CN106713618A - Processing method of identifying code and mobile terminal - Google Patents

Abstract

Embodiments of the present invention provide a verification code processing method and a mobile terminal. The method includes: detecting whether there is a preset keyword in the received short message, wherein the preset keyword is a vocabulary indicating that the short message where the preset keyword is located contains a verification code; if it exists, extracting the key content in the short message, The key content includes the verification code and the phone number of the sending end of the short message; the key content is encrypted using a symmetric algorithm to obtain the ciphertext of the verification code. The present invention detects whether the received short message contains a verification code by preset keywords, and if it contains a verification code, then encrypts the verification code in the short message and the phone number of the sending end of the short message together with a symmetric algorithm. In this way, even if there is a virus program intercepting the verification code in the mobile terminal, it still cannot steal the highly encrypted verification code. It can ensure that the verification code is not stolen, avoid the loss of the user's property, and improve the security of the user's verification information.

Description

A verification code processing method and mobile terminal

technical field

The invention relates to the field of communication technology, in particular to a verification code processing method and a mobile terminal.

Background technique

With the rapid development of mobile terminals, the convenience brought by mobile terminals to users is increasing. Mobile terminals (such as mobile phones) have become a part of people's lives. In this context, people are becoming more and more concerned about the security of smartphones.

When the user's mobile phone number, bank card, and ID card are leaked, the SMS verification code becomes the last security barrier. Regardless of whether it is on a computer or a mobile phone, SMS verification codes are the most important security verification link in the online payment process. SMS verification codes have sometimes replaced bank card passwords to complete the final security verification method. With the verification code, hackers can wantonly steal online banking.

Therefore, the protection of the verification code is a mobile phone security link that cannot be ignored. And because the Android system is an open source system, which is different from those closed systems, the focus of criticism on Android phones has always been security deviations, and they face more attacks. Then once the mobile phone is implanted with a virus, malicious programs can easily intercept the user's SMS verification code, thereby causing damage to the user's property security.

In the existing technology, in order to protect the security of the user SMS verification code, the existing solution adopts: after the user enters the payment scene, the solution can perform a security scan on the current environment, that is, to detect whether there is a virus related to the virus in the virus database. Matching malicious programs, so as to ensure that the environment for receiving SMS verification codes is safe.

However, the update and evolution of viruses is very fast, and antivirus software can only kill known viruses, and virus Trojan horses that intercept verification code text messages will be updated day by day. If the virus program on the terminal does not match the virus program in the virus database, some newly evolved viruses will be missed, which will cause the new virus to steal the verification code and cause the user's property to suffer losses.

Obviously, this verification code protection scheme in the prior art has certain limitations, and cannot guarantee the security of the environment for receiving SMS verification codes, and cannot avoid the situation of verification codes being stolen, which may easily cause property losses to users.

Contents of the invention

The embodiment of the present invention provides a verification code processing method and a mobile terminal to solve the problem that the verification code protection scheme in the prior art cannot guarantee the security of the verification code receiving SMS environment and cannot avoid the verification code being stolen , It is easy to cause property damage to users.

In the first aspect, an embodiment of the present invention provides a method for processing a verification code, which is applied to a mobile terminal, and the method includes:

Detecting whether there is a preset keyword in the received short message, wherein the preset keyword is a vocabulary indicating that the short message where the preset keyword is located contains a verification code;

If it exists, then extract the key content in the short message, the key content includes a verification code and the phone number of the short message sending end;

A symmetric algorithm is used to encrypt the key content to obtain a verification code ciphertext.

In the second aspect, the embodiment of the present invention also provides a mobile terminal, the mobile terminal includes:

A detection module, configured to detect whether there is a preset keyword in the received short message, wherein the preset keyword is a vocabulary indicating that the short message where the preset keyword is located contains a verification code;

The first extraction module is used to extract the key content in the short message if it exists, and the key content includes a verification code and a phone number of the short message sending end;

An encryption module, configured to encrypt the key content by using a symmetric algorithm to obtain a verification code ciphertext.

In this way, the embodiment of the present invention detects whether a verification code is included in the received text message by preset keywords, and if the verification code is included, the verification code in the text message and the phone number of the sending end of the text message are encrypted with a symmetric algorithm. . In this way, even if there is a virus program intercepting the verification code in the mobile terminal, it still cannot steal the highly encrypted verification code. In this way, the embodiments of the present invention turn to highly encrypted verification codes from the perspective of checking and killing viruses in the system, so that even if there are new types of viruses that are not stored in the virus database in the mobile terminal, it can still ensure that the verification codes will not be blocked. Stealing, avoiding the loss of users' property, and improving the security of users' verification information.

Description of drawings

In order to more clearly illustrate the technical solutions of the embodiments of the present invention, the following will briefly introduce the accompanying drawings that need to be used in the description of the embodiments of the present invention. Obviously, the accompanying drawings in the following description are only some embodiments of the present invention , for those skilled in the art, other drawings can also be obtained according to these drawings without paying creative labor.

