WO2023039871A1

WO2023039871A1 - Data monitoring method, apparatus, device and system

Info

Publication number: WO2023039871A1
Application number: PCT/CN2021/119269
Authority: WO
Inventors: 刘军飞; 关洪军
Original assignee: 海能达通信股份有限公司
Priority date: 2021-09-18
Filing date: 2021-09-18
Publication date: 2023-03-23

Abstract

A data monitoring method, apparatus, device and system. A call control terminal encrypts a call key on the basis of user information of a client to obtain call key information, and forwards the call key to a client by means of a server, so that the client obtains the call key; the server obtains encrypted call content data transmitted during target call, and forwards the encrypted call content data to the client, so that the client decrypts the encrypted call content data by means of the call key to obtain call content data; the server sends the client a call key subjected to special encryption and used by encrypted data during call, so that the client can use the call key to decrypt the call content data encrypted during call, so as to obtain actually transmitted call content data. The special encryption ensures that only the client can decrypt an encryption key, that is, the monitoring during encrypted data transmission is realized, and the reliability of data transmission is improved.

Description

A data monitoring method, device, equipment and system

technical field

The present invention relates to the field of data processing, more specifically, to a data monitoring method, device, equipment and system.

Background technique

At present, communication technology continues to mature, and the frequency of data transmission between devices is getting higher and higher. For the security of data transmission, it is necessary to monitor the transmitted data.

When the data transmitted between devices is not encrypted, the data can be monitored directly based on the transmitted data, but when the transmitted data is encrypted, because the encryption password is unknown, the transmitted data cannot be decrypted, and thus the actual transmitted data cannot be obtained And realize the monitoring of data, reduce the reliability of data transmission.

Contents of the invention

In view of this, the present invention provides a data monitoring method, device, equipment and system to solve the problem that the monitoring function of transmitted encrypted data cannot be realized and the reliability of data transmission is reduced.

In order to solve the problems of the technologies described above, the present invention adopts the following technical solutions:

A data monitoring method applied to a server, the data monitoring method comprising:

In the case where the target call is monitored, obtain user information of a client subscribed to monitor the target call;

sending the user information to the call control terminal corresponding to the target call, so that the call control terminal encrypts the call key based on the user information to obtain encrypted call key information, and sends it to the server ;

receiving the call key information, and sending the call key information to the client, so that the client decrypts the call key information based on the user information to obtain a call key;

Obtain encrypted call content data transmitted during the target call, and send the encrypted call content data to the client, so that the client uses the call key to encrypt the encrypted The call content data is decrypted to obtain the call content data.

Optionally, before monitoring that there is a target call, it also includes:

receiving an encrypted call subscription monitoring message sent by the client; the encrypted call subscription monitoring message includes a target call identifier;

Determine whether the client has the authority to monitor the target call corresponding to the target call identifier;

If yes, send a successful subscription response message to the client, and record the client and the encrypted call subscription monitoring message.

Optionally, acquiring user information of a client subscribed to monitor the target call includes:

Querying the client with the interception authority of the target call, sending a user information acquisition request to the client, and receiving the user information of the client returned by the client.

Optionally, the target call includes a target group call or a target individual call.

A data monitoring method applied to a client, the data monitoring method comprising:

receiving the call key information sent by the server, and decrypting the call key information based on the user information of the client to obtain the call key; the call key information is when the server monitors that there is a target call Next, obtain the user information of the client that subscribes to monitor the target call, and send the user information to the call control terminal corresponding to the target call, so that the call control terminal can configure the call key based on the user information obtained after being encrypted and sent to the server;

receiving the encrypted call content data transmitted during the target call sent by the server, and using the call key to decrypt the encrypted call content data to obtain the call content data.

Optionally, before the call key information sent by the receiving server, it also includes:

Send an encrypted call subscription monitoring message to the server; the encrypted call subscription monitoring message includes a target call identifier;

Receive the successful subscription response information sent by the server when it is determined that the client has the authority to monitor the target call corresponding to the target call identifier.

Optionally, the data monitoring method also includes:

receiving the user information acquisition request sent by the server after determining that the client has the monitoring authority of the target call;

sending the user information of the client to the server, so that the server sends the user information of the client to the call control terminal corresponding to the target call when the server detects that the target call exists, the The call control end encrypts the call key based on the user information to obtain encrypted call key information and sends it to the server.

