WO2023236972A1

WO2023236972A1 - Communication environment security warning method and apparatus, terminal device, and storage medium

Info

Publication number: WO2023236972A1
Application number: PCT/CN2023/098756
Authority: WO
Inventors: 罗康; 黎明德
Original assignee: 深圳Tcl新技术有限公司
Priority date: 2022-06-09
Filing date: 2023-06-07
Publication date: 2023-12-14
Also published as: CN115174418A

Abstract

Embodiments of the present application disclose a communication environment security warning method and apparatus, an electronic device, and a storage medium. In an embodiment of the present application, current first security method application information of a communication end and second security method application information of a cloud server corresponding to the communication end may be obtained; a communication end security coefficient of the communication end is calculated according to the first security method application information, and/or a cloud server security coefficient of the cloud server is calculated according to the second security method application information; a communication environment security evaluation result of the current communication environment is determined on the basis of at least one among the communication end security coefficient and the cloud server security coefficient; and if the communication environment security evaluation result indicates that the current communication environment is not secure, a communication environment security prompt message is displayed. By means of an embodiment of the present application, a security evaluation can be carried out on a communication environment during a current communication process, and a user can be notified according to an evaluation result, facilitating the user in controlling the degree confidentiality of communicated content during communication.

Description

A communication environment security early warning method, device, terminal equipment and storage medium

This application claims the priority of the Chinese patent application submitted to the China Patent Office on June 9, 2022, with the application number 202210651312.3 and the invention name is "A communication environment security early warning method, device, electronic equipment and storage medium", and its entire content incorporated herein by reference.

Technical field

This application relates to the field of communication technology, and specifically relates to a communication environment security early warning method, device, electronic equipment and storage medium.

Background technique

With the rapid development of current communication technology, people's communication forms are becoming more and more diversified. For example, people can communicate through text, voice, and video through instant messaging applications.

At present, although various communication terminals or communication applications will build security in the communication process, they do not conduct a security assessment of the communication environment and cannot show users the security level of the current communication process.

technical problem

Related technologies will cause users to not understand the security status of communications and be unable to grasp whether the communication content during communications is safe.

Technical solutions

Embodiments of the present application provide a communication environment security early warning method, device, electronic equipment and storage medium, which can conduct a security assessment on the communication environment during the current communication process, and remind the user based on the assessment results, so that the user can control the communication. The degree of privacy of communication content during the process.

The embodiment of the present application provides a communication environment security early warning method, including:

Obtain the current first security method application information of the communication terminal and the second security method application information of the cloud server corresponding to the communication terminal;

Calculate the communication terminal security factor of the communication terminal according to the first security method application information; and/or,

Calculate the cloud server security factor of the cloud server according to the second security method application information; determine the communication environment security assessment of the current communication environment based on at least one of the communication end security factor and the cloud server security factor. result;

If the communication environment security assessment result indicates that the current communication environment is unsafe, a communication environment security prompt message is displayed.

Correspondingly, embodiments of the present application also provide a communication environment security early warning device, including:

An information acquisition unit, configured to acquire the current first security method application information of the communication terminal and the second security method application information of the cloud server corresponding to the communication terminal;

A coefficient calculation unit configured to calculate the communication end security coefficient of the communication end according to the first security method application information; and/or,

Calculate the cloud server security factor of the cloud server according to the second security method application information;

A security assessment unit configured to determine the communication environment security assessment result of the current communication environment based on at least one of the communication end security factor and the cloud server security factor;

A message prompt unit configured to display a communication environment security prompt message if the communication environment security assessment result indicates that the current communication environment is unsafe.

Optionally, the communication environment security early warning device provided by the embodiment of the present application also includes a fusion evaluation unit, configured to determine the communication network corresponding to the communication end in response to the user's operation of initiating communication;

Obtain the third security method application information of the communication network, and calculate the network security coefficient of the communication network based on the third security method application information;

Obtain the current first security method application information of the communication terminal and the current second security method application information of the cloud server;

Calculate the communication terminal security factor of the communication terminal and the cloud server security factor of the cloud server according to the first security method application information and the second security method application information;

Determine the communication environment security assessment result of the current communication environment according to the communication end security factor, the network security factor and the communication receiving end security factor;

Optionally, the coefficient calculation unit is configured to determine unapplied security methods from the security methods applicable to the communication end according to the first security method application information;

Obtain the first security risk value and the first risk utilization value corresponding to the unapplied security method;

Based on the first security risk value and the first risk utilization value, the communication initiating end security factor of the communication end is calculated.

Optionally, the coefficient calculation unit is configured to calculate the risk coefficient corresponding to each of the unapplied security methods at the communication end based on the first security risk value and the first risk utilization value;

Parse the first security method application information to determine the security method applied by the communication end;

Calculate the communication end security factor of the communication end based on the risk coefficient corresponding to the applied security method and each of the unapplied security methods.

Optionally, the communication environment security early warning device provided by the embodiment of the present application also includes a timing assessment unit, configured to calculate the communication environment security assessment result of the current moment and the latest determination of the current communication environment when the communication terminal is in the communication process. The time interval between moments;

When the time interval is greater than the preset detection time interval, perform the steps of obtaining the third security method application information of the communication network, and calculating the network security coefficient of the communication network based on the third security method application information. , until the communication process ends.

