to join a group is received, it can be checked in the member identification information whether the requesting terminal is a target member.
  • the terminal correspondingly, said determining whether the requesting terminal is the target member terminal of the group corresponding to the request to join the group according to the locally pre-stored member identification information and terminal identity information (that is, as described in step S12) may include the following steps: If the identification information includes the terminal serial number carried in the terminal identity information, it is determined that the requesting terminal is a target member terminal of the group.
  • the terminal may request registration from the group call management device, and each time the group call management device creates a group, it may select a candidate member terminal from registered terminals.
  • the terminal requests registration from the group call management device, the terminal can also be verified according to the corresponding relationship between the locally stored security identification information, that is, the terminal serial number, the terminal security level and the terminal validity period, instead of just directly verifying the terminal Identity legitimacy in order to further improve the accuracy of terminal security verification and the security of group calls.
  • the method may further include the following steps S31 to S34.
  • step S31 in response to the registration request sent by the terminal to be registered, the terminal serial number and terminal verification information carried therein are acquired.
  • step S32 the terminal security level and terminal validity period of the terminal to be registered are determined according to the terminal serial number carried in the registration request and the corresponding relationship.
  • step S33 a predetermined algorithm is used to determine registration verification information according to the terminal serial number carried in the registration request, the terminal security level and the terminal validity period of the terminal to be registered.
  • step S34 if the terminal verification information carried in the registration request is consistent with the registration verification information and the terminal validity period of the terminal to be registered has not expired, it is determined that the registration of the terminal to be registered is successful, and the terminal serial number carried in the registration request is added to the to the list of registered endpoints.
  • the determining the candidate member terminals of the group may include the following steps: determining the candidate member terminals of the group from the registered terminal list.
  • the terminal authentication information is a string, which is generated and distributed by the group call management device in advance for all terminals, and is also obtained by calculating the terminal serial number, terminal security level and terminal validity period by using a predetermined algorithm.
  • the terminal sends the terminal serial number and terminal verification information together when sending the registration request, and the group call management device queries the correspondence between the locally stored terminal serial number, the terminal security level, and the terminal validity period according to the terminal serial number carried in the registration request relationship, obtain the terminal security level and terminal validity period, and then use the same predetermined algorithm to calculate the terminal serial number, terminal security level and terminal validity period obtained from the query to obtain registration verification information, compare the registration verification information with the terminal verification information submitted by the terminal, and judge the terminal Whether the validity period has expired, if the two are consistent and the terminal validity period has not expired, it means that the terminal verification information submitted by the terminal is true and valid, it is indeed issued by the group call management device, and has not been tampered with or counterfeited. At this time, it can be confirmed that the terminal is registered If successful, the terminal serial number carried in the registration request is added to the registered terminal list, and all the terminals recorded in the registered terminal list are successfully registered terminals.
  • the predetermined algorithm is, for example, it may be an MD algorithm, a HAVAL algorithm, a SHA (Secure Hash Algorithm, secure hash algorithm) algorithm, and the like.
  • the terminal serial number as "123456789012”
  • the terminal security level as confidential
  • the terminal validity period as 20261028
  • the predetermined algorithm as SHA-256 as an example
  • the terminal verification information "db94a8c1d22d347508c7e037757500d3330d81aedd3796809f76d6592f026272" can be obtained after calculation.
  • the terminal can use methods such as H.323, SIP (Session Initiation Protocol, session initiation protocol), HTTP (Hyper Text Transfer Protocol, hypertext transfer protocol) to request registration to the group call management device.
  • H.323 method the terminal serial number and terminal authentication information can be filled in the expandable field in plain text or encoded in base64, for example, in the user-information of the setup, and the content can be: "ID.123456789012.
  • the filled content can be: "User-Agent:ID.123456789012.SECSTR.db94a8c1d22d347508c7e037757500d3330d81aedd3796809f76d6592f026272".
  • terminal verification information is generated for each terminal according to the information of each terminal and issued.
  • the predetermined algorithm is usually a relatively complex encryption algorithm, so the terminal verification information of each terminal is unique.
  • Subsequent terminals can request registration from the group management device according to the terminal verification information, request to join the group for conversation, and so on.
  • the method further The following steps may be included. S41 to S43.
  • step S41 the terminal serial number of the terminal to be registered is obtained, and the terminal security level and the validity period of the terminal to be registered are determined.
  • step S42 a predetermined algorithm is used to determine the terminal verification information of the terminal to be registered according to the terminal serial number, terminal security level and terminal validity period of the terminal to be registered.
  • step S43 the terminal verification information of the terminal to be registered is sent to the corresponding terminal to be registered, so that the terminal to be registered can request registration according to the issued terminal verification information.
  • all terminals in the group call management system can be regarded as terminals to be registered, and the terminal serial number of the terminal to be registered is obtained from the outer surface of the product package of the terminal or the user interface of product information, and according to the terminal's The actual situation generates terminal security level and terminal validity period.
  • the terminal serial number, terminal security level, and terminal validity period are calculated using the same predetermined algorithm (that is, described in step S33) as when calculating the registration verification information above, and the terminal verification information of the terminal to be registered is obtained and sent to the corresponding waiting Register the terminal.
  • the terminal security level and validity period of the terminal can be updated according to the actual situation of the terminal.
  • the terminal verification information of the terminal needs to be recalculated and issued.
  • the group call management device After the terminal security level and terminal validity period are generated for the terminal to be registered, the group call management device needs to save the terminal security level and terminal validity period of the terminal to be registered, so that when the terminal to be registered requests registration or requests to join a group for subsequent calls, it can be based on The terminal security level and the terminal validity period verify the security of the terminal. Specifically, the terminal security level and the terminal validity period of each terminal may be recorded using the terminal serial number of the terminal as an index.
  • the method may further include the following steps: The terminal serial number, terminal security level and terminal validity period of each terminal to be registered generate and save the corresponding relationship between the terminal serial number, terminal security level and terminal validity period.
  • the terminal verification information of each terminal is unique, the terminal verification information can also be used as terminal identity information to uniquely mark the identity of the terminal.
  • a terminal requests to join a group for a call, it sends the terminal serial number and terminal verification information together. information to perform security verification on the terminal.
  • the terminal identity information includes the terminal serial number and terminal verification information
  • the security identification information includes the corresponding relationship between the terminal serial number, the terminal security level, and the terminal validity period, as shown in FIG. 5
  • the The aforementioned security verification of the requesting terminal according to the locally pre-stored security identification information and terminal identity information may include the following steps S121 to S123.
  • step S121 the terminal security level and terminal validity period of the requesting terminal are determined according to the terminal serial number carried in the terminal identity information and the corresponding relationship.
  • step S122 a predetermined algorithm is used to determine the joining verification information according to the terminal serial number carried in the terminal identity information, the terminal security level of the requesting terminal, and the valid period of the terminal.
  • step S123 if the joining verification information is consistent with the terminal verification information and the terminal validity period of the requesting terminal has not expired, it is determined that the requesting terminal has passed the security verification.
  • the predetermined algorithm utilized in step S122 is consistent with the predetermined algorithm utilized in steps S33 and S42, and can be MD algorithm, HAVAL algorithm, SHA (Secure Hash Algorithm, secure hash algorithm) algorithm and the like.
  • the terminal security level and terminal validity period of the requesting terminal can be queried.
  • the joining verification information calculated according to the terminal serial number, terminal security level, and terminal validity period of the requesting terminal is consistent with the terminal verification information sent by the requesting terminal, and the terminal validity period has not expired, it can be proved that the terminal verification information submitted by the terminal is true and valid.
  • the information delivered by the group call management device has not been tampered with or faked, and at this time it can be determined that the requesting terminal has passed the security verification.
  • an embodiment of the present disclosure provides a group call management method, which may include the following step S51.
  • step S51 send a group call management device a request to join a group carrying terminal identity information, for the group call management device to use the locally pre-stored member identification information, security identification information and the terminal information carried in the group call management device
  • the identity information determines whether the current terminal is allowed to join the group corresponding to the group request to make a call; wherein, the security identification information includes the terminal security level and the terminal validity period.
