CN105554001B - Encryption-based communication method and system - Google Patents

Abstract

The embodiment of the invention provides a communication method and a system based on encryption, wherein the method comprises the following steps: when receiving a service operation instruction, a client determines service data; encrypting the service data by adopting a preset encryption mode, wherein the encryption mode has an encryption identifier; embedding the service data and the encrypted identifier into a service request; and sending the service request to the server through a uniform interface for service processing. The embodiment of the invention reduces the risk of analyzing and cracking the interface pertinently and increases the safety of communication.

Description

An encryption-based communication method and system

technical field

The present invention relates to the technical field of communication, in particular to an encryption-based communication method and an encryption-based communication system.

Background technique

With the development of the Internet, many applications need to connect to the network and perform data processing with the server. For example, the mailbox client needs to load emails from the mailbox server, the instant messaging client needs to load the session message from the instant messaging server, and the browser needs to load emails from the instant messaging server. The web server loads the web page, and so on.

For some important business scenarios, the communication between the client and the server is generally kept secret from the third party, that is, the communication content is encrypted to a certain extent.

The traditional methods include adding a check code, verifying whether the request is legal, or encrypting parameters, and encrypting and decrypting parameters with the public key and private key, and so on.

However, for a certain service request, it is still necessary to bring certain path information, so that criminals will maliciously capture packets, analyze which interfaces are more important, and then analyze and crack them in a targeted manner, which is less secure.

SUMMARY OF THE INVENTION

In view of the above problems, the present invention is proposed to provide an encryption-based communication method and a corresponding encryption-based communication system that overcome the above problems or at least partially solve the above problems.

According to one aspect of the present invention, an encryption-based communication method is provided, comprising:

When the client receives the business operation instruction, it determines the business data;

Encrypt the business data by using a preset encryption method, and the encryption method has an encryption identifier;

Embedding the service data and the encrypted identification into the service request;

The service request is sent to the server through a unified interface for service processing.

Optionally, the step of encrypting the service data by using a preset encryption method includes:

calling the first dynamic link library to which the preset encryption method belongs;

The service data is encrypted in the encryption manner by using the first dynamic link library.

Optionally, also include:

Compress the service data by using a preset compression mode, and the compression mode has a compression identifier;

The compressed identifier is embedded in the service request.

Optionally, the step of compressing the service data by using a preset compression method includes:

calling the second dynamic link library to which the preset compression mode belongs;

The service data is compressed in the compression manner by using the second dynamic link library.

Optionally, also include:

The server reads the service data and the encrypted identifier from the service request;

Decrypt the service data by using the encryption method corresponding to the encryption identifier;

Business processing is performed according to the business data.

Optionally, the step of decrypting the service data by using the encryption method corresponding to the encryption identifier includes:

calling the first dynamic link library to which the encryption method corresponding to the encryption identifier belongs;

The service data is decrypted in the encryption manner by using the first dynamic link library.

Optionally, also include:

The server reads the compression identifier from the service request;

The service data is decompressed by using the compression mode corresponding to the compression identifier.

Optionally, the step of decompressing the service data by using the compression mode corresponding to the compression identifier includes:

calling the second dynamic link library to which the compression method corresponding to the compression identifier belongs;

The service data is decompressed in the compression manner by using the second dynamic link library.

Optionally, the service data includes service paths and request parameters;

The step of performing business processing according to the business data includes:

The request parameter is forwarded to the service component for service processing according to the service path.

Optionally, also include:

The server obtains the business result of business processing;

Encrypt the business result by using an encryption method corresponding to the encryption identifier;

The business result is returned to the client through the unified interface.

Optionally, the step of encrypting the service data by using an encryption method corresponding to the encryption identifier includes:

calling the first dynamic link library to which the encryption method corresponding to the encryption identifier belongs;

The service data is encrypted in the encryption manner by using the first dynamic link library.

Optionally, before the step of returning the service data to the client, the method further includes:

The service data is compressed in a compression manner corresponding to the compression identifier.

Optionally, the step of compressing the service data by using the compression mode corresponding to the compression identifier includes:

calling the second dynamic link library to which the compression method corresponding to the compression identifier belongs;

The service data is compressed in the compression manner by using the second dynamic link library.

Optionally, also include:

The client decrypts the service result according to the encryption method.

Optionally, the step of decrypting the service result according to the encryption method in the previous communication includes:

calling the first dynamic link library to which the encryption method belongs;

The business result is decrypted in the encryption manner by using the first dynamic link library.

Optionally, also include:

The service result is decompressed according to the compression method.

Optionally, the step of decompressing the service result according to the compression method includes:

calling the second dynamic link library to which the compression mode belongs;

The service data is decompressed in the compression manner by using the second dynamic link library.

According to another aspect of the present invention, an encryption-based communication system is provided, the system includes a client, wherein the client includes:

a business data determination module, adapted to determine business data when receiving a business operation instruction;

a first encryption module, adapted to encrypt the service data by using a preset encryption method, and the encryption method has an encryption identifier;

a first data embedding module, adapted to embed the service data and the encrypted identifier into a service request;

The service request sending module is adapted to send the service request to the server through a unified interface for service processing.

Optionally, the first encryption module is further adapted to:

calling the first dynamic link library to which the preset encryption method belongs;

The service data is encrypted in the encryption manner by using the first dynamic link library.

