CN115396153A - Data communication method, computer equipment and storage medium - Google Patents

Abstract

The invention discloses a data communication method, server and computer equipment. The method includes: executing by the server, acquiring the identification information of the client, and generating a unique asymmetrically encrypted data corresponding to the client according to the identification information of the client. Public key and private key, and further send the generated public key to the client, and obtain the message information encrypted by the public key fed back by the client, because only the server knows the public key and private key corresponding to the client , so after obtaining the message information of the client, the message information can be directly decrypted according to the private key, and the symmetric encryption key of the client in the message information can be accurately obtained, and after obtaining the key, according to the key The response message is encrypted and sent to the client for response, and the key is stored for subsequent data communication with the client based on the key.

Description

A data communication method, computer equipment and storage medium

technical field

The present invention relates to the technical field of communication, in particular to a data communication method, computer equipment and a storage medium.

Background technique

At present, when enterprises need to go to the bank for docking business such as financial settlement and salary method, they often need to use various security hardware or software to perform multiple information entry to ensure information security. At the same time, this method of connecting enterprises and banks also has cumbersome operation steps, which further leads to the problem of low work efficiency. Therefore, it is urgent to propose a safe method for direct connection between enterprises and banks.

Contents of the invention

Therefore, in order to solve the deficiencies of the prior art, embodiments of the present invention provide a data communication method, device and computer equipment.

According to the first aspect, the embodiment of the present invention discloses a data communication method, including: executed by the server, including: acquiring identification information of the client;

Generate public and private keys for asymmetric encryption based on identification information;

Send the public key to the client;

Obtain the message information encrypted by the public key fed back by the client;

Use the private key to decrypt the message information to obtain the symmetric encryption key sent by the client, and store the key according to the identification information, so as to send the response message encrypted with the key to the client.

Optionally, the message information includes the message header and the message body, and the private key is used to decrypt the message information to obtain the symmetric encryption key sent by the client, which specifically includes:

Determine the message type of the message body according to the message header;

According to the message type, use the private key corresponding to the message information to decrypt the message body to obtain the symmetric encryption key sent by the client, where the client only uses the public key to encrypt the message body.

Optionally, the server includes a plurality of processors, and after decrypting the message body with a private key corresponding to the message ID according to the message ID to obtain the symmetric encryption key sent by the client, the method further includes:

According to the message type, the service corresponding to the message body is sent to the corresponding processor for processing.

According to the second aspect, the embodiment of the present invention also discloses a data communication method executed by a client, including: acquiring identification information of the client;

Generate a symmetric encryption key based on the identification information;

Obtain the public key sent by the server;

Use the public key to encrypt the key to obtain message information;

Send the message information to the server;

After obtaining the response message fed back by the server according to the message information, the key is stored so as to encrypt the message body according to the key.

Optionally, the message information includes a message header and a message body, and the public key corresponding to the identification information is used to encrypt the key to obtain the message information, which specifically includes:

Use the public key to encrypt the key to obtain the text of the message;

Determine the message header according to the identification information and the message body;

According to the message body and the message header, the message information is obtained.

Optionally, the identification information includes a client ID and a client process,

Every preset time, the client generates a symmetric encryption key according to the client ID and the client process, so that the key can be encrypted according to the public key sent by the server to obtain new message information.

According to the third aspect, the embodiment of the present invention also discloses a server, including: at least one processor; and a memory connected in communication with the at least one processor; wherein, the memory stores instructions that can be executed by the at least one processor, the instruction Executed by at least one processor, so that at least one processor executes the steps of the data communication method according to the first aspect or any optional implementation manner of the first aspect.

According to the fourth aspect, the embodiment of the present invention also discloses a computer-readable storage medium, on which a computer program is stored. When the computer program is executed by the server, the data according to the first aspect or any optional implementation manner of the first aspect can be realized. The steps of the communication method.

According to the fifth aspect, the embodiment of the present invention also discloses a computer device, including: at least one processor; and a memory connected in communication with the at least one processor; wherein, the memory stores instructions executable by the at least one processor, The instructions are executed by at least one processor, so that the at least one processor executes the steps of the data communication method according to the second aspect or any optional implementation manner of the second aspect.

