Method and system for transmitting and receiving data, method and device for processing message

• US 9,882,897 B2
• Filed: 04/21/2014
• Issued: 01/30/2018
• Est. Priority Date: 08/19/2013
• Status: Active Grant

• Current Assignee: Xi'An Zhongxing New Software Co., Ltd. (ZTE Corporation)
• Original Assignee: Xi'An Zhongxing New Software Co., Ltd. (ZTE Corporation)
• Inventors: Liang, Jiehui, Zhou, Jiang, He, Ping
• Primary Examiner(s): Jeudy, Josnel
• Application Number:
  US14/786,958
• Publication Number:
  US 20160156623A1
• Time in Patent Office: 1,380 Days
• CPC Class Codes: H04L 2209/24 Key scheduling, i.e. generating round keys or sub-keys for block encryption
• CPC Class Codes: H04L 61/2589 over a relay server, e.g. traversal using relay for network address translation [TURN]
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/0807 using tickets, e.g. Kerberos cryptographic mechanisms or cryptographic arrangements for entity authentication using tickets or tokens H04L9/3213
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 67/02 based on web technology, e.g. hypertext transfer protocol [HTTP]
• CPC Class Codes: H04L 9/3226 using a predetermined code, e.g. password, passphrase or PIN network architectures or network communication protocols for supporting authentication of entities using passwords in a packet data network H04L63/083
• CPC Class Codes: H04L 9/3242 involving keyed hash functions, e.g. message authentication codes [MACs], CBC-MAC or HMAC
• CPC Class Codes: H04W 12/06 Authentication

Abstract

The disclosure provides a method and system for transmitting and receiving data, and a method and device for processing message. In the method, a relay server receives an assignment request message from a first User Equipment (UE), wherein the assignment request message is used for obtaining, by the first UE, authorization from the relay server, and the authorization is used for permitting the first UE to transmit and/or receive data via the relay server; the relay server requests a service server to authenticate the first UE according to the assignment request message; in the case that the service server authenticates the first UE successfully, the relay server permits the first UE to transmit and/or receive data via the relay server. According to the technical solution provided by the disclosure, the operation complexity of a user is reduced, and the deployment and application of the relay server is improved greatly.

Claims

1. A method for transmitting and receiving data, comprising:

receiving, by a relay server, an assignment request message from a first User Equipment, UE, wherein the assignment request message is used for obtaining, by the first UE, authorization from the relay server, and the authorization is used for permitting the first UE to transmit and/or receive data via the relay server;

requesting, by the relay server, a service server to authenticate the first UE according to the assignment request message; and

in the case that the service server authenticates the first UE successfully, permitting, by the relay server, the first UE to transmit and/or receive data via the relay server;

wherein before the first UE sending the assignment request message to the relay server, the method further comprises;

adding information of an account which is registered on the service server to an assignment request message, and calculating the assignment request message according to a preset algorithm;

using an account password corresponding to the information of the account to encrypt a result of calculation; and

adding the result of encryption to the assignment request message, and sending the assignment request message to the relay server.

2. The method according to claim 1, wherein before the relay server requests the service server to authenticate the first UE according to the assignment request message, the method further comprises:

judging, by the relay server, whether the assignment request message carries message integrity field information; and

in the case that the relay server determines that the assignment request message does not carry the message integrity field information, sending, by the relay server, an unauthorized response message to the first UE, wherein the unauthorized response message is used for enabling the first UE to resend the assignment request message and carry the message integrity field information in the assignment request message resent.

3. The method according to claim 2, wherein the relay server requests the service server to authenticate the first UE according to the assignment request message comprises:

validating, by the relay server, the assignment request message; and

in the case that the relay server validates the assignment request message successfully, encapsulating, by the relay server, the assignment request message as a message body of the Hyper Text Transport Protocol, HTTP, protocol in an authentication request message, and sending, by the relay server, the authentication request message to the service server.

4. The method according to claim 3, wherein before the relay server permits the first UE to transfer data via the relay server, the method further comprises:

receiving, by the service server, the authentication request message from the relay server;

performing, by the service server, a Hash calculation to other field information except the message integrity field information in the authentication request message, and using, by the service server, a register password which is obtained from a preset storage region and corresponds to the first UE to encrypt a result of the Hash calculation; and

comparing, by the service server, a result of encryption with the message integrity field information, and when the result of encryption is consistent with the message integrity field information, sending, by the service server, an authentication success response message to the relay server.

5. The method according to claim 4, wherein the relay server permits the first UE to transfer data via the relay server comprises:

receiving, by the relay server, the authentication success response message from the service server; and

assigning, by the relay server, Internet Protocol, IP, address information, port information, a valid lifecycle of the IP address information and a valid lifecycle of the port information, which are used by the first UE on the relay server, to the first UE according to the authentication success response message, wherein all of the IP address information, the port information, the valid lifecycle of the IP address information and the valid lifecycle of the port information are used for transmitting and/or receiving data, by the first UE, via the relay server.

6. The method according to claim 1, wherein before the relay server receives the assignment request message from the first UE, the method further comprises:

determining, by the service server, that login authentication of the first UE and login authentication of a second UE are successful, wherein the first UE and the second UE are located in different Network Address Translation, NAT, networks respectively;

receiving, by the service server, a session request message from the first UE, and forwarding, by the service server, the session request message to the second UE, wherein the session request message is used for establishing a session between the first UE and the second UE; and

receiving, by the service server, a session acceptance message from the second UE, and forwarding, by the service server, the session acceptance message to the first UE, wherein the session acceptance message is used for enabling the first UE to initiate the assignment request message.

