Scheme request verification method, device and apparatus

Abstract

The invention provides a Scheme request verification method, device and apparatus and the method comprises the steps: obtaining a Scheme request of a first application for a second application; generating a first random number, and encrypting the first random number through a first identifier to obtain first encrypted information, the first identifier serving as a key, the first identifier corresponding to the terminal and the first application; encrypting the first encrypted information and the information of the first application to obtain second encrypted information; sending the Scheme request and the second encryption information to the second application, so that the second application verifies the Scheme request based on the second encryption information; receiving a response message of the Scheme request from the second application, wherein the response message carries the first encrypted information; and decrypting the first encrypted information to obtain a first decryption result, and determining a Scheme request result according to the first decryption result.

Description

technical field [0001] The present disclosure relates to the technical field of application management, and in particular to a scheme request verification method, device and equipment. Background technique [0002] Currently, the iOS URL (Uniform Resource Locator, Uniform Resource Locator) Scheme is an inter-process communication method established on the operating system, and an application program can declare its own URL Scheme to be called by an external application program. Since the URL Scheme itself cannot be exclusively used by applications, when multiple applications declare the same URLScheme, one may hijack the other's URL Scheme request. After a malicious program preemptively registers the original Scheme of the enterprise, it hijacks other applications' URL Scheme requests to normal applications, and sends the request to other devices for replay, thereby endangering the user's financial security and account security. Contents of the invention [0003] In view ...

AI Technical Summary

Problems solved by technology

Since the URL Scheme itself cannot be exclusively used by applications, when multiple applications declare the same URLScheme, one party may hijack the URL Scheme request of the other.

After a malicious program preemptively registers the original Scheme of the enterprise, it hijacks other applications' URL Scheme requests to normal applications, and sends the request to other devices for replay, thereby endangering the user's financial security and account security.

Images