TWI896725B - High-security information transmission system and method - Google Patents

Abstract

The present invention relates to a highly secure information transmission system and method, primarily applied between a management terminal and a client terminal, each connected via a network using a server and a computer device. When the client computer device executes the BIOS program, it first sends a user's confidential information to the management server. The server uses the user's confidential information to determine whether a dedicated key identification mechanism has been established with the computer device. If so, it allows direct transmission of encrypted information with the computer device. By utilizing a network connection between the client and the management terminal and establishing the dedicated key identification mechanism through the BIOS, a dedicated transmission mechanism is pre-established, and information transmission is performed in a highly secure manner, thereby achieving the purpose of enhancing information transmission security.

Description

High-security information transmission system and method

The present invention relates to an information transmission system and method, and more particularly to a highly secure information transmission system and method.

With the rapid advancement of technology and the development of the Internet, confidential information, such as personal information and confidential company documents, can be easily stolen and misused during transmission. To protect this confidential information from being easily stolen, greater attention must be paid to protective measures. Therefore, improving the security of information transmission has become a major issue.

Although existing transmission systems can encrypt and protect transmitted information, for example, the transmitter (administrator) sets a password for the information to be transmitted, and the receiver (client) must enter the password to access the information. However, in practical applications, the transmitter (administrator) still needs to provide the password to the receiver (client) via the network in advance or simultaneously. However, since the password must be provided over the network every time information is transmitted, the number of times the password is transmitted over the network increases, thereby increasing the chances of unscrupulous persons stealing the password. In addition, the existing technology also requires continuous password input to obtain encrypted information during the information transmission process, making it relatively inefficient.

However, existing technologies, when a management terminal and a client exchange data remotely over the network, are vulnerable to attacks from unscrupulous individuals (hackers). For example, a fake client could obtain confidential information by impersonating the client device. Existing technologies cannot determine whether a client is an imposter during data exchange, thus posing a high risk to data security.

Therefore, the existing technology is indeed in need of further providing better improvement solutions.

In view of the above-mentioned shortcomings of the existing technology, the main purpose of the present invention is to provide a highly secure information transmission system and method, which is mainly applied between the management end and the client end, and utilizes the network connection and establishes the transmission mechanism in advance through the BIOS to enhance the security of information transmission.

The primary technical means employed to achieve the aforementioned objectives is to implement the aforementioned highly secure information transmission method, which involves connecting a management terminal and a client terminal via a network. The method involves the management terminal performing the following steps: Receive confidential user information; Based on the confidential user information, determine whether a unique key identification mechanism has been established with the client terminal; If so, allow direct transmission of encrypted information with the client terminal.

Through the above method, when the client executes the BIOS program, the management terminal receives the user's confidential information sent by the client. The management terminal determines whether the dedicated key identification mechanism has been established with the client based on the user's confidential information. If so, the management terminal allows the encrypted information to be directly transmitted with the client. By establishing a dedicated transmission mechanism in advance, information is transmitted in a highly secure manner, thereby achieving the purpose of improving information transmission security.

Another key technical approach employed to achieve the aforementioned objectives is to provide the aforementioned highly secure information transmission system, comprising: A client-side computer device that executes a BIOS program upon startup; A management-side server connected to the computer device via a network and receiving confidential user information sent by the computer device; Based on the confidential user information, the server determines whether a unique key identification mechanism has been established with the computer device. If so, the server permits direct transmission of encrypted information with the computer device.

With the above structure, when the computer device executes the BIOS program, it first sends the user's confidential information to the server. The server determines whether the dedicated key identification mechanism has been established with the computer device based on the user's confidential information. If so, it allows the encrypted information to be directly transmitted with the computer device. By establishing a dedicated transmission mechanism in advance, information transmission is carried out in a highly secure manner, thereby achieving the purpose of improving information transmission security.

Regarding a preferred embodiment of the highly secure information transmission system of the present invention, please refer to FIG1 . The system is primarily used between a management terminal and a client terminal, and includes a management server 10 and a client computer 20. The server 10 is connected to the computer 20 via a network. When the client computer 20 boots up and executes the BIOS program, the computer 20 first sends a user secret to the management server 10. The server 10 determines whether a unique key identification mechanism has been established with the computer 20 based on the user secret. If so, it allows the direct transmission of encrypted information with the computer 20.

