Encrypted communication method, system, device and medium for installing client

Abstract

The present invention provides an encrypted communication method, system, device and medium for installing a client, the method comprising the steps of: obtaining a client installation instruction generated on a browser side, generating installation request information based on the client installation instruction, and sending the installation request information to a server; after receiving the installation request information, the server obtains the installation data of the client, and encrypts the installation data in sequence using a first private key and a public key to generate encrypted data and an installation instruction, and sends the encrypted data, the public key and the installation instruction to a user device through a browser side; the user device generates a second private key based on the installation instruction using a preset method; decrypts the encrypted data to obtain the installation data and preset verification data; the user device verifies the installation data based on the preset verification data, and when the verification is successful, performs installation based on the installation data of the client; the application ensures the security and reliability of data transmission during the client installation process.

Description

Technical Field

[0001] The present invention relates to the field of computer technology, and in particular to an encryption communication method, system, device and medium for installing a client. Background Art

[0002] Due to work needs, companies need to install various work software on employees' computers. For security and management needs, many companies will restrict the permissions of managed employee computers (users do not have local administrator permissions). Most software requires administrator permissions to be installed before they can be used normally, so the installation of software needs to be authorized by authorized IT personnel. That is, employees put forward software installation requirements, and IT personnel prepare software installation packages in advance according to user requirements, make appointments with employees, and then log in to the user's computer to install the software. This makes the entire software installation process cumbersome.

[0003] On the other hand, the process of installing the client involves data communication between the server and the user's device. The traditional data transmission method is easily exploited by malicious programs. Once the installation file is replaced, the user's device will execute the unsafe installation file, resulting in a major security risk to the user's device. Summary of the invention

[0004] In view of the problems in the prior art, the purpose of the present invention is to provide an encrypted communication method, system, device and medium for installing a client, which allows users to install the client online by themselves through a browser, while ensuring the security and reliability of the client installation.

[0005] To achieve the above object, the present invention provides an encrypted communication method for installing a client, the method comprising the following steps:

[0006] S10, obtaining a client installation instruction generated on the browser side, generating installation request information associated with a client based on the client installation instruction, and sending the installation request information to the server;

[0007] S20, after receiving the installation request information, the server obtains the installation data of the client, and encrypts the installation data using the first private key and the public key in sequence to generate encrypted data and installation instructions, and sends the encrypted data, the public key and the installation instructions to the user device through the browser; the public key is generated using a random function; the first private key is generated by the server using a preset method;

[0008] S30, the user device generates a second private key based on the installation instruction using the preset method; decrypts the encrypted data using the public key and the second private key in sequence to obtain the installation data and preset verification data of the client;

[0009] S40, the user equipment verifies the installation data of the client based on the preset verification data, and when the verification succeeds, performs installation based on the installation data of the client.

[0010] Optionally, the client and the browser have attribute data respectively; the preset method is to intercept partial fields from the attribute data of the client and the attribute data of the browser, concatenate the partial fields to form a character string, replace the characters of the character string, and then intercept the character string of preset length for retention.

[0011] Optionally, the step S20 includes:

[0012] The server encrypts the installation data and preset verification data using the first private key and the public key in sequence to generate encrypted data and installation instructions.

[0013] Optionally, the step S40 includes:

[0014] When the verification succeeds, an online request is made to the server to obtain a client installation package based on the installation data of the client, and the client is installed based on the client installation package.

[0015] Optionally, the step S40 includes:

[0016] Obtain network transmission data of the encrypted data;

[0017] Based on the network transmission data of the encrypted data, obtaining an estimated download duration of the client installation package;

[0018] During the estimated download duration, when it is detected that at least two user devices in the same group have generated new identical download tasks, and two of the user devices have suspended the download task of the client installation package, then the download task of the client installation package is suspended for the remaining user devices in the group that have the identical download task.

