CN102811146B - Method and device for detecting message processing environment - Google Patents

Abstract

The invention discloses a method and a device for detecting a message processing environment. The method comprises the following steps: (1) acquiring the current process information of a client; (2) judging whether the current running process of the client is safe or not according to the current process information, if so, carrying out the step (4); otherwise, carrying out the step (3); (3) determining whether there is potential safety risk in the message processing environment of the client; (4) judging whether the system information of the client stored in the device is the same as the system information received from the client, if so, carrying out the step (5); otherwise, carrying out the step (3); and (5) determining whether there is no safety risk in the message processing environment. According to the method and device for detecting the message processing environment, by judging the system information and the current processing information of the client, whether there is potential safety risk in the message processing environment of the client can be determined, and therefore, the safety of the message processing environment of the client is improved.

Description

A method and device for detecting message processing environment

technical field

The invention relates to the field of information security, in particular to a method and device for detecting message processing environment.

Background technique

With the popularization of e-commerce, online banking is playing an increasingly important role in daily life. Banks are gradually opening up online banking systems. The functions of online banking systems include not only account information inquiries, transfer payments, but also loan , investment, etc.

In the online banking system, the user's identity authentication usually relies on the encryption mechanism based on the RSA public key cryptosystem, the digital signature mechanism and the multiple guarantees of the user login password. The online banking server checks the user's digital signature and login password, and the user's identity can only be confirmed after passing the check. The unique identity of the user is a digital certificate issued by the bank, and the user's login password is transmitted in cipher text, which ensures the safety and reliability of identity authentication.

In the process of realizing the present invention, the inventor finds that the prior art has at least the following defects:

When the user's client is infected with a Trojan horse program, after the Trojan horse program runs, it can intercept and monitor the system and the online banking password window opened by the user when surfing the Internet. When the user enters the card number or password in the online banking program, the code of the relevant information will be stolen, seriously threatening the security of the online banking system.

Contents of the invention

The invention provides a method and device for detecting the message processing environment, so as to improve the security of the message processing environment of the client.

The invention provides a method for detecting message processing environment, comprising the following steps:

①. Obtain the current process information of the client;

②. According to the current process information, it is judged whether the process currently running on the client is safe, and if it is safe, then execute step ④; otherwise, execute step ③;

③. It is determined that there is a security risk in the message processing environment of the client;

④. Judging whether the system information of the client stored by itself is the same as the system information received from the client, if they are the same, execute step ⑤; otherwise, execute step ③;

⑤. Determine that there is no security risk in the message processing environment of the client.

The present invention also provides a method for detecting message processing environment, comprising the following steps:

①. Obtain the system information of the client;

②. Judging whether the system information of the client stored by itself is the same as the obtained system information of the client, and if they are the same, execute step ④; otherwise, execute step ③;

③. It is determined that there is a security risk in the message processing environment of the client;

④. According to the obtained current process information of the client, it is judged whether the process currently running by the client is safe, and if it is safe, then execute step ⑤; otherwise, execute step ③;

⑤. Determine that there is no security risk in the message processing environment of the client.

The present invention also provides a device for detecting message processing environment, including:

The storage module is used to store the system information of the client;

An acquisition module, configured to acquire current process information and system information of the client from the client;

A first judging module, configured to judge whether the process currently running on the client is safe according to the current process information;

A second judgment module, configured to judge whether the system information of the client in the storage module is the same as the system information obtained by the acquisition module from the client;

A determining module, configured to determine that there is a security risk in the message processing environment of the client when the judgment result of the first judgment module is unsafe, and/or, when the judgment result of the second judgment module is different; When the judgment result of the first judgment module is safe, and the judgment result of the second judgment module is the same, it is determined that there is no security risk in the message processing environment of the client.

In the technical solution provided by the present invention, by judging the system information and current process information of the client, it is determined whether there is a potential safety hazard in the message processing environment of the client, thereby improving the security of the message processing environment of the client.