Optionally, the communication environment security early warning device provided by the embodiment of the present application also includes a weight acquisition unit for acquiring all The security assessment weights corresponding to the communication terminal, the cloud server and the communication network respectively;

The fusion evaluation unit is configured to perform security evaluation weights based on the communication end security factor, the network security factor, the cloud server security factor, and the security assessment weights corresponding to the communication end, the cloud server, and the communication network, respectively. Calculate the communication environment security assessment value of the current communication environment;

Based on the communication environment security assessment value, the communication environment security assessment result of the current communication environment is determined.

Optionally, the communication environment security early warning device provided by the embodiment of the present application further includes a security level determination unit, configured to determine the communication environment security level of the current communication environment based on the communication environment security assessment result;

The message prompt unit is used to display communication environment security prompt information, where the communication environment security prompt information includes the communication environment security level.

Correspondingly, embodiments of the present application also provide an electronic device, including a memory and a processor; the memory stores application programs, and the processor is used to run the application programs in the memory to execute the tasks provided by the embodiments of the present application. steps in any communication environment security early warning method.

Correspondingly, embodiments of the present application also provide a computer-readable storage medium that stores a plurality of instructions, and the instructions are suitable for loading by the processor to execute any of the instructions provided by the embodiments of the present application. Steps in a communication environment security early warning method.

In addition, embodiments of the present application also provide a computer program product, including a computer program or instructions. When the computer program or instructions are executed by a processor, the steps in any communication environment security early warning method provided by the embodiments of the present application are implemented. .

beneficial effects

Using the solution of the embodiment of the present application, the current first security method application information of the communication end and the second security method application information of the cloud server corresponding to the communication end can be obtained. According to the first security method application information, the The communication end security factor of the communication end, and/or calculating the cloud server security factor of the cloud server based on the second security method application information, based on at least one of the communication end security factor and the cloud server security factor , determine the communication environment security assessment result of the current communication environment. If the communication environment security assessment result indicates that the current communication environment is unsafe, a communication environment security prompt message is displayed; because in the embodiment of the present application, according to the first security of the communication end The method application information and the second security method application information of the cloud server can evaluate the security situation of the communication terminal and/or the cloud server, and display a prompt message when the evaluation result indicates that the communication environment is unsafe, so the current communication process can be Conduct a security assessment of the communication environment, and remind users based on the assessment results so that users can control the privacy of communication content during the communication process.

Description of the drawings

In order to more clearly illustrate the technical solutions in the embodiments of the present application, the drawings needed to be used in the description of the embodiments will be briefly introduced below. Obviously, the drawings in the following description are only some embodiments of the present application. For those skilled in the art, other drawings can also be obtained based on these drawings without exerting creative efforts.

Figure 1 is a schematic scenario diagram of the communication environment security early warning method provided by the embodiment of the present application;

Figure 2 is a flow chart of a communication environment security early warning method provided by an embodiment of the present application;

Figure 3 is a schematic technical flow diagram of the communication environment security early warning method provided by the embodiment of the present application;

Figure 4 is a schematic diagram of the evaluation proportions of different modules in the communication environment provided by the embodiment of the present application;

Figure 5 is a schematic structural diagram of a communication environment security early warning device provided by an embodiment of the present application;

Figure 6 is another structural schematic diagram of the communication environment security early warning device provided by the embodiment of the present application;

FIG. 7 is a schematic structural diagram of an electronic device provided by an embodiment of the present application.

Embodiments of the invention

The technical solutions in the embodiments of the present application will be clearly and completely described below with reference to the accompanying drawings in the embodiments of the present application. Obviously, the described embodiments are only some of the embodiments of the present application, rather than all of the embodiments. Based on the embodiments in this application, all other embodiments obtained by those skilled in the art without making creative efforts fall within the scope of protection of this application.

Embodiments of the present application provide a communication environment security early warning method, device, electronic equipment and computer-readable storage medium. Specifically, embodiments of the present application provide a communication environment security early warning method suitable for a communication environment security early warning device. The communication environment security early warning device can be integrated in electronic equipment.

The electronic device may be a terminal or other equipment, including but not limited to mobile terminals and fixed terminals. For example, mobile terminals include but are not limited to smartphones, smart watches, tablets, laptops, smart vehicles, etc., wherein fixed terminals include but are not limited to Desktop computers, smart TVs, etc.

The electronic device can also be a server or other equipment. The server can be an independent physical server, or a server cluster or distributed system composed of multiple physical servers. It can also provide cloud services, cloud databases, cloud computing, and cloud functions. , cloud storage, network services, cloud communications, middleware services, domain name services, security services, CDN (Content Delivery Network, content distribution network), and cloud servers for basic cloud computing services such as big data and artificial intelligence platforms, but not Limited to this.

The communication environment security early warning method in the embodiment of the present application can be implemented by the server, or can be implemented by the terminal and the server together.

The method will be described below by taking the terminal and the server to jointly implement the communication environment security early warning method as an example.

As shown in Figure 1, the communication environment security early warning system provided by the embodiment of the present application includes a terminal 10 and a server 20; the terminal 10 and the server 20 are connected through a network, such as a wired or wireless network connection, where the terminal 10 It can exist as a communication initiator for users to initiate communication and conduct communication.

The terminal 10 may be a communication initiator used by the user for communication, and is used to send the current first security method application information to the server 20 .

The server 20 may be used to obtain the current first security method application information of the communication end and the second security method application information of the cloud server corresponding to the communication end, and calculate the communication of the communication end based on the first security method application information. end security factor, and/or calculate the cloud server security factor of the cloud server based on the second security method application information, and determine the current security factor based on at least one of the communication end security factor and the cloud server security factor. The communication environment security assessment result of the communication environment. If the communication environment security assessment result indicates that the current communication environment is unsafe, a communication environment security prompt message is sent to the terminal 10 .