[0019] Optionally, the method further comprises the steps of:

[0020] A client configuration file is generated on a server, all user devices belonging to the same group are controlled to access the client configuration file, and the client configuration file is executed on all user devices.

[0021] Optionally, the step S40 includes:

[0022] Obtaining system resource idle information and a historical no-operation time period of the user device, wherein the historical no-operation time period is used to represent a time period when the user device was not operated each day before the current time; the system resource idle information is obtained based on the CPU occupancy rate and memory occupancy rate of the user device;

[0023] Based on the historical no-operation time period, predicting a current no-operation time period;

[0024] Based on the user device and the client installation package, obtaining an estimated installation time for installing the client installation package;

[0025] When the system resource idle information is greater than a first preset threshold, and / or the estimated installation duration starting from the current moment is within the current no-operation time period, the client is installed.

[0026] Optionally, the method further comprises the steps of:

[0027] When the client fails to install, obtaining installation failure prompt information;

[0028] When the installation failure prompt information is within a preset installation failure range, collecting response operations made by users of at least two user devices in the same group based on the installation failure prompt information;

[0029] When the response operations corresponding to the users of the at least two user devices are the same, the response operations are executed on the remaining user devices in the group having the same installation failure prompt information to perform re-installation.

[0030] The present invention also provides an encrypted communication system for installing a client, which is used to implement the encrypted communication method for installing a client, and the system includes a browser, a server, and a user device;

[0031] The browser generates a client installation instruction, generates installation request information associated with a client based on the client installation instruction, and sends the installation request information to the server;

[0032] After receiving the installation request information, the server obtains the installation data of the client, and encrypts the installation data using the first private key and the public key in sequence to generate encrypted data and installation instructions, and sends the encrypted data, the public key and the installation instructions to the user device through the browser; the public key is generated using a random function; the first private key is generated by the server using a preset method;

[0033] Based on the installation instruction, the user device generates a second private key using the preset method; decrypts the encrypted data using the public key and the second private key in sequence to obtain the client's installation data and preset verification data; verifies the client's installation data based on the preset verification data, and when the verification is successful, performs installation based on the client's installation data.

[0034] The present invention also provides an encryption communication device for installing a client, comprising:

[0035] processor;

[0036] a memory storing executable instructions of the processor;

[0037] The processor is configured to execute any one of the steps of the above-mentioned encryption communication method for installing a client by executing the executable instructions.

[0038] The present invention also provides a computer-readable storage medium for storing a program, wherein when the program is executed by a processor, the program implements any one of the steps of the above-mentioned encryption communication method for installing a client.

[0039] Compared with the prior art, the present invention has the following advantages and outstanding effects:

[0040] The encrypted communication method, system, device and medium for installing a client provided by the present invention enable the user to complete the installation of the client only by accessing the browser, selecting or searching for the required installation software and clicking to install; the automatic acquisition and installation of the client installation are realized, and can be completed without the assistance of IT personnel; and the installation data of the client is encrypted in turn by a private key and a public key, and the installation data obtained after decryption is verified by using preset verification data, thereby ensuring the security and reliability of the client data transmission and installation process. BRIEF DESCRIPTION OF THE DRAWINGS

[0041] Other features, objectives and advantages of the present invention will become more apparent from a reading of the detailed description of non-limiting embodiments made with reference to the following accompanying drawings.

[0042] Figure 1 A schematic diagram of an encrypted communication method for installing a client disclosed in an embodiment of the present invention;

[0043] Figure 2 This is a flow chart of step S40 in an encryption communication method for installing a client disclosed in an embodiment of the present invention;

[0044] Figure 3 This is a flow chart of step S405 in an encryption communication method for installing a client disclosed in an embodiment of the present invention;

[0045] Figure 4 A schematic diagram of the structure of an encrypted communication system for installing a client disclosed in an embodiment of the present invention;

[0046] Figure 5 A schematic diagram of the structure of an encryption communication device for installing a client disclosed in an embodiment of the present invention;

[0047] Figure 6A schematic diagram of the structure of a computer-readable storage medium disclosed in one embodiment of the present invention. DETAILED DESCRIPTION

[0048] Example embodiments will now be described more fully with reference to the accompanying drawings. However, example embodiments can be implemented in a variety of forms and should not be construed as limited to the embodiments set forth herein. Rather, these embodiments are provided so that the present invention will be comprehensive and complete and fully convey the concepts of the example embodiments to those skilled in the art. The same reference numerals in the figures represent the same or similar structures, and thus their repeated description will be omitted.