  • the terminal When the terminal requests the group call management device to join a group call, it can send the terminal identity information together, so that the group call management device can determine whether the current terminal is a group according to the member identification information and terminal identity information stored locally. The target member terminal of the group and the security verification of the current terminal according to the security identification information and terminal identity information stored locally. When it is determined that the current terminal is the target member terminal of the group and the current terminal passes the security verification, the current terminal will be called by the group The management device allows to join the group for calling.
  • the terminal submits terminal identity information when requesting the group call management device to join a group call
  • the group call management device uses the pre-stored member identification information It is determined whether the current terminal is allowed to join the group for conversation with the security identification information and the terminal identity information. It can effectively verify the security of the terminals that request to join the group to make a call, so as to ensure the security of the group call, and compared with only verifying the password, number, IP address and other security verification methods provided by the terminal, the group
  • the group call management method can more accurately verify the security of the terminal, and further improve the security of the group call.
  • the present disclosure also provides a group call management device, which may include:
  • the obtaining module 101 is configured to obtain terminal identity information carried in the group joining request sent by the requesting terminal.
  • the verification module 102 is configured to determine whether the requesting terminal is a target member terminal of the group corresponding to the request to join the group according to the locally pre-stored member identification information and terminal identity information, and verify the requesting terminal according to the locally pre-stored security identification information and terminal identity information. Perform security verification; wherein, the security identification information includes terminal security level and terminal validity period.
  • the processing module 103 is configured to determine that the requesting terminal is allowed to join the group for calling when it is determined that the requesting terminal is a target member terminal of the group and the requesting terminal passes the security verification.
  • the security identification information includes the corresponding relationship between the terminal serial number, terminal security level and terminal validity period
  • the processing module 103 is further configured to: determine the group security level of the group and candidate member terminals; In addition, a group is created when the terminal security level of each candidate member terminal is not lower than the group security level, and the terminal validity period of each candidate member terminal has not expired.
  • the verification module 102 is further configured to: determine the terminal security level and terminal validity period of the candidate member terminals according to the terminal serial numbers of the candidate member terminals and the corresponding relationship; and determine whether the terminal security levels of each candidate member terminal are not lower than the group security level; level, and whether the terminal validity period of each candidate member terminal has not expired.
  • the processing module 103 is further configured to: when the terminal security level of each candidate member terminal is not lower than the group security level, and the terminal validity period of each candidate member terminal has not expired, according to each The terminal serial number of the candidate member terminal generates and saves member identification information.
  • the terminal identity information includes a terminal serial number
  • the verification module 102 is further configured to: determine that the requesting terminal is a group if the member identification information includes the terminal serial number carried in the terminal identity information Target member endpoints for the group.
  • the acquiring module 101 is further configured to: acquire the terminal serial number and terminal verification information carried in the registration request sent by the terminal to be registered.
  • the verification module 102 is further configured to: determine the terminal security level and the terminal validity period of the terminal to be registered according to the terminal serial number carried in the registration request and the corresponding relationship; Determining registration verification information and terminal validity period; and determining whether the terminal verification information carried in the registration request is consistent with the registration verification information and whether the terminal validity period of the terminal to be registered has not expired.
  • the processing module 103 is further configured to: if the terminal verification information carried in the registration request is consistent with the registration verification information and the terminal validity period of the terminal to be registered has not expired, determine that the registration of the terminal to be registered is successful, and send the information carried in the registration request
  • the terminal serial number is added to the registered terminal list; the candidate member terminal of the group is determined from the registered terminal list.
  • the acquiring module 101 is further configured to: acquire the terminal serial number of the terminal to be registered.
  • the processing module 103 is further configured to: determine the terminal security level and the terminal validity period of the terminal to be registered; determine the terminal verification information of the terminal to be registered according to the terminal serial number, terminal security level and terminal validity period of the terminal to be registered by using a predetermined algorithm.
  • the device for group call management may further include a sending module 104, the sending module 104 is configured to send the terminal verification information of the terminal to be registered to the corresponding terminal to be registered, For the terminal to be registered to request registration according to the issued terminal verification information.
  • the sending module 104 is configured to send the terminal verification information of the terminal to be registered to the corresponding terminal to be registered, For the terminal to be registered to request registration according to the issued terminal verification information.
  • the processing module 103 is further configured to: generate and save the corresponding relationship between the terminal serial number, terminal security level and terminal validity period according to the terminal serial number, terminal security level and terminal validity period of each terminal to be registered.
  • the terminal identity information includes terminal serial number and terminal verification information
  • the security identification information includes the corresponding relationship between the terminal serial number, terminal security level and terminal validity period
  • the verification module 102 is configured to Determining the terminal security level and terminal validity period of the requesting terminal according to the terminal serial number carried in the terminal identity information and the corresponding relationship; using a predetermined algorithm to determine the terminal security level and terminal validity period of the requesting terminal according to the terminal serial number carried in the terminal identity information Determining the joining verification information; and determining that the requesting terminal passes the security verification if the joining verification information is consistent with the terminal verification information and the terminal validity period of the requesting terminal has not expired.
  • the present disclosure further provides a terminal, and the terminal may include a sending module 201 .
  • the sending module 201 is configured to send a request to join a group to the group call management device, so that the group call management device determines whether to allow the current
  • the terminal joins the group corresponding to the group joining request to make a call; wherein, the security identification information includes the terminal security level and the terminal validity period.
  • the present disclosure further provides a group call management system, including: the aforementioned group call management device; and at least two aforementioned terminals.
  • the existing video conferencing system is mainly carried out by a conference management system, MCU (Multipoint Control Unit, multipoint processing unit) and a conference terminal.
  • the conference terminal includes a video terminal, a voice terminal and a data terminal.
  • the MCU realizes the audio and video interaction and data interaction between each terminal.
  • a conference management system As shown in Figure 11, when the group call management method provided by the present disclosure is applied to the field of video conferencing, the group call management system provided by the present disclosure can be a video conference system, and the group call management device can be a A device, the terminal may be a conference terminal, and the video conference system may also include an MCU.
  • an embodiment of the present disclosure also provides an electronic device, including: one or more processors 301; and a storage device 302, on which one or more programs are stored; wherein, when the one When the one or more programs are executed by the one or more processors 301, the one or more processors 301 implement the group call management method provided by the foregoing embodiments.
  • an embodiment of the present disclosure also provides a computer storage medium on which a computer program is stored, wherein, when the program is executed, the group call management method provided by the aforementioned embodiments is implemented. .
  • the division between functional modules/units mentioned in the above description does not necessarily correspond to the division of physical components; for example, one physical component may have multiple functions, or one function or step may be composed of several physical components. Components cooperate to execute.
  • Some or all of the physical components may be implemented as software executed by a processor, such as a central processing unit, digital signal processor, or microprocessor, or as hardware, or as an integrated circuit, such as an application-specific integrated circuit .
  • Such software may be distributed on computer readable media, which may include computer storage media (or non-transitory media) and communication media (or transitory media).
  • computer storage media includes both volatile and nonvolatile media implemented in any method or technology for storage of information, such as computer readable instructions, data structures, program modules, or other data. permanent, removable and non-removable media.
  • Computer storage media includes, but is not limited to, RAM, ROM, EEPROM, flash memory or other memory technology, CD-ROM, digital versatile disk (DVD) or other optical disk storage, magnetic cartridges, tape, magnetic disk storage or other magnetic storage devices, or can Any other medium used to store desired information and which can be accessed by a computer.
  • communication media typically embodies computer readable instructions, data structures, program modules, or other data in a modulated data signal such as a carrier wave or other transport mechanism, and may include any information delivery media .