Description of drawings

FIG. 1 is a flowchart of a method for detecting a message processing environment provided by Embodiment 1 of the present invention;

FIG. 2 is a flowchart of a method for detecting a message processing environment provided by Embodiment 2 of the present invention;

FIG. 3 is a flowchart of a method for detecting a message processing environment provided by Embodiment 3 of the present invention;

FIG. 4 is a structural diagram of a device for detecting a message processing environment in Embodiment 4 of the present invention;

FIG. 5 is a structural diagram of a device for detecting a message processing environment in Embodiment 5 of the present invention.

Detailed ways

The following will clearly and completely describe the technical solutions in the embodiments of the present invention with reference to the accompanying drawings in the embodiments of the present invention. Obviously, the described embodiments are only some, not all, embodiments of the present invention. Based on the embodiments of the present invention, all other embodiments obtained by persons of ordinary skill in the art without making creative efforts belong to the protection scope of the present invention.

Embodiment 1 of the present invention provides a method for detecting a message processing environment, which is applied to a network system including a server and a client. The client stores controls downloaded from the server; the server stores system information of the client, and the system information can be Including one or more of CPU (Central Processing Unit, central processing unit) type, motherboard model, operating system name, user name, and IP (Internet Protocol, Internet Protocol) address. The above method for detecting message processing environment includes the following steps:

Step 101, the client obtains its own system information and current process information, generates a data packet containing the system information and current process information, and sends the data packet and the message to be processed to the server.

Specifically, the client can run the control downloaded from the server, and collect the system information and current process information of the client through the control, wherein the system information can include CPU (Central Processing Unit, central processing unit) type, motherboard model, operating system name, user name and One or more of IP (Internet Protocol, Internet Protocol) addresses.

For example, the system information can be Pentium(R) Dual-Core (CPU type), P9X79PRO (mainboard model), MicrosoftWindowsXPProfessional (operating system name), user (user name) and 192.0.0.1 (IP address).

Step 102, the server judges whether the source IP address of the data packet received from the client is included in the preset IP address list, if included in the preset IP address list, then execute step 103; otherwise, execute step 106.

Among them, the preset IP address list can determine the safe IP address range for the server, for example, 192.0.0.1---192.255.0.1, when the source IP address of the data packet received by the server is 192.0.0.5, the server can Determine that the source IP address is included in the preset IP address list; when the source IP address of the data packet received by the server is 192.255.0.5, the server can determine that the source IP address is not included in the preset IP address list , there is a security risk in the packet processing environment of the client.

In step 103, the server judges whether the system information of the client stored by itself is the same as the system information included in the data packet received from the client, and if they are the same, execute step 104; otherwise, execute step 106.

In step 104, the server judges whether the current running process of the client is safe according to the current process information contained in the data packet received from the client, and if it is safe, executes step 105; otherwise, executes step 106.

Specifically, the server may preset a first process list, and the first process list includes processes with security risks. After the server receives the data packet from the client, it can judge whether the process in the first process list exists in the process currently running on the client according to the current process information contained in the data packet, and if so, determine the process currently running on the client Unsafe; if absent, it is determined that the client's current running process is safe.

For example, the first process list preset by the server includes process A, process B, process C and process D; when the current process information contained in the data packet received by the server is process E, process F and process G, the server It can be determined that the process in the first process list does not exist in the process currently running on the client, and then determine that the process currently running on the client is safe; when the current process information contained in the data packet received by the server is D process, E process and F process, the server can determine that the process in the first process list exists in the process currently running on the client, and then determine that the process currently running on the client is unsafe.

The server may preset a second process list, and the second process list includes processes that do not pose security risks. After the server receives the data packet from the client, it can judge whether there is a process other than the second process list in the process currently running on the client according to the current process information contained in the data packet, and if it exists, determine the current running process of the client. The process is not safe; if not present, the process that the client is currently running is determined to be safe.

