CN104917734B - Secure communication system and secure communication method - Google Patents

Abstract

The present invention provides a secure communication system and a secure communication method. The secure communication system receives an input signal from a first user, the input signal includes content information sent by the first user to a second user and identity information of the first user and the second user; determines the information type of the content information of the input signal; if the information type is privacy information, further determines the privacy type of the content information of the input signal, and encrypts the input signal; searches in a storage unit whether there is relevant encrypted data of the content information previously sent by the second user to the first user and with the same privacy type; and determines whether to send the content information of the input signal to the second user according to the search result. The secure communication system and the secure communication method can make communication secure and reliable and protect the privacy information of users.

Description

Secure communication system and secure communication method

technical field

The invention relates to the field of communication technology, in particular to a secure communication system and a secure communication method with information security functions.

Background technique

In daily life, people will inevitably encounter situations where they need to confess to others, apologize, propose a breakup, or communicate on sensitive issues. However, due to personality reasons, some people are afraid of being rejected by the other party and hesitate to express their feelings. As a result, opportunities are missed and regrets are left in vain. For example, two people who originally fell in love with each other did not dare to confess their love to each other because of their introverted personalities, but it turned out that it was too late when they found out that the other party was also interested in them. For another example, someone wants to apologize to another person for some reason, and the other person also intends to forgive this person, but due to face, neither party takes any action. As a result, a pair of good friends never know each other again.

Thanks to various convenient communication tools, such as mobile phones, QQ chat software, etc., people can send various private content to each other without face-to-face, but there are also disadvantages in using such communication tools, for example, it is difficult to Cancellation, if the confession or apology is rejected by the other party, the sender will also feel embarrassed, which will affect the normal communication with the other party in the future. And if the private information is leaked, it will also bring some embarrassment or loss to the parties.

Contents of the invention

Thanks to the Internet and the advanced cryptography mechanism, the present invention provides a secure communication system to realize privacy and security, and to enhance benign communication between people.

Specifically, an embodiment of the present invention provides a secure communication system, which includes a signal input unit, a signal processing unit, a storage unit, a search unit, a signal output unit, and a control unit. The signal input unit is used for receiving an input signal from a first user, and the input signal includes content information sent by the first user to a second user and identity information of the first user and the second user. The signal processing unit is used for judging the information type of the content information of the input signal, if the information type is private information, further judging the privacy type of the content information of the input signal, and encrypting the input signal. The storage unit is used for storing related encrypted data of the input signal. The search unit is used to search the storage unit for whether there is related encrypted data of content information previously sent by the second user to the first user and having the same privacy type. The signal output unit is used for sending information to the first user and the second user. The control unit is used to judge whether to send the content information of the input signal to the second user according to the search result of the search unit; wherein, if the search result is that the second user previously sent to the first user, and the privacy If the relevant encrypted data of the content information of the same type, the control unit controls the signal output unit to send the content information of the input signal to the second user, and send the content information previously sent by the second user to the first user to the first user.

Preferably, the signal processing unit generates the first hash value data after arranging the identity information data of the first user, the identity information data of the second user and the privacy type data in sequence, and provides the first hash value data to the lookup unit.

Preferably, the search unit searches the storage unit for whether there is the same hash value data as the first hash value data.

Preferably, if no hash value data identical to the first hash value data is found, the search unit notifies the signal processing unit so that the signal processing unit combines the identity information data of the first user with the second After the sequence of the identity information data of the user is exchanged, the second hash value data is generated after being arranged with the privacy type data, and the second hash value data is stored in the storage unit.

Preferably, the control unit deletes the encrypted input signal from the first user stored in the storage unit after a storage period expires, wherein the storage period is preset by the user or the system.

Preferably, before the storage period, if the signal input unit receives a request to cancel transmission sent from the first user, the signal input unit notifies the control unit so that the control unit deletes the encrypted data stored in the storage unit. subsequent input signals from the first user.

Preferably, the signal processing unit further stores the content information of the input signal in the storage unit after being encrypted with the identity information data of the second user.

