CN101646168B - Data encryption method, decryption method and mobile terminal - Google Patents

Abstract

The invention discloses a data encryption method, which includes: acquiring legal operator-related information; using the operator-related information to encrypt and store selected data in a mobile terminal. Correspondingly, the present invention also provides a data decryption method and a mobile terminal using the above two methods. The data encryption method, the decryption method and the mobile terminal provided by the invention enable the mobile terminal to be normally operated only by using the legal SIM card provided by the operator, effectively protecting the rights and interests of the operator.

Description

Data encryption method, decryption method and mobile terminal

technical field

The invention relates to the field of mobile communication applications, in particular to data encryption and decryption methods and a mobile terminal.

Background technique

In order to ensure that only the SIM (Subscriber Identity Module) card issued by the operator can access the operator's network, the operator adopts the SIM Lock technology in the SIM card. The existing SIM Lock method is by reading the current operator information in the IMSI (International Mobile Subscriber Identity, International Mobile Subscriber Identity) in the SIM card, and judging that when the current operator is an operator that meets the conditions, the mobile phone is allowed to operate normally. Use and register the network. If it is judged that the current operator is not a qualified operator, the network cannot be registered.

However, the inventor found in the process of realizing the present invention that: the existing SIM Lock technology is easy to crack by judging the part of the SIM IMSI information and adding a jump statement, thereby making the SIM Lock function invalid. In this way, the rights and interests of the operator cannot be guaranteed.

Contents of the invention

In order to better protect the rights and interests of the operator and ensure that only the legal user identification module provided by the operator can normally operate the mobile terminal, the embodiment of the present invention provides a data encryption method, a decryption method and a mobile terminal.

On the one hand, an embodiment of the present invention provides a data encryption method, the method includes: obtaining legal operator-related information; using the operator-related information to encrypt and store selected data in a mobile terminal; The data is the data that affects the normal display of the operation interface.

Another aspect of the embodiments of the present invention provides a data decryption method, the method includes: obtaining the selected data in the mobile terminal that has been encrypted with legal operator-related information; using the operator-related information in the mobile terminal to decrypt the The encrypted selected data is decrypted; the selected data is data that affects the normal display of the operation interface.

Another aspect of the embodiments of the present invention provides a mobile terminal, including a first obtaining unit, used to obtain legal operator-related information; an encryption unit, used to use the operator-related information to select The data is encrypted and stored; the selected data is data that affects the normal display of the operation interface.

An embodiment of the present invention also provides a mobile terminal, including a storage unit for storing selected data in the mobile terminal that has been encrypted using legal operator-related information; a decryption unit for using the operator-related information in the mobile terminal to Information, to decrypt the encrypted selected data; the selected data is data that affects the normal display of the operation interface.

It can be seen from the above scheme that the embodiment of the present invention manages the selected data of the mobile terminal by using the relevant information of the operator of the legal subscriber identity module as an encryption factor, so that only when the legitimate subscriber identity module is used, the selected data of the mobile terminal The data can be displayed and operated normally. Therefore, the embodiments of the present invention better protect the operator's rights and interests, and save storage resources of the mobile terminal at the same time.

Description of drawings

FIG. 1 is a schematic flow diagram of a data encryption method according to an embodiment of the present invention;

FIG. 2 is a schematic flow diagram of a data decryption method according to Embodiment 2 of the present invention;

3 is a schematic diagram of abnormal display of the terminal interface after data decryption in Embodiment 2 of the present invention;

FIG. 4 is a schematic structural diagram of a mobile terminal according to Embodiment 3 of the present invention;

FIG. 5 is a schematic structural diagram of another mobile terminal according to Embodiment 3 of the present invention;

FIG. 6 is a schematic structural diagram of a mobile terminal according to Embodiment 4 of the present invention;

FIG. 7 is a schematic structural diagram of another mobile terminal according to Embodiment 4 of the present invention.

Detailed ways

The embodiment of the present invention provides a data encryption method, a decryption method, and a mobile terminal, which ensure that only the legal user identification module provided by the operator can operate the mobile terminal normally, and better protect the rights and interests of the operator. The embodiment will be described. .

Fig. 1 is a schematic flow chart of a data encryption method according to an embodiment of the present invention, the method mainly includes,

101. Obtain relevant information about legal operators;

It should be noted that the mobile terminal manufacturer needs to use the encryption in this embodiment for the mobile terminal provided to the user because the operator sometimes wishes to provide the mobile terminal to the user with only the SIM card or other identification module provided by the operator. method, and then deliver the processed mobile terminal to the operator for sale. The "legal operator-related information" here refers to the identity information of the operator that meets the requirements of the operator of the customized mobile terminal. Identity information of other operators of a certain usage agreement.