For example, the second process list preset by the server includes a process, b process, c process and d process; when the current process information contained in the data packet received by the server is a process and c process, the server can determine that the client There is no process other than the second process list in the process currently running on the client, and then it is determined that the process currently running on the client is safe; when the current process information contained in the data packet received by the server is process a, process b and e process, the server may determine that there is a process outside the second process list in the process currently running on the client, and then determine that the process currently running on the client is unsafe.

Step 105, the server processes the message to be processed from the client.

Specifically, when the server judges that the process currently running by the client is safe, the server can determine that there is no security risk in the message processing environment of the client, and process the received message to be processed.

Step 106, the server sends an identity verification request to the client, and the identity verification request includes a random character string.

Step 107, the client forwards the random character string received from the server to the smart key device.

Step 108, the smart key device uses the private key in the preset asymmetric key pair to sign the random character string, and sends the obtained digital signature and the account information corresponding to the asymmetric key pair to the client.

Step 109, the client sends the received digital signature and account information to the server.

Step 110, the server obtains the public key of the corresponding asymmetric key pair according to the received account information, and uses the public key to decrypt the received digital signature to obtain a random character string.

Specifically, the server may query the database according to the received account information, and obtain the public key in the asymmetric key pair corresponding to the account information from the database.

Step 111 , the server judges whether the decrypted random character string is the same as the random character string sent to the client, and if they are the same, execute step 112 ; otherwise, execute step 113 .

Step 112, the server sends verification success information to the client, and processes the message to be processed from the client.

Specifically, when the random character string decrypted by the server is the same as the random character string sent to the client, the server can determine that there is no security risk in the message processing environment of the client, send verification success information to the client, and The message is processed.

In step 113, the server sends verification failure information to the client, prompting that there is a security risk in the message processing environment of the client.

Specifically, when the random character string decrypted by the server is different from the random character string sent to the client, the server can determine that there is a security risk in the message processing environment of the client, and send a verification failure message to the client, prompting the message processing environment of the client There are security risks.

In the technical solution provided by the embodiment of the present invention, by judging the system information and current process information of the client, it is determined whether there is a security risk in the message processing environment of the client, and when there is a security risk in the message processing environment of the client, the client The terminal is verified, which improves the security of the message processing environment of the client.

In Embodiment 1 of the present invention, the server first judges whether the system information of the client stored by itself is the same as the system information received from the client, and then judges whether the current running process of the client is safe according to the current process information received from the client; In Embodiment 2 of the present invention, the server may also judge whether the process currently running by the client is safe according to the current process information received from the client, and then judge whether the system information of the client stored by itself is the same as the system information received from the client. In addition, after the server determines that there is no security risk in the message processing environment of the client, it can prompt the client to send pending messages, receive pending messages from the client, and process the received pending messages. The specific process is as follows: As shown in Figure 2, it includes the following steps:

Step 201, the client obtains its own system information and current process information, and sends the system information and current process information to the server.

Specifically, the client can run the control downloaded from the server, and collect the system information and current process information of the client through the control, wherein the system information can include CPU (Central Processing Unit, central processing unit) type, motherboard model, operating system name, user name and One or more of IP (Internet Protocol, Internet Protocol) addresses.

In step 202, the server judges whether the current running process of the client is safe according to the current process information received from the client, and if it is safe, executes step 203; otherwise, executes step 205.

It should be noted that in this step, the specific operation of the server judging whether the process currently running by the client is safe according to the current process information received from the client may be the same as step 104 in Embodiment 1 of the present invention.

In step 203, the server judges whether the system information of the client stored by itself is the same as the system information received from the client, and if they are the same, execute step 204; otherwise, execute step 205.

In step 204, the server prompts the client to send the message to be processed, receives the message to be processed from the client, and processes the message to be processed.

When the server judges that the process currently running on the client is safe, the server can determine that there is no security risk in the message processing environment of the client. text is processed.

Step 205, the server sends an identity verification request to the client, and the identity verification request includes a random character string.

Step 206, the client forwards the random character string received from the server to the smart key device.

Step 207, the smart key device uses the preset symmetric key to process the random character string to obtain HMAC (keyed-HashMessageAuthenticationCode, key-related hash operation message authentication code) information, and the HMAC information and the corresponding symmetric key The account information is sent to the server.