The terminal 10 may display a communication environment security prompt message.

It can be understood that the steps of communication environment security assessment performed by the server 20 can also be performed by the terminal 10, which is not limited in the embodiment of the present application.

Each is explained in detail below. It should be noted that the order of description of the following embodiments does not limit the preferred order of the embodiments.

The embodiments of this application will be described from the perspective of a communication environment security early warning device. The communication environment security early warning device may be integrated in a server or a terminal.

As shown in Figure 2, the specific process of the communication environment security early warning method in this embodiment can be as follows:

201. Obtain the current first security method application information of the communication terminal and the second security method application information of the cloud server corresponding to the communication terminal.

Among them, the communication terminal is the terminal used by the user for communication. Specifically, the communication end may include a communication initiating end used by the communication initiating user to initiate communication, and a communication receiving end used by the communication receiving user to receive communication. For example, the communication initiating end and the communication receiving end can be smartphones, smart watches, computers, etc. used by users.

The first security method application information may indicate the application of the security method corresponding to the communication initiating end and/or the communication receiving end. For example, the first security method application information may include information related to the applied security method, such as method name, preset method serial number, etc. Alternatively, the first security method application information may include information related to unapplied security methods, etc.

Specifically, the time to obtain the first security method application information may be the time when the communication application is detected to be started, that is, if the communication application is detected to be started, the current first security method of the communication initiating end and/or the communication receiving end where the communication application is located is obtained. Application information.

Alternatively, it can also be the moment when the user initiates communication, that is, step 201 can include:

In response to a user-initiated communication operation, generate a communication environment security assessment request;

Based on the communication environment security assessment request, the current initiating end security method application information of the communication initiating end is obtained as the current first security method application information of the communication end.

Alternatively, it may also be the moment when the user initiates communication, that is, step 201 may include:

In response to the user's operation of accepting the communication, generate a communication environment security assessment request;

Based on the communication environment security assessment request, the current receiving end security method application information of the communication receiving end is obtained as the current first security method application information of the communication end.

In some optional examples, after obtaining the security method application information of the initiating end and the security method application information of the receiving end respectively, the information can be fused, and the fusion result can be used as the current first security method application information of the communication end.

Specifically, the information fusion method can be addition or weighted calculation, etc. If the weighted calculation method is used, the corresponding weights of the communication initiator and the communication receiver can be calculated by technicians according to actual needs. The embodiments of this application are This is not limited.

It can be understood that the electronic device that obtains the application information of the first security method may be a terminal, that is to say, it may be The communication initiating end and/or the communication receiving end collect the first security method application information themselves, or it can also be obtained by the server. Specifically, the server may be configured to receive the first security method application information sent by the communication initiating end and/or the communication receiving end.

In actual applications, if users use cloud communication methods, such as remote meetings, video calls, etc., the security assessment of the cloud server during the cloud communication process can also be carried out. At this time, the step "obtaining the second security method application information of the cloud server corresponding to the communication terminal" may specifically include:

In response to the user initiating a cloud communication operation, determine the cloud server corresponding to the communication end;

Obtain the second security method application information of the cloud server.

202. Calculate the communication end security factor of the communication end based on the first security method application information; and/or calculate the cloud server security factor of the cloud server based on the second security method application information.

Among them, the communication end security factor can be used to indicate the security level of the communication end. Specifically, if the first security method application information is obtained only based on the initiating end security method application information of the communication initiating end, the communication end security coefficient can be used to represent the security level of the communication initiating end; if the first security method application information is only obtained based on the communication receiving end's If the first security method application information is obtained based on the initiating end security method application information and the receiving end security method application information, then the communication end security factor can be used to represent the security level of the communication receiving end. The coefficient can be used to indicate the security level of the communication initiator and communication receiver;

In some optional examples, you can determine the degree of danger that may exist if these security methods are not applied, and the degree to which the risks that may exist may be maliciously exploited by determining which security methods are currently available but not applied at the communication end. . That is to say, the step "calculate the communication initiating end security factor of the communication end based on the first security method application information" may specifically include:

According to the first security method application information, determine an unapplied security method from the security methods applicable to the communication terminal;

Based on the first security risk value and the first risk utilization value, a communication terminal security factor of the communication terminal is calculated.

In the actual application process, there can be at least one security method that can be applied by the communication end. For example, the security methods that can be applied by the communication end can include but are not limited to integrity check, local storage encryption, system patching, inability to connect without password/ Weak network etc.

There may be at least one unapplied security method. It is understandable that if different security methods are not applied, the risks they bring to the communication end are generally different.

In the embodiment of this application, the first security risk value of each security method can be used to describe the possible risk impact if the corresponding security method is applied, and the first risk utilization value of each security method can be used to describe The ease of use of the risks that may arise if the corresponding security method is applied.

Specifically, when calculating the safety factor of the communication end, the first security risk value and the first risk utilization value of each unapplied security method can be directly integrated to calculate the risk brought by each unapplied security method, and this risk can be used as the communication end. Safety factor.