According to the fifth aspect, the embodiment of the present invention also discloses a computer-readable storage medium, on which a computer program is stored. When the computer program is executed by a computer device, the second aspect or any optional implementation manner of the second aspect can be realized. The steps of the data communication method.

The technical solution of the present invention has the following advantages:

The data communication method, device and computer equipment provided by the present invention are applied to the server to obtain the identification information of the client, and after generating an asymmetrically encrypted public key and private key according to the identification information, the public key is sent to the client to further obtain the client The message information that is encrypted by the public key fed back by the client, and finally the message information is decrypted by the private key to obtain the symmetric encryption key sent by the client, and the key is stored according to the identification information, so as to send the message to the client Send the response message encrypted with the key.

In this way, the identification information of the client is obtained, and the unique asymmetric encrypted public key and private key corresponding to the client can be generated according to the identification information of the client, and the generated public key is further sent to the client, and obtained The client feeds back the message information encrypted according to the public key. Since the public key and private key corresponding to the client are only known by the server, after obtaining the message information of the client, the message information can be encrypted according to the private key. Perform direct decryption, accurately obtain the client's symmetric encryption key in the message information, and after obtaining the key, encrypt the response message according to the key, send it to the client for response, and store the key for In the subsequent data communication with the client according to this key.

Description of drawings

In order to more clearly illustrate the specific implementation of the present invention or the technical solutions in the prior art, the following will briefly introduce the accompanying drawings that need to be used in the specific implementation or description of the prior art. Obviously, the accompanying drawings in the following description The drawings show some implementations of the present invention, and those skilled in the art can obtain other drawings based on these drawings without any creative work.

Fig. 1 is a flowchart of a specific example of a data communication method in an embodiment of the present invention;

Fig. 2 is the flowchart of a specific example of the data communication system in the embodiment of the present invention;

FIG. 3 is a flowchart of a specific example of a data communication method in an embodiment of the present invention;

FIG. 4 is a schematic diagram of a specific example of a data communication method in an embodiment of the present invention;

FIG. 5 is a flowchart of a specific example of a data communication method in an embodiment of the present invention;

FIG. 6 is a flowchart of a specific example of a data communication method in an embodiment of the present invention;

FIG. 7 is an interactive schematic diagram of a specific example of a data communication system in an embodiment of the present invention;

FIG. 8 is a functional block diagram of a specific example of a data communication device in an embodiment of the present invention;

FIG. 9 is a functional block diagram of a specific example of a data communication device in an embodiment of the present invention;

Fig. 10 is a specific example diagram of computer equipment in the embodiment of the present invention;

Fig. 11 is a diagram of a specific example of computer equipment in the embodiment of the present invention.

Detailed ways

The technical solutions of the present invention will be clearly and completely described below in conjunction with the accompanying drawings. Apparently, the described embodiments are some of the embodiments of the present invention, but not all of them. Based on the embodiments of the present invention, all other embodiments obtained by persons of ordinary skill in the art without making creative efforts belong to the protection scope of the present invention.

In the description of the present invention, it should be noted that the terms "center", "upper", "lower", "left", "right", "vertical", "horizontal", "inner", "outer" etc. The indicated orientation or positional relationship is based on the orientation or positional relationship shown in the drawings, and is only for the convenience of describing the present invention and simplifying the description, rather than indicating or implying that the referred device or element must have a specific orientation, or in a specific orientation. construction and operation, therefore, should not be construed as limiting the invention. In addition, the terms "first", "second", and "third" are used for descriptive purposes only, and should not be construed as indicating or implying relative importance.

In the description of the present invention, it should be noted that unless otherwise specified and limited, the terms "installation", "connection" and "connection" should be understood in a broad sense, for example, it can be a fixed connection or a detachable connection. Connected, or integrally connected; it can be mechanically or electrically connected; it can be directly connected, or indirectly connected through an intermediary, or it can be the internal communication of two components, which can be wireless or wired connect. Those of ordinary skill in the art can understand the specific meanings of the above terms in the present invention in specific situations.

In addition, the technical features involved in the different embodiments of the present invention described below may be combined with each other as long as there is no conflict with each other.

