CN116249095A - A page display method and related equipment - Google Patents
A page display method and related equipment Download PDFInfo
- Publication number
- CN116249095A CN116249095A CN202111484397.2A CN202111484397A CN116249095A CN 116249095 A CN116249095 A CN 116249095A CN 202111484397 A CN202111484397 A CN 202111484397A CN 116249095 A CN116249095 A CN 116249095A
- Authority
- CN
- China
- Prior art keywords
- terminal
- sim card
- verification information
- target url
- identifier
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Pending
Links
Images
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04W—WIRELESS COMMUNICATION NETWORKS
- H04W4/00—Services specially adapted for wireless communication networks; Facilities therefor
- H04W4/60—Subscription-based services using application servers or record carriers, e.g. SIM application toolkits
-
- G—PHYSICS
- G06—COMPUTING OR CALCULATING; COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F16/00—Information retrieval; Database structures therefor; File system structures therefor
- G06F16/90—Details of database functions independent of the retrieved data types
- G06F16/95—Retrieval from the web
- G06F16/955—Retrieval from the web using information identifiers, e.g. uniform resource locators [URL]
- G06F16/9566—URL specific, e.g. using aliases, detecting broken or misspelled links
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04W—WIRELESS COMMUNICATION NETWORKS
- H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
- H04W12/03—Protecting confidentiality, e.g. by encryption
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04W—WIRELESS COMMUNICATION NETWORKS
- H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
- H04W12/06—Authentication
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04W—WIRELESS COMMUNICATION NETWORKS
- H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
- H04W12/60—Context-dependent security
- H04W12/69—Identity-dependent
- H04W12/71—Hardware identity
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04W—WIRELESS COMMUNICATION NETWORKS
- H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
- H04W12/60—Context-dependent security
- H04W12/69—Identity-dependent
- H04W12/72—Subscriber identity
Landscapes
- Engineering & Computer Science (AREA)
- Computer Security & Cryptography (AREA)
- Computer Networks & Wireless Communication (AREA)
- Signal Processing (AREA)
- Databases & Information Systems (AREA)
- Theoretical Computer Science (AREA)
- Data Mining & Analysis (AREA)
- Physics & Mathematics (AREA)
- General Engineering & Computer Science (AREA)
- General Physics & Mathematics (AREA)
- Telephonic Communication Services (AREA)
Abstract
Description
技术领域technical field
本发明涉及通信技术领域,尤其涉及一种页面显示方法及相关设备。The present invention relates to the technical field of communications, in particular to a page display method and related equipment.
背景技术Background technique
目前运营商正在推进一种新的用户识别模块(Subscriber Identity Module,SIM)卡,该SIM卡有助于运营商开展基于SIM卡的安全级别要求较高的载体类业务,如将公交卡、门禁卡、银行卡、身份证等放置于SIM卡上,逐步替换现有实体卡,全面实现数字化。该SIM卡通过SIM卡应用工具包(SIM Application Toolkit,STK)实现载体类业务。STK是一种终端与SIM卡间的命令交互机制,通过它,SIM卡可以运行卡内小应用程序与终端及用户交互,这种交互可以带来新的业务场景,给用户提供新的服务体验。例如:可以在SIM卡上实现增强通话应用,用户呼叫某一号码时启动该号码配置的H5页面,进入智能客服交互页面等;或者近场通信(Near Field Communication,NFC)刷SIM卡后通过H5页面弹出交易明细记录等。SIM卡可以通过特定统一资源定位器(Uniform Resource Locator,URL)启动终端上的浏览器以打开该特定URL对应的网页。然而,终端通过该SIM卡跳转的URL被复制或劫持至其他终端时也会显示该URL对应的网页,存在较高的安全风险。At present, operators are promoting a new Subscriber Identity Module (SIM) card, which helps operators to carry out SIM card-based carrier services that require a higher level of security, such as public transport cards, access control Cards, bank cards, ID cards, etc. are placed on the SIM card, and the existing physical cards are gradually replaced to fully realize digitalization. The SIM card implements bearer services through a SIM card application toolkit (SIM Application Toolkit, STK). STK is a command interaction mechanism between the terminal and the SIM card. Through it, the SIM card can run small applications in the card to interact with the terminal and users. This interaction can bring new business scenarios and provide users with new service experience. . For example: the enhanced call application can be implemented on the SIM card. When the user calls a certain number, the H5 page configured for the number is activated to enter the intelligent customer service interaction page, etc.; or the near field communication (Near Field Communication, NFC) passes the H5 The page pops up the transaction details record and so on. The SIM card can start a browser on the terminal through a specific uniform resource locator (Uniform Resource Locator, URL) to open a web page corresponding to the specific URL. However, when the URL redirected by the terminal through the SIM card is copied or hijacked to other terminals, the web page corresponding to the URL will also be displayed, which poses a high security risk.
发明内容Contents of the invention
本发明实施例提供一种页面显示方法及相关设备,以解决现有终端通过该SIM卡跳转的URL被复制或劫持至其他终端时也会显示该URL对应的网页,存在较高的安全风险的问题。The embodiment of the present invention provides a page display method and related equipment to solve the problem that when the URL redirected by the existing terminal through the SIM card is copied or hijacked to other terminals, the webpage corresponding to the URL will also be displayed, which has a high security risk The problem.
为解决上述技术问题,本发明是这样实现的:In order to solve the problems of the technologies described above, the present invention is achieved in that:
第一方面,本发明实施例提供了一种页面显示方法,应用于SIM卡,所述方法包括:In a first aspect, an embodiment of the present invention provides a method for displaying a page, which is applied to a SIM card, and the method includes:
获取所述SIM卡对应的SIM卡标识,及终端对应的终端标识,所述终端上设置有所述SIM卡;Obtain the SIM card identification corresponding to the SIM card, and the terminal identification corresponding to the terminal, the SIM card is set on the terminal;
基于所述SIM卡标识及所述终端标识获取验证信息;Acquiring verification information based on the SIM card identifier and the terminal identifier;
向所述终端发送启动命令,以使所述终端基于所述启动命令显示目标统一资源定位器URL对应的页面;sending a startup command to the terminal, so that the terminal displays a page corresponding to the target URL based on the startup command;
其中,所述启动命令中包括所述目标URL,所述目标URL携带所述验证信息。Wherein, the start command includes the target URL, and the target URL carries the verification information.
可选的,所述基于所述SIM卡标识及所述终端标识获取验证信息,包括:Optionally, the acquiring verification information based on the SIM card identifier and the terminal identifier includes:
采用密钥对所述SIM卡标识及所述终端标识进行加密,生成验证信息;Encrypting the SIM card identifier and the terminal identifier using a key to generate verification information;
或者or
向管理平台发送所述SIM卡标识及所述终端标识,并接收所述管理平台发送的验证信息,其中,所述验证信息基于所述管理平台采用密钥对所述SIM卡标识及所述终端标识进行加密生成。Send the SIM card identification and the terminal identification to the management platform, and receive the verification information sent by the management platform, wherein the verification information is based on the management platform using a key to pair the SIM card identification and the terminal The ID is encrypted and generated.
可选的,所述密钥与所述SIM卡绑定的通讯号码和/或所述SIM卡标识对应。Optionally, the key corresponds to the communication number bound to the SIM card and/or the SIM card identifier.
可选的,所述获取所述SIM卡对应的SIM卡标识,及终端对应的终端标识,包括:Optionally, the acquiring the SIM card identifier corresponding to the SIM card and the terminal identifier corresponding to the terminal includes:
获取所述SIM卡对应的SIM卡标识;Obtain the SIM card identification corresponding to the SIM card;
向终端发送第一指示信息,所述第一指示信息用于指示所述终端向所述SIM卡发送终端标识;Sending first indication information to the terminal, where the first indication information is used to instruct the terminal to send a terminal identifier to the SIM card;
接收所述终端发送的所述终端对应的终端标识。Receive the terminal identifier corresponding to the terminal sent by the terminal.
可选的,所述获取所述SIM卡对应的SIM卡标识,及终端对应的终端标识之前,所述方法还包括:Optionally, before acquiring the SIM card identifier corresponding to the SIM card and the terminal identifier corresponding to the terminal, the method further includes:
接收所述终端发送的第二指示信息,所述第二指示信息用于触发所述SIM卡向所述终端发送所述启动命令。receiving second indication information sent by the terminal, where the second indication information is used to trigger the SIM card to send the activation command to the terminal.
第二方面,本发明实施例提供了一种页面显示方法,应用于终端,所述方法包括:In a second aspect, an embodiment of the present invention provides a method for displaying a page, which is applied to a terminal, and the method includes:
接收SIM卡发送的启动命令,所述启动命令中包括目标URL,所述目标URL携带验证信息,所述验证信息基于SIM卡对应的SIM卡标识,及终端对应的终端标识获取,所述终端上设置有所述SIM卡;Receive the startup command sent by the SIM card, the startup command includes a target URL, the target URL carries verification information, and the verification information is obtained based on the SIM card ID corresponding to the SIM card and the terminal ID corresponding to the terminal, and the terminal ID on the terminal The SIM card is set;
基于所述启动命令向管理平台发送跳转请求,以使所述管理平台基于所述跳转请求对所述验证信息进行验证,所述跳转请求用于请求跳转至目标URL,所述跳转请求包括所述目标URL;Send a jump request to the management platform based on the start command, so that the management platform verifies the verification information based on the jump request, the jump request is used to request a jump to the target URL, and the jump request The transfer request includes the target URL;
在所述验证信息验证成功的情况下,显示所述目标URL对应的页面。If the verification information is successfully verified, the page corresponding to the target URL is displayed.
可选的,所述在所述验证信息验证成功的情况下,显示所述目标URL对应的页面,包括:Optionally, the displaying the page corresponding to the target URL when the verification information is successfully verified includes:
在所述验证信息验证成功的情况下,接收所述管理平台发送的页面信息;When the verification information is successfully verified, receive the page information sent by the management platform;
基于所述页面信息显示所述目标URL对应的页面。Displaying a page corresponding to the target URL based on the page information.
可选的,所述接收SIM卡发送的启动命令之前,所述方法还包括:Optionally, before receiving the startup command sent by the SIM card, the method further includes:
接收所述SIM卡发送的第一指示信息,所述第一指示信息用于指示所述终端向所述SIM卡发送终端标识;receiving first indication information sent by the SIM card, where the first indication information is used to instruct the terminal to send a terminal identifier to the SIM card;
向所述SIM卡发送所述终端对应的终端标识。Sending the terminal identifier corresponding to the terminal to the SIM card.
可选的,所述接收SIM卡发送的启动命令之前,所述方法还包括:Optionally, before receiving the startup command sent by the SIM card, the method further includes:
接收第一输入;receiving a first input;
响应于所述第一输入,向SIM卡发送第二指示信息,所述第二指示信息用于触发所述SIM卡向所述终端发送所述启动命令。In response to the first input, sending second indication information to the SIM card, where the second indication information is used to trigger the SIM card to send the start command to the terminal.
