CN104301886A - A short message reading method and system, terminal, and wearable device - Google Patents

Abstract

The invention discloses a short message reading method and system, a terminal and a wearable device. The method applied to the terminal side comprises the steps that the terminal randomly produces a secret key to encrypt a short message after receiving the short message; the terminal sends the secret key and authentication information of the wearable device bound with the terminal to the wearable device to be authenticated; the terminal receives an authentication success message returned by the wearable device, wherein the message carries with the secret key; the terminal decrypts the short message according to the secret key and displays the short message for a user. According to the short message reading method and system, the terminal and the wearable device, the wearable device is utilized to conduct secondary authentication on the short message received by the terminal, and accordingly the risk that the short message is obtained by a non-terminal user is avoided.

Description

A short message reading method and system, terminal, and wearable device

technical field

The present invention relates to the communication field, in particular to a short message reading method and system, a terminal, and a wearable device.

Background technique

Short message service is welcomed by the majority of users for its simple and convenient editing method and wide range of use, and is also adopted by other third-party applications, such as push text messages and notification text messages of some websites. For example, the booking notification of 12306 is also sent by SMS. While the short message service is widely used, the privacy and security of the short message also need to be guaranteed.

Take the SMS verification code as an example. The SMS verification is a certificate for the enterprise to the consumer (user), and the identity is verified through the verification code of the SMS content. At present, it is widely used in major online transaction systems (such as online banking, fast payment, etc.), as well as security-related verifications such as website registration and password retrieval.

The current verification code verification method is that the user fills in his mobile phone number, clicks "Get Verification Code", the website or third-party application generates a SMS verification code according to the rules, and sends the user's mobile phone number and verification code content through the SMS verification interface Go to the verification code SMS platform, and the verification code SMS platform will submit the verification code to the corresponding operator after a series of judgments (account balance, whether the content is compliant, whether the mobile phone number is compliant, and the operator to which the mobile phone number belongs) server, and the operator sends a text message with the verification code to the user's mobile phone.

After the mobile phone receives the text message of the verification code, it is displayed in plain text in front of the mobile phone user, lacking further user identity verification. In the whole system, the mobile phone number becomes the only verification of the user's identity. Although many systems provide other identity verification processes (such as entering passwords, reserved information, etc.) after entering the verification code, if other illegal users understand the information, the risk of being stolen cannot be avoided. Moreover, many systems have the function of retrieving the password through the verification code, which makes the verification code higher than other passwords. When the user's mobile phone is lost, stolen or the SIM card number is stolen, criminals can obtain the relevant verification code through the SIM card. However, operations such as verification and unbinding of various accounts of users will damage the interests of users. At present, it is only possible to report the loss of the mobile phone number in time so that the lost SIM card cannot receive the verification code, but this kind of situation cannot be avoided before the loss is reported, and the risk of the mobile phone verification code being obtained by non-end users cannot be avoided, and there is no guarantee The security of various user accounts during verification code verification.

Contents of the invention

The technical problem to be solved by the present invention is to provide a short message reading method, system, terminal, and wearable device, so as to avoid the risk of short messages being acquired by non-terminal users and protect the interests of users from being damaged.

In order to solve the above technical problems, the present invention provides a short message reading method, which is applied to the terminal side, including:

After receiving the SMS, the terminal randomly generates a key to encrypt the SMS;

The terminal sends the key and the authentication information of the wearable device bound to the terminal to the wearable device for authentication;

The terminal receives an authentication success message returned by the wearable device, and the message carries the key;

The terminal decrypts the short message according to the key, and displays it to the user.

Further, before the terminal receives the short message, the method also includes:

After the terminal is paired with the wearable device through near field communication, it acquires authentication information of the wearable device and binds it with the wearable device; the authentication information includes: the device number of the wearable device.

Further, the short message is a verification code short message sent by a third-party platform; the validity period of the key is greater than the validity period of the verification code short message; the method also includes:

After the terminal receives the short message, it is judged whether the short message is a verification code short message sent by the third-party platform, and if so, a key is randomly generated to encrypt the verification code short message.

In order to solve the above technical problems, the present invention also provides a short message reading method, which is applied to the wearable device side, including:

The wearable device receives the key and the authentication information of the wearable device sent by the terminal;

The wearable device authenticates the terminal according to the authentication information, and returns the key to the terminal after passing the authentication.