It can be understood that the legitimate operator-related information can be the International Mobile Subscriber Identity (IMSI) in the SIM card of the subscriber identity module, or other information that can identify the identity of the operator.

102. Using the operator-related information, encrypt and store selected data in the mobile terminal.

Specifically, after obtaining legal operator-related information, the selected data is encrypted using the operator-related information, for example, by using a binary XOR operation to implement encryption, and then the encrypted selected data is stored. The selected data here is the data that affects the normal display of the operation interface of the mobile terminal, for example, it may be the data part in the operating system file except the code, specifically, it may be the graphic data and/or font data of the operation interface.

It should be noted that in this embodiment, after the operator customizes the mobile terminal, the terminal equipment manufacturer uses the legal operator information provided by the operator to encrypt the selected data in the operating system file, and encrypt the encrypted data The operating system and other software are handed over to the manufacturer to be burned in the mobile terminal. The operating system of the encrypted selected data should be stored in the mobile terminal instead of the operating system in the prior art, and only after correct decryption can the original selected data be obtained to realize the normal display of the operating system. If only the graphic data in the operating system is encrypted, the entire operation interface cannot be displayed normally after wrong decryption; if only the font data in the operating system is encrypted, then only normal graphics can be seen after wrong decryption, and all Words cannot be displayed normally; if the graphic data and font data of the operation interface are encrypted at the same time, the entire operation interface cannot be displayed normally after the wrong decryption. In this way, the purpose of controlling the mobile terminal to only select the user identification module allowed by the operator of the customized mobile terminal is achieved.

The data encryption method provided by this embodiment uses the operator-related information of the legal subscriber identity module as an encryption factor to manage the selected data of the mobile terminal, so that only when the legitimate subscriber identity module is used, the selected data of the mobile terminal can be normal Display and operation, so as to achieve the purpose of protecting the legitimate interests of operators.

Optionally, on the basis of Embodiment 1, before encrypting the selected data, it may further include, using a compression algorithm to compress the selected data in the mobile terminal. At this time, step 102 is specifically to perform encryption operation on the selected data compressed by the compression algorithm by using the IMSI.

Since the space occupied by the compressed data is significantly smaller than that before the compression, this embodiment can also save the storage space of the mobile terminal.

Correspondingly, Embodiment 2 of the present invention also provides a method for decrypting data, as shown in FIG. 2 , the premise of this method is that the selected data in the mobile terminal has been encrypted, and its specific implementation process is the same as that of the previous embodiment. I won't repeat them here.

The data decryption method provided in this embodiment includes:

201. Acquire selected data in the mobile terminal that has been encrypted using legal operator-related information.

The subject of execution of this step is the mobile terminal, and the encryption algorithm adopted by the selected data uses legal operator-related information as an encryption factor. The legal operator-related information has the same meaning as that in the previous embodiment. The selected data here is the data that affects the normal display of the operation interface of the mobile terminal, for example, it may be the data part in the operating system file except the code, specifically, it may be the graphic data and/or font data of the operation interface.

202. Decrypt the encrypted selected data by using operator-related information in the mobile terminal.

In this step, the mobile terminal first extracts the relevant information of the local operator of the mobile terminal, and uses it as a decryption factor to perform a decryption operation on the encrypted selected data (for example, a binary XOR operation), so that the selected data can be subsequently operated .

If the selected data is not only encrypted, but also compressed before encryption, after this step 202, it also includes:

203. Use a decompression algorithm to decompress the decrypted data.

Specifically, the process of decrypting and decompressing includes: first, using the relevant information of the local operator of the mobile terminal to perform a decryption operation on the compressed and encrypted selected data, the decryption operation corresponding to the previous embodiment is a binary XOR operation, and then The decrypted data is decompressed, and the decompression algorithm adopted corresponds to the compression algorithm (such as LZSS) of the previous embodiment. If the local carrier-related information of the mobile terminal is the same as the legitimate carrier-related information, the selected data can be decrypted and decompressed normally, otherwise, the selected data cannot be decrypted and decompressed normally.

Optionally, if the selected data is only encrypted, step 204 is also included after step 202; if the selected data is encrypted and compressed, step 204 is also included after step 203. Step 204 is specifically as follows:

204. Read and use the processed selected data.

Since the selected data is data such as pictures or texts that affect the normal display of the operating system of the mobile terminal, the reading and use here are involved in the normal use of the mobile terminal. If the local operator-related information of the mobile terminal is legal and the selected data is only encrypted, then as long as the encryption algorithm corresponds to the decryption algorithm, the selected data after decryption is the same as the original data before encryption. The interface can be displayed and operated normally. If the relevant information of the local operator of the mobile terminal is legal, the selected data is compressed and encrypted at the same time, as long as the encryption algorithm corresponds to the decryption algorithm, and the decompression algorithm corresponds to the compression algorithm, the selected data after decryption and decompression processing is the same as the original The data before processing is the same, and the interface of the mobile terminal can be displayed and operated normally.