第三方面,本发明实施例提供了一种页面显示方法,应用于管理平台,所述方法包括:In a third aspect, an embodiment of the present invention provides a method for displaying a page, which is applied to a management platform, and the method includes:
接收终端发送的跳转请求,所述跳转请求用于请求跳转至目标URL,所述跳转请求包括目标URL,所述目标URL携带验证信息,所述验证信息基于SIM卡对应的SIM卡标识,及终端对应的终端标识获取,所述终端上设置有所述SIM卡;Receiving a jump request sent by the terminal, the jump request is used to request to jump to a target URL, the jump request includes the target URL, the target URL carries verification information, and the verification information is based on the SIM card corresponding to the SIM card identification, and the terminal identification corresponding to the terminal is acquired, and the SIM card is set on the terminal;
对所述验证信息进行验证;verifying the verification information;
在所述验证信息验证成功的情况下,控制所述终端显示所述目标URL对应的页面。When the verification information is successfully verified, the terminal is controlled to display the page corresponding to the target URL.
可选的,所述接收终端发送的跳转请求之前,所述方法还包括:Optionally, before receiving the jump request sent by the terminal, the method further includes:
接收所述终端发送的所述SIM卡标识及所述终端标识;receiving the SIM card identifier and the terminal identifier sent by the terminal;
采用密钥对所述SIM卡标识及所述终端标识进行加密,生成验证信息;Encrypting the SIM card identifier and the terminal identifier using a key to generate verification information;
向所述终端发送所述验证信息。Send the verification information to the terminal.
可选的,所述验证信息基于采用密钥对所述SIM卡标识及所述终端标识进行加密生成,所述密钥与所述SIM卡绑定的通讯号码对应,所述对所述验证信息进行验证,包括:Optionally, the verification information is generated based on encrypting the SIM card ID and the terminal ID with a key, the key corresponds to the communication number bound to the SIM card, and the verification information Verify, including:
基于所述跳转请求获取目标通讯号码及目标终端标识;Obtaining a target communication number and a target terminal identifier based on the jump request;
获取所述目标通讯号码对应的密钥;Obtain the key corresponding to the target communication number;
采用所述目标通讯号码对应的密钥对所述验证信息进行解密;Decrypting the verification information by using a key corresponding to the target communication number;
其中,在解密得到的终端标识与所述目标终端标识匹配的情况下,所述验证信息验证成功。Wherein, if the terminal identifier obtained through decryption matches the target terminal identifier, the verification of the verification information is successful.
可选的,所述接收终端发送的跳转请求,包括:Optionally, the jump request sent by the receiving terminal includes:
通过移动网络或网关接收终端发送的跳转请求;Receive the jump request sent by the terminal through the mobile network or gateway;
所述基于所述跳转请求获取目标通讯号码及目标终端标识,包括:The acquisition of the target communication number and the target terminal identifier based on the jump request includes:
基于所述跳转请求从所述移动网络或网关获取目标通讯号码及目标终端标识。Obtaining a target communication number and a target terminal identifier from the mobile network or the gateway based on the jump request.
可选的,所述控制所述终端显示所述目标URL对应的页面,包括:Optionally, the controlling the terminal to display the page corresponding to the target URL includes:
向所述终端发送所述目标URL对应的页面信息,以使所述终端基于所述页面信息显示所述目标URL对应的页面。Sending the page information corresponding to the target URL to the terminal, so that the terminal displays the page corresponding to the target URL based on the page information.
第四方面,本发明实施例提供了一种SIM卡,所述SIM卡包括:In a fourth aspect, an embodiment of the present invention provides a SIM card, and the SIM card includes:
第一获取模块,用于获取所述SIM卡对应的SIM卡标识,及终端对应的终端标识,所述终端上设置有所述SIM卡;A first acquiring module, configured to acquire a SIM card identifier corresponding to the SIM card and a terminal identifier corresponding to a terminal, the terminal being provided with the SIM card;
第二获取模块,用于基于所述SIM卡标识及所述终端标识获取验证信息;A second acquiring module, configured to acquire verification information based on the SIM card identifier and the terminal identifier;
发送模块,用于向所述终端发送启动命令,以使所述终端基于所述启动命令显示目标URL对应的页面;A sending module, configured to send a startup command to the terminal, so that the terminal displays a page corresponding to the target URL based on the startup command;
其中,所述启动命令中包括所述目标URL,所述目标URL携带所述验证信息。Wherein, the start command includes the target URL, and the target URL carries the verification information.
可选的,所述第二获取模块具体用于:Optionally, the second acquisition module is specifically used for:
采用密钥对所述SIM卡标识及所述终端标识进行加密,生成验证信息;Encrypting the SIM card identifier and the terminal identifier using a key to generate verification information;
或者or
向管理平台发送所述SIM卡标识及所述终端标识,并接收所述管理平台发送的验证信息,其中,所述验证信息基于所述管理平台采用密钥对所述SIM卡标识及所述终端标识进行加密生成。Send the SIM card identification and the terminal identification to the management platform, and receive the verification information sent by the management platform, wherein the verification information is based on the management platform using a key to pair the SIM card identification and the terminal The ID is encrypted and generated.
可选的,所述密钥与所述SIM卡绑定的通讯号码和/或所述SIM卡标识对应。Optionally, the key corresponds to the communication number bound to the SIM card and/or the SIM card identifier.
可选的,所述第一获取模块具体用于:Optionally, the first acquisition module is specifically used for:
获取所述SIM卡对应的SIM卡标识;Obtain the SIM card identification corresponding to the SIM card;
向终端发送第一指示信息,所述第一指示信息用于指示所述终端向所述SIM卡发送终端标识;Sending first indication information to the terminal, where the first indication information is used to instruct the terminal to send a terminal identifier to the SIM card;
接收所述终端发送的所述终端对应的终端标识。Receive the terminal identifier corresponding to the terminal sent by the terminal.
可选的,所述第一获取模块还用于:Optionally, the first acquisition module is also used for:
接收所述终端发送的第二指示信息,所述第二指示信息用于触发所述SIM卡向所述终端发送所述启动命令。receiving second indication information sent by the terminal, where the second indication information is used to trigger the SIM card to send the activation command to the terminal.
第五方面,本发明实施例提供了一种终端,所述终端包括:In a fifth aspect, an embodiment of the present invention provides a terminal, where the terminal includes:
接收模块,用于接收SIM卡发送的启动命令,所述启动命令中包括目标URL,所述目标URL携带验证信息,所述验证信息基于SIM卡对应的SIM卡标识,及终端对应的终端标识获取,所述终端上设置有所述SIM卡;The receiving module is configured to receive a startup command sent by the SIM card, the startup command includes a target URL, the target URL carries verification information, and the verification information is acquired based on the SIM card identification corresponding to the SIM card and the terminal identification corresponding to the terminal , the terminal is provided with the SIM card;
发送模块,用于基于所述启动命令向管理平台发送跳转请求,以使所述管理平台基于所述跳转请求对所述验证信息进行验证,所述跳转请求用于请求跳转至目标URL,所述跳转请求包括所述目标URL;A sending module, configured to send a jump request to the management platform based on the startup command, so that the management platform verifies the verification information based on the jump request, and the jump request is used to request a jump to a target URL, the jump request includes the target URL;
显示模块,用于在所述验证信息验证成功的情况下,显示所述目标URL对应的页面。A display module, configured to display the page corresponding to the target URL if the verification information is successfully verified.
可选的,所述显示模块具体用于:Optionally, the display module is specifically used for:
在所述验证信息验证成功的情况下,接收所述管理平台发送的页面信息;When the verification information is successfully verified, receive the page information sent by the management platform;
基于所述页面信息显示所述目标URL对应的页面。Displaying a page corresponding to the target URL based on the page information.
可选的,所述接收模块还用于:Optionally, the receiving module is also used for:
接收所述SIM卡发送的第一指示信息,所述第一指示信息用于指示所述终端向所述SIM卡发送终端标识;receiving first indication information sent by the SIM card, where the first indication information is used to instruct the terminal to send a terminal identifier to the SIM card;
向所述SIM卡发送所述终端对应的终端标识。Sending the terminal identifier corresponding to the terminal to the SIM card.
可选的,所述接收模块还用于:Optionally, the receiving module is also used for:
接收第一输入;receiving a first input;
响应于所述第一输入,向SIM卡发送第二指示信息,所述第二指示信息用于触发所述SIM卡向所述终端发送所述启动命令。In response to the first input, sending second indication information to the SIM card, where the second indication information is used to trigger the SIM card to send the start command to the terminal.
第六方面,本发明实施例提供了一种管理平台,所述管理平台包括:In a sixth aspect, an embodiment of the present invention provides a management platform, and the management platform includes:
接收模块,用于接收终端发送的跳转请求,所述跳转请求用于请求跳转至目标URL,所述跳转请求包括目标URL,所述目标URL携带验证信息,所述验证信息基于SIM卡对应的SIM卡标识,及终端对应的终端标识获取,所述终端上设置有所述SIM卡;The receiving module is configured to receive a jump request sent by the terminal, the jump request is used to request to jump to a target URL, the jump request includes a target URL, and the target URL carries verification information, and the verification information is based on SIM The SIM card identification corresponding to the card and the terminal identification corresponding to the terminal are obtained, and the SIM card is set on the terminal;
验证模块,用于对所述验证信息进行验证;A verification module, configured to verify the verification information;
控制模块,用于在所述验证信息验证成功的情况下,控制所述终端显示所述目标URL对应的页面。A control module, configured to control the terminal to display a page corresponding to the target URL if the verification information is successfully verified.
可选的,所述接收模块还用于:Optionally, the receiving module is also used for:
接收所述终端发送的所述SIM卡标识及所述终端标识;receiving the SIM card identifier and the terminal identifier sent by the terminal;
采用密钥对所述SIM卡标识及所述终端标识进行加密,生成验证信息;Encrypting the SIM card identifier and the terminal identifier using a key to generate verification information;
向所述终端发送所述验证信息。Send the verification information to the terminal.
可选的,所述验证信息基于采用密钥对所述SIM卡标识及所述终端标识进行加密生成,所述密钥与所述SIM卡绑定的通讯号码对应,所述验证模块包括:Optionally, the verification information is generated based on encrypting the SIM card ID and the terminal ID with a key corresponding to the communication number bound to the SIM card, and the verification module includes:
第一获取单元,用于基于所述跳转请求获取目标通讯号码及目标终端标识;A first obtaining unit, configured to obtain a target communication number and a target terminal identifier based on the jump request;
第二获取单元,用于获取所述目标通讯号码对应的密钥;a second obtaining unit, configured to obtain a key corresponding to the target communication number;
解密单元,用于采用所述目标通讯号码对应的密钥对所述验证信息进行解密;A decryption unit, configured to decrypt the verification information using a key corresponding to the target communication number;
其中,在解密得到的终端标识与所述目标终端标识匹配的情况下,所述验证信息验证成功。Wherein, if the terminal identifier obtained through decryption matches the target terminal identifier, the verification of the verification information is successful.
可选的,所述接收模块具体用于:Optionally, the receiving module is specifically used for:
通过移动网络或网关接收终端发送的跳转请求;Receive the jump request sent by the terminal through the mobile network or gateway;
所述第一获取单元具体用于:The first acquisition unit is specifically used for:
基于所述跳转请求从所述移动网络或网关获取目标通讯号码及目标终端标识。Obtaining a target communication number and a target terminal identifier from the mobile network or the gateway based on the jump request.
可选的,所述控制模块具体用于:Optionally, the control module is specifically used for:
向所述终端发送所述目标URL对应的页面信息,以使所述终端基于所述页面信息显示所述目标URL对应的页面。Sending the page information corresponding to the target URL to the terminal, so that the terminal displays the page corresponding to the target URL based on the page information.