FIG. 1 is a flowchart of a verification code processing method according to a first embodiment of the present invention;

2 is a flowchart of a verification code processing method according to a second embodiment of the present invention;

3 is a flowchart of a verification code processing method according to a third embodiment of the present invention;

FIG. 4 is a block diagram of a mobile terminal according to a fourth embodiment of the present invention;

FIG. 5 is a block diagram of a mobile terminal according to a fifth embodiment of the present invention;

FIG. 6 is a block diagram of a mobile terminal according to a sixth embodiment of the present invention;

Fig. 7 is a schematic structural diagram of a mobile terminal according to a seventh embodiment of the present invention.

detailed description

The following will clearly and completely describe the technical solutions in the embodiments of the present invention with reference to the accompanying drawings in the embodiments of the present invention. Obviously, the described embodiments are some of the embodiments of the present invention, but not all of them. Based on the embodiments of the present invention, all other embodiments obtained by persons of ordinary skill in the art without creative efforts fall within the protection scope of the present invention.

first embodiment

Referring to FIG. 1 , it shows a flowchart of a verification code processing method according to an embodiment of the present invention, and the method may specifically include the following steps:

Step 101, detecting whether there is a preset keyword in the received short message;

Wherein, after the system of the mobile terminal receives the short message, it may first detect whether the short message content of the short message contains a preset keyword, and the preset keyword is a vocabulary indicating that the content of the short message containing the keyword contains a verification code. The so-called verification code is a 4-digit or 6-digit number. Of course, the number of numbers contained in the verification code is not limited to the number listed above. All the numbers involved in the verification code in the prior art are within the protection scope of the present invention .

Step 102, if it exists, then extract the key content in the short message, the key content includes a verification code and the phone number of the short message sending end;

Then, if a preset keyword is detected in the short message content of the received short message, that is, it indicates that the short message is a short message containing a verification code, then the verification code in the short message and the phone number of the sending end of the short message can be extracted, The signal code is sent immediately.

Step 103: Encrypt the key content using a symmetric algorithm to obtain a verification code ciphertext.

Among them, since the symmetric algorithm is currently the most difficult encryption algorithm to decipher, the symmetric algorithm can be used to encrypt the verification code and the sending code extracted from the short message, so as to obtain the verification code ciphertext.

In this way, the embodiment of the present invention detects whether a verification code is included in the received text message by preset keywords, and if the verification code is included, the verification code in the text message and the phone number of the sending end of the text message are encrypted with a symmetric algorithm. . In this way, even if there is a virus program intercepting the verification code in the mobile terminal, it still cannot steal the highly encrypted verification code. In this way, the embodiments of the present invention turn to highly encrypted verification codes from the perspective of checking and killing viruses in the system, so that even if there are new types of viruses that are not stored in the virus database in the mobile terminal, it can still ensure that the verification codes will not be blocked. Stealing, avoiding the loss of users' property, and improving the security of users' verification information.

second embodiment

Referring to FIG. 2 , it shows a flow chart of a verification code processing method according to another embodiment of the present invention, and the method may specifically include the following steps:

Step 201, detecting whether there are preset keywords in the received short message;

Wherein, after the system of the mobile terminal receives the short message, it may first detect whether the short message content of the short message contains a preset keyword, and the preset keyword is a vocabulary indicating that the content of the short message containing the keyword contains a verification code. The so-called verification code is a 4-digit or 6-digit number. Of course, the number of numbers contained in the verification code is not limited to the number listed above. All the numbers involved in the verification code in the prior art are within the protection scope of the present invention .

Step 202, if it exists, then extract the key content in the short message, the key content includes the verification code and the phone number of the short message sending end;

Then, if a preset keyword is detected in the short message content of the received short message, that is, it indicates that the short message is a short message containing a verification code, then the verification code in the short message and the phone number of the sending end of the short message can be extracted, The signal code is sent immediately.

Step 203, generating a verification code flag according to the number of digits of the verification code;

Specifically, if the verification code has 3 digits, then the last two digits of the verification code flag are 03; if the verification code has 6 digits, then the last two digits of the verification code flag The number is 06, and the last two digits are used to identify the digits of the verification code. The number of digits of the verification code flag can be arbitrarily set according to actual needs, as long as certain rules are followed, the verification code flag can be quickly found from a series of numbers when decrypting.

Step 204, sequentially sort and combine the phone number, the verification code flag and the verification code to obtain the combined content;

That is, the phone number, the verification code flag and the verification code can be sorted, and the three sorted information can be combined to obtain a set of data, that is, the combined content.

Step 205: Encrypt the combined content using a symmetric algorithm to obtain a verification code ciphertext.