Preferably, before the storage period, if the signal input unit receives the content information sent by the second user to the first user and has the same privacy type, the control unit controls the signal processing unit to use the second The user's identity information data decrypts the content information of the input signal and sends it to the second user through the signal output unit, and controls the signal output unit to directly send the content information sent by the second user to the first user to the first user.

Preferably, the input signal further includes type information of the content information, and the signal processing unit analyzes the input signal to obtain the information type of the content information in the input signal.

Preferably, the signal processing unit includes a semantic analysis unit for performing semantic analysis on the content information in the input signal to determine the information type of the content information.

Preferably, when the semantic analysis unit cannot determine the information type of the content information, the semantic analysis unit notifies the control unit, the control unit controls the signal output unit to control the signal output unit to send a selection message to the first user, An information type for the first user to select the content information in the input signal.

The invention also provides a secure communication method to realize privacy and security, and to enhance benign communication between people.

Specifically, an embodiment of the present invention provides a secure communication method, the secure communication method includes the following steps: receiving an input signal from a first user, the input signal includes a message sent by the first user to a second user content information of the input signal and the identity information of the first user and the second user; determine the information type of the content information of the input signal; if the information type is private information, further determine the privacy type of the content information of the input signal, and The input signal is encrypted; in a storage unit, it is searched whether there is related encrypted data of the content information previously sent by the second user to the first user, and the privacy type is consistent; and judging whether to send the input according to the search result The content information of the signal is given to the second user.

Since the secure communication system and the secure communication method will combine the identity information of the sender (such as a mobile phone number), the identity information of the receiver, and the type of private content information sent to generate a hash value, thereby protecting privacy, even if System administrators have no way of knowing either. Further, only when a hash value with the same type of private content information previously sent by the receiver to the sender is found, the content information of the current sender will be sent to the receiver, and the content information previously sent by the receiver will be sent to the sender The content information is sent to the sender, thus avoiding the embarrassment of the sender after being rejected by the receiver. Furthermore, if no hash value with the same type of private content information previously sent by the receiver to the sender is found, the system can encrypt and save the private information according to the information type of the content information sent by the user and store it for a certain period of time. Afterwards, it is deleted, thereby ensuring that the user's private information will not be leaked, and avoiding embarrassing situations caused by being rejected by the other party.

In order to make the above-mentioned technical solutions and advantages of the present invention more comprehensible, the following specific embodiments will be described in detail with reference to the accompanying drawings.

Description of drawings

Fig. 1 is a schematic block diagram of a secure communication system provided by an embodiment of the present invention.

Fig. 2 is a schematic block diagram of a secure communication system provided by another embodiment of the present invention.

Fig. 3 is a schematic flowchart of a secure communication method provided by an embodiment of the present invention.

Detailed ways

In order to further explain the technical means and effects that the present invention adopts to achieve the intended invention purpose, the specific implementation methods, methods, steps, structures, features and effects proposed according to the present invention will be described below in conjunction with the accompanying drawings and preferred embodiments. Detailed description.

The secure communication system and secure communication method provided by the embodiments of the present invention are mainly used for sending information between users. In the embodiments of the present invention, the person who sends information to the other party is called the sender, and the object to be sent is called the receiver. .

Please refer to FIG. 1 , which is a schematic block diagram of a secure communication system provided by an embodiment of the present invention. As shown in FIG. 1 , in this embodiment, a secure communication system 100 includes a signal input unit 101 , a control unit 103 , a signal processing unit 105 , a search unit 106 , a storage unit 107 and a signal output unit 109 . Wherein, the signal input unit 101 , the signal processing unit 105 , the search unit 106 , the storage unit 107 and the signal output unit 109 are all coupled to the control unit 103 and work under the control of the control unit 103 .

The signal input unit 101 is used to receive an input signal and provide the input signal to the signal processing unit 105. The input signal comes from a sender's user terminal, and the input signal includes the identity information of the sender and the receiver and the sent content information . The user terminal can be a mobile phone, a personal computer, a communication software client, and the like. The identity information depends on the user terminal used by the user (that is, the sender and the receiver). For example, if the user uses a mobile phone to contact the other party, the identity information of the sender and the receiver can be the mobile phone numbers of both parties; Communication software client to contact the other party, then the identity information of the sender and receiver can be the user names of both parties. The identity information of the sender and the receiver in the present invention is not limited to the two listed above, as long as the user terminal used by the user can confirm or authenticate the identity information of the sender and the receiver. The content information may be text information, voice information or video information, etc., but is not limited thereto.