第七方面,本发明实施例提供一种SIM卡,包括:处理器、存储器及存储在所述存储器上并可在所述处理器上运行的程序,所述程序被所述处理器执行时实现上述第一方面所述的页面显示方法的步骤。In a seventh aspect, an embodiment of the present invention provides a SIM card, including: a processor, a memory, and a program stored on the memory and operable on the processor, and the program is implemented when executed by the processor. The steps of the page display method described in the first aspect above.
第八方面,本发明实施例提供一种终端,包括:处理器、存储器及存储在所述存储器上并可在所述处理器上运行的程序,所述程序被所述处理器执行时实现上述第二方面所述的页面显示方法的步骤。In an eighth aspect, an embodiment of the present invention provides a terminal, including: a processor, a memory, and a program stored on the memory and operable on the processor, when the program is executed by the processor, the above-mentioned The steps of the page display method described in the second aspect.
第九方面,本发明实施例提供一种管理平台,包括:处理器、存储器及存储在所述存储器上并可在所述处理器上运行的程序,所述程序被所述处理器执行时实现上述第三方面所述的页面显示方法的步骤。In the ninth aspect, the embodiment of the present invention provides a management platform, including: a processor, a memory, and a program stored on the memory and operable on the processor, and the program is implemented when executed by the processor. The steps of the page display method described in the third aspect above.
第十方面,本发明实施例提供一种计算机可读存储介质,所述计算机可读存储介质上存储有计算机程序,所述计算机程序被处理器执行时实现上述第一方面所述的页面显示方法的步骤;或者所述计算机程序被处理器执行时实现上述第二方面所述的页面显示方法的步骤;或者所述计算机程序被处理器执行时实现上述第三方面所述的页面显示方法的步骤。In a tenth aspect, an embodiment of the present invention provides a computer-readable storage medium, where a computer program is stored on the computer-readable storage medium, and when the computer program is executed by a processor, the page display method described in the above-mentioned first aspect is implemented or the steps of realizing the page display method described in the second aspect when the computer program is executed by the processor; or realizing the steps of the page display method described in the third aspect when the computer program is executed by the processor .
本发明实施例中,获取所述SIM卡对应的SIM卡标识,及终端对应的终端标识,所述终端上设置有所述SIM卡;基于所述SIM卡标识及所述终端标识获取验证信息;向所述终端发送启动命令,以使所述终端基于所述启动命令显示目标统一资源定位器URL对应的页面;其中,所述启动命令中包括所述目标URL,所述目标URL携带所述验证信息。这样,通过目标URL中的验证信息可以对SIM卡及终端进行校验,避免URL被复制或劫持至其他终端时也会显示该URL对应的网页,提高安全性。In the embodiment of the present invention, the SIM card identification corresponding to the SIM card and the terminal identification corresponding to the terminal are obtained, and the SIM card is set on the terminal; verification information is obtained based on the SIM card identification and the terminal identification; sending a startup command to the terminal, so that the terminal displays a page corresponding to the target uniform resource locator URL based on the startup command; wherein, the startup command includes the target URL, and the target URL carries the verification information. In this way, the SIM card and the terminal can be verified through the verification information in the target URL, preventing the URL corresponding to the URL from being displayed when the URL is copied or hijacked to other terminals, thereby improving security.
附图说明Description of drawings
为了更清楚地说明本发明实施例的技术方案,下面将对本发明实施例描述中所需要使用的附图作简单地介绍,显而易见地,下面描述中的附图仅仅是本发明的一些实施例,对于本领域普通技术人员来讲,在不付出创造性劳动性的前提下,还可以根据这些附图获得其他的附图。In order to more clearly illustrate the technical solutions of the embodiments of the present invention, the following will briefly introduce the accompanying drawings that need to be used in the description of the embodiments of the present invention. Obviously, the accompanying drawings in the following description are only some embodiments of the present invention. For those skilled in the art, other drawings can also be obtained based on these drawings without any creative effort.
图1是本发明实施例提供的一种页面显示方法的流程图;FIG. 1 is a flowchart of a page display method provided by an embodiment of the present invention;
图2是本发明实施例提供的另一种页面显示方法的流程图;Fig. 2 is a flowchart of another page display method provided by an embodiment of the present invention;
图3是本发明实施例提供的另一种页面显示方法的流程图;Fig. 3 is a flowchart of another page display method provided by an embodiment of the present invention;
图4是本发明实施例提供的另一种页面显示方法的流程图;Fig. 4 is a flowchart of another page display method provided by an embodiment of the present invention;
图5是本发明实施例提供的一种SIM卡的结构示意图;Fig. 5 is a schematic structural diagram of a SIM card provided by an embodiment of the present invention;
图6是本发明实施例提供的一种终端的结构示意图;FIG. 6 is a schematic structural diagram of a terminal provided by an embodiment of the present invention;
图7是本发明实施例提供的一种管理平台的结构示意图;Fig. 7 is a schematic structural diagram of a management platform provided by an embodiment of the present invention;
图8是本发明实施例提供的另一种管理平台的结构示意图;Fig. 8 is a schematic structural diagram of another management platform provided by an embodiment of the present invention;
图9是本发明实施例提供的另一种SIM卡的结构示意图;Fig. 9 is a schematic structural diagram of another SIM card provided by an embodiment of the present invention;
图10是本发明实施例提供的另一种终端的结构示意图;FIG. 10 is a schematic structural diagram of another terminal provided by an embodiment of the present invention;
图11是本发明实施例提供的另一种管理平台的结构示意图。Fig. 11 is a schematic structural diagram of another management platform provided by an embodiment of the present invention.
具体实施方式Detailed ways
下面将结合本发明实施例中的附图,对本发明实施例中的技术方案进行清楚、完整地描述,显然,所描述的实施例是本发明一部分实施例,而不是全部的实施例。基于本发明中的实施例,本领域普通技术人员在没有作出创造性劳动前提下所获得的所有其他实施例,都属于本发明保护的范围。The following will clearly and completely describe the technical solutions in the embodiments of the present invention with reference to the accompanying drawings in the embodiments of the present invention. Obviously, the described embodiments are some of the embodiments of the present invention, but not all of them. Based on the embodiments of the present invention, all other embodiments obtained by persons of ordinary skill in the art without creative efforts fall within the protection scope of the present invention.
本发明实施例中,提出了一种页面显示方法及相关设备,以解决现有终端通过该SIM卡跳转的URL被复制或劫持至其他终端时也会显示该URL对应的网页,存在较高的安全风险的问题。。In the embodiment of the present invention, a page display method and related equipment are proposed to solve the problem that when the URL redirected by the existing terminal through the SIM card is copied or hijacked to other terminals, the webpage corresponding to the URL will also be displayed, which has high security risk issues. .
参见图1,图1是本发明实施例提供的一种页面显示方法的流程图,用于SIM卡,如图1所示,所述方法包括以下步骤:Referring to FIG. 1, FIG. 1 is a flow chart of a page display method provided by an embodiment of the present invention, which is used for a SIM card. As shown in FIG. 1, the method includes the following steps:
步骤101、获取所述SIM卡对应的SIM卡标识,及终端对应的终端标识,所述终端上设置有所述SIM卡。
其中,SIM卡可以为全球移动通信系统(Global System for Mobile Communications,GSM)的移动用户所持有的集成电路(Integrated Circuit,IC)卡;或者可以为eSIM卡;或者可以为USIM卡;或者可以为5G超级SIM卡等等,本实施例对此不进行限定。SIM卡标识可以用于标识SIM卡,进一步的,SI M卡标识可以用于唯一标识SIM卡,SIM卡标识可以包括数字,和/或字母,和/或特殊字符等等,示例地,SIM卡标识可以包括安全环境标识(Security Environment Identifier,SEID)或集成电路卡识别码(Integrate CircuitCard Id entity,ICCID),SEID可以唯一标识SIM卡。终端标识可以用于标识终端,进一步的,终端标识可以用于唯一标识终端,终端标识可以包括数字,和/或字母,和/或特殊字符等等,示例地,终端标识可以包括国际移动设备识别码(International Mobile EquipmentIdentity,IMEI)。SIM卡可以安装在所述终端上。Wherein, the SIM card may be an integrated circuit (Integrated Circuit, IC) card held by a mobile user of the Global System for Mobile Communications (GSM); or may be an eSIM card; or may be a USIM card; or may be It is a 5G super SIM card, etc., which is not limited in this embodiment. The SIM card identification can be used to identify the SIM card. Further, the SIM card identification can be used to uniquely identify the SIM card. The SIM card identification can include numbers, and/or letters, and/or special characters, etc. For example, the SIM card The identifier may include a security environment identifier (Security Environment Identifier, SEID) or an integrated circuit card identification code (Integrate CircuitCard Id entity, ICCID), and the SEID may uniquely identify the SIM card. The terminal identifier can be used to identify the terminal. Further, the terminal identifier can be used to uniquely identify the terminal. The terminal identifier can include numbers, and/or letters, and/or special characters, etc. For example, the terminal identifier can include International Mobile Equipment Identification Code (International Mobile Equipment Identity, IMEI). A SIM card can be installed on the terminal.
可选的,所述获取所述SIM卡对应的SIM卡标识,及终端对应的终端标识,包括:Optionally, the acquiring the SIM card identifier corresponding to the SIM card and the terminal identifier corresponding to the terminal includes:
获取所述SIM卡对应的SIM卡标识;Obtain the SIM card identification corresponding to the SIM card;
向终端发送第一指示信息,所述第一指示信息用于指示所述终端向所述SIM卡发送终端标识;Sending first indication information to the terminal, where the first indication information is used to instruct the terminal to send a terminal identifier to the SIM card;
接收所述终端发送的所述终端对应的终端标识。Receive the terminal identifier corresponding to the terminal sent by the terminal.
其中,终端在接收到所述SIM卡发送的第一指示信息后,可以向所述SIM卡发送所述终端对应的终端标识。第一指示信息可以为提供本地信息(Provide LocalInformation)命令,或者可以为其他用于指示所述终端向所述SIM卡发送终端标识的命令。Wherein, after receiving the first indication information sent by the SIM card, the terminal may send the terminal identifier corresponding to the terminal to the SIM card. The first indication information may be a provide local information (Provide Local Information) command, or may be other commands for instructing the terminal to send a terminal identifier to the SIM card.
一种实施方式中,终端在接收到所述SIM卡发送的第一指示信息后,可以向所述SIM卡发送终端信息,终端信息包括终端标识,终端信息还可以包括当前时间。In an implementation manner, after receiving the first indication information sent by the SIM card, the terminal may send terminal information to the SIM card, where the terminal information includes a terminal identifier, and the terminal information may also include a current time.
这样,SIM卡可以通过第一指示信息从终端获取终端对应的终端标识。In this way, the SIM card can acquire the terminal identifier corresponding to the terminal from the terminal through the first indication information.
可选的,所述获取所述SIM卡对应的SIM卡标识,及终端对应的终端标识之前,所述方法还包括:Optionally, before acquiring the SIM card identifier corresponding to the SIM card and the terminal identifier corresponding to the terminal, the method further includes:
接收所述终端发送的第二指示信息,所述第二指示信息用于触发所述SIM卡向所述终端发送所述启动命令。receiving second indication information sent by the terminal, where the second indication information is used to trigger the SIM card to send the activation command to the terminal.