Further, before the wearable device receives the key sent by the terminal and the authentication information of the wearable device, the method further includes:

After the wearable device is paired with the terminal through near field communication, it sends the authentication information of the wearable device to the terminal, and binds with the terminal.

Further, the authentication information includes: the device number of the wearable device; the wearable device authenticates the terminal according to the authentication information, including:

The wearable device judges whether the device number of the wearable device matches the local device number, and if yes, the authentication passes, otherwise the authentication fails.

In order to solve the above technical problems, the present invention also provides a terminal, including:

The first receiving module is used to receive short messages and send them to the encryption module;

An encryption module, configured to randomly generate a key to encrypt the short message after the receiving module receives the short message;

An authentication module, configured to send the key and the authentication information of the wearable device bound to the terminal to the wearable device for authentication;

The second receiving module is configured to receive a successful authentication message returned by the wearable device, the message carrying a key;

A decryption module, configured to decrypt the short message according to the key carried in the successful authentication message returned by the wearable device, and display it to the user.

Further, it also includes:

The binding module is used to perform near-field communication pairing with the wearable device before the receiving module receives the short message, obtain the authentication information of the wearable device, and bind with the wearable device; the authentication The information includes: the device number of the wearable device.

Further, the short message is a verification code short message sent by a third-party platform; the validity period of the key is greater than the validity period of the verification code short message;

The encryption module is also used to judge whether the short message is a verification code short message sent by the third-party platform after the receiving module receives the short message, and if so, randomly generate a key to verify the short message Code SMS encryption.

In order to solve the above technical problems, the present invention also provides a wearable device, including:

The receiving module is used to receive the key sent by the terminal and the authentication information of the wearable device;

an authentication module, configured to authenticate the terminal according to the authentication information;

The sending module is used to return the key to the terminal after the authentication is passed.

Further, it also includes:

A binding module, configured to send the authentication of the wearable device to the terminal after performing near-field communication pairing with the terminal before the receiving module receives the key and the authentication information of the wearable device sent by the terminal information, bound to the terminal.

Further, the authentication information includes: the device number of the wearable device;

The authentication module is configured to authenticate the terminal according to the authentication information, including:

It is judged whether the device number of the wearable device can match the local device number, if yes, the authentication is passed, otherwise the authentication is not passed.

In order to solve the above technical problems, the present invention also provides a text message reading system, including: the above-mentioned terminal and the above-mentioned wearable device.

Compared with the prior art, the text message reading method and system, terminal, and wearable device provided by the present invention utilize the interactivity between the wearable device and the terminal to enable data transmission between the wearable device and the terminal, and the wearable device can The SMS received by the terminal is verified twice, so as to avoid the risk of SMS being obtained by non-terminal users, for example, to improve the security of various accounts of users when verifying the verification code, and to protect the interests of users from damage.

Description of drawings

Fig. 1 is the flow chart of the short message reading method applied to the terminal side in the embodiment;

Fig. 2 is the flow chart of the text message reading method applied to the wearable device side in the embodiment;

Fig. 3 is a structural diagram of a terminal in an embodiment;

Fig. 4 is a structural diagram of the wearable device in the embodiment.

Detailed ways

In order to make the purpose, technical solution and advantages of the present invention more clear, the embodiments of the present invention will be described in detail below in conjunction with the accompanying drawings. It should be noted that, in the case of no conflict, the embodiments in the present application and the features in the embodiments can be combined arbitrarily with each other.

Example:

As shown in Figure 1, this embodiment provides a method for reading short messages, which is applied to the terminal side and includes the following steps:

S101: After receiving the short message, the terminal randomly generates a key to encrypt the short message;

Preferably, the short message may be a verification code short message sent by a third-party platform. Whenever a short message is received, a key is generated, and the previous key is overwritten and becomes invalid.

Wherein, as a preferred manner, an encrypted inbox can be set at the terminal, the short message is put into the encrypted inbox, the encrypted box is encrypted with the key, and the encrypted box is also decrypted during decryption, so that Users are able to read text messages in encrypted inboxes.

Wherein, before the terminal receives the short message, the method also includes:

After the terminal is paired with the wearable device through near-field communication, the authentication information of the wearable device is obtained, and the authentication information includes: the device number of the wearable device, and/or sending a message to the wearable device Send a preset encryption algorithm. At this time, the terminal is bound to the wearable device. Binding means that the terminal only allows the wearable device to authenticate it. Even if other wearable devices receive the terminal The authentication information sent cannot be authenticated. If the user wants to select another wearable device for authentication, he needs to unbind the bound wearable device first.