The signal processing unit 105 is used for judging the information type of the content information of the input signal, and performing processing such as encryption and decryption on the input signal. The information type of the content information can be directly included in the input signal, edited actively by the sender, and the signal processing unit 105 can analyze the input signal after receiving the input signal provided by the signal input unit 101 to obtain the information of the content information type. This type of information depends on the content to be sent, and can be private information such as confession, apology, and proposal to break up, or non-private general information. The information types of the content information in the present invention are not limited to the above listed ones, and may be determined according to actual situations. The situation where the sender actively edits the type of content information, such as: the sender can indicate the type of content information in the title of the content to be sent, or use a delimiter (such as quotation marks, brackets, etc.) at the beginning or end of the content to indicate Information type of content information, such as: [privacy; confession], [privacy; apology], [general], etc. The present invention does not limit the format of the type of information that the user actively edits the content information, as long as the secure communication system 100 can identify it.

In other embodiments, the information type of the content information may also be automatically sent by the secure communication system 100 to the sender through the signal output unit 109 after the signal input unit 101 receives the content information sent by the sender for the sender to select The information type of the content information is obtained later. Specifically, the signal input unit 101 notifies the control unit 103 after receiving the input signal, and the control unit 103 controls the signal output unit 109 to send a selection message to the sender for the sender to select the information type of the content information. The selection information can be "Is this information general information or private information?", or "Please select the information type: A. General; B. Privacy", the sender can select the information type according to its user terminal and then send it back to the security Communication system 100. If the signal input unit 101 receives the feedback information from the sender, it will provide the feedback information to the signal processing unit 105 for analysis. The signal processing unit 105 supplies the analysis result to the control unit 103 . If the analysis result is general information, the control unit 103 will directly send the content information of the sender to the receiver through the signal output unit 109; if the analysis result is private information, the control unit 103 will control the signal output unit 109 to send another selection information to The sender allows the sender to choose the privacy type, such as "Please select which type of (confession/apology/propose breakup/XX/other) privacy information", or "Please select the privacy type: B1. Confession; B2. Apology; B3. propose to break up; B4. other".

In addition, the secure communication system 100 can also send only one selection message to the sender to choose, such as "Excuse me, is this information general information or private information? If it is private information, please choose which type it is (confession/apology/propose to break up/XX /Others), or "Please select the type of information: A. General; B. Privacy: B1. Confession; B2. Apology; B3. Breakup; B4. Others".

The present invention does not limit the content and format of the above-mentioned selection information.

When the information type of the content information is private information and the signal processing unit 105 obtains the privacy type, the signal processing unit 105 encrypts the input signal. Specifically, after the signal processing unit 105 arranges the identity information data of the sender, the identity information data of the receiver, and the privacy category data in sequence according to a certain data format, for example, the data format after the arrangement can be: <sender's identity Information data>︱<identity information data of the recipient>︱<privacy category data>, and then generate hash value data according to the hash function, and provide the generated hash value data to the search unit 106 .

The search unit 106 is configured to search the storage unit 107 for the same hash value data according to the hash value data generated by the signal processing unit 105 . If the search unit 106 finds that the same hash value data does not exist in the storage unit 107 after searching, it means that the current receiver has not sent the same type of private information to the current sender before, and the search unit 106 provides corresponding feedback information to the signal processing unit 105. The signal processing unit 105 exchanges the position of the identity information data of the sender and the identity information data of the receiver according to the feedback information provided by the search unit 106, and then arranges them with the privacy category data. For example, the data format after arrangement can be: <received The identity information data of the sender>︱<the identity information data of the sender>︱<privacy category data>, and then generate hash value data according to the hash function and store the hash value data in the storage unit 107, and at the same time send the content It is stored in the storage unit 107 after being encrypted with the recipient's identity information data (such as mobile phone number or user name, etc.).