Optionally, the client further includes:

a first compression module, adapted to compress the service data by using a preset compression mode, the compression mode having a compression identifier;

The second data embedding module is adapted to embed the compressed identifier into the service request.

Optionally, the first compression module is further adapted to:

calling the second dynamic link library to which the preset compression mode belongs;

The service data is compressed in the compression manner by using the second dynamic link library.

Optionally, the system further includes a server, wherein the server includes:

a first data reading module, adapted to read service data and encrypted identification from the service request;

a first decryption module, adapted to decrypt the service data by using an encryption method corresponding to the encryption identifier;

The business processing module is adapted to perform business processing according to the business data.

Optionally, the first decryption module is further adapted to:

calling the first dynamic link library to which the encryption method corresponding to the encryption identifier belongs;

The service data is decrypted in the encryption manner by using the first dynamic link library.

Optionally, the server further includes:

a second data reading module, adapted for the server to read the compression identifier from the service request;

The first decompression module is adapted to decompress the service data by using the compression mode corresponding to the compression identifier.

Optionally, the first decompression module is further adapted to:

calling the second dynamic link library to which the compression method corresponding to the compression identifier belongs;

The service data is decompressed in the compression manner by using the second dynamic link library.

Optionally, the service data includes service paths and request parameters;

The business processing module is also suitable for:

The request parameter is forwarded to the service component for service processing according to the service path.

Optionally, the server further includes:

A business result acquisition module, suitable for acquiring business results of business processing;

a second encryption module, adapted to encrypt the business result by using an encryption method corresponding to the encryption identifier;

The service result sending module is adapted to return the service result to the client through a unified interface.

Optionally, the second encryption module is further adapted to:

calling the first dynamic link library to which the encryption method corresponding to the encryption identifier belongs;

The service data is encrypted in the encryption manner by using the first dynamic link library.

Optionally, the server further includes:

The second compression module is adapted to compress the service data in a compression manner corresponding to the compression identifier.

Optionally, the second compression module is further adapted to:

calling the second dynamic link library to which the compression method corresponding to the compression identifier belongs;

The service data is compressed in the compression manner by using the second dynamic link library.

Optionally, the client further includes:

The second decryption module is adapted to decrypt the service result according to the encryption method.

Optionally, the second decryption module is further adapted to:

calling the first dynamic link library to which the encryption method belongs;

The business result is decrypted in the encryption manner by using the first dynamic link library.

Optionally, the client further includes:

The second decompression module is adapted to decompress the service result according to the compression method.

Optionally, the second decompression module is further adapted to:

calling the second dynamic link library to which the compression mode belongs;

The service data is decompressed in the compression manner by using the second dynamic link library.

The server in the embodiment of the present invention communicates with the client through a statistical interface, that is, different services receive and send data through an interface, which increases the complexity of communication data. Externally, what can be intercepted is an interface and A pile of encrypted data and identification, no more data for in-depth analysis, reduces the risk of targeted analysis and cracking of the interface, and increases the security of communication.

The embodiment of the present invention implements the encryption method and the compression method by means of a static link library. Since the static link library is irreversible, and the static link library is independent of the main program, it is easy to update, thereby greatly improving the security of communication .

The above description is only an overview of the technical solutions of the present invention, in order to be able to understand the technical means of the present invention more clearly, it can be implemented according to the content of the description, and in order to make the above and other purposes, features and advantages of the present invention more obvious and easy to understand , the following specific embodiments of the present invention are given.

Description of drawings

Various other advantages and benefits will become apparent to those of ordinary skill in the art upon reading the following detailed description of the preferred embodiments. The drawings are for the purpose of illustrating preferred embodiments only and are not to be considered limiting of the invention. Also, the same components are denoted by the same reference numerals throughout the drawings. In the attached image:

FIG. 1 shows a flow chart of steps of Embodiment 1 of an encryption-based communication method according to an embodiment of the present invention;

FIG. 2 shows a flow chart of steps of Embodiment 2 of an encryption-based communication method according to an embodiment of the present invention;

FIG. 3 shows a schematic diagram of the architecture of a communication component according to an embodiment of the present invention;

FIG. 4 shows a flow chart of steps of Embodiment 3 of an encryption-based communication method according to an embodiment of the present invention;

5 shows a structural block diagram of Embodiment 1 of an encryption-based communication system according to an embodiment of the present invention;

FIG. 6 shows a structural block diagram of Embodiment 2 of an encryption-based communication system according to an embodiment of the present invention; and

FIG. 7 shows a structural block diagram of Embodiment 3 of an encryption-based communication system according to an embodiment of the present invention.

Detailed ways

Exemplary embodiments of the present disclosure will be described in more detail below with reference to the accompanying drawings. While exemplary embodiments of the present disclosure are shown in the drawings, it should be understood that the present disclosure may be embodied in various forms and should not be limited by the embodiments set forth herein. Rather, these embodiments are provided so that the present disclosure will be more thoroughly understood, and will fully convey the scope of the present disclosure to those skilled in the art.

Referring to FIG. 1, it shows a flowchart of steps of Embodiment 1 of an encryption-based communication method according to an embodiment of the present invention, which may specifically include the following steps:

Step 101, the client determines service data when receiving the service operation instruction;

Step 102, using a preset encryption method to encrypt the service data, and the encryption method has an encryption identifier;

Step 103, embedding the service data and the encrypted identification in the service request;

Step 104: Send the service request to the server for service processing through a unified interface.

