CN102510431A - Method, system, device and user terminal for obtaining remote resource - Google Patents

Method, system, device and user terminal for obtaining remote resource Download PDF

Info

Publication number
CN102510431A
CN102510431A CN2011103295665A CN201110329566A CN102510431A CN 102510431 A CN102510431 A CN 102510431A CN 2011103295665 A CN2011103295665 A CN 2011103295665A CN 201110329566 A CN201110329566 A CN 201110329566A CN 102510431 A CN102510431 A CN 102510431A
Authority
CN
China
Prior art keywords
resource
voice mail
remote resource
remote
user terminal
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Granted
Application number
CN2011103295665A
Other languages
Chinese (zh)
Other versions
CN102510431B (en
Inventor
加雄伟
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
China United Network Communications Group Co Ltd
Original Assignee
China United Network Communications Group Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by China United Network Communications Group Co Ltd filed Critical China United Network Communications Group Co Ltd
Priority to CN201110329566.5A priority Critical patent/CN102510431B/en
Publication of CN102510431A publication Critical patent/CN102510431A/en
Application granted granted Critical
Publication of CN102510431B publication Critical patent/CN102510431B/en
Active legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Images

Abstract

The invention provides a method, a system, a device and a user terminal for obtaining remote resource. The method includes that the device for obtaining the remote resource receives a first voice mail. The first voice mail comprises resource reference information of the remote resource. The resource reference information comprises resource access authorization information and address information for accessing the remote resource. The resource access authorization information comprises grantee identification, an access method of the grantee to the remote resource, identification of authorized remote resource and identification of a resource storage system for storing the remote resource. The device for obtaining the remote resource obtains the remote resource according to the resource reference information. The technical scheme solves the problems that the remote resource is required to be downloaded to local by an issued user and to generate a voice mail comprising the resource, improves flexibility of voice mail service, and reduces bandwidth resource waste caused by voice mail transmission to some extent.