If the search unit 106 finds that there is the same hash value data in the storage unit 107 after searching, it means that the current receiver has sent the same type of private information to the current sender before, and the search unit 106 provides the search result to the control unit 103, the control unit 103 controls the signal output unit 109 to directly send the content sent by the current sender to the current receiver according to the search result, and controls the signal processing unit 105 to use the private information sent by the current receiver to the current sender before the current receiver The sender's identity information data is decrypted and sent to the current sender through the signal output unit 109 .

The storage unit 107 is used for storing information data processed by the signal processing unit 105, such as the aforementioned hash value, encrypted transmission content information, and the like. Storage unit 107 can be any type of memory in the server or computer system, such as dynamic random access memory (DRAM), static random access memory (SRAM), flash memory (Flash memory), read-only memory (ROM) etc., the present invention is to This is not limited, and can be selected according to actual needs.

The storage unit 107 can save the hash value provided by the signal processing unit 105 and the encrypted transmission content information for a certain period under the control of the control unit 103. Relevant data such as encrypted content information will be deleted. If the current recipient sends the same type of private information to the current sender before the storage period, the control unit 103 controls the signal processing unit 105 to decrypt the encrypted transmission content information using the recipient’s identity information data and then passes the control signal output unit 109 Send to the current receiver, and control the signal output unit 109 to directly send the sending content information of the current receiver to the current sender. The time limit can be automatically set by the secure communication system 100, or can be set actively by the user. For example, the sender can indicate the storage time limit in the title of the content to be sent, or pass a delimiter (such as quotation marks, Brackets, etc.) indicate the retention period, such as: [privacy; confession]/[reservation for 1 month], etc. The present invention does not limit the format of the storage period actively set by the user, as long as the secure communication system 100 can identify it.

In addition, within the storage period, if the sender has not received the same kind of private information from the other party, it can also send a message of revocation of sending to the secure communication system 100 according to a specific data format to request revocation of the previously sent content information, such as , <Cancel>:<20140214 send content>. The present invention does not limit the format of the information that the user actively cancels sending, as long as the secure communication system 100 can identify it.

The signal output unit 109 is used to send information to the user terminal of the user.

The specific working conditions of the secure communication system 100 will be described in detail below. For the convenience of description, a first user (sender) sends a message to a second user (receiver) as an example for illustration.

When the signal output unit 101 receives an input signal from a first user, the input signal includes content information sent by the first user to a second user and identity information of the first user and the second user. The signal processing unit 105 judges the information type of the content information of the input signal, and if the information type of the content information is non-private information, the signal processing unit 105 notifies the control unit 103 so that the control unit 103 controls the signal output unit 109 directly send the content information to the second user; if the information type of the content information is private information, the signal processing unit 105 further judges the privacy type of the content information of the input signal to obtain the identity information data of the first user , the second user's identity information data and privacy type data are arranged in sequence to generate first hash value data, and the first hash value data is provided to the search unit 106 .

The search unit 106 searches in the storage unit 107 whether there is the same hash value data as the first hash value data, if there is, the search unit 106 notifies the control unit 103 so that the control unit 103 controls the signal output Unit 109 directly sends the content information of the input signal to the second user, and sends to the first user after decrypting the content information previously sent by the second user to the first user; if it does not exist, the search unit 106 Notify the signal processing unit 105 so that the signal processing unit 105 generates the second hash value data after the order of the identity information data of the first user and the identity information data of the second user are exchanged, and then arranged with the privacy type data , and store the second hash value data in the storage unit 107, and at the same time, the signal processing unit 106 encrypts the content information of the input signal using the identity information data of the second user and stores it in the storage unit 107.

Before a storage period, if the signal input unit 101 receives the content information sent by the second user to the first user with the same privacy type, the control unit 103 controls the signal processing unit 105 to use the second The user's identity information data decrypts the content information of the input signal and sends it to the second user through the signal output unit 109, and controls the signal output unit 109 to directly send the second user to the content of the first user Information is sent to the first user.

After the retention period, the control unit 103 deletes the encrypted input signal from the first user stored in the storage unit 107 . Or, before the retention period, if the signal input unit 101 receives a request to cancel sending from the first user, the signal input unit 101 notifies the control unit 103 so that the control unit 103 deletes the request stored in the storage unit. The encrypted input signal in 109.

