CN108243172B - A method and system for sending verification information - Google Patents

Abstract

The invention provides a method and a system for sending verification information, wherein the method comprises the following steps: a client acquires first network request information; generating second network request information and first interface parameters according to the first network request information; splicing the second network request information and the first interface parameter to generate third network request information; sending the third network request information to a server, so that the server can calculate a second interface parameter based on the third network request information, judge whether the first interface parameter is consistent with the second interface parameter, and send the verification information to the client if the second interface parameter is determined to be consistent with the first interface parameter; therefore, even if the user captures or replaces the telephone number in the first network request message by using the script software, the verification message cannot be frequently or aggressively sent to the telephone number, the probability of maliciously retransmitting the verification message is reduced, and the verification code which is difficult to identify does not need to be input for verification, so that the operation efficiency of the user is improved.

Description

A method and system for sending verification information

technical field

The invention belongs to the technical field of communication, and in particular relates to a method and system for sending verification information.

Background technique

Many terminal APPs on the market are registered or logged in with a mobile phone number. Generally, before obtaining the verification information received by the mobile phone, it is necessary to enter a verification code of several numbers or symbols to register or log in.

In order to prevent the verification code from being sent frequently or aggressively, the existing technology complicates the design of the verification code, and the text on the verification code is skewed or even difficult to read. Registering an APP creates certain obstacles, thereby reducing the user's operational efficiency.

SUMMARY OF THE INVENTION

In view of the problems existing in the prior art, the embodiments of the present invention provide a method and system for sending verification information, which are used to solve the problem of avoiding frequent or aggressive sending of verification codes when logging in or registering an APP in the prior art, resulting in The technical problem that the user's operation efficiency is reduced.

The present invention provides a method for sending verification information, the method comprising:

The client obtains the first network request information;

generating second network request information and first interface parameters according to the first network request information; splicing the second network request information and the first interface parameters to generate third network request information;

Send the third network request information to the server, so that the server can calculate the second interface parameter based on the third network request information, and determine whether the first interface parameter is consistent with the second interface parameter, if When it is determined that the second interface parameter and the first interface parameter are consistent, send the verification information to the client; wherein the first network request information, the second network request information and the third The network request information is a uniform resource locator, and the first network request information, the second network request information and the third network request information are different; the first interface parameter and the second interface parameter are card value.

In the above solution, generating the second network request information and the first interface parameter according to the first network request information includes:

Obtain the time parameter string in the first network request information from the dictionary;

Obtain the key value key of the time parameter string, each key value corresponds to a numerical value;

Sort the key values according to the preset first sorting rule, and obtain an array of key values;

Using the mapping relationship between the key value and the numerical value to convert the key value array into a string of the numerical value;

The string of the numerical value is spliced with the server address to obtain the second network request information;

The first interface parameter is obtained from the second network request information by using a symmetric encryption algorithm.

In the above solution, the using a symmetric encryption algorithm to obtain the first interface parameter from the second network request information includes:

Parse the second network request information to obtain the server address and the first query string;

Sort the parameters in the first query string according to a preset second sorting rule to form the second query string;

generating fourth network request information according to the second query string;

Using a symmetric algorithm to generate summary information based on the fourth network request information;

encrypting the digest information;

The plaintext information of the preset key and the encrypted digest information are spliced to form the first interface parameter.

The present invention also provides a method for sending verification information, the method comprising:

The client obtains the first network request information;

Generate second network request information and first interface parameters according to the first network request information; combine the second network request information and the first interface parameters to generate third network request information, and combine the third network request information with the third network request information. The network request information is sent to the server;

The server calculates the second interface parameter based on the third network request information, and determines whether the first interface parameter is consistent with the second interface parameter, and if it is determined that the first interface parameter and the second interface parameter are consistent, Sending the verification information to the client; wherein the first network request information, the second network request information and the third network request information are uniform resource locators, and the first network request information , the second network request information and the third network request information are different; the first interface parameter and the second interface parameter are token values.

In the above solution, when the server sends the verification information to the client, the verification information is sent according to a preset number of times of sending.

The present invention also provides a client, the client comprising:

an obtaining unit, configured to obtain the first network request information;

a first generating unit, configured to generate second network request information and a first interface parameter according to the first network request information; a second generating unit, configured to generate a second network request information and the first interface parameter according to the second network request information The third network requests information;

A sending unit, configured to send the third network request information to a server, so that the server can calculate a second interface parameter based on the third network request information, and when determining the second interface parameter and the first interface parameter When the interface parameters are consistent, send the verification information to the client; wherein the first network request information, the second network request information and the third network request information are uniform resource locators, and the The first network request information, the second network request information and the third network request information are different; the first interface parameter and the second interface parameter are token values.