Wherein, the combined content may be encrypted using a DES (Data Encryption Standard, i.e. data encryption standard) symmetric algorithm to obtain a verification code ciphertext;

Among them, the DES algorithm has extremely high security, and the exhaustive space of a 56-bit long key is 256, which means that if a computer detects one million keys per second, it can search It takes nearly 2285 years for all the keys. It can be seen that the attack of the DES algorithm is extremely difficult.

With the help of the technical solutions of the above-mentioned embodiments of the present invention, the embodiments of the present invention can generate verification code flags when encrypting the key content in the short message, so that in the subsequent decryption process, it is possible to quickly determine the key content of the encrypted combination. Which part of the data is the verification code, so as to quickly restore the text message.

third embodiment

In order to better understand the above-mentioned technical solution of the present invention, the above-mentioned technical solution will be described in detail below in conjunction with the specific example shown in FIG. 3 .

First, the system of the mobile terminal receives the short message;

Then, the system of the embodiment of the present invention will process the received short message according to the following processing method, compared with any application program of the mobile terminal, this processing method has the highest priority for processing the received short message;

That is, after receiving a short message, the processing method of the embodiment of the present invention is the first to process the short message, regardless of whether the short message contains a verification code or not. In this way, it can be ensured that before the key content in the short message is encrypted, the short message will not be intercepted by the virus program, so that the virus program cannot steal the verification code and cause the property loss of the user.

The processing flow of the processing method with the highest priority for processing the received short message mentioned in the embodiment of the present invention is described in detail below:

After the system receives the text message, since the text message without verification code and other verification data will not cause the theft of user privacy and the loss of property, it is necessary to use preset keywords to retrieve the content of the text message, which can include "verification" Code", "verification code" and other words that indicate that there is a digital string (ie verification code) for verification in the text message where the keyword is located;

Then if the short message does not contain any of the preset keywords, it means that the short message does not involve the verification number string information, and the virus program will generally not intercept it, so it can not be processed;

And if the short message contains any preset keyword, it means that the short message is a verification short message, which is easy to be stolen;

Therefore, it is necessary to extract the key content of the received SMS, including the verification code and the phone number of the SMS sending end;

Because these two digital information (that is, the verification code and the phone number of the sending end of the short message) are key contents that are likely to affect the security of the user's property.

Then, since the subsequent encryption needs to combine the two pieces of information together for encryption, in order to avoid being unable to distinguish which attribute the two pieces of digital information belong to when decrypting, that is, the phone number or the verification code. Here, it is necessary to generate a verification code flag according to the number of digits of the verification code. Specifically, if the number of digits of the verification code is 3, the last two digits of the verification code flag are 03; If the number of digits is 6, then the last two digits of the verification code flag are 06, and the last two digits are used to identify the number of digits of the verification code. The number of digits of the verification code flag can be arbitrarily set according to actual needs, as long as certain rules are followed, the verification code flag can be quickly found from a series of numbers when decrypting.

In addition, it should be noted that although in this embodiment, the configuration of the verification code flag is such that the last two digits are the number of digits of the verification code, the significance of the existence of the verification code flag is as a flag, Being able to locate it within a series of numbers allows you to determine which string of numbers to the left and right of it is a verification code, and which string is a phone number. Therefore, the generation method of the verification code flag is not limited to the above-mentioned generation method according to the digits of the verification code, and the generation method of the verification code flag can also be generated according to the digits of the phone number. Of course, the digits of each digital string The precondition for generating the verification code flag bit based on the number is that the number of digits of each number string is different. Of course, the way to generate the verification code flag is not limited to the way of generating according to the number of digits in the number string. It can be a random number with an identifier, and the arrangement of the phone number and the verification code needs to follow certain rules, for example The phone number is arranged on the left side of the verification code sign, and the verification code is arranged on the right side of the verification code sign, etc.

Then, the phone number, the verification code flag and the verification code can be sequentially sorted and combined to obtain the combined content;

Then, adopt the DES symmetric algorithm to encrypt the combined content to obtain the verification code ciphertext;

Among them, the DES algorithm has extremely high security, and the exhaustive space of a 56-bit long key is 256, which means that if a computer detects one million keys per second, it can search It takes nearly 2285 years for all the keys. It can be seen that the attack of the DES algorithm is extremely difficult.

When adopting the DES symmetric algorithm to encrypt the combined content, there are three encryption entry parameters: key, data, and mode. Among them, key is the key used for encryption and decryption, data is the encrypted and decrypted data (that is, the combined content here), and mode is its working mode, which are encryption mode and decryption mode respectively. When the working mode is the encryption mode, the plaintext of the combined data can be grouped according to 64 bits to form a plaintext group, and the key is used to encrypt the data; when the working mode is the decryption mode, the key is used to decrypt the data. In practical application, the key can only use 56 bits in 64 bits, so that it has high security.