Landscapes

  • Engineering & Computer Science (AREA)
  • Signal Processing (AREA)
  • Multimedia (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Computer Security & Cryptography (AREA)
  • Business, Economics & Management (AREA)
  • General Business, Economics & Management (AREA)
  • Telephonic Communication Services (AREA)

Abstract

本公开提供一种群组通话管理方法，包括:响应于请求终端发送的加入群组请求，获取加入群组请求中携带的终端身份信息；根据本地预存的成员识别信息和所述终端身份信息确定所述请求终端是否为所述加入群组请求对应的群组的目标成员终端，以及根据本地预存的安全识别信息和所述终端身份信息对所述请求终端进行安全验证；其中，所述安全识别信息包括终端安全级别和终端有效期；在确定出所述请求终端为所述群组的目标成员终端且所述请求终端通过安全验证的情况下，允许所述请求终端加入所述群组进行通话。本公开还提供一种群组通话管理装置、终端、电子设备及计算机存储介质。

Description

群组通话管理方法、装置、终端、电子设备及存储介质 技术领域
本公开涉及通信技术领域，具体涉及一种群组通话管理方法、一种群组通话管理装置、一种终端、一种电子设备及一种计算机存储介质。
背景技术
在信息高速发展的今天，视频会议在政府行政会议、应急指挥、商业洽谈等各行各业都有了大规模的应用。跨行业、跨区域的互联互通使得视频会议不再局限于专线网络，越来越多的走向基于IP(Internet Protocol，互联网协议)通讯的互联网。随之而来的是日益突出的视频会议信息安全问题，因此，视频会议系统对于安全的需求也逐步提升。
发明内容
第一方面，本公开实施例提供一种群组通话管理方法，包括：响应于请求终端发送的加入群组请求，获取所述加入群组请求中携带的终端身份信息；根据本地预存的成员识别信息和所述终端身份信息确定所述请求终端是否为所述加入群组请求对应的群组的目标成员终端，以及根据本地预存的安全识别信息和所述终端身份信息对所述请求终端进行安全验证，其中，所述安全识别信息包括终端安全级别和终端有效期；以及，在确定出所述请求终端为所述群组的目标成员终端且所述请求终端通过安全验证的情况下，允许所述请求终端加入所述群组进行通话。
第二方面，本公开实施例提供一种群组通话管理方法，包括：向群组通话管理装置发送携带有终端身份信息的加入群组请求，以供所述群组通话管理装置根据本地预存的成员识别信息、安全识别信息和所述加入群组请求中携带的终端身份信息确定是否允许当前终端加入所述加入群组请求对应的群组进行通话；其中，所述安全识别信息包括终端安全级别和终端有效期。
第三方面，本公开实施例提供一种群组通话管理装置，包括：获取模块，配置为响应于请求终端发送的加入群组请求，获取其中携带的终端身份信息；验证模块，配置为根据本地预存的成员识别信息和所述终端身份信息确定所述请求终端是否为所述加入群组请求对应的群组的目标成员终端，以及根据本地预存的安全识别信息和所述终端身份信息对所述请求终端进行安全验证；其中，所述安全识别信息包括终端安全级别和终端有效期；以及处理模块，配置为在确定出所述请求终端为所述群组的目标成员终端且所述请求终端通过安全验证的情况下，确定允许所述请求终端加入所述群组进行通话。
第四方面，本公开实施例提供一种终端，包括：发送模块，配置为向群组通话管理装置发送携带有终端身份信息的加入群组请求，以供所述群组通话管理装置根据本地预存的成员识别信息、安全识别信息和所述加入群组请求中携带的终端身份信息确定是否允许当前终端加入所述加入群组请求对应的群组进行通话；其中，所述安全识别信息包括终端安全级别和终端有效期。
第五方面，本公开实施例提供一种群组通话管理系统，包括：如前所述的群组通话管理装置；以及至少两个如前所述的终端。
第六方面，本公开实施例提供一种电子设备，包括：一个或多个处理器；以及存储装置，其上存储有一个或多个程序，其中，当所述一个或多个程序被所述一个或多个处理器执行时，使得所述一个或多个处理器实现如前所述的群组通话管理方法。
第七方面，本公开实施例提供一种计算机存储介质，其上存储有计算机程序，其中，所述程序被执行时实现如前所述的群组通话管理方法。
附图说明
图1是本公开提供的群组通话管理方法的流程示意图一；
图2是本公开提供的创建群组的流程示意图；
图3是本公开提供的确定注册终端列表的流程示意图；
图4是本公开提供的生成并下发终端验证信息的流程示意图；
图5是本公开提供的对请求终端进行安全验证的流程示意图；
图6是本公开提供的群组通话管理方法的流程示意图二；
图7是本公开提供的群组通话管理装置的模块示意图一；
图8是本公开提供的群组通话管理装置的模块示意图二；
图9是本公开提供的终端的模块示意图；
图10是本公开提供的群组通话管理系统的示意图；
图11是本公开提供的视频会议系统的示意图；
图12是本公开提供的电子设备的模块示意图；
图13是本公开提供的计算机存储介质的示意图。
具体实施方式
在下文中将参考附图更充分地描述示例实施例，但是所述示例实施例可以以不同形式来体现且不应当被解释为限于本文阐述的实施例。反之，提供这些实施例的目的在于使本公开透彻和完整，并将使本领域技术人员充分理解本公开的范围。
如本文所使用的，术语“和/或”包括一个或多个相关列举条目的任何和所有组合。
本文所使用的术语仅用于描述特定实施例，且不意欲限制本公开。如本文所使用的，单数形式“一个”和“该”也意欲包括复数形式，除非上下文另外清楚指出。还将理解的是，当本说明书中使用术语“包括”和/或“由……制成”时，指定存在所述特征、整体、步骤、操作、元件和/或组件，但不排除存在或添加一个或多个其他特征、整体、步骤、操作、元件、组件和/或其群组。
本文所述实施例可借助本公开的理想示意图而参考平面图和/或截面图进行描述。因此，可根据制造技术和/或容限来修改示例图示。因此，实施例不限于附图中所示的实施例，而是包括基于制造工艺而形成的配置的修改。因此，附图中例示的区具有示意性属性，并且图中所示区的形状例示了元件的区的具体形状，但并不旨在是限制性的。
除非另外限定，否则本文所用的所有术语(包括技术和科学术语)的含义与本领域普通技术人员通常理解的含义相同。还将理解，诸如那些在常用字典中限定的那些术语应当被解释 为具有与其在相关技术以及本公开的背景下的含义一致的含义，且将不解释为具有理想化或过度形式上的含义，除非本文明确如此限定。
目前，常见的用以解决终端接入视频会议的安全性问题的手段包括会议密码认证、终端编号认证、终端IP(Internet Protocol，互联网协议)地址认证等，主要是通过对比终端提供的会议密码与预先设定的会议密码是否一致、终端编号及终端IP地址是否合法等方法来实现。但是，由于终端用以接入会议的会议密码、终端编号、终端IP地址均存在容易泄漏、容易被篡改和容易被假冒的安全隐患，极易导致信息窃取者通过非法终端接入视频会议后窃取视频会议内容。