The server in the embodiment of the present invention communicates with the client through a statistical interface, that is, different services receive and send data through an interface, which increases the complexity of communication data. Externally, what can be intercepted is an interface and A pile of encrypted data and identification, no more data for in-depth analysis, reduces the risk of targeted analysis and cracking of the interface, and increases the security of communication.

Referring to FIG. 2, it shows a flowchart of steps of Embodiment 2 of an encryption-based communication method according to an embodiment of the present invention, which may specifically include the following steps:

Step 201, the client determines the service data when receiving the service operation instruction;

It should be noted that the embodiments of the present invention can be applied to various mobile devices, for example, mobile phones, tablet computers, personal digital assistants, smart wearable devices (such as smart bracelets, smart glasses, smart watches, etc.) and the like.

It can also be applied to various fixed devices, for example, personal computers, smart TVs, smart home appliances (such as smart rice cookers, smart air conditioners, etc.), etc., which are not limited in this embodiment of the present invention.

The operating systems of these mobile devices and fixed devices can include Android (Android), IOS, WindowsPhone, Windows, Linux, etc., which can be preset with system applications, or can be installed with third-party applications, which can communicate with the server. In other words, the system application and the third-party application can be called the client.

In practical applications, users can trigger business processing through operations on the client side.

For example, if the user requests to log in to the instant messaging tool by entering an account number and password, it is equivalent to receiving a business operation instruction, and the account number and password are one of the business data.

For another example, if the user inputs an account number and a password to request a recharge in the game application, it is equivalent to receiving a business operation instruction, and the account number, password, and recharge amount are one of the business data.

Step 202, using a preset encryption method to encrypt the service data;

Applying the embodiment of the present invention, as shown in FIG. 3 , a set of identical communication components can be jointly deployed in the server and the client, including a modem for encrypting/decrypting, compressing/decompressing the communication data, etc., N( N is a positive integer) encryption modes, and M (M is a positive integer) compression modes, where N and M may be the same or different, which is not limited in this embodiment of the present invention.

The communication component can be maintained by the server, and the encryption method and compression method agreed in the communication component can be realized by the server, and are distributed to the client through regular update or irregular update.

In order to increase security, the modems deployed on the client and server can be implemented in a static link library, and the encryption and compression methods can be implemented in a static link library, that is, the communication components form a link library group.

Since the code of the static link library is irreversible, the security is improved. Even if the method of calling a static link library is detected by a malicious user, the detection cost is greatly increased due to the need to clarify the processing relationship of multiple static link libraries.

In addition, since the static link library is independent of the main program, it is easy to update. By regularly or irregularly updating the encryption rules and compression rules, it can increase the cost for malicious users to crack the communication protocol, thereby increasing the security of communication.

It should be noted that the static link library is a development structure, which is characterized in that the logic code is packaged into a binary file. Main logic call.

Of course, in addition to the encryption mode and the compression mode, other communication modes may be set according to actual conditions when implementing the embodiments of the present invention, for example, adding a confusion mode for communication data, etc., which are not limited in the embodiments of the present invention. In addition, in addition to the above communication modes, those skilled in the art may also adopt other communication modes according to actual needs, which are not limited in this embodiment of the present invention.

In a specific implementation, the modem of the client can call the first dynamic link library to which the preset encryption method belongs, and use the encryption method to encrypt the service data through the first dynamic link library.

The encryption method selected by the client may be the encryption method with the highest strength supported by the client.

In addition, the encryption method has an encryption identifier, that is, information that identifies the encryption method, and may further be information that identifies the first dynamic link library.

Step 203, compressing the service data by using a preset compression mode;

In a specific implementation, the modem of the client can call the second dynamic link library to which the preset compression mode belongs, and use the compression mode to compress the service data through the second dynamic link library.

The compression mode selected by the client may be the compression mode with the highest intensity supported by the client.

In addition, the compression mode has a compression identifier, that is, information that identifies the compression mode, and may further be information that identifies the second dynamic link library.

It should be noted that, the client may perform encryption first and then perform compression, or may perform compression first and then perform encryption, which is not limited in this embodiment of the present invention.

Step 204, embedding the service data, the encrypted identifier and the compressed identifier into the service request;

In this embodiment of the present invention, the service data may be sent to the server in a post manner.

There is only one data parameter of post: param, which contains all business data.

In addition, the encrypted identification and the compressed identification can be sent to the server in a get manner.

The encoding method of encrypted identification and compressed identification can be transmitted in clear text, for example, /? c=123&z=325, wherein the ID of the encryption method is 123, and the ID of the compression method is 325.

Step 205, sending the service request to the server for service processing through a unified interface;

In the specific implementation, the server can provide a unified interface for unified communication with the client, that is, through the unified interface, the service requests of different service types sent by the client are uniformly received, and different services are sent to the client through the unified interface. type of response message.

The so-called unified, that is, in addition to this interface, there is no other interface to communicate with the client.

In addition, the communication between the client and the server may use the HTTP (Hyper Text Transfer Protocol, Hyper Text Transfer Protocol) protocol, or may use the HTTPS (Hyper Text Transfer Protocol Secure, Hyper Text Transfer Protocol Secure) protocol, etc., the embodiment of the present invention This is not restricted.