Step 208, the server obtains the corresponding symmetric key according to the received account information, and uses the symmetric key to process the random character string sent to the client to obtain HMAC information.

Specifically, the server may query the database according to the received account information, and acquire the symmetric key corresponding to the account information from the database.

In step 209, the server judges whether the processed HMAC information is the same as the HMAC information received from the client, and if they are the same, execute step 210; otherwise, execute step 211.

In step 210, the server sends verification success information to the client, prompting the client to send a message to be processed, and when receiving a message to be processed from the client, processes the message to be processed.

Specifically, when the HMAC information processed by the server is the same as the HMAC information received from the client, the server can determine that there is no security risk in the packet processing environment of the client, and prompt the client to send a pending packet by sending a prompt message to the client. , and process the received packets to be processed.

In step 211, the server sends verification failure information to the client, prompting that there is a security risk in the message processing environment of the client.

Specifically, when the HMAC information processed by the server is different from the HMAC information received from the client, the server can determine that there is a security risk in the packet processing environment of the client, and send a verification failure message to the client, prompting that the packet processing environment of the client has Security risks.

In the technical solution provided by the embodiment of the present invention, by judging the system information and current process information of the client, it is determined whether there is a security risk in the message processing environment of the client, which improves the security of the message processing environment of the client.

In Embodiment 1 and Embodiment 2 of the present invention, the server judges whether the system information of the client stored by itself is the same as the system information received from the client, and judges the current process information of the client according to the current process information received from the client. Whether the process is safe; in the third embodiment of the present invention, the smart key device can also judge whether the system information of the client stored by itself is the same as the system information received from the client, and judge according to the current process information received from the client Whether the process currently running on the client is safe, the specific process is shown in Figure 3, including the following steps:

In step 301, the client acquires its own system information and current process information, and sends the system information and current process information to the smart key device.

Specifically, the client can run the control downloaded from the server, and collect the system information and current process information of the client through the control, wherein the system information can include CPU (Central Processing Unit, central processing unit) type, motherboard model, operating system name, user name and One or more of IP (Internet Protocol, Internet Protocol) addresses.

Step 302 , the smart key device judges whether the current running process of the client is safe according to the current process information received from the client, and if it is safe, executes step 303 ; otherwise, executes step 305 .

Specifically, the smart key device may be preset with a first process list, or receive the first process list from the server, and the first process list includes processes with security risks. After the smart key device receives the data packet from the client, it can judge whether there is a process in the first process list in the process currently running on the client according to the current process information contained in the data packet, and if it exists, then determine the current process of the client. The running process is not secure; if it does not exist, it is determined that the client is currently running a process that is safe.

For example, the first process list preset in the smart key device includes A process, B process, C process and D process; when the current process information contained in the data packet received by the smart key device is E process, F process and When the G process, the smart key device can determine that there is no process in the first process list in the process currently running on the client, and then determine that the process currently running on the client is safe; when the data packet received by the smart key device When the current process information included is D process, E process and F process, the smart key device can determine that the process in the first process list exists in the process currently running on the client, and then determine that the process currently running on the client is unsafe .

The smart key device may be preset with a second process list, or receive the second process list from the server, and the second process list includes processes without security risks. After the smart key device receives the data packet from the client, it can judge whether there is a process other than the second process list in the process currently running on the client according to the current process information contained in the data packet, and if it exists, determine whether the client The currently running process is not safe; if not present, the client's current running process is determined to be safe.

For example, the second process list preset in the smart key device includes a process, b process, c process and d process; when the current process information contained in the data packet received by the smart key device is a process and c process , the smart key device can determine that there is no process other than the second process list in the process currently running on the client, and then determine that the process currently running on the client is safe; when the data packet received by the smart key device contains When the current process information is a process, b process and e process, the smart key device can determine that there is a process outside the second process list in the process currently running on the client, and then determine that the process currently running on the client is unsafe.