有鉴于此，本公开提出一种群组通话管理方法，其中，终端在请求加入群组进行通话时需提交终端身份信息，且群组通话管理装置需在本地预存成员识别信息和包括终端安全级别和终端有效期的安全识别信息。根据成员识别信息和终端身份信息验证终端是否为群组的目标成员终端，以及根据安全识别信息和终端身份信息验证终端的安全性，两者均验证通过时可认为终端符合群组通话的接入安全性要求。
如图1所示，本公开实施例提供一种群组通话管理方法，可以包括如下步骤S11至S13。
在步骤S11中，响应于请求终端发送的加入群组请求，获取其中携带的终端身份信息。
在步骤S12中，根据本地预存的成员识别信息和终端身份信息确定请求终端是否为加入群组请求对应的群组的目标成员终端，以及根据本地预存的安全识别信息和终端身份信息对请求终端进行安全验证；其中，安全识别信息包括终端安全级别和终端有效期。
在步骤S13中，在确定出请求终端为群组的目标成员终端且请求终端通过安全验证的情况下，允许请求终端加入群组进行通话。
其中，请求终端即请求加入群组的终端。目标成员终端即预先确定出的允许加入群组(该群组为请求终端所请求加入的群组)进行通话的终端。终端身份信息可以包括任意能够用以唯一标示终端身份的信息。成员识别信息即用以记录目标成员终端身份的信息。安全识别信息可以包括终端安全级别和终端有效期。终端安全级别和终端有效期可以为群组通话管理装置(或终端)预先为所有终端生成的。终端安全级别例如可以包括依次增高的普通级、秘密级、机密级、绝密级等。终端有效期可以为一个截止有效日期或从某个时刻起始的一段时长。加入群组请求可以为请求终端响应于群组通话管理装置的群组通话呼叫而返回的呼叫应答信令，也可以是请求终端主动向群组通话管理装置发送的。
应当理解，若未从请求终端发送的加入群组请求中获取到终端身份信息，则可以直接确定终端既不为群组的目标成员终端也未通过安全验证。
通过上述步骤S11-S13可以看出，通过本公开提供的群组通话管理方法，由于请求终端发送的加入群组请求中携带的终端身份信息能够唯一标示请求终端的身份，对比本地预存的成员识别信息和终端身份信息可以确定请求终端是否为加入群组请求对应的群组的目标成员终端，根据本地预存的包括有终端安全级别和终端有效期的安全识别信息以及终端身份信息可以验证请求终端的安全性，在确定出请求终端为群组的目标成员终端且请求终端通过安全验证的情况下，能够说明请求终端具有加入群组的权限且身份安全，此时可以允许请求终端加入群组进行通话。能够有效地对请求加入群组进行通话的终端进行安全验证，保障群组通话的安全性，并且，相较于仅验证终端提供的密码、编号、IP地址等安全验证方法，本公开提供的群组通话管理方法能够更准确地验证终端的安全性，进一步提高群组通话的安全性。
在相关技术中，通常并不会在创建群组时就选择出可以加入群组进行通话的终端，而是在群组创建完成之后，再行选择或者直接在终端请求加入群组进行通话时对终端进行验证。或者，即使在创建群组时就选择可以加入群组进行通话的终端，也不会对所选择的终端进行验证，相当于也是在终端请求加入群组进行通话时对终端进行验证。这将降低终端加入群组的效率，并且可能存在终端具有一定的安全性但群组通话要求更高的安全性的情况。为此，本公开实施例提出，在创建群组时就选择出可以加入群组进行通话的终端，并且比较所选择的终端的安全级别与群组的安全级别。
相应的，在一些实施例中，所述安全识别信息包括终端序列号与终端安全级别及终端有效期之间的对应关系，如图2所示，在所述响应于请求终端发送的加入群组请求，获取其中携带的终端身份信息(即步骤S11)之前，所述方法还可以包括如下步骤S21至S23。
在步骤S21中，确定群组的群组安全级别以及候选成员终端。
在步骤S22中，根据候选成员终端的终端序列号和对应关系确定候选成员终端的终端安全级别和终端有效期。
在步骤S23中，在各候选成员终端的终端安全级别均不低于群组安全级别、且各候选成员终端的终端有效期均未过期的情况下，创建群组。
其中，群组安全级别可以包括依次增高的普通级、秘密级、机密级、绝密级等。终端安全级别可以包括依次增高的普通级、秘密级、机密级、绝密级等。候选成员终端即为所选择的可以加入群组进行通话的终端。终端均具有能够唯一标示终端身份的序列号，序列号为一串由数字、字母和符号中任一或任意组合构成的字符串，例如可以为“123456789012”，通常在终端的产品包装外表面或产品信息的用户界面示出。
在创建群组时，可以选择待创建的群组的群组安全级别以及即候选成员终端，由于本地以终端序列号作为索引标识预存了全部终端的终端安全级别及终端有效期，可以根据候选成员终端的终端序列号查询到候选成员终端的终端安全级别和终端有效期。通过对比群组安全级别和终端安全级别确定终端的安全性是否满足群组的安全性要求，通过判断终端有效期是否过期确定终端的安全性是否有效，在各候选成员终端的终端安全级别均不低于群组安全级别、且各候选成员终端的终端有效期均未过期的情况下，创建群组，此时各候选成员终端均成为群组的目标成员终端，能够确保群组的目标成员终端的安全性均达到群组的安全性要求，保障群组通话的顺利进行，并有利于后续提高终端加入群组的效率。
当各候选成员终端的终端安全级别均不低于群组安全级别、且各候选成员终端的终端有效期均未过期时，说明目标成员终端的安全性均达到群组的安全性要求，此时可以在本地记录目标成员终端身份的信息，用以后续对请求加入群组的终端身份进行核对。相应的，在一些实施例中，所述方法还可以包括如下步骤：在各候选成员终端的终端安全级别均不低于群组安全级别、且各候选成员终端的终端有效期均未过期的情况下，根据各候选成员终端的终端序列号生成并保存成员识别信息。
可以将终端序列号作为终端身份信息，由于已根据各候选成员终端的终端序列号生成并保存成员识别信息，当接收到加入群组请求时可以根据在成员识别信息中查询请求终端是否为目标成员终端，相应的，所述根据本地预存的成员识别信息和终端身份信息确定请求终端是否为加入群组请求对应的群组的目标成员终端(即步骤S12中所述)可以包括如下步骤：在成员识别信息中包括终端身份信息中携带的终端序列号的情况下，确定请求终端为群组的 目标成员终端。
在实现群组通话的过程中，终端可以向群组通话管理装置请求注册，群组通话管理装置每次创建群组时，均可以从已经注册的终端中选择候选成员终端。而在终端向群组通话管理装置请求注册时，也可以根据本地预存的安全识别信息即终端序列号与终端安全级别及终端有效期之间的对应关系来对终端进行验证，而非仅直接验证终端身份的合法性，以便进一步提高终端安全验证的准确性和群组通话的安全性。
相应的，在一些实施例中，如图3所示，在所述确定群组的群组安全级别以及候选成员终端(即步骤S21)之前，所述方法还可以包括如下步骤S31至S34。
在步骤S31中，响应于待注册终端发送的注册请求，获取其中携带的终端序列号和终端验证信息。
在步骤S32中，根据注册请求中携带的终端序列号和对应关系确定待注册终端的终端安全级别和终端有效期。
在步骤S33中，利用预定算法根据注册请求中携带的终端序列号以及待注册终端的终端安全级别和终端有效期确定注册验证信息。
在步骤S34中，在注册请求中携带的终端验证信息与注册验证信息一致且待注册终端的终端有效期未过期的情况下，确定待注册终端注册成功，并将注册请求中携带的终端序列号添加至注册终端列表。
注册终端列表中记录了已成功注册的终端。相应的，所述确定群组的候选成员终端(即步骤S21中所述)可以包括如下步骤：从注册终端列表中确定群组的候选成员终端。
