Information Security Verification Method and Terminal

• US 20190327246A1
• Filed: 07/01/2019
• Published: 10/24/2019
• Est. Priority Date: 12/30/2016
• Status: Abandoned Application

• Current Assignee: Huawei Technologies Co., Ltd. (Huawei Investment & Holding Co., Ltd.)
• Original Assignee: Huawei Technologies Co., Ltd. (Huawei Investment & Holding Co., Ltd.)
• Inventors: Chen, Shanxi, Wen, Bailin
• Application Number:
  US16/458,718
• Publication Number:
  US 20190327246A1
• Time in Patent Office: Days
• CPC Class Codes: H04L 63/126 the source of the received data
• CPC Class Codes: H04W 12/106 Packet or message integrity
• CPC Class Codes: H04W 12/128 Anti-malware arrangements, e.g. protection against SMS fraud or mobile malware

Abstract

An information security verification method comprises obtaining, by a terminal, abstract information of to-be-verified information and an identification code, where the identification code is used to identify a sender that sends the to-be-verified information to the terminal, then sending an information security verification request to the sender of the to-be-verified information based on the identification code, where the information security verification request includes the abstract information of the to-be-verified information, and finally receiving a verification result from the sender, where the verification result indicates whether the sender has ever sent information same as the to-be-verified information.

Claims

1. A terminal, comprising:

a memory configured to;

store instructions; and

store historical information received by the terminal; and

a processor coupled to the memory and configured to execute the instructions, which cause the processor to be configured to;

obtain abstract information of to-be-verified information and an identification code from the historical information, wherein the identification code identifies a sender that sends the to-be-verified information to the terminal; and

send an information security verification request to the sender, wherein the information security verification request comprises the abstract information of the to-be-verified information; and

receive a verification result from the sender, wherein the verification result indicates whether the sender has previously sent information that matches the to-be-verified information.

2. The terminal according to claim 1, wherein the memory is further configured to store a to-be-verified identification code list comprising the identification code that needs to be verified.

3. The terminal according to claim 2, wherein the instructions further cause the processor to be configured to initiate sending the information security verification request in response to receiving first information from the sender identified by the identification code that needs to be verified, wherein the to-be-verified identification code list comprises the identification code of the sender.

4. The terminal according to claim 1, wherein the abstract information is information generated based on key information in the to-be-verified information, and wherein the abstract information is used to represent the to-be-verified information.

5. The terminal according to claim 2, wherein the instructions further cause the processor to be configured to:

negotiate a generation manner of the abstract information of the to-be-verified information with a server; and

generate the abstract information based on the generation manner of the abstract information and the to-be-verified information, wherein the server is the sender identified by the to-be-verified identification code in the to-be-verified identification code list.

6. The terminal according to claim 2, wherein the memory is further configured to store a server list comprising an identification code, a server, and an address of the server, wherein the server is the sender identified by the to-be-verified identification code in the to-be-verified identification code list;

and wherein the instructions further cause the processor to be configured to obtain the address of the server corresponding to the identification code based on the identification code and the server list to send the information security verification request to the server based on the address of the server.

7. An information security verification method, comprising:

obtaining, by a terminal, abstract information of to-be-verified information and an identification code, wherein the identification code identifies a sender that sends the to-be-verified information to the terminal;

sending an information security verification request to the sender of the to-be-verified information based on the identification code, wherein the information security verification request comprises the abstract information of the to-be-verified information; and

receiving a verification result from the sender, wherein the verification result indicates whether the sender has previously sent information that matches the to-be-verified information.

8. The information security verification method according to claim 7, wherein before obtaining the abstract information of the to-be-verified information and the identification code, the method further comprises determining whether first information received by the terminal is the to-be-verified information based on a to-be-verified identification code list, wherein the to-be-verified identification code list stores an identification code that needs to be verified.

9. The information security verification method according to claim 8, wherein determining, based on the to-be-verified identification code list, whether the first information received by the terminal is the to-be-verified information comprises:

extracting a sender identification code carried in the first information in response to the terminal receiving the first information; and

determining whether the sender identification code is recorded in the to-be-verified identification code list, wherein the first information is the to-be-verified information, wherein the sender identification code is recorded in the to-be-verified identification code list.

10. The information security verification method according to claim 7, wherein before obtaining the abstract information of to-be-verified information and identification code, the method further comprises:

negotiating a generation manner of the abstract information of the to-be-verified information with a server; and

generating the abstract information based on the generation manner and the to-be-verified information, wherein the server is a sender identified by the to-be-verified identification code in the to-be-verified identification code list.

11. The information security verification method according to claim 7, wherein sending the information security verification request to the sender of the to-be-verified information based on the identification code comprises obtaining an address of a server corresponding to the identification code based on the identification code and a server list to send the information security verification request to the server based on the address of the server, wherein the memory is further configured to store the server list, and wherein the server list comprises the identification code, the server, and the address of the server, wherein the server is a sender identified by the to-be-verified identification code in the to-be-verified identification code list.

12. An information security application method, comprising:

obtaining abstract information of to-be-verified information and an identification code, wherein the identification code identifies a sender that sends the to-be-verified information to a terminal;

sending an information security verification request to the sender of the to-be-verified information based on the identification code, wherein the information security verification request comprises the abstract information of the to-be-verified information; and

receiving a verification result from the sender, wherein the verification result indicates whether the sender has previously sent information that matches the to-be-verified information.

13. The information verification system according to claim 12, further comprising storing a to-be-verified identification code list comprising the identification code that needs to be verified.

14. The information verification system according to claim 13, further comprising initiating sending of the information security verification request in response to the terminal receiving first information from the sender identified by the identification code that needs to be verified in the to-be-verified identification code list.

15. A terminal, comprising:

a memory configured to store historical information that is received and sent by the RF circuit;

a processor coupled to the memory and configured to obtain abstract information of to-be-verified information and an identification code from the historical information, wherein the identification code identifies a sender that sends the to-be-verified information to the terminal, and

a radio frequency (RF) circuit coupled to the processor and configured to;

send an information security verification request to the sender, wherein the information security verification request comprises the abstract information of the to-be-verified information; and

receive a verification result from the sender, wherein the verification result indicates whether the sender has previously sent information that matches the to-be-verified information.

16. The terminal according to claim 15, wherein the memory is further configured to store a to-be-verified identification code list comprising the identification code that needs to be verified.

17. The terminal according to claim 15, wherein the processor is configured to initiate the information security verification request in response to the terminal receiving first information from the sender identified by the identification code that needs to be verified in a to-be-verified identification code list.

18. The terminal according to claim 15, wherein the abstract information is information generated based on key information in the to-be-verified information, and wherein the abstract information is used to represent the to-be-verified information.

19. The terminal according to claim 15 wherein the processor is configured to:

negotiate a generation manner of the abstract information of the to-be-verified information with a server; and

generate the abstract information based on the generation manner and the to-be-verified information, wherein the server is the sender identified by the to-be-verified identification code in the to-be-verified identification code list.

20. The terminal according to claim 15, wherein the memory is configured to store a server list comprising the identification code, a server, and an address of the server, wherein the server is the sender identified by the to-be-verified identification code in the to-be-verified identification code list, and wherein the processor is configured to obtain the address of the server corresponding to the identification code based on the identification code and the server list to send the information security verification request to the server using the RF circuit and based on the address of the server.