In the preferred embodiment, the user confidential information may include user confidential data such as a client model, a client address, and a client key; the dedicated key identification mechanism is a confidential data authentication process performed by the server 10 on the user confidential data. When the confidential data authentication process is completed, the dedicated key identification mechanism is established; in the preferred embodiment, after the dedicated key identification mechanism is established, the server 10 on the management end sends a management end key to the computer device 20 on the client end to provide the computer device 20 with the encryption of the information to be transmitted to the server 10.

Therefore, the present invention primarily sends the user's confidential information to the server 10 when the computer device 20 executes the BIOS program. By utilizing a network connection between the client and the management terminal and establishing the dedicated key identification mechanism through the BIOS, a dedicated transmission mechanism is established in advance when the BIOS program is executed, and information is transmitted in a highly secure manner to enhance information transmission security.

To further illustrate another application of the preferred embodiment, please refer to FIG. 2 , which further includes a client mobile device 30, which is connected to the client computer device 20 via a network; after the computer device 20 and the management server 10 establish the unique key identification mechanism, the client mobile device 30 can scan a user-specific QR code provided by the computer device 20 to send the mobile device 30's The user's confidential data is transmitted to the management server 10, and a dedicated user interface is established. The client's mobile device 30 logs into the dedicated user interface to perform a confidential data authentication process with the management server 10. Once the confidential data authentication process is completed, the two parties can directly transmit the encrypted information through the computer device 20. Further authentication by the mobile device 30 enhances the security of information transmission and prevents impersonation.

Based on the specific application methods and technical content of the above-mentioned preferred embodiments, the present invention further provides a highly secure information transmission method, which is primarily applied between the aforementioned management end and the client end, and is executed on the management end's server 10 and the client end's computer device 20. As shown in Figure 3, the method includes the following steps: The management end's server 10 receives user confidential information (S31); The management end's server 10 determines, based on the user confidential information, whether a unique key identification mechanism has been established with the client end's computer device 20 (S32); If so, the management end's server 10 is allowed to directly transmit encrypted information to the client end's computer device 20 (S33).

Through the above method, in this preferred embodiment, the server 10 receives the user confidential information sent by the computer device 20 when the computer device 20 executes the BIOS program; by completing the establishment of the dedicated key identification mechanism in advance when executing the BIOS program, information is transmitted in a highly secure manner, thereby improving information transmission security.

Furthermore, in this preferred embodiment, when the method reaches the aforementioned step of "the management server 10 determines whether a unique key identification mechanism has been established with the client computer device 20 based on the user's confidential information (S32)", as shown in Figure 3, the method further includes the following steps: If not, registering and establishing the unique key identification mechanism using the user's confidential information (S34); and Continuing with the aforementioned step of "allowing the management server 10 and the client computer device 20 to directly transmit encrypted information (S33)".

In this preferred embodiment, the client's mobile device 30 may be further provided and connected to the client's computer device 20 via a network. When the method reaches the aforementioned step "If not, then register and establish the unique key identification mechanism using the user's confidential information (S34)", as shown in Figure 4, the method further includes the following sub-steps: Registering based on the user's confidential information sent by the client and establishing the unique key identification mechanism using the user's confidential information (S341); The client computer 20 generates a user-specific QR code (S342). The user-specific QR code is scanned by the client mobile device 30 to complete authentication. In the preferred embodiment, the mobile device 30 primarily scans the user-specific QR code to transmit the user's confidential information to the management server 10, thereby establishing a dedicated user interface. The mobile device 30 then logs into the dedicated user interface to perform confidential information authentication with the management server 10, thereby establishing the dedicated key identification mechanism, further achieving instant and dedicated confidentiality.

Furthermore, in this preferred embodiment, when the method reaches the aforementioned step of "If yes, then allow the management server 10 and the client computer device 20 to directly transmit an encrypted message (S33)", as shown in Figure 5, the method further includes the following sub-steps: The management server 10 encrypts a first information packet and sends the first encrypted message to the client computer device 20 (S331); The client computer device 20 decrypts the first encrypted message using the client key to obtain the first information packet (S332); The client computer device 20 encrypts a second information packet and sends the second encrypted message to the management server 10 (S333); The management server 10 uses the management key to decrypt the second encrypted information to obtain the second information packet (S334).