In this embodiment, since the secure communication system 100 will combine the identity information of the sender (such as a mobile phone number), the identity information of the receiver, and the type of the sent private content information to generate a hash value, it can protect Privacy, even system administrators have no way of knowing. Further, only when a hash value with the same type of private content information previously sent by the receiver to the sender is found, the content information of the current sender will be sent to the receiver, and the content information previously sent by the receiver will be sent to the sender The content information is sent to the sender, thus avoiding the embarrassment of the sender after being rejected by the receiver. Furthermore, if no hash value of the same type as the private content information previously sent by the receiver to the sender is found, the system 100 can encrypt and store the private information according to the information type of the content information sent by the user and store it in a certain period of time. Delete after the deadline, thus ensuring that the user's private information will not be leaked, and avoiding embarrassing situations caused by being rejected by the other party.

Please refer to FIG. 2 , which is a schematic block diagram of a secure communication system provided by another embodiment of the present invention. As shown in FIG. 2, the safety communication system 200 provided by this embodiment is similar to the safety communication system 100 shown in FIG. unit 206 , storage unit 207 and signal output unit 209 . Wherein, different from the safety communication system 100, in this embodiment, the signal processing unit 205 includes a semantic analysis unit 202, which is used to analyze the content information in the input signal to judge the content information information type.

The semantic analysis unit 202 can directly analyze the natural language in the content information of the input signal through semantic analysis technology, such as analyzing the grammatical structure of the content information, capturing the characteristic keywords of the content information, etc. to determine the intention of the sender, thereby judging the content The information type of the information, if it is judged as private information, further judge which type of private information (privacy type) it is. As shown in Table 1:

Send Content keywords information type privacy type I like you like privacy to confess sorry i was wrong sorry, wrong privacy Apologize Let's have dinner together tomorrow --- generally ---

Table I

After the semantic analysis unit 202 determines the information type of the content information, if it is general information, the signal processing unit 205 notifies the control unit 203 so that the control unit 203 controls the signal output unit 209 to directly send the content information to the sending Object: if the information type of the content information is private information, the signal processing unit 205 encrypts the input signal.

When the semantic analysis unit 202 cannot judge the information type of the content information, the semantic analysis unit 202 notifies the control unit 203, and the control unit 203 controls the signal output unit 209 to control the signal output unit to send selection information to provide the input signal The user terminal of the user terminal, for the sender of the user terminal to select the information type of the content information in the input signal. After the user terminal sends back the information type selected by the sender, the semantic analysis unit 202 reads it again.

The secure communication system 200 in this embodiment directly uses the semantic analysis unit 202 to judge the information type of the content information, so that the secure communication system 200 is more efficient and more in line with the current intelligent development requirements.

Please refer to FIG. 3 , which is a schematic flowchart of a secure communication method provided by an embodiment of the present invention, which can be used in the above-mentioned secure communication system 100 and secure communication system 200 . The secure communication method includes the following steps:

S30. Receive an input signal from a first user, where the input signal includes content information sent by the first user (sender) to a second user (receiver) and the relationship between the first user and the second user Identity Information.

S31, judging whether the information type of the content information of the input signal is private information, if yes, execute step S32; if not, execute step S39. Among them, the information type of the content information of the input signal can be determined by sending selection information with a fixed format to the user for selection and then analyzing and reading according to the user's return information, or directly analyzing the content information in the input signal through a semantic analysis unit. The content information is analyzed to determine the information type of the content information.

S32. Determine the privacy type of the content information of the input signal and encrypt the input signal, such as arranging the identity information data of the first user, the identity information data of the second user, and the privacy type data in order to generate a first Hash value data.

S33, check in a storage unit whether there is related encrypted data of the content information previously sent by the second user to the first user and with the same privacy type, such as searching for the same hash as the first hash value data value data. If there is no data with the same hash value, execute step S34; if there is data with the same hash value, execute step S38.

S34, encrypt and save the input signal, for example, after the order of the identity information data of the first user and the identity information data of the second user are exchanged, and then arranged with the privacy type data, the second hash value data is generated, and saved The second hash value data, and the content information of the input signal is encrypted and stored using the identity information data of the second user.