Description

Remote resource acquisition methods, system, equipment and user terminal
Technical field
The present invention relates to the voice mail technology, relate in particular to a kind of remote resource acquisition methods, system, equipment and user terminal.
Background technology
In traditional voice mail service, the originating party user can only give debit user message through making call debit user's voice box-number (initiatively dial perhaps and specify redirect by traditional voice mail service system); Debit user also can only inquire about, listen to and manage the tone information of oneself through the Voice mail Number of making call oneself; Simultaneously, traditional voice mail service system can also send note to debit user's terminal through short message mode and remind debit user that newer message is arranged, and perhaps otherwise notifies debit user.In traditional voice mail service, the message information of debit user in can only one one the own voice mail of visit.The flexibility of traditional voice mail service and user experience are all relatively poor.
Visual Voice Mail Service is the upgrading to traditional voice mail service.In visual Voice Mail Service, the originating party user can use the Voice Mail Service client software in the terminal, and recorded speech information through Internet protocol, sends to the voice mail delivery system to the voice messaging of recording then.The voice mail delivery system stores the voice messaging that receives in debit's user's voice mailbox into, and can use note or other modes to notify debit user that new message is arranged.Debit user can use the Voice Mail Service client software in the terminal, and the internet usage agreement is obtained the message tabulation from the voice mail delivery system, and this message tabulation may be displayed on debit user's the terminal.Debit user can be according to the needs of oneself, through the message information of message tabulation management easily oneself.In addition, debit user can the internet usage agreement the message download of information to the terminal, and then browse and check.Visual Voice Mail Service has been expanded user's transmission, has inquired about, has been read, the ability of message information in the Managing speech mailbox, has improved the flexibility of Voice Mail Service and user's Experience Degree greatly.
Along with visual Voice Mail Service function expansion, visual Voice Mail Service may be used various resources.At present a lot of resources all are to be stored on the remote server (for example high in the clouds), and these resources possibly be the user resources during Voice Mail Service is used, and also possibly be the resources in other application (for example mail, blog).Owing to have only the owner of resource just can visit the resource of oneself; Must not visit these resources without permission for the third party; And in visual Voice Mail Service; Has only the originating party user remote resource of just having the right to use; So existing visual Voice Mail Service uses the process of remote resource to be: the originating party user at first downloads to this locality with remote resource, then remote resource is edited to wait to handle and generate tone information, send to certain recipient to the tone information of generation through the voice mail delivery system then.In the transmission course of this voice mail, remote resource need be downloaded earlier and then upload, and this has just caused the waste of bandwidth resources.
Summary of the invention
The present invention provides a kind of remote resource acquisition methods, system, equipment and user terminal, in order to reduce the waste of the bandwidth resources that the transferring voice mail causes, the flexibility that improves voice mail business.
The present invention provides a kind of remote resource acquisition methods, comprising:
Remote resource obtains equipment and receives first voice mail; Said first voice mail comprises: the quoting resource information of remote resource; Said quoting resource information comprises resource access authorization message and the address information that is used to visit said remote resource, and said resource access authorization message comprises: grantee sign, grantee are to the sign of the access mode of said remote resource, the said remote resource that is authorized to and store the sign of the resource storage system of said remote resource;
Said remote resource obtains equipment according to said quoting resource information, obtains said remote resource.
The present invention provides a kind of remote resource to obtain equipment, comprising:
Receiver module; Be used to receive first voice mail; Said first voice mail comprises: the quoting resource information of remote resource; Said quoting resource information comprises resource access authorization message and the address information that is used to visit said remote resource, and said resource access authorization message comprises: grantee sign, grantee are to the sign of the access mode of said remote resource, the said remote resource that is authorized to and store the sign of the resource storage system of said remote resource;
Acquisition module is used for obtaining said remote resource according to said quoting resource information.
The present invention provides a kind of user terminal, comprising:
Generation module; Be used to generate first voice mail; Said first voice mail comprises: the quoting resource information of remote resource; Said quoting resource information comprises resource access authorization message and the address information that is used to visit said remote resource, and said resource access authorization message comprises: grantee sign, grantee are to the sign of the access mode of said remote resource, the said remote resource that is authorized to and store the sign of the resource storage system of said remote resource;
Sending module is used for that said first voice mail is sent to remote resource and obtains equipment, so that said remote resource obtains equipment according to said quoting resource information, obtains said remote resource.
The present invention provides a kind of remote resource to obtain system, comprising: arbitrary remote resource provided by the invention obtains equipment and arbitrary user terminal provided by the invention.
Remote resource acquisition methods provided by the invention, system, equipment and user terminal; Show the quoting resource information that remote resource is quoted through in voice mail, carrying; And in quoting resource information, carry resource access authorization message and the required address information of access remote resource that allows the access remote resource; Make resource acquisition equipment to obtain remote resource according to quoting resource information; No longer comprise remote resource in the feasible voice mail that receives; Having solved remote resource need be by the originating party user's download to the local problem that also generates the voice mail that comprise remote resource itself; Improved the flexibility of voice mail business, and, reduced the bandwidth resources waste that the transferring voice mail causes to a certain extent owing to obtain the quoting resource information of no longer transmitting remote resource on the link between the equipment but transmitting remote resource to remote resource the originating party user.
Description of drawings
In order to be illustrated more clearly in the embodiment of the invention or technical scheme of the prior art; To do one to the accompanying drawing of required use in embodiment or the description of the Prior Art below introduces simply; Obviously, the accompanying drawing in describing below is some embodiments of the present invention, for those of ordinary skills; Under the prerequisite of not paying creative work, can also obtain other accompanying drawing according to these accompanying drawings.
Fig. 1 be various embodiments of the present invention based on the system configuration sketch map of the visual Voice Mail Service of realization;
The flow chart of the remote resource acquisition methods that Fig. 2 provides for one embodiment of the invention;
The flow chart of the voice mail implementation method that Fig. 3 provides for one embodiment of the invention;
The flow chart of the voice mail implementation method that Fig. 4 provides for another embodiment of the present invention;
The flow chart of the voice mail implementation method that Fig. 5 provides for further embodiment of this invention;
The remote resource that Fig. 6 provides for one embodiment of the invention obtains the structural representation of equipment;
The remote resource that Fig. 7 provides for another embodiment of the present invention obtains the structural representation of equipment;
The structural representation of the user terminal that Fig. 8 provides for one embodiment of the invention;
The structural representation of the subscriber equipment that Fig. 9 provides for another embodiment of the present invention.
Embodiment
For the purpose, technical scheme and the advantage that make the embodiment of the invention clearer; To combine the accompanying drawing in the embodiment of the invention below; Technical scheme in the embodiment of the invention is carried out clear, intactly description; Obviously, described embodiment is the present invention's part embodiment, rather than whole embodiment.Based on the embodiment among the present invention, those of ordinary skills are not making the every other embodiment that is obtained under the creative work prerequisite, all belong to the scope of the present invention's protection.
Before the remote resource acquisition methods that various embodiments of the present invention are provided describes, at first to carrying out simple declaration with the relevant various information of remote resource acquisition methods that various embodiments of the present invention provide.
Fig. 1 be various embodiments of the present invention based on the system configuration sketch map of the visual Voice Mail Service of realization.As shown in Figure 1, the system of present embodiment comprises: the user terminal 11 of originating party, voice mail delivery system 12, debit's user terminal 13 and resource storage system 14.
Wherein, the user terminal 11 of originating party is equipped with the client software of visual Voice Mail Service, mainly uses user resources to generate, show voice mail through access resources storage system 14.In addition, the user terminal 11 of originating party also has the function of the user resources of authorizing the grantee to visit oneself to be stored in the resource storage system 14 or oneself user resources in can accessed resources storage system 14.
Debit's user terminal 13 also is equipped with the client software of visual Voice Mail Service, is mainly used in receiving voicemail, can also inquire about voice mail, operation such as management.In addition, debit's user terminal 13 also has the resource access authorization message according to the remote resource that is authorized to visit, and obtains the function of the remote resource that is authorized to.Wherein, remote resource is meant that mainly the resource that belongs to the originating party user or the originating party user that are stored on the resource storage system 14 have the resource of using or handling right.
Voice mail delivery system 12 is connected between user terminal 11 and debit's the user terminal 13 of originating party, and main being responsible for carried out with the user terminal 11 of originating party and debit's user terminal 13 alternately.For example: voice mail delivery system 12 receives the voice mail that the client software by the visual Voice Mail Service of the user terminal 11 of originating party sends, and the voice mail that receives is sent the client software to the visual Voice Mail Service of debit's user terminal 13.In addition, the voice mail delivery system 12 of present embodiment also has the resource access authorization message according to the remote resource that is authorized to visit, and obtains the function of the remote resource that is authorized to.
The resource storage system 14 main various user resources of storage of being responsible for, for example: the resource of originating party user's resource, debit user's resource and/or its application.
Further; The system of present embodiment can also comprise: the cert services system; User terminal 13 and the resource storage systems 14 etc. that are used for user terminal 11, voice mail delivery system 12, debit to originating party provide certificate of certification and corresponding PKI and private key etc., and are responsible for certificate of certification is managed.
Among each embodiment, related voice mail is a kind of according to multi-functional internet mail expansion (Multipurpose Internet Mail Extension below the present invention; Abbreviate as: the MIME) combination of the multimedia messages organized of mode.Each voice mail can comprise multimedia messagess such as audio frequency, video, picture, literal.In addition, in various embodiments of the present invention, voice mail can comprise the content of multimedia messages itself, also can only comprise the quoting resource information that multimedia messages is quoted and does not comprise multimedia messages itself.When comprising quoting resource information, voice mail delivery system 12 and/or debit's user terminal 13 can be visited the multimedia messages that is authorized to according to the resource authorization visit information when being authorized to.
In various embodiments of the present invention, related quoting resource information spinner will comprise following information: show it is information that remote resource is quoted, showing need be to required routing information of information (being the grantee), the access remote resource of quoting the object identity of handling and the resource access authorization message etc. that is authorized to the grantee of access remote resource.
For example: quoting resource information can adopt following form to describe: ref type=" remote " target_id=" A1 " uri=" IMAP: // main frame: port/path/... the resource access authorization message ... " encrypt_algorithm=" EA1 " digest1=" D1 " digest2=" D2 " >.
In above-mentioned form, ref type=" remote " expression is quoting remote resource; Target_id representes needs processing this system that quotes, equipment or user's's (being the grantee) sign (ID); In uri information, the access protocal that uses when comprising the access remote resource, host address, host port, resource path etc., these information can make the grantee find the remote resource that is authorized to visit.The grantee needs to use the resource access authorization message, so in quoting resource information, also need comprise the resource access authorization message when the remote resource that visit is authorized to.
For the guarantee information safety of transmission, can encrypt the resource access authorization message, then need employed AES information also be added in the quoting resource information.In above-mentioned form; Through using encrypt_algorithm to represent information such as employed AES; So that under the condition that the resource access authorization message is encrypted, the AES that makes the grantee to use to be complementary is handled the resource access authorization message of having encrypted.Because it is a kind of preferred mode of operation that the resource authorization visit information is encrypted, but is not necessary operation, so quoting resource information can comprise the information of representing employed AES, also can not comprise.
Further, in quoting resource information, can also comprise one or more summaries, adapt, be used for checking and encrypt preceding information integrity with cryptographic operation.Usually, the number of summary adapts with the number of times that carries out cryptographic operation, and for example the number of summary is with to encrypt number of times identical or less than the encryption number of times.For example: when carrying out double-encryption, will corresponding two summaries.In above-mentioned form, use digest1 and digest2 to represent two summaries, but be not limited to two.Digest1 representes the summary of resource access authorization message before first re-encryption, and digest2 representes the summary of resource access authorization message before second re-encryption.
In this explanation, the included information of above-mentioned quoting resource information can change according to the practical application scene.
In various embodiments of the present invention, related resource access authorization message mainly comprises following content:
Grantee's sign: acceptance is to the user's of the mandate of remote resource sign.In visual Voice Mail Service; That be authorized to visit a certain remote resource can be voice mail delivery system or debit user; So grantee's sign can be the sign of debit user or debit's user terminal, also can be the sign of voice mail delivery system.
The grantee is to the access mode of remote resource: the mode of the remote resource that grantee's visit is authorized to, and for example readable, can download, can tabulate etc.
The sign of the remote resource that is authorized to: the remote resource that sign is authorized to.Usually store a plurality of remote resources on the resource storage system, the resource storage system is distinguished different remote resources through the sign with uniqueness.
The sign of the resource storage system of the remote resource that storage is authorized to: the resource storage system of the remote resource that the sign storage is authorized to.When having a plurality of resource storage system, can confirm through this sign which resource storage system the remote resource that is authorized to specifically is stored on.
In above-mentioned resource access authorization message, can also comprise other information, for example authorized person's sign.Authorized person's sign is meant to go executes the sign to the user of remote resource mandate.In visual Voice Mail Service, the authorized person mainly is meant the originating party user, so authorized person sign can be the sign of the user terminal of originating party or originating party user's sign.In addition, according to actual needs, the resource access authorization message can also comprise out of Memory.
Through each embodiment the flow process of obtaining remote resource provided by the invention is described below.
The flow chart of the remote resource acquisition methods that Fig. 2 provides for one embodiment of the invention.As shown in Figure 2, the method for present embodiment comprises:
Step 201, remote resource obtain equipment and receive first voice mail.
In the present embodiment, first voice mail comprises: the quoting resource information of remote resource.Quoting resource information comprises resource access authorization message and the address information that is used for the access remote resource, and the specific descriptions of relevant quoting resource information can be referring to the introduction of front.In the present embodiment; What first voice mail comprised that the quoting resource information of remote resource shows that first voice mail carries is not remote resource itself; But the relevant information when quoting remote resource; That is to say, the access rights of remote resource are licensed to the grantee, require the grantee to remove to obtain remote resource.