Furthermore, in this preferred embodiment, when the method reaches the aforementioned step of "If yes, then allow the management server 10 and the client computer device 20 to directly transmit encrypted information (S33)", as shown in Figure 6, the method further includes the following sub-steps: The client computer device 20 encrypts a third information packet and sends the third encrypted information to the management server 10 (S335); The management server 10 decrypts the third encrypted information using the management key to obtain the third information packet (S336); The management server 10 encrypts a fourth information packet and sends the fourth encrypted information to the client computer device 20 (S337); The client computer device 20 uses the client key to decrypt the fourth encrypted information to obtain the fourth information packet (S338).

In the preferred embodiment, the information packets can be any information that can be transmitted on the Internet, such as data, information, passwords, documents, and files. The above-mentioned information packets are only examples and not limitations.

10: Server 20: Computer 30: Mobile Device

Figure 1 is a system block diagram of a preferred embodiment of the present invention. Figure 2 is a system block diagram of another preferred embodiment of the present invention. Figure 3 is a method flow chart of a preferred embodiment of the present invention. Figure 4 is a method flow chart of another preferred embodiment of the present invention. Figure 5 is another method flow chart of a preferred embodiment of the present invention. Figure 6 is a still further method flow chart of a preferred embodiment of the present invention.

10 Servers 20 Computer Devices

Claims (8)

A highly secure information transmission method connects a management terminal and a client terminal via a network. The method involves the management terminal performing the following steps: receiving confidential user information from the client terminal; determining, based on the confidential user information, whether the management terminal has established a unique key identification mechanism with the client terminal; if so, allowing the management terminal to directly transmit encrypted information with the client terminal via the network; if not, registering and establishing the unique key identification mechanism, and then performing the step of "allowing the management terminal to directly transmit encrypted information with the client terminal via the network." The highly secure information transmission method as described in claim 1, when the method executes the step of "allowing the management terminal and the client terminal to directly transmit an encrypted message through the network", further includes the following sub-steps: the management terminal encrypts a first information packet and sends a first encrypted message to the client terminal; the client terminal decrypts the first encrypted message to obtain the first information packet; the client terminal encrypts a second information packet and sends a second encrypted message to the management terminal; the management terminal decrypts the second encrypted message to obtain the second information packet. The highly secure information transmission method as described in claim 1, when the method executes the step of "allowing the management terminal and the client terminal to directly transmit an encrypted message through the network", further includes the following sub-steps: the client terminal encrypts a third information packet and sends a third encrypted message to the management terminal; the management terminal decrypts the third encrypted message to obtain the third information packet; the management terminal encrypts a fourth information packet and sends a fourth encrypted message to the client terminal; the client terminal decrypts the fourth encrypted message to obtain the fourth information packet. The high-security information transmission method as described in claim 1, when the method is executed to the step of "if not, register and establish the exclusive key identification mechanism", the method further includes the following sub-steps: registering and establishing the exclusive key identification mechanism based on the user confidential information sent by the client; generating a user-exclusive QR code by the client for scanning and authentication by a mobile device of the client, so that the mobile device sends a user confidential data of the mobile device to the management end by scanning the user-exclusive QR code, and establishes a exclusive user interface, and the mobile device logs in to the exclusive user interface to perform a confidential data authentication procedure with the management end to establish the exclusive key identification mechanism. A highly secure information transmission system comprises: a client-side computer device that executes a BIOS program upon startup; a management-side server that connects to the computer device via a network and receives confidential user information sent by the computer device; wherein, based on the confidential user information, the server determines whether a dedicated key identification mechanism has been established with the computer device. If so, it allows direct transmission of encrypted information with the computer device via the network; if not, it registers and establishes the dedicated key identification mechanism; wherein, after the dedicated key identification mechanism is established, the server sends a management-side key to the computer device, which the computer device uses to encrypt information to be transmitted to the server. A high-security information transmission system as described in claim 5, wherein the user confidential information includes a client model, a client address, and a client key. As described in claim 5, the highly secure information transmission system, wherein the unique key identification mechanism is established when the computer device is turned on and executes the BIOS program. The highly secure information transmission system as described in claim 5 further comprises a mobile device at the client end, the mobile device being connected to the computer device; when the server determines whether the unique key identification mechanism has been established with the computer device based on the user confidential information, if not, the server registers and establishes the unique key identification mechanism based on the user confidential information sent by the computer device, and The computer device generates a user-specific QR code for the mobile device to scan and authenticate. The mobile device scans the user-specific QR code to send confidential user information of the mobile device to the server and establishes a dedicated user interface. The mobile device logs into the dedicated user interface to perform a confidential information authentication process with the server to establish the dedicated key identification mechanism.