Of course, here only the DES symmetric algorithm is used as an example to illustrate the encryption. In other embodiments, other algorithms such as 3DES (triple data encryption algorithm, Triple Data Encryption Algorithm) and AES (Advanced Encryption Standard, Advanced Encryption Standard) can also be used. ) symmetric algorithm to encrypt the plaintext of the combined data, which will not be repeated here.

After the encryption is completed, the ciphertext of the verification code and the remaining content of the short message after extracting the key content can be stored separately. The specific storage steps are:

The current time is obtained, and the verification code ciphertext and the remaining text content of the short message after extracting the key content are respectively stored in different databases with the current time as an identifier.

Wherein, the verification code ciphertext may be stored in a database with higher operation authority, and the above remaining content may be stored in a short message database with general authority. In this way, the security of the verification code can be further improved. The significance of storing the above two contents with the current time as the mark is that since the current time and the above two contents are also stored in the corresponding database respectively, the above two contents in the database can be When extracting, the storage locations of the two contents in the database can be quickly determined according to the identifier of the current time.

Then, through the above process, the encryption process of the verification code is described in detail. The processing flow of displaying the encrypted verification code on the SMS application for displaying the verification code to the user will be further described below.

After the above two contents are stored in each database, if it is detected that the application program calls the reading interface of the short message, then the authority of the application program is verified;

Wherein, the permission verification method can be but not limited to: preset application program list that can call the reading interface of the short message, if the application program that calls the reading interface belongs to the program in the application program list, it means that the verification is passed, otherwise it is not pass.

In this way, malicious programs can also be guaranteed to read and display the text message content.

If the authority verification of the application program passes (the program passing the authority verification here is a short message program), then determine the storage location of the verification code ciphertext and the remaining text content according to the identification;

Here, it has been elaborated above, that is, the above-mentioned current time is used as an identifier, which can facilitate the storage location of the above-mentioned verification code ciphertext and the above-mentioned remaining content in the database;

Extracting the verification code ciphertext and the remaining content in the storage location;

Using the DES symmetric algorithm to decrypt the extracted ciphertext of the verification code to obtain the key content;

Among them, the so-called symmetric algorithm means that the encryption and decryption keys are the same. Since the encryption in the above example is the DES algorithm, the decryption is also the DES algorithm and the encryption key is the same.

Combining the key content obtained by decryption and the extracted remaining text content to obtain the plain text of the short message;

Returning the plaintext of the short message to the short message program that has passed the authority verification;

Finally, the short message program can display the plain text of the received short message, and the user can view the safe verification code.

With the help of the technical solutions of the above-mentioned embodiments of the present invention, the embodiments of the present invention can first encrypt the verification code in the text message and store it in a database with high authority before returning the content of the received text message with the verification code to the text message application. In this way, when receiving a short message containing a verification code, the verification code is stolen by a malicious program in the mobile terminal, resulting in loss of property of the user.

Fourth embodiment

Referring to FIG. 4, a block diagram of a mobile terminal according to an embodiment of the present invention is shown. The mobile terminal shown in Figure 4 includes:

Detection module 31, is used for detecting whether there is preset keyword in the short message that receives;

The first extracting module 32 is used to extract the key content in the short message if it exists, and the key content includes the phone number of the verification code and the short message sending end;

The encryption module 33 is configured to encrypt the key content using a symmetric algorithm to obtain a verification code ciphertext.

In this way, the embodiment of the present invention detects whether a verification code is included in the received text message by preset keywords, and if the verification code is included, the verification code in the text message and the phone number of the sending end of the text message are encrypted with a symmetric algorithm. . In this way, even if there is a virus program intercepting the verification code in the mobile terminal, it still cannot steal the highly encrypted verification code. In this way, the embodiments of the present invention turn to highly encrypted verification codes from the perspective of checking and killing viruses in the system, so that even if there are new types of viruses that are not stored in the virus database in the mobile terminal, it can still ensure that the verification codes will not be blocked. Stealing, avoiding the loss of users' property, and improving the security of users' verification information.

fifth embodiment

Referring to FIG. 5 , it shows a block diagram of a mobile terminal according to another embodiment of the present invention. The mobile terminal shown in Figure 5 includes:

The detection module 31 is used to detect whether there is a preset keyword in the received short message, wherein the preset keyword is a vocabulary indicating that the short message where the preset keyword is located contains a verification code;

The first extracting module 32 is used to extract the key content in the short message if it exists, and the key content includes the phone number of the verification code and the short message sending end;

The encryption module 33 is configured to encrypt the key content using a symmetric algorithm to obtain a verification code ciphertext.

Wherein, compared with any application program of the mobile terminal, the mobile terminal (that is, each module and submodule shown in this embodiment) has the highest priority in processing the short message.

Described encryption module 33 comprises:

Generating sub-module 331, for generating verification code flags according to the number of digits of the verification code;

The combination sub-module 332 is used to sequentially sort and combine the phone number, the verification code flag and the verification code to obtain combined content;

The encryption sub-module 333 is configured to encrypt the combined content by using a symmetric algorithm to obtain a verification code ciphertext.