[0049] like Figure 1 As shown, an embodiment of the present invention discloses an encrypted communication method for installing a client, the method comprising the following steps:

[0050] S10, obtaining the client installation instruction generated on the browser side, generating installation request information associated with a client based on the client installation instruction, and sending the installation request information to the server. Specifically, the application provides a unified software self-service installation page for users. After the user accesses the page through the browser, he can select or search for the required software and click to install it.

[0051] The browser generates a client installation instruction based on the user's selection and click operation, and then the server obtains the user's permission information based on the user login information obtained by the browser, and compares the permission information with the user's permission range stored in the database. If the permission information is within the permission range of the database, the next step is to proceed: the browser generates an installation request information associated with a client based on the client installation instruction, and sends the above installation request information to the server. The database stores the permission range of each user.

[0052] In this embodiment, the client and the browser have attribute data respectively. The attribute data of the client may include the client name and the client publishing manufacturer name. The attribute data of the browser may include the browser name and the browser login user information;

[0053] S20, after receiving the above-mentioned installation request information, the server obtains the installation data of the above-mentioned client, and encrypts the above-mentioned installation data using the first private key and the public key in sequence, generates encrypted data and installation instructions, and sends the above-mentioned encrypted data, the above-mentioned public key and the installation instructions to the user device through the browser. Specifically, the above-mentioned public key is generated using a random function. The above-mentioned first private key is generated by the server using a preset method. In this embodiment, the server encrypts the above-mentioned installation data and preset verification data using the first private key and the public key in sequence, and generates the above-mentioned encrypted data and installation instructions.

[0054] The above-mentioned preset method is to intercept some fields from the attribute data of the above-mentioned client and the attribute data of the above-mentioned browser, splice the above-mentioned partial fields to form a character string, and after the characters of the above-mentioned character string are displaced, intercept the character string of the preset length for retention. The above-mentioned random function can be implemented using the existing technology, and this application will not go into details. The above-mentioned preset verification data can be in the form of MD5 (a cryptographic hash function) or a hash code. This application does not limit this.

[0055] S30, the user device generates a second private key based on the installation instruction using the preset method; decrypts the encrypted data using the public key and the second private key in sequence to obtain the client's installation data and preset verification data.

[0056] S40, the user device verifies the installation data of the client based on the preset verification data. When the verification is successful, the installation is performed based on the installation data of the client. When the verification is unsuccessful, the installation is terminated, and a prompt message is generated and displayed on the user device. Specifically, the installation data of the client includes the second verification data. The verification can be completed by comparing the preset verification data with the second verification data to see if they are consistent. If they are consistent, it means that the verification is successful.

[0057] Among them, in this step of the present embodiment, when the verification is successful, the client installation package is obtained from the server online based on the installation data of the above client, and the client is installed based on the above client installation package. That is, the above installation data is not the installation package of the client, but only the basic installation file of the client. After executing the installation data, it is necessary to download the complete client installation package online before the installation of the client can be completed. This is conducive to reducing the occupation of the hard disk storage resources of the user device by the client installation package, which is conducive to improving the user experience.