Step 303 , the smart key device judges whether the system information of the client stored by itself is the same as the system information received from the client, and if they are the same, execute step 304 ; otherwise, execute step 305 .

Step 304, the smart key device processes the message to be processed from the client.

When the smart key device judges that the process currently running on the client is safe, the smart key device can determine that there is no security risk in the message processing environment of the client, prompt the client to send the message to be processed by sending a prompt message to the client, and Signature processing is performed on received messages to be processed.

In step 305, the smart key device prompts that there is a security risk in the message processing environment of the client.

In the technical solution provided by the embodiment of the present invention, by judging the system information and current process information of the client, it is determined whether there is a security risk in the message processing environment of the client, which improves the security of the message processing environment of the client.

As shown in FIG. 4, it is a structural diagram of a device for detecting a message processing environment in Embodiment 4 of the present invention, including:

The storage module 401 is configured to store system information of the client.

Wherein, the system information includes one or more of CPU type, motherboard model, operating system name, user name and IP address.

The obtaining module 402 is configured to obtain current process information and system information of the client from the client.

The first judging module 403 is configured to judge whether the process currently running on the client is safe according to the current process information.

Specifically, the first judging module 403 is specifically configured to judge according to the current process information whether there is a process in the preset first process list among the processes currently running on the client, and if so, determine whether the client The process currently running is not safe; if it does not exist, it is determined that the process currently running by the client is safe;

or,

Judging according to the current process information whether there is a process other than the preset second process list in the process currently running on the client, if it exists, then determining that the process currently running on the client is unsafe; if not, Then it is determined that the process currently running on the client is safe.

The second judging module 404 is configured to judge whether the system information of the client in the storage module 401 is the same as the system information obtained from the client by the obtaining module 402 .

The determination module 405 is used to determine that there is a security risk in the message processing environment of the client when the judgment result of the first judgment module 403 is unsafe, and/or, when the judgment result of the second judgment module 404 is different; When the judging result of the first judging module 403 is safe and the judging result of the second judging module 404 is the same, it is determined that there is no security risk in the message processing environment of the client.

Wherein, the current process information of the client obtained by the obtaining module 402 from the client is included in the data packet received by the obtaining module 402 from the client.

Correspondingly, the first judging module 403 is specifically configured to judge whether the process currently running by the client is safe according to the current process information when the source IP address of the data packet is included in the preset IP address list.

The determination module 405 is further configured to determine that there is a security risk in the packet processing environment of the client when the source IP address of the data packet is not included in the preset IP address list.

The above-mentioned device also includes:

The third judging module 406 is configured to judge whether the source IP address of the data packet is included in the preset IP address list.

The first sending module 407 is configured to send an identity verification request containing a random character string to the client after the determining module 405 determines that there is a security risk in the message processing environment of the client.

The first receiving module 408 is configured to receive the digital signature and account information from the client.

The decryption module 409 is configured to obtain the public key in the corresponding asymmetric key pair according to the account information, and use the public key to decrypt the digital signature.

The fourth judging module 410 is configured to judge whether the random character string decrypted by the decryption module 409 is the same as the random character string in the identity verification request.

The second sending module 411 is configured to send verification success information to the client when the judgment result of the fourth judging module 410 is the same; when the judging result of the fourth judging module 410 is different, send Verification failure message.

In the technical solution provided by the embodiment of the present invention, by judging the system information and current process information of the client, it is determined whether there is a security risk in the message processing environment of the client, and when there is a security risk in the message processing environment of the client, the client The terminal performs verification, which improves the security of the message processing environment of the client.

As shown in FIG. 5, it is a structural diagram of a device for detecting a message processing environment in Embodiment 5 of the present invention, including:

The storage module 501 is configured to store system information of the client.

Wherein, the system information includes one or more of CPU type, motherboard model, operating system name, user name and IP address.

The obtaining module 502 is configured to obtain current process information and system information of the client from the client.

The first judging module 503 is configured to judge whether the process currently running on the client is safe according to the current process information.