If the local operator-related information of the mobile terminal is illegal, even if the encryption algorithm corresponds to the decryption algorithm, and the decompression algorithm corresponds to the compression algorithm, the selected data after decryption and decompression processing cannot be used normally. Graphics data in the system, the entire operation interface cannot be displayed normally after wrong decryption and decompression; if the selected data is font data in the operating system, then only normal graphics can be seen after wrong decryption and decompression, all The text cannot be displayed normally; if the selected data includes the graphic data and font data of the operation interface at the same time, the entire operation interface cannot be displayed normally after the wrong decryption and decompression. When the selected data includes the graphics data of the operating system, the interface of the mobile terminal is displayed as shown in FIG. 3 after being wrongly decrypted.

In the decompression processing method provided by this embodiment, for the selected data encrypted using the operator-related information of the legal user identification module as an encryption factor, the local operator-related information of the mobile terminal is added to decrypt the data, so that only the legal operator Only when relevant information is displayed, the selected data of the mobile terminal can be displayed and operated normally.

In order to implement the previous method, Embodiment 3 and Embodiment 4 of the present invention also provide a mobile terminal adopting the above method.

The mobile terminal provided by Embodiment 3 of the present invention is shown in FIG. 4 . It should be noted that although the encryption method in Embodiment 1 is implemented, generally after the operator customizes the mobile terminal, the terminal equipment manufacturer uses the legal operator information provided by the operator to encrypt the selected data in the operating system file. And hand over the encrypted operating system together with other software to the manufacturer to burn in the mobile terminal. However, this encryption method can also be implemented separately in each terminal. At this time, the mobile terminal includes: a first acquiring unit, configured to acquire legitimate operator-related information; an encryption unit, configured to use the operator-related information to encrypt and store selected data in the mobile terminal.

Optionally, the operator-related information is specifically the International Mobile Subscriber Identity (IMSI) in the SIM card of the Subscriber Identity Module.

Optionally, as shown in FIG. 5 , the mobile terminal further includes a compression unit, configured to compress selected data in the mobile terminal by using a compression algorithm. At this time, the encryption unit is specifically configured to perform an encryption operation on the compressed selected data using the IMSI, and then store it.

The mobile terminal provided by this embodiment uses the operator-related information of the legal subscriber identity module as an encryption factor to manage the selected data of the mobile terminal, so that only when the legitimate subscriber identity module is used, the selected data of the mobile terminal can be displayed normally and operation, so as to achieve the purpose of protecting the legitimate interests of the operator. On the other hand, since the space occupied by the compressed data is significantly smaller than that before the compression, this embodiment can also save the storage space of the mobile terminal.

Embodiment 4 of the present invention provides a mobile terminal, as shown in FIG. 6 , the mobile terminal includes a storage unit for storing selected data in the mobile terminal that has been encrypted using legal operator-related information; a decryption unit for The encrypted selected data is decrypted by using the operator-related information in the mobile terminal.

Preferably, as shown in FIG. 7 , the mobile terminal further includes a decompression unit, configured to use a decompression algorithm to decompress the decrypted data after the decryption unit decrypts the selected data.

Preferably, as shown in FIG. 7 , the mobile terminal further includes an execution unit, configured to read and use the decompressed mobile terminal data.

Preferably, the business-related information is specifically the International Mobile Subscriber Identity (IMSI) in the Subscriber Identity Module SIM card.

Since the selected data is data such as pictures or texts that affect the normal display of the operating system of the mobile terminal, the reading and use here are involved in the normal use of the mobile terminal. If the local operator-related information of the mobile terminal is legal and the selected data is only encrypted, then as long as the encryption algorithm corresponds to the decryption algorithm, the selected data after decryption is the same as the original data before encryption. The interface can be displayed and operated normally. If the relevant information of the local operator of the mobile terminal is legal, the selected data is encrypted and compressed at the same time, as long as the encryption algorithm corresponds to the decryption algorithm, and the decompression algorithm corresponds to the compression algorithm, the selected data after decryption and decompression processing is the same as the original The data before processing is the same, and the interface of the mobile terminal can be displayed and operated normally.