Alternatively, the safety impact of the applied safety methods can be added to the calculation of the safety factor. That is, the step "calculate the communication terminal security factor of the communication terminal based on the first security risk value and the first risk utilization value" includes:

Based on the first security risk value and the first risk utilization value, calculate the risk coefficient corresponding to each of the unapplied security methods at the communication end;

For example, the risk caused by not applying a certain safety method can be expressed by a risk coefficient, risk coefficient R=D*E, 0<=D<=1, 0<=E<=1. Among them, D is the first risk utilization value of the security method, and E is the first security risk value of the security method.

In some optional embodiments, when calculating the security factor, the calculation can be directly based on the number of applied security methods, for example, the security factor of the communication initiator N represents the number of applied security methods on the communication side, and n represents the number of unapplied security methods.

In some other optional embodiments, the security impact value of each applied security method may be determined, and based on the security impact value of the applied security method and the risk coefficient corresponding to each of the unapplied security methods, the calculated Describe the communication end security factor of the communication end.

The calculation method of the security factor of the cloud server is similar to the calculation method of the security factor of the communication sending end, which will not be described in detail in the embodiments of this application.

Specifically, applicable security methods for cloud servers can include but are not limited to system patches, installing and opening firewalls, closing unnecessary services and ports, regular backups, monitoring system logs, local storage encryption, identity authentication, access control, etc. .

203. Based on at least one of the communication end security factor and the cloud server security factor, determine the communication environment security assessment result of the current communication environment.

In the embodiment of the present application, when the communication end security factor is greater than the preset security threshold, the communication environment security assessment result of the current communication environment can be determined to be the communication environment safety; when the communication end security factor is not greater than the preset security threshold, It is determined that the communication environment security assessment result of the current communication environment is that the communication environment is unsafe.

204. If the communication environment security assessment result indicates that the current communication environment is unsafe, display a communication environment security prompt message.

The communication environment security prompt message may only include content indicating that the current communication environment is unsafe, or the communication environment security prompt message may also include a selection control for the user to choose whether to continue using the communication application or whether to continue communicating, etc.

In some optional embodiments, as shown in Figure 3, when the user chooses to communicate, the communication receiving end and the communication network between the communication initiating end and the communication receiving end can be determined according to the communication initiating operation of the communication initiating user. communication The network also conducts communication security assessment to facilitate users to understand the security of the overall communication environment. That is to say, after the step "display communication environment security prompt message", the communication environment security early warning method provided by the embodiment of the present application may also include:

In response to the user's operation of initiating communication, determine the communication network corresponding to the communication terminal;

Determine the communication environment security assessment result of the current communication environment according to the communication end security factor, the network security factor and the cloud server security factor;

The calculation method of the network security factor is similar to the calculation method of the communication sending end security factor, which will not be described in detail in the embodiments of this application.

Specifically, applicable security methods of the communication network may include but are not limited to secure network protocols, transmission content encryption, PKI encryption, and so on. The applicable security methods of the communication receiving end may be the same as or different from those of the communication initiating end, and this is not limited in the embodiments of the present application.

Correspondingly, the step "determine the communication environment security assessment result of the current communication environment based on at least one of the communication terminal security factor and the cloud server security factor" may specifically include:

The communication environment security assessment result of the current communication environment is determined according to the communication end security factor, the cloud server security factor and the network security factor.

Specifically, the current communication environment can be determined when any one of the communication initiating end security factor, the cloud server security factor, the network security factor and the communication receiving end security factor is not greater than a preset security threshold. The communication environment security assessment result is unsafe.

Or, as shown in Figure 4, before the step "determine the communication environment security assessment result of the current communication environment based on the communication end security factor, the network security factor and the cloud server security factor", the embodiment of the present application provides Communication environment security early warning methods can also include:

Obtain the security assessment weights corresponding to the communication terminal, the cloud server and the communication network respectively;

The step "determine the communication environment security assessment result of the current communication environment based on the communication end security factor, the network security factor and the cloud server security factor" includes:

Calculate the communication environment security of the current communication environment based on the communication end security factor, the network security factor, the cloud server security factor and the security assessment weights corresponding to the communication end, the cloud server and the communication network respectively. The assessed value;

For example, let the security assessment weight of the communication end (communication initiator and communication receiver) be P1 and the security coefficient be C1; let the security assessment weight of the cloud server be P2 and the security coefficient be C2; let the security assessment weight ratio of the communication network be is P3 and the safety factor is C3. Then the communication environment security assessment value S can be calculated by the following formula:

S＝P1*C1+P2*C2+P3*C3

For example, the entire communication system can be divided into three parts. Among them, the cloud computer room (cloud server), as the core of this system, is not only related to the normal progress of video calls, but also affects the privacy content security of video calls and cloud security. The security assessment weight for the assessment can be 45%.

The communication network (IP network) serves as the link between the cloud and users to transmit data. If security measures are not taken, it may lead to the risk of the video call content being monitored. The weight of the security assessment for network security assessment can be 35%.

If there are security issues such as vulnerabilities in the terminal systems of the communication initiator and the communication receiving end (user), it may also cause the risk of video call content and other communication content being stolen. The security assessment weight ratio for evaluating terminal security can be 30%.

In some embodiments, the communication environment security early warning method provided by the embodiments of the present application may also include:

When the communication terminal is in the communication process, calculate the time interval between the current moment and the latest moment when the communication environment security assessment result of the current communication environment is determined;

That is to say, if the user continues to communicate, the safety factor calculation of each part of the communication system can be repeated regularly, the communication environment security of the current communication environment can be evaluated, and the user can be reminded of the communication security situation in real time until the call is ended.