其中,终端可以接收第一输入;响应于所述第一输入,向SIM卡发送第二指示信息。第一输入可以是用户拨打电话的操作,或者可以是NFC刷卡操作,等等,本实施例对此不进行限定。终端可以在通话或NFC刷卡等事件触发的STK启动浏览器(Launch Browser)能力启动浏览器的过程中,SIM卡上应用通过STK Provide Local Information能力获取终端标识。Wherein, the terminal may receive the first input; in response to the first input, send the second indication information to the SIM card. The first input may be an operation of the user to dial a phone, or may be an operation of swiping an NFC card, etc., which is not limited in this embodiment. The terminal can start the browser through the STK launch browser (Launch Browser) capability triggered by an event such as a call or NFC card swiping, and the application on the SIM card obtains the terminal identifier through the STK Provide Local Information capability.
另外,第二指示信息可以为EVENT_CALL_CONTROL_BY_NAA消息,从而通过第二指示信息终端可以告知SIM卡上应用用户拨打电话,触发SIM卡上应用向终端发送启动命令,启动浏览器显示H5页面,实现通话与H5页面联动;或者可以为EVENT_PROACTIVE_HANDLER_AVAILABLE消息,从而通过第二指示信息终端可以告知SIM卡上应用终端执行NFC刷卡操作,触发SIM卡上应用向终端发送启动命令,启动浏览器显示交易明细记录相关的H5页面。In addition, the second instruction information can be an EVENT_CALL_CONTROL_BY_NAA message, so that the terminal can inform the application user on the SIM card to make a call through the second instruction information, trigger the application on the SIM card to send a start command to the terminal, start the browser to display the H5 page, and realize the call and H5 Page linkage; or it can be an EVENT_PROACTIVE_HANDLER_AVAILABLE message, so that the terminal can inform the application terminal on the SIM card to perform the NFC card swiping operation through the second instruction information, trigger the application on the SIM card to send a start command to the terminal, and start the browser to display the H5 page related to the transaction detail record .
这样,终端可以通过第二指示信息触发所述SIM卡向所述终端发送所述启动命令。In this way, the terminal may use the second indication information to trigger the SIM card to send the start command to the terminal.
步骤102、基于所述SIM卡标识及所述终端标识获取验证信息。
其中,可以按照预设运算规则对所述SIM卡标识及所述终端标识进行计算,生成验证信息;或者,可以按照预设运算规则对所述SIM卡标识及所述终端标识进行计算,并采用密钥对计算结果进行加密生成验证信息;或者,可以按照预设运算规则对所述SIM卡标识、所述终端标识及当前时间进行计算,并采用密钥对计算结果进行加密生成验证信息;或者,可以按照预设运算规则对所述SIM卡标识及所述终端标识进行计算,并采用密钥对计算结果和当前时间进行加密生成验证信息;等等,本实施例对此不进行限定。预设运算规则可以是拼接,或者可以是相加,或者可以是按照某个函数计算,等等,本实施例对此不进行限定。Wherein, the SIM card identifier and the terminal identifier can be calculated according to a preset operation rule to generate verification information; or, the SIM card identifier and the terminal identifier can be calculated according to a preset operation rule, and adopt The key encrypts the calculation result to generate verification information; or, the SIM card ID, the terminal ID, and the current time can be calculated according to preset operation rules, and the calculation result is encrypted using the key to generate verification information; or , the SIM card ID and the terminal ID may be calculated according to a preset calculation rule, and a key is used to encrypt the calculation result and the current time to generate verification information; etc., which are not limited in this embodiment. The preset operation rule may be splicing, or addition, or calculation according to a certain function, etc., which is not limited in this embodiment.
可选的,所述基于所述SIM卡标识及所述终端标识获取验证信息,包括:Optionally, the acquiring verification information based on the SIM card identifier and the terminal identifier includes:
采用密钥对所述SIM卡标识及所述终端标识进行加密,生成验证信息;Encrypting the SIM card identifier and the terminal identifier using a key to generate verification information;
或者or
向管理平台发送所述SIM卡标识及所述终端标识,并接收所述管理平台发送的验证信息,其中,所述验证信息基于所述管理平台采用密钥对所述SIM卡标识及所述终端标识进行加密生成。Send the SIM card identification and the terminal identification to the management platform, and receive the verification information sent by the management platform, wherein the verification information is based on the management platform using a key to pair the SIM card identification and the terminal The ID is encrypted and generated.
其中,管理平台可以为云端管理平台。管理平台接收到所述终端发送的所述SIM卡标识及所述终端标识之后,可以采用密钥对所述SIM卡标识及所述终端标识进行加密,生成验证信息,并向所述终端发送所述验证信息。所述密钥可以与所述SIM卡绑定的通讯号码或SIM卡标识对应,管理平台可以基于所述跳转请求获取目标通讯号码及目标终端标识,获取所述目标通讯号码对应的密钥,采用所述目标通讯号码对应的密钥对所述验证信息进行解密。其中,在解密得到的终端标识与所述目标终端标识匹配的情况下,所述验证信息验证成功。这样,在验证信息验证成功的情况下,才允许终端打开目标URL,避免URL被复制或劫持或劫持至其他终端时也能打开目标URL,提高安全性。Wherein, the management platform may be a cloud management platform. After the management platform receives the SIM card ID and the terminal ID sent by the terminal, it may use a key to encrypt the SIM card ID and the terminal ID, generate verification information, and send the SIM card ID and the terminal ID to the terminal. the above verification information. The key may correspond to the communication number bound to the SIM card or the SIM card identification, and the management platform may obtain the target communication number and the target terminal identification based on the jump request, and obtain the key corresponding to the target communication number, The verification information is decrypted by using the key corresponding to the target communication number. Wherein, if the terminal identifier obtained through decryption matches the target terminal identifier, the verification of the verification information is successful. In this way, the terminal is allowed to open the target URL only when the verification information is verified successfully, so as to prevent the target URL from being opened even when the URL is copied or hijacked or hijacked to other terminals, thereby improving security.
另外,管理平台可以通过移动网络或网关接收终端发送的跳转请求,并且可以基于所述跳转请求从所述移动网络或网关获取目标通讯号码及目标终端标识。这样,管理平台能够从移动网络或网关处获得终端真实的通讯号码,从而能够采用该真实的通讯号码对应的密钥对验证信息进行解密。若采用目标通讯号码对应的密钥成功解密,则可以说明SIM卡为发起启动命令的SIM卡。通过比对目标终端标识及解密得到的终端标识,可以确定终端是否为与发起启动命令的SIM卡交互的终端,从而能够判断SIM卡及终端在启动浏览器的过程中是否发生变更,防止URL拷贝及篡改。In addition, the management platform can receive the jump request sent by the terminal through the mobile network or gateway, and can obtain the target communication number and the target terminal identifier from the mobile network or gateway based on the jump request. In this way, the management platform can obtain the real communication number of the terminal from the mobile network or the gateway, so that the key corresponding to the real communication number can be used to decrypt the verification information. If the key corresponding to the target communication number is successfully decrypted, it can be shown that the SIM card is the SIM card that initiated the activation command. By comparing the target terminal ID with the decrypted terminal ID, it can be determined whether the terminal is a terminal that interacts with the SIM card that initiated the startup command, so that it can be judged whether the SIM card and the terminal have changed during the process of starting the browser, preventing URL copying and tampering.
可选的,所述密钥与所述SIM卡绑定的通讯号码和/或所述SIM卡标识对应。Optionally, the key corresponds to the communication number bound to the SIM card and/or the SIM card identifier.
其中,SIM卡标识可以与SIM卡绑定的通讯号码一一对应,SIM卡标识还可以与密钥一一对应。以终端为手机为例,通讯号码可以为手机号码。管理平台和/或移动网络可以存储密钥与SIM卡绑定的通讯号码的对应关系。Wherein, the SIM card identification can be in one-to-one correspondence with the communication number bound to the SIM card, and the SIM card identification can also be in one-to-one correspondence with the key. Taking the terminal as a mobile phone as an example, the communication number may be a mobile phone number. The management platform and/or the mobile network can store the corresponding relationship between the key and the communication number bound to the SIM card.
步骤103、向所述终端发送启动命令,以使所述终端基于所述启动命令显示目标统一资源定位器URL对应的页面;
其中,所述启动命令中包括所述目标URL,所述目标URL携带所述验证信息。Wherein, the start command includes the target URL, and the target URL carries the verification information.
另外,启动命令可以为Launch Browser命令,可以用于指示终端启动浏览器,并显示启动命令中目标URL对应的页面。目标URL可以是SIM卡上预先设置的URL,或者可以是从管理平台获取到的URL。示例地,目标URL可以是SIM卡上应用预置的URL地址,或者可以是通过运营商OTA安全加密通道连接管理平台获取到的URL地址。目标URL可以与第二指示信息相关,示例地,目标URL与第二指示信息对应,对于不同的第一输入,第二指示信息不同,目标URL不同。例如,在第一输入为用户拨打电话的操作时,目标URL为通话业务对应的URL,目标URL对应的页面为通话业务相关的页面;在第一输入为NFC刷卡操作时,目标URL为刷卡业务对应的URL,目标URL对应的页面为刷卡交易相关的页面。In addition, the launch command may be a Launch Browser command, which may be used to instruct the terminal to launch the browser and display the page corresponding to the target URL in the launch command. The target URL may be a preset URL on the SIM card, or may be a URL obtained from the management platform. Exemplarily, the target URL may be a URL address preset by an application on the SIM card, or may be a URL address obtained through an operator's OTA secure encrypted channel connection management platform. The target URL may be related to the second indication information. For example, the target URL corresponds to the second indication information. For different first inputs, the second indication information is different and the target URL is different. For example, when the first input is an operation for the user to make a call, the target URL is the URL corresponding to the call service, and the page corresponding to the target URL is a page related to the call service; when the first input is an NFC card swiping operation, the target URL is the card swiping service The corresponding URL and the page corresponding to the target URL are pages related to card swiping transactions.
需要说明的是,目标URL可以包括第一子URL和第二子URL,第一子URL指向管理平台,第二子URL指向业务平台,业务平台可以为通话业务的业务平台,或者可以为刷卡业务的业务平台等等。通过管理平台对验证信息进行验证,在验证成功的情况下,管理平台允许终端跳转至业务平台。示例地,第一子URL可以为目标URL的前缀部分,第二子URL可以为目标URL的后缀部分。It should be noted that the target URL may include a first sub-URL and a second sub-URL. The first sub-URL points to the management platform, and the second sub-URL points to the service platform. business platform, etc. The verification information is verified through the management platform, and if the verification is successful, the management platform allows the terminal to jump to the service platform. For example, the first sub-URL may be a prefix part of the target URL, and the second sub-URL may be a suffix part of the target URL.
一种实施方式中,SIM卡可以通过查询配置信息从管理平台获取到目标URL。SIM卡可以向管理平台查询配置信息,该配置信息中包括SIM卡标识及终端标识;管理平台采用密钥对所述SIM卡标识及所述终端标识进行加密生成验证信息,并向SIM卡返回配置信息,该配置信息中包括目标URL,该目标URL的参数包括验证信息。In one embodiment, the SIM card can obtain the target URL from the management platform by querying the configuration information. The SIM card can query the management platform for configuration information, which includes the SIM card ID and the terminal ID; the management platform uses a key to encrypt the SIM card ID and the terminal ID to generate verification information, and returns the configuration information to the SIM card information, the configuration information includes a target URL, and the parameters of the target URL include verification information.