In the above scheme, the first generating unit includes:

a first obtaining subunit, used for obtaining the time parameter string in the first network request information from the dictionary;

Obtain the key value key of the time parameter string, each key value corresponds to a numerical value;

Sort the key values according to the preset first sorting rule, and obtain an array of key values;

a conversion subunit, configured to convert the key value array into a string of the numerical value by utilizing the mapping relationship between the key value and the numerical value;

A splicing subunit, for splicing the string of the numerical value and the server address to obtain the second network request information;

A second obtaining subunit, configured to obtain the first interface parameter from the second network request information by using a symmetric encryption algorithm.

In the above solution, the second obtaining subunit obtains the first interface parameter from the second network request information by using the MD5 algorithm, including:

Parse the second network request information to obtain the server address and the first query string;

Sort the parameters in the first query string according to a preset second sorting rule to form the second query string;

generating fourth network request information according to the second query string;

Using a symmetric algorithm to generate summary information based on the fourth network request information;

encrypting the digest information;

The plaintext information of the preset key and the encrypted digest information are spliced to form the first interface parameter.

The present invention also provides a system for sending verification information, the system comprising:

The client is used to obtain the first network request information; generate the second network request information and the first interface parameter according to the first network request information; generate the second network request information and the first interface parameter by splicing The third network requests information, and sends the third network request information to the server; the server is configured to calculate the second interface parameter based on the third network request information, and determine the relationship between the first interface parameter and the second interface Whether the parameters are consistent, if it is determined that the first interface parameter and the second interface parameter are consistent, send the verification information to the client; wherein the first network request information and the second network request information and the third network request information is a uniform resource locator, and the first network request information, the second network request information and the third network request information are different; the first interface parameter is different from the third network request information. The second interface parameter is the token value.

In the above solution, when the server sends the verification information to the client, the verification information is sent according to a preset number of times of sending.

The present invention provides a method and system for sending verification information. The method includes: obtaining first network request information by a client; generating second network request information and first interface parameters according to the first network request information; The second network request information and the first interface parameters are spliced to generate third network request information; the third network request information is sent to the server, so that the server can calculate the second network request information based on the third network request information. interface parameters, and determine whether the first interface parameters are consistent with the second interface parameters, and if it is determined that the second interface parameters and the first interface parameters are consistent, send the verification information to the client; Wherein, the first network request information, the second network request information and the third network request information are uniform resource locators, and the first network request information, the second network request information and the The third network request information is different; the first interface parameter and the second interface parameter are token values; in this way, even if the user uses script software to grab or change the phone number in the first network request information, it is not possible to frequently or Sending verification information to the phone number aggressively, because the correct token value is still needed to send verification information, which reduces the chance of maliciously resending verification information and eliminates the need to enter illegible verification codes for verification , thereby improving the user's operating efficiency.

Description of drawings

1 is a schematic diagram of the overall structure of a system for sending verification information provided by an embodiment of the present invention;

2 is a schematic flowchart of a method for sending verification information provided by an embodiment of the present invention;

3 is a schematic flowchart of another method for sending verification information according to an embodiment of the present invention

FIG. 4 is a schematic diagram of an overall structure of a client according to an embodiment of the present invention;

FIG. 5 is a schematic diagram of an overall structure of a first generating unit according to an embodiment of the present invention.

Detailed ways

In order to log in or register an APP without inputting an illegible verification code for verification, and when using the received verification information for verification, the probability of maliciously re-sending verification information is reduced, and the operation efficiency of the user is improved, the present invention provides a A method and system for sending verification information, the method comprising: obtaining first network request information by a client; generating second network request information and first interface parameters according to the first network request information; and the first interface parameters are spliced to generate third network request information; the third network request information is sent to the server, so that the server can calculate the second interface parameters based on the third network request information, and determine the whether the first interface parameter is consistent with the second interface parameter, and if it is determined that the second interface parameter and the first interface parameter are consistent, send the verification information to the client; wherein the first interface The network request information, the second network request information and the third network request information are uniform resource locators, and the first network request information, the second network request information and the third network request information are different ; The first interface parameter and the second interface parameter are token values;

The technical solutions of the present invention will be further described in detail below through the accompanying drawings and specific embodiments.

Before introducing the method embodiments of the present invention, the verification system architecture in the embodiments of the present invention is first introduced. As shown in FIG. 1 , the system includes: a client 101 and a server 102 . As shown in FIG. 1 , the server 102 can communicate with N clients 101, where N is a natural number, and the communication mode between the client 101 and the server 102 can be wired communication or wireless communication. The terminal 101 may specifically be a smart phone, a tablet computer, a smart wearable device, etc., which is not limited in this application.

As shown in FIG. 2, the data interaction process between the client 101 and the server 102 is as follows:

S1, the client obtains first network request information; generates second network request information and first interface parameters according to the first network request information; generates a third network according to the second network request information and the first interface parameters request information, the client sends the third network request information to the server.