In some optional embodiments, in order to facilitate the user to understand the specific security level of the current communication environment, corresponding security levels can be divided according to the communication environment security assessment results. Before the step "display the communication environment security prompt message", the embodiment of the present application provides Communication environment security early warning methods can also include:

Determine the communication environment security level of the current communication environment according to the communication environment security assessment result;

Correspondingly, the step "Display communication environment security prompt message" may specifically include:

Display communication environment security prompt information, where the communication environment security prompt information includes the communication environment security level.

It can be seen from the above that the embodiment of the present application can obtain the current first security method application information of the communication initiator, and calculate the communication initiator security factor of the communication initiator based on the first security method application information. The safety factor determines the communication environment security assessment result of the current communication environment. If the communication environment security assessment result indicates that the current communication environment is unsafe, a communication environment security prompt message is displayed; because in the embodiment of the present application, according to the communication initiating end The first security method applies information to evaluate the security situation of the communication initiator, and displays a prompt message when the evaluation result indicates that the communication environment is unsafe. Therefore, the security of the communication environment during the current communication process can be evaluated. According to the evaluation result Remind users so that they can control the privacy of communication content during the communication process.

In order to better implement the above method, correspondingly, embodiments of the present application also provide a communication environment security early warning device.

Referring to Figure 5, the device includes:

The information acquisition unit 501 is used to obtain the current first security method application information of the communication terminal and the second security method application information of the cloud server corresponding to the communication terminal;

Coefficient calculation unit 502, configured to calculate the communication terminal security coefficient of the communication terminal according to the first security method application information; and/or,

The security assessment unit 503 is configured to determine the communication environment security assessment result of the current communication environment based on at least one of the communication end security factor and the cloud server security factor;

The message prompt unit 504 is configured to display a communication environment security prompt message if the communication environment security assessment result indicates that the current communication environment is unsafe.

Optionally, the communication environment security early warning device provided by the embodiment of the present application also includes a fusion evaluation unit 505, configured to determine the communication network corresponding to the communication end in response to the user's operation of initiating communication;

Optionally, the coefficient calculation unit 502 is configured to determine unapplied security methods from the security methods applicable to the communication end according to the first security method application information;

Optionally, the coefficient calculation unit 502 is configured to calculate the risk coefficient corresponding to each of the unapplied security methods at the communication end based on the first security risk value and the first risk utilization value;

Optionally, the communication environment security early warning device provided by the embodiment of the present application also includes a timing evaluation unit 506 for When the communication terminal is in the communication process, calculate the time interval between the current moment and the latest moment when the communication environment security assessment result of the current communication environment is determined;

Optionally, as shown in Figure 6, the communication environment security early warning device provided by the embodiment of the present application also includes a weight acquisition unit 507, which is used to obtain the security assessments corresponding to the communication terminal, the cloud server, and the communication network. Weights;

The fusion evaluation unit 505 is configured to perform security evaluation weights based on the communication end security factor, the network security factor, the cloud server security factor, and the security assessment weights corresponding to the communication end, the cloud server, and the communication network. , calculate the communication environment security assessment value of the current communication environment;

Optionally, the communication environment security early warning device provided by the embodiment of the present application also includes a security level determination unit 508, configured to determine the communication environment security level of the current communication environment based on the communication environment security assessment result;

It can be seen from the above that through the communication environment security early warning device, the current first security method application information of the communication end and the second security method application information of the cloud server corresponding to the communication end can be obtained. According to the first security method application information, Calculate the communication end security factor of the communication end, and/or calculate the cloud server security factor of the cloud server based on the second security method application information, based on the communication end security factor and the cloud server security factor. At least one method is to determine the communication environment security assessment result of the current communication environment. If the communication environment security assessment result indicates that the current communication environment is unsafe, display a communication environment security prompt message; because in the embodiment of the present application, according to the communication end The first security method application information and the second security method application information of the cloud server can evaluate the security situation of the communication terminal and/or the cloud server, and display a prompt message when the evaluation result indicates that the communication environment is unsafe, so the current The communication environment during the communication process is evaluated for security, and the user is reminded based on the evaluation results so that the user can control the privacy of the communication content during the communication process.

In addition, the embodiment of the present application also provides an electronic device, which may be a terminal or a server, etc., as shown in Figure 7, which shows a schematic structural diagram of the electronic device involved in the embodiment of the present application. Specifically, :

The electronic device may include a radio frequency (RF, Radio Frequency) circuit 701, a memory 702 including one or more computer-readable storage media, an input unit 703, a display unit 704, a sensor 705, an audio circuit 706, a wireless fidelity (WiFi) , Wireless Fidelity) module 707, including a processor 708 with one or more processing cores, a power supply 709 and other components. Those skilled in the art can understand that the structure of the electronic device shown in FIG. 7 does not constitute a limitation of the electronic device, and may include more or fewer components than shown in the figure, or combine certain components, or arrange different components. in:

The RF circuit 701 can be used to receive and send signals during sending and receiving information or during calls. In particular, it can be used to transmit and receive signals from the base station. After the uplink information is received, it is handed over to one or more processors 708 for processing; in addition, uplink-related data is sent to the base station. Typically, the RF circuit 701 includes, but is not limited to, an antenna, at least one amplifier, a tuner, one or more oscillators, a Subscriber Identity Module (SIM) card, a transceiver, a coupler, a low noise amplifier (LNA, Low Noise Amplifier), duplexer, etc. In addition, RF circuit 701 can also communicate with networks and other devices through wireless communications. Wireless communication can use any communication standard or protocol, including but not limited to Global System of Mobile communication (GSM, Global System of Mobile communication), General Packet Radio Service (GPRS, General Packet Radio Service), Code Division Multiple Access (CDMA, Code Division Multiple Access), Wideband Code Division Multiple Access (WCDMA), Long Term Evolution (LTE), email, Short Messaging Service (SMS), etc.