Aiming at the technical problems mentioned in the background technology, the embodiment of the present application provides a data communication method, as shown in FIG. 1 for details. FIG. 1 is a schematic flowchart of a data communication method provided by the embodiment of the present invention. Before introducing the implementation steps of the method, one of the data communication systems to which the method is applicable is first described. As shown in FIG. 2 , it is a schematic diagram of an application scenario of a specific embodiment of the present invention. In the embodiment of the present invention, the data communication system can be applied in the environment of direct connection between banks and enterprises, wherein the server is the bank server in the environment of direct connection between the bank and the enterprise, and the client is various enterprises that have business dealings with the bank, etc. , the client in the embodiment of the present invention is any one of the clients in the direct connection environment of the bank and the enterprise. In the following related embodiments, the direct connection environment between a bank and an enterprise is taken as an example for introduction.

The following describes the specific implementation process of each module of the data communication system.

Specifically, as shown in FIG. 1, the data communication method includes the following steps:

Step 101, acquire identification information of a client.

Exemplarily, the identification information of the client is data that can represent the identity information of the client, and specifically may be information such as an application ID of the client. For example, the bank's server will pre-store the application ID of the bank and the enterprise that has a cooperative relationship, or receive information such as the application ID sent by the corresponding client. The premise of receiving the application ID is to establish a cooperative relationship with the bank. The embodiment of the present invention does not limit the means for obtaining the identification information, and those skilled in the art can make adjustments according to actual conditions.

Step 102, generate an asymmetric encrypted public key and private key according to the identification information.

Exemplarily, after obtaining the identification information of the client, the server generates an asymmetrically encrypted public key and private key uniquely corresponding to the identification information according to the identification information. For example, the identification information of the client is 14536, and the corresponding public key and private key are generated according to the identification information 14536. The generated public key and private key include the content of the identification information. Limitations can be determined by those skilled in the art according to actual conditions. Preferably, in order to further ensure the security of the public key, a five-digit random number can be randomly generated, and a corresponding public key and private key can be generated according to the identification information and the random number, the public key and the private key include the identification information and the random number, Therefore, the public key and the private key uniquely correspond to the identification information, and are more secure and difficult to be cracked.

Step 103, sending the public key to the client.

Step 104, obtaining message information fed back by the client and encrypted with the public key.

Exemplarily, after the public key and the private key are obtained according to the identification information, the public key is sent to the client, and message information encrypted by the client using the public key is obtained. The sending of the public key and the obtaining of message information can both be sent and obtained through the socket connection.

Step 105, use the private key to decrypt the message information, obtain the symmetric encryption key sent by the client, and store the key according to the identification information, so as to send a response message encrypted with the key to the client later.

For example, since only the server has the private key corresponding to the public key, after obtaining the message information, the server can decrypt the message information according to the private key to obtain the corresponding key sent by the client, And store the key in the local memory, and the subsequent server can decrypt it according to the key stored in the local memory.

In a specific embodiment, the message information includes a message header and a message body. In step 105, the private key is used to decrypt the message information to obtain the implementation method of the symmetric encryption key sent by the client, as shown in FIG. 3, specifically including the following steps:

Step 1051, determine the message identifier of the message body according to the message header.

For example, dividing the message information into the message header and the message body can greatly improve the problem of poor data communication performance caused by the large data packet of the message information in the data communication process, shorten the data access delay, and quickly Realize the data communication and consistency processing between the server and the client.

By identifying the content corresponding to each byte in the message header, the message identifier in the message header is obtained, where the message identifier is the identification information of the client sending the message. As shown in FIG. 4 , the message header may include encryption type, application process ID, application ID, message type, text length and time stamp. When identifying the message identifier, the content of each byte in the message header is compared with the preset type to obtain the corresponding message identifier. In the embodiment of this application, the encryption type can be symmetric encryption and asymmetric encryption; the message type can be a registration message or a remote call message; the application ID represents the identity information of the client; the application process ID can represent the actual running process of the client, When deploying two identical clients in the same environment, if the application ID of the client cannot be identified, they can be distinguished according to the application process ID; the text length is set according to the length of the message body, when the message body occupies a total When it is 128 bytes, the text length displays 128 bytes; the timestamp indicates the time information when the message information is generated.

Step 1052, according to the message identifier, use the private key corresponding to the message information to decrypt the message body to obtain the symmetric encryption key sent by the client, wherein the client only uses the public key to encrypt the message body.