A data monitoring device applied to a server, the data monitoring device comprising:

An information acquisition module, configured to acquire user information of a client subscribed to monitor the target call when the target call is detected;

a data encryption module, configured to send the user information to a call control terminal corresponding to the target call, so that the call control terminal encrypts a call key based on the user information to obtain encrypted call key information, and sent to said server;

a data forwarding module, configured to receive the call key information, and send the call key information to the client, so that the client decrypts the call key information based on the user information, get call key;

A call monitoring module, configured to obtain encrypted call content data transmitted during the target call, and send the encrypted call content data to the client, so that the client uses the call encryption The encryption key is used to decrypt the encrypted call content data to obtain the call content data.

A data monitoring device, an application client, the data monitoring device includes:

The decryption module is configured to receive the call key information sent by the server, and decrypt the call key information based on the user information of the client to obtain the call key; the call key information is the In the case of a target call, obtain user information of the client subscribed to monitor the target call, and send the user information to a call control terminal corresponding to the target call, so that the call control terminal is based on the user The information is obtained by encrypting the call key and sending it to the server;

The monitoring module is configured to receive the encrypted call content data transmitted during the target call sent by the server, and use the call key to decrypt the encrypted call content data to obtain the call content data.

A data monitoring device, comprising: a memory and a processor;

Wherein, the memory is used to store programs;

The processor invokes the program and is used to execute the above data monitoring method.

A data monitoring system, comprising a server for executing the above data monitoring method, and a client for executing the above data monitoring method.

A storage medium, the storage medium includes a stored program, wherein when the program is running, the device where the storage medium is located is controlled to execute the above data monitoring method.

Compared with the prior art, the present invention has the following beneficial effects:

The present invention provides a data monitoring method, device, equipment and system. When a target call is monitored, the user information of the client subscribed to monitor the target call is obtained, and the user information is sent to the target call. The corresponding call control terminal, so that the call control terminal encrypts the call key based on the user information to obtain encrypted call key information, and sends it to the server, receives the call key information, and Sending the call key information to the client, so that the client decrypts the call key information based on the user information to obtain a call key, and obtains the encrypted key information transmitted during the target call. call content data, and send the encrypted call content data to the client, so that the client uses the call key to decrypt the encrypted call content data to obtain the call content data . That is to say, through the present invention, the server sends the client the call key used to encrypt the data during the call after special encryption, and then the client can use the call key to decrypt the encrypted call content data during the call to obtain the actual The transmitted call content data is specially encrypted to ensure that only the client can decrypt the encryption key, which not only realizes the monitoring during encrypted data transmission, but also improves the reliability of data transmission.

Description of drawings

In order to more clearly illustrate the technical solutions in the embodiments of the present invention or the prior art, the following will briefly introduce the drawings that need to be used in the description of the embodiments or the prior art. Obviously, the accompanying drawings in the following description are only These are some embodiments of the present invention. Those skilled in the art can also obtain other drawings based on these drawings without creative work.

Fig. 1 is a method flowchart of a data monitoring method provided by an embodiment of the present invention;

FIG. 2 is a method flowchart of another data monitoring method provided by an embodiment of the present invention;

FIG. 3 is a schematic diagram of a scene of a data monitoring method provided by an embodiment of the present invention;

FIG. 4 is a schematic diagram of another data monitoring method provided by an embodiment of the present invention;

FIG. 5 is a schematic structural diagram of a data monitoring device provided by an embodiment of the present invention;

FIG. 6 is a schematic structural diagram of another data monitoring device provided by an embodiment of the present invention.

Detailed ways

The following will clearly and completely describe the technical solutions in the embodiments of the present invention with reference to the accompanying drawings in the embodiments of the present invention. Obviously, the described embodiments are only some, not all, embodiments of the present invention. Based on the embodiments of the present invention, all other embodiments obtained by persons of ordinary skill in the art without making creative efforts belong to the protection scope of the present invention.

In order to solve the above technical problems, the inventors found that when data is encrypted, the transmitted data cannot be decrypted because the encryption password is unknown. If the encryption password can be obtained, the transmitted data can be decrypted, thereby realizing data monitoring.