其中，终端验证信息为一段字符串，由群组通话管理装置预先分别为所有终端生成终端验证信息并下发，并且也是利用预定算法对终端序列号、终端安全级别与终端有效期计算得到的。
终端在发送注册请求时将终端序列号和终端验证信息一并发送，群组通话管理装置根据注册请求中携带的终端序列号查询本地预存的终端序列号与终端安全级别与终端有效期之间的对应关系，得到终端安全级别和终端有效期，再利用相同的预定算法对终端序列号、查询得到的终端安全级别和终端有效期计算得到注册验证信息，对比注册验证信息与终端提交的终端验证信息并判断终端有效期是否过期，若两者一致且终端有效期未过期，则说明终端提交的终端验证信息真实有效，确实为群组通话管理装置下发的，未被篡改也未被假冒，此时可以确定终端注册成功，并将注册请求中携带的终端序列号添加至注册终端列表，注册终端列表中记录的均为已成功注册的终端。
本公开对预定算法为何种算法并不做具体限定，例如，可以为MD算法、HAVAL算法、SHA(Secure Hash Algorithm，安全哈希算法)算法等等。以终端序列号为“123456789012”、终端安全级别为机密级、终端有效期为20261028、预定算法为SHA-256为例，计算后可以得到终端验证信息“db94a8c1d22d347508c7e037757500d3330d81aedd3796809f76d6592f026272”。终端可以利用H.323、SIP(Session Initiation Protocol，会话初始协议)、HTTP(Hyper Text Transfer Protocol，超文本传输协议)等方式向群组通话管理装置请求注册。对于H.323方式，可以将终端序列号和终端验证信息以明文方式或采用base64等编码方式填写到可扩展字段中，例如填写到setup的user-information中，内容可以为：“ID.123456789012.SECSTR.db94a8c1d22d347508c7e037757500d3330d81aedd3796809f76d65 92f026272”。对于SIP方式，可以将终端序列号和终端验证信息填写到可扩展字段中，例如填写到User-Agent中，填写的内容可以为：“User-Agent:ID.123456789012.SECSTR.db94a8c1d22d347508c7e037757500d3330d81aedd3796809f76d6592f026272”。
在终端向群组通话管理装置注册之前，分别根据各终端的信息为各终端生成终端验证信息并下发，预定算法通常为较为复杂的加密算法，因此各终端的终端验证信息均具有唯一性。后续终端即可根据终端验证信息向群组管理装置请求注册以及请求加入群组进行通话等等。相应的，在一些实施例中，如图4所示，在所述响应于待注册终端发送的注册请求，获取其中携带的终端序列号和终端验证信息(即步骤S31)之前，所述方法还可以包括如下步骤。S41至S43。
在步骤S41中，获取待注册终端的终端序列号，并确定待注册终端的终端安全级别和终端有效期。
在步骤S42中，利用预定算法根据待注册终端的终端序列号、终端安全级别和终端有效期确定待注册终端的终端验证信息。
在步骤S43中，将待注册终端的终端验证信息下发至相应的待注册终端，以供待注册终端根据下发的终端验证信息请求注册。
其中，在初始化时，可以将群组通话管理系统中的所有终端均视作待注册终端，从终端的产品包装外表面或产品信息的用户界面获取待注册终端的终端序列号，并根据终端的实际情况生成终端安全级别和终端有效期。利用与上述计算注册验证信息时相同的预定算法(即步骤S33中所述的)对终端序列号、终端安全级别和终端有效期进行计算，得到待注册终端的终端验证信息并下发至相应的待注册终端。
应当理解，可以根据终端的实际情况对终端的终端安全级别和终端有效期进行更新，相应的，对终端的终端安全级别和终端有效期进行更新之后，还需重新计算终端的终端验证信息并下发。
为待注册终端生成终端安全级别和终端有效期之后，群组通话管理装置需保存待注册终端的终端安全级别和终端有效期，以便后续在待注册终端请求注册或请求加入群组进行通话时，可以根据终端安全级别和终端有效期验证终端的安全性，具体的，可以以终端的终端序列号为索引记录各终端的终端安全级别和终端有效期。相应的，在一些实施例中，在所述获取待注册终端的终端序列号，并确定待注册终端的终端安全级别和终端有效期(即步骤S41)之后，所述方法还可以包括如下步骤：根据各待注册终端的终端序列号、终端安全级别和终端有效期生成并保存终端序列号与终端安全级别及终端有效期之间的对应关系。
由于各终端的终端验证信息均具有唯一性，可以将终端验证信息也作为终端身份信息，用以唯一标示终端的身份。终端请求加入群组进行通话时，将终端序列号和终端验证信息一并发送，根据本地预存的终端序列号与终端安全级别及终端有效期之间的对应关系以及终端发送的终端序列号和终端验证信息对终端进行安全验证。相应的，在一些实施例中，所述终端身份信息包括终端序列号和终端验证信息，安全识别信息包括终端序列号与终端安全级别及终端有效期之间的对应关系，如图5所示，所述根据本地预存的安全识别信息和终端身份信息对请求终端进行安全验证(即步骤S12中所述)可以包括如下步骤S121至S123。
在步骤S121中，根据终端身份信息中携带的终端序列号和对应关系确定请求终端的终端 安全级别和终端有效期。
在步骤S122中，利用预定算法根据终端身份信息中携带的终端序列号、请求终端的终端安全级别和终端有效期确定加入验证信息。
在步骤S123中，若加入验证信息与终端验证信息一致且请求终端的终端有效期未过期，则确定请求终端通过安全验证。
其中，步骤S122中利用的预定算法与步骤S33、步骤S42中利用的预定算法一致，均可以为MD算法、HAVAL算法、SHA(Secure Hash Algorithm，安全哈希算法)算法等等。根据本地预存的对应关系可查询得到请求终端的终端安全级别和终端有效期。当根据请求终端的终端序列号、终端安全级别和终端有效期计算得到的加入验证信息与请求终端发送的终端验证信息一致且终端有效期未过期时，可以说明终端提交的终端验证信息真实有效，确实为群组通话管理装置下发的，未被篡改也未被假冒，此时可以确定请求终端通过安全验证。
如图6所示，本公开实施例提供一种群组通话管理方法，可以包括如下步骤S51。
在步骤S51中，向群组通话管理装置发送携带有终端身份信息的加入群组请求，以供群组通话管理装置根据本地预存的成员识别信息、安全识别信息和加入群组请求中携带的终端身份信息确定是否允许当前终端加入群组请求对应的群组进行通话；其中，安全识别信息包括终端安全级别和终端有效期。
终端在向群组通话管理装置请求加入群组进行通话时，可以将终端身份信息一并发送，以供群组通话管理装置根据本地预存的成员识别信息和终端身份信息确定当前终端是否为群组的目标成员终端以及根据本地预存的安全识别信息和终端身份信息对当前终端进行安全验证，当确定出当前终端为群组的目标成员终端且当前终端通过安全验证时，当前终端将被群组通话管理装置允许加入群组进行通话。