这样,终端接收SIM卡发送的启动命令后,可以基于所述启动命令向管理平台发送跳转请求,所述跳转请求用于请求跳转至目标URL,所述跳转请求包括所述目标URL;管理平台接收到终端发送的跳转请求后,可以对所述验证信息进行验证;在所述验证信息验证成功的情况下,终端可以显示所述目标URL对应的页面。In this way, after the terminal receives the startup command sent by the SIM card, it can send a jump request to the management platform based on the startup command, the jump request is used to request to jump to the target URL, and the jump request includes the target URL After receiving the jump request sent by the terminal, the management platform can verify the verification information; if the verification information is successfully verified, the terminal can display the page corresponding to the target URL.
需要说明的是,管理平台可以基于跳转请求获取目标通讯号码及目标终端标识,并获取目标通讯号码对应的SIM卡标识,可以按照预设运算规则对验证信息反向计算,得到验证信息中的SIM卡标识及终端标识,若验证信息中的终端标识与目标终端标识相同,且验证信息中的SIM卡标识与目标通讯号码对应的SIM卡标识相同,则所述验证信息验证成功;或者,管理平台可以获取所述目标通讯号码对应的密钥,管理平台可以采用密钥对验证信息进行解密,并采用目标通讯号码对应的SIM卡标识及预设运算规则反向计算得到终端标识,若验证信息中的终端标识与目标终端标识相同,则所述验证信息验证成功;或者,管理平台可以采用密钥对验证信息进行解密,并采用目标通讯号码对应的SIM卡标识及预设运算规则反向计算得到终端标识及时间,若验证信息中的终端标识与目标终端标识相同,且验证信息中的时间与当前时间的间隔小于预设时间间隔,则所述验证信息验证成功;等等,本实施例对此不进行限定。It should be noted that the management platform can obtain the target communication number and target terminal ID based on the jump request, and obtain the SIM card ID corresponding to the target communication number, and can reversely calculate the verification information according to the preset operation rules to obtain the verification information. SIM card identification and terminal identification, if the terminal identification in the verification information is the same as the target terminal identification, and the SIM card identification in the verification information is the same as the SIM card identification corresponding to the target communication number, then the verification information verification is successful; or, the management The platform can obtain the key corresponding to the target communication number, the management platform can use the key to decrypt the verification information, and use the SIM card identification corresponding to the target communication number and the preset operation rules to reversely calculate the terminal identification, if the verification information If the terminal ID in is the same as the target terminal ID, then the verification information verification is successful; or, the management platform can use a key to decrypt the verification information, and use the SIM card ID corresponding to the target communication number and the preset operation rule to perform reverse calculation Obtain the terminal ID and time, if the terminal ID in the verification information is the same as the target terminal ID, and the interval between the time in the verification information and the current time is less than the preset time interval, the verification of the verification information is successful; etc., this embodiment This is not limited.
一种实施方式中,在所述验证信息验证成功的情况下,管理平台可以向所述终端发送所述目标URL对应的页面信息,终端接收到所述管理平台发送的页面信息后,可以基于所述页面信息显示所述目标URL对应的页面。该页面信息可以是用于描述所述目标URL对应的页面的信息。终端的浏览器通过解析页面信息,能够显示所述目标URL对应的页面。In one embodiment, when the verification information is successfully verified, the management platform may send the page information corresponding to the target URL to the terminal, and after receiving the page information sent by the management platform, the terminal may, based on the The page information displays the page corresponding to the target URL. The page information may be information used to describe the page corresponding to the target URL. The browser of the terminal can display the page corresponding to the target URL by parsing the page information.
作为一种具体的实施例,以终端为手机为例,如图2所示,页面显示方法可以包括如下过程:As a specific embodiment, taking the terminal as a mobile phone as an example, as shown in Figure 2, the page display method may include the following process:
(1)SIM卡上应用向终端发送开机注册事件,终端向SIM卡上应用返回注册响应;(1) The application on the SIM card sends a boot registration event to the terminal, and the terminal returns a registration response to the application on the SIM card;
SIM卡上应用为SIM卡上运行的应用程序,示例地,可以为SIM卡上通过STK运行的应用程序。The application on the SIM card is an application running on the SIM card, for example, it may be an application running on the SIM card through the STK.
(2)终端触发事件,并通知SIM卡上应用;(2) The terminal triggers an event and notifies the application on the SIM card;
用户通过终端拨打电话、NFC刷卡或执行其他应用协议数据单元(ApplicationProtocol Data Unit,APDU)触发的事件,终端通过通知消息将事件传递给SIM卡上对应的应用;The user makes a phone call through the terminal, swipes the NFC card, or executes other events triggered by the Application Protocol Data Unit (APDU), and the terminal transmits the event to the corresponding application on the SIM card through a notification message;
(3)SIM卡上应用获取终端信息并获取SIM卡标识;(3) The application on the SIM card obtains the terminal information and obtains the SIM card identification;
SIM卡上应用通过STK Provide Local Information能力获取终端信息,终端信息包括终端标识及当前时间,并获取SIM卡标识;The application on the SIM card obtains the terminal information through the STK Provide Local Information capability. The terminal information includes the terminal identification and current time, and obtains the SIM card identification;
(4)SIM卡上应用基于SIM卡标识及终端信息获取验证信息,目标URL携带所述验证信息;(4) The application on the SIM card obtains verification information based on the SIM card identification and terminal information, and the target URL carries the verification information;
获取目标URL的方式包括如下两种:There are two ways to obtain the target URL:
方式1:SIM卡上应用通过查询配置信息获取目标URL,具体的,SIM卡上应用通过空中下载技术(Over-the-Air Technology,OTA)安全加密通道连接管理平台,将终端信息及SIM卡标识发送至管理平台,管理平台结合时间戳对终端标识及SIM卡标识进行加密计算,生成验证信息,将验证信息作为本次有效的唯一标识码作为目标URL的参数,并将目标URL返回给SIM卡上应用;Method 1: The application on the SIM card obtains the target URL by querying the configuration information. Specifically, the application on the SIM card connects to the management platform through an over-the-air technology (Over-the-Air Technology, OTA) secure encrypted channel, and transfers the terminal information and the ID of the SIM card to the management platform. Send it to the management platform, and the management platform will encrypt and calculate the terminal ID and the SIM card ID based on the time stamp, generate verification information, use the verification information as the valid unique ID code as the parameter of the target URL, and return the target URL to the SIM card on the application;
方式2:SIM卡上应用使用应用密钥加密终端标识、当前时间及SIM卡标识,生成验证信息,将验证信息作为本地存储的指向管理平台的目标URL的参数,作为目标URL本次有效的唯一标识码,其中,应用密钥与手机号码及SIM卡标识均一一对应;Method 2: The application on the SIM card uses the application key to encrypt the terminal ID, current time, and SIM card ID to generate verification information, and use the verification information as a locally stored parameter pointing to the target URL of the management platform, as the only valid valid URL for this time. An identification code, wherein the application key is in one-to-one correspondence with the mobile phone number and SIM card identification;
(5)SIM卡上应用向终端发送Launch Browser命令;(5) The application on the SIM card sends a Launch Browser command to the terminal;
SIM卡上应用生成Launch Browser命令,该Launch Browser命令携带目标URL,向终端发送该Launch Browser命令;The application on the SIM card generates a Launch Browser command, the Launch Browser command carries the target URL, and sends the Launch Browser command to the terminal;
(6)终端启动浏览器,向SIM卡上应用返回响应消息;(6) The terminal starts the browser and returns a response message to the application on the SIM card;
终端按照目标URL启动浏览器,向SIM卡上应用返回响应信息;The terminal starts the browser according to the target URL, and returns response information to the application on the SIM card;
(7)终端通过移动网络或网关向管理平台请求打开目标URL;(7) The terminal requests the management platform to open the target URL through the mobile network or the gateway;
(8)管理平台解密目标URL中的验证信息,比对终端标识;(8) The management platform decrypts the verification information in the target URL, and compares the terminal identification;
其中,管理平台可以在接收到目标URL后,从移动网络或网关获取手机号码和终端标识;或者,终端打开该目标URL前经过移动网络或网关获取手机号码及终端标识,并携带从移动网络或网关获取的手机号码及终端标识跳转至管理平台URL。Among them, the management platform can obtain the mobile phone number and terminal ID from the mobile network or gateway after receiving the target URL; or, the terminal can obtain the mobile phone number and terminal ID through the mobile network or gateway before opening the target URL, and carry the The mobile phone number and terminal ID obtained by the gateway are redirected to the URL of the management platform.
另外,管理平台通过移动网络或网关获取的手机号码获得存储在SIM卡上应用对应的应用密钥,并采用该获取的应用密钥解密目标URL参数中的验证信息,将解密出来的终端标识与从移动网络或网关获取的终端标识进行比对,根据比对结果判断此SIM卡及此终端在整个请求过程中是否发生变化;In addition, the management platform obtains the application key corresponding to the application stored on the SIM card through the mobile phone number obtained by the mobile network or the gateway, and uses the obtained application key to decrypt the verification information in the target URL parameter, and compares the decrypted terminal ID with the Compare the terminal identifier obtained from the mobile network or the gateway, and judge whether the SIM card and the terminal have changed during the entire request process according to the comparison result;
(9)若比对结果为比对一致,则管理平台允许终端跳转至业务平台对应页面;否则,出现安全风险,终端显示错误页面。(9) If the comparison result is consistent, the management platform allows the terminal to jump to the corresponding page of the business platform; otherwise, a security risk occurs and the terminal displays an error page.
本发明实施例中,通过管理平台解密验证信息并比对终端标识,能够判断SIM卡及终端在启动浏览器的过程中是否发生变更,防止URL拷贝及篡改,能够提高基于STK LaunchBrowser能力启动浏览器过程中的安全性。In the embodiment of the present invention, by decrypting the verification information on the management platform and comparing the terminal identification, it is possible to determine whether the SIM card and the terminal are changed during the process of starting the browser, prevent URL copying and tampering, and improve the ability to start the browser based on STK LaunchBrowser. safety in the process.
相关技术中,终端通过SIM卡跳转的URL被复制或劫持至其他终端时会显示该URL对应的网页,存在较高的安全风险。以基于STK的增强通话为例,基于STK的增强通话是通过在SIM卡上实现增强通话应用,在云端实现增强通话管理平台,当用户呼叫某特定号码时启动该号码注册的H5页面,实现通话与H5页面联动。相关技术中,在基于STK的增强通话的实现流程中,SIM卡上的增强通话应用通过连接云端的增强通话管理平台、获取到相应的URL信息后生成Launch Browser命令数据,并向终端发送该命令,终端按照指定URL地址启动浏览器。而在该过程中,存在启动浏览器的URL被复制或劫持到其他终端再打开的情况,形成安全风险。类似的,其他如NFC刷卡后通过STK Launch Browser进入交易详情H5页面等场景,亦存在同样问题。In related technologies, when the URL redirected by the terminal through the SIM card is copied or hijacked to other terminals, the webpage corresponding to the URL will be displayed, which poses a high security risk. Taking STK-based enhanced call as an example, STK-based enhanced call implements the enhanced call application on the SIM card and implements the enhanced call management platform on the cloud. When the user calls a specific number, the H5 page registered by the number is activated to realize the call. Link with the H5 page. In related technologies, in the implementation process of STK-based enhanced call, the enhanced call application on the SIM card generates Launch Browser command data after connecting to the enhanced call management platform in the cloud and obtaining the corresponding URL information, and sends the command to the terminal , the terminal starts the browser according to the specified URL address. In this process, the URL that starts the browser may be copied or hijacked to be opened on another terminal, which poses a security risk. Similarly, other scenarios such as entering the transaction details H5 page through the STK Launch Browser after swiping the NFC card also have the same problem.