For example, in the process of encrypting the message information, the client only encrypts the message body and does not encrypt the message header, so that the server can directly identify the message after obtaining the message information. The content of the header of the message, so as to obtain the corresponding message identifier. Further, according to the message ID, select the key corresponding to the message ID from the local storage to decrypt the message body, and use the key to encrypt the corresponding response message as required, and the response message can also be sent through the socket connection. The message is sent to the client.

After obtaining the message identifier, the server can quickly and accurately extract information about the message body according to the information in the message header. For example, during subsequent data communication, the server can quickly obtain the client ID and client process according to the application ID and application process ID in the message header, and determine the corresponding symmetric encryption key, encryption algorithm, and The specific service type of the message information is determined according to the message type of the message header.

Further, the server includes multiple processors, and after obtaining the key, the method further includes: according to the message identifier, sending the service corresponding to the message text to the corresponding processor for processing. The data communication time and processing time in the data communication process are further accelerated, so that the corresponding data is answered or transmitted almost without waiting.

In this way, the identification information of the client is obtained, and the unique asymmetric encrypted public key and private key corresponding to the client can be generated according to the identification information of the client, and the generated public key is further sent to the client, and obtained The client feeds back the message information encrypted according to the public key. Since the public key and private key corresponding to the client are only known by the server, after obtaining the message information of the client, the message information can be encrypted according to the private key. Perform direct decryption, accurately obtain the client's symmetric encryption key in the message information, and after obtaining the key, encrypt the response message according to the key, send it to the client for response, and store the key for In the subsequent data communication with the client according to this key.

Corresponding to the above method embodiment, the embodiment of the present invention also provides a data communication method, as shown in FIG. 5, executed by the client,

Step 501, acquire the identification information of the client.

Exemplarily, when acquiring the identification information of the client, the client queries its own application ID and other information as corresponding identification information. The specific method of querying its own application ID can be obtained by querying the corresponding file inside the client. This application implements This example does not limit the specific manner of obtaining the client identification information, and those skilled in the art can make adjustments according to actual conditions.

Step 502, generate a symmetric encryption key according to the identification information.

Exemplarily, after the identification information is obtained, a symmetric encryption key uniquely corresponding to the identification information is determined according to the identification information, and after the key is obtained, the message body is encrypted according to the key during data transmission. For example, when the identification information is A, the corresponding public key and private key are generated according to the identification information A, and the generated public key and private key include the content of the identification information. The limit can be determined by those skilled in the art according to the actual situation. Preferably, in order to further ensure the security of the public key, a random number B can be randomly generated, and a symmetrically encrypted key "A+B" can be obtained according to A and B, wherein the specific content of "A+B" is not limited, Those skilled in the art can adjust the method of generating the key and the form of the final key according to the actual situation.

Step 503, obtain the public key sent by the server.

Step 504, using the public key to encrypt the key to obtain message information;

Exemplarily, the server generates an asymmetrically encrypted public key and private key according to the identification information of the client, and the client obtains the public key sent by the server through a socket connection. After obtaining the public key of the server, use the public key to encrypt the symmetric encryption key generated by the client in step 402 to obtain message information.

In a specific embodiment, when the message information is generated, the message information includes the message header and the message body, and the public key corresponding to the identification information is used to encrypt the key to obtain the message information, as shown in Figure 6 , specifically include:

Step 5041, use the public key to encrypt the key to obtain the text of the message.

Step 5042, determine the header of the message according to the identification information and the message body.

For example, in the process of encrypting the key with the public key, the key is the corresponding plaintext data. After encrypting the plaintext data with the public key, the ciphertext data is obtained. At this time, the ciphertext data is the text of the message . After obtaining the message body, fill in the content of the message header in real time according to the client's information, such as the client's application process ID, application ID, the length of the message obtained from the message body, and the timestamp when the message body was generated. These filled information together form the header of the message.

Step 5043, obtain message information according to message body and message header.

Exemplarily, after obtaining the message body and the message header, the message body and the message header are used to obtain the message information, so that the server can directly and quickly obtain the relevant information of the message body according to the contents of the message header , and further realize the rapid processing of the content of the message body. The format and content of the message header and positive correlation of the message are shown in FIG. 4 . For the detailed content in FIG. 4 , refer to the content in the above-mentioned embodiments, which will not be repeated here.