In this step, the client obtains the first network request information, and after obtaining the first network request information, generates the second network request information and the first interface parameter according to the first network request information, which specifically includes:

Because the first network request information is in the dictionary dict, the client first obtains the time parameter string from the dictionary dict. For example, the time parameter string can be e=14696&method=get-code&mobile=1355408*** *; where e, method, mobile is the key value of a dictionary dict; 1469, get-code, 1355408**** is the numeric value of the dictionary dict. Wherein, the first network request information is a uniform resource locator URL.

After obtaining all the key value keys of the time parameter string, sort the key value keys according to the preset first sorting rule to obtain a key value array; the first sorting rule can be generated by using the sortedArrayUsingComparator sorting method, Use the sortedArrayUsingComparator sorting method to generate an ordered key-value array array. The key value keys in the key value array array may be sorted in ascending order, or may be sorted in descending order, and in this embodiment, the sorting is in ascending order a-z.

After the key-value array is obtained, the key-value array is converted into a string of the numerical value by using the mapping relationship between the key value and the numerical value, and the string of the numerical value is spliced with the server address to obtain the second network request information; and obtain the first interface parameter from the second network request information by using a symmetric encryption algorithm.

Specifically, the objectAtIndex method is used to extract the first key value key1 in the key value array, the first value value1 is extracted from the dictionary dict through the first key value key1 by using the mapping relationship, and then the first key value key1 Concatenate with the first value value1 into a new string dictvaluestr1; and so on, convert all key values into strings of type dictvaluestr, and finally concatenate all strings of type dictvaluestr to form the character of the value string.

Then the numerical string and the path part of the server address are spliced to form the second network request information Sorturl; wherein, the second network request information is actually a URL, but different from the first network request information; the server The address includes: the path part and the query_string part of the query string. For example, the second network request information Sorturl is formed by splicing strings such as dictvaluestr1 and dictvaluestr2 with http://server address/api . The http://server address/api is the path part of the server address.

After acquiring the second network request information Sorturl, use a symmetric encryption algorithm to acquire the first interface parameter from the second network request information. The symmetric encryption algorithm may be the getNewToken function in the MD5 algorithm. The first interface parameter is the token value calculated by the client.

Specifically, the second network request information Sorturl is parsed to obtain the first half path part of the server address and the first query string query_string1;

Sort the parameters in the first query string query_string1 according to the preset second sorting rule, and then insert the parameters in the first query string query_string1 into "=" and "&" in order to encrypt to form the first query string. The second query string query_string2. Wherein, the second sorting rule may be sorting by name.

The fourth network request information is generated according to the second query string query_string2; specifically, the first half path part of the server address is spliced with the second query string query_string2 by using the method of string splicing, and the path part and the second query string are spliced together. Insert "?" between the string part query_string2 for encryption to form the fourth network request information urll.

A symmetric algorithm is used to generate digest information digest based on the second query character query_string2 in the updated fourth network request information; wherein, the first parameter in the digest information digest is the private key SECRET_KEY, and the second parameter is the first parameter Four network request information url1. The symmetric algorithm in this embodiment is the HMAC_SHA1 algorithm.

After obtaining the digest information digest, perform encryption processing on the digest information digest; specifically, perform base64 encoding processing on the digest information digest, and perform security processing on the encoded digest information digest, for example, the characters in the digest information digest are "" /" is replaced with "_"; the character "+" is replaced with "-"; of course, this is only one of the replacement methods, which is not limited here.

Finally, the plaintext information ACCESS_KEY of the preset key is spliced with the encrypted digest information digest, and the plaintext information and the encrypted digest information digest are connected by ":" to form the first interface parameter.

After the first interface parameter is generated, third network request information is generated according to the second network request information Sorturl and the first interface parameter; specifically, the value of the second network request information Sorturl is concatenated with the value of the first interface parameter Token After that, the third network request information TokenUrl is formed, and the third network request information TokenUrl is sent to the server. The third network request information is a uniform resource locator, and the first network request information, the second network request information and the third network request information are different.

For example, the third network request information TokenUrl=http://server address/api? e=14696&method=get-code&mobile=1355408****%%%%%&token=********************

S2: The server calculates a second interface parameter based on the third network request information, and determines whether the first interface parameter is consistent with the second interface parameter, and if it is determined that the first interface parameter and the second interface parameter are consistent when the authentication information is sent to the client.

In this step, after receiving the third network request information TokenUrl, the server parses the third network request information TokenUrl through the Token keyword, and obtains the value after the Token in the third network request information TokenUrl, based on the The value after the Token obtains the second interface parameter in the same way as the client obtains the first interface parameter, and judges whether the first interface parameter is consistent with the second interface parameter. When the parameters of the second interface are consistent, the verification information is sent to the client. Here, the second interface parameter is the token value calculated by the server, because the process of acquiring the second interface parameter by the server is the same as that of the client acquiring the first interface parameter, and details are not repeated here.