[0058] In another embodiment of the present application, based on the above embodiment, another encrypted communication method for installing a client is disclosed. In this method, step S10 is:

[0059] Obtain the client installation instruction generated by the user on the browser side, generate installation request information associated with a client based on the above client installation instruction, and control the browser side corresponding to the above user and the browser sides corresponding to other users belonging to the same group as the above user to send the above installation request information to the server respectively. Among them, each user belongs to a group. Each user corresponds to a user device, that is, each user device belongs to a group. The group can be a working group, business group, etc. divided according to work needs within the enterprise. Users correspond to browsers one-to-one. That is, each user corresponds to a browser. In this application, users also correspond to user devices one-to-one, so user devices and browsers also correspond one-to-one.

[0060] Step S20 is: after receiving the above-mentioned installation request information, the server obtains the installation data of the above-mentioned client, and encrypts the above-mentioned installation data in turn using the first private key and the public key to generate encrypted data and installation instructions, and sends the above-mentioned encrypted data, the above-mentioned public key and the installation instructions through the browser to the user device corresponding to the above-mentioned user and other user devices belonging to the same group as the above-mentioned user.

[0061] Step S30 is: each user device in the group including the above-mentioned user generates a second private key based on the above-mentioned installation instruction using the above-mentioned preset method; the above-mentioned encrypted data is decrypted using the above-mentioned public key and the above-mentioned second private key in turn to obtain the client's installation data and preset verification data.

[0062] S40, each of the user devices verifies the installation data of the client based on the preset verification data, and when the verification succeeds, performs installation based on the installation data of the client, which is conducive to improving the efficiency of installing the client for all user devices in the group.

[0063] like Figure 2 As shown, step S40 of this embodiment includes:

[0064] S401, each user device in the group including the above user respectively requests the server online to obtain the client installation package based on the above installation data.

[0065] S402, respectively obtain network transmission data of the installation data from each user equipment in the same group.

[0066] S403: Based on the network transmission data of the installation data, obtain the estimated downloading time of the client installation package for each user device.

[0067] S404, within the estimated download duration, when it is detected that at least two user devices in the same group have generated new identical download tasks, and both of the two user devices have suspended the download tasks of the client installation package, then the remaining user devices in the group that have the same download tasks will also suspend the download tasks of the client installation package.

[0068] S405, when the new download task is downloaded, continue to execute the download task of the client installation package, and after the client installation package is downloaded, install the client based on the client installation package.

[0069] The network transmission data may be the network transmission rate, and the estimated download duration may be the ratio of the data size of the client installation package (e.g., 200M) to the network transmission rate. When two user devices in the same group both give priority to downloading a new download task, it means that the new download task is more important to the current work of the group, so the remaining user devices are also given priority to download the new download task. This helps reduce the complexity of user device operation for the group of users, improve the degree of automation of user device operation, and enhance user experience.

[0070] In other embodiments, the above step S10 may also be: obtaining a client installation instruction generated by the user on the browser side, and generating installation request information associated with a client based on the above client installation instruction; obtaining the installation rate of the above client on all user devices in the group including the above user; when the installation rate is greater than a second preset threshold, controlling the browser side corresponding to all user devices that belong to the same group as the above user and do not have the above client installed to send the above installation request information to the server.

[0071] This helps to improve the efficiency of client installation for all user devices in the group while ensuring the accuracy of client installation, and provides convenience for the work of all users in the group. The second preset threshold may be 60%, which is not limited in this application.

[0072] like Figure 3 As shown, in this embodiment, step S405 may include:

[0073] S4051, after the client installation package is downloaded, the system resource idle information and the historical no-operation time period of each user device in the same group are obtained. The above historical no-operation time period is used to represent the time period when the user device is not operated every day before the current time. The above system resource idle information can be obtained based on the CPU occupancy rate and memory occupancy rate of the user device.

[0074] S4052: predicting a current time period without operation based on the above historical time periods without operation, wherein the current time period without operation may be a common time period of all historical time periods without operation, that is, an intersection of all historical time periods without operation.

[0075] S4053, based on the user device and the client installation package, obtain an estimated installation time for installing the client installation package. For example, the ratio of the data size of the client installation package to the hard disk write rate of the user device can be used as the estimated installation time.