The resource access authorization message of present embodiment mainly comprises: grantee sign, grantee be to the sign of the resource storage system of the sign of the access mode of remote resource, the remote resource that is authorized to and storage remote resource, but be not limited to above-mentioned information.
In the present embodiment, remote resource obtains equipment and is the grantee, can be voice mail delivery system and/or debit's user terminal.Wherein, perhaps license to the voice mail delivery system, perhaps license to debit's user terminal for same remote resource.Can all license to the voice mail delivery system for different remote resources, also can all license to debit's user terminal, can also simultaneously different remote resources be licensed to voice mail delivery system and debit's user terminal respectively.For example: suppose to have two remote resources to be respectively: first resource and second resource; The user terminal of originating party can all license to the voice mail delivery system with first resource and second resource; Also can first resource and second resource all be licensed to debit's user terminal; Can also give the voice mail delivery system with first resource authorization, and give debit's user terminal second resource authorization.
Wherein, remote resource is licensed to remote resource obtain equipment and be meant that quoting resource information with remote resource offers remote resource and obtains equipment, obtain equipment by remote resource and go the resource storage system to obtain the process of remote resource according to quoting resource information.
When remote resource obtained equipment and is the voice mail delivery system, the user terminal of originating party generated first voice mail that comprises the quoting resource information of remote resource and do not comprise remote resource itself, and first voice mail is sent to the voice mail delivery system.The voice mail delivery system directly receives first voice mail from the user terminal of originating party.
When remote resource obtains equipment for debit's user terminal; The user terminal of originating party generates first voice mail that comprises the quoting resource information of remote resource and do not comprise remote resource itself; First voice mail is sent to the voice mail delivery system, by the voice mail delivery system first voice mail is transmitted to debit's user terminal again.Debit's user terminal receives first voice mail of being transmitted by the voice mail delivery system.
Step 202, remote resource obtain equipment according to quoting resource information, obtain remote resource.
In practical application; No matter remote resource obtains equipment is voice mail delivery system or debit's user terminal; The capital is addressed to the resource storage system of storage remote resource according to the sign of address information and resource storage system; And the resource storage system can find concrete remote resource according to the sign of resource access authorization message medium-long range resource, and can remote resource offered remote resource obtains equipment according to licensing to access mode that remote resource obtains equipment.
In the present embodiment; When the user terminal of originating party sends voice mail at the user terminal to the debit; Need not remote resource is downloaded to the local voice mail that comprises remote resource itself that also generates, but, generate and send the voice mail of the quoting resource information that only comprises remote resource through giving voice mail delivery system or debit's user terminal to the access authorization of remote resource; Compared with prior art; The user terminal that has strengthened originating party uses the flexibility of remote resource, helps using stored resource on the network, has strengthened the ability and the flexibility of visual Voice Mail Service system.In the present embodiment, when remote resource obtains equipment and is the voice mail delivery system, to the link between the voice mail delivery system, need not to transmit remote resource, practiced thrift bandwidth resources at the user terminal of originating party; When remote resource obtains equipment for debit's user terminal, to the whole link between debit's the user terminal, need not to transmit remote resource at the user terminal of originating party, practiced thrift bandwidth resources.In addition; When a certain user has stored one section voice resource on network; And hope to be inserted into this section voice resource in the tone information in certain time, send to the recipient with the mode of tone information, but when not hoping that voice resource downloaded to this locality; Mode through using present embodiment to provide can realize, has improved the flexibility of visual Voice Mail Service.
In the above-described embodiments, voice mail delivery system or debit's user terminal comprised before receiving first voice mail: generate the operation of first voice mail.This operation that generates first voice mail is carried out by the user terminal of originating party.Then the user terminal of the originating party process that generates first voice mail comprises:
When the user terminal of originating party is confirmed to send voice mail to debit's user terminal; At first confirm employed remote resource and confirm to adopt remote resource is downloaded to this locality; Remote resource itself is carried at the mode in the voice mail, still adopts the mode of quoting remote resource.In the present embodiment; The user terminal of originating party confirm to adopt the mode of quoting remote resource, then the user terminal of originating party obtain remote resource sign, storage remote resource the resource storage system sign, grantee's sign (just remote resource obtains equipment mark) and license to the access mode of grantee to remote resource (for example download, readable maybe can tabulate).Concrete, the user terminal of originating party can sign in to the resource storage system, by the resource storage system sign, grantee's sign, grantee of sign, the resource storage system of the remote resource information such as access mode to remote resource is provided.In addition; The user terminal of originating party also can provide an interactive interface to the originating party user, by the originating party user on interactive interface manually the sign of the sign of input remote resource, resource storage system, grantee's sign, grantee to the information needed such as access mode of remote resource.Then; The user terminal of originating party carries out encapsulation process to sign, grantee's sign and the grantee of the resource storage system of the sign of the remote resource that obtains, storage remote resource to the information such as access mode of remote resource, thereby forms the resource access authorization message.That is to say, the resource access authorization message just sign, grantee sign and the grantee of the resource storage system of sign, the storage remote resource of remote resource to the information such as access mode of remote resource.
The user terminal of originating party also can obtain access remote resource addresses information (being the required routing information of access remote resource), and with the resource access authorization message, be used for access remote resource addresses information and some other information is packaged into quoting resource information.Wherein, said some other information comprises: show the information that remote resource is quoted, employed AES etc.Wherein, access remote resource addresses information can be obtained from the resource storage system by the user terminal of originating party, can also be imported by hand by the originating party user.
Further; The user terminal of originating party carries out encapsulation process to sign, grantee's sign and the grantee of the resource storage system of the sign of the remote resource that obtains, storage remote resource to the information such as access mode of remote resource; Form after the resource access authorization message; With the resource access authorization message, be used for access remote resource addresses information and some other information and be packaged into before the quoting resource information, can also carry out following operation:
The user terminal of originating party adopts the MD5 scheduling algorithm that the resource access authorization message is handled, and generates a summary info, with the private key of the user terminal of originating party summary info is encrypted then, generates first and makes a summary.This first summary is used to supply remote resource to obtain equipment to judge the whether complete use of resource access authorization message, and because first summary is to use the encrypted private key formation of the user terminal of originating party, can guarantee authorized person's legal identity.Then; The user terminal of originating party uses the grantee, and (just remote resource obtains equipment; Or perhaps voice mail delivery system or debit's user terminal) PKI is encrypted the resource access authorization message and first summary, can guarantee to have only real grantee could use remote resource like this.
In the present embodiment; The user terminal of originating party carries out encryption through the mode of using summary and encrypt to the resource access authorization message; Voice mail can be transmitted with open mode on open network, guaranteed reliability, fail safe and the opening of authorizing.
Further specify, the mode that the resource access authorization message is carried out encryption is not limited to above-mentioned a kind of, and for example: the user terminal of originating party can also adopt the double-encryption and the modes of two summaries that the resource access authorization message is handled.The double-encryption mode is meant that mainly the private key of the user terminal that uses originating party once encrypts, with the legitimacy of the user terminal of guaranteeing originating party; The PKI that re-uses the grantee is once encrypted, to guarantee grantee's legitimacy.Wherein, the order of twice encryption is not done qualification.Two summaries are meant the summary for guaranteeing that information integrity generates before twice encryption respectively.The algorithm that generates summary can adopt the MD5 algorithm, but is not limited to this.
Based on above-mentioned, the user terminal of originating party specifically is used for together being packaged into quoting resource information with making a summary and be used for access remote resource addresses information through the resource access authorization message and first of encrypting.That is to say, comprise the resource access authorization message and first summary that process is encrypted in the quoting resource information simultaneously and be used for access remote resource addresses information.
It is that voice mail delivery system, remote resource obtain user terminal that equipment is the debit and remote resource to obtain equipment be that voice mail delivery system and debit's user terminal is an example simultaneously that following Fig. 3-embodiment illustrated in fig. 5 will be respectively obtains equipment with remote resource, and the detailed process of the remote resource acquisition methods of in the Voice Mail Service process, realizing provided by the invention is described.
The flow chart of the voice mail implementation method that Fig. 3 provides for one embodiment of the invention.In the present embodiment, remote resource obtains equipment or grantee and is the voice mail delivery system.In the present embodiment, at first do following supposition: the user terminal of supposition originating party need use a remote resource (being designated as first resource) to generate voice mail, and sends to debit's user terminal.Suppose that this first resource is stored on the resource storage system (being designated as the first resource storage system).
But need explanation, the user terminal of originating party is not limited to use a kind of resource to generate voice mail, can use according to practical application and plant resource arbitrarily, since all identical to the processing mode of every kind of resource, so only being example with a kind of, present embodiment describes.In addition; When the user terminal that sends uses multiple resource; Its employed every kind of resource is not limited to be stored on the different resources storage system; Employed various resource can be stored on any resource storage system, and the part resource or all resource also can be stored on the same resource storage system.
In the present embodiment, the user terminal of originating party need use the Voice Mail Service client to generate first voice mail, comprises the resource access authorization message of first resource in first voice mail.The user terminal of originating party hopes that the voice mail delivery system obtains first resource according to the resource access authorization message in the first sound mail from the first resource storage system; And use first resource to generate the second new voice mail, send user terminal then to the debit.Under normal circumstances, the voice mail delivery system haves no right to visit first resource, and present embodiment can address this problem.
As shown in Figure 3, the method for present embodiment specifically comprises:
The user terminal of step 31, originating party generates the first resource access authorization message according to first resource.
In practical application; Carry out Voice Mail Service to as if the user terminal of originating party in, in debit's the user terminal and the Voice Mail Service client software in the voice mail delivery system; Describe for simplifying, directly be described as the user terminal of originating party, debit's user terminal and voice mail delivery system in the present embodiment.
On the user terminal of originating party, store originating party user's certificate of certification and corresponding PKI and private key in advance, supply to realize the Voice Mail Service use.Originating party user's certificate of certification can be provided by certificate management system with corresponding PKI and private key.
When carrying out Voice Mail Service, the originating party user at first confirms employed resource, i.e. first resource.
Then, the user terminal of originating party is logined the first resource storage system, obtains first resource for information about, for example: the sign of first resource, the visit first resource addresses information and the mode etc. of using first resource.Except that this mode, the user terminal that can also offer originating party for information about of first resource by the interactive interface that the user terminal of originating party user through originating party provides.
Usually, use a kind of resource to realize that the mode of Voice Mail Service mainly comprises: directly to add the content of resource itself in the voice mail to; Perhaps just join the quoting resource information of this resource in the voice mail.If the former, then the user terminal of originating party directly obtains this resource, and adds this resource in the voice mail to.If the latter, then the user terminal of originating party need generate the resource access authorization message according to the relevant information of resource, and then generates quoting resource information.
In the present embodiment, the originating party user confirms that the occupation mode of first resource is the latter, and the quoting resource information that is about to first resource joins in first voice mail.
In the present embodiment; The user terminal of originating party encapsulates the sign of the sign of the sign of first resource, the first resource storage system, voice mail delivery system and the voice mail delivery system information such as access mode to first resource, forms the first resource access authorization message.Then, the user terminal of originating party uses the MD5 algorithm that the first resource access authorization message is handled, and generates a summary info, and uses the private key of the user terminal of originating party that this summary info is encrypted, and generates first summary.
Then, the user terminal of originating party uses the PKI of voice mail delivery system that the first resource access authorization message and first summary are encrypted, and forms the first resource access authorization message and first summary through encrypting.
On the user terminal of originating party, can store the information such as PKI of voice mail delivery system and debit's user terminal in advance.In addition, the user terminal of originating party also can only be stored the certificate and corresponding private key and PKI of oneself, and obtains the information such as PKI of voice mail delivery system or debit's user terminal through certificate management system.
In this explanation, when the user terminal of originating party uses multiple resource to generate first voice mail simultaneously, every kind of resource all adopted the processing mode of first resource is handled respectively, will obtain resource access authorization message and the summaries of many groups this moment through encrypting.
The user terminal of step 32, originating party generates first voice mail.
Usually, the user terminal of originating party can add local resource in voice mail when using the Voice Mail Service client to generate voice mail, also can add the remote resource that the user terminal of originating party can be visited.For local resource, the user terminal of originating party can directly add the content of local resource in the voice mail to.For remote resource; The user can determine that whether downloading to this locality to remote resource adds the content of remote resource in the voice mail to then; Can also in voice mail, add quoting resource information, obtain said remote resource by the voice mail delivery system with indication to said remote resource.In the present embodiment, first resource is the remote resource that the user terminal of originating party can be visited, and the user terminal of originating party confirms in voice mail, to add the quoting resource information to first resource.
Therefore; In the present embodiment; After the user terminal of originating party generates the first resource access authorization message; With the first resource access authorization message and first summary, sign and the address information etc. of logining the first resource storage system that perhaps will pass through the first resource access authorization message and first summary, the voice mail delivery system of encryption are packaged together, and form the first quoting resource information.