Step 505, sending the message information to the server.

Step 506: After obtaining the response message fed back by the server according to the message information, store the key so as to encrypt the message body according to the key.

Exemplarily, after obtaining the message information, send the message information to the server through the socket connection, and after obtaining the message information, the server will feed back a response message corresponding to the message information according to the message information. For example, when the message information is a registration message, the registration in the content of the response message is successful; In another case, when the server obtains the message information, the identification information of the corresponding client does not meet the requirements of the server.

After receiving the response message sent by the server, store the symmetric encryption key generated by the client before, and then encrypt the message body directly with the symmetric encryption key when performing data transmission or business transactions with the server Post-transmission, which improves the speed of data interaction and also ensures the security of data during transmission.

In an optional embodiment, the identification information includes the client ID and the client process. Every preset time, the client generates a symmetric encryption key according to the client ID and the client process, so that the subsequent The public key encrypts the key to obtain new message information.

Exemplarily, the identification information of the client includes a client ID and a client process, the client ID is the application ID of the client, the client process is the application process ID of the client, and the client process is the time when the client is actually running or progress information. In order to ensure the real-time and security of the symmetric encryption key, according to the client ID and client process, a new key is generated every preset time, which is used to encrypt the message information before the next key is generated. key, wherein the preset time can be half an hour or one hour, and the specific time interval of the preset time is not limited, and those skilled in the art can determine it according to the actual situation.

In this way, the identification information of the client is obtained, and the unique symmetric encryption key corresponding to the client can be generated according to the identification information of the client, and the key is further encrypted according to the asymmetric encryption public key obtained from the server. Encrypt, get the message information, and send the message information to the server for data. After obtaining the response message sent by the server, it can be determined that the client has successfully registered on the server, and subsequent data communication can be encrypted according to symmetric The encrypted key is encrypted, which greatly improves the efficiency of data transmission and also ensures the security of data during transmission.

On the basis of the above data communication method, a specific example is used to explain the interaction process of the data communication method applied to the client and the server, as shown in Figure 7, which shows the detailed interaction process between the client and the server.

client:

1. At startup, the key registration process will be started, and a symmetric encryption key will be generated first according to the symmetric encryption algorithm.

2. Generate a key registration message, set the symmetric encryption key generated in 1 as the body of the message, set the message type as registration key message and the encryption type as asymmetric encryption, and fill in other message header information (application process ID, application ID, packet length, timestamp, etc.).

3. According to the encryption type set in the message, use the asymmetric encryption public key agreed with the server to encrypt the message body and overwrite the message body with the message body, and finally set the body length of the message header according to the length of the ciphertext .

4. Use the socket connection to send the registration key request message to the server.

Server:

5. After receiving the message, use the agreed asymmetric encryption private key to decrypt the message according to the message encryption type, and submit it to the corresponding processor for processing according to the message type.

6. After the key registration processor receives the message, it will extract the application process ID, application ID and IP of the other party in the socket connection in the message header to generate a key according to a certain algorithm, and use the generated key to save the key in the text. Symmetric key.

7. The key registration processor will generate a registration key response message, use the application process ID and application ID in the request message as the application process ID and application ID of the message, and set the "registration successful" prompt in the message body information, and set the message type to registration key response message and the encryption type to symmetric encryption.

8. The server uses the corresponding encryption algorithm to encrypt the text of the message according to the encryption type of the message and resets the length of the text of the message header. If the algorithm is symmetric encryption, according to the application process ID, application ID and socket The IP of the other party in the connection generates a key according to a certain algorithm to obtain the corresponding encryption key.

9. The server sends the response message to the corresponding client through the socket connection established when the client sends the registration key request message.

client:

10. The client will use the locally generated symmetric encryption key to verify the response message.

11. After the verification of the response message is successful, the client will save the symmetric encryption key generated in step 1 in the local cache.

12. The client will execute 1-11 regularly to ensure the timeliness of the symmetric encryption key.

13. When the client triggers a service call, it will generate a service request message based on the service data, and set the message type to remote call message and the encryption type to symmetric encryption.

14. According to the message encryption type, during symmetric encryption, the symmetric encryption key will be obtained from the local cache, and the key will be used to encrypt the message body and replace the text length of the message header. If it cannot be obtained from the local cache For the symmetric encryption key, repeat steps 1-11 until the symmetric encryption key can be obtained from the local cache.

