Communication method based on mobile application, server and client

Abstract

The invention provides a communication method based on a mobile application, a server and a client. The method comprises the following steps: receiving a current session key acquisition request sent by the client, wherein the current session key acquisition request comprises a first encrypted ciphertext, and the first encrypted ciphertext is generated by the client by using a RSA encryption algorithm to encrypt a randomly generated first encryption factor; generating a current session key according to the first encrypted ciphertext and a randomly generated second encryption factor; using an AES encryption algorithm to encrypt the current session key to generate a ciphertext of the current session key; and sending current session key acquisition response to the client, wherein the current session key acquisition response comprises the ciphertext of the current session key, so that after decrypting the ciphertext of the current session key, during the current session, the client uses the current session key as a symmetric key, uses a preset value as a vector and uses the AES encryption algorithm to encrypt a request message needing to be encrypted.

Description

technical field [0001] The embodiments of the present invention relate to the technical field of mobile communication, and in particular to a communication method based on mobile applications, a server and a client. Background technique [0002] With the rapid development of mobile terminal Internet and smart mobile terminals, mobile applications installed on smart mobile terminals are also increasing. While mobile applications bring convenience to users, attackers can bring major security risks to users by stealing user privacy or changing message content during mobile application communication. [0003] In the prior art, in order to protect the message security in the communication process of the mobile application, a method of encrypting the message is adopted. The method for encrypting the message includes using a symmetric encryption algorithm or an asymmetric encryption algorithm to encrypt the message. [0004] When a symmetric encryption algorithm is used for packe...

AI Technical Summary

Problems solved by technology

[0004] When the symmetric encryption algorithm is used to encrypt the message, since the client needs to preset the key, after the client is cracked by the attacker, the attacker can obtain the key to imitate the encrypted message, which cannot protect the security of the message

When an asymmetric algorithm is used to encrypt the message, the encryption efficiency is low, and since the public key and private key of the asymmetric algorithm are preset, there is a risk of replay attack

Images