Then, the user terminal of originating party is encapsulated in the first quoting resource information in first voice mail.In this explanation, in first voice mail, comprise the quoting resource information of first resource, but do not comprise the content of first resource itself.In addition, the user terminal of originating party can also add other resource contents in first voice mail.
In this explanation; When the user terminal of originating party uses multiple resource to generate first voice mail simultaneously; The user terminal of originating party will generate a plurality of quoting resource information, and wherein all the generating mode with the first quoting resource information is identical for the generating mode of each quoting resource information.
The user terminal of step 33, originating party sends to the voice mail delivery system with first voice mail.
Wherein, the user terminal of originating party can use HTTP (HyperText Transfer Protocol; Abbreviate as: HTTP), interactive email access agreement (Internet Mail Access Protocol; Abbreviate as: IMAP), Simple Mail Transfer protocol (Simple Mail Transfer Protocol; Abbreviate as: SMTP) etc. agreement and voice mail delivery system carry out alternately.
In this step, the user terminal of originating party uses agreements such as HTTP, IMAP, SMTP that first voice mail is sent to the voice mail delivery system.
Whether step 34, voice mail delivery system are checked to comprise in first voice mail needs the quoting resource of its processing information.When being checked through when needing the quoting resource of its processing information execution in step 35-step 38; Otherwise, execution in step 39.
Concrete; The voice mail delivery system receives after first voice mail that the user terminal of originating party sends; Communication protocol according to using is resolved first voice mail; Obtain quoting resource information (i.e. the first quoting resource information) wherein, and further obtain the sign of the object of the responsible processing quoting resource that carries in the first quoting resource information; Judge then whether the sign of obtaining is identical with the sign of oneself.When judged result when being identical, confirm oneself need handle to this quoting resource information.Otherwise, confirm oneself need not handle to this quoting resource information.
In the present embodiment, the voice mail delivery system is exactly the grantee, need handle the first quoting resource information so the voice mail delivery system can be judged.
Step 35, voice mail delivery system are handled the first quoting resource information, obtain first resource.
Concrete, the voice mail delivery system is further resolved the first quoting resource information, obtains the wherein first resource access authorization message and first summary through encrypting; The private key that uses the voice mail delivery system then obtains the first resource access authorization message and first summary etc. to carrying out decryption processing through the first resource access authorization message and first summary of encrypting.
Then; The voice mail delivery system uses with the corresponding algorithm of user terminal (for example MD5 algorithm) of originating party the first resource access authorization message that obtains is handled generation one summary info; And use the PKI of the user terminal of originating party that first summary that parses is deciphered; Obtain another summary info, then two summary infos are compared; If both are identical, explain that the first resource access authorization message is correct, unmodified can confirm also that simultaneously the first resource access authorization message sent by the user terminal of originating party really; Otherwise explain that the first resource access authorization message is wrong, can refuse to carry out subsequent operation.
The voice mail delivery system stores the certificate and corresponding PKI and private key of oneself in advance.Certificate is provided by certificate management system with corresponding PKI and private key.
In addition, the voice mail delivery system also can be stored the PKI etc. of the user terminal of originating party in advance.Perhaps, the voice mail delivery system obtains the PKI etc. of the user terminal of originating party through certificate management system.
Wherein, the user terminal of originating party can be carried at the information of using such as AES in the first quoting resource information, offers the voice mail delivery system, is convenient to change in real time AES like this, improves fail safe.In addition, the user terminal of originating party also can be arranged employed AES etc. with the voice mail delivery system in advance, can reduce the size of first voice mail like this, helps the conserve bandwidth resource.
Further in this explanation; When the user terminal of originating party uses double-encryption with two summaries the first resource access authorization message to be carried out encryption; The voice mail delivery system need carry out twice integrality according to two summaries and judge; And need carry out twice deciphering; Its process and encryption and the process that generates summary are inverse process, those skilled in the art according to present embodiment to a summary with once encrypt the flow process of handling and can know by inference how to double-encryption and two handling processes of making a summary, so repeat no more at this.
After confirming that first resource quoted needed various information does not have mistake; The voice mail delivery system is according to the sign of the first resource storage system wherein and the address information of the first resource storage system; Send acquisition request conforms to the first resource storage system, promptly propose the resource access services request to the first resource storage system.Wherein, in acquisition request conforms, comprise the sign and the first resource access authorization message of voice mail delivery system.At this moment, the first resource access authorization message is the resource access authorization message that the voice mail delivery system uses the private key of oneself from make a summary through the first resource access authorization message and first of encrypting, to decrypt.In addition, in acquisition request conforms, also comprise first summary that decrypts.
The process of the acquisition request conforms of the first resource storage system processed voice mail carrying system comprises:
At first, the first resource storage system is according to the sign of voice mail delivery system, and the mode of inspection Accessor Access resource promptly judges it is Resource Owner's access mode, or grantee's access mode.
The first resource storage system not only stores various resources itself, also stores and every kind of various information that resource is relevant, for example sign of the size of Resource Owner's sign, resource, resource etc.The first resource storage system is according to the sign of the first resource access authorization message medium-long range resource; Identify first resource; And obtain the possessory sign of first resource; Then the sign of voice mail delivery system and owner's sign of first resource are compared, thereby confirm it is which kind of access mode.If it is identical that the sign of voice mail delivery system and the owner of first resource identify, then confirm as Resource Owner's access mode; Otherwise, confirm as grantee's access mode.
In the present embodiment, the first resource storage system confirms that the voice mail delivery system carries out resource access as the grantee.
Next, the first resource storage system parses the first resource access authorization message from acquisition request conforms, and according to the integrality of first Digest Authentication, the first resource access authorization message.
Because first summary is to be encrypted by the private key of the user terminal of originating party,, obtain a summary info so the first resource storage system uses the PKI of the user terminal of originating party that first summary is deciphered; Simultaneously, the first resource storage system is used with the corresponding algorithm of user terminal (for example MD5 algorithm) of originating party the first resource access authorization message is handled, and generates another summary info, and two summary infos are compared; When comparative result for both when identical, confirm that the first resource access authorization message is complete, no error of transmission or do not have modification, and can guarantee that the first resource access authorization message sent by the user terminal of originating party really; When comparative result for both not simultaneously, confirm that the first resource access authorization message makes a mistake, and can refuse to carry out subsequent operation.
Usually, the first resource storage system certificate that can store oneself in advance and information such as corresponding PKI and private key.In addition, the first resource storage system also can store the information such as PKI that user terminal, voice mail delivery system and the debit's of originating party user terminal uses in advance.Perhaps the first resource storage system also can be obtained the information such as PKI that user terminal, voice mail delivery system and the debit's of originating party user terminal uses through certificate management system.
When definite first resource access authorization message was complete, the first resource storage system judged whether the sign of voice mail delivery system is identical with the grantee's sign that parses; When judged result when being identical; Confirm that the voice mail delivery system is exactly the grantee; Then the first resource storage system finds first resource according to the sign of first resource, and according to the grantee access mode of first resource is offered grantee's (voice mail delivery system just) with first resource.When judged result for not the time, explain that the voice mail delivery system is not the grantee, do not have the right of visit first resource, so refuse first resource is sent to the voice mail delivery system.
Wherein, the first resource storage system judges further whether the voice mail delivery system is grantee's operation, can further improve the fail safe of resource authorization, prevents that resource from being used by the unauthorized person, but and this operation be a selection operation.
The process of only the voice mail delivery system being obtained first resource above is illustrated, and when the voice mail delivery system need obtain a plurality of resource, the process of obtaining each resource was all similar with the process of obtaining first resource, is not described in detail at this.
Wherein, can use agreements such as HTTP, SMTP or IMAP to carry out alternately between the voice mail delivery system and the first resource storage system.Employed agreement can be made an appointment, and also can specify through quoting resource information.
Step 36, voice mail delivery system use first resource that gets access to generate second voice mail.
Concrete, the voice mail delivery system directly is put into the content of first resource itself in second voice mail.
Step 37, voice mail delivery system send to second voice mail debit's user terminal.
Concrete, debit's user terminal uses the Voice Mail Service client to obtain second voice mail.
Wherein, can use agreements such as HTTP, IMAP, SMTP to carry out alternately between debit's user terminal and the voice mail delivery system.In the present embodiment, the voice mail delivery system uses agreements such as HTTP, IMAP, SMTP second voice mail to be sent to debit's user terminal.
The voice mail delivery system second voice mail is sent to the debit user terminal execution mode can for: voice mail delivery system second voice mail storage in debit's user's voice mailbox, and can use note to send message notification to debit's user terminal.Debit's user terminal uses its Voice Mail Service client software, through Internet protocol, from the voice mail delivery system, obtains the voice mail tabulation, and said voice mail list information may be displayed on the terminal.Debit's user terminal can be managed the voice mail of oneself receiving according to the needs of oneself through the voice mail tabulation.Simultaneously, debit's user terminal can the internet usage agreement etc. downloads to this locality to voice mail, and then browses and check.Wherein, employed Internet protocol can be IMAP or post office protocol (Post Office Protocol; Abbreviate as: POP) etc.
In this explanation, in the present embodiment, having presupposed remote resource, to obtain equipment be the voice mail delivery system, so debit's user terminal can be judged the quoting resource information that whether second voice mail carries needs own processing in this step.And in actual application; The grantee is by the decision of the user terminal of originating party; User terminal for the debit can't be known in advance; So when debit's user terminal receives voice mail, also can carry out and judge the operation that whether carries the quoting resource information that oneself to handle in the voice mail.
Step 38, voice mail delivery system are returned the sending state information of first voice mail to the user terminal of originating party, have so far accomplished voice mail business.
For example: the voice mail delivery system returns first voice mail to the user terminal of originating party and whether sends the information that successfully waits, so that the method user understands the sending state of first voice mail.
Step 39, voice mail delivery system directly send to first voice mail debit's user terminal, and finish this voice mail business.
This step 39 is identical with prior art, repeats no more at this.
In the present embodiment; The user terminal of originating party licenses to the visit of voice mail delivery system through using quoting resource information with remote resource; Allow the user terminal of originating party no longer remote resource to be downloaded to this locality; Improve visual Voice Mail Service and used the ability of Internet resources; Strengthened the flexibility of visual Voice Mail Service, and, reduced the bandwidth resources waste that the transferring voice mail causes to a certain extent owing to obtain the quoting resource information of no longer transmitting remote resource on the link between the equipment but transmitting remote resource to remote resource the originating party user.In the present embodiment, the user terminal of originating party uses the mode of encrypting with summary to handle quoting the relevant information of remote resource, allows voice mail on open network, to transmit with open mode, has guaranteed reliability, fail safe and the opening of authorizing; Further, further guaranteed the fail safe of authorizing through using summary to carry out integrity verification.
The flow chart of the voice mail implementation method that Fig. 4 provides for another embodiment of the present invention.In the present embodiment, remote resource obtains equipment or the grantee user terminal for the debit.In the present embodiment, at first do following supposition: the user terminal of supposing originating party need use a remote resource (being designated as second resource) to generate voice mail, and sends to debit's user terminal.Suppose that this second resource is stored on the resource storage system (being designated as the second resource storage system).
With embodiment illustrated in fig. 3; In the present embodiment, the user terminal of originating party is not limited to use a kind of resource to generate voice mail, can use according to practical application and plant resource arbitrarily; Since all identical to the processing mode of every kind of resource, so only being example with a kind of, present embodiment describes.In addition; When the user terminal that sends uses multiple resource; Its employed every kind of resource is not limited to be stored on the different resources storage system; Employed various resource can be stored on any resource storage system, and the part resource or all resource also can be stored on the same resource storage system.
In like manner, in the present embodiment, the user terminal of originating party need use the Voice Mail Service client to generate first voice mail, comprises the resource access authorization message of second resource in first voice mail.The user terminal of originating party hopes that debit's user terminal obtains second resource according to the resource access authorization message in first voice mail from the second resource storage system.Under normal circumstances, debit's user terminal haves no right to visit second resource, and present embodiment can address this problem.
As shown in Figure 4, the method for present embodiment specifically comprises:
The user terminal of step 41, originating party generates the second resource access authorization message according to second resource.
When carrying out Voice Mail Service, the originating party user at first confirms employed resource, i.e. second resource.
Then, the user terminal of originating party is logined the second resource storage system, obtains second resource for information about, for example: the sign of second resource, the visit second resource addresses information and the mode etc. of visiting second resource.Except that this mode, the user terminal that can also offer originating party for information about of second resource by the interactive interface that the user terminal of originating party user through originating party provides.
Usually, use a kind of resource to realize that the mode of Voice Mail Service mainly comprises: directly to add the content of resource itself in the voice mail to; Perhaps just join the quoting resource information of this resource in the voice mail.If the former, then the user terminal of originating party directly obtains this resource, and adds this resource in the voice mail to.If the latter, then the user terminal of originating party need generate the resource access authorization message according to the relevant information of resource, and then generates quoting resource information.
In the present embodiment, the originating party user confirms that the occupation mode of second resource is the latter, and the quoting resource information that is about to second resource joins in second voice mail.
In the present embodiment; The user terminal of originating party encapsulates the sign of the sign of the sign of second resource, the second resource storage system, debit's user terminal and debit's the user terminal information such as access mode to second resource, forms the second resource access authorization message.Then, the user terminal of originating party uses the MD5 algorithm that the second resource access authorization message is handled, and generates a summary info, and uses the private key of the user terminal of originating party that this summary info is encrypted, and generates second summary.
Then, the user terminal of originating party uses the PKI of debit's user terminal that the second resource access authorization message and second summary are encrypted, and forms the second resource access authorization message and second summary through encrypting.