Specifically, the present invention provides a data monitoring method, device, device, and system. When a target call is detected, the user information of the client subscribed to monitor the target call is obtained, and the user information is sent to the The call control terminal corresponding to the target call, so that the call control terminal encrypts the call key based on the user information to obtain encrypted call key information, and sends it to the server, and receives the call key information , and send the call key information to the client, so that the client decrypts the call key information based on the user information, obtains the call key, and obtains the the encrypted call content data, and send the encrypted call content data to the client, so that the client uses the call key to decrypt the encrypted call content data to obtain Call content data. That is, through the present invention, the server sends the call key used by the encrypted data during the call to the client, and then the client can use the call key to decrypt the encrypted call content data during the call to obtain the actually transmitted call content data. The special encryption ensures that only the client can decrypt the encryption key, which not only realizes the monitoring during encrypted data transmission, but also improves the reliability of data transmission.

On the basis of the above content, an embodiment of the present invention provides a data monitoring method applied to a server, and the server in this embodiment may be a mission-critical MCS server. The invention can be applied to the field of mobile communication such as call monitoring under the encrypted situation of 3GPP key task end-to-end call.

Referring to Figure 1, the data monitoring method may include:

S11. If it is detected that there is a target call, acquire user information of a client subscribed to monitor the target call.

In this embodiment, the target call may be a target group call or a target individual call, that is, in this embodiment, the group call or individual call may be monitored.

The server can pre-set the call monitoring function of the client. Specifically, before monitoring the existence of the target call, it also includes:

1) Receive the encrypted call subscription monitoring message sent by the client.

Wherein, the encrypted call subscription monitoring message includes a target call identifier. That is to say, if a certain client wants to monitor a certain call, it can determine the target call to be monitored, and then send an encrypted call subscription monitoring message including the target call identifier of the target call to the server. Among them, the target call ID can be:

The identity of target A and target B when target A calls with target B, such as the user numbers of A and B;

or, the identification of the call that is in the call state;

Or, the target group number.

That is to say, in this embodiment, either a single call or a group call can be monitored.

2) Determine whether the client has the authority to monitor the target call corresponding to the target call identifier.

Specifically, the server is provided with an association relationship between the client and the authority to monitor the call, and the server inquires whether the client has the authority to monitor the target call from the above association relationship.

3) If yes, send a successful subscription response message to the client, and record the client and the encrypted call subscription monitoring message.

If the above-mentioned target call is a call that the client can monitor, then send a successful subscription response message to the client, and record the client and the encrypted call subscription monitoring message. The server starts listening to the call and confirms whether there is a client subscription to listen to the upcoming call or the ongoing call.

In this embodiment, one client can subscribe to monitor multiple calls, and one call can also be subscribed and monitored by multiple clients. The server will record the subscription message and monitor whether there is a call that is subscribed to monitor.

In this embodiment, obtaining the user information of the client that subscribes to monitor the target call includes:

Specifically, in this embodiment, when a target call is received, it is first determined whether there is a client monitoring the call, and if so, a client with the monitoring authority of the target call is determined, and then the client is sent A user information acquisition request is sent to the client, so that the client feeds back the user information of the client.

Or, acquire pre-stored user information of the client with the interception authority of the target call.

Specifically, in order to save communication resources, the user information of the client with monitoring authority may also be directly stored in the server. User information can be information such as client name, identity mark, communication address, etc., so that when user information is needed, it can be obtained directly.

Or, acquire the user information sent in advance by the client with the interception authority of the target call.

In addition, the user information may also be carried when the client sends the subscription monitoring message, or it may be sent separately in other business processes.

It should be noted that, in this embodiment, the number of clients is not limited, and may be one or multiple, that is, at least one client may monitor the same call.

S12. Send the user information to the call control terminal corresponding to the target call, so that the call control terminal encrypts the call key based on the user information to obtain encrypted call key information, and sends it to the call control terminal said server.

In order to implement call monitoring, the client needs to obtain the call key used in the call process, and in order to ensure the security of the transmitted information, it is also necessary to ensure that other clients cannot obtain the call key. Furthermore, in this embodiment, the user information of the client may be used to encrypt the call key. Since the user information of the client is known only to the client and not to other clients, the client in this embodiment can decrypt the call key information encrypted with the user information to obtain the call key. At the same time, other clients cannot decrypt, ensuring the security of the encrypted data transmitted.