The memory 702 can be used to store software programs and modules. The processor 708 executes various functional applications and data processing by running the software programs and modules stored in the memory 702 . The memory 702 may mainly include a storage program area and a storage data area, wherein the storage program area may store an operating system, an application program required for at least one function (such as a sound playback function, an image playback function, etc.), etc.; the storage data area may store a program based on Data created by the use of electronic devices (such as audio data, phone books, etc.), etc. In addition, memory 702 may include high-speed random access memory, and may also include non-volatile memory, such as at least one magnetic disk storage device, flash memory device, or other volatile solid-state storage device. Accordingly, the memory 702 may also include a memory controller to provide the processor 708 and the input unit 703 with access to the memory 702 .

The input unit 703 may be used to receive input numeric or character information, and to generate keyboard, mouse, joystick, optical or trackball signal input related to user settings and function control. Specifically, in a specific embodiment, the input unit 703 may include a touch-sensitive surface as well as other input devices. A touch-sensitive surface, also known as a touch display or trackpad, can collect the user's touch operations on or near it (such as the user using a finger, stylus, or any suitable object or accessory on or near the touch-sensitive surface). operations near the surface), and drive the corresponding connection device according to the preset program. Optionally, the touch-sensitive surface may include two parts: a touch detection device and a touch controller. Among them, the touch detection device detects the user's touch orientation, detects the signal brought by the touch operation, and transmits the signal to the touch controller; the touch controller receives the touch information from the touch detection device, converts it into contact point coordinates, and then sends it to the touch controller. to the processor 708, and can receive commands sent by the processor 708 and execute them. In addition, touch-sensitive surfaces can be implemented using a variety of types including resistive, capacitive, infrared, and surface acoustic waves. In addition to touch-sensitive surfaces, the input unit 703 may also include other input devices. Specifically, other input devices may include, but are not limited to, one or more of a physical keyboard, function keys (such as volume control keys, switch keys, etc.), trackball, mouse, joystick, etc.

The display unit 704 may be used to display information input by the user or information provided to the user as well as various graphical user interfaces of the electronic device. These graphical user interfaces may be composed of graphics, text, icons, videos, and any combination thereof. The display unit 704 may include a display panel, which may optionally be configured in the form of a liquid crystal display (LCD), an organic light-emitting diode (OLED), or the like. Further, the touch-sensitive surface can cover the display panel, and when the touch-sensitive surface detects a touch operation on or near it, the information is sent to the processor. 708 to determine the type of touch event, and then the processor 708 provides corresponding visual output on the display panel according to the type of touch event. Although in FIG. 7 , the touch-sensitive surface and the display panel are used as two independent components to implement the input and input functions, in some embodiments, the touch-sensitive surface and the display panel can be integrated to implement the input and output functions.

The electronic device may also include at least one sensor 705, such as a light sensor, a motion sensor, and other sensors. Specifically, the light sensor may include an ambient light sensor and a proximity sensor. The ambient light sensor may adjust the brightness of the display panel according to the brightness of the ambient light. The proximity sensor may close the display panel and/or when the electronic device moves to the ear. Backlight. As a kind of motion sensor, the gravity acceleration sensor can detect the magnitude of acceleration in various directions (usually three axes). It can detect the magnitude and direction of gravity when stationary. It can be used to identify applications of mobile phone posture (such as horizontal and vertical screen switching, related Games, magnetometer attitude calibration), vibration recognition related functions (such as pedometer, knock), etc.; as for other sensors such as gyroscopes, barometers, hygrometers, thermometers, infrared sensors, etc. that can also be configured in electronic devices, they are not mentioned here. Again.

The audio circuit 706, speaker, and microphone can provide an audio interface between the user and the electronic device. The audio circuit 706 can transmit the electrical signal converted from the received audio data to the speaker, which converts it into a sound signal and outputs it; on the other hand, the microphone converts the collected sound signal into an electrical signal, which is received and converted by the audio circuit 706 The audio data is processed by the audio data output processor 708 and then sent to, for example, another electronic device through the RF circuit 701, or the audio data is output to the memory 702 for further processing. Audio circuitry 706 may also include an earphone jack to provide communication between peripheral earphones and electronic devices.

WiFi is a short-distance wireless transmission technology. Electronic devices can help users send and receive emails, browse web pages, and access streaming media through the WiFi module 707. It provides users with wireless broadband Internet access. Although FIG. 7 shows the WiFi module 707, it can be understood that it is not a necessary component of the electronic device and can be omitted as needed without changing the essence of the invention.

The processor 708 is the control center of the electronic device, using various interfaces and lines to connect various parts of the entire mobile phone, by running or executing software programs and/or modules stored in the memory 702, and calling data stored in the memory 702, Perform various functions of electronic devices and process data. Optionally, the processor 708 may include one or more processing cores; preferably, the processor 708 may integrate an application processor and a modem processor, where the application processor mainly processes the operating system, user interface, application programs, etc. , the modem processor mainly handles wireless communications. It can be understood that the above-mentioned modem processor may not be integrated into the processor 708.