S35, judging whether the request to cancel sending sent by the first user is received before a storage period, if not, execute step S36; if yes, execute step S37.

S36, judging whether the storage period has been reached, if yes, execute step S37; if not, return to step S35.

S37. Delete the encrypted input signal from the first user.

S38. Directly send the content information of the input signal to the second user, and send the content information previously sent by the second user to the first user to the first user. Generally speaking, the content information previously sent by the second user to the first user needs to be decrypted with the identity information data of the first user before being sent to the first user.

S39. Directly send the content information of the input signal to the second user.

In addition, after encrypting and storing the input signal from the first user, if the content information of the same privacy type sent by the second user to the first user is received before the storage period, the input signal needs to be encrypted. After decryption, the content information of the input signal is sent to the second user, and the content information sent by the second user to the first user is directly sent to the first user. Wherein, decrypting the input signal mainly uses the identity information data of the second user to decrypt the content information of the input signal.

In this embodiment, the secure communication method will combine the identity information of the sender (first user) (such as mobile phone number or user name, etc.), the identity information of the receiver (second user) and the information of the sent private content information Types are concatenated to generate a hash value, which can protect privacy, even system administrators have no way of knowing. Further, only when a hash value with the same type of private content information previously sent by the receiver to the sender is found, the content information of the current sender will be sent to the receiver, and the content information previously sent by the receiver will be sent to the sender The content information is sent to the sender, thus avoiding the embarrassment of the sender after being rejected by the receiver. Furthermore, if no hash value with the same type of private content information previously sent by the receiver to the sender is found, the private information can be encrypted and stored according to the information type of the content information sent by the user and stored after a certain period of time Delete, thereby ensuring that the user's private information will not be leaked, avoiding the embarrassing situation caused by being rejected by the other party.

It should be noted that the embodiments of the present invention can be realized by hardware, or by software plus a necessary general hardware platform. Based on this understanding, the technical solutions of the embodiments of the present invention can be embodied in the form of software products, which can be stored in a non-volatile storage medium (which can be CD-ROM, U disk, mobile hard disk, etc.), Several instructions are included to enable a computer device (which may be a personal computer, a server, or a network device, etc.) to execute the methods described in various implementation scenarios of the embodiments of the present invention.

The above are only preferred embodiments of the present invention, and do not limit the present invention in any form. Although the present invention has been disclosed as above with preferred embodiments, it is not intended to limit the present invention. Any skilled person familiar with the profession, Without departing from the scope of the technical solution of the present invention, when the technical content disclosed above can be used to make some changes or be modified into equivalent embodiments with equivalent changes, but as long as it does not depart from the content of the technical solution of the present invention, the technical essence of the present invention is Any simple modifications, equivalent changes and modifications made in the above embodiments still fall within the scope of the technical solution of the present invention.

Claims (17)

1. a kind of safe communication system, it is characterised in that the safe communication system includes：

Signal input unit, for receiving the input signal from one first user, which includes first user Send to the content information of a second user and first user and the identity information of the second user；

Signal processing unit, the information type of the content information for judging the input signal, if the information type is believed for privacy Breath, determines whether the privacy type of the content information of the input signal, and the input signal is encrypted；

Storage unit, for storing the related encrypted data of the input signal；

Searching unit, the signal processing unit is by the identity information data of first user, the identity information number of the second user It is supplied to this to look into according to the hash of generation first Value Data after being arranged in order with privacy categorical data, and by the first hash Value Data Unit is looked for, which is used to search whether that there are what the second user was previously sent in the storage unit to give first use Family, and the related encrypted data of the consistent content information of privacy type；

Signal output unit, for sending information to first user and the second user；And

Control unit, for judging whether to send the content information of the input signal to this according to the lookup result of the searching unit Second user；Wherein, if lookup result be there are the second user be previously sent to first user, and privacy type one The related encrypted data of the content information of cause, then the control unit control the signal output unit to send the content of the input signal Information gives the second user, and the content information to first user that the second user is previously sent is sent to first use Family.

2. safe communication system according to claim 1, it is characterised in that the searching unit is searched in the storage unit With the presence or absence of the hash Value Data identical with the first hash Value Data.