Obtaining module 34, for obtaining current time;

The storage module 35 is configured to store the ciphertext of the verification code and the remaining text content of the short message after extracting the key content in different areas, using the current time as an identifier.

The verification module 36 is used to verify the authority of the application program if it is detected that the application program calls the reading interface of the short message;

A determining module 37, configured to determine the storage location of the verification code ciphertext and the remaining text content according to the identification if the authority verification of the application program is passed;

A second extraction module 38, configured to extract the verification code ciphertext and the remaining content in the storage location;

A decryption module 39, configured to use the symmetric algorithm to decrypt the extracted ciphertext of the verification code to obtain the key content;

The combination module 40 is used to combine the key content obtained by decryption and the extracted remaining text content to obtain the plaintext of the short message;

The return module 41 is used to return the plaintext of the short message to the application program that has passed the authority verification.

The mobile terminal can implement the above-mentioned method embodiment from the perspective of scanning and killing viruses in the system to highly encrypt the verification code, so that even if there is a new type of virus that is not stored in the virus database in the mobile terminal, it can still be detected. It can ensure that the verification code is not stolen, avoid the loss of the user's property, and improve the security of the user's verification information. In order to avoid repetition, it will not be repeated here.

Sixth embodiment

Fig. 6 is a block diagram of a mobile terminal according to yet another embodiment of the present invention. The mobile terminal 500 shown in FIG. 6 includes: at least one processor 501 , a memory 502 , at least one network interface 504 and a user interface 503 . Various components in the mobile terminal 500 are coupled together through the bus system 505 . It can be understood that the bus system 505 is used to realize connection and communication between these components. In addition to the data bus, the bus system 505 also includes a power bus, a control bus and a status signal bus. However, the various buses are labeled as bus system 505 in FIG. 6 for clarity of illustration.

Wherein, the user interface 503 may include a display, a keyboard, or a pointing device (for example, a mouse, a trackball (trackball), a touch panel, or a touch screen, and the like.

It can be understood that the memory 502 in the embodiment of the present invention may be a volatile memory or a nonvolatile memory, or may include both volatile and nonvolatile memories. Wherein, the non-volatile memory may be a read-only memory (Read-Only Memory, ROM), a programmable read-only memory (Programmable ROM, PROM), an erasable programmable read-only memory (Erasable PROM, EPROM), an electronically programmable Erase Programmable Read-Only Memory (Electrically EPROM, EEPROM) or Flash. The volatile memory can be Random Access Memory (RAM), which acts as an external cache. By way of illustration and not limitation, many forms of RAM are available such as Static RAM (SRAM), Dynamic RAM (DRAM), Synchronous DRAM (Synchronous DRAM, SDRAM), double data rate synchronous dynamic random access memory (Double Data RateSDRAM, DDRSDRAM), enhanced synchronous dynamic random access memory (Enhanced SDRAM, ESDRAM), synchronous connection dynamic random access memory (Synchlink DRAM, SLDRAM) and Direct memory bus random access memory (DirectRambus RAM, DRRAM). The memory 502 of the systems and methods described in embodiments of the present invention is intended to include, but is not limited to, these and any other suitable types of memory.

In some implementations, the memory 502 stores the following elements, executable modules or data structures, or their subsets, or their extended sets: an operating system 5021 and an application program 5022 .

Among them, the operating system 5021 includes various system programs, such as framework layer, core library layer, driver layer, etc., for realizing various basic services and processing tasks based on hardware. The application program 5022 includes various application programs, such as a media player (Media Player), a browser (Browser), etc., and is used to implement various application services. The program for realizing the method of the embodiment of the present invention may be included in the application program 5022 .

In the embodiment of the present invention, the processor 501 is used to detect whether there is a preset keyword in the received short message by calling the program or instruction stored in the memory 502, specifically, the program or instruction stored in the application program 5022, Wherein, the preset keyword is a vocabulary that includes a verification code in the short message indicating that the preset keyword is located; if it exists, extract the key content in the short message, and the key content includes the verification code and the text message sending A phone number; using a symmetric algorithm to encrypt the key content to obtain a verification code ciphertext.

The methods disclosed in the foregoing embodiments of the present invention may be applied to the processor 501 or implemented by the processor 501 . The processor 501 may be an integrated circuit chip and has signal processing capabilities. In the implementation process, each step of the above method may be completed by an integrated logic circuit of hardware in the processor 501 or instructions in the form of software. The above-mentioned processor 501 may be a general-purpose processor, a digital signal processor (Digital Signal Processor, DSP), an application specific integrated circuit (Application Specific Integrated Circuit, ASIC), an off-the-shelf programmable gate array (Field Programmable Gate Array, FPGA) or other available Program logic devices, discrete gate or transistor logic devices, discrete hardware components. Various methods, steps and logic block diagrams disclosed in the embodiments of the present invention may be implemented or executed. A general-purpose processor may be a microprocessor, or the processor may be any conventional processor, or the like. The steps of the methods disclosed in the embodiments of the present invention may be directly implemented by a hardware decoding processor, or implemented by a combination of hardware and software modules in the decoding processor. The software module can be located in a mature storage medium in the field such as random access memory, flash memory, read-only memory, programmable read-only memory or electrically erasable programmable memory, register. The storage medium is located in the memory 502, and the processor 501 reads the information in the memory 502, and completes the steps of the above method in combination with its hardware.