On the user terminal of originating party, can store the information such as PKI of voice mail delivery system and debit's user terminal in advance.In addition, the user terminal of originating party also can only be stored the certificate and corresponding private key and PKI of oneself, and obtains the information such as PKI of voice mail delivery system or debit's user terminal through certificate management system.
In this explanation, when the user terminal of originating party uses multiple resource to generate first voice mail simultaneously, every kind of resource all adopted the processing mode of second resource is handled respectively, will obtain resource access authorization message and the summaries of many groups this moment through encrypting.
This step 41 only is with the difference of step 31: employed resource is different, and the resource access authorization message that is generated is different, and the process of generation resource access authorization message is similar.
The user terminal of step 42, originating party generates first voice mail.
In the present embodiment; After the user terminal of originating party generates the second resource access authorization message; With the second resource access authorization message and second summary; Sign and the address information etc. of logining the second resource storage system of user terminal that perhaps will pass through the second resource access authorization message and second summary, the debit of encryption is packaged together, and forms the second quoting resource information.
Then, the user terminal of originating party is encapsulated in the second quoting resource information in first voice mail.In this explanation, in first voice mail, comprise the quoting resource information of second resource, but do not comprise the content of second resource itself.In addition, the user terminal of originating party can also add other resource contents in first voice mail.
In this explanation; When the user terminal of originating party uses multiple resource to generate first voice mail simultaneously; The user terminal of originating party will generate a plurality of quoting resource information, and wherein all the generating mode with the second quoting resource information is identical for the generating mode of each quoting resource information.
This step 42 can realize that difference is: what comprise in first voice mail in the present embodiment is the second quoting resource information with reference to the description of step 32.
The user terminal of step 43, originating party sends to the voice mail delivery system with first voice mail.
Wherein, the user terminal of originating party can use agreements such as HTTP, IMAP, SMTP and voice mail delivery system to carry out alternately.
In this step, the user terminal of originating party uses agreements such as HTTP, IMAP, SMTP that first voice mail is sent to the voice mail delivery system.
Step 44, voice mail delivery system are sent the user terminal to the debit with first voice mail.
If the voice mail delivery system is known in advance when the user terminal of originating party is given debit's user terminal with second resource authorization, can directly first voice mail be sent the user terminal to the debit.
But; In actual application; The grantee is by the decision of the user terminal of originating party; User terminal for voice mail delivery system and debit all can't be known in advance, so when the voice mail delivery system receives voice mail, need to carry out the operation that whether carries the quoting resource information that need oneself handle in inspection first voice mail.When being checked through when needing the quoting resource of its processing information the flow process of step 35-step 38 in the execution graph 3; Otherwise, carry out step 44 in the present embodiment.
In the present embodiment, suppose that the voice mail delivery system knows that in advance the grantee is debit's a user terminal, so when receiving first voice mail, directly it is sent the user terminal to the debit.
Whether step 45, debit's user terminal receives first voice mail, and check to comprise in first voice mail and need the quoting resource of its processing information.When being checked through when needing the quoting resource of its processing information execution in step 46; Otherwise, execution in step 47.
Concrete; Debit's user terminal receives after first voice mail of voice mail delivery system forwarding; Communication protocol according to using is resolved first voice mail; Obtain quoting resource information (i.e. the second quoting resource information) wherein, and further obtain the sign of the object of the responsible processing quoting resource that carries in the second quoting resource information; Judge then whether the sign of obtaining is identical with the sign of oneself.When judged result when being identical, confirm oneself need handle to this quoting resource information.Otherwise, confirm oneself need not handle to this quoting resource information.
In the present embodiment, debit's user terminal is exactly the grantee, need handle the second quoting resource information so debit's user terminal can be judged.
Step 46, debit's user terminal is handled the second quoting resource information, obtains second resource, and finishes this voice mail business.
Concrete, debit's user terminal is further resolved the second quoting resource information, obtains the wherein second resource access authorization message and second summary through encrypting; The private key that uses oneself then obtains the second resource access authorization message and second summary etc. to carrying out decryption processing through the second resource access authorization message and second summary of encrypting.
Then; Debit's user terminal uses with the corresponding algorithm of user terminal (for example MD5 algorithm) of originating party the second resource access authorization message that obtains is handled generation one summary info; And use the PKI of the user terminal of originating party that second summary that parses is deciphered; Obtain another summary info, then two summary infos are compared; If both are identical, explain that the second resource access authorization message is correct, unmodified can confirm also that simultaneously the second resource access authorization message sent by the user terminal of originating party really; Otherwise explain that the second resource access authorization message is wrong, can refuse to carry out subsequent operation.
Debit's user terminal stores the certificate and corresponding PKI and private key of oneself in advance.Certificate is provided by certificate management system with corresponding PKI and private key.
In addition, debit's user terminal also can be stored the PKI etc. of the user terminal of originating party in advance.Perhaps, debit's user terminal obtains the PKI etc. of the user terminal of originating party through certificate management system.
Wherein, the user terminal of originating party can be carried at the information of using such as AES in the second quoting resource information, and offers debit's user terminal through the voice mail delivery system, is convenient to change in real time AES like this, improves fail safe.In addition, the user terminal of originating party also can be arranged employed AES etc. with debit's user terminal in advance, can reduce the size of first voice mail like this, helps the conserve bandwidth resource.
Further in this explanation; When the user terminal of originating party uses double-encryption with two summaries the second resource access authorization message to be carried out encryption; Debit's user terminal need carry out twice integrality according to two summaries and judge; And need carry out twice deciphering; Its process and encryption and the process that generates summary are inverse process, those skilled in the art according to present embodiment to a summary with once encrypt the flow process of handling and can know by inference how to double-encryption and two handling processes of making a summary, so repeat no more at this.
After confirming that second resource quoted needed various information does not have mistake; Debit's user terminal is according to the wherein sign of the second resource storage system and the address information of the second resource storage system; Send acquisition request conforms to the second resource storage system, promptly propose the resource access services request to the second resource storage system.Wherein, in acquisition request conforms, comprise the sign and the second resource access authorization message of debit's user terminal.At this moment, the second resource access authorization message is the resource access authorization message that debit's user terminal uses own private key from make a summary through the second resource access authorization message and second of encrypting, to decrypt.In addition, in acquisition request conforms, also comprise second summary that decrypts.
The process of the acquisition request conforms of second resource storage system processing debit's user terminal comprises:
At first, the second resource storage system is according to the sign of debit's user terminal, and the mode of inspection Accessor Access resource promptly judges it is Resource Owner's access mode, or grantee's access mode.
The second resource storage system not only stores various resources itself, also stores and every kind of various information that resource is relevant, for example sign of the size of Resource Owner's sign, resource, resource etc.The second resource storage system is according to the sign of the second resource access authorization message medium-long range resource; Identify second resource; And obtain the possessory sign of second resource; Then the sign of debit's user terminal and owner's sign of second resource are compared, thereby confirm it is which kind of access mode.If it is identical that the sign of debit's user terminal and the owner of second resource identify, then confirm as Resource Owner's access mode; Otherwise, confirm as grantee's access mode.
In the present embodiment, the second resource storage system confirms that debit's user terminal carries out resource access as the grantee.
Next, the second resource storage system parses the second resource access authorization message from acquisition request conforms, and according to the integrality of second Digest Authentication, the second resource access authorization message.
Because second summary is to be encrypted by the private key of the user terminal of originating party,, obtain a summary info so the second resource storage system uses the PKI of the user terminal of originating party that second summary is deciphered; Simultaneously, the second resource storage system is used with the corresponding algorithm of user terminal (for example MD5 algorithm) of originating party the second resource access authorization message is handled, and generates another summary info, and two summary infos are compared; When comparative result for both when identical, confirm that the second resource access authorization message is complete, no error of transmission or do not have modification, and can guarantee that the second resource access authorization message sent by the user terminal of originating party really; When comparative result for both not simultaneously, confirm that the second resource access authorization message makes a mistake, and can refuse to carry out subsequent operation.
Usually, the second resource storage system certificate that can store oneself in advance and information such as corresponding PKI and private key.In addition, the second resource storage system also can store the information such as PKI that user terminal, voice mail delivery system and the debit's of originating party user terminal uses in advance.Perhaps the second resource storage system also can be obtained the information such as PKI that user terminal, voice mail delivery system and the debit's of originating party user terminal uses through certificate management system.
When definite second resource access authorization message was complete, the second resource storage system judged whether identical the sign of debit's user terminal identifies with the grantee who parses; When judged result when being identical; The user terminal of confirming the debit is exactly the grantee; Then the second resource storage system finds second resource according to the sign of second resource, and according to the grantee access mode of second resource is offered grantee's (user terminal of debit just) with second resource.When judged result for not the time, the user terminal that the debit be described is not the grantee, does not have the right of visit second resource, so refuse second resource is sent to debit's user terminal.
Wherein, the second resource storage system judges further whether debit's user terminal is grantee's operation, can further improve the fail safe of resource authorization, prevents that resource from being used by the unauthorized person, but and this operation be a selection operation.
The process of only debit's user terminal being obtained second resource above is illustrated, and when debit's user terminal need obtain a plurality of resource, the process of obtaining each resource was all similar with the process of obtaining second resource, is not described in detail at this.
Wherein, can use agreements such as HTTP, SMTP or IMAP to carry out alternately between debit's the user terminal and the second resource storage system.Employed agreement can be made an appointment, and also can specify through quoting resource information.
Step 47, debit's user terminal is directly handled first voice mail, and finishes this voice mail business.
This step 47 is identical with prior art, repeats no more at this.
In the present embodiment; The user terminal of originating party licenses to remote resource debit's access through using quoting resource information; Allow the user terminal of originating party no longer remote resource to be downloaded to this locality; Improve visual Voice Mail Service and used the ability of Internet resources; Strengthened the flexibility of visual Voice Mail Service, and, reduced the bandwidth resources waste that the transferring voice mail causes to a certain extent owing to obtain the quoting resource information of no longer transmitting remote resource on the link between the equipment but transmitting remote resource to remote resource the originating party user.In the present embodiment, the user terminal of originating party uses the mode of encrypting with summary to handle quoting the relevant information of remote resource, allows voice mail on open network, to transmit with open mode, has guaranteed reliability, fail safe and the opening of authorizing; Further, further guaranteed the fail safe of authorizing through using summary to carry out integrity verification.
The flow chart of the voice mail implementation method that Fig. 5 provides for further embodiment of this invention.In the present embodiment, remote resource obtains the user terminal that equipment comprises voice mail delivery system and debit simultaneously.In the present embodiment, first-selection is done following supposition: the user terminal of supposing originating party need use two remote resources (being first resource and second resource respectively) to generate voice mail, and sends to debit's user terminal.Suppose that first resource is stored on the first resource storage system, second resource is stored on the second resource storage system.And suppose that first resource is authorized to the voice mail delivery system, second resource is authorized to the user terminal to the debit.
In the present embodiment; The user terminal of originating party is not limited to use two kinds of resources to generate voice mail; Can use according to practical application and plant resource arbitrarily; Because all identical, so present embodiment is that example describes with two kinds and the user terminal that licenses to voice mail delivery system and debit respectively only to the processing mode of every kind of resource.In addition; When the user terminal that sends uses multiple resource; Its employed every kind of resource is not limited to be stored on the different resources storage system; Employed various resource can be stored on any resource storage system, and the part resource or all resource also can be stored on the same resource storage system.
In the present embodiment, the user terminal of originating party need use the Voice Mail Service client to generate first voice mail, comprises the resource access authorization message of first resource and second resource in first voice mail respectively.The user terminal of originating party hopes that voice mail delivery system and debit's user terminal obtains first resource and second resource respectively according to the first resource access authorization message in the first sound mail and the second resource access authorization message respectively from the first resource storage system and the second resource storage system, realizes voice mail business.Under normal circumstances, voice mail delivery system and debit's user terminal haves no right to visit first resource and second resource, and present embodiment can address this problem.
As shown in Figure 5, the method for present embodiment specifically comprises:
The user terminal of step 51, originating party generates the first resource access authorization message and the second resource access authorization message respectively according to first resource and second resource.
The concrete process that generates the first resource access authorization message and the second resource access authorization message can repeat no more at this respectively with reference to the description of step 31 and step 41.
The user terminal of step 52, originating party generates first voice mail.
In step 52, mainly comprise the operation of the second quoting resource information that generates first corresponding quoting resource information of first resource and second resource correspondence, its detailed process can repeat no more at this respectively referring to the description of step 32 and step 42.
After the first quoting resource information of generation and the second quoting resource information, the user terminal of originating party is added on the first quoting resource information and the second quoting resource information in first voice mail respectively.
The user terminal of step 53, originating party sends to the voice mail delivery system with first voice mail.
Wherein, the user terminal of originating party can use agreements such as HTTP, IMAP, SMTP and voice mail delivery system to carry out alternately.
In this step, the user terminal of originating party uses agreements such as HTTP, IMAP, SMTP that first voice mail is sent to the voice mail delivery system.
Whether step 54, voice mail delivery system are checked to comprise in first voice mail needs the quoting resource of its processing information.When being checked through when needing the quoting resource of its processing information execution in step 55-step 58; Otherwise, execution in step 59.
This step 54 can be referring to the description of step 34.