[0076] S4054, when the above-mentioned system resource idle information is greater than the first preset threshold value, and / or the estimated installation time starting from the current time is within the above-mentioned current no-operation time period, the client is installed based on the client installation package. For example, if the current time is 9:15, the estimated installation time is 10 minutes. That is, if the installation starts now, the installation time period is from 9:15 to 9:25. The current no-operation time period includes 9:00 to 9:30, that is, the user will not operate the user device from 9 o'clock to 9:30. Then at this time, the above-mentioned installation time period is within the current no-operation time period, so it can be installed.

[0077] In this way, the client can be installed when it is convenient for the user (such as during meal time), without affecting the performance requirements of the user when working on the user device, and without affecting the user's working experience.

[0078] In another embodiment of the present application, based on the above embodiment, another browser-based client multi-task installation method is disclosed. The method further includes the steps of:

[0079] S70, when the client installation fails, obtaining installation failure prompt information.

[0080] S80, when the installation failure prompt information is within a preset installation failure range, collecting response operations made by at least two user devices in the same group based on the installation failure prompt information.

[0081] And S90, when the response operations corresponding to the at least two user devices are the same, the response operations are performed on the remaining user devices in the group having the same installation failure prompt information to perform reinstallation.

[0082] Specifically, after the installation, the installation result of the client is obtained. When the installation result shows that the installation of the above-mentioned client fails, the installation failure prompt information is obtained. For example, the installation failure prompt information may be a data access port conflict. That is, the installation failed due to a conflict with the data access port that has been set by other clients in the user device. At this time, if the users corresponding to at least two user devices perform the same response operation, the installation is successful. For example, two users may achieve successful installation by modifying the data access port that the client needs to use. This means that the modification operation is feasible, then the response operation (i.e., modifying the data access port) is performed on the remaining user devices that have also obtained the installation failure prompt information, and the installation can be successful.

[0083] This helps to quickly respond and obtain the correct response operation when the installation fails, and improves the installation efficiency when multiple user devices in the same group install the client.

[0084] In another embodiment of the present application, based on the above embodiment, another browser-based client multi-task installation method is disclosed. The method further includes the steps of:

[0085] S100, generating a client configuration file on the server, controlling all user devices belonging to the same group to access the client configuration file, and executing the client configuration file on all user devices. Specifically, when the client needs to be configured after installation, the configuration file is used to implement batch automatic configuration, avoiding the need for manual configuration of each user device, improving the efficiency of client configuration and use, and helping to improve user experience.

[0086] like Figure 4 As shown, an embodiment of the present invention further discloses an encryption communication system 4 for installing a client, the system comprising a browser 41, a server 42 and a user device 43.

[0087] The browser 41 generates a client installation instruction, generates installation request information associated with a client based on the client installation instruction, and sends the installation request information to the server;

[0088] After receiving the installation request information, the server 42 obtains the installation data of the client, and encrypts the installation data using the first private key and the public key in sequence to generate encrypted data and installation instructions, and sends the encrypted data, the public key and the installation instructions to the user device through the browser; the public key is generated using a random function; the first private key is generated by the server using a preset method;

[0089] Based on the installation instruction, the user device 43 generates a second private key using the preset method; decrypts the encrypted data using the public key and the second private key in sequence to obtain the client's installation data and preset verification data; verifies the client's installation data based on the preset verification data, and when the verification is successful, performs installation based on the client's installation data.

[0090] It can be understood that the encrypted communication system for installing a client of the present invention also includes other existing functional modules that support the operation of the encrypted communication system for installing a client. Figure 4 The encrypted communication system shown for installing the client is merely an example and should not bring any limitation to the functions and scope of use of the embodiments of the present invention.