本发明实施例中,SIM卡上应用通过STK能力获取终端标识及SIM卡标识,并通过STK上应用密钥加密计算生成加密标识串作为URL请求参数,终端按照指定URL地址启动浏览器,并打开对应网址,打开网址前浏览器需经过运营商网关获取用户手机号码及终端标识,并携带用户手机号码及终端标识跳转至管理平台,管理平台根据运营商网关获取的用户手机号码获取SIM卡上应用密钥,并利用该SIM卡上应用密钥解密URL请求参数中的加密标识串。管理平台将解密后的终端标识与从运营商网关获取的终端标识比对,比对一致则允许终端的浏览器进入业务展示页面,否则提示页面出现安全风险,禁止展示页面相关内容。本发明实施例能够实现基于STK Launch Browser能力启动浏览器的过程中防止URL拷贝及篡改的安全机制,以确保此URL为本终端及对应的SIM卡所产生,而非复制或劫持其他SIM卡产生的URL或经过其他人篡改的URL。In the embodiment of the present invention, the application on the SIM card obtains the terminal identification and the SIM card identification through the STK capability, and generates an encrypted identification string as a URL request parameter through the encrypted calculation of the application key on the STK, and the terminal starts the browser according to the specified URL address, and opens the Corresponding to the URL, before opening the URL, the browser needs to obtain the user's mobile phone number and terminal ID through the operator's gateway, and jump to the management platform with the user's mobile phone number and terminal ID. application key, and use the application key on the SIM card to decrypt the encrypted identification string in the URL request parameter. The management platform compares the decrypted terminal ID with the terminal ID obtained from the operator's gateway. If the comparison is consistent, the terminal's browser is allowed to enter the service display page. Otherwise, it prompts that there is a security risk on the page and prohibits the display of relevant content on the page. The embodiment of the present invention can implement a security mechanism to prevent URL copying and tampering during the process of starting the browser based on the STK Launch Browser capability, so as to ensure that the URL is generated by the terminal and the corresponding SIM card instead of copying or hijacking other SIM cards. URLs or URLs that have been tampered with by others.
本发明实施例中,获取所述SIM卡对应的SIM卡标识,及终端对应的终端标识,所述终端上设置有所述SIM卡;基于所述SIM卡标识及所述终端标识获取验证信息;向所述终端发送启动命令,以使所述终端基于所述启动命令显示目标URL对应的页面;其中,所述启动命令中包括所述目标URL,所述目标URL携带所述验证信息。这样,通过目标URL中的验证信息可以对SIM卡及终端进行校验,避免URL被复制或劫持至其他终端时也会显示该URL对应的网页,提高安全性。In the embodiment of the present invention, the SIM card identification corresponding to the SIM card and the terminal identification corresponding to the terminal are obtained, and the SIM card is set on the terminal; verification information is obtained based on the SIM card identification and the terminal identification; Sending an activation command to the terminal, so that the terminal displays a page corresponding to the target URL based on the activation command; wherein the activation command includes the target URL, and the target URL carries the verification information. In this way, the SIM card and the terminal can be verified through the verification information in the target URL, preventing the URL corresponding to the URL from being displayed when the URL is copied or hijacked to other terminals, thereby improving security.
参见图3,图3是本发明实施例提供的一种页面显示方法的流程图,用于终端,如图3所示,所述方法包括以下步骤:Referring to FIG. 3, FIG. 3 is a flowchart of a page display method provided by an embodiment of the present invention, which is used for a terminal. As shown in FIG. 3, the method includes the following steps:
步骤201、接收SIM卡发送的启动命令,所述启动命令中包括目标URL,所述目标URL携带验证信息,所述验证信息基于SIM卡对应的SIM卡标识,及终端对应的终端标识获取,所述终端上设置有所述SIM卡;
步骤203、基于所述启动命令向管理平台发送跳转请求,以使所述管理平台基于所述跳转请求对所述验证信息进行验证,所述跳转请求用于请求跳转至目标URL,所述跳转请求包括所述目标URL;Step 203: Send a jump request to the management platform based on the startup command, so that the management platform can verify the verification information based on the jump request, and the jump request is used to request a jump to a target URL, The jump request includes the target URL;
步骤203、在所述验证信息验证成功的情况下,显示所述目标URL对应的页面。Step 203: Display the page corresponding to the target URL if the verification information is successfully verified.
需要说明的是,本实施例作为与图1所示的实施例中对应的终端的实施方式,其具体的实施方式可以参见图1所示的实施例中的相关说明,为避免重复说明,本实施例不再赘述。It should be noted that this embodiment is an implementation manner of a terminal corresponding to the embodiment shown in FIG. The embodiment will not be described in detail.
可选的,所述在所述验证信息验证成功的情况下,显示所述目标URL对应的页面,包括:Optionally, the displaying the page corresponding to the target URL when the verification information is successfully verified includes:
在所述验证信息验证成功的情况下,接收所述管理平台发送的页面信息;When the verification information is successfully verified, receive the page information sent by the management platform;
基于所述页面信息显示所述目标URL对应的页面。Displaying a page corresponding to the target URL based on the page information.
可选的,所述接收SIM卡发送的启动命令之前,所述方法还包括:Optionally, before receiving the startup command sent by the SIM card, the method further includes:
接收所述SIM卡发送的第一指示信息,所述第一指示信息用于指示所述终端向所述SIM卡发送终端标识;receiving first indication information sent by the SIM card, where the first indication information is used to instruct the terminal to send a terminal identifier to the SIM card;
向所述SIM卡发送所述终端对应的终端标识。Sending the terminal identifier corresponding to the terminal to the SIM card.
可选的,所述接收SIM卡发送的启动命令之前,所述方法还包括:Optionally, before receiving the startup command sent by the SIM card, the method further includes:
接收第一输入;receiving a first input;
响应于所述第一输入,向SIM卡发送第二指示信息,所述第二指示信息用于触发所述SIM卡向所述终端发送所述启动命令。In response to the first input, sending second indication information to the SIM card, where the second indication information is used to trigger the SIM card to send the start command to the terminal.
上述可选的实施方式可以参见图1所示的实施例中的相关说明,为避免重复说明,本实施例不再赘述。For the optional implementation manners above, reference may be made to relevant descriptions in the embodiment shown in FIG. 1 , and to avoid repeated descriptions, details are not repeated in this embodiment.
本发明实施例中的页面显示方法,终端接收SIM卡发送的启动命令,所述启动命令中包括目标URL,所述目标URL携带验证信息,所述验证信息基于SIM卡对应的SIM卡标识,及终端对应的终端标识获取,所述终端上设置有所述SIM卡;终端基于所述启动命令向管理平台发送跳转请求,以使所述管理平台基于所述跳转请求对所述验证信息进行验证,所述跳转请求用于请求跳转至目标URL,所述跳转请求包括所述目标URL;在所述验证信息验证成功的情况下,终端显示所述目标URL对应的页面。这样,通过目标URL中的验证信息可以对SIM卡及终端进行校验,避免URL被复制或劫持至其他终端时也会显示该URL对应的网页,提高安全性。In the page display method in the embodiment of the present invention, the terminal receives the startup command sent by the SIM card, the startup command includes a target URL, the target URL carries verification information, and the verification information is based on the SIM card identifier corresponding to the SIM card, and The terminal identification corresponding to the terminal is acquired, and the SIM card is set on the terminal; the terminal sends a jump request to the management platform based on the startup command, so that the management platform performs verification information based on the jump request For verification, the jump request is used to request a jump to a target URL, and the jump request includes the target URL; when the verification information is successfully verified, the terminal displays a page corresponding to the target URL. In this way, the SIM card and the terminal can be verified through the verification information in the target URL, preventing the URL corresponding to the URL from being displayed when the URL is copied or hijacked to other terminals, thereby improving security.
参见图4,图4是本发明实施例提供的一种页面显示方法的流程图,用于管理平台,如图4所示,所述方法包括以下步骤:Referring to FIG. 4, FIG. 4 is a flow chart of a page display method provided by an embodiment of the present invention, which is used for a management platform. As shown in FIG. 4, the method includes the following steps:
步骤301、接收终端发送的跳转请求,所述跳转请求用于请求跳转至目标URL,所述跳转请求包括目标URL,所述目标URL携带验证信息,所述验证信息基于SIM卡对应的SIM卡标识,及终端对应的终端标识获取,所述终端上设置有所述SIM卡;
步骤302、对所述验证信息进行验证;
步骤303、在所述验证信息验证成功的情况下,控制所述终端显示所述目标URL对应的页面。
需要说明的是,本实施例作为与图1所示的实施例中对应的管理平台的实施方式,其具体的实施方式可以参见图1所示的实施例中的相关说明,为避免重复说明,本实施例不再赘述。It should be noted that this embodiment is an implementation manner of the management platform corresponding to the embodiment shown in FIG. 1 , and its specific implementation manner can refer to the relevant description in the embodiment shown in FIG. 1 . In order to avoid repeated descriptions, This embodiment will not be described in detail.
可选的,所述接收终端发送的跳转请求之前,所述方法还包括:Optionally, before receiving the jump request sent by the terminal, the method further includes:
接收所述终端发送的所述SIM卡标识及所述终端标识;receiving the SIM card identifier and the terminal identifier sent by the terminal;
采用密钥对所述SIM卡标识及所述终端标识进行加密,生成验证信息;Encrypting the SIM card identifier and the terminal identifier using a key to generate verification information;
向所述终端发送所述验证信息。Send the verification information to the terminal.
可选的,所述验证信息基于采用密钥对所述SIM卡标识及所述终端标识进行加密生成,所述密钥与所述SIM卡绑定的通讯号码对应,所述对所述验证信息进行验证,包括:Optionally, the verification information is generated based on encrypting the SIM card ID and the terminal ID with a key, the key corresponds to the communication number bound to the SIM card, and the verification information Verify, including:
基于所述跳转请求获取目标通讯号码及目标终端标识;Obtaining a target communication number and a target terminal identifier based on the jump request;
获取所述目标通讯号码对应的密钥;Obtain the key corresponding to the target communication number;
采用所述目标通讯号码对应的密钥对所述验证信息进行解密;Decrypting the verification information by using a key corresponding to the target communication number;
其中,在解密得到的终端标识与所述目标终端标识匹配的情况下,所述验证信息验证成功。Wherein, if the terminal identifier obtained through decryption matches the target terminal identifier, the verification of the verification information is successful.
可选的,所述接收终端发送的跳转请求,包括:Optionally, the jump request sent by the receiving terminal includes:
通过移动网络或网关接收终端发送的跳转请求;Receive the jump request sent by the terminal through the mobile network or gateway;
所述基于所述跳转请求获取目标通讯号码及目标终端标识,包括:The acquisition of the target communication number and the target terminal identifier based on the jump request includes:
基于所述跳转请求从所述移动网络或网关获取目标通讯号码及目标终端标识。Obtaining a target communication number and a target terminal identifier from the mobile network or the gateway based on the jump request.