通过上述步骤S51可以看出，通过本公开提供的群组通话管理方法，终端在向群组通话管理装置请求加入群组进行通话时提交终端身份信息，群组通话管理装置根据预存的成员识别信息和安全识别信息以及终端身份信息确定是否允许当前终端加入群组进行通话。能够有效地对请求加入群组进行通话的终端进行安全验证，保障群组通话的安全性，并且，相较于仅验证终端提供的密码、编号、IP地址等安全验证方法，本公开提供的群组通话管理方法能够更准确地验证终端的安全性，进一步提高群组通话的安全性。
基于相同的技术构思，如图7所示，本公开还提供一种群组通话管理装置，可以包括：
获取模块101，配置为响应于请求终端发送的加入群组请求，获取其中携带的终端身份信息。
验证模块102，配置为根据本地预存的成员识别信息和终端身份信息确定请求终端是否为加入群组请求对应的群组的目标成员终端，以及根据本地预存的安全识别信息和终端身份信息对请求终端进行安全验证；其中，安全识别信息包括终端安全级别和终端有效期。
处理模块103，配置为在确定出请求终端为群组的目标成员终端且请求终端通过安全验证的情况下，确定允许请求终端加入群组进行通话。
在一些实施例中，所述安全识别信息包括终端序列号与终端安全级别及终端有效期之间的对应关系，所述处理模块103还配置为：确定群组的群组安全级别以及候选成员终端；并且在各候选成员终端的终端安全级别均不低于群组安全级别、且各候选成员终端的终端有效期均未过期的情况下，创建群组。
所述验证模块102还配置为：根据候选成员终端的终端序列号和对应关系确定候选成员终端的终端安全级别和终端有效期；以及确定各候选成员终端的终端安全级别是否均不低于群组安全级别、且各候选成员终端的终端有效期是否均未过期。
在一些实施例中，所述处理模块103还配置为：在各候选成员终端的终端安全级别均不低于群组安全级别、且各候选成员终端的终端有效期均未过期的情况下，根据各候选成员终端的终端序列号生成并保存成员识别信息。
在一些实施例中，所述终端身份信息包括终端序列号，并且所述验证模块102还配置为：在成员识别信息中包括终端身份信息中携带的终端序列号的情况下，确定请求终端为群组的目标成员终端。
在一些实施例中，所述获取模块101还配置为：响应于待注册终端发送的注册请求，获取其中携带的终端序列号和终端验证信息。
所述验证模块102还配置为：根据注册请求中携带的终端序列号和对应关系确定待注册终端的终端安全级别和终端有效期；根据注册请求中携带的终端序列号以及待注册终端的终端安全级别和终端有效期确定注册验证信息；以及确定注册请求中携带的终端验证信息与注册验证信息是否一致且待注册终端的终端有效期是否未过期。
所述处理模块103还配置为：在注册请求中携带的终端验证信息与注册验证信息一致且待注册终端的终端有效期未过期的情况下，确定待注册终端注册成功，并将注册请求中携带的终端序列号添加至注册终端列表；从注册终端列表中确定群组的候选成员终端。
在一些实施例中，所述获取模块101还配置为：获取待注册终端的终端序列号。
所述处理模块103还配置为：确定待注册终端的终端安全级别和终端有效期；利用预定算法根据待注册终端的终端序列号、终端安全级别和终端有效期确定待注册终端的终端验证信息。
如图8所示，在一些实施例中，所述群组通话管理装置还可包括发送模块104，所述发送模块104配置为将待注册终端的终端验证信息下发至相应的待注册终端，以供待注册终端根据下发的终端验证信息请求注册。
在一些实施例中，所述处理模块103还配置为：根据各待注册终端的终端序列号、终端安全级别和终端有效期生成并保存终端序列号与终端安全级别及终端有效期之间的对应关系。
在一些实施例中，所述终端身份信息包括终端序列号和终端验证信息，所述安全识别信息包括终端序列号与终端安全级别及终端有效期之间的对应关系，并且所述验证模块102配置为：根据终端身份信息中携带的终端序列号和所述对应关系确定请求终端的终端安全级别和终端有效期；利用预定算法根据终端身份信息中携带的终端序列号、请求终端的终端安全级别和终端有效期确定加入验证信息；以及若加入验证信息与终端验证信息一致且请求终端的终端有效期未过期，则确定请求终端通过安全验证。
基于相同的技术构思，如图9所示，本公开还提供一种终端，该终端可以包括发送模块201。
发送模块201配置为向群组通话管理装置发送加入群组请求，以供群组通话管理装置根据本地预存的成员识别信息、安全识别信息和加入群组请求中携带的终端身份信息确定是否允许当前终端加入加入群组请求对应的群组进行通话；其中，安全识别信息包括终端安全级别和终端有效期。
基于相同的技术构思，如图10所示，本公开还提供一种群组通话管理系统，包括：如前所述的群组通话管理装置；以及至少两个如前所述的终端。
现有的视频会议系统主要由会议管理系统、MCU(Multipoint Control Unit,多点处理单元)和会议终端共同开展，会议终端包括视频终端、语音终端和数据终端。通过会议管理系统召开多个会议终端参会，由MCU实现各个终端间的音视频交互和数据交互。，也可以是会议管理系统。如图11所示，当本公开提供的群组通话管理方法应用于视频会议领域时，本公开所提供的群组通话管理系统可以为视频会议系统，群组通话管理装置可以是会议管理系统中的一个装置，终端可以是会议终端，视频会议系统中还可以包括MCU。
此外，如图12所示，本公开实施例还提供一种电子设备，包括：一个或多个处理器301；以及存储装置302，其上存储有一个或多个程序；其中，当所述一个或多个程序被所述一个或多个处理器301执行时，使得所述一个或多个处理器301实现如前所述各实施例提供的群组通话管理方法。
此外，如图13所示，本公开实施例还提供一种计算机存储介质，其上存储有计算机程序，其中，所述程序被执行时实现如前所述各实施例提供的群组通话管理方法。
本领域普通技术人员可以理解，上文中所公开方法中的全部或某些步骤、装置中的功能模块/单元可以被实施为软件、固件、硬件及其适当的组合。在硬件实施方式中，在以上描述中提及的功能模块/单元之间的划分不一定对应于物理组件的划分；例如，一个物理组件可以具有多个功能，或者一个功能或步骤可以由若干物理组件合作执行。某些物理组件或所有物理组件可以被实施为由处理器，如中央处理器、数字信号处理器或微处理器执行的软件，或者被实施为硬件，或者被实施为集成电路，如专用集成电路。这样的软件可以分布在计算机可读介质上，计算机可读介质可以包括计算机存储介质(或非暂时性介质)和通信介质(或暂时性介质)。如本领域普通技术人员公知的，术语计算机存储介质包括在用于存储信息(诸如计算机可读指令、数据结构、程序模块或其他数据)的任何方法或技术中实施的易失性和非易失性、可移除和不可移除介质。计算机存储介质包括但不限于RAM、ROM、EEPROM、闪存或其他存储器技术、CD-ROM、数字多功能盘(DVD)或其他光盘存储、磁盒、磁带、磁盘存储或其他磁存储装置、或者可以用于存储期望的信息并且可以被计算机访问的任何其他的介质。此外，本领域普通技术人员公知的是，通信介质通常包含计算机可读指令、数据结构、程序模块或者诸如载波或其他传输机制之类的调制数据信号中的其他数据，并且可包括任何信息递送介质。
本文已经公开了示例实施例，并且虽然采用了具体术语，但它们仅用于并仅应当被解释为一般说明性含义，并且不用于限制的目的。在一些实例中，对本领域技术人员显而易见的是，除非另外明确指出，否则可单独使用与特定实施例相结合描述的特征、特性和/或元素，或可与其他实施例相结合描述的特征、特性和/或元件组合使用。因此，本领域技术人员将理解，在不脱离由所附的权利要求阐明的本公开的范围的情况下，可进行各种形式和细节上的改变。