The electronic device also includes a power supply 709 (such as a battery) that supplies power to various components. Preferably, the power supply can be logically connected to the processor 708 through a power management system, so that functions such as charging, discharging, and power consumption management can be implemented through the power management system. Power supply 709 may also include one or more DC or AC power supplies, recharging systems, power failure detection circuits, power converters or inverters, power status indicators, and other arbitrary components.

Although not shown, the electronic device may also include a camera, a Bluetooth module, etc., which will not be described again here. Specifically in this embodiment, the processor 708 in the electronic device will load the executable files corresponding to the processes of one or more application programs into the memory 702 according to the following instructions, and the processor 708 will run the executable files stored in Applications in memory 702 program to achieve various functions, as follows:

Those of ordinary skill in the art can understand that all or part of the steps in the various methods of the above embodiments can be completed by instructions, or by controlling relevant hardware through instructions. The instructions can be stored in a computer-readable storage medium, and loaded and executed by the processor.

To this end, embodiments of the present application provide a computer-readable storage medium in which a plurality of instructions are stored, and the instructions can be loaded by the processor to execute any of the communication environment security early warning methods provided by the embodiments of the present application. A step of. For example, this command can perform the following steps:

For the specific implementation of each of the above operations, please refer to the previous embodiments and will not be described again here.

Among them, the computer-readable storage medium may include: read-only memory (ROM, Read Only Memory), random access memory (RAM, Random Access Memory), magnetic disk or optical disk, etc.

Since the instructions stored in the computer-readable storage medium can execute the steps in any communication environment security early warning method provided by the embodiments of the present application, therefore, any communication environment provided by the embodiments of the present application can be implemented. The beneficial effects that can be achieved by the security early warning method are detailed in the previous embodiments and will not be described again here.

According to one aspect of the present application, a computer program product or computer program is also provided. The computer program product or computer program includes computer instructions, and the computer instructions are stored in a computer-readable storage medium. The processor of the electronic device reads the computer instructions from the computer-readable storage medium, and the processor executes the computer instructions, so that the electronic device performs the methods provided in various optional implementations in the above embodiments.

The above is a communication environment security early warning method, device, electronic device and storage medium provided by the embodiments of the present application. The nature of the present application is introduced in detail. Specific examples are used in this article to illustrate the principles and implementation methods of the present application. The description of the above embodiments is only used to help understand the method of the present application and its core ideas; at the same time, for the technology in this field According to the ideas of this application, there will be changes in the specific implementation mode and application scope. In summary, the content of this description should not be understood as a limitation of this application.

Claims

A communication environment security early warning method, which is characterized by including:

Obtain the current first security method application information of the communication terminal and the second security method application information of the cloud server corresponding to the communication terminal;

Calculate the communication terminal security factor of the communication terminal according to the first security method application information; and/or,

Calculate the cloud server security factor of the cloud server according to the second security method application information;

Based on at least one of the communication end security factor and the cloud server security factor, determine the communication environment security assessment result of the current communication environment;

If the communication environment security assessment result indicates that the current communication environment is unsafe, a communication environment security prompt message is displayed.
The communication environment security early warning method according to claim 1, characterized in that after the communication environment security prompt message is displayed, the method further includes:

In response to the user's operation of initiating communication, determine the communication network corresponding to the communication terminal;

Obtain the third security method application information of the communication network, and calculate the network security coefficient of the communication network based on the third security method application information;

Obtain the current first security method application information of the communication terminal and the current second security method application information of the cloud server;

Calculate the communication terminal security factor of the communication terminal and the cloud server security factor of the cloud server according to the first security method application information and the second security method application information;

Determine the communication environment security assessment result of the current communication environment according to the communication end security factor, the network security factor and the cloud server security factor;

If the communication environment security assessment result indicates that the current communication environment is unsafe, a communication environment security prompt message is displayed.
The communication environment security early warning method according to any one of claims 1-2, characterized in that, calculating the communication terminal security factor of the communication terminal according to the first security method application information includes:

According to the first security method application information, determine an unapplied security method from the security methods applicable to the communication end;

Obtain the first security risk value and the first risk utilization value corresponding to the unapplied security method;

Based on the first security risk value and the first risk utilization value, a communication terminal security factor of the communication terminal is calculated.
The communication environment security early warning method according to claim 3, wherein calculating the communication end security factor of the communication end based on the first security risk value and the first risk utilization value includes:

Based on the first security risk value and the first risk utilization value, calculate the risk coefficient corresponding to each of the unapplied security methods at the communication end;

Parse the first security method application information to determine the security method applied by the communication end;

Calculate the communication end security factor of the communication end based on the risk coefficient corresponding to the applied security method and each of the unapplied security methods.
The communication environment security early warning method according to claim 4, characterized in that the communication initiating end security factor Among them, R represents the risk coefficient, N represents the number of applied security methods at the communication end, and n represents the number of unapplied security methods.
The communication environment security early warning method according to claim 4, characterized in that the risk coefficient R=D*E, 0<=D<=1, 0<=E<=1, where D is the value of the security method The first risk utilization value, E is the first security risk value of the security method.
The communication environment security early warning method according to claim 3, wherein calculating the communication end security factor of the communication end based on the first security risk value and the first risk utilization value includes:

Based on the first security risk value and the first risk utilization value, calculate the risk coefficient corresponding to each of the unapplied security methods at the communication end;

Parse the first security method application information to determine the security method applied by the communication end;