[0091] The encrypted communication system for installing the client in this embodiment is used to implement the above-mentioned method for installing the encrypted communication of the client. Therefore, the specific implementation steps of the encrypted communication system for installing the client can refer to the above-mentioned description of the method for installing the encrypted communication of the client, which will not be repeated here.

[0092] An embodiment of the present invention also discloses an encryption communication device for installing a client, comprising a processor and a memory, wherein the memory stores executable instructions of the processor; the processor is configured to execute the steps in the above-mentioned encryption communication method for installing a client by executing the executable instructions. Figure 5 This is a schematic diagram of the structure of the encrypted communication device for installing the client disclosed in the present invention. Figure 5 The electronic device 600 according to this embodiment of the present invention is described. Figure 5 The electronic device 600 shown is only an example and should not bring any limitation to the functions and scope of use of the embodiments of the present invention.

[0093] like Figure 5 As shown, the electronic device 600 is in the form of a general computing device. The components of the electronic device 600 may include, but are not limited to: at least one processing unit 610, at least one storage unit 620, a bus 630 connecting different platform components (including the storage unit 620 and the processing unit 610), a display unit 640, etc.

[0094] The storage unit stores program codes, which can be executed by the processing unit 610, so that the processing unit 610 executes the steps of various exemplary embodiments of the present invention described in the above-mentioned encryption communication method for installing the client of this specification. For example, the processing unit 610 can execute the following steps: Figure 1 Follow the steps shown in .

[0095] The storage unit 620 may include a readable medium in the form of a volatile storage unit, such as a random access memory unit (RAM) 6201 and / or a cache memory unit 6202 , and may further include a read-only memory unit (ROM) 6203 .

[0096] The storage unit 620 may also include a program / utility 6204 having a set (at least one) of program modules 6205, such program modules 6205 including but not limited to: an operating system, one or more application programs, other program modules, and program data, each of which or some combination may include an implementation of a network environment.

[0097] Bus 630 may represent one or more of several types of bus structures, including a memory unit bus or memory unit controller, a peripheral bus, an accelerated graphics port, a processing unit, or a local bus using any of a variety of bus architectures.

[0098] The electronic device 600 may also communicate with one or more external devices 700 (e.g., keyboards, pointing devices, Bluetooth devices, etc.), may also communicate with one or more devices that enable a user to interact with the electronic device 600, and / or communicate with any device that enables the electronic device 600 to communicate with one or more other computing devices (e.g., routers, modems, etc.). Such communication may be performed via an input / output (I / O) interface 650. Furthermore, the electronic device 600 may also communicate with one or more networks (e.g., a local area network (LAN), a wide area network (WAN), and / or a public network, such as the Internet) via a network adapter 660. The network adapter 660 may communicate with other modules of the electronic device 600 via a bus 630. It should be understood that, although not shown in the figure, other hardware and / or software modules may be used in conjunction with the electronic device 600, including but not limited to: microcode, device drivers, redundant processing units, external disk drive arrays, RAID systems, tape drives, and data backup storage platforms, etc.

[0099] The present invention also discloses a computer-readable storage medium for storing a program, which, when executed, implements the steps in the above-mentioned encrypted communication method for installing a client. In some possible implementations, various aspects of the present invention may also be implemented in the form of a program product, which includes a program code, and when the program product is run on a terminal device, the program code is used to cause the terminal device to execute the steps of various exemplary implementations of the present invention described in the above-mentioned encrypted communication method for installing a client in this specification.

[0100] As shown above, when the program of the computer-readable storage medium of this embodiment is executed, the user only needs to access the browser, select or search for the required installation software and click to install to complete the installation of the client; the automatic acquisition and installation of the client installation is realized without the assistance of IT personnel; and the installation data of the client is encrypted in turn by a private key and a public key, and the installation data obtained after decryption is verified using preset verification data, thereby ensuring the security and reliability of the client data transmission and installation process.

