行业短信URL安全管理方法研究

Research on Security Management Method of Industry SMS URL

对短信链接安全管理方法进行研究,提供短信小程序安全管理方法,在事前提供短信小程序标准化域名,对行业短信中的URL进行统一的iframe封装,并在行业客户接入时为其分配中国移动SIM盾数字证书,确保接入的在线实名。其次设计短信小程序模板申请审核流程,行业客户进行下发操作时使用SIM盾确认,核实操作者信息。最后用户点击短信小程序链接,可在底部菜单栏查看行业客户的企业证书信息,并设置投诉入口,如遇可疑内容立即封堵。

This article researches the method of SMS link security management,provides SMS applet security management method.At first,provides standardized domain name of SMS applet,and encapsulates the URL in SMS with a unified iframe.When industry customers access,it assigns SIM shield digital certificate of China Mobile to ensure the online real name for access.Secondly,set up a SMS applet template application and review process,industry customers use SIM shield to confirm when it needs to verify operator information.Finally,when user clicks the link of SMS applet,he can view the enterprise certificate information in the bottom menu,and set up a complaint entrance,in case of any suspicious content,block it immediately.