In order to use the user information of the client to encrypt the call key, the call control terminal needs to obtain the user information. In this embodiment, the server sends the user information to the call control terminal corresponding to the target call, so that all The call control end encrypts the call key based on the user information to obtain encrypted call key information. Wherein, during a single call, the call control terminal may be the calling terminal. During a group call, the call control terminal may be a GMS agent terminal of the group management server in the group call, such as a group management server.

After the call control terminal obtains the encrypted call key information, it will send the call key information to the server, and the server will send the call key information to the client.

S13. Receive the call key information, and send the call key information to the client, so that the client decrypts the call key information based on the user information to obtain a call key .

In this embodiment, after receiving the call key information sent by the server, the client uses its own user information to decrypt the call key information to obtain the call key, and then can use the call key to The encrypted call content data is decrypted to obtain the call content data, so as to monitor the call content data, and output warning information in time when there are sensitive words in the call content data.

S14. Obtain the encrypted call content data transmitted during the target call, and send the encrypted call content data to the client, so that the client uses the call key to The encrypted call content data is decrypted to obtain the call content data.

During the call process, the encrypted call content data will be transmitted through the server. In this embodiment, the server will send the encrypted call content data to the client, so that the client can use the call The key decrypts the encrypted call content data to obtain the call content data, realizing the monitoring of the transmitted data.

It should be noted that when the number of the above-mentioned clients is multiple, the server obtains the user information of each client and sends it to the call control terminal, and the call control terminal encrypts the key based on the user information respectively and then sends it to the server, and the server Then send them to the corresponding clients respectively. Subsequently, the server sends the obtained call content data to each client respectively, so that each client uses the call key to decrypt the encrypted call content data to obtain the call content data, thereby realizing the transmission of data. monitoring.

In this embodiment, when it is detected that there is a target call, the user information of the client subscribed to monitor the target call is obtained, and the user information is sent to the call control terminal corresponding to the target call, so that the call The control terminal encrypts the call key information based on the user information to obtain encrypted call key information, and sends it to the server, receives the call key information, and sends the call key information to the client terminal, so that the client terminal decrypts the call key information based on the user information, obtains a call key, obtains the encrypted call content data transmitted during the target call, and stores the encrypted Send the call content data to the client, so that the client uses the call key to decrypt the encrypted call content data to obtain the call content data. That is to say, through the present invention, the server sends the client the call key used to encrypt the data during the call after special encryption, and then the client can use the call key to decrypt the encrypted call content data during the call to obtain the actual The transmitted call content data is specially encrypted to ensure that only the client can decrypt the encryption key, which not only realizes the monitoring during encrypted data transmission, but also improves the reliability of data transmission.

On the basis of the above content, another embodiment of the present invention provides a data monitoring method, which is applied to a client. Referring to FIG. 2, the data monitoring method includes:

S21. Receive the call key information sent by the server, and decrypt the call key information based on the user information of the client to obtain the call key; In the case of , obtain the user information of the client that subscribes to monitor the target call, and send the user information to the call control terminal corresponding to the target call, so that the call control terminal can make calls based on the user information The key is obtained after being encrypted and sent to the server.

S22. Receive the encrypted call content data transmitted during the target call sent by the server, and use the call key to decrypt the encrypted call content data to obtain call content data.

Further, before receiving the call key information sent by the server, it also includes:

Further, the data monitoring method also includes:

receiving the user information acquisition request sent by the server after determining that the client has the interception authority of the target call;

It should be noted that, for the specific implementation process of each step in this embodiment, please refer to the corresponding description in the foregoing embodiment, and details are not repeated here.

On the basis of the above content, in order for those skilled in the art to understand the present invention more clearly, examples are given to illustrate the monitoring process in group call and individual call.

1. Refer to Figure 3 for the single call monitoring process, which is as follows:

Step 1: Monitoring terminal 1 and monitoring terminal 2 send a subscription request to the MCS server.

Specifically, monitoring terminal 1 (UE-DL1) and monitoring terminal 2 (UE-DL2) initiate a subscription request for careful monitoring of encrypted calls, and the request carries the single call to be monitored.

In this embodiment, it is also possible that one listening terminal alone initiates the request, for example, only the listening terminal 1 (UE-DL1) initiates the encrypted call subscription monitoring of the user.