Moreover, when sending the verification information to the client, in order to avoid frequent malicious sending, the sending needs to be performed according to the preset sending times. The preset number of times of sending may be set according to actual scenarios, and the set number of times of sending in this embodiment is 10 times.

Embodiment 2

This embodiment provides a method for sending verification information. The method is based on the client side. As shown in FIG. 3 , the method includes:

S301, the client obtains first network request information; and generates second network request information and first interface parameters according to the first network request information.

In this step, the client obtains the first network request information, and after obtaining the first network request information, generates the second network request information and the first interface parameter according to the first network request information, which specifically includes:

Because the first network request information is in the dictionary dict, the client first obtains the time parameter string from the dictionary dict. For example, the time parameter string can be e=14696&method=get-code&mobile=1355408*** *; where e, method, mobile is the key value of a dictionary dict; 1469, get-code, 1355408**** is the numeric value of the dictionary dict. Wherein, the first network request information is a uniform resource locator URL.

After obtaining all the key value keys of the time parameter string, sort the key value keys according to the preset first sorting rule to obtain a key value array; the first sorting rule can be generated by using the sortedArrayUsingComparator sorting method, Use the sortedArrayUsingComparator sorting method to generate an ordered key-value array array. The key value keys in the key value array array may be sorted in ascending order, or may be sorted in descending order, and in this embodiment, the sorting is in ascending order a-z.

After the key-value array is obtained, the key-value array is converted into a string of the numerical value by using the mapping relationship between the key value and the numerical value, and the string of the numerical value is spliced with the server address to obtain the second network request information; and obtain the first interface parameter from the second network request information by using a symmetric encryption algorithm.

Specifically, the objectAtIndex method is used to extract the first key value key1 in the key value array, the first value value1 is extracted from the dictionary dict through the first key value key1 by using the mapping relationship, and then the first key value key1 Concatenate with the first value value1 into a new string dictvaluestr1; and so on, convert all key values into strings of type dictvaluestr, and finally concatenate all strings of type dictvaluestr to form the character of the value string.

Then the numerical string and the path part of the server address are spliced to form the second network request information Sorturl; wherein, the second network request information is actually a URL, but different from the first network request information; the server The address includes: the path part and the query_string part of the query string. For example, the second network request information Sorturl is formed by splicing strings such as dictvaluestr1 and dictvaluestr2 with http://server address/api . The http://server address/api is the path part of the server address.

After acquiring the second network request information Sorturl, use a symmetric encryption algorithm to acquire the first interface parameter from the second network request information. The symmetric encryption algorithm may be the getNewToken function in the MD5 algorithm. The first interface parameter is the token value calculated by the client.

Specifically, the second network request information Sorturl is parsed to obtain the first half path part of the server address and the first query string query_string1;

Sort the parameters in the first query string query_string1 according to the preset second sorting rule, and then insert the parameters in the first query string query_string1 into "=" and "&" in order to encrypt to form the first query string. The second query string query_string2. Wherein, the second sorting rule may be sorting by name.

The fourth network request information is generated according to the second query string query_string2; specifically, the first half path part of the server address is spliced with the second query string query_string2 by using the method of string splicing, and the path part and the second query string are spliced together. Insert "?" between the string part query_string2 for encryption to form the fourth network request information urll.

A symmetric algorithm is used to generate digest information digest based on the second query character query_string2 in the updated fourth network request information; wherein, the first parameter in the digest information digest is the private key SECRET_KEY, and the second parameter is the first parameter Four network request information url1. The symmetric algorithm in this embodiment is the HMAC_SHA1 algorithm.

After obtaining the digest information digest, perform encryption processing on the digest information digest; specifically, perform base64 encoding processing on the digest information digest, and perform security processing on the encoded digest information digest, for example, the characters in the digest information digest are "" /" is replaced with "_"; the character "+" is replaced with "-"; of course, this is only one of the replacement methods, which is not limited here.

Finally, the plaintext information ACCESS_KEY of the preset key is spliced with the encrypted digest information digest, and the plaintext information and the encrypted digest information digest are connected by ":" to form the first interface parameter.

S302. Generate third network request information according to the second network request information and the first interface parameter.

In this step, after the first interface parameter is generated, third network request information is generated according to the second network request information Sorturl and the first interface parameter; specifically, the first interface parameter is spliced to the value of the second network request After requesting the information Sorturl, the third network request information TokenUrl is formed, for example, the third network request information TokenUrl=http://server address/api? e=14696&method=get-code&mobile=1355408****%%%%%&token=********************; wherein, the third network requests information is a uniform resource locator, and the first network request information, the second network request information and the third network request information are different.

S303: Send the third network request information to a server.

In this step, after the client generates the third network request information, it sends the third network request information TokenUrl to the server.