Step 206, the server reads service data, encrypted identification and compressed identification from the service request;

If the server receives the service request sent by the client, it can read the service data, the encryption identifier and the compression identifier from the service request.

Step 207, decrypt the service data by using the encryption method corresponding to the encryption identifier;

In a specific implementation, the modem of the server can call the first dynamic link library to which the encryption method corresponding to the encryption identifier belongs, and use the encryption method to decrypt the service data through the first dynamic link library.

Step 208, decompress the service data by using the compression mode corresponding to the compression identifier;

In a specific implementation, the modem of the server may call the second dynamic link library to which the compression mode corresponding to the compression identifier belongs, and use the compression mode to decompress the service data through the second dynamic link library.

It should be noted that if the client encrypts and then compresses, the server can first decompress and then decrypt. If the client compresses and then encrypts, the server can first decrypt and then decompress. The embodiments of the invention do not limit this.

Step 209, perform service processing according to the service data.

In practical applications, the service data may include service paths and request parameters, and the server may forward the request parameters to the service components for service processing, such as login, payment, and the like according to the forwarding service path.

The embodiment of the present invention implements the encryption method and the compression method by means of a static link library. Since the static link library is irreversible, and the static link library is independent of the main program, it is easy to update, thereby greatly improving the security of communication .

Referring to FIG. 4 , a flowchart of steps of Embodiment 3 of an encryption-based communication method according to an embodiment of the present invention is shown, which may specifically include the following steps:

Step 401, the server obtains the business result of business processing;

It should be noted that the embodiments of the present invention may be applied in a server, for example, an application server, a web server, and the like.

The server can be connected to various mobile devices, for example, mobile phones, tablet computers, personal digital assistants, smart wearable devices (such as smart bracelets, smart glasses, smart watches, etc.) and so on.

It can also be connected to various fixed devices, for example, personal computers, smart TVs, smart home appliances (such as smart rice cookers, smart air conditioners, etc.), etc., which are not limited in this embodiment of the present invention.

The operating systems of these mobile devices and fixed devices can include Android (Android), IOS, WindowsPhone, Windows, Linux, etc., which can be preset with system applications, or can be installed with third-party applications, which can communicate with the server. In other words, the system application and the third-party application can be called the client.

In practical applications, the server may obtain the business result of the business processing and send it to the client. The business processing may be initiated by the server or in response to a client's business request, which is not limited in this embodiment of the present invention.

For example, when a user enters an account and password to request to log in to the instant messaging tool, the server can verify the account and password, and the verification result is the business result.

For another example, when a major news message appears, the server may actively push the news message to the instant messaging client, where the news message is the business result.

Step 402, encrypting the business result by using an encryption method corresponding to the encryption identifier;

Applying the embodiment of the present invention, as shown in FIG. 3 , a set of identical communication components can be jointly deployed in the server and the client, including a modem for encrypting/decrypting, compressing/decompressing the communication data, etc., N( N is a positive integer) encryption modes, and M (M is a positive integer) compression modes, where N and M may be the same or different, which is not limited in this embodiment of the present invention.

The communication component can be maintained by the server, and the encryption method and compression method agreed in the communication component can be realized by the server, and are distributed to the client through regular update or irregular update.

In order to increase security, the modems deployed on the client and server can be implemented in a static link library, and the encryption and compression methods can be implemented in a static link library, that is, the communication components form a link library group.

Since the code of the static link library is irreversible, the security is improved. Even if the method of calling a static link library is detected by a malicious user, the detection cost is greatly increased due to the need to clarify the processing relationship of multiple static link libraries.

In addition, since the static link library is independent of the main program, it is easy to update. By regularly or irregularly updating the encryption rules and compression rules, it can increase the cost for malicious users to crack the communication protocol, thereby increasing the security of communication.

It should be noted that the static link library is a development structure, which is characterized in that the logic code is packaged into a binary file. Main logic call.

Of course, in addition to the encryption mode and the compression mode, other communication modes may be set according to actual conditions when implementing the embodiments of the present invention, for example, adding a confusion mode for communication data, etc., which are not limited in the embodiments of the present invention. In addition, in addition to the above communication modes, those skilled in the art may also adopt other communication modes according to actual needs, which are not limited in this embodiment of the present invention.

In a specific implementation, the modem of the server may call the first dynamic link library to which the encryption method corresponding to the encryption identifier belongs, and use the encryption method to encrypt the service data through the first dynamic link library.

If the client initiates a service request first, and the encryption method is agreed in the service request, the encryption method selected by the server may be the same as the encryption method agreed in the service request, or may be different from the encryption method agreed in the service request. This embodiment of the present invention does not limit this.

If the server actively pushes the service results, the encryption method selected by the server can be the default encryption method, which can be selected based on the support rate and strength of the client, that is, an encryption method with a higher client support rate and higher strength is selected.

In addition, the encryption method has an encryption identifier, that is, information that identifies the encryption method, and may further be information that identifies the first dynamic link library.

Step 403, compressing the service data by using a compression method corresponding to the compression identifier;

In a specific implementation, the modem of the server may call the second dynamic link library to which the compression method corresponding to the compression identifier belongs, and use the compression method to compress the service data through the second dynamic link library.

