Cloud-based secure instant messaging method and system

Abstract

The invention discloses a cloud-based secure instant messaging method and system. The system comprises a sending end, a receiving end and a communication application server which are arranged at a cloud and a locally arranged key management center (KMC), wherein the KMC generates terminal initialization keys (TIKs), transmission master keys (TMKs), terminal local master keys (TLMKs) and terminal application keys (TAKs) and sends the keys to the sending end and the receiving end; the sending end and the receiving end each comprise a communication module and a key module, the communication module receives key data, the key module is in charge of decrypting, storing and managing the key data, establishing an encryption channel by use of the received TAKs, and the TAKs employed for establishing the encryption channel each time are different. Through the technical scheme provided by the invention, the safety of the whole system is high, the compatibility is good, and the isomerism is high.

Description

technical field [0001] The invention relates to the field of data security, in particular to a cloud-based secure instant communication method and system. Background technique [0002] As more and more applications are cloudified, efficiency has been improved, costs have been saved, and the speed of application construction has been accelerated. However, from a security point of view, due to the natural objective factors that separate data producers from data owners in the cloud, security issues are becoming more and more prominent. Especially in real-time communication applications, this problem is more obvious, such as whether the data transmitted by the two parties in the communication is eavesdropped? Whether the data stored in the cloud has been stolen by others, etc. [0003] To solve this problem, the best technical solution is to use encryption technology to realize data in the form of ciphertext during transmission, use, and storage, and then effectively prevent d...

AI Technical Summary

Problems solved by technology

[0015] However, the above existing technologies have the following disadvantages: in this scheme, the key management center is placed on the Internet platform and is not managed by the user, which means that the core key is not controlled, so in principle, all data generated based on this key also not trusted

[0016] This scheme is the effect of one person, one secret. Although it meets the principle of simple design, the security is greatly reduced. Once the user's key is compromised, all the user's information will be compromised, making it difficult to fully guarantee the security of the entire communication chain.

Images