The near field communication may be Bluetooth communication, NFC communication and so on. Both the terminal and the wearable device are equipped with a bluetooth communication device, which can be paired through bluetooth and then perform data transmission. Wearable devices can be smart bracelets, smart necklaces, smart key fobs, smart watches, and more.

After encrypting the text message, the user cannot directly read the text message. If there is no bound wearable device, for example, if it is not the user himself, or the terminal is lost, the person using the terminal cannot directly read the text message. SMS security.

S102: Send the key and the authentication information of the wearable device bound to the terminal to the wearable device for authentication;

Among them, before step S102, because it is near-field communication, a wearable device bound to the terminal must enter the transmission range of the terminal. For example, a smart watch is carried by the user, and general terminals such as mobile phone users are using When using smart watches, the transmission range with the smart watch must be within the range allowed by near-field communication. For example, through Bluetooth communication, Bluetooth pairing must be performed first, and then authentication information and keys should be sent to the bound wearable device. A terminal can only be bound to one wearable device, that is, through one wearable device for authentication, but a wearable device can be bound to one or more terminals, that is, a wearable device can provide authentication services for multiple terminals.

Wherein, as a preferred manner, a preset encryption algorithm can be used to encrypt the key and the authentication information of the wearable device bound to the terminal, and send the encrypted ciphertext to the wearable device. The device is authenticated.

After receiving the encrypted ciphertext, the wearable device needs to first decrypt it according to a preset encryption algorithm, and then perform authentication.

Of course, the key and authentication information can also be directly sent to the wearable device for authentication without encryption, and the security of encryption is higher.

S103: The terminal receives an authentication success message returned by the wearable device, the message carrying the key;

S104: The terminal decrypts the short message according to the key, and displays it to the user.

Wherein, as a preferred manner, the short message is a verification code short message sent by a third-party platform; the validity period of the key is greater than the validity period of the verification code short message;

The method also includes:

After the terminal receives the short message, it is judged whether the short message is a verification code short message sent by the third-party platform, and if so, a key is randomly generated to encrypt the verification code short message.

Among them, the identification method of the verification code SMS is: to identify according to the number and content of the SMS. Generally, the number of the third-party platform is different from the ordinary number. The code is 4-6 consecutive numbers and the content of the SMS contains "verification". If the number and content of the SMS have the above characteristics, it will be considered as a verification code SMS.

If no paired and bound wearable device enters the transmission range of the terminal within the validity period of the key, the verification code will be invalidated and automatically deleted.

In this embodiment, the user can only read the verification code text message in the following two cases: one is to decrypt the encrypted verification code text message after receiving the key returned by the wearable device, and the other case is the key Expiration is invalid, but the setting in this embodiment is that under normal circumstances, the validity period of the verification code text message is shorter than the key validity period, so when the key expires in this embodiment, the verification code text message will also expire. In this way, the verification code The short message becomes invalid and cannot be used for user account transactions such as online banking, etc. Then, the user needs to obtain the verification code short message again from the third-party platform, and then repeat steps S101-S104.

In this embodiment, the terminal and the wearable device transmit data by means of near field communication.

As shown in Figure 2, this embodiment provides a short message reading method, applied to the wearable device side, including the following steps:

S201: The wearable device receives the key and the authentication information of the wearable device sent by the terminal;

Wherein, before step S201 also includes:

After the wearable device is paired with the terminal through near-field communication, send the authentication information of the wearable device to the terminal, and/or obtain a preset encryption algorithm from the terminal, and bind it to the terminal .

A terminal can only be bound to one wearable device, that is, authentication is performed through one wearable device, but a wearable device can be bound to one or more terminals, that is, a wearable device can provide authentication services for multiple terminals.

The near field communication may be Bluetooth communication, NFC communication and so on. Both the terminal and the wearable device are equipped with a bluetooth communication device, which can be paired through bluetooth and then perform data transmission. Wearable devices can be bracelets, necklaces, smart watches, and more. The authentication information of the wearable device includes: a device number of the wearable device.

S202: The wearable device authenticates the terminal according to the authentication information, and returns the key to the terminal after passing the authentication.

Wherein, the wearable device authenticates the terminal according to the authentication information, including:

The wearable device judges whether the device number of the wearable device matches the local device number, and if yes, the authentication passes, otherwise the authentication fails.