Step 2: The MCS server performs an authorization check, and sends subscription confirmation information to the monitoring terminal 1 and the monitoring terminal 2.

After the MCS server receives the subscription request for careful monitoring of encrypted calls, it conducts an authorization check, specifically checking whether the corresponding terminal is configured with monitoring authority. After the authority check is passed, the encrypted call monitoring subscription context is recorded locally, and encrypted call subscription success response messages are sent back to the monitoring terminals UE-DL1 and UE-DL2 respectively.

In this embodiment, what monitoring terminal 1 (UE-DL1) and monitoring terminal 2 (UE-DL2) monitor is the single call initiated by the calling terminal (UE-O), or the calling terminal UE-O and the called terminal Single call between (UE-T).

Step 3: The calling terminal initiates a call request to the called party to the MCS server.

Wherein, the request carries identification numbers of the calling terminal UE-O and the called terminal UE-T.

Specifically, the calling terminal UE-O decides to initiate a voice or video encrypted single call to the terminal UE-T. First, the calling terminal UE-O locally generates a PCK (Private Call Key, private call key), and sends the session initiation protocol The invitation message SIP invite (SIP: Session Initial Protocol, session initiation protocol) carries mikey (PCK, UE-T) to the MCS server.

Step 4: The MCS server initiates a call request to the called party.

The MCS server receives and processes the invite message and forwards it to the called terminal UE-T, and the called terminal UE-T decrypts mikey(PCK, UE-T) to obtain the single call key PCK.

The MCS server checks the local encrypted call subscription monitoring context, and determines that monitoring terminal 1 and monitoring terminal 2 have subscribed to the call monitoring.

Step 5: The MCS server sends the call key acquisition request of the monitoring terminal to the calling terminal.

The MCS server sends a request message for obtaining a call key to the calling terminal, where the key request message includes user information of the monitoring terminal 1 and the monitoring terminal 2 .

Step 6: The calling terminal sends a response message carrying the encryption key usable by the monitoring terminal to the MCS server.

The calling terminal UE-O encrypts the single call key of this call based on the user information of the monitoring terminal 1 (UE-DL1) and the monitoring terminal 2 (UE-DL2), and generates the encryption key of the monitoring terminal 1 and the monitoring terminal 1. The encryption key of terminal 2 is then sent to the server through a response message.

Specifically, after receiving the message, the calling terminal encrypts the PCK with the user information of the listening terminal 1 (UE-DL1) and the listening terminal 2 (UE-DL2), and sends a message carrying mikey (PCK, UE-DL1) and mikey (PCK, UE-DL2) to the MCS server.

Steps 7-8: The MCS server sends a monitor call request to monitor terminal 1 and monitor terminal 2 .

Specifically, the MCS server forwards the secret key information mikey (PCK, UE-DL1) and mikey (PCK, UE-DL2) to the monitoring terminal 1 (UE- DL1) and the monitoring terminal 2 (UE-DL2), specifically forward the encryption key mikey (PCK, UE-DL1) to the monitoring terminal 1, and the encryption key mikey (PCK, UE-DL2) to the monitoring terminal 2.

The monitoring terminals UE-DL1 and UE-DL2 respectively use their own user information to decrypt the mikey information, and take out the private call key PCK.

Step 9: The called terminal sends a call response to the MCS server.

Step 10: The MCS server sends the call response to the calling terminal.

Step 11: The calling terminal sends a call second handshake response to the MCS server.

Step 12: The MCS server sends a call second handshake response to the called terminal.

The called terminal UE-T sends a call signaling SIP:18X/200 to the MCS server, and the call information may be to accept a single call, reject a single call, or report progress. The MCS server forwards the message to the calling terminal UE-O, and the calling terminal UE-O sends the call second handshake response message to the MCS server after receiving it, and the MCS server forwards the call second handshake response message to the calling terminal UE-T.

Steps 13-14: the monitoring terminal sends a call response to the MCS server.

Steps 15-16: The MCS server sends a call second handshake response to the monitoring terminal.

The monitoring terminals UE-DL1/UE-DL2 respectively send call signaling SIP:18X/200 to the MCS server, and the MCS server sends call second handshake response messages to the terminal UE-DL1/UE-DL2 respectively.

It should be noted that steps 9-16 are a normal communication process between two devices during data transmission.