可选的,所述控制所述终端显示所述目标URL对应的页面,包括:Optionally, the controlling the terminal to display the page corresponding to the target URL includes:
向所述终端发送所述目标URL对应的页面信息,以使所述终端基于所述页面信息显示所述目标URL对应的页面。Sending the page information corresponding to the target URL to the terminal, so that the terminal displays the page corresponding to the target URL based on the page information.
上述可选的实施方式可以参见图1所示的实施例中的相关说明,为避免重复说明,本实施例不再赘述。For the optional implementation manners above, reference may be made to relevant descriptions in the embodiment shown in FIG. 1 , and to avoid repeated descriptions, details are not repeated in this embodiment.
本发明实施例中的页面显示方法,管理平台接收终端发送的跳转请求,所述跳转请求用于请求跳转至目标URL,所述跳转请求包括目标URL,所述目标URL携带验证信息,所述验证信息基于SIM卡对应的SIM卡标识,及终端对应的终端标识获取,所述终端上设置有所述SIM卡;管理平台对所述验证信息进行验证;在所述验证信息验证成功的情况下,管理平台控制所述终端显示所述目标URL对应的页面。这样,通过目标URL中的验证信息可以对SIM卡及终端进行校验,避免URL被复制或劫持至其他终端时也会显示该URL对应的网页,提高安全性。In the page display method in the embodiment of the present invention, the management platform receives the jump request sent by the terminal, the jump request is used to request to jump to the target URL, the jump request includes the target URL, and the target URL carries verification information , the verification information is obtained based on the SIM card identification corresponding to the SIM card and the terminal identification corresponding to the terminal, the terminal is provided with the SIM card; the management platform verifies the verification information; the verification information is successfully verified In the case of , the management platform controls the terminal to display the page corresponding to the target URL. In this way, the SIM card and the terminal can be verified through the verification information in the target URL, preventing the URL corresponding to the URL from being displayed when the URL is copied or hijacked to other terminals, thereby improving security.
参见图5,图5是本发明实施例提供的一种SIM卡的结构示意图,如图5所示,SIM卡400包括:Referring to FIG. 5, FIG. 5 is a schematic structural diagram of a SIM card provided by an embodiment of the present invention. As shown in FIG. 5, the
第一获取模块401,用于获取所述SIM卡对应的SIM卡标识,及终端对应的终端标识,所述终端上设置有所述SIM卡;The first obtaining
第二获取模块402,用于基于所述SIM卡标识及所述终端标识获取验证信息;The second acquiring
发送模块403,用于向所述终端发送启动命令,以使所述终端基于所述启动命令显示目标URL对应的页面;A sending
其中,所述启动命令中包括所述目标URL,所述目标URL携带所述验证信息。Wherein, the start command includes the target URL, and the target URL carries the verification information.
可选的,所述第二获取模块402具体用于:Optionally, the second acquiring
采用密钥对所述SIM卡标识及所述终端标识进行加密,生成验证信息;Encrypting the SIM card identifier and the terminal identifier using a key to generate verification information;
或者or
向管理平台发送所述SIM卡标识及所述终端标识,并接收所述管理平台发送的验证信息,其中,所述验证信息基于所述管理平台采用密钥对所述SIM卡标识及所述终端标识进行加密生成。Send the SIM card identification and the terminal identification to the management platform, and receive the verification information sent by the management platform, wherein the verification information is based on the management platform using a key to pair the SIM card identification and the terminal The ID is encrypted and generated.
可选的,所述密钥与所述SIM卡绑定的通讯号码和/或所述SIM卡标识对应。Optionally, the key corresponds to the communication number bound to the SIM card and/or the SIM card identifier.
可选的,所述第一获取模块401具体用于:Optionally, the first acquiring
获取所述SIM卡对应的SIM卡标识;Obtain the SIM card identification corresponding to the SIM card;
向终端发送第一指示信息,所述第一指示信息用于指示所述终端向所述SIM卡发送终端标识;Sending first indication information to the terminal, where the first indication information is used to instruct the terminal to send a terminal identifier to the SIM card;
接收所述终端发送的所述终端对应的终端标识。Receive the terminal identifier corresponding to the terminal sent by the terminal.
可选的,所述第一获取模块401还用于:Optionally, the first obtaining
接收所述终端发送的第二指示信息,所述第二指示信息用于触发所述SIM卡向所述终端发送所述启动命令。receiving second indication information sent by the terminal, where the second indication information is used to trigger the SIM card to send the activation command to the terminal.
SIM卡400能够实现图1所示的方法实施例中SIM卡实现的各个过程,为避免重复,这里不再赘述。SIM卡获取所述SIM卡对应的SIM卡标识,及终端对应的终端标识,所述终端上设置有所述SIM卡;基于所述SIM卡标识及所述终端标识获取验证信息;向所述终端发送启动命令,以使所述终端基于所述启动命令显示目标URL对应的页面;其中,所述启动命令中包括所述目标URL,所述目标URL携带所述验证信息。这样,通过目标URL中的验证信息可以对SIM卡及终端进行校验,避免URL被复制或劫持至其他终端时也会显示该URL对应的网页,提高安全性。The
参见图6,图6是本发明实施例提供的一种终端的结构示意图,如图6所示,终端500包括:Referring to FIG. 6, FIG. 6 is a schematic structural diagram of a terminal provided by an embodiment of the present invention. As shown in FIG. 6, the terminal 500 includes:
接收模块501,用于接收SIM卡发送的启动命令,所述启动命令中包括目标URL,所述目标URL携带验证信息,所述验证信息基于SIM卡对应的SIM卡标识,及终端对应的终端标识获取,所述终端上设置有所述SIM卡;The receiving
发送模块502,用于基于所述启动命令向管理平台发送跳转请求,以使所述管理平台基于所述跳转请求对所述验证信息进行验证,所述跳转请求用于请求跳转至目标URL,所述跳转请求包括所述目标URL;The sending
显示模块503,用于在所述验证信息验证成功的情况下,显示所述目标URL对应的页面。The
可选的,所述显示模块503具体用于:Optionally, the
在所述验证信息验证成功的情况下,接收所述管理平台发送的页面信息;When the verification information is successfully verified, receive the page information sent by the management platform;
基于所述页面信息显示所述目标URL对应的页面。Displaying a page corresponding to the target URL based on the page information.
可选的,所述接收模块501还用于:Optionally, the receiving
接收所述SIM卡发送的第一指示信息,所述第一指示信息用于指示所述终端向所述SIM卡发送终端标识;receiving first indication information sent by the SIM card, where the first indication information is used to instruct the terminal to send a terminal identifier to the SIM card;
向所述SIM卡发送所述终端对应的终端标识。Sending the terminal identifier corresponding to the terminal to the SIM card.
可选的,所述接收模块501还用于:Optionally, the receiving
接收第一输入;receiving a first input;
响应于所述第一输入,向SIM卡发送第二指示信息,所述第二指示信息用于触发所述SIM卡向所述终端发送所述启动命令。In response to the first input, sending second indication information to the SIM card, where the second indication information is used to trigger the SIM card to send the start command to the terminal.
终端500能够实现图3所示的方法实施例中终端实现的各个过程,为避免重复,这里不再赘述。终端接收SIM卡发送的启动命令,所述启动命令中包括目标URL,所述目标URL携带验证信息,所述验证信息基于SIM卡对应的SIM卡标识,及终端对应的终端标识获取,所述终端上设置有所述SIM卡;终端基于所述启动命令向管理平台发送跳转请求,以使所述管理平台基于所述跳转请求对所述验证信息进行验证,所述跳转请求用于请求跳转至目标URL,所述跳转请求包括所述目标URL;在所述验证信息验证成功的情况下,终端显示所述目标URL对应的页面。这样,通过目标URL中的验证信息可以对SIM卡及终端进行校验,避免URL被复制或劫持至其他终端时也会显示该URL对应的网页,提高安全性。The terminal 500 can implement various processes implemented by the terminal in the method embodiment shown in FIG. 3 , and details are not described here to avoid repetition. The terminal receives the activation command sent by the SIM card, the activation command includes a target URL, and the target URL carries verification information, and the verification information is obtained based on the SIM card identification corresponding to the SIM card and the terminal identification corresponding to the terminal, and the terminal The SIM card is set on the device; the terminal sends a jump request to the management platform based on the startup command, so that the management platform can verify the verification information based on the jump request, and the jump request is used to request Jumping to a target URL, where the jump request includes the target URL; if the verification information is successfully verified, the terminal displays a page corresponding to the target URL. In this way, the SIM card and the terminal can be verified through the verification information in the target URL, preventing the URL corresponding to the URL from being displayed when the URL is copied or hijacked to other terminals, thereby improving security.
参见图7,图7是本发明实施例提供的一种管理平台的结构示意图,如图7所示,管理平台600包括:Referring to FIG. 7, FIG. 7 is a schematic structural diagram of a management platform provided by an embodiment of the present invention. As shown in FIG. 7, the
接收模块601,用于接收终端发送的跳转请求,所述跳转请求用于请求跳转至目标URL,所述跳转请求包括目标URL,所述目标URL携带验证信息,所述验证信息基于SIM卡对应的SIM卡标识,及终端对应的终端标识获取,所述终端上设置有所述SIM卡;The receiving
验证模块602,用于对所述验证信息进行验证;A
控制模块603,用于在所述验证信息验证成功的情况下,控制所述终端显示所述目标URL对应的页面。The
可选的,所述接收模块601还用于:Optionally, the receiving
接收所述终端发送的所述SIM卡标识及所述终端标识;receiving the SIM card identifier and the terminal identifier sent by the terminal;
采用密钥对所述SIM卡标识及所述终端标识进行加密,生成验证信息;Encrypting the SIM card identifier and the terminal identifier using a key to generate verification information;
向所述终端发送所述验证信息。Send the verification information to the terminal.
可选的,所述验证信息基于采用密钥对所述SIM卡标识及所述终端标识进行加密生成,所述密钥与所述SIM卡绑定的通讯号码对应,如图8所示,所述验证模块602包括:Optionally, the verification information is generated based on encrypting the SIM card identifier and the terminal identifier using a key, and the key corresponds to the communication number bound to the SIM card, as shown in FIG. 8 , the
第一获取单元6021,用于基于所述跳转请求获取目标通讯号码及目标终端标识;The first obtaining
第二获取单元6022,用于获取所述目标通讯号码对应的密钥;The second obtaining
解密单元6023,用于采用所述目标通讯号码对应的密钥对所述验证信息进行解密;
其中,在解密得到的终端标识与所述目标终端标识匹配的情况下,所述验证信息验证成功。Wherein, if the terminal identifier obtained through decryption matches the target terminal identifier, the verification of the verification information is successful.
可选的,所述接收模块601具体用于:Optionally, the receiving
通过移动网络或网关接收终端发送的跳转请求;Receive the jump request sent by the terminal through the mobile network or gateway;
所述第一获取单元6021具体用于:The first obtaining
基于所述跳转请求从所述移动网络或网关获取目标通讯号码及目标终端标识。Obtaining a target communication number and a target terminal identifier from the mobile network or the gateway based on the jump request.
可选的,所述控制模块603具体用于:Optionally, the
向所述终端发送所述目标URL对应的页面信息,以使所述终端基于所述页面信息显示所述目标URL对应的页面。Sending the page information corresponding to the target URL to the terminal, so that the terminal displays the page corresponding to the target URL based on the page information.
