Small program dynamic authentication method and device

Abstract

A small program dynamic authentication method and device, the method includes: randomly generating an identity authentication key through a random string and saving it locally, encrypting user identification and signature information through the identity authentication key to generate identity information, and according to the identity information Generate an authentication request instruction with the identity authentication key; send the authentication request instruction to the server, and obtain the key exchange information fed back by the server; wherein, the key exchange information includes the server’s unique identification code algorithm, user The identification key value produced by the identification and authentication key; the identification key value is obtained by decrypting the secret key exchange information through the identity authentication key; the user identification in the service logic request parameter is replaced by the identification key value to generate a service A request instruction, sending the service request instruction to the server to obtain the service data fed back by the server; decrypting the service data fed back by the server through the identity authentication key to complete the service request.

Description

technical field [0001] The invention relates to the field of data security, in particular to a small program dynamic authentication method and device. Background technique [0002] The English name of the Mini Program is Mini Program, which is a lightweight app that can basically achieve all the things that the app can do. It is an application innovation that can be used without downloading and installing. The mini program realizes the dream of the application being "at your fingertips". Users can open the application through a convenient scan code or search operation. As a large number of Internet companies have successively launched open platforms for small programs, small programs have attracted developers from all walks of life, including banks, because of their lightness and traffic advantages. Due to the gradual improvement of the small program development platform and the particularity of the operating environment (running in the Internet environment, there is no nee...

AI Technical Summary

Problems solved by technology

The leak of the front-end source code of the applet means that all the interfaces interacting with the background are also exposed to the outside world, and the encryption algorithm protection fails (a symmetric encryption algorithm designed at the time). In the case of malicious attacks, it will further lead to the leakage of request parameters , business logic leakage and other risks

Images