In the present embodiment, the voice mail delivery system is the grantee of first resource, so need handle the first corresponding quoting resource information of first resource.
Step 55, voice mail delivery system are handled the first quoting resource information, obtain first resource.
Step 55 can be referring to the detailed description of step 35.
Step 56, voice mail delivery system use first resource that gets access to generate second voice mail.
In the present embodiment; Owing to also comprise the second quoting resource information that second resource is corresponding in first voice mail simultaneously; So the voice mail delivery system needs simultaneously the second quoting resource information to be encapsulated in second voice mail, sends to debit's user terminal in the lump.
Step 57, voice mail delivery system send to second voice mail debit's user terminal.
Step 58, voice mail delivery system are returned the sending state information of first voice mail and execution in step 60 to the user terminal of originating party.
Step 59, voice mail delivery system directly send to first voice mail debit's user terminal, and execution in step 60.
The voice mail that step 60, debit's user terminal receiving voicemail delivery system sends, and whether comprise in the voice mail that receives of inspection and need the quoting resource of its processing information.When being checked through when needing the quoting resource of its processing information execution in step 61; Otherwise, execution in step 62.
Wherein, when forwarding step 60 to by step 58, the voice mail that debit's user terminal receives is second voice mail that carries the second quoting resource information.
When forwarding step 60 to by step 59, first voice mail that the voice mail that debit's user terminal receives is transmitted for the voice mail delivery system.
No matter be first voice mail or second voice mail, the second quoting resource information that the user terminal that all including needs the debit is handled is so debit's user terminal is handled the second quoting resource information.
This step specifically can be referring to the description of step 45.
Step 61, debit's user terminal is handled the second quoting resource information, obtains second resource, and finishes this voice mail business.
Can be referring to the description of step 46.
Step 62, debit's user terminal is directly handled second voice mail, and finishes this voice mail business.
Can be referring to the description of step 47.
In the present embodiment; The user terminal of originating party licenses to remote resource voice mail delivery system and debit's access through using quoting resource information; Allow the user terminal of originating party no longer remote resource to be downloaded to this locality; Improve visual Voice Mail Service and used the ability of Internet resources; Strengthened the flexibility of visual Voice Mail Service, and, reduced the bandwidth resources waste that the transferring voice mail causes to a certain extent owing to obtain the quoting resource information of no longer transmitting remote resource on the link between the equipment but transmitting remote resource to remote resource the originating party user.In the present embodiment, the user terminal of originating party uses the mode of encrypting with summary to handle quoting the relevant information of remote resource, allows voice mail on open network, to transmit with open mode, has guaranteed reliability, fail safe and the opening of authorizing; Further, further guaranteed the fail safe of authorizing through using summary to carry out integrity verification.
The remote resource that Fig. 6 provides for one embodiment of the invention obtains the structural representation of equipment.As shown in Figure 6, the remote resource of present embodiment obtains equipment and comprises: receiver module 71 and acquisition module 72.
Wherein, Receiver module 71; Be used to receive first voice mail; Said first voice mail comprises: the quoting resource information of remote resource, and said quoting resource information comprises resource access authorization message and the address information that is used for the access remote resource, said resource access authorization message comprises: grantee sign, grantee are to the sign of the resource storage system of the sign of the access mode of remote resource, the remote resource that is authorized to and storage remote resource.
Acquisition module 72 is connected with receiver module 71, is used for obtaining remote resource according to quoting resource information.
Each functional module that the present embodiment remote resource obtains equipment can be used for carrying out the flow process of remote resource acquisition methods shown in Figure 2, and its concrete operation principle repeats no more, and sees the description of method embodiment for details.
The remote resource of present embodiment obtains equipment; Match with the user terminal of originating party; The user terminal of originating party obtains device access through using quoting resource information that remote resource is licensed to remote resource; Allow the user terminal of originating party no longer remote resource to be downloaded to this locality, improved the ability that visual Voice Mail Service is used Internet resources, strengthened the flexibility of visual Voice Mail Service; And, reduced the bandwidth resources waste that the transferring voice mail causes to a certain extent owing to obtain the quoting resource information of no longer transmitting remote resource on the link between the equipment but transmitting remote resource to remote resource the originating party user.
The remote resource that Fig. 7 provides for another embodiment of the present invention obtains the structural representation of equipment.Present embodiment realizes that based on embodiment shown in Figure 6 as shown in Figure 7, the acquisition module 72 of present embodiment comprises: judging unit 721, transmitting element 722 and receiving element 723.
Concrete, judging unit 721 is connected with receiver module 71, is used to judge that whether the grantee identifies that to obtain equipment mark identical with remote resource.Transmitting element 722; Be connected with the resource storage system with judging unit 721; Be used in the judged result of judging unit 721 when being; Send resource access request according to quoting resource information to the resource storage system, said resource access request comprises that remote resource obtains equipment mark and resource access authorization message.Receiving element 723 is connected with the resource storage system, is used to receive the resource storage system and obtains the remote resource that equipment mark and resource access authorization message provide according to remote resource.
Further, the remote resource of present embodiment obtains equipment and also comprises: deciphering module 73.
Deciphering module 73; Be used for first voice mail is resolved; Obtain the resource access authorization message and first summary through encrypting; And to carrying out decryption processing through the resource access authorization message and first summary of encrypting; Obtain the resource access authorization message and first summary, said first summary is to generate summary info by the user terminal of originating party according to the resource access authorization message, and uses the private key of the user terminal of originating party that summary info is encrypted to generate and be encapsulated in first voice mail.
In visual Voice Mail Service, the remote resource of present embodiment obtains equipment can be debit's user terminal, and then receiver module 71 specifically is used for receiving first voice mail that the voice mail delivery system of visual Voice Mail Service is transmitted.
In visual Voice Mail Service, the remote resource of present embodiment obtains equipment can also be the voice mail delivery system, and then receiver module 71 specifically is used for receiving first voice mail from the user terminal of the originating party of visual Voice Mail Service.
Further, when remote resource obtained equipment and is the voice mail delivery system, the remote resource of present embodiment obtained equipment and also comprises: generate sending module 74.
Generate sending module 74, be used for, generate second voice mail, and second voice mail is sent to the debit's in the visual Voice Mail Service user terminal according to remote resource.
Each functional module or unit that the remote resource of present embodiment obtains equipment can be used for the corresponding flow process in execution graph 2 or Fig. 3 or Fig. 4 or the method shown in Figure 5, and its concrete operation principle repeats no more, and sees the description of method embodiment for details.
The remote resource of present embodiment obtains equipment and matches with the user terminal of originating party; The user terminal of originating party obtains device access through using quoting resource information that remote resource is licensed to remote resource; Allow the user terminal of originating party no longer remote resource to be downloaded to this locality; Improve visual Voice Mail Service and used the ability of Internet resources; Strengthened the flexibility of visual Voice Mail Service, and, reduced the bandwidth resources waste that the transferring voice mail causes to a certain extent owing to obtain the quoting resource information of no longer transmitting remote resource on the link between the equipment but transmitting remote resource to remote resource the originating party user.In addition; The remote resource of present embodiment obtains equipment and carries out decryption processing through deciphering module; Make the user terminal of originating party can use the mode of encrypting to handle to quoting the relevant information of remote resource with summary; Allow voice mail on open network, to transmit, guaranteed reliability, fail safe and the opening of authorizing with open mode; And, further guaranteed the fail safe of authorizing through using summary to carry out integrity verification.
The structural representation of the user terminal that Fig. 8 provides for one embodiment of the invention.As shown in Figure 8, the user terminal of present embodiment comprises: generation module 81 and sending module 82.
Wherein, Generation module 81; Be used to generate first voice mail; Said first voice mail comprises: the quoting resource information of remote resource, and said quoting resource information comprises resource access authorization message and the address information that is used for the access remote resource, said resource access authorization message comprises: grantee sign, grantee are to the sign of the resource storage system of the sign of the access mode of remote resource, the remote resource that is authorized to and storage remote resource.
Sending module 82 obtains equipment with generation module 81 and remote resource and is connected, and is used for that first voice mail is sent to remote resource and obtains equipment, so that remote resource obtains equipment according to quoting resource information, obtains remote resource.
Each functional module of present embodiment user terminal can be used for carrying out the corresponding flow process that generates and send first voice mail in the remote resource acquisition methods shown in Figure 2, and its concrete operation principle repeats no more, and sees the description of method embodiment for details.
In visual Voice Mail Service; The user terminal of present embodiment can be the user terminal of originating party; Match through obtaining equipment with remote resource; Obtain device access through using quoting resource information that remote resource is licensed to remote resource; Allow the user terminal of originating party no longer remote resource to be downloaded to this locality, improved the ability that visual Voice Mail Service is used Internet resources, strengthened the flexibility of visual Voice Mail Service; And, reduced the bandwidth resources waste that the transferring voice mail causes to a certain extent owing to obtain the quoting resource information of no longer transmitting remote resource on the link between the equipment but transmitting remote resource to remote resource the originating party user.
The structural representation of the subscriber equipment that Fig. 9 provides for another embodiment of the present invention.Present embodiment is based on realization embodiment illustrated in fig. 8, and is as shown in Figure 9, and the generation module 81 of present embodiment comprises: acquiring unit 811, first encapsulation unit 812, second encapsulation unit 813 and adding device 814.
Wherein, acquiring unit 811 is used to obtain the sign of remote resource, the sign of storing the resource storage system of remote resource, grantee's sign and the grantee access mode to remote resource.First encapsulation unit 812; Be connected with acquiring unit 811; Be used for the sign to remote resource, the sign of storing the resource storage system of remote resource, grantee's sign and grantee the access mode of remote resource is carried out encapsulation process, generate the resource access authorization message.Second encapsulation unit 813 is connected with first encapsulation unit 812, is used for the resource access authorization message and is used for access remote resource addresses information being packaged into quoting resource information.Adding device 814 is connected with second encapsulation unit 813, is used for quoting resource information is added on first voice mail.
Further, the generation module 81 of present embodiment also comprises: first ciphering unit 815 and second ciphering unit 816.
First ciphering unit 815; Be connected with first encapsulation unit 812; Be used for second encapsulation unit 813 with the resource access authorization message be used for before access remote resource addresses information is packaged into quoting resource information; Generate summary info according to the resource access authorization message, and use the private key of user terminal that summary info is encrypted, generate first summary.Second ciphering unit 816; Be connected with first ciphering unit 815 with second encapsulation unit 813; Be used for second encapsulation unit 813 with the resource access authorization message be used for before access remote resource addresses information is packaged into quoting resource information; Use grantee's PKI that the resource access authorization message and first summary are encrypted, and the resource access authorization message and first summary that will pass through encryption offer second encapsulation unit 813.
Based on this, second encapsulation unit 813 specifically is used for together being packaged into quoting resource information with making a summary and be used for access remote resource addresses information through the resource access authorization message and first of encrypting.
Above-mentioned each functional unit can be used for the corresponding flow process in execution graph 2 or Fig. 3 or Fig. 4 or the method shown in Figure 5, and its concrete operation principle repeats no more, and sees the description of method embodiment for details.
The user terminal of present embodiment obtains equipment with the remote resource that the embodiment of the invention provides and matches; Obtain device access through using quoting resource information that remote resource is licensed to remote resource; Allow the user terminal of originating party no longer remote resource to be downloaded to this locality; Improve visual Voice Mail Service and used the ability of Internet resources; Strengthened the flexibility of visual Voice Mail Service, and no longer transmitted remote resource on the link between the equipment but the quoting resource information of transmission remote resource, reduced the bandwidth resources waste that the transferring voice mail causes to a certain extent owing to the user terminal at originating party obtains to remote resource.In addition, the user terminal of present embodiment can use the mode of encrypting with summary to handle quoting the relevant information of remote resource, allows voice mail on open network, to transmit with open mode, has guaranteed reliability, fail safe and the opening of authorizing; And, further guaranteed the fail safe of authorizing through using summary to carry out integrity verification.
One embodiment of the invention provides a kind of remote resource to obtain system, and this system comprises that remote resource that the embodiment of the invention provides obtains the user terminal of equipment and originating party.Wherein, the user terminal of transmission is the user terminal that the embodiment of the invention provides.
The remote resource of present embodiment obtains the system that system can be the visual Voice Mail Service of realization shown in Figure 1, and wherein remote resource obtains equipment and can be voice mail delivery system in the system that realizes visual Voice Mail Service and/or debit's user terminal.The operation principle of obtaining system about the remote resource of present embodiment with and the operation principle of each several part see also the description of the foregoing description, repeat no more at this.
The remote resource of present embodiment obtains the flow process that system can be used for carrying out the remote resource acquisition methods that the embodiment of the invention provides; Obtain device access through using quoting resource information that remote resource is licensed to remote resource equally; Allow the user terminal of originating party no longer remote resource to be downloaded to this locality; Improve visual Voice Mail Service and used the ability of Internet resources; Strengthened the flexibility of visual Voice Mail Service; And, reduced the bandwidth resources waste that the transferring voice mail causes to a certain extent owing to obtain the quoting resource information of no longer transmitting remote resource on the link between the equipment but transmitting remote resource to remote resource at the user terminal of originating party.
One of ordinary skill in the art will appreciate that: all or part of step that realizes said method embodiment can be accomplished through the relevant hardware of program command; Aforesaid program can be stored in the computer read/write memory medium; This program the step that comprises said method embodiment when carrying out; And aforesaid storage medium comprises: various media that can be program code stored such as ROM, RAM, magnetic disc or CD.
What should explain at last is: above embodiment is only in order to explaining technical scheme of the present invention, but not to its restriction; Although with reference to previous embodiment the present invention has been carried out detailed explanation, those of ordinary skill in the art is to be understood that: it still can be made amendment to the technical scheme that aforementioned each embodiment put down in writing, and perhaps part technical characterictic wherein is equal to replacement; And these are revised or replacement, do not make the scope of the essence disengaging various embodiments of the present invention technical scheme of relevant art scheme.