After receiving the third network request information TokenUrl, the server parses the third network request information TokenUrl through the Token keyword, and obtains the value after the Token in the third network request information TokenUrl, based on the value after the Token Use the same method as the client to obtain the first interface parameter Token to obtain the second interface parameter, and determine whether the first interface parameter and the second interface parameter are consistent, if the first interface parameter and the second interface parameter are determined When the interface parameters are consistent, the verification information is sent to the client. Here, the second interface parameter is the token value calculated by the server, because the process of acquiring the second interface parameter by the server is the same as that of the client acquiring the first interface parameter, and details are not repeated here.

Moreover, when sending the verification information to the client, in order to avoid frequent malicious sending, the sending needs to be performed according to the preset sending times. The preset number of times of sending may be set according to actual scenarios, and the set number of times of sending in this embodiment is 10 times.

Embodiment 3

Corresponding to the first embodiment, this embodiment provides a system for sending verification information. Referring to FIG. 1, the system includes: a client 101 and a server 102; when sending the verification information, the specific implementation is as follows:

The client 101 obtains the first network request information, and after obtaining the first network request information, generates the second network request information and the first interface parameter according to the first network request information, which specifically includes:

Because the URL of the first network request information is in the dictionary dict, the client 101 first obtains the character string of the time parameter from the dictionary dict. For example, the character string of the time parameter may be e=14696&method=get-code&mobile=1355408* ***; Among them, e, method, mobile is the key value of a dictionary dict; 1469, get-code, 1355408**** is the numerical value of the dictionary dict. Wherein, the first network request information is a uniform resource locator URL.

After obtaining all the key value keys of the time parameter string, sort the key value keys according to the preset first sorting rule to obtain a key value array; the first sorting rule can be generated by using the sortedArrayUsingComparator sorting method, Use the sortedArrayUsingComparator sorting method to generate an ordered key-value array array. The key value keys in the key value array array may be sorted in ascending order, or may be sorted in descending order, and in this embodiment, the sorting is in ascending order a-z.

After the key-value array is obtained, the key-value array is converted into a string of the numerical value by using the mapping relationship between the key value and the numerical value, and the string of the numerical value is spliced with the server address to obtain the second network request information; and obtain the first interface parameter from the second network request information by using a symmetric encryption algorithm.

Specifically, the objectAtIndex method is used to extract the first key value key1 in the key value array, the first value value1 is extracted from the dictionary dict through the first key value key1 by using the mapping relationship, and then the first key value key1 Concatenate with the first value value1 into a new string dictvaluestr1; and so on, convert all key values into strings of type dictvaluestr, and finally concatenate all strings of type dictvaluestr to form the character of the value string.

Then the numerical string and the path part of the server address are spliced to form the second network request information Sorturl; wherein, the second network request information is actually a URL, but different from the first network request information; the server The address includes: the path part and the query_string part of the query string. For example, the second network request information Sorturl is formed by splicing strings such as dictvaluestr1 and dictvaluestr2 with http://server address/api . The http://server address/api is the path part of the server address.

After acquiring the second network request information Sorturl, use a symmetric encryption algorithm to acquire the first interface parameter from the second network request information. The symmetric encryption algorithm may be the getNewToken function in the MD5 algorithm. The first interface parameter is the token value calculated by the client.

Specifically, the second network request information Sorturl is parsed to obtain the first half path part of the server address and the first query string query_string1;

Sort the parameters in the first query string query_string1 according to the preset second sorting rule, and then insert the parameters in the first query string query_string1 into "=" and "&" in order to encrypt to form the first query string. 2. The query string query_string2. Wherein, the second sorting rule may be sorting by name.

The fourth network request information is generated according to the second query string query_string2; specifically, the first half path part of the server address is spliced with the second query string query_string2 by using the method of string splicing, and the path part and the second query string are spliced together. Insert "?" between the string part query_string2 for encryption to form the fourth network request information urll.

A symmetric algorithm is used to generate digest information digest based on the second query character query_string2 in the updated fourth network request information; wherein, the first parameter in the digest information digest is the private key SECRET_KEY, and the second parameter is the first parameter Four network request information url1. The symmetric algorithm in this embodiment is the HMAC_SHA1 algorithm.

After obtaining the digest information digest, perform encryption processing on the digest information digest; specifically, perform base64 encoding processing on the digest information digest, and perform security processing on the encoded digest information digest, for example, the characters in the digest information digest are "" /" is replaced with "_"; the character "+" is replaced with "-"; of course, this is only one of the replacement methods, which is not limited here.

Finally, the plaintext information ACCESS_KEY of the preset key is spliced with the encrypted digest information digest, and the plaintext information and the encrypted digest information digest are connected by ":" to form the first interface parameter.

After the first interface parameter is generated, third network request information is generated according to the second network request information Sorturl and the first interface parameter; specifically, after the first interface parameter is spliced to the second network request information Sorturl , that is, the third network request information TokenUrl is formed, and the third network request information TokenUrl is sent to the server. The third network request information is a uniform resource locator, and the first network request information, the second network request information and the third network request information are different.