If the local operator-related information of the mobile terminal is illegal, even if the encryption algorithm corresponds to the decryption algorithm, and the decompression algorithm corresponds to the compression algorithm, the selected data after decryption and decompression processing cannot be used normally. Graphics data in the system, the entire operation interface cannot be displayed normally after wrong decryption and decompression; if the selected data is font data in the operating system, then only normal graphics can be seen after wrong decryption and decompression, all The text cannot be displayed normally; if the selected data includes the graphic data and font data of the operation interface at the same time, the entire operation interface cannot be displayed normally after the wrong decryption and decompression. When the selected data includes the graphics data of the operating system, the interface of the mobile terminal is displayed as shown in FIG. 3 after being wrongly decrypted.

For the mobile terminal provided in this embodiment, the operator-related information of the legal user identification module is used as an encryption factor, and the local operator-related information of the mobile terminal is added to perform decryption processing, so that only when the legal operator-related information is used, the selection of the mobile terminal Only certain data can be displayed and operated normally.

The compression method, the decryption method and the corresponding mobile terminal provided by the embodiment of the present invention ensure that only the legal user identification module provided by the operator can operate the mobile terminal normally. The front is smaller, so the effect of saving storage resources is also achieved.

Those of ordinary skill in the art can understand that all or part of the steps in the method of the above-mentioned embodiments can be completed by instructing related hardware through a program, and the program can be stored in a computer-readable storage medium, and the program can be executed during execution When, the implementation steps are the same as the method, the storage medium, such as: ROM/RAM, magnetic disk, optical disk, etc.

The above is the description of the specific embodiments of the present invention, and the method of the present invention can be appropriately improved during the specific implementation process to meet the specific needs of specific situations. Therefore, it can be understood that the specific implementation manners according to the present invention are only exemplary, and are not intended to limit the protection scope of the present invention.

Claims (14)

1. a data ciphering method is characterized in that, this method comprises:

Obtain legal operator's relevant information;

Utilize said operator relevant information, the selected data in the portable terminal is encrypted and stored;

Said selected data is to the influential data of the normal demonstration of operation interface.

2. data ciphering method as claimed in claim 1 is characterized in that, said operator relevant information is specially the international mobile subscriber identity IMSI in the Subscriber Identity Module SIM.

3. data ciphering method as claimed in claim 2 is characterized in that, also comprises before the said encryption, utilizes compression algorithm that the selected data in the portable terminal is compressed;

Said selected data in the portable terminal is encrypted is specially, and utilizes IMSI to carry out cryptographic calculation to utilizing the selected data after compression algorithm is compressed.

4. a data decryption method is characterized in that, comprising:

Obtain the selected data in the portable terminal that utilizes legal operator's relevant information encryption;

Utilize the operator's relevant information in the portable terminal, the selected data of said encryption is deciphered;

Said selected data is to the influential data of the normal demonstration of operation interface.

5. data decryption method as claimed in claim 4 is characterized in that the selected data of said encryption also passes through the compression of compression algorithm;

Said selected data to said encryption also comprises after deciphering, and utilizes decompression algorithm that the data after deciphering are decompressed.

6. data decryption method as claimed in claim 5 is characterized in that, also comprises after the decompression, reads and use the selected data after said decompression is accomplished.

7. like each described data decryption method of claim 4 to 6, it is characterized in that said operator relevant information is specially the international mobile subscriber identity IMSI in the Subscriber Identity Module SIM.

8. a portable terminal is characterized in that, comprising:

First acquiring unit is used to obtain legal operator's relevant information;

Ciphering unit is used to utilize said operator relevant information, and the selected data in the portable terminal is encrypted and stored;

Said selected data is to the influential data of the normal demonstration of operation interface.

9. portable terminal as claimed in claim 8 is characterized in that, said operator relevant information is specially the international mobile subscriber identity IMSI in the Subscriber Identity Module SIM.

10. portable terminal as claimed in claim 9 is characterized in that said portable terminal also comprises, compression unit is used for utilizing compression algorithm that the selected data of portable terminal is compressed;

Said ciphering unit specifically is used for utilizing IMSI to carry out cryptographic calculation to the selected data after the compression, then storage.

11. a portable terminal is characterized in that, comprising:

Memory cell is used for storing the selected data that has utilized the portable terminal that legal operator relevant information encrypts;

Decryption unit is used for utilizing operator's relevant information of portable terminal, and the selected data of said encryption is deciphered;

Said selected data is to the influential data of the normal demonstration of operation interface.

12. portable terminal as claimed in claim 11 is characterized in that, said portable terminal also comprises, decompression unit is used for after decryption unit is deciphered said selected data, utilizes decompression algorithm that the data after deciphering are decompressed.

13. portable terminal as claimed in claim 12 is characterized in that, said portable terminal also comprises, performance element is used to read and use the mobile terminal data after the said decompression.

14., it is characterized in that said operator relevant information is specially the international mobile subscriber identity IMSI in the Subscriber Identity Module SIM like each described portable terminal of claim 11 to 13.

Images