It can be understood that the embodiments described in the embodiments of the present invention may be implemented by hardware, software, firmware, middleware, microcode or a combination thereof. For hardware implementation, the processing unit can be implemented in one or more application specific integrated circuits (Application Specific Integrated Circuits, ASIC), digital signal processor (Digital Signal Processing, DSP), digital signal processing device (DSP Device, DSPD), programmable logic Device (Programmable Logic Device, PLD), Field-Programmable Gate Array (Field-Programmable Gate Array, FPGA), general-purpose processor, controller, microcontroller, microprocessor, other electronic units for performing the functions described in this application or a combination thereof.

For software implementation, the techniques described in the embodiments of the present invention may be implemented through modules (such as procedures, functions, etc.) that execute the functions described in the embodiments of the present invention. Software codes can be stored in memory and executed by a processor. Memory can be implemented within the processor or external to the processor.

Wherein, compared with any application program of the mobile terminal, the processing priority of the short message by the processor 501 is the highest.

Optionally, the processor 501 is further configured to: generate a verification code flag according to the number of digits of the verification code;

The phone number, the verification code flag and the verification code are sequentially sorted and combined to obtain combined content; the combined content is encrypted by using a symmetric algorithm to obtain a verification code ciphertext.

Optionally, the processor 501 is further configured to: obtain the current time; and use the current time as an identifier to store the verification code ciphertext and the remaining text content of the short message after extracting the key content in different areas respectively.

Optionally, the processor 501 is further configured to: if it is detected that the application program invokes the reading interface of the short message, verify the authority of the application program; Identify and determine the storage location of the verification code ciphertext and the remaining text content; extract the verification code ciphertext and the remaining content in the storage location; use the symmetric algorithm to extract the verification code Decrypting the ciphertext to obtain the key content; combining the key content obtained by decryption and the extracted remaining text content to obtain the plain text of the short message; returning the plain text of the short message to the application program that has passed the authority verification.

The mobile terminal 500 can realize the implementation of the mobile terminal in the foregoing embodiments, even if there is a virus program that intercepts the verification code in the mobile terminal, it still cannot steal the highly encrypted verification code. From the perspective of scanning and killing viruses in the system, the verification code is highly encrypted, so that even if there is a new type of virus in the mobile terminal that is not stored in the virus database, the verification code can still be guaranteed not to be stolen and the user’s property loss can be avoided. , to improve the security of the user's verification information, in order to avoid repetition, it will not be repeated here.

Seventh embodiment

Fig. 7 is a schematic structural diagram of a mobile terminal according to another embodiment of the present invention. Specifically, the mobile terminal 600 in FIG. 7 may be a mobile phone, a tablet computer, a personal digital assistant (Personal Digital Assistant, PDA), or a vehicle-mounted computer.

Mobile terminal 600 in FIG.

Wherein, the input unit 630 can be used to receive digital or character information input by the mobile terminal user, and generate signal input related to the mobile terminal user setting and function control of the mobile terminal 600 . Specifically, in the embodiment of the present invention, the input unit 630 may include a touch panel 631 . The touch panel 631, also referred to as a touch screen, can collect touch operations of the mobile terminal user on or near it (such as the operation of the mobile terminal user on the touch panel 631 using any suitable object or accessory such as a finger or a stylus), And drive the corresponding connection device according to the preset program. Optionally, the touch panel 631 may include two parts, a touch detection device and a touch controller. Among them, the touch detection device detects the touch orientation of the mobile terminal user, and detects the signal brought by the touch operation, and transmits the signal to the touch controller; the touch controller receives the touch information from the touch detection device, and converts it into contact coordinates , and send it to the processor 660, and can receive and execute the command sent by the processor 660. In addition, the touch panel 631 can be implemented in various types such as resistive, capacitive, infrared, and surface acoustic wave. In addition to the touch panel 631, the input unit 630 may also include other input devices 632, which may include but not limited to physical keyboards, function keys (such as volume control buttons, switch buttons, etc.), trackballs, mice, joysticks, etc. one or more of.

Wherein, the display unit 640 can be used to display information input by or provided to the mobile terminal user and various menu interfaces of the mobile terminal 600 . The display unit 640 may include a display panel 641. Optionally, the display panel 641 may be configured in the form of an LCD or an organic light-emitting diode (Organic Light-Emitting Diode, OLED).