For example, the third network request information TokenUrl=http://server address/api? e=14696&method=get-code&mobile=1355408****%%%%%&token=********************

After receiving the third network request information TokenUrl, the server 102 parses the third network request information TokenUrl through the Token keyword, and obtains the value after the Token in the third network request information TokenUrl, based on the value after the Token The value obtains the second interface parameter by the same method as the client obtains the first interface parameter, and judges whether the first interface parameter and the second interface parameter are consistent, if the first interface parameter and the second interface parameter are determined When the interface parameters are consistent, the verification information is sent to the client 101 . Here, the second interface parameter is the token value calculated by the server, because the process of acquiring the second interface parameter by the server 102 is the same as that of the client 101 acquiring the first interface parameter, and details are not repeated here.

Moreover, when sending the verification information to the client 101, in order to avoid frequent malicious sending, the sending needs to be performed according to the preset sending times. The preset number of times of sending may be set according to actual scenarios, and the set number of times of sending in this embodiment is 10 times.

Embodiment 4

Corresponding to the second embodiment, this embodiment also provides a client. As shown in FIG. 4 , the client includes: an obtaining unit 41, a first generating unit 42, a second generating unit 43, and a sending unit 44; wherein,

The obtaining unit 41 is used to obtain the first network request information; because the first network request information is in the dictionary dict, the client first obtains the character string of the time parameter from the dictionary dict, for example, the character string of the time parameter It can be e=14696&method=get-code&mobile=1355408****; wherein, e, method, mobile is the key value of a dictionary dict; 1469, get-code, 1355408**** is the numerical value of the dictionary dict. Wherein, the first network request information is a uniform resource locator URL.

After the acquiring unit 41 acquires the first network request information, the first generating unit 42 is configured to generate the second network request information and the first interface parameter according to the first network request information.

Specifically, referring to FIG. 5 , the first generation unit 42 includes: a first acquisition subunit 51, a conversion subunit 52, a splicing subunit 53 and a second acquisition subunit 54; wherein,

After the first obtaining subunit 51 obtains all the key value keys of the time parameter string, it sorts the key value keys according to the preset first sorting rule, and obtains a key value array; the first sorting rule may be Use ortedArrayUsingComparator sorting method to generate, use ortedArrayUsingComparator sorting method to generate an ordered array of key values. The key value keys in the key value array array may be sorted in ascending order, or may be sorted in descending order, and in this embodiment, the sorting is in ascending order a-z.

After acquiring the key value array, the conversion subunit 52 converts the key value array into a string of the numerical value by using the mapping relationship between the key value and the numerical value, and the splicing subunit 53 uses The second network request information is obtained by splicing the string of the numerical value with the server address; the second obtaining subunit 54 uses a symmetric encryption algorithm to obtain the first interface parameter from the second network request information .

Specifically, the conversion subunit 52 uses the objectAtIndex method to retrieve the first key value key1 in the key value array, and uses the mapping relationship to retrieve the first value value1 from the dictionary dict through the first key value key1, and then converts the The first key value key1 and the first value value1 are spliced into a new string dictvaluestr1; and so on, all key values are converted into strings of type dictvaluestr, and finally all strings of type dictvaluestr are spliced together, A string forming the numerical value.

Then the splicing subunit 53 splices the numerical string and the path part of the server address to form the second network request information Sorturl; wherein, the second network request information is actually a URL, but the first network request The information is different; the server address includes: the path part and the query_string part of the query string. For example, the second network request information Sorturl is formed by splicing strings such as dictvaluestr1 and dictvaluestr2 with http://server address/api . The http://server address/api is the path part of the server address.

After the second obtaining subunit 54 obtains the second network request information Sorturl, it uses a symmetric encryption algorithm to obtain the first interface parameter Token from the second network request information. The symmetric encryption algorithm may be the getNewToken function in the MD5 algorithm. The first interface parameter is the token value calculated by the client.

Here, after the second obtaining subunit 54 obtains the second network request information Sorturl, using a symmetric encryption algorithm to obtain the first interface parameter Token from the second network request information specifically includes:

The second obtaining subunit 54 parses the second network request information Sorturl, and obtains the first half path part of the server address and the first query string query_string1;

Sort the parameters in the first query string query_string1 according to the preset second sorting rule, and then insert the parameters in the first query string query_string1 into "=" and "&" in order to encrypt to form the first query string. The second query string query_string2. Wherein, the second sorting rule may be sorting by name.

The fourth network request information is generated according to the second query string query_string2; specifically, the first half path part of the server address is spliced with the second query string query_string2 by using the method of string splicing, and the path part and the second query string are spliced together. Insert "?" between the string part query_string2 for encryption to form the fourth network request information urll.

A symmetric algorithm is used to generate digest information digest based on the second query character query_string2 in the updated fourth network request information; wherein, the first parameter in the digest information digest is the private key SECRET_KEY, and the second parameter is the first parameter Four network request information url1. The symmetric algorithm in this embodiment is the HMAC_SHA1 algorithm.