If the client initiates a service request first, and the compression method is agreed in the service request, the compression method selected by the server may be the same as the compression method agreed in the service request, or may be different from the compression method agreed in the service request. This embodiment of the present invention does not limit this.

If the server actively pushes the service results, the compression method selected by the server can be the default compression method, which can be selected based on the support rate and strength of the client, that is, a compression method with a higher client support rate and higher strength is selected.

In addition, the compression mode has a compression identifier, that is, information that identifies the compression mode, and may further be information that identifies the second dynamic link library.

It should be noted that the server may perform encryption first and then perform compression, or may perform compression first and then perform encryption, which is not limited in this embodiment of the present invention.

Step 404, returning the business result to the client through a unified interface;

In the specific implementation, the server can provide a unified interface for unified communication with the client, that is, through the unified interface, the service requests of different service types sent by the client are uniformly received, and different services are sent to the client through the unified interface. type of response message.

The so-called unified, that is, in addition to this interface, there is no other interface to communicate with the client.

In addition, the communication between the client and the server may use the HTTP (Hyper Text Transfer Protocol, Hyper Text Transfer Protocol) protocol, or may use the HTTPS (Hyper Text Transfer Protocol Secure, Hyper Text Transfer Protocol Secure) protocol, etc., the embodiment of the present invention This is not restricted.

It should be noted that if the client initiates a service request first, the encryption method and compression method are specified in the service request, and the encryption method and compression method selected by the server are the same as those agreed in the service request. Then, the encrypted identification and compression identification may not be returned to the client, otherwise, the encrypted identification and the compressed identification will be returned to the client with the business result.

Step 405, the client decrypts the service result according to the encryption method;

In a specific implementation, the modem of the server can call the first dynamic link library to which the encryption method belongs, and use the encryption method to decrypt the service result through the first dynamic link library.

If the server does not return an encrypted identifier in an encrypted manner, it can search for the encrypted identifier agreed upon when the service request was initiated earlier, and call the first dynamic link library to which the encrypted identifier belongs.

If the server returns an encrypted identifier in an encrypted manner, the first dynamic link library to which the encrypted identifier belongs can be directly called.

Step 406: Decompress the service result according to the compression method.

In a specific implementation, the modem of the server can call the second dynamic link library to which the compression mode belongs, and use the compression mode to decompress the service data through the second dynamic link library.

If the server does not return the compression identifier in the compression mode, the server may search for the compression identifier agreed upon when the service request was initiated first, and call the second dynamic link library to which the compression identifier belongs.

If the server returns the compression identifier of the compression mode, the second dynamic link library to which the compression identifier belongs can be directly called.

It should be noted that if the server encrypts and then compresses, the client can first decompress and then decrypt. If the server compresses and then encrypts, the client can first decrypt and then decompress. The embodiments of the invention do not limit this.

The client can further process the business result obtained after decryption and decompression.

For example, a user enters an account number and a password to request to log in to the instant messaging tool, and if the server passes the verification, data such as groups and friends can be loaded in the instant messaging tool.

For another example, when a major news message appears, the server may actively push the news message to the instant messaging client, and the client may generate a pop-up window and load the news message in the pop-up window.

The embodiment of the present invention implements the encryption method and the compression method by means of a static link library. Since the static link library is irreversible, and the static link library is independent of the main program, it is easy to update, thereby greatly improving the security of communication .

In order for those skilled in the art to better understand the embodiments of the present invention, the following describes the communication method of the unified interface in the embodiments of the present invention through specific communication examples.

1. The client initiates a business request to obtain homepage data;

The request address is http://next.gamebox.***.cn/api/intface, and "***" is the domain name;

Use post to deliver business data:

Among them, the business path is:

7/xgamebox/dashboard;

The request parameters are:

m1=ed571bf7489ff8d7603c1e3556434322&m2=ed571bf7489ff8d7603c1e3556434322&page=1&ch=100100&v=41301&bir=&nt=1&curqid=&jdata=14472 96790

After calling the first encrypted dynamic link library and the second compressed dynamic link library to encrypt the business path and request parameters (that is, the encryption identifier is 1) and compressed (that is, the compression identifier is 2), a set of business data is obtained:

a8tTcdNRZz％2F0tnOiHkdJGkAH62QoR47TdadIeXgS8ut1UF％2FUhSaT7sHLh2WF8xYTMx6NrBtsFp％2BJc6xdh6SuJ5d9NLgPsGGEvD5RIvhwBdFC ApJEB2hiw2oCtVZIWtKjwevS8Gf7O4c9ZDktQZPSCAmbZM03ULR0zByZq9 9XXZE％3D

Take the business data as the parameters of the post, and pass the encryption ID 1 and compression ID 2 to the server.

2. After receiving the service request, the server reads the encryption ID 1, the compression ID 2 and the service data;

Call the first encrypted dynamic link library and the second compressed dynamic link library to decrypt and decompress the business data, and get the business path:

7/xgamebox/dashboard;

The request parameters are:

m1=ed571bf7489ff8d7603c1e3556434322&m2=ed571bf7489ff8d7603c1e3556434322&page=1&ch=100100&v=41301&bir=&nt=1&curqid=&jdata=14472 96790

The request parameters are sent to the business component where the business path is located, and the homepage data (that is, the business result) is searched for (ie, business processing).