Specifically, the first judging module 503 is specifically configured to judge according to the current process information whether there is a process in the preset first process list among the processes currently running on the client, and if so, determine whether the client The process currently running is not safe; if it does not exist, it is determined that the process currently running by the client is safe;

or,

Judging according to the current process information whether there is a process other than the preset second process list in the process currently running on the client, if it exists, then determining that the process currently running on the client is unsafe; if not, Then it is determined that the process currently running on the client is safe.

The second judging module 504 is configured to judge whether the system information of the client in the storage module 501 is the same as the system information obtained by the obtaining module from the client.

The determination module 505 is used to determine that there is a security risk in the message processing environment of the client when the judgment result of the first judgment module 503 is unsafe, and/or, when the judgment result of the second judgment module 504 is different; When the judging result of the first judging module 503 is safe, and the judging result of the second judging module 504 is the same, it is determined that there is no security risk in the message processing environment of the client.

Wherein, the system information of the client obtained by the obtaining module 502 from the client is included in the data packet received by the obtaining module 502 from the client.

Correspondingly, the second judging module 504 is specifically configured to, when the source IP address of the data packet is included in the preset IP address list, judging whether the system information of the client in the storage module 501 is consistent with the information obtained from the acquiring module. Whether the system information acquired by the client is the same.

The determining module 505 is further configured to determine that there is a security risk in the packet processing environment of the client when the source IP address of the data packet is not included in the preset IP address list.

The above-mentioned device also includes:

The third judging module 506 is configured to judge whether the source IP address of the data packet is included in the preset IP address list.

The third sending module 507 is configured to send an identity verification request containing a random character string to the client after the determining module 505 determines that there is a security risk in the message processing environment of the client.

The second receiving module 508 is configured to receive HMAC information and account information from the client.

The processing module 509 is configured to obtain a corresponding symmetric key according to the account information, and use the symmetric key to process the random character string.

A fifth judging module 510, configured to judge whether the HMAC information processed by the processing module 509 is the same as the HMAC information received by the second receiving module 508 from the client;

The fourth sending module 511 is configured to send verification success information to the client when the judgment result of the fifth judgment module 510 is the same; when the judgment result of the fifth judgment module 510 is different, send the message to the client Verification failure message.

In the technical solution provided by the embodiment of the present invention, by judging the system information and current process information of the client, it is determined whether there is a security risk in the message processing environment of the client, which improves the security of the message processing environment of the client.

The steps in the methods described in conjunction with the embodiments disclosed herein may be directly implemented by hardware, software modules executed by a processor, or a combination of both. Software modules can be placed in random access memory (RAM), internal memory, read-only memory (ROM), electrically programmable ROM, electrically erasable programmable ROM, registers, hard disk, removable disk, CD-ROM, or any other Any other known storage medium.

The above is only a specific embodiment of the present invention, but the scope of protection of the present invention is not limited thereto. Anyone skilled in the art can easily think of changes or substitutions within the technical scope disclosed in the present invention. Should be covered within the protection scope of the present invention. Therefore, the protection scope of the present invention should be based on the protection scope of the claims.

Claims (19)

1. A method for detecting a message processing environment, comprising the steps of:

firstly, acquiring current process information of a client;

judging whether the process currently operated by the client is safe or not according to the current process information, and if so, executing a step IV; otherwise, executing step three;

thirdly, determining that potential safety hazards exist in the message processing environment of the client;

judging whether the system information of the client stored by the client is the same as the system information received from the client, if so, executing a fifth step; otherwise, executing step (c), the system information includes one or more of CPU type, mainboard type, operating system name, user name and IP address;

and fifthly, determining that no potential safety hazard exists in the message processing environment of the client.

2. The method of claim 1, wherein the current process information is included in a data packet received from the client;

the step of judging whether the currently running process of the client is safe according to the current process information specifically comprises the following steps:

when the source IP address of the data packet is contained in a preset IP address list, judging whether the process currently operated by the client is safe or not according to the current process information;

before the step of judging whether the currently running process of the client is safe according to the current process information, the method further comprises the following steps:

and judging whether the source IP address of the data packet is contained in a preset IP address list or not.