15. Use the socket connection to send the request message to the server.

16. After receiving the message, the server extracts the application process ID and application ID from the message header and the IP of the other party from the socket connection according to the message encryption type during symmetric encryption, and uses these three information according to the algorithm Generate a key, use the key to obtain the corresponding symmetric encryption key to decrypt the message body, and submit it to the corresponding processor for processing according to the message type.

17. After receiving the service request message, the service processor processes the service data according to the service logic.

18. After processing the business request, the business processor will generate a business response message, set the response data into the message body, fill in the message header, and use the application process ID and application ID in the request message as the message Application process ID, application ID, and set the message type to business response message and the encryption type to symmetric encryption.

19. The server uses the corresponding encryption algorithm to encrypt the message text according to the encryption type of the message and resets the text length of the message header. If the algorithm is symmetric encryption, the application process ID, application ID and socket connection in the message header are notified. The IP of the other party generates a key according to a certain algorithm to obtain the corresponding encryption key.

20. The server sends the response message to the corresponding client through the socket connection established when the client sends the request message.

21. After receiving the response message, the client will decrypt and verify the message. After the verification is passed, it will return the response data in the message body to the upper business processing layer for processing.

The above are the specific embodiments of the data communication method of the present application. The following describes other embodiments provided by the present application. For details, refer to the following.

The embodiment of the present invention also discloses a data communication device, as shown in Figure 8, the device includes:

The first acquiring module 801 is configured to acquire the identification information of the client.

An asymmetric key generation module 802, configured to generate an asymmetrically encrypted public key and private key according to the identification information;

The first sending module 803 is configured to send the public key to the client;

The second acquiring module 804 is configured to acquire the message information fed back by the client and encrypted with the public key;

The decryption module 805 is configured to use the private key to decrypt the message information, obtain the symmetric encryption key sent by the client, and store the key according to the identification information, so as to send a response message encrypted with the key to the client. arts.

Optionally, the message information includes a message header and a message body, and the decryption module 805 is specifically used to: determine the message identifier of the message body according to the message header;

According to the message identifier, use the private key corresponding to the message identifier to decrypt the message body to obtain the symmetric encryption key sent by the client, wherein the client only uses the public key to encrypt the message body.

Optionally, the server includes multiple processors, and after obtaining the key, the device is further configured to: send the service corresponding to the message text to the corresponding processor for processing according to the message identifier.

By executing the device, the identification information of the client is obtained, and a unique asymmetric encrypted public key and private key corresponding to the client can be generated according to the identification information of the client, and the generated public key is further sent to the client, and Obtain the message information that is encrypted according to the public key fed back by the client. Since the public key and private key corresponding to the client are only known by the server, after obtaining the message information of the client, the message can be encrypted according to the private key. The information is directly decrypted, and the client's symmetric encryption key in the message information is accurately obtained, and after the key is obtained, the response message is encrypted according to the key, and sent to the client for response, and the key is stored at the same time In order to carry out data communication with the client based on this key in the future.

The embodiment of the present invention also discloses a data communication device, executed by a client, as shown in FIG. 9 , including:

The third obtaining module 901 is configured to obtain identification information of the client.

The symmetric encryption key generation module 902 is configured to generate a symmetric encryption key according to the identification information.

The fourth obtaining module 903 is configured to obtain the public key sent by the server.

The encryption module 904 is configured to encrypt the key with the public key to obtain message information.

The second inventive module 905 is configured to send message information to the server.

The storage module 906 is configured to store the key after obtaining the response message fed back by the server according to the message information, so as to encrypt the message body according to the key.

Optionally, the message information includes a message header and a message body, and the encryption module 904 is specifically used for:

Use the public key to encrypt the key to obtain the text of the message;

Determine the message header according to the identification information and the message body;

According to the message body and the message header, the message information is obtained.

Optionally, the identification information includes the client ID and the client process, and the device is also used for: every preset time, the client generates a symmetric encryption key according to the client ID and the client process, so that the subsequent information sent by the server Encrypt the key with the public key to obtain new message information.

