A data distribution method and system

Abstract

The present application provides a data distribution method and system, the data distribution system includes a data distribution center system, a data distribution subsystem and a client system, wherein the data distribution center system is used to receive network request information sent by the data distribution subsystem and feed back digital certificates to the data distribution subsystem; the data distribution center system is also used for certificate query requests sent by the client system and feeds back certificate query results to the client system; the data distribution subsystem is used to distribute data content to the client system; the client system is used to receive data content distributed by the data distribution subsystem. It can be seen that by implementing this implementation method, data can be distributed in an authenticated manner, so that data can be distributed independently; at the same time, security authentication can be performed before data distribution, thereby improving data distribution security; in addition, the method allows users to specify the data they want to receive, thereby making data distribution more humane.

Description

Technical Field

[0001] The present application relates to the field of data information interaction, and more specifically, to a data distribution method and system. Background Art

[0002] At present, when users connect to the wifi of shopping malls, supermarkets or restaurants, they usually consider using the built-in free wifi to perform some online operations. However, in practice, it is found that when users use this type of wifi, they will be pushed a verification interface with advertisements, or an advertisement interface will be pushed until the user clicks "skip" before they can perform subsequent online operations. It can be seen that in this method, advertisements are usually pushed passively as users connect to the Internet, the quality of the advertisement content varies, and users are forced to read the corresponding advertisements, which makes the user's advertisement reading experience and online experience very bad. Summary of the invention

[0003] The purpose of the embodiments of the present application is to provide a data distribution method and system, which can distribute data in an authenticated manner, thereby separating the distribution action of advertising data and the networking action, so that the advertising data can be distributed independently; at the same time, since security authentication is required before the advertising data is distributed, this method has higher security than previous methods; in addition, this method allows users to specify the advertising data they want to receive, thereby making the distribution of advertising data more user-friendly.

[0004] A first aspect of an embodiment of the present application provides a data distribution method, which is applied to a data distribution center system, and includes:

[0005] Receive network request information;

[0006] Determining whether the network request information is a digital certificate request;

[0007] When the network request information is the digital certificate request, verifying the digital certificate request, and issuing a digital certificate to the corresponding data distribution subsystem when the verification is passed;

[0008] When the network request information is not the digital certificate request, determining whether the network request information is a certificate query request;

[0009] When the network request information is the certificate query request, the certificate query result is fed back to the corresponding client system according to the certificate query request.

[0010] Furthermore, the step of verifying the digital certificate request and issuing the digital certificate to the corresponding data distribution subsystem when the verification is passed includes:

[0011] Identify whether the digital certificate request is a merchant identity certificate request;

[0012] When the digital certificate request is a merchant identity certificate request, verifying the merchant identity, and issuing the merchant identity certificate to the corresponding data distribution subsystem when the verification is passed;

[0013] When the digital certificate request is not a request for the merchant identity certificate, the reason for the failure of the certificate application is fed back to the data distribution subsystem.

[0014] Furthermore, the step of verifying the digital certificate request and issuing the digital certificate to the corresponding data distribution subsystem when the verification is passed includes:

[0015] Identifying whether the digital certificate request is a data content certificate request;

[0016] When the digital certificate request is the data content certificate request, authenticating the merchant identity certificate according to the data content certificate request;

[0017] Determine whether the merchant identity certificate is within the validity period;

[0018] When the merchant identity certificate is within the validity period, obtaining a first HASH value or a first MAC value included in the data content certificate request, and obtaining data content corresponding to the data content certificate request;

[0019] Calculate a second HASH value of the data content or a second MAC value of the data content;

[0020] Determine whether the first HASH value is the same as the second HASH value, or determine whether the first MAC value is the same as the second MAC value;

[0021] When the first HASH value is the same as the second HASH value or the first MAC value is the same as the second MAC value, the data content and data security are reviewed, and when the review is passed, a data digital certificate is issued to the corresponding data distribution subsystem; the CN code of the data digital certificate is the same as the CN code of the merchant identity certificate.

[0022] Furthermore, the step of feeding back the certificate query result to the corresponding client system according to the certificate query request includes:

[0023] Extract the data digital certificate and the merchant identity certificate included in the certificate query request, and extract the first CN code in the data digital certificate and the second CN code in the merchant identity certificate;

[0024] Determine whether the first CN code and the second CN code are the same;

[0025] When the first CN code and the second CN code are the same, determining whether the data digital certificate and the merchant identity certificate are both within the validity period;

[0026] When both the data digital certificate and the merchant identity certificate are within the validity period, a certificate query result is generated and fed back to the corresponding client system.