Determine the security impact value of each described applied security method;

The communication end security factor of the communication end is calculated based on the security impact value of the applied security method and the risk coefficient corresponding to each of the unapplied security methods.
The communication environment security early warning method according to claim 2, characterized in that the method further includes:

When the communication terminal is in the communication process, calculate the time interval between the current moment and the latest moment when the communication environment security assessment result of the current communication environment is determined;;

When the time interval is greater than the preset detection time interval, perform the steps of obtaining the third security method application information of the communication network, and calculating the network security coefficient of the communication network based on the third security method application information. , until the communication process ends.
The communication environment security early warning method according to claim 2, characterized in that: according to the communication end security Before determining the communication environment security assessment result of the current communication environment, the method further includes:

Obtain the security assessment weights corresponding to the communication terminal, the cloud server and the communication network respectively;

Determining the communication environment security assessment result of the current communication environment based on the communication terminal security factor, the network security factor and the cloud server security factor includes:

Calculate the communication environment security of the current communication environment based on the communication end security factor, the network security factor, the cloud server security factor and the security assessment weights corresponding to the communication end, the cloud server and the communication network respectively. The assessed value;

Based on the communication environment security assessment value, the communication environment security assessment result of the current communication environment is determined.
The communication environment security early warning method according to claim 1, characterized in that said obtaining the current first security method application information of the communication end includes:

If it is detected that the communication application is started, obtain the current first security method application information of the communication initiating end and/or the communication receiving end where the communication application is located; or,

In response to a user-initiated communication operation, generate a communication environment security assessment request;

Based on the communication environment security assessment request, obtain the current initiating end security method application information of the communication initiating end as the current first security method application information of the communication end; or,

In response to the user's operation of accepting the communication, generate a communication environment security assessment request;

Based on the communication environment security assessment request, the current receiving end security method application information of the communication receiving end is obtained as the current first security method application information of the communication end.
The communication environment security early warning method according to claim 1, characterized in that before obtaining the second security method application information of the cloud server corresponding to the communication end, the method further includes:

In response to the user initiating a cloud communication operation, determine the cloud server corresponding to the communication end;

Obtain the second security method application information of the cloud server.
The communication environment security early warning method according to any one of claims 1 to 9, characterized in that before displaying the communication environment security prompt message, the method further includes:

Determine the communication environment security level of the current communication environment according to the communication environment security assessment result;

The displayed communication environment security prompt message includes:

Display communication environment security prompt information, where the communication environment security prompt information includes the communication environment security level.
The communication environment security early warning method according to any one of claims 1-12, characterized in that the At least one of the communication terminal security factor and the cloud server security factor determines the communication environment security assessment result of the current communication environment, including:

When the communication end security factor is greater than the preset security threshold, the communication environment security assessment result of the current communication environment is determined to be the communication environment safety.
The communication environment security early warning method according to any one of claims 1 to 12, characterized in that the communication of the current communication environment is determined based on at least one of the communication terminal security factor and the cloud server security factor. Environmental safety assessment results, including:

When the security factor of the communication end is not greater than the preset security threshold, it is determined that the communication environment security assessment result of the current communication environment is that the communication environment is unsafe.
A communication environment security early warning device, which is characterized by including:

An information acquisition unit, configured to acquire the current first security method application information of the communication terminal and the second security method application information of the cloud server corresponding to the communication terminal;

A coefficient calculation unit configured to calculate the communication end security coefficient of the communication end according to the first security method application information; and/or,

Calculate the cloud server security factor of the cloud server according to the second security method application information;

A security assessment unit configured to determine the communication environment security assessment result of the current communication environment based on at least one of the communication end security factor and the cloud server security factor;

A message prompt unit configured to display a communication environment security prompt message if the communication environment security assessment result indicates that the current communication environment is unsafe.
The communication environment security early warning device according to claim 15, characterized in that the device further includes a fusion evaluation unit configured to determine the communication network corresponding to the communication end in response to a user's operation of initiating communication;

Obtain the third security method application information of the communication network, and calculate the network security coefficient of the communication network based on the third security method application information;

Obtain the current first security method application information of the communication terminal and the current second security method application information of the cloud server;

Calculate the communication terminal security factor of the communication terminal and the cloud server security factor of the cloud server according to the first security method application information and the second security method application information;

Determine the communication environment security assessment result of the current communication environment according to the communication end security factor, the network security factor and the communication receiving end security factor;

If the communication environment security assessment result indicates that the current communication environment is unsafe, a communication environment security prompt message is displayed.
The communication environment security early warning device according to any one of claims 15-16, characterized in that the coefficient calculation unit is used to obtain the applicable security method from the communication end according to the first security method application information. identify unapplied security methods;

Obtain the first security risk value and the first risk utilization value corresponding to the unapplied security method;

Based on the first security risk value and the first risk utilization value, the communication initiating end security factor of the communication end is calculated.
An electronic device, characterized in that it includes a memory and a processor; the memory stores an application program, and the processor is used to run the application program in the memory to execute the method described in any one of claims 1 to 14 Steps in the communication environment security early warning method.
A computer-readable storage medium, characterized in that the computer-readable storage medium stores a plurality of instructions, and the instructions are suitable for loading by a processor to execute the communication environment described in any one of claims 1 to 14 Steps in the security alert approach.
A computer program product, including a computer program or instructions, characterized in that when the computer program or instructions are executed by a processor, the steps of the communication environment security early warning method according to any one of claims 1 to 14 are implemented.