It should be noted that the touch panel 631 can cover the display panel 641 to form a touch display screen. When the touch display screen detects a touch operation on or near it, it is sent to the processor 660 to determine the type of the touch event, and then the processor 660 provides corresponding visual output on the touch display screen according to the type of the touch event.

The touch display screen includes an application program interface display area and a common control display area. The arrangement of the display area of the application program interface and the display area of the commonly used controls is not limited, and may be an arrangement in which the two display areas can be distinguished, such as vertical arrangement, left-right arrangement, and the like. The application program interface display area can be used to display the interface of the application program. Each interface may include at least one interface element such as an icon of an application program and/or a widget desktop control. The application program interface display area can also be an empty interface without any content. The commonly used control display area is used to display controls with a high usage rate, for example, application icons such as setting buttons, interface numbers, scroll bars, and phonebook icons.

Wherein the processor 660 is the control center of the mobile terminal 600, utilizes various interfaces and lines to connect the various parts of the whole mobile phone, by running or executing the software programs and/or modules stored in the first memory 621, and calling the software programs and/or modules stored in the second memory 621. The data in the memory 622 executes various functions of the mobile terminal 600 and processes data, so as to monitor the mobile terminal 600 as a whole. Optionally, the processor 660 may include one or more processing units.

In the embodiment of the present invention, the processor 660 is used to detect whether there is a preset in the received short message by calling the software program and/or module stored in the first memory 621 and/or the data in the second memory 622. Keyword, wherein, the preset keyword is a vocabulary indicating that the short message where the preset keyword is located contains a verification code; if it exists, extract the key content in the short message, and the key content includes a verification code and The phone number of the sending end of the short message; the key content is encrypted using a symmetric algorithm to obtain a verification code ciphertext.

Wherein, compared with any application program of the mobile terminal, the processor 660 has the highest priority for processing the short message.

Optionally, the processor 660 is further configured to: generate a verification code flag according to the number of digits of the verification code;

The phone number, the verification code flag and the verification code are sequentially sorted and combined to obtain combined content; the combined content is encrypted by using a symmetric algorithm to obtain a verification code ciphertext.

Optionally, the processor 660 is further configured to: obtain the current time; and use the current time as an identifier to store the verification code ciphertext and the remaining text content of the short message after extracting the key content in different areas respectively.

Optionally, the processor 660 is further configured to: if it is detected that the application program invokes the reading interface of the short message, then verify the authority of the application program; Identify and determine the storage location of the verification code ciphertext and the remaining text content; extract the verification code ciphertext and the remaining content in the storage location; use the symmetric algorithm to extract the verification code Decrypting the ciphertext to obtain the key content; combining the key content obtained by decryption and the extracted remaining text content to obtain the plain text of the short message; returning the plain text of the short message to the application program that has passed the authority verification.

It can be seen that even if there is a virus program that intercepts the verification code in the mobile terminal that can be realized by the embodiment of the present invention, it still cannot steal the highly encrypted verification code. From the perspective of scanning and killing viruses in the system, the verification code is highly encrypted, so that even if there is a new type of virus in the mobile terminal that is not stored in the virus database, the verification code can still be guaranteed not to be stolen and the user’s property loss can be avoided. , to improve the security of the user's verification information, in order to avoid repetition, it will not be repeated here.

Those of ordinary skill in the art can appreciate that the units and algorithm steps of the examples described in conjunction with the embodiments disclosed in the embodiments of the present invention can be implemented by electronic hardware, or a combination of computer software and electronic hardware. Whether these functions are executed by hardware or software depends on the specific application and design constraints of the technical solution. Those skilled in the art may use different methods to implement the described functions for each specific application, but such implementation should not be regarded as exceeding the scope of the present invention.

Those skilled in the art can clearly understand that for the convenience and brevity of the description, the specific working process of the above-described system, device and unit can refer to the corresponding process in the foregoing method embodiment, which will not be repeated here.

In the embodiments provided in this application, it should be understood that the disclosed devices and methods may be implemented in other ways. For example, the device embodiments described above are only illustrative. For example, the division of the units is only a logical function division. In actual implementation, there may be other division methods. For example, multiple units or components can be combined or May be integrated into another system, or some features may be ignored, or not implemented. In another point, the mutual coupling or direct coupling or communication connection shown or discussed may be through some interfaces, and the indirect coupling or communication connection of devices or units may be in electrical, mechanical or other forms.

The units described as separate components may or may not be physically separated, and the components displayed as units may or may not be physical units, that is, they may be located in one place, or may be distributed to multiple network units. Part or all of the units can be selected according to actual needs to achieve the purpose of the solution of this embodiment.

In addition, each functional unit in each embodiment of the present invention may be integrated into one processing unit, each unit may exist separately physically, or two or more units may be integrated into one unit.