Claims (13)

  1. 一种群组通话管理方法，包括：
    响应于请求终端发送的加入群组请求，获取所述加入群组请求中携带的终端身份信息；
    根据本地预存的成员识别信息和所述终端身份信息确定所述请求终端是否为所述加入群组请求对应的群组的目标成员终端，以及根据本地预存的安全识别信息和所述终端身份信息对所述请求终端进行安全验证；其中，所述安全识别信息包括终端安全级别和终端有效期；以及，
    在确定出所述请求终端为所述群组的目标成员终端且所述请求终端通过安全验证的情况下，允许所述请求终端加入所述群组进行通话。
  2. 根据权利要求1所述的方法，其中，所述安全识别信息包括终端序列号与终端安全级别及终端有效期之间的对应关系，并且在所述响应于请求终端发送的加入群组请求，获取所述加入群组请求所述加入群组请求中携带的终端身份信息之前，所述方法还包括：
    确定所述群组的群组安全级别以及候选成员终端；
    根据所述候选成员终端的终端序列号和所述对应关系确定所述候选成员终端的终端安全级别和终端有效期；以及
    在各所述候选成员终端的终端安全级别均不低于所述群组安全级别、且各所述候选成员终端的终端有效期均未过期的情况下，创建所述群组。
  3. 根据权利要求2所述的方法，其中，所述方法还包括：在各所述候选成员终端的终端安全级别均不低于所述群组安全级别、且各所述候选成员终端的终端有效期均未过期的情况下，根据各所述候选成员终端的终端序列号生成并保存所述成员识别信息；
    所述终端身份信息包括终端序列号，并且所述根据本地预存的成员识别信息和所述终端身份信息确定所述请求终端是否为所述加入群组请求对应的群组的目标成员终端包括：
    在所述成员识别信息中包括所述终端身份信息中携带的终端序列号的情况下，确定所述请求终端为所述群组的目标成员终端。
  4. 根据权利要求2所述的方法，其中，在所述确定所述群组的群组安全级别以及候选成员终端之前，所述方法还包括：
    响应于待注册终端发送的注册请求，获取所述注册请求中携带的终端序列号和终端验证信息；
    根据所述注册请求中携带的终端序列号和所述对应关系确定所述待注册终端的终端安全级别和终端有效期；
    根据所述注册请求中携带的终端序列号以及所述待注册终端的终端安全级别和终端有效期确定注册验证信息；以及
    在所述注册请求中携带的终端验证信息与所述注册验证信息一致且所述待注册终端的终端有效期未过期的情况下，确定所述待注册终端注册成功，并将所述注册请求中携带的终端序列号添加至注册终端列表；并且
    其中，所述确定所述群组的候选成员终端包括：从所述注册终端列表中确定所述群组的候选成员终端。
  5. 根据权利要求4所述的方法，其中，在所述响应于待注册终端发送的注册请求，获取所述注册请求中携带的终端序列号和终端验证信息之前，所述方法还包括：
    获取待注册终端的终端序列号，并确定所述待注册终端的终端安全级别和终端有效期；
    利用预定算法根据所述待注册终端的终端序列号、终端安全级别和终端有效期确定所述待注册终端的终端验证信息；以及
    将所述待注册终端的终端验证信息下发至相应的所述待注册终端，以供所述待注册终端根据下发的终端验证信息请求注册。
  6. 根据权利要求5所述的方法，其中，在所述获取待注册终端的终端序列号，并确定所述待注册终端的终端安全级别和终端有效期之后，所述方法还包括：
    根据各所述待注册终端的终端序列号、终端安全级别和终端有效期生成并保存所述终端序列号与终端安全级别及终端有效期之间的对应关系。
  7. 根据权利要求1所述的方法，其中，所述终端身份信息包括终端序列号和终端验证信息，所述安全识别信息包括终端序列号与终端安全级别及终端有效期之间的对应关系，所述根据本地预存的安全识别信息和所述终端身份信息对所述请求终端进行安全验证包括：
    根据所述终端身份信息中携带的终端序列号和所述对应关系确定所述请求终端的终端安全级别和终端有效期；
    利用预定算法根据所述终端身份信息中携带的所述终端序列号、所述请求终端的所述终端安全级别和所述终端有效期确定加入验证信息；以及
    若所述加入验证信息与所述终端验证信息一致且所述请求终端的终端有效期未过期，则确定所述请求终端通过安全验证。
  8. 一种群组通话管理方法，包括：
    向群组通话管理装置发送携带有终端身份信息的加入群组请求，以供所述群组通话管理装置根据本地预存的成员识别信息、安全识别信息和所述加入群组请求中携带的终端身份信息确定是否允许当前终端加入所述加入群组请求对应的群组进行通话；其中，所述安全识别信息包括终端安全级别和终端有效期。
  9. 一种群组通话管理装置，包括：
    获取模块，配置为响应于请求终端发送的加入群组请求，获取所述加入群组请求中携带的终端身份信息；
    验证模块，配置为根据本地预存的成员识别信息和所述终端身份信息确定所述请求终端是否为所述加入群组请求对应的群组的目标成员终端，以及根据本地预存的安全识别信息和所述终端身份信息对所述请求终端进行安全验证；其中，所述安全识别信息包括终端安全级别和终端有效期；以及
    处理模块，配置为在确定出所述请求终端为所述群组的目标成员终端且所述请求终端通过安全验证的情况下，确定允许所述请求终端加入所述群组进行通话。
  10. 一种终端，包括：
    发送模块，配置为向群组通话管理装置发送携带有终端身份信息的加入群组请求，以供所述群组通话管理装置根据本地预存的成员识别信息、安全识别信息和所述加入群组请求中携带的终端身份信息确定是否允许当前终端加入所述加入群组请求对应的群组进行通话；其中，所述安全识别信息包括终端安全级别和终端有效期。
  11. 一种群组通话管理系统，包括：
    如权利要求9所述的群组通话管理装置；以及
    至少两个如权利要求10所述的终端。
  12. 一种电子设备，包括：
    一个或多个处理器；以及
    存储装置，其上存储有一个或多个程序；
    其中，当所述一个或多个程序被所述一个或多个处理器执行时，使得所述一个或多个处理器实现如权利要求1-8任一项所述的群组通话管理方法。
  13. 一种计算机存储介质，其上存储有计算机程序，其中，所述程序被执行时实现如权利要求1-8任一项所述的群组通话管理方法。
PCT/CN2022/115805 2021-08-30 2022-08-30 群组通话管理方法、装置、终端、电子设备及存储介质 WO2023030305A1 (zh)