Step 17: The calling terminal sends SRTP to the MCS server.

Steps 18-20: The MCS server sends SRTP to the called terminal and the listening terminal.

When the speaking party is speaking (may be the calling terminal or the called terminal), in this embodiment, the speaking party is the calling terminal as an example.

The MCS server forwards the SRTP (Security Secure Real-time Transport Protocol, secure RTP protocol) encrypted media sent by the calling terminal to the called terminal, and the MCS server also forwards the SRTP encrypted media to the monitoring terminal 1/2 respectively, and the monitoring terminal receives the encrypted media After that, the PCK is used for decryption and playback, so that monitoring can be realized based on the decrypted content.

In other embodiments, steps 5-8 and corresponding steps 13-14 may be performed after the call negotiation between the calling terminal and the called terminal is completed and the call service is officially started. That is, the server checks whether there is a monitoring subscription after confirming that the call negotiation is successful, and does not check the subscription monitoring status for a call that fails in negotiation or is rejected by the called party.

2. Referring to Figure 3 for the group call monitoring process, the group call monitoring process is similar to the single call monitoring process. In this embodiment, only a brief introduction is made to the group call process, as follows:

Step 1-2:

Monitoring terminal 1 (UE-DL1) and monitoring terminal 2 (UE-DL2) each initiate a careful monitoring of encrypted call subscription messages for users or groups. After receiving the subscription message, the MCS server performs an authorization check. After the authorization check passes, the local Record the encrypted call subscription monitoring context, and send back the careful monitoring encrypted call subscription success response message to the monitoring terminals UE-DL1 and UE-DL2 respectively.

Step 3-4:

The calling terminal UE-O decides to initiate a voice or video encrypted single call to the group. First, UE-O obtains the GMK, and sends a group call request. For example, SIP invite carries mikey (GMK, group) to the MCS server, and the MCS server receives After the invite message is processed, it is forwarded to the group called terminal UE-Ts, and UE-Ts uses the group secret key to decrypt mikey(GMK, group) to obtain the secret key GMK.

Steps: 5-6:

The MCS server checks the local encrypted call subscription monitoring context, and determines that the monitoring terminals UE-DL1 and UE-DL2 have subscribed to user or group monitoring. The MCS server sends the monitoring terminal key to the group management server. The group management server replies the monitoring terminal key response information to the MCS server. It should be noted that, in this embodiment, for the single call mode, the calling terminal may generate a key for the monitoring terminal to perform the monitoring function. For the group call mode, the group management server may generate a key for the interception terminal to perform the interception function.

After receiving the message, the group management server encrypts the GMK with UE-DL1 and UE-DL2 user information respectively, and sends the message carrying mikey(GMK, UE-DL1) and mikey(GMK, UE-DL2) to the MCS server.

Steps 7-8:

After receiving the GMS monitoring key response message, the MCS server forwards the encryption key mikey (GMK, UE-DL1) to the terminal UE-DL1, and the encryption key mikey (GMK, UE-DL2) to the terminal UE-DL2; the terminal UE -DL1 and UE-DL2 use their own key material to decrypt the mikey information and take out the key GMK.

Steps 9-12:

Terminals UE-Ts each send a call response (including acceptance/rejection/progress) to MCS-Server, such as call signaling SIP: 18X/200, and the MCS server will process it after receiving it, and send a call response to terminal UE-O, such as SIP : 18X/200. After receiving it, the terminal UE-O sends a call second handshake response message to the MCS server, and the MCS server also sends a call second handshake response message to the called terminal of each group member.

Steps 13-16:

The monitoring terminals UE-DL1/UE-DL2 each send a call response (including acceptance/rejection/progress) to the MCS server, such as call signaling SIP: 18X/200, and the MCS server sends a second call handshake response message to the terminal UE-DL1 respectively /UE-DL2.

Steps 17-20:

When the speaking party is speaking (may be UE-O or UE-Ts, this embodiment takes UE-O as an example), the MCS server forwards the SRTP encrypted media to the receiver in the group, and the MCS server also forwards the SRTP encrypted media to the listening terminal For UE-DL1/UE-DL2, after receiving the encrypted media, the monitoring terminal uses GMK to decrypt and play.