By executing the device, the identification information of the client is obtained, and a symmetrically encrypted key is generated according to the identification information, so that the key corresponds to the identification information of the client one by one; further, the public key sent by the server is obtained, and the public key is used to Encrypt the key to obtain the message information, send the message information to the server for registration, and obtain the response message fed back by the server according to the message information, and then use the key pair for data transmission or business transactions Data encryption, which improves the speed of data transmission and further improves the security of data.

The embodiment of the present invention also provides a computer device. As shown in FIG. 10, the computer device may include a processor 1001 and a memory 1002, wherein the processor 1001 and the memory 1002 may be connected through a bus or in other ways. In FIG. Take the bus connection as an example.

The processor 1001 may be a central processing unit (Central Processing Unit, CPU). The processor 1001 may also be other general-purpose processors, digital signal processors (Digital Signal Processor, DSP), application-specific integrated circuits (Application Specific Integrated Circuit, ASIC), field-programmable gate arrays (Field-Programmable Gate Array, FPGA) or Other chips such as programmable logic devices, discrete gate or transistor logic devices, discrete hardware components, or combinations of the above-mentioned types of chips.

As a non-transitory computer-readable storage medium, the memory 1002 can be used to store non-transitory software programs, non-transitory computer-executable programs and modules, such as program instructions/modules corresponding to the data communication method in the embodiment of the present invention. The processor 1001 executes various functional applications and data processing of the processor by running the non-transitory software programs, instructions and modules stored in the memory 1002, that is, implements the data communication method in the above method embodiments.

The memory 1002 may include a program storage area and a data storage area, wherein the program storage area may store an operating system and an application program required by at least one function; the data storage area may store data created by the processor 1001 and the like. In addition, the memory 1002 may include a high-speed random access memory, and may also include a non-transitory memory, such as at least one magnetic disk storage device, a flash memory device, or other non-transitory solid-state storage devices. In some embodiments, the storage 1002 may optionally include storages that are remotely located relative to the processor 1001, and these remote storages may be connected to the processor 1001 through a network. Examples of the aforementioned networks include, but are not limited to, the Internet, intranets, local area networks, mobile communication networks, and combinations thereof.

One or more modules are stored in the memory 1002, and when executed by the processor 1001, execute the data communication method in the embodiment shown in FIG. 1 .

The specific details of the above computer device can be understood by correspondingly referring to the corresponding description and effects in the embodiment shown in FIG. 1 , and will not be repeated here.

Those skilled in the art can understand that all or part of the processes in the methods of the above-mentioned embodiments can be completed by instructing related hardware through computer programs, and the programs can be stored in a computer-readable storage medium. , may include the flow of the embodiments of the above-mentioned methods. Wherein, the storage medium may be a magnetic disk, an optical disk, a read-only memory (Read-Only Memory, ROM), a random access memory (Random Access Memory, RAM), a flash memory (Flash Memory), a hard disk (Hard Disk Drive) , abbreviation: HDD) or a solid-state hard drive (SolID-State Drive, SSD), etc.; the storage medium may also include a combination of the above-mentioned types of memories.

The embodiment of the present invention also provides a computer device. As shown in FIG. 11, the computer device may include a processor 1101 and a memory 1102, wherein the processor 1101 and the memory 1102 may be connected through a bus or in other ways. In FIG. Take the bus connection as an example.

The processor 1101 may be a central processing unit (Central Processing Unit, CPU). The processor 1101 may also be other general-purpose processors, digital signal processors (Digital Signal Processor, DSP), application-specific integrated circuits (Application Specific Integrated Circuit, ASIC), field-programmable gate arrays (Field-Programmable Gate Array, FPGA) or Other chips such as programmable logic devices, discrete gate or transistor logic devices, discrete hardware components, or combinations of the above-mentioned types of chips.

The memory 1102, as a non-transitory computer-readable storage medium, can be used to store non-transitory software programs, non-transitory computer-executable programs and modules, such as program instructions/modules corresponding to the data communication method in the embodiment of the present invention. The processor 1101 executes various functional applications and data processing of the processor by running the non-transitory software programs, instructions and modules stored in the memory 1102, that is, implements the data communication method in the above method embodiments.