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
CN202111004959.9A CN115733641A (zh) 2021-08-30 2021-08-30 群组通话管理方法、装置、终端、电子设备及存储介质
CN202111004959.9 2021-08-30

Publications (1)

Publication Number Publication Date
WO2023030305A1 true WO2023030305A1 (zh) 2023-03-09

Family

ID=85290865

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/CN2022/115805 WO2023030305A1 (zh) 2021-08-30 2022-08-30 群组通话管理方法、装置、终端、电子设备及存储介质

Country Status (2)

Country Link
CN (1) CN115733641A (zh)
WO (1) WO2023030305A1 (zh)

Citations (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20140324993A1 (en) * 2013-04-28 2014-10-30 Wei Li Method and Apparatus for Establishing Chat Group
CN105141582A (zh) * 2015-07-27 2015-12-09 深圳市元征科技股份有限公司 一种群组加入方法及服务器
CN105939488A (zh) * 2016-06-14 2016-09-14 天脉聚源(北京)传媒科技有限公司 一种获取产品的方法及系统
CN107181671A (zh) * 2017-05-26 2017-09-19 北京小米移动软件有限公司 社交信息处理方法和装置
CN109166216A (zh) * 2018-08-27 2019-01-08 武汉市国扬科技集团有限公司 一种智能蓝牙门锁的控制方法和装置

Patent Citations (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20140324993A1 (en) * 2013-04-28 2014-10-30 Wei Li Method and Apparatus for Establishing Chat Group
CN105141582A (zh) * 2015-07-27 2015-12-09 深圳市元征科技股份有限公司 一种群组加入方法及服务器
CN105939488A (zh) * 2016-06-14 2016-09-14 天脉聚源(北京)传媒科技有限公司 一种获取产品的方法及系统
CN107181671A (zh) * 2017-05-26 2017-09-19 北京小米移动软件有限公司 社交信息处理方法和装置
CN109166216A (zh) * 2018-08-27 2019-01-08 武汉市国扬科技集团有限公司 一种智能蓝牙门锁的控制方法和装置

Also Published As

Publication number Publication date
CN115733641A (zh) 2023-03-03

Similar Documents

Publication Publication Date Title
US11196739B2 (en) Authorization activation
KR101268702B1 (ko) 음성메일 메시징 인증 수행방법
CN107579827B (zh) 一种基于可信第三方和面部识别技术的电子文书签署方法
US20170353442A1 (en) Proximity-based authentication
US9609514B2 (en) System and method for securing a conference bridge from eavesdropping
TWI672073B (zh) 在移動終端間建立通訊、通訊存取／呼叫方法、裝置及系統
US20090046839A1 (en) Verifying authenticity of called party in telephony networks
US20080184029A1 (en) Method and system for generating digital fingerprint
US9832252B2 (en) Systems, methods, and computer program products for third party authentication in communication services
JP5012044B2 (ja) コンテンツ配信システム、コンテンツ配信方法及びプログラム
JP2005519533A (ja) 通信システム中の複製クライアント識別情報の検出
WO2009105988A1 (zh) 会话发起协议注册方法、认证及授权方法、系统及设备
TWI640189B (zh) 電信認證之身分核實系統及其方法
WO2017076216A1 (zh) 服务器、移动终端、网络实名认证系统及方法
WO2011144081A2 (zh) 用户业务鉴权方法、系统及服务器
US9667605B2 (en) Electronic communication system and method for communication of the same in an open environment
US20080301788A1 (en) Identity assertion
US20090025062A1 (en) Verifying authenticity of conference call invitees
WO2023030305A1 (zh) 群组通话管理方法、装置、终端、电子设备及存储介质
US10251062B2 (en) Method of managing access to a service
CN108833105B (zh) 电子签名方法及装置
Liu et al. A blockchain based scheme for authentic telephone identity
CN116055047B (zh) 一种对主账号关联记录的可信匿名管理方法
CN116186664A (zh) 一种基于可信执行环境的图像交互方法及系统
Tas et al. Blockchain-Based Caller-ID Authentication (BBCA): A Novel Solution to Prevent Spoofing Attacks in VoIP/SIP Networks

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 22863440

Country of ref document: EP

Kind code of ref document: A1

NENP Non-entry into the national phase

Ref country code: DE