In this embodiment, an MCX client authorized by the system can effectively monitor an end-to-end encrypted call, such as a single call between two terminals, or a group call between multiple terminals. In the case of ensuring high security, it can also provide monitoring function to optimize user experience.

Optionally, on the basis of the above embodiment of the data monitoring method, another embodiment of the present invention provides a data monitoring device, which is applied to a server. Referring to FIG. 5, the data monitoring device includes:

An information acquisition module 11, configured to acquire user information of a client subscribed to monitor the target call when the target call is detected;

A data encryption module 12, configured to send the user information to the call control terminal corresponding to the target call, so that the call control terminal encrypts the call key based on the user information to obtain encrypted call key information , and sent to the server;

A data forwarding module 13, configured to receive the call key information, and send the call key information to the client, so that the client decrypts the call key information based on the user information , get the calling key;

A call monitoring module 14, configured to obtain encrypted call content data transmitted during the target call, and send the encrypted call content data to the client, so that the client uses the call The key decrypts the encrypted call content data to obtain the call content data.

Further, it also includes:

A subscription information receiving module, configured to receive an encrypted call subscription monitoring message sent by the client; the encrypted call subscription monitoring message includes a target call identifier;

An authority determining module, configured to determine whether the client has the authority to monitor the target call corresponding to the target call identifier;

A subscription message sending module, configured to send a successful subscription response message to the client if yes, and record the client and the encrypted call subscription monitoring message.

Further, the information acquisition module 11 is specifically used for:

Further, the target call includes a target group call or a target individual call.

It should be noted that, for the specific working process of each module in this embodiment, please refer to the corresponding description in the above embodiment, and details will not be repeated here.

Optionally, on the basis of the above embodiment of the data monitoring method, another embodiment of the present invention provides a data monitoring device, an application client, referring to FIG. 6, the data monitoring device includes:

The decryption module 21 is configured to receive the call key information sent by the server, and decrypt the call key information based on the user information of the client to obtain the call key; the call key information is the When there is a target call, obtain the user information of the client subscribed to listen to the target call, and send the user information to the call control terminal corresponding to the target call, so that the call control terminal can based on the The user information is obtained by encrypting the call key and sending it to the server;

The monitoring module 22 is configured to receive the encrypted call content data transmitted during the target call sent by the server, and use the call key to decrypt the encrypted call content data to obtain the call content data .

Further, it also includes:

The monitoring subscription module is configured to send an encrypted call subscription monitoring message to the server; receive the successful subscription response information sent by the server when it is determined that the client has the right to monitor the target call corresponding to the target call identifier; The encrypted call subscription monitoring message includes the target call identifier.

Further, it also includes:

A request receiving module, configured to receive a user information acquisition request sent by the server when it is determined that the client has the monitoring authority of the target call;

an information sending module, configured to send the user information of the client to the server, so that the server sends the user information of the client to the corresponding The call control terminal encrypts the call key based on the user information to obtain encrypted call key information and sends it to the server.

Optionally, on the basis of the above embodiments of the data monitoring method and device, another embodiment of the present invention provides a data monitoring device, which is characterized in that it includes: a memory and a processor;

Wherein, the memory is used to store programs;

Optionally, on the basis of the embodiments of the above-mentioned data monitoring method, device and data monitoring equipment, another embodiment of the present invention provides a data monitoring system, including a system for executing the above-mentioned data monitoring method applied to a server The server, and the client of the above-mentioned data monitoring method applied to the client.

Optionally, on the basis of the above embodiments of the data monitoring method, device, data monitoring device, and data monitoring system, another embodiment of the present invention provides a storage medium, the storage medium includes a stored program, wherein When the program is running, control the device where the storage medium is located to execute the above data monitoring method.

The above description of the disclosed embodiments is provided to enable any person skilled in the art to make or use the invention. Various modifications to these embodiments will be readily apparent to those skilled in the art, and the general principles defined herein may be implemented in other embodiments without departing from the spirit or scope of the invention. Therefore, the present invention will not be limited to the embodiments shown herein, but is to be accorded the widest scope consistent with the principles and novel features disclosed herein.