管理平台600能够实现图4所示的方法实施例中管理平台实现的各个过程,为避免重复,这里不再赘述。管理平台接收终端发送的跳转请求,所述跳转请求用于请求跳转至目标URL,所述跳转请求包括目标URL,所述目标URL携带验证信息,所述验证信息基于SIM卡对应的SIM卡标识,及终端对应的终端标识获取,所述终端上设置有所述SIM卡;管理平台对所述验证信息进行验证;在所述验证信息验证成功的情况下,管理平台控制所述终端显示所述目标URL对应的页面。这样,通过目标URL中的验证信息可以对SIM卡及终端进行校验,避免URL被复制或劫持至其他终端时也会显示该URL对应的网页,提高安全性。The
如图9所示,本发明实施例还提供了一种SIM卡700,包括:处理器701、存储器702及存储在所述存储器702上并可在所述处理器701上运行的程序,所述程序被所述处理器701执行时实现上述用于SIM卡的页面显示方法实施例的各个过程,且能达到相同的技术效果,为避免重复,这里不再赘述。As shown in FIG. 9 , the embodiment of the present invention also provides a
如图10所示,本发明实施例还提供了一种终端800,包括:处理器801、存储器802及存储在所述存储器802上并可在所述处理器801上运行的程序,所述程序被所述处理器801执行时实现上述用于终端的页面显示方法实施例的各个过程,且能达到相同的技术效果,为避免重复,这里不再赘述。As shown in FIG. 10 , the embodiment of the present invention also provides a terminal 800, including: a
如图11所示,本发明实施例还提供了一种管理平台900,包括:处理器901、存储器902及存储在所述存储器902上并可在所述处理器901上运行的程序,所述程序被所述处理器901执行时实现上述用于管理平台的页面显示方法实施例的各个过程,且能达到相同的技术效果,为避免重复,这里不再赘述。As shown in Figure 11, the embodiment of the present invention also provides a
本发明实施例还提供一种计算机可读存储介质,计算机可读存储介质上存储有计算机程序,该计算机程序被处理器执行时实现上述用于SIM卡的页面显示方法实施例的各个过程,或者,该计算机程序被处理器执行时实现上述用于终端的页面显示方法实施例的各个过程,该计算机程序被处理器执行时实现上述用于管理平台的页面显示方法实施例的各个过程。且能达到相同的技术效果,为避免重复,这里不再赘述。其中,所述的计算机可读存储介质,如只读存储器(Read-Only Memory,ROM)、随机存取存储器(Random AccessMemory,RAM)、磁碟或者光盘等。An embodiment of the present invention also provides a computer-readable storage medium, on which a computer program is stored, and when the computer program is executed by a processor, each process of the above-mentioned embodiment of the page display method for a SIM card is implemented, or When the computer program is executed by the processor, each process of the above embodiment of the page display method for the terminal is realized, and when the computer program is executed by the processor, each process of the above embodiment of the page display method for the management platform is realized. And can achieve the same technical effect, in order to avoid repetition, no more details here. Wherein, the computer-readable storage medium is, for example, a read-only memory (Read-Only Memory, ROM), a random access memory (Random Access Memory, RAM), a magnetic disk or an optical disk, and the like.
需要说明的是,在本文中,术语“包括”、“包含”或者其任何其他变体意在涵盖非排他性的包含,从而使得包括一系列要素的过程、方法、物品或者装置不仅包括那些要素,而且还包括没有明确列出的其他要素,或者是还包括为这种过程、方法、物品或者装置所固有的要素。在没有更多限制的情况下,由语句“包括一个……”限定的要素,并不排除在包括该要素的过程、方法、物品或者装置中还存在另外的相同要素。It should be noted that, in this document, the term "comprising", "comprising" or any other variation thereof is intended to cover a non-exclusive inclusion such that a process, method, article or apparatus comprising a set of elements includes not only those elements, It also includes other elements not expressly listed, or elements inherent in the process, method, article, or device. Without further limitations, an element defined by the phrase "comprising a ..." does not preclude the presence of additional identical elements in the process, method, article, or apparatus comprising that element.
通过以上的实施方式的描述,本领域的技术人员可以清楚地了解到上述实施例方法可借助软件加必需的通用硬件平台的方式来实现,当然也可以通过硬件,但很多情况下前者是更佳的实施方式。基于这样的理解,本发明的技术方案本质上或者说对现有技术做出贡献的部分可以以软件产品的形式体现出来,该计算机软件产品存储在一个存储介质(如ROM/RAM、磁碟、光盘)中,包括若干指令用以使得一台终端(可以是手机,计算机,服务器,空调器,或者网络设备等)执行本发明各个实施例所述的方法。Through the description of the above embodiments, those skilled in the art can clearly understand that the methods of the above embodiments can be implemented by means of software plus a necessary general-purpose hardware platform, and of course also by hardware, but in many cases the former is better implementation. Based on such an understanding, the essence of the technical solution of the present invention or the part that contributes to the prior art can be embodied in the form of software products, and the computer software products are stored in a storage medium (such as ROM/RAM, disk, CD) contains several instructions to make a terminal (which may be a mobile phone, a computer, a server, an air conditioner, or a network device, etc.) execute the methods described in various embodiments of the present invention.
上面结合附图对本发明的实施例进行了描述,但是本发明并不局限于上述的具体实施方式,上述的具体实施方式仅仅是示意性的,而不是限制性的,本领域的普通技术人员在本发明的启示下,在不脱离本发明宗旨和权利要求所保护的范围情况下,还可做出很多形式,均属于本发明的保护之内。Embodiments of the present invention have been described above in conjunction with the accompanying drawings, but the present invention is not limited to the above-mentioned specific implementations, and the above-mentioned specific implementations are only illustrative, rather than restrictive, and those of ordinary skill in the art will Under the enlightenment of the present invention, without departing from the gist of the present invention and the protection scope of the claims, many forms can also be made, all of which belong to the protection of the present invention.
Claims (21)
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202111484397.2A CN116249095A (en) | 2021-12-07 | 2021-12-07 | A page display method and related equipment |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202111484397.2A CN116249095A (en) | 2021-12-07 | 2021-12-07 | A page display method and related equipment |
Publications (1)
| Publication Number | Publication Date |
|---|---|
| CN116249095A true CN116249095A (en) | 2023-06-09 |
Family
ID=86622875
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN202111484397.2A Pending CN116249095A (en) | 2021-12-07 | 2021-12-07 | A page display method and related equipment |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN116249095A (en) |
Cited By (1)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN116156508A (en) * | 2021-11-23 | 2023-05-23 | 中国移动通信有限公司研究院 | Web page access method, device, equipment and storage medium |
Citations (8)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101695164A (en) * | 2009-09-28 | 2010-04-14 | 华为技术有限公司 | Verification method, device and system for controlling resource access |
| US20100192210A1 (en) * | 2009-01-26 | 2010-07-29 | Apple Inc. | Method and system for verifying entitlement to access content by url validation |
| CN101997685A (en) * | 2009-08-27 | 2011-03-30 | 阿里巴巴集团控股有限公司 | Single sign-on method, single sign-on system and associated equipment |
| CN102143482A (en) * | 2011-04-13 | 2011-08-03 | 中国工商银行股份有限公司 | Method and system for authenticating mobile banking client information, and mobile terminal |
| CN106411823A (en) * | 2015-07-31 | 2017-02-15 | 华为技术有限公司 | CDN-based access control method and associated equipment |
| CN109362074A (en) * | 2018-09-05 | 2019-02-19 | 福建福诺移动通信技术有限公司 | A method for secure communication between h5 and server in mixed mode APP |
| CN110232568A (en) * | 2018-03-06 | 2019-09-13 | 中国移动通信集团四川有限公司 | Method of mobile payment, device, computer equipment and readable storage medium storing program for executing |
| CN112260983A (en) * | 2020-07-01 | 2021-01-22 | 北京沃东天骏信息技术有限公司 | Identity authentication method, device, equipment and computer readable storage medium |
-
2021
- 2021-12-07 CN CN202111484397.2A patent/CN116249095A/en active Pending
Patent Citations (8)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US20100192210A1 (en) * | 2009-01-26 | 2010-07-29 | Apple Inc. | Method and system for verifying entitlement to access content by url validation |
| CN101997685A (en) * | 2009-08-27 | 2011-03-30 | 阿里巴巴集团控股有限公司 | Single sign-on method, single sign-on system and associated equipment |
| CN101695164A (en) * | 2009-09-28 | 2010-04-14 | 华为技术有限公司 | Verification method, device and system for controlling resource access |
| CN102143482A (en) * | 2011-04-13 | 2011-08-03 | 中国工商银行股份有限公司 | Method and system for authenticating mobile banking client information, and mobile terminal |
| CN106411823A (en) * | 2015-07-31 | 2017-02-15 | 华为技术有限公司 | CDN-based access control method and associated equipment |
| CN110232568A (en) * | 2018-03-06 | 2019-09-13 | 中国移动通信集团四川有限公司 | Method of mobile payment, device, computer equipment and readable storage medium storing program for executing |
| CN109362074A (en) * | 2018-09-05 | 2019-02-19 | 福建福诺移动通信技术有限公司 | A method for secure communication between h5 and server in mixed mode APP |
| CN112260983A (en) * | 2020-07-01 | 2021-01-22 | 北京沃东天骏信息技术有限公司 | Identity authentication method, device, equipment and computer readable storage medium |
Cited By (1)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN116156508A (en) * | 2021-11-23 | 2023-05-23 | 中国移动通信有限公司研究院 | Web page access method, device, equipment and storage medium |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| KR102406757B1 (en) | A method of provisioning a subscriber profile for a secure module | |
| EP3800909B1 (en) | Remote management method, and device | |
| US9843585B2 (en) | Methods and apparatus for large scale distribution of electronic access clients | |
| US10911939B2 (en) | Embedded universal integrated circuit card profile management method and apparatus | |
| KR101611773B1 (en) | Methods, apparatuses and computer program products for identity management in a multi-network system | |
| US9788209B2 (en) | Apparatus and methods for controlling distribution of electronic access clients | |
| EP3592014B1 (en) | Method and device for adding authentication algorithm program | |
| US8219811B2 (en) | Secure software execution such as for use with a cell phone or mobile device | |
| CN103974250B (en) | Collocation method and equipment | |
| US20080003980A1 (en) | Subsidy-controlled handset device via a sim card using asymmetric verification and method thereof | |
| CN107332817B (en) | Mobile device supporting multiple access control clients and corresponding method | |
| KR20070114839A (en) | Provide limited access to mobile station features | |
| US20170286873A1 (en) | Electronic ticket management | |
| CN107623907B (en) | eSIM card network locking method, terminal and network locking authentication server | |
| US10708768B2 (en) | Automatic self-activation of universal integrated circuit card | |
| CN111246455A (en) | Registration activation method, equipment and computer readable storage medium | |
| EP4109945B1 (en) | Token, particularly otp, based authentication system and method | |
| CN116249095A (en) | A page display method and related equipment | |
| CN102279741A (en) | Service processing method of smart card and smart card | |
| CN108616861B (en) | Over-the-air card writing method and device | |
| CN106454807B (en) | A terminal activation method and mobile terminal | |
| CN113079503A (en) | Method and system for remotely downloading authentication application certificate | |
| EP3654685A1 (en) | A method for transferring a msisdn from a first to a second secure element and corresponding computer program | |
| CN113079037A (en) | Method and system for remotely updating authentication application certificate | |
| Ραπτοδήμος | Design and implementation of an android application for extraction of security related data from SIM/USIM |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination |