Method for realizing safe interface calling between systems based on Internet

Abstract

Disclosed is a method for realizing safe interface calling between systems based on the Internet. A structured message body text is constructed at an interface call end. All cumbersome messages in different parameter formats are packaged into a message body in a specified format. The whole message content is encrypted, and a signature algorithm matching the demand of the interface call end is allocated for the whole message content, and thus, a message body with high scalability and high safety is formed. A compete interface call request is assembled according to the format of 'message type + message body + signature field', and is sent by an HTTP / HTTPS server. After receiving the interface call request from the client, the server (namely, an interface provider) decodes the encrypted message body and the structure, and performs signature verification on the whole message parameter body. For the whole message parameter body passing signature verification, the interface provider (the server) extracts all message parameters and feeds the message parameters back to the interface call end (the client).

Description

technical field [0001] The invention belongs to the technical field of software, and in particular relates to a method for realizing an internet-based inter-system safe calling interface. Background technique [0002] With the rapid development of Internet technology and the deep penetration of e-commerce in various fields, it has become normal for various Internet systems to learn from each other and make system calls to each other. [0003] In a typical Internet system that provides external services based on HTTP or HTTPS, the design of the interface will largely determine the promotion of the system, thereby affecting its commercial value. An excellent system interface protocol needs to adapt to ever-changing interface change requirements, and also ensure the security of interface calls to ensure the safety and reliability of user data. [0004] For general sites, the design of its interface follows the process of evolution from scratch, from simple to complex. In the ...

AI Technical Summary

Problems solved by technology

In practice, it is inevitable to encounter the following problems: 1. Difficulty in debugging; due to the cross-system, cross-company and even cross-border communication barriers between the provider and the caller of the interface, for the format of the signature source string, It often requires multiple communications and attempts, such as the order of the fields, capitalization, whether there are spaces, etc., will lead to errors that are not easy to find, resulting in failure of signature verification

It is very time-consuming to debug, and the online fault resolution cycle is also long

2. The interface is poorly scalable; once there is a slight change in the interface, such as changing the parameter name, adding or subtracting parameters, etc., all connected parties need to be notified of the matching modification and released at the same time

The difficulty and cost of smooth upgrade are extremely high

3. The security mechanism lacks a unified access method

Images