Claims

A data monitoring method, characterized in that it is applied to a server, and the data monitoring method includes:

In the case where the target call is monitored, obtain user information of a client subscribed to monitor the target call;

sending the user information to the call control terminal corresponding to the target call, so that the call control terminal encrypts the call key based on the user information to obtain encrypted call key information, and sends it to the server ;

receiving the call key information, and sending the call key information to the client, so that the client decrypts the call key information based on the user information to obtain a call key;

Obtain encrypted call content data transmitted during the target call, and send the encrypted call content data to the client, so that the client uses the call key to encrypt the encrypted The call content data is decrypted to obtain the call content data.
The data monitoring method according to claim 1, wherein, before monitoring that there is a target call, further comprising:

receiving an encrypted call subscription monitoring message sent by the client; the encrypted call subscription monitoring message includes a target call identifier;

Determine whether the client has the authority to monitor the target call corresponding to the target call identifier;

If yes, send a successful subscription response message to the client, and record the client and the encrypted call subscription monitoring message.
The data monitoring method according to claim 1, wherein obtaining user information of a client that subscribes to monitor the target call includes:

Querying the client with the interception authority of the target call, sending a user information acquisition request to the client, and receiving the user information of the client returned by the client.
The data monitoring method according to claim 1, wherein the target call includes a target group call or a target individual call.
A data monitoring method is characterized in that it is applied to a client, and the data monitoring method comprises:

receiving the call key information sent by the server, and decrypting the call key information based on the user information of the client to obtain the call key; the call key information is when the server monitors that there is a target call Next, obtain the user information of the client that subscribes to monitor the target call, and send the user information to the call control terminal corresponding to the target call, so that the call control terminal can configure the call key based on the user information obtained after being encrypted and sent to the server;

receiving the encrypted call content data transmitted during the target call sent by the server, and using the call key to decrypt the encrypted call content data to obtain the call content data.
The data monitoring method according to claim 5, wherein, before the call key information sent by the receiving server, further comprising:

Send an encrypted call subscription monitoring message to the server; the encrypted call subscription monitoring message includes a target call identifier;

Receive the successful subscription response information sent by the server when it is determined that the client has the authority to monitor the target call corresponding to the target call identifier.
The data monitoring method according to claim 5, wherein the data monitoring method further comprises:

receiving the user information acquisition request sent by the server after determining that the client has the interception authority of the target call;

sending the user information of the client to the server, so that the server sends the user information of the client to the call control terminal corresponding to the target call when the server detects that the target call exists, the The call control end encrypts the call key based on the user information to obtain encrypted call key information and sends it to the server.
A data monitoring device is characterized in that it is applied to a server, and the data monitoring device includes:

An information acquisition module, configured to acquire user information of a client subscribed to monitor the target call when the target call is detected;

a data encryption module, configured to send the user information to a call control terminal corresponding to the target call, so that the call control terminal encrypts a call key based on the user information to obtain encrypted call key information, and sent to said server;

a data forwarding module, configured to receive the call key information, and send the call key information to the client, so that the client decrypts the call key information based on the user information, get call key;

A call monitoring module, configured to obtain encrypted call content data transmitted during the target call, and send the encrypted call content data to the client, so that the client uses the call encryption The encryption key is used to decrypt the encrypted call content data to obtain the call content data.
A data monitoring device, characterized in that, as an application client, the data monitoring device includes:

The decryption module is configured to receive the call key information sent by the server, and decrypt the call key information based on the user information of the client to obtain the call key; the call key information is the In the case of a target call, obtain user information of the client subscribed to monitor the target call, and send the user information to a call control terminal corresponding to the target call, so that the call control terminal is based on the user The information is obtained by encrypting the call key and sending it to the server;

The monitoring module is configured to receive the encrypted call content data transmitted during the target call sent by the server, and use the call key to decrypt the encrypted call content data to obtain the call content data.
A data monitoring device, characterized in that it includes: a memory and a processor;

Wherein, the memory is used to store programs;

The processor invokes the program and is used for executing the data monitoring method according to any one of claims 1-4, or executing the data monitoring method according to any one of claims 5-7.
A data monitoring system, characterized in that it includes a server for performing the data monitoring method according to any one of claims 1-4, and a server for performing the data monitoring method according to any one of claims 5-7 method client.
A storage medium, the storage medium includes a stored program, wherein, when the program is running, the device where the storage medium is located is controlled to execute the data monitoring method according to any one of claims 1-4, or, to execute the method as described in any one of claims 1-4 The data monitoring method according to any one of claims 5-7.