3. The method of claim 2, further comprising:

and when the source IP address of the data packet is not contained in a preset IP address list, determining that the potential safety hazard exists in the message processing environment of the client.

4. The method of claim 1, wherein after determining that a potential safety hazard exists in a messaging environment of the client, the method further comprises:

sending an identity authentication request containing a random character string to the client, and receiving a digital signature and account information from the client;

acquiring a public key in a corresponding asymmetric key pair according to the account information, and decrypting the digital signature by using the public key;

judging whether the random character string obtained by decryption is the same as the random character string in the identity authentication request, if so, sending authentication success information to the client, and processing the message from the client; otherwise, sending verification failure information to the client.

5. The method of claim 1, wherein after determining that a potential safety hazard exists in a messaging environment of the client, the method further comprises:

sending an authentication request containing a random character string to the client, and receiving HMAC information and account information from the client;

acquiring a corresponding symmetric key according to the account information, processing the random character string by using the symmetric key, judging whether the processed HMAC information is the same as the HMAC information received from the client, if so, sending verification success information to the client, and processing a message from the client; otherwise, sending verification failure information to the client.

6. The method according to claim 1, wherein the determining, according to the current process information, whether the process currently running by the client is safe specifically includes:

judging whether a process in a preset first process list exists in the currently running processes of the client according to the current process information, and if so, determining that the currently running process of the client is unsafe; if not, determining that the process currently operated by the client is safe;

or,

judging whether processes outside a preset second process list exist in the processes currently operated by the client according to the current process information, and if so, determining that the processes currently operated by the client are unsafe; and if not, determining that the process currently run by the client is safe.

7. A method for detecting a message processing environment, comprising the steps of:

firstly, acquiring system information of a client;

judging whether the system information of the client stored by the client is the same as the acquired system information of the client, and if so, executing a step IV; otherwise, executing step (c), the system information includes one or more of CPU type, mainboard type, operating system name, user name and IP address;

thirdly, determining that potential safety hazards exist in the message processing environment of the client;

judging whether the current running process of the client is safe or not according to the obtained current process information of the client, and if so, executing the fifth step; otherwise, executing step three;

and fifthly, determining that no potential safety hazard exists in the message processing environment of the client.

8. The method of claim 7, wherein the obtained system information of the client is included in a data packet received from the client;

the determining whether the system information of the client stored by the client is the same as the acquired system information of the client includes:

when the source IP address of the data packet is contained in a preset IP address list, judging whether the system information of the client stored by the data packet is the same as the acquired system information of the client;

before the determining whether the system information of the client stored by the client is the same as the acquired system information of the client, the method further includes:

and judging whether the source IP address of the data packet is contained in a preset IP address list or not.

9. The method of claim 8, further comprising:

and when the source IP address of the data packet is not contained in a preset IP address list, determining that the potential safety hazard exists in the message processing environment of the client.

10. The method of claim 7, wherein after determining that a potential safety hazard exists in a messaging environment of the client, the method further comprises:

sending an identity authentication request containing a random character string to the client, and receiving a digital signature and account information from the client;

acquiring a public key in a corresponding asymmetric key pair according to the account information, and decrypting the digital signature by using the public key;

judging whether the random character string obtained by decryption is the same as the random character string in the identity authentication request, if so, sending authentication success information to the client, and processing the message from the client; otherwise, sending verification failure information to the client.

11. The method of claim 7, wherein after determining that a potential safety hazard exists in a messaging environment of the client, the method further comprises:

sending an authentication request containing a random character string to the client, and receiving HMAC information and account information from the client;

acquiring a corresponding symmetric key according to the account information, processing the random character string by using the symmetric key, judging whether the processed HMAC information is the same as the HMAC information received from the client, if so, sending verification success information to the client, and processing a message from the client; otherwise, sending verification failure information to the client.