If the functions described above are realized in the form of software function units and sold or used as independent products, they can be stored in a computer-readable storage medium. Based on this understanding, the essence of the technical solution of the present invention or the part that contributes to the prior art or the part of the technical solution can be embodied in the form of a software product, and the computer software product is stored in a storage medium, including Several instructions are used to make a computer device (which may be a personal computer, a server, or a network device, etc.) execute all or part of the steps of the methods described in various embodiments of the present invention. The aforementioned storage medium includes: various media capable of storing program codes such as U disk, mobile hard disk, ROM, RAM, magnetic disk or optical disk.

The above is only a specific embodiment of the present invention, but the scope of protection of the present invention is not limited thereto. Anyone skilled in the art can easily think of changes or substitutions within the technical scope disclosed in the present invention. Should be covered within the protection scope of the present invention. Therefore, the protection scope of the present invention should be based on the protection scope of the claims.

Claims (10)

1. a kind of processing method of identifying code, is applied to mobile terminal, it is characterised in that methods described includes：

With the presence or absence of predetermined keyword in the short message that detection is received, wherein, the predetermined keyword is the expression default pass Vocabulary comprising identifying code in short message where keyword；

If in the presence of, the key content in the short message is extracted, the key content includes the electricity at identifying code and short message sending end Words number；

The key content is encrypted using symmetry algorithm, is verified a yard ciphertext.

2. method according to claim 1, it is characterised in that compared to any one application program of mobile terminal, institute State the highest priority that processing method is processed the short message.

3. method according to claim 1, it is characterised in that the use symmetry algorithm is added to the key content It is close, the step of be verified yard ciphertext, including：

Digit generation identifying code flag bit according to the identifying code；

The telephone number, the identifying code flag bit and the identifying code are sorted and be combined successively, is obtained in combination Hold；

The combined arrangement is encrypted using symmetry algorithm, is verified a yard ciphertext.

4. method according to claim 1, it is characterised in that the use symmetry algorithm is added to the key content It is close, the step of be verified yard ciphertext after, methods described also includes：

Obtain current time；

It is mark with the current time, by the remaining word of the short message after the identifying code ciphertext and the extraction key content Content is stored to different zones respectively.

5. method according to claim 4, it is characterised in that it is described with the current time be mark, by the checking The remaining word content of the short message after code ciphertext and the extraction key content is stored to after the step of different zones respectively, institute Stating method also includes：

If detecting the reading interface of short message described in application call, the authority to the application program is verified；

If the Authority Verification of the application program passes through, the identifying code ciphertext and the remaining text are determined according to the mark The storage location of word content；

The identifying code ciphertext and the remaining content to the storage location are extracted；

The identifying code ciphertext extracted is decrypted using the symmetry algorithm, obtains the key content；

The key content for obtaining will be decrypted and the described remaining word content of extraction is combined, obtain short message in plain text；

The short message is returned to by the application program of Authority Verification in plain text.

6. a kind of mobile terminal, it is characterised in that the mobile terminal includes：

Detection module, with the presence or absence of predetermined keyword in the short message received for detection, wherein, the predetermined keyword is table Vocabulary comprising identifying code in short message where showing the predetermined keyword；

First extraction module, if in the presence of, extract the key content in the short message, the key content includes identifying code With the telephone number at short message sending end；

Encrypting module, for being encrypted to the key content using symmetry algorithm, is verified a yard ciphertext.

7. mobile terminal according to claim 6, it is characterised in that any one compared to mobile terminal applies journey Sequence, processing priority highest of the mobile terminal to the short message.

8. mobile terminal according to claim 6, it is characterised in that the encrypting module includes：

Generation submodule, for generating identifying code flag bit according to the digit of the identifying code；

Combination submodule, for sorting and carrying out the telephone number, the identifying code flag bit and the identifying code successively Combination, obtains combined arrangement；

Encryption submodule, for being encrypted to the combined arrangement using symmetry algorithm, is verified a yard ciphertext.

9. mobile terminal according to claim 6, it is characterised in that the mobile terminal also includes：

Acquisition module, for obtaining current time；

Memory module, for being to identify with the current time, after the identifying code ciphertext and the extraction key content The remaining word content of short message is stored to different zones respectively.

10. mobile terminal according to claim 9, it is characterised in that the mobile terminal also includes：

Authentication module, if the reading interface for detecting short message described in application call, to the power of the application program Limit is verified；

Determining module, if passing through for the Authority Verification of the application program, determines that the identifying code is close according to the mark The storage location of literary and described remaining word content；

Second extraction module, extracts for the identifying code ciphertext and the remaining content to the storage location；

Deciphering module, for being decrypted to the identifying code ciphertext extracted using the symmetry algorithm, obtains the key Content；

Composite module, is combined for will decrypt the key content for obtaining and the described remaining word content of extraction, obtains To short message in plain text；

Module is returned to, for the short message to be returned to by the application program of Authority Verification in plain text.