Wherein, if the key sent by the terminal and the authentication information of the wearable device received in step S201 are encrypted ciphertext;

Then in step S201, after the wearable device receives the key sent by the terminal and the authentication information of the wearable device, the method further includes:

The encrypted ciphertext is decrypted according to the preset encryption algorithm to obtain the key and the authentication information of the wearable device.

In this embodiment, the terminal and the wearable device transmit data by means of near field communication.

As shown in Figure 3, this embodiment provides a terminal, including:

The first receiving module is used to receive the short message and send it to the encryption module;

An encryption module, configured to randomly generate a key to encrypt the short message after the receiving module receives the short message;

An authentication module, configured to send the key and the authentication information of the wearable device bound to the terminal to the wearable device for authentication;

The second receiving module is configured to receive a successful authentication message returned by the wearable device, the message carrying the key;

A decryption module, configured to decrypt the short message according to the key carried in the successful authentication message returned by the wearable device, and display it to the user.

Wherein, as a preferred manner, the terminal of this embodiment further includes:

The binding module is used to perform near-field communication pairing with the wearable device before the receiving module receives the short message, obtain the authentication information of the wearable device, and/or send preset information to the wearable device The encryption algorithm is bound to the wearable device; the authentication information includes: the device number of the wearable device.

Wherein, the authentication module is configured to send the key and the authentication information of the wearable device bound to the terminal to the wearable device for authentication, including:

Using a preset encryption algorithm to encrypt the key and the authentication information of the wearable device bound to the terminal, and send the encrypted ciphertext to the wearable device for authentication.

As a preferred manner, the short message is a verification code short message sent by a third-party platform; the validity period of the key is greater than the validity period of the verification code short message;

The encryption module is also used to judge whether the short message is a verification code short message sent by the third-party platform after the receiving module receives the short message, and if so, randomly generate a key to verify the short message Code SMS encryption.

As shown in Figure 4, this embodiment provides a wearable device, including:

The receiving module is used to receive the key sent by the terminal and the authentication information of the wearable device;

an authentication module, configured to authenticate the terminal according to the authentication information;

The sending module is used to return the key to the terminal after the authentication is passed.

Wherein, as a preferred manner, the terminal of this embodiment further includes:

A binding module, configured to send the authentication of the wearable device to the terminal after performing near-field communication pairing with the terminal before the receiving module receives the key and the authentication information of the wearable device sent by the terminal information, and/or obtain a preset encryption algorithm from the terminal, and bind to the terminal.

As a preferred manner, the key sent by the terminal and the authentication information of the wearable device received by the wearable device are encrypted ciphertexts;

The receiving module is further configured to decrypt the encrypted ciphertext according to the preset encryption algorithm after the wearable device receives the key sent by the terminal and the authentication information of the wearable device, to obtain the Key and authentication information of the wearable device.

Wherein, the authentication information includes: the device number of the wearable device;

The authentication module is configured to authenticate the terminal according to the authentication information, including:

It is judged whether the device number of the wearable device can match the local device number, if yes, the authentication is passed, otherwise the authentication is not passed.

In addition, this embodiment also provides a short message reading system, including: the above-mentioned terminal and the above-mentioned wearable device.

It can be seen from the above embodiments that, compared with the prior art, the short message reading method, system, terminal, and wearable device provided in the above embodiments utilize the interactivity between the wearable device and the terminal to enable For data transmission, the wearable device can perform secondary verification on the SMS received by the terminal, so as to avoid the risk of SMS being obtained, for example, to improve the security of various accounts of the user when verifying the verification code, and to protect the interests of the user from damage .

With the rise of wearable devices, more and more people have wearable devices such as smart bracelets and smart watches in addition to mobile phones. Compared with mobile phones, wearable devices are more likely to be lost or stolen than mobile phones due to the close-fitting characteristics of wearable devices. The interaction between the wearable device and the mobile phone enables data transmission between the wearable device and the mobile phone. The verification code received by the mobile phone is verified twice through the wearable device, which can avoid the risk of obtaining the verification code of the mobile phone and improve the security of the user's various accounts when verifying the verification code.

Those skilled in the art can understand that all or part of the steps in the above method can be completed by instructing relevant hardware through a program, and the program can be stored in a computer-readable storage medium, such as a read-only memory, a magnetic disk or an optical disk, and the like. Optionally, all or part of the steps in the foregoing embodiments may also be implemented using one or more integrated circuits. Correspondingly, each module/unit in the foregoing embodiments may be implemented in the form of hardware, or may be implemented in the form of software function modules. The present invention is not limited to any specific combination of hardware and software.