3. After the server obtains the homepage data, it calls the first encrypted dynamic link library and the second compressed dynamic link library to encrypt and compress the homepage data, and return it to the client.

4. After the client receives the business results, it can call the first encrypted dynamic link library and the second compressed dynamic link library to decrypt and decompress the business results, and load the homepage data on the page.

For the method embodiments, for the sake of simple description, they are all expressed as a series of action combinations, but those skilled in the art should know that the embodiments of the present invention are not limited by the described sequence of actions, because according to the embodiments of the present invention , certain steps may be performed in other orders or simultaneously. Secondly, those skilled in the art should also know that the embodiments described in the specification are all preferred embodiments, and the actions involved are not necessarily required by the embodiments of the present invention.

Referring to FIG. 5, it shows a structural block diagram of Embodiment 1 of an encryption-based communication system according to an embodiment of the present invention. The system includes a client, wherein the client may specifically include the following modules:

The business data determination module 501 is adapted to determine business data when receiving a business operation instruction;

The first encryption module 502 is adapted to encrypt the service data by using a preset encryption method, and the encryption method has an encryption identifier;

a first data embedding module 503, adapted to embed the service data and the encrypted identifier into a service request;

The service request sending module 504 is adapted to send the service request to the server through a unified interface for service processing.

Referring to FIG. 6, it shows a structural block diagram of Embodiment 2 of an encryption-based communication system according to an embodiment of the present invention, the system includes a client 610 and a server 620;

The client 610 may specifically include the following modules:

The business data determination module 611 is adapted to determine the business data when receiving the business operation instruction;

The first encryption module 612 is adapted to encrypt the service data by using a preset encryption method, and the encryption method has an encryption identifier;

The first compression module 613 is adapted to compress the service data by using a preset compression mode, and the compression mode has a compression identifier;

a first data embedding module 614, adapted to embed the service data and the encrypted identifier into a service request;

The second data embedding module 615 is adapted to embed the compressed identifier into the service request.

The service request sending module 616 is adapted to send the service request to the server 620 through a unified interface for service processing.

The server 620 may specifically include the following modules:

a first data reading module 621, adapted to read service data and encrypted identifiers from the service request;

The second data reading module 622 is adapted for the server to read the compression identifier from the service request;

The first decryption module 623 is adapted to decrypt the service data by using the encryption method corresponding to the encryption identifier;

a first decompression module 624, adapted to decompress the service data by using a compression mode corresponding to the compression identifier;

The business processing module 625 is adapted to perform business processing according to the business data.

In an optional embodiment of the present invention, the first encryption module 612 may also be adapted to:

calling the first dynamic link library to which the preset encryption method belongs;

The service data is encrypted in the encryption manner by using the first dynamic link library.

In an optional embodiment of the present invention, the first compression module 613 may also be adapted to:

calling the second dynamic link library to which the preset compression mode belongs;

The service data is compressed in the compression manner by using the second dynamic link library.

In an optional embodiment of the present invention, the first decryption module 623 may also be adapted to:

calling the first dynamic link library to which the encryption method corresponding to the encryption identifier belongs;

The service data is decrypted in the encryption manner by using the first dynamic link library.

In an optional embodiment of the present invention, the first decompression module 624 is further adapted to:

calling the second dynamic link library to which the compression method corresponding to the compression identifier belongs;

The service data is decompressed in the compression manner by using the second dynamic link library.

In an optional embodiment of the present invention, the service data may include service paths and request parameters;

The service processing module 625 may also be adapted to:

The request parameter is forwarded to the service component for service processing according to the service path.

Referring to FIG. 7, it shows a structural block diagram of Embodiment 3 of an encryption-based communication system according to an embodiment of the present invention, the system includes a server 710 and a client 720;

The server 710 may specifically include the following modules:

A business result obtaining module 711, adapted to obtain business results of business processing;

The second encryption module 712 is adapted to encrypt the business result by using an encryption method corresponding to the encryption identifier;

The second compression module 713 is adapted to compress the service data by using a compression method corresponding to the compression identifier;

The service result sending module 714 is adapted to return the service result to the client 720 through a unified interface.

The client 720 may specifically include the following modules:

A second decryption module 721, adapted to decrypt the service result according to the encryption method;

The second decompression module 722 is adapted to decompress the service result according to the compression method.

In an optional embodiment of the present invention, the second encryption module 712 may also be adapted to:

calling the first dynamic link library to which the encryption method corresponding to the encryption identifier belongs;

The service data is encrypted in the encryption manner by using the first dynamic link library.

In an optional embodiment of the present invention, the second compression module 713 may also be adapted to:

calling the second dynamic link library to which the compression method corresponding to the compression identifier belongs;

The service data is compressed in the compression manner by using the second dynamic link library.

In an optional embodiment of the present invention, the second decryption module 721 may also be adapted to:

calling the first dynamic link library to which the encryption method belongs;

The business result is decrypted in the encryption manner by using the first dynamic link library.

In an optional embodiment of the present invention, the second decompression module 722 may also be adapted to:

calling the second dynamic link library to which the compression mode belongs;

The service data is decompressed in the compression manner by using the second dynamic link library.

As for the apparatus embodiment, since it is basically similar to the method embodiment, the description is relatively simple, and reference may be made to the partial description of the method embodiment for related parts.

