Method and system for encrypting and decrypting API service data at transport layer

Abstract

The invention discloses a method for carrying out encryption and decryption on API service data on a transmission layer. A service request filter and a service response filter are respectively arranged in a container operating an API service; in a case of not influencing request and response processes of the API service in the container, an API server side intercepts a corresponding request ciphertext message and a corresponding response cleartext message respectively before a request arrives and after a response is sent out; then encryption and decryption operations are carried out according to an appointed algorithm and rule; and completion of the request and response processes is ensured, so that the request and response message data transmission layer is in a ciphertext state, and at an API client and the API server side, cleartext data can be obtained to complete service logic processing. The invention further provides a system for carrying out encryption and decryption on the API service data on the transmission layer, which comprises the API client and the API server side. The API client and the API server side carry out network communication, and the API service request filter, the API service response filter and an API service logic unit are arranged in the API server side.

Description

technical field [0001] The invention relates to the technical fields of computer technology and network data security, in particular to a method and a system for encrypting and decrypting API service data at a transport layer. Background technique [0002] At present, the client and server of Internet applications usually communicate interactively through HTTP API. In order to prevent the plaintext data of the user or server from being hijacked and tampered with during the interactive communication, the client and server will agree on a data encryption method , transmitted as encrypted ciphertext data. Usually, the client encrypts the requested plaintext data and reports it to the server in the form of ciphertext data. The server first decrypts the ciphertext message to obtain the plaintext message, and generates a plaintext response after completing the business logic processing of the server. Message, the plaintext message is encrypted according to the same encryption met...

AI Technical Summary

Problems solved by technology

The existing encryption processing method usually encrypts and decrypts the request and response for each API service separately, which has a large workload and low efficiency

Images