12. The method according to claim 7, wherein the determining whether the currently running process of the client is safe according to the current process information specifically includes:

judging whether a process in a preset first process list exists in the currently running processes of the client according to the current process information, and if so, determining that the currently running process of the client is unsafe; if not, determining that the process currently operated by the client is safe;

or,

judging whether processes outside a preset second process list exist in the processes currently operated by the client according to the current process information, and if so, determining that the processes currently operated by the client are unsafe; and if not, determining that the process currently run by the client is safe.

13. An apparatus for detecting a message processing environment, comprising:

the storage module is used for storing the system information of the client;

the system comprises an acquisition module, a processing module and a processing module, wherein the acquisition module is used for acquiring current process information and system information of the client from the client, and the system information comprises one or more of CPU type, mainboard model, operating system name, user name and IP address;

the first judgment module is used for judging whether the process currently operated by the client is safe or not according to the current process information;

the second judging module is used for judging whether the system information of the client in the storage module is the same as the system information acquired from the client by the acquiring module;

the determining module is used for determining that potential safety hazards exist in the message processing environment of the client when the judgment result of the first judging module is unsafe and/or the judgment result of the second judging module is different; and when the judgment result of the first judgment module is safe and the judgment result of the second judgment module is the same, determining that the message processing environment of the client does not have potential safety hazard.

14. The apparatus of claim 13, wherein the current process information is included in a data packet received by the acquisition module from the client;

the first judging module is specifically configured to, when the source IP address of the data packet is included in a preset IP address list, judge whether the currently running process of the client is safe according to the current process information;

the device, still include:

and the third judging module is used for judging whether the source IP address of the data packet is contained in a preset IP address list or not.

15. The apparatus of claim 13, wherein the system information of the client acquired by the acquisition module from the client is included in a data packet received by the acquisition module from the client;

the second determining module is specifically configured to determine whether the system information of the client in the storage module is the same as the system information acquired by the acquiring module from the client when the source IP address of the data packet is included in a preset IP address list;

the device, still include:

and the third judging module is used for judging whether the source IP address of the data packet is contained in a preset IP address list or not.

16. The apparatus of claim 14 or 15,

the determining module is further configured to determine that a potential safety hazard exists in a message processing environment of the client when the source IP address of the data packet is not included in a preset IP address list.

17. The apparatus of claim 13, further comprising:

the first sending module is used for sending an identity authentication request containing a random character string to the client after the determining module determines that potential safety hazards exist in the message processing environment of the client;

the first receiving module is used for receiving the digital signature and the account information from the client;

the decryption module is used for acquiring a public key in a corresponding asymmetric key pair according to the account information and decrypting the digital signature by using the public key;

a fourth judging module, configured to judge whether the random character string decrypted by the decrypting module is the same as the random character string in the authentication request,

the second sending module is used for sending verification success information to the client when the judgment results of the fourth judging module are the same; and when the judgment results of the fourth judgment module are different, sending verification failure information to the client.

18. The apparatus of claim 13, further comprising:

the third sending module is used for sending an authentication request containing a random character string to the client after the determining module determines that potential safety hazards exist in the message processing environment of the client;

the second receiving module is used for receiving the HMAC information and the account information from the client;

the processing module is used for acquiring a corresponding symmetric key according to the account information and processing the random character string by using the symmetric key;

a fifth judging module, configured to judge whether the HMAC information processed by the processing module is the same as the HMAC information received by the second receiving module from the client;

the fourth sending module is used for sending verification success information to the client when the judgment results of the fifth judging module are the same; and when the judgment results of the fifth judgment module are different, sending verification failure information to the client.

19. The apparatus of claim 13,

the first judging module is specifically configured to judge whether a process in a preset first process list exists in the currently running process of the client according to the current process information, and if so, determine that the currently running process of the client is unsafe; if not, determining that the process currently operated by the client is safe;

or,

judging whether processes outside a preset second process list exist in the processes currently operated by the client according to the current process information, and if so, determining that the processes currently operated by the client are unsafe; and if not, determining that the process currently run by the client is safe.