Claims (21)

1. a remote resource acquisition methods is characterized in that, comprising:
Remote resource obtains equipment and receives first voice mail; Said first voice mail comprises: the quoting resource information of remote resource; Said quoting resource information comprises resource access authorization message and the address information that is used to visit said remote resource, and said resource access authorization message comprises: grantee sign, grantee are to the sign of the access mode of said remote resource, the said remote resource that is authorized to and store the sign of the resource storage system of said remote resource;
Said remote resource obtains equipment according to said quoting resource information, obtains said remote resource.
2. remote resource acquisition methods according to claim 1 is characterized in that, said remote resource obtains equipment according to said quoting resource information, obtains said remote resource and comprises:
Said remote resource obtains equipment and judges said grantee sign to obtain equipment mark identical with said remote resource;
When judged result when being identical; Said remote resource obtains equipment and sends resource access request according to said quoting resource information to said resource storage system, and said resource access request comprises that said remote resource obtains equipment mark and said resource access authorization message;
Said remote resource obtains equipment and receives said resource storage system and obtain the said remote resource that equipment mark and said resource access authorization message provide according to said remote resource.
3. remote resource acquisition methods according to claim 2 is characterized in that, said remote resource obtains equipment and receives and comprise before first voice mail and generate said first voice mail;
Said first voice mail of said generation comprises:
The user terminal of originating party obtains the sign of said remote resource, the sign of storing the resource storage system of said remote resource, said grantee sign and the said grantee access mode to said remote resource;
The user terminal of said originating party carries out encapsulation process to the sign of said remote resource, the sign of storing the resource storage system of said remote resource, said grantee sign and said grantee to the access mode of said remote resource, generates said resource access authorization message;
The user terminal of said originating party is packaged into said quoting resource information with said resource access authorization message and the address information that is used to visit said remote resource;
The user terminal of said originating party is added on said quoting resource information in said first voice mail.
4. remote resource acquisition methods according to claim 3 is characterized in that, the user terminal of said originating party comprises before said resource access authorization message and the address information that is used to visit said remote resource are packaged into said quoting resource information:
The user terminal of said originating party generates summary info according to said resource access authorization message, and uses the private key of the user terminal of said originating party that said summary info is encrypted, and generates first summary;
The user terminal of said originating party uses said grantee's PKI that said resource access authorization message and said first summary are encrypted.
5. remote resource acquisition methods according to claim 4 is characterized in that, the user terminal of said originating party is packaged into said quoting resource information with said resource access authorization message with the address information that is used to visit said remote resource and comprises:
The address information that the user terminal of said originating party will pass through the resource access authorization message and first summary of encryption and be used to visit said remote resource together is packaged into said quoting resource information.
6. according to claim 4 or 5 described remote resource acquisition methods; It is characterized in that said remote resource obtains equipment and receives said resource storage system according to comprising before the said remote resource that said visitor identifies and said resource access authorization message provides:
Said resource storage system is according to the integrality of the said resource access authorization message of said first Digest Authentication;
When verifying that the result is complete, said resource storage system is obtained the remote resource that sign identified that equipment provides said remote resource according to the access mode of said grantee to said remote resource to said remote resource.
7. remote resource acquisition methods according to claim 6 is characterized in that, comprises before the integrality of said resource storage system according to the said resource access authorization message of said first Digest Authentication:
Said resource storage system judges whether said remote resource obtains equipment mark identical with said grantee's sign;
When judged result when being identical, said resource storage system is carried out the operation according to the integrality of the said resource access authorization message of said first Digest Authentication.
8. according to claim 4 or 5 described remote resource acquisition methods, it is characterized in that said remote resource obtains equipment and judges that whether said grantee sign obtain equipment mark with said remote resource and comprise before identical:
Said remote resource obtains equipment said first voice mail is resolved; Obtain the resource access authorization message and first summary through encrypting; And, obtain said resource access authorization message and said first summary to carrying out decryption processing through the resource access authorization message and first summary of encrypting.
9. according to each described remote resource acquisition methods of claim 1-5, it is characterized in that it is the voice mail delivery system in the visual Voice Mail Service that said remote resource obtains equipment;
Said remote resource obtains equipment and receives first voice mail and comprise:
Said voice mail delivery system receives said first voice mail from the user terminal of originating party;
Said remote resource obtains equipment according to said quoting resource information, obtains said remote resource and comprises afterwards:
Said voice mail delivery system generates second voice mail according to said remote resource, and said second voice mail is sent to debit's user terminal.
10. according to each described remote resource acquisition methods of claim 1-5, it is characterized in that said remote resource obtains the user terminal of equipment for the debit;
Said remote resource obtains equipment and receives first voice mail and comprise:
Said debit's user terminal receives said first voice mail that the voice mail delivery system in the visual Voice Mail Service is transmitted.
11. remote resource acquisition methods according to claim 10 is characterized in that, said first voice mail that said debit's user terminal receives the voice mail delivery system forwarding in the visual Voice Mail Service comprises before:
Said voice mail delivery system receives first voice mail from the user terminal of originating party;
Said voice mail delivery system judges whether said grantee's sign is identical with the sign of said voice mail delivery system;
When judged result when being inequality, said first voice mail is transmitted to said debit's user terminal.
12. a remote resource obtains equipment, it is characterized in that, comprising:
Receiver module; Be used to receive first voice mail; Said first voice mail comprises: the quoting resource information of remote resource; Said quoting resource information comprises resource access authorization message and the address information that is used to visit said remote resource, and said resource access authorization message comprises: grantee sign, grantee are to the sign of the access mode of said remote resource, the said remote resource that is authorized to and store the sign of the resource storage system of said remote resource;
Acquisition module is used for obtaining said remote resource according to said quoting resource information.
13. remote resource according to claim 12 obtains equipment, it is characterized in that, said acquisition module comprises:
Judging unit, to obtain equipment mark identical with said remote resource to be used to judge said grantee sign;
Transmitting element; Be used in the judged result of said judging unit when being; Send resource access request according to said quoting resource information to said resource storage system, said resource access request comprises that said remote resource obtains equipment mark and said resource access authorization message;
Receiving element is used to receive said resource storage system and obtains the said remote resource that equipment mark and said resource access authorization message provide according to said remote resource.
14. remote resource according to claim 13 obtains equipment, it is characterized in that, also comprises:
Deciphering module; Be used for said first voice mail is resolved; Obtain the resource access authorization message and first summary through encrypting; And to carrying out decryption processing through the resource access authorization message and first summary of encrypting; Obtain said resource access authorization message and said first summary, said first summary is to generate summary info by the user terminal of originating party according to said resource access authorization message, and uses the private key of the user terminal of said originating party that said summary info is encrypted to generate and be encapsulated in said first voice mail.
15. obtain equipment, it is characterized in that said remote resource obtains the user terminal that equipment is the debit in the visual Voice Mail Service according to claim 12 or 13 or 14 described remote resources;
Said receiver module specifically is used for receiving said first voice mail that the voice mail delivery system of visual Voice Mail Service is transmitted; Perhaps
It is the voice mail delivery system in the visual Voice Mail Service that said remote resource obtains equipment;
Said receiver module specifically is used for receiving said first voice mail from the user terminal of the originating party of visual Voice Mail Service.
16. remote resource according to claim 15 obtains equipment, it is characterized in that, when said remote resource obtained equipment and is the voice mail delivery system in the visual Voice Mail Service, said remote resource obtained equipment and also comprises:
Generate sending module, be used for generating second voice mail, and said second voice mail is sent to the debit's in the visual Voice Mail Service user terminal according to said remote resource.
17. a user terminal is characterized in that, comprising:
Generation module; Be used to generate first voice mail; Said first voice mail comprises: the quoting resource information of remote resource; Said quoting resource information comprises resource access authorization message and the address information that is used to visit said remote resource, and said resource access authorization message comprises: grantee sign, grantee are to the sign of the access mode of said remote resource, the said remote resource that is authorized to and store the sign of the resource storage system of said remote resource;
Sending module is used for that said first voice mail is sent to remote resource and obtains equipment, so that said remote resource obtains equipment according to said quoting resource information, obtains said remote resource.
18. user terminal according to claim 17 is characterized in that, said generation module comprises:
Acquiring unit is used to obtain the sign of said remote resource, the sign of storing the resource storage system of said remote resource, said grantee sign and the said grantee access mode to said remote resource;
First encapsulation unit; Be used for the sign to said remote resource, the sign of storing the resource storage system of said remote resource, said grantee sign and said grantee the access mode of said remote resource is carried out encapsulation process, generate said resource access authorization message;
Second encapsulation unit is used for said resource access authorization message and the address information that is used to visit said remote resource are packaged into said quoting resource information;
Adding device is used for said quoting resource information is added on said first voice mail.
19. user terminal according to claim 18 is characterized in that, said generation module also comprises:
First ciphering unit; Be used for before said second encapsulation unit is packaged into said quoting resource information with said resource access authorization message and the address information that is used to visit said remote resource; Generate summary info according to said resource access authorization message; And use the private key of said user terminal that said summary info is encrypted, generate first summary;
Second ciphering unit; Be used for before said second encapsulation unit is packaged into said quoting resource information with said resource access authorization message and the address information that is used to visit said remote resource, use said grantee's PKI that said resource access authorization message and said first summary are encrypted.
20. user terminal according to claim 19; It is characterized in that, said second encapsulation unit specifically be used for through the resource access authorization message and first summary encrypted and the address information that is used to visit said remote resource together be packaged into said quoting resource information.
21. a remote resource obtains system, it is characterized in that, comprises that each described remote resource of claim 12-16 obtains equipment and each described user terminal of claim 17-20.
CN201110329566.5A 2011-10-26 2011-10-26 Method, system, device and user terminal for obtaining remote resource Active CN102510431B (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN201110329566.5A CN102510431B (en) 2011-10-26 2011-10-26 Method, system, device and user terminal for obtaining remote resource