3. safe communication system according to claim 2, it is characterised in that if not finding and the first hash Value Data Identical hash Value Data, then the searching unit notify the signal processing unit so that the signal processing unit is by first user The order of identity information data of identity information data and the second user exchange and then arrange it with privacy categorical data The hash of generation second Value Data afterwards, and by the second hashed value data storage in the storage unit.

4. safe communication system according to claim 3, it is characterised in that after the pot-life, the control unit The encrypted input signal from first user being stored in the storage unit is deleted, the wherein pot-life is user Or system is preset.

5. safe communication system according to claim 4, it is characterised in that before the pot-life, if the signal is defeated Enter unit receive from first user send revocation send request, the signal input unit notify the control unit with The control unit is set to delete the encrypted input signal from first user being stored in the storage unit.

6. safe communication system according to claim 3, it is characterised in that the signal processing unit further inputs this The content information of signal is stored in the storage unit after being encrypted using the identity information data of the second user.

7. safe communication system according to claim 5, it is characterised in that before the pot-life, if the signal is defeated Enter unit receive second user transmission to first user, and the content information that privacy type is consistent, then the control Unit controls the signal processing unit to be carried out using the identity information data of the second user to the content information of the input signal The second user is sent to by the signal output unit after decryption, and controls the signal output unit directly second to use this The content information to first user that family is sent is sent to first user.

8. safe communication system according to claim 1, it is characterised in that the input signal further includes the class of content information Type information, the signal processing unit parse the input signal to obtain the info class of the content information in the input signal Type.

9. safe communication system according to claim 1, it is characterised in that the signal processing unit includes semantic analysis list Member, which is used to carry out semantic analysis to the content information in the input signal, to judge the content information Information type.

10. safe communication system according to claim 9, it is characterised in that when the semantic analysis unit can not judge this During the information type of content information, which notifies the control unit, which controls the signal output list Member controls the signal output unit to send a selection information and gives first user, so that first user is selected in the input signal Content information information type.

A kind of 11. safety communicating method, suitable for a safe communication system, it is characterised in that the safety communicating method include with Lower step：

The input signal from one first user is received, the input signal is including first user transmission to a second user Content information and first user and the second user identity information；

Judge the information type of the content information of the input signal；

If the information type is privacy information, the privacy type of the content information of the input signal is determined whether, and it is defeated to this Enter signal to be encrypted, by the identity information data of first user, the second user identity information data with it is hidden The hash of generation first Value Data after private categorical data is arranged in order；

Searched whether in a storage unit there are the second user be previously sent to first user, and privacy type one The related encrypted data of the content information of cause；And

Judge whether that the content information for sending the input signal gives the second user according to lookup result.

12. safety communicating method according to claim 11, it is characterised in that search whether that there are the second user is previous Send to first user, and the related encrypted data of the consistent content information of privacy type includes searching and first is dissipated with this The identical hash Value Data of train value data.

13. safety communicating method according to claim 12, it is characterised in that judge whether to send according to lookup result and be somebody's turn to do The content information of input signal includes to the second user：

If find with the identical hash Value Data of the first hash Value Data, directly transmit the content information of the input signal to The second user, and the content information to first user that the second user is previously sent is sent to first user；With And

If not finding the hash Value Data identical with the first hash Value Data, preservation is encrypted to the input signal.

14. safety communicating method according to claim 13, it is characterised in that the input signal is encrypted preservation bag Include order exchange and then and the privacy of the identity information data by the identity information data of first user Yu the second user The hash of generation second Value Data after categorical data arrangement, and preserve the second hash Value Data.

15. safety communicating method according to claim 14, it is characterised in that before a pot-life, if receiving The request that the revocation that first user sends is sent, deletes the encrypted input signal from first user, wherein, should Pot-life presets for user or system.

16. safety communicating method according to claim 13, it is characterised in that be encrypted and be saved into the input signal One step includes the content information of input signal preservation is encrypted using the identity information data of the second user.

17. safety communicating method according to claim 15, it is characterised in that before the pot-life, if receiving The second user send to first user, and the content information that privacy type is consistent utilizes the identity of the second user Information data sends input signal content information after the content information of the input signal is decrypted gives second use Family, and the content information to first user for directly sending the second user is sent to first user.