[0101] Figure 6 Schematic diagram of the structure of the computer-readable storage medium of the present invention. Figure 6 As shown, a program product 800 for implementing the above method according to an embodiment of the present invention is described, which can adopt a portable compact disk read-only memory (CD-ROM) and include program code, and can be run on a terminal device, such as a personal computer. However, the program product of the present invention is not limited thereto. In this document, a readable storage medium can be any tangible medium containing or storing a program, which can be used by or in combination with an instruction execution system, an apparatus or a device.

[0102] The program product may use any combination of one or more readable media. The readable medium may be a readable signal medium or a readable storage medium. The readable storage medium may be, for example, but not limited to, an electrical, magnetic, optical, electromagnetic, infrared, or semiconductor system, device or device, or any combination of the above. More specific examples of readable storage media (a non-exhaustive list) include: an electrical connection with one or more wires, a portable disk, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), an optical fiber, a portable compact disk read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination of the above.

[0103] Computer readable storage media may include data signals propagated in baseband or as part of a carrier wave, wherein readable program codes are carried. Such propagated data signals may take various forms, including but not limited to electromagnetic signals, optical signals, or any suitable combination thereof. The readable storage medium may also be any readable medium other than a readable storage medium, which may send, propagate, or transmit a program for use by or in conjunction with an instruction execution system, device, or device. The program codes contained on the readable storage medium may be transmitted using any suitable medium, including but not limited to wireless, wired, optical cable, RF, etc., or any suitable combination thereof.

[0104] Program code for performing the operations of the present invention may be written in any combination of one or more programming languages, including object-oriented programming languages ​​such as Java, C++, etc., and conventional procedural programming languages ​​such as "C" or similar programming languages. The program code may be executed entirely on the user computing device, partially on the user device, as a separate software package, partially on the user computing device and partially on a remote computing device, or entirely on a remote computing device or server. In the case of a remote computing device, the remote computing device may be connected to the user computing device through any type of network, including a local area network (LAN) or a wide area network (WAN), or may be connected to an external computing device (e.g., through the Internet using an Internet service provider).

[0105] The encrypted communication method, system, device and medium for installing the client provided by the embodiments of the present invention enable the user to complete the installation of the client only by accessing the browser, selecting or searching for the required installation software and clicking to install; the automatic acquisition and installation of the client installation is realized, and it can be completed without the assistance of IT personnel; and the installation data of the client is encrypted in turn by a private key and a public key, and the installation data obtained after decryption is verified by using preset verification data, thereby ensuring the security and reliability of the client data transmission and installation process.

[0106] The above contents are further detailed descriptions of the present invention in combination with specific preferred embodiments, and it cannot be determined that the specific implementation of the present invention is limited to these descriptions. For ordinary technicians in the technical field to which the present invention belongs, several simple deductions or substitutions can be made without departing from the concept of the present invention, which should be regarded as falling within the protection scope of the present invention.

Claims

1. An encrypted communication method for installing a client, characterized in that: The following steps are involved: S10, obtaining a client installation instruction generated on the browser side, generating installation request information associated with a client based on the client installation instruction, and sending the installation request information to the server; S20, after receiving the installation request information, the server obtains the installation data of the client, and encrypts the installation data using the first key and the second key in sequence to generate encrypted data and an installation instruction, and sends the encrypted data, the second key and the installation instruction to the user device through the browser; The second key is generated by using a random function; the first key is generated by the server using a preset method; S30, the user device generates a third key based on the installation instruction using the preset method; decrypts the encrypted data using the second key and the third key in sequence to obtain the installation data and preset verification data of the client; S40, the user equipment verifies the installation data of the client based on the preset verification data, and when the verification succeeds, performs installation based on the installation data of the client; Wherein, the step S40 specifically includes: When the verification succeeds, an online request is made to the server to obtain a client installation package based on the installation data of the client, and the client is installed based on the client installation package; Obtain network transmission data of the encrypted data; Based on the network transmission data of the encrypted data, obtaining an estimated download duration of the client installation package; During the estimated download duration, when it is detected that at least two user devices in the same group generate new identical download tasks, and both of the two user devices suspend the download tasks of the client installation package, then the remaining user devices in the group that have the identical download tasks suspend the download tasks of the client installation package; The client and the browser have attribute data respectively; the preset method is to intercept partial fields from the attribute data of the client and the attribute data of the browser, splice the partial fields into a character string, replace the characters of the character string, and then intercept the character string of preset length for retention.