7. The method according to claim 1, wherein after the relay server permits the first UE to transmit and/or receive data via the relay server, the method further comprises:

receiving, by the service server, a session termination message from the first UE, wherein the session termination message carries indication information indicating that the first UE has transmitted and/or received all data successfully; and

after the service server forwards the session termination message to the second UE, terminating, by the service server, transmitting and/or receiving of data performed by the first UE, wherein the first UE and the second UE are located in the different NAT networks respectively.

15. The method according to claim 2, wherein before the relay server receives the assignment request message from the first UE, the method further comprises:

determining, by the service server, that login authentication of the first UE and login authentication of a second UE are successful, wherein the first UE and the second UE are located in different Network Address Translation, NAT, networks respectively;

receiving, by the service server, a session request message from the first UE, and forwarding, by the service server, the session request message to the second UE, wherein the session request message is used for establishing a session between the first UE and the second UE; and

receiving, by the service server, a session acceptance message from the second UE, and forwarding, by the service server, the session acceptance message to the first UE, wherein the session acceptance message is used for enabling the first UE to initiate the assignment request message.

16. The method according to claim 2, wherein after the relay server permits the first UE to transmit and/or receive data via the relay server, the method further comprises:

receiving, by the service server, a session termination message from the first UE, wherein the session termination message carries indication information indicating that the first UE has transmitted and/or received all data successfully; and

after the service server forwards the session termination message to the second UE, terminating, by the service server, transmitting and/or receiving of data performed by the first UE, wherein the first UE and the second UE are located in the different NAT networks respectively.

8. A system for transmitting and receiving data, comprising:

a relay server;

the relay server comprises a processor and a memory, and the processor is configured to execute program components stored in the memory, and the program components comprise;

a first receiving component configured to receive an assignment request message from a first User Equipment, UE, wherein the assignment request message is used for obtaining, by the first UE, authorization from the relay server, and the authorization is used for permitting the first UE to transmit and/or receive data via the relay server;

an authentication requesting component configured to request a service server to authenticate the first UE according to the assignment request message;

an authorizing component configured to, in the case that the service server authenticates the first UE successfully, permit the first UE to transmit and/or receive data via the relay server;

a calculating component configured to add information of an account which is registered on the service server to an assignment request message, and calculate the assignment request message according to a preset algorithm;

an encrypting component configured to use an account password corresponding to the information of the account to encrypt a result of calculation; and

a sending component configured to add a result of encryption to the assignment request message, and send the assignment request message to the relay server.

9. The system according to claim 8, wherein the relay server further comprises the following program components:

a judging component configured to judge whether the assignment request message carries message integrity field information; and

a sending component configured to, when the assignment request message does not carry message integrity field information, send an unauthorized response message to the first UE, wherein the unauthorized response message is used for enabling the first UE to resend the assignment request message and carry the message integrity field information in the assignment request message resent.

10. The system according to claim 9, wherein the authentication requesting component comprises:

a validating element configured to validate the assignment request message; and

a processing element configured to, in the case that the assignment request message is validated successfully, encapsulate the assignment request message as a message body of the Hyper Text Transport Protocol, HTTP, protocol in an authentication request message, and send the authentication request message to the service server.

11. The system according to claim 10, wherein the system further comprises:

the service server;

the service server comprises a processor and a memory, and the processor is configured to execute program components stored in the memory, and the program components comprise;

a second receiving component configured to receive the authentication request message from the relay server;

a processing component configured to perform a Hash calculation to other field information except the message integrity field information in the authentication request message, and use a register password which is obtained from a preset storage region and corresponds to the first UE to encrypt a result of the Hash calculation; and

a comparing component configured to compare a result of encryption with the message integrity field information, and when the result of encryption is consistent with the message integrity field information, send an authentication success response message to the relay server.

12. The system according to claim 11, wherein the authorizing component comprises:

a receiving element configured to receive the authentication success response message from the service server; and

an assigning element configured to assign Internet Protocol, IP, address information, port information, a valid lifecycle of the IP address information and a valid lifecycle of the port information, which are used by the first UE on the relay server, to the first UE according to the authentication success response message, wherein all of the IP address information, the port information, the valid lifecycle of the IP address information and the valid lifecycle of the port information are used for transmitting and/or receiving data by the first UE via the relay server.

13. The system according to claim 8, wherein the service server further comprises the following program components:

a determining component configured to determine that login authentication of the first UE and login authentication of a second UE are successful, wherein the first UE and the second UE are located in different Network Address Translation, NAT, networks respectively;

a first forwarding component configured to receive a session request message from the first UE, and forward the session request message to the second UE, wherein the session request message is used for establishing a session between the first UE and the second UE; and

a second forwarding component configured to receive a session acceptance message from the second UE, and forward the session acceptance message to the first UE, wherein the session acceptance message is used for enabling the first UE to initiate the assignment request message.

14. The system according to claim 8, wherein the service server further comprises the following program components:

a third receiving component configured to receive a session termination message from the first UE, wherein the session termination message carries indication information indicating that the first UE has transmitted and/or received all data successfully; and

a terminating component configured to, after the session termination message is forwarded to the second UE, terminate transmitting and/or receiving of data performed by the first UE, wherein the first UE and the second UE are located in the different NAT networks respectively.