After obtaining the digest information digest, perform encryption processing on the digest information digest; specifically, perform base64 encoding processing on the digest information digest, and perform security processing on the encoded digest information digest, for example, the characters in the digest information digest are "" /" is replaced with "_"; the character "+" is replaced with "-"; of course, this is only one of the replacement methods, which is not limited here.

Finally, the plaintext information ACCESS_KEY of the preset key is spliced with the encrypted digest information digest, and the plaintext information and the encrypted digest information digest are connected by ":" to form the first interface parameter.

After the first generation unit 42 generates the first interface parameter, the second generation unit 43 is configured to generate third network request information according to the second network request information and the first interface parameter; After the interface parameter Token is concatenated with the second network request information Sorturl, the third network request information TokenUrl is formed, wherein the third network request information is a uniform resource locator, and the first network request information, The second network request information and the third network request information are different.

For example, the third network request information TokenUrl=http://server address/api? e=14696&method=get-code&mobile=1355408****%%%%%&token=********************

The sending unit 44 is configured to send the third network request information to the server, so that the server can calculate the second interface parameter based on the third network request information, and when determining the second interface parameter and the When the first interface parameters are consistent, the verification information is sent to the client.

After receiving the third network request information TokenUrl, the server parses the third network request information TokenUrl through the Token keyword, and obtains the value after the Token in the third network request information TokenUrl, based on the value after the Token Use the same method as the client to obtain the first interface parameter Token to obtain the second interface parameter, and determine whether the first interface parameter and the second interface parameter are consistent, if the first interface parameter and the second interface parameter are determined When the interface parameters are consistent, the verification information is sent to the client. Here, the second interface parameter is the token value calculated by the server, because the process of acquiring the second interface parameter Token1 by the server is the same as that of the client acquiring the first interface parameter Token, and details are not repeated here.

Moreover, when sending the verification information to the client, in order to avoid frequent malicious sending, the sending needs to be performed according to the preset sending times. The preset number of times of sending may be set according to actual scenarios, and the set number of times of sending in this embodiment is 10 times.

The beneficial effects brought by one or more embodiments provided by the present invention are:

The present invention provides a method and system for sending verification information. The method includes: acquiring first network request information by a client; generating second network request information and first interface parameters according to the first network request information; The first network request information and the second network request information are uniform resource locators, and the first network request information and the second network request information are different; the second network request information and the first network request information are combined The interface parameters are spliced to generate third network request information; the third network request information is sent to the server, so that the server can calculate the second interface parameter based on the third network request information, and judge the first interface parameter Whether it is consistent with the second interface parameter, if it is determined that the second interface parameter and the first interface parameter are consistent, send the verification information to the client; the first interface parameter is the same as the second interface parameter. The interface parameter is the token value; in this way, even if the user uses the script software to grab and replace the phone number in the first network request information, the verification information cannot be sent to the phone number frequently or aggressively. Even if the user randomly makes up a valid mobile phone number and continuously receives verification information, it will be ignored by the server as long as the preset number of sending times is exceeded, which reduces the probability of maliciously resending verification information, and There is also no need to enter an illegible verification code for verification, thereby improving the user's operational efficiency.

The above are only preferred embodiments of the present invention, and are not intended to limit the protection scope of the present invention. Any modifications, equivalent replacements and improvements made within the spirit and principles of the present invention shall be included in the within the protection scope of the present invention.

Claims (8)