The algorithms and displays provided herein are not inherently related to any particular computer, virtual system, or other device. Various general-purpose systems can also be used with teaching based on this. The structure required to construct such a system is apparent from the above description. Furthermore, the present invention is not directed to any particular programming language. It should be understood that various programming languages may be used to implement the inventions described herein, and that the descriptions of specific languages above are intended to disclose the best mode for carrying out the invention.

In the description provided herein, numerous specific details are set forth. It will be understood, however, that embodiments of the invention may be practiced without these specific details. In some instances, well-known methods, structures and techniques have not been shown in detail in order not to obscure an understanding of this description.

Similarly, it is to be understood that in the above description of exemplary embodiments of the invention, various features of the invention are sometimes grouped together into a single embodiment, figure, or its description. This disclosure, however, should not be construed as reflecting an intention that the invention as claimed requires more features than are expressly recited in each claim. Rather, as the following claims reflect, inventive aspects lie in less than all features of a single foregoing disclosed embodiment. Thus, the claims following the Detailed Description are hereby expressly incorporated into this Detailed Description, with each claim standing on its own as a separate embodiment of this invention.

Those skilled in the art will understand that the modules in the device in the embodiment can be adaptively changed and arranged in one or more devices different from the embodiment. The modules or units or components in the embodiments may be combined into one module or unit or component, and further they may be divided into multiple sub-modules or sub-units or sub-assemblies. All features disclosed in this specification (including accompanying claims, abstract and drawings) and any method so disclosed may be employed in any combination, unless at least some of such features and/or procedures or elements are mutually exclusive. All processes or units of equipment are combined. Each feature disclosed in this specification (including accompanying claims, abstract and drawings) may be replaced by alternative features serving the same, equivalent or similar purpose, unless expressly stated otherwise.

Furthermore, those skilled in the art will appreciate that although some of the embodiments described herein include certain features, but not others, included in other embodiments, that combinations of features of different embodiments are intended to be within the scope of the invention within and form different embodiments. For example, in the following claims, any of the claimed embodiments may be used in any combination.

Various component embodiments of the present invention may be implemented in hardware, or in software modules running on one or more processors, or in a combination thereof. Those skilled in the art should understand that a microprocessor or a digital signal processor (DSP) may be used in practice to implement some or all of the functions of some or all of the components in the encryption-based communication device according to the embodiments of the present invention. The present invention can also be implemented as apparatus or apparatus programs (eg, computer programs and computer program products) for performing part or all of the methods described herein. Such a program implementing the present invention may be stored on a computer-readable medium, or may be in the form of one or more signals. Such signals may be downloaded from Internet sites, or provided on carrier signals, or in any other form.

It should be noted that the above-described embodiments illustrate rather than limit the invention, and that alternative embodiments may be devised by those skilled in the art without departing from the scope of the appended claims. In the claims, any reference signs placed between parentheses shall not be construed as limiting the claim. The word "comprising" does not exclude the presence of elements or steps not listed in a claim. The word "a" or "an" preceding an element does not exclude the presence of a plurality of such elements. The invention can be implemented by means of hardware comprising several different elements and by means of a suitably programmed computer. In a unit claim enumerating several means, several of these means may be embodied by one and the same item of hardware. The use of the words first, second, and third, etc. do not denote any order. These words can be interpreted as names.

Claims (30)

1. An encryption-based communication method comprising:

when receiving a service operation instruction, a client determines service data;

calling a first dynamic link library to which a preset encryption mode belongs, wherein the encryption mode has an encryption identifier, and the first dynamic link library is generated by a static link library;

encrypting the service data by the first dynamic link library in the encryption mode;

embedding the service data and the encrypted identifier into a service request;

sending the service request to a server through a uniform interface for service processing;

the server reads service data and an encryption identifier from the service request;

calling a first dynamic link library to which an encryption mode corresponding to the encryption identifier belongs; and decrypting the service data by adopting the encryption mode through the first dynamic link library.

2. The method of claim 1, further comprising:

compressing the service data by adopting a preset compression mode, wherein the compression mode is provided with a compression identifier;

and embedding the compression identification into a service request.

3. The method of claim 2, wherein the step of compressing the service data in a preset compression manner comprises:

calling a second dynamic link library to which a preset compression mode belongs;

and compressing the service data by adopting the compression mode through the second dynamic link library.

4. The method of claim 1, 2 or 3, further comprising:

and carrying out service processing according to the service data.

5. The method of claim 4, further comprising:

the server reads the compression identification from the service request;

and decompressing the service data by adopting a compression mode corresponding to the compression identifier.

6. The method of claim 5, wherein the step of decompressing the service data by using the compression mode corresponding to the compression identifier comprises:

calling a second dynamic link library to which the compression mode corresponding to the compression identifier belongs;

and decompressing the service data by adopting the compression mode through the second dynamic link library.

7. The method of claim 4, wherein the traffic data includes traffic paths, request parameters;

the step of performing service processing according to the service data includes:

and transmitting the request parameters to a service component for service processing according to the service path.

8. The method of claim 1, 2, 3, 5, 6, or 7, further comprising:

the server acquires a service result of service processing;

encrypting the service result by adopting an encryption mode corresponding to the encryption identifier;

and returning the service result to the client through the uniform interface.