The above descriptions are only preferred embodiments of the present invention, and are not intended to limit the protection scope of the present invention. According to the content of the present invention, there can also be other various embodiments. Those skilled in the art can make various corresponding changes and deformations according to the present invention without departing from the spirit and essence of the present invention. Within the spirit and principles of the present invention, any modifications, equivalent replacements, improvements, etc., shall be included within the protection scope of the present invention.

Claims (13)

1. a note read method, is applied to end side, comprising:

After terminal receives note, random generation one key, to this SMS encryption;

Described terminal is by described key and be sent to described wearable device with the authentication information of the wearable device of described terminal binding and carry out certification;

Described terminal receives the message of the authentication success that described wearable device returns, and carries described key in described message;

Described terminal is note deciphering according to described double secret key, and is shown to user.

2. the method for claim 1, is characterized in that:

Before terminal receives note, described method also comprises:

After described terminal and described wearable device carry out near-field communication pairing, obtain the authentication information of described wearable device, bind with described wearable device; Described authentication information comprises: the device number of described wearable device.

3. the method for claim 1, is characterized in that:

Described note is the identifying code note that third-party platform sends; The term of validity of described key is greater than the term of validity of described identifying code note; Described method also comprises:

After described terminal receives note, judge whether described note is the identifying code note that described third-party platform sends, and if so, then produces a key at random, to this identifying code SMS encryption.

4. a note read method, is applied to wearable device side, comprises:

Wearable device receives the key of terminal transmission and the authentication information of wearable device;

Described wearable device carries out certification according to described authentication information to described terminal, after certification is passed through, described key is back to terminal.

5. method as claimed in claim 4, is characterized in that:

Before described wearable device receives the key of terminal transmission and the authentication information of wearable device, described method also comprises:

After described wearable device and described terminal carry out near-field communication pairing, send the authentication information of described wearable device to described terminal, with described terminal binding.

6. method as claimed in claim 4, is characterized in that:

Described authentication information comprises: the device number of described wearable device; Described wearable device carries out certification according to described authentication information to described terminal, comprising:

Described wearable device judges whether the device number of described wearable device can match with local equipment number, and if so, then certification is passed through, otherwise certification is not passed through.

7. a terminal, comprising:

First receiver module, for receiving note and being sent to encrypting module;

Encrypting module, for after described receiver module receives described note, random generation one key, to this SMS encryption;

Authentication module, for by described key be sent to described wearable device with the authentication information of the wearable device of described terminal binding and carry out certification;

Second receiver module, for receiving the message of the authentication success that wearable device returns, carries described key in described message;

Deciphering module, for note deciphering described in the described double secret key that carries in the message of authentication success that returns according to described wearable device, and is shown to user.

8. terminal as claimed in claim 7, is characterized in that: also comprise:

Binding module, before receiving note at described receiver module, carries out near-field communication pairing with described wearable device, obtains the authentication information of described wearable device, bind with described wearable device; Described authentication information comprises: the device number of described wearable device.

9. terminal as claimed in claim 7, is characterized in that:

Described note is the identifying code note that third-party platform sends; The term of validity of described key is greater than the term of validity of described identifying code note;

Described encrypting module, also for after described receiver module receives described note, judges whether described note is the identifying code note that described third-party platform sends, and if so, then produces a key at random, to this identifying code SMS encryption.

10. a wearable device, comprising:

Receiver module, the key sent for receiving terminal and the authentication information of wearable device;

Authentication module, for carrying out certification according to described authentication information to described terminal;

Sending module, for after certification is passed through, is back to terminal by described key.

11. wearable devices as claimed in claim 10, is characterized in that: also comprise:

Binding module, for receive at described receiver module terminal send key and wearable device authentication information before, after carrying out near-field communication pairing with described terminal, send the authentication information of described wearable device to described terminal, with described terminal binding.

12. wearable devices as claimed in claim 10, is characterized in that:

Described authentication information comprises: the device number of described wearable device;

Described authentication module, for carrying out certification according to described authentication information to described terminal, comprising:

Judge whether the device number of described wearable device can match with local equipment number, and if so, then certification is passed through, otherwise certification is not passed through.

13. 1 kinds of note reading systems, comprising: the terminal as described in claim 7 ~ 9 and the wearable device as described in claim 10 ~ 12.