Mobile terminal APP security interaction system and method thereof

Abstract

The invention relates to a mobile terminal APP security interaction system and method, the method comprises a secret key agreement process and a message encryption and decryption process, the secret key agreement process specifically comprises the steps that a mobile terminal initiates a request for obtaining an authorization code, and the authorization code is obtained through an APP server and an authorization center; the mobile terminal uploads an authorization code, obtains a unique ID corresponding to the mobile terminal through the business server and the authorization center, and records the unique ID in the business server; the message encryption and decryption process specifically comprises the following steps that: the mobile terminal uploads message data and initiates a message encryption request, and the APP server encrypts the message data and returns the encrypted message data to the mobile terminal; and the mobile terminal sends the encrypted message data to the business server, and the business server carries out decryption processing and message logic processing on the encrypted message data and returns corresponding response information to the mobile terminal. Compared with the prior art, the mobile terminal APP can be effectively prevented from escaping, and the interaction safety of the H5 page embedded in the mobile terminal APP is improved.

Description

technical field [0001] The invention relates to the technical field of application security, in particular to a mobile terminal APP security interaction system and a method thereof. Background technique [0002] In order to improve the convenience for users to obtain services, the H5 page of the business system is usually embedded in the mobile APP. The mobile APP can access the business system page through business configuration and display the page content on the mobile terminal. [0003] However, in practical applications, the H5 pages of the business system embedded in the mobile APP are easily invoked by scripts or malicious software, making the H5 pages of the business system run independently in an environment other than the mobile APP, that is, APP escape events occur, seriously affecting the The security of the interaction between the mobile APP and the business system. For this reason, most of the existing technologies use buried points to collect user behavior dat...

AI Technical Summary

Problems solved by technology

[0003] However, in practical applications, the H5 pages of the business system embedded in the mobile APP are easily invoked by scripts or malicious software, making the H5 pages of the business system run independently in an environment other than the mobile APP, that is, APP escape events occur, seriously affecting the The security of the interaction between the mobile APP and the business system. For this reason, most of the existing technologies use buried points to collect user behavior data, and then use big data to judge whether the current login user is a real user, so as to reduce the occurrence of APP escape events. , but the transformation cost of this method is high, the resource reuse rate is low, and due to the high number of page verification jumps, it will also affect the user experience

Images