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN201110329566.5A CN102510431B (en) 2011-10-26 2011-10-26 Method, system, device and user terminal for obtaining remote resource

Publications (2)

Publication Number Publication Date
CN102510431A true CN102510431A (en) 2012-06-20
CN102510431B CN102510431B (en) 2014-06-25

Family

ID=46222484

Family Applications (1)

Application Number Title Priority Date Filing Date
CN201110329566.5A Active CN102510431B (en) 2011-10-26 2011-10-26 Method, system, device and user terminal for obtaining remote resource

Country Status (1)

Country Link
CN (1) CN102510431B (en)

Cited By (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN104270687A (en) * 2014-10-24 2015-01-07 厦门蓝斯通信股份有限公司 Method and device for encrypting digital interphone
CN109784098A (en) * 2019-01-23 2019-05-21 湖南国科微电子股份有限公司 A kind of encryption device and its data processing method of AI accelerator
CN110290144A (en) * 2019-07-01 2019-09-27 深圳市元征科技股份有限公司 A kind of user right information update method, system, storage medium and electronic equipment

Citations (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US6704394B1 (en) * 1998-03-25 2004-03-09 International Business Machines Corporation System and method for accessing voice mail from a remote server
US20050283813A1 (en) * 2004-06-18 2005-12-22 Starbak Communications, Inc. Systems and methods for recording signals from communication devices as messages and making the messages available for later access by other communication devices
CN1778098A (en) * 2003-03-19 2006-05-24 艾利森电话股份有限公司 A system and method for storing and accessing multimedia messages
CN101083798A (en) * 2007-07-09 2007-12-05 中兴通讯股份有限公司 Method for realizing multimedia speech SMS service
CN101184008A (en) * 2007-12-14 2008-05-21 北京中星微电子有限公司 Remote information access method and device

Patent Citations (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US6704394B1 (en) * 1998-03-25 2004-03-09 International Business Machines Corporation System and method for accessing voice mail from a remote server
CN1778098A (en) * 2003-03-19 2006-05-24 艾利森电话股份有限公司 A system and method for storing and accessing multimedia messages
US20050283813A1 (en) * 2004-06-18 2005-12-22 Starbak Communications, Inc. Systems and methods for recording signals from communication devices as messages and making the messages available for later access by other communication devices
CN101083798A (en) * 2007-07-09 2007-12-05 中兴通讯股份有限公司 Method for realizing multimedia speech SMS service
CN101184008A (en) * 2007-12-14 2008-05-21 北京中星微电子有限公司 Remote information access method and device

Cited By (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN104270687A (en) * 2014-10-24 2015-01-07 厦门蓝斯通信股份有限公司 Method and device for encrypting digital interphone
CN109784098A (en) * 2019-01-23 2019-05-21 湖南国科微电子股份有限公司 A kind of encryption device and its data processing method of AI accelerator
CN109784098B (en) * 2019-01-23 2023-01-17 湖南国科微电子股份有限公司 Encryption device of AI accelerator and data processing method thereof
CN110290144A (en) * 2019-07-01 2019-09-27 深圳市元征科技股份有限公司 A kind of user right information update method, system, storage medium and electronic equipment
CN110290144B (en) * 2019-07-01 2022-02-25 深圳市元征科技股份有限公司 User authority information updating method, system, storage medium and electronic equipment

Also Published As

Publication number Publication date
CN102510431B (en) 2014-06-25

Similar Documents

Publication Publication Date Title
KR101508360B1 (en) Apparatus and method for transmitting data, and recording medium storing program for executing method of the same in computer
CN111292041B (en) Electronic contract generation method, device, equipment and storage medium
CN105025019B (en) A kind of data safety sharing method
US20120210134A1 (en) Method of securing communication
US20150156220A1 (en) A system and method for securing the data and information transmitted as email attachments
US20070172066A1 (en) Message security
CN102739708A (en) System and method for accessing third party application based on cloud platform
WO2013184441A1 (en) Confidential message exchange using benign, context-aware cover message generation
KR20130129429A (en) Identity management method and device for mobile terminal
JP2002024147A (en) System and method for secure mail proxy and recording medium
JP6152423B2 (en) E-mail receipt record certification method
JP2008187280A (en) Electronic mail system, electronic mail relay device, electronic mail relay method, and electronic mail relay program
CN101305542B (en) Method for downloading digital certificate and cryptographic key
CN107370595A (en) One kind is based on fine-grained ciphertext access control method
KR100848540B1 (en) Apparatus and method for managing right of contents in mobile communication system
CN104365127B (en) Method for following the trail of mobile device in remote display unit
JP2003298658A (en) Mail contents confirming equipment and its method
CN101651714A (en) Downloading method and related system and equipment
US9432328B2 (en) Method for the certification of electronic mail delivery
US20230262034A1 (en) Method of providing end to end encryption with auditability
CN104200154A (en) Identity based installation package signing method and identity based installation package signing device
WO2010090252A1 (en) Account issuance system, account server, service server, and account issuance method
CN109039997A (en) Key preparation method, apparatus and system
CN108846671B (en) Online secure transaction method and system based on block chain
CN102510431B (en) Method, system, device and user terminal for obtaining remote resource

Legal Events

Date Code Title Description
C06 Publication
PB01 Publication
C10 Entry into substantive examination
SE01 Entry into force of request for substantive examination
C14 Grant of patent or utility model
GR01 Patent grant