9. The method of claim 8, wherein the step of encrypting the service data by using the encryption mode corresponding to the encryption identifier comprises:

calling a first dynamic link library to which an encryption mode corresponding to the encryption identifier belongs;

and encrypting the service data by adopting the encryption mode through the first dynamic link library.

10. The method of claim 8, wherein prior to the step of returning the business data to the client, the method further comprises:

and compressing the service data by adopting a compression mode corresponding to the compression identifier.

11. The method of claim 10, wherein the step of compressing the service data in a compression manner corresponding to the compression identifier comprises:

calling a second dynamic link library to which the compression mode corresponding to the compression identifier belongs;

and compressing the service data by adopting the compression mode through the second dynamic link library.

12. The method of claim 9, 10 or 11, further comprising:

and the client decrypts the service result according to the encryption mode.

13. The method of claim 12, wherein the step of decrypting the service result in accordance with the encryption at the time of the previous communication comprises:

calling a first dynamic link library to which the encryption mode belongs;

and decrypting the service result by the first dynamic link library in the encryption mode.

14. The method of claim 2, 3, 5, 6, 10, or 11, further comprising:

and decompressing the service result according to the compression mode.

15. The method of claim 14, wherein the step of decompressing the service results in the compressed manner comprises:

calling a second dynamic link library to which the compression mode belongs;

and decompressing the service data by adopting the compression mode through the second dynamic link library.

16. An encryption-based communication system, the system comprising a client and a server, wherein the client comprises:

the service data determining module is suitable for determining service data when receiving a service operation instruction;

the first encryption module is suitable for encrypting the service data by adopting a preset encryption mode, and the encryption mode is provided with an encryption identifier;

a first data embedding module adapted to embed the service data and the encrypted identification in a service request;

the service request sending module is suitable for sending the service request to the server through a uniform interface for service processing;

wherein the first encryption module is further adapted to:

calling a first dynamic link library to which a preset encryption mode belongs, wherein the first dynamic link library is generated by a static link library;

encrypting the service data by the first dynamic link library in the encryption mode;

wherein the server comprises:

the first data reading module is suitable for reading the service data and the encrypted identifier from the service request;

the first decryption module is suitable for decrypting the service data by adopting an encryption mode corresponding to the encryption identifier;

wherein the first decryption module is further adapted to:

calling a first dynamic link library to which an encryption mode corresponding to the encryption identifier belongs;

and decrypting the service data by adopting the encryption mode through the first dynamic link library.

17. The system of claim 16, wherein the client further comprises:

the first compression module is suitable for compressing the service data by adopting a preset compression mode, and the compression mode is provided with a compression identifier;

and the second data embedding module is suitable for embedding the compression identification into the service request.

18. The system of claim 17, wherein the first compression module is further adapted to:

calling a second dynamic link library to which a preset compression mode belongs;

and compressing the service data by adopting the compression mode through the second dynamic link library.

19. The system of claim 16, 17 or 18, wherein the server further comprises:

and the service processing module is suitable for performing service processing according to the service data.

20. The system of claim 19, wherein the server further comprises:

the second data reading module is suitable for the server to read the compression identification from the service request;

and the first decompression module is suitable for decompressing the service data by adopting a compression mode corresponding to the compression identifier.

21. The system of claim 20, wherein the first decompression module is further adapted to:

calling a second dynamic link library to which the compression mode corresponding to the compression identifier belongs;

and decompressing the service data by adopting the compression mode through the second dynamic link library.

22. The system of claim 19, wherein the traffic data includes traffic paths, request parameters;

the service processing module is further adapted to:

and transmitting the request parameters to a service component for service processing according to the service path.

23. The system of claim 16, 17, 18, 20, 21, or 22, wherein the server further comprises:

the service result acquisition module is suitable for acquiring a service result of service processing;

the second encryption module is suitable for encrypting the service result by adopting an encryption mode corresponding to the encryption identifier;

and the service result sending module is suitable for returning the service result to the client through the uniform interface.

24. The system of claim 23, wherein the second encryption module is further adapted to:

calling a first dynamic link library to which an encryption mode corresponding to the encryption identifier belongs;

and encrypting the service data by adopting the encryption mode through the first dynamic link library.

25. The system of claim 23, wherein the server further comprises:

and the second compression module is suitable for compressing the service data by adopting a compression mode corresponding to the compression identifier.

26. The system of claim 25, wherein the second compression module is further adapted to:

calling a second dynamic link library to which the compression mode corresponding to the compression identifier belongs;

and compressing the service data by adopting the compression mode through the second dynamic link library.

27. The system of claim 24, 25 or 26, wherein the client further comprises:

and the second decryption module is suitable for decrypting the service result according to the encryption mode.

28. The system of claim 27, wherein the second decryption module is further adapted to:

calling a first dynamic link library to which the encryption mode belongs;

and decrypting the service result by the first dynamic link library in the encryption mode.

29. The system of claim 17 or 18 or 21 or 25 or 26, wherein the client further comprises:

and the second decompression module is suitable for decompressing the service result according to the compression mode.

30. The system of claim 29, wherein the second decompression module is further adapted to:

calling a second dynamic link library to which the compression mode belongs;

and decompressing the service data by adopting the compression mode through the second dynamic link library.

Images