2. The encrypted communication method for installing a client according to claim 1, characterized in that: The step S20 comprises: The server encrypts the installation data and the preset verification data using the first key and the second key in sequence to generate encrypted data and installation instructions.

3. The encrypted communication method for installing a client according to claim 1, characterized in that: The method further comprises the steps of: A client configuration file is generated on a server, all user devices belonging to the same group are controlled to access the client configuration file, and the client configuration file is executed on all user devices.

4. The encrypted communication method for installing a client according to claim 1, characterized in that: The step S40 comprises: Obtaining system resource idle information and a historical no-operation time period of the user device, wherein the historical no-operation time period is used to represent a time period when the user device was not operated each day before the current time; the system resource idle information is obtained based on the CPU occupancy rate and memory occupancy rate of the user device; Based on the historical no-operation time period, predict a current no-operation time period; Based on the user device and the client installation package, obtaining an estimated installation time for installing the client installation package; When the system resource idle information is greater than a first preset threshold, and / or the estimated installation duration starting from the current moment is within the current no-operation time period, the client is installed.

5. The encrypted communication method for installing a client according to claim 1, characterized in that: The method further comprises the steps of: When the client fails to install, obtaining installation failure prompt information; When the installation failure prompt information is within a preset installation failure range, collecting response operations made by users of at least two user devices in the same group based on the installation failure prompt information; When the response operations corresponding to the users of the at least two user devices are the same, the response operations are executed on the remaining user devices in the group having the same installation failure prompt information to perform re-installation.

6. An encrypted communication system for installing a client, used to implement the encrypted communication method for installing a client as claimed in claim 1, characterized in that: The system includes a browser, a server and a user device; The browser generates a client installation instruction, generates installation request information associated with a client based on the client installation instruction, and sends the installation request information to the server; After receiving the installation request information, the server obtains the installation data of the client, and encrypts the installation data using the first key and the second key in sequence to generate encrypted data and installation instructions, and sends the encrypted data, the second key and the installation instructions to the user device through the browser; The second key is generated by using a random function; the first key is generated by the server using a preset method; The user device generates a third key based on the installation instruction using the preset method; decrypts the encrypted data using the second key and the third key in sequence to obtain the installation data and preset verification data of the client; Verifying the installation data of the client based on the preset verification data, and when the verification succeeds, performing installation based on the installation data of the client; Wherein, when the verification is successful, an online request is made to the server to obtain a client installation package based on the installation data of the client, and the client is installed based on the client installation package; and network transmission data of the encrypted data is obtained; Based on the network transmission data of the encrypted data, an estimated download duration of the client installation package is obtained; within the estimated download duration, when it is detected that at least two user devices in the same group generate new identical download tasks, and both of the two user devices suspend the download tasks of the client installation package, then the remaining user devices in the group that have the identical download tasks suspend the download tasks of the client installation package; The client and the browser have attribute data respectively; the preset method is to intercept partial fields from the attribute data of the client and the attribute data of the browser, splice the partial fields into a character string, replace the characters of the character string, and then intercept the character string of preset length for retention.

7. An encrypted communication device for installing a client, characterized in that: include: processor; a memory storing executable instructions of the processor; The processor is configured to execute the steps of the encryption communication method for installing a client as described in any one of claims 1 to 5 by executing the executable instructions.

8. A computer-readable storage medium for storing a program, characterized in that: When the program is executed by a processor, the steps of the encryption communication method for installing a client as described in any one of claims 1 to 5 are implemented.

Images