The memory 1102 may include a program storage area and a data storage area, wherein the program storage area may store an operating system and an application program required by at least one function; the data storage area may store data created by the processor 1101 and the like. In addition, the memory 1102 may include a high-speed random access memory, and may also include a non-transitory memory, such as at least one magnetic disk storage device, a flash memory device, or other non-transitory solid-state storage devices. In some embodiments, the storage 1102 may optionally include storages that are remotely located relative to the processor 1101, and these remote storages may be connected to the processor 1101 through a network. Examples of the aforementioned networks include, but are not limited to, the Internet, intranets, local area networks, mobile communication networks, and combinations thereof.

One or more modules are stored in the memory 1102, and when executed by the processor 1101, execute the data communication method in the embodiment shown in FIG. 1 .

The specific details of the above computer device can be understood by correspondingly referring to the corresponding description and effects in the embodiment shown in FIG. 1 , and will not be repeated here.

Those skilled in the art can understand that all or part of the processes in the methods of the above-mentioned embodiments can be completed by instructing related hardware through computer programs, and the programs can be stored in a computer-readable storage medium. , may include the flow of the embodiments of the above-mentioned methods. Wherein, the storage medium may be a magnetic disk, an optical disk, a read-only memory (Read-Only Memory, ROM), a random access memory (Random Access Memory, RAM), a flash memory (Flash Memory), a hard disk (Hard Disk Drive) , abbreviation: HDD) or a solid-state hard drive (SolID-State Drive, SSD), etc.; the storage medium may also include a combination of the above-mentioned types of memories.

Although the embodiments of the present invention have been described in conjunction with the accompanying drawings, those skilled in the art can make various modifications and variations without departing from the spirit and scope of the present invention, and such modifications and variations all fall into the scope of the appended claims. within the limited range.

Claims (10)

1. A data communication method, performed by a server, comprising:

acquiring identification information of a client;

generating an asymmetric encrypted public key and a private key according to the identification information;

sending the public key to the client;

obtaining message information which is fed back by the client and encrypted by using the public key;

and decrypting the message information by using the private key to obtain a symmetrically encrypted key sent by the client, and storing the key according to the identification information so as to send a response message encrypted by using the key to the client later.

2. The method according to claim 1, wherein the message information includes a message header and a message body, and the decrypting the message information with the private key to obtain the symmetrically encrypted key sent by the client specifically includes:

determining the message identification of the message text according to the message header;

and decrypting the message text by using a private key corresponding to the message identification according to the message identification to obtain a symmetrically encrypted key sent by the client.

3. The method according to claim 2, wherein the server includes a plurality of processors, and after the message body is decrypted by using a private key corresponding to the message identifier according to the message identifier to obtain a symmetrically encrypted key sent by the client, the method further includes:

and sending the service corresponding to the message text to a corresponding processor for processing according to the message identifier.

4. A data communication method, performed by a client, comprising:

acquiring identification information of the client;

generating a symmetric encrypted key according to the identification information;

acquiring a public key sent by a server;

encrypting the secret key by using the public key to obtain message information;

sending the message information to the server;

and after acquiring a response message fed back by the server according to the message information, storing the key so as to encrypt the message text in the message information according to the key subsequently.

5. The method according to claim 4, wherein the message information includes a message header and a message body, and the encrypting the secret key with the public key corresponding to the identification information to obtain the message information specifically includes:

encrypting the secret key by using the public key to obtain a message text;

determining the message header according to the identification information and the message text;

and obtaining the message information according to the message text and the message header.

6. The method of claim 4, wherein the identification information comprises a client ID and a client process,

and at preset intervals, the client generates a symmetric encrypted key according to the client ID and the client process so as to encrypt the key according to a public key sent by the server subsequently to obtain new message information.

7. A server, comprising: at least one processor; and a memory communicatively coupled to the at least one processor; wherein the memory stores instructions executable by the at least one processor to cause the at least one processor to perform the steps of the data communication method of any of claims 1-3.

8. A computer-readable storage medium, on which a computer program is stored, which, when being executed by a server, carries out the steps of the data communication method according to any one of claims 1 to 3.

9. A computer device, comprising: at least one processor; and a memory communicatively coupled to the at least one processor; wherein the memory stores instructions executable by the at least one processor to cause the at least one processor to perform the steps of the data communication method of any of claims 4-6.

10. A computer-readable storage medium, on which a computer program is stored, which, when being executed by a computer device, carries out the steps of the data communication method according to any one of claims 4-6.

Images