1. a method for sending verification information, is characterized in that, is applied to client side, and described method comprises: The client obtains the first network request information; Generating second network request information and first interface parameters according to the first network request information; generating second network request information and first interface parameters according to the first network request information, including: Obtain the time parameter string in the first network request information from the dictionary; Obtain the key value key of the time parameter string, each key value corresponds to a numerical value; Sort the key values according to the preset first sorting rule, and obtain an array of key values; Using the mapping relationship between the key value and the numerical value to convert the key value array into a string of the numerical value; The string of the numerical value is spliced with the server address to obtain the second network request information; Obtain the first interface parameter from the second network request information by using a symmetric encryption algorithm; splicing the second network request information and the first interface parameter to generate third network request information; Send the third network request information to the server, so that the server parses the third network request information through the Token keyword, and obtains the value after the Token in the third network request information, based on the , calculate the second interface parameter using the same calculation method as the first interface parameter, and judge whether the first interface parameter and the second interface parameter are consistent, if it is determined that the second interface parameter and the When the first interface parameters are consistent, send verification information to the client; wherein the first network request information, the second network request information and the third network request information are uniform resource locators, and the The first network request information, the second network request information and the third network request information are different; the first interface parameter and the second interface parameter are token values. 2. The method according to claim 1, wherein the obtaining the first interface parameter from the second network request information by using a symmetric encryption algorithm comprises: Parse the second network request information to obtain the server address and the first query string; Sort the parameters in the first query string according to a preset second sorting rule to form a second query string; generating fourth network request information according to the second query string; Using a symmetric algorithm to generate summary information based on the fourth network request information; encrypting the digest information; The plaintext information of the preset key and the encrypted digest information are spliced to form the first interface parameter. 3. A method for sending verification information, wherein the method comprises: The client obtains the first network request information; Generating second network request information and first interface parameters according to the first network request information; generating second network request information and first interface parameters according to the first network request information includes: obtaining the first network request information from a dictionary The time parameter string in the network request information; Obtain the key value key of the time parameter string, each key value corresponds to a numerical value; Sort the key values according to the preset first sorting rule, and obtain an array of key values; Using the mapping relationship between the key value and the numerical value to convert the key value array into a string of the numerical value; The string of the numerical value is spliced with the server address to obtain the second network request information; Obtain the first interface parameter from the second network request information by using a symmetric encryption algorithm; splicing the second network request information and the first interface parameter to generate third network request information, and sending the third network request information to the server; The server parses the third network request information through the Token keyword, obtains the value after the Token in the third network request information, and uses the same calculation method as the first interface parameter based on the value after the Token Calculate the second interface parameter, determine whether the first interface parameter is consistent with the second interface parameter, and if it is determined that the first interface parameter and the second interface parameter are consistent, send verification information to the client; in, The first network request information, the second network request information and the third network request information are uniform resource locators, and the first network request information, the second network request information and the third network request information The network request information is different; the first interface parameter and the second interface parameter are token values. 4 . The method according to claim 3 , wherein when the server sends the verification information to the client, the sending is performed according to a preset number of times of sending. 5 . 5. A client, characterized in that the client comprises: an obtaining unit, configured to obtain the first network request information; a first generation unit, configured to generate second network request information and first interface parameters according to the first network request information; the first generation unit includes: a first obtaining subunit, used for obtaining the time parameter string in the first network request information from the dictionary; Obtain the key value key of the time parameter string, each key value corresponds to a numerical value; Sort the key values according to the preset first sorting rule, and obtain an array of key values; a conversion subunit, configured to convert the key value array into a string of the numerical value by utilizing the mapping relationship between the key value and the numerical value; A splicing subunit, for splicing the string of the numerical value and the server address to obtain the second network request information; a second obtaining subunit, configured to obtain the first interface parameter from the second network request information by using a symmetric encryption algorithm; a second generating unit, configured to generate third network request information according to the second network request information and the first interface parameter; A sending unit, configured to send the third network request information to a server, so that the server parses the third network request information through the Token keyword, and obtains the value after the Token in the third network request information, Based on the value after the Token, the second interface parameter is calculated using the same calculation method as the first interface parameter, and when it is determined that the second interface parameter is consistent with the first interface parameter, the client is notified to the client. Sending verification information; wherein the first network request information, the second network request information and the third network request information are uniform resource locators, and the first network request information, the second network request information The information is different from the third network request information; the first interface parameter and the second interface parameter are token values. 6. The client according to claim 5, wherein the second obtaining subunit obtains the first interface parameter from the second network request information by using a symmetric encryption algorithm, comprising: Parse the second network request information to obtain the server address and the first query string; Sort the parameters in the first query string according to a preset second sorting rule to form a second query string; generating fourth network request information according to the second query string; Using a symmetric algorithm to generate summary information based on the fourth network request information; encrypting the digest information; The plaintext information of the preset key and the encrypted digest information are spliced to form the first interface parameter. 7. A system for sending verification information, wherein the system comprises: The client is used to obtain the first network request information; generate the second network request information and the first interface parameter according to the first network request information; generate the second network request information and the first interface parameter by splicing The third network requests information, and sends the third network request information to the server; The client is specifically used for: The generating of the second network request information and the first interface parameter according to the first network request information includes: Obtain the time parameter string in the first network request information from the dictionary; Obtain the key value key of the time parameter string, each key value corresponds to a numerical value; Sort the key values according to the preset first sorting rule, and obtain an array of key values; Using the mapping relationship between the key value and the numerical value to convert the key value array into a string of the numerical value; The string of the numerical value is spliced with the server address to obtain the second network request information; Obtain the first interface parameter from the second network request information by using a symmetric encryption algorithm; The server is configured to parse the third network request information through the Token keyword, and obtain the value after the Token in the third network request information, and use the same parameter as the first interface based on the value after the Token. The calculation method calculates the second interface parameter, judges whether the first interface parameter is consistent with the second interface parameter, and if it is determined that the first interface parameter and the second interface parameter are consistent, send a message to the client Verification information; wherein the first network request information, the second network request information and the third network request information are uniform resource locators, and the first network request information, the second network request information and the third network request information; the first interface parameter and the second interface parameter are token values. 8 . The system according to claim 7 , wherein when the server sends the verification information to the client, the sending is performed according to a preset number of times of sending. 9 .

Images