[0027] A second aspect of an embodiment of the present application provides a data distribution method, which is applied to a data distribution subsystem, and includes:

[0028] Detecting whether the data distribution subsystem has a merchant identity certificate;

[0029] When the data distribution subsystem does not have the merchant identity certificate, sending a merchant identity certificate request to the data distribution center system;

[0030] When the data distribution subsystem has the merchant identity certificate, determining whether the merchant identity certificate is within the validity period;

[0031] When the merchant identity certificate is not within the validity period, sending a merchant identity certificate request to the data distribution center system;

[0032] When the merchant identity certificate is within the validity period, determining the data content to be distributed;

[0033] According to the data content, sending a data content certificate request to the data distribution center system;

[0034] Receiving a data digital certificate issued by the data distribution center system;

[0035] A data wireless network is established according to the merchant identity certificate, and the data content and the data digital certificate are distributed to the client system through the data wireless network.

[0036] A third aspect of an embodiment of the present application provides a data distribution method, which is applied to a client system and includes:

[0037] When scanning a merchant's data wireless network, determining whether the data wireless network is in a preset data network whitelist;

[0038] When the data wireless network is in the data network whitelist, authenticating the data wireless network, and establishing a network connection with the data wireless network when the authentication passes;

[0039] Receiving data content and a data digital certificate, and sending a digital certificate request to a data distribution center system according to the data digital certificate;

[0040] Receiving the certificate query result fed back by the data distribution center system;

[0041] According to the query result, the data content is loaded or discarded.

[0042] Further, the step of authenticating the data wireless network and establishing a network connection with the data wireless network when the authentication is passed includes:

[0043] Generate a random number and a timestamp, and form time information according to the random number and the timestamp;

[0044] Encrypt the time information using the merchant's encryption public key to obtain encrypted information;

[0045] Sending the encrypted information to the data distribution subsystem, so that the data distribution subsystem signs the generated feedback information through the merchant identity certificate after verifying it according to the encrypted information;

[0046] Receive feedback information from the merchant and extract the merchant identity certificate;

[0047] The merchant identity certificate is verified, and a network connection is established with the data wireless network when the verification is passed.

[0048] A fourth aspect of the embodiments of the present application provides a data distribution system, the data distribution system comprising a data distribution center system, a data distribution subsystem and a client system, wherein:

[0049] The data distribution center system is used to receive the network request information sent by the data distribution subsystem and feed back the digital certificate to the data distribution subsystem;

[0050] The data distribution center system is also used for the certificate query request sent by the client system and feeds back the certificate query result to the client system;

[0051] The data distribution subsystem is used to distribute data content to the client system;

[0052] The client system is used to receive the data content distributed by the data distribution subsystem.

[0053] A fifth aspect of an embodiment of the present application provides an electronic device, including a memory and a processor, wherein the memory is used to store a computer program, and the processor runs the computer program to enable the electronic device to execute the data distribution method described in any one of the first aspect, second aspect or third aspect of the embodiment of the present application.

[0054] A sixth aspect of an embodiment of the present application provides a computer-readable storage medium storing computer program instructions. When the computer program instructions are read and executed by a processor, the data distribution method described in any one of the first aspect, the second aspect or the third aspect of the embodiment of the present application is executed. BRIEF DESCRIPTION OF THE DRAWINGS

[0055] In order to more clearly illustrate the technical solutions of the embodiments of the present application, the drawings required for use in the embodiments of the present application will be briefly introduced below. It should be understood that the following drawings only show certain embodiments of the present application and therefore should not be regarded as limiting the scope. For ordinary technicians in this field, other related drawings can be obtained based on these drawings without paying creative work.

[0056] Figure 1 A flowchart of a data distribution method provided in an embodiment of the present application;

[0057] Figure 2 A flowchart of another data distribution method provided in an embodiment of the present application;

[0058] Figure 3 A flowchart of another data distribution method provided in an embodiment of the present application;

[0059] Figure 4 A schematic diagram of the system structure of a data distribution system provided in an embodiment of the present application. DETAILED DESCRIPTION

[0060] The technical solutions in the embodiments of the present application will be described below in conjunction with the drawings in the embodiments of the present application.

[0061] It should be noted that similar reference numerals and letters represent similar items in the following drawings, so once an item is defined in one drawing, it does not need to be further defined and explained in subsequent drawings. At the same time, in the description of this application, the terms "first", "second", etc. are only used to distinguish the description and cannot be understood as indicating or implying relative importance.

[0062] Example 1

[0063] Please see Figure 1 , Figure 1 A flow chart of a data distribution method is provided for an embodiment of the present application. The data distribution method is applied to a data distribution center system, and the data distribution method includes:

[0064] S101, receiving network request information.

[0065] In this embodiment, the data distribution center system can cyclically receive network request information when opening the network service.

[0066] S102, determining whether the network request information is a digital certificate request, if so, executing step S103; if not, executing step S106.

[0067] In this embodiment, the digital certificate request is a request initiated by the data distribution subsystem for requesting a corresponding digital certificate.

[0068] In this embodiment, when the method receives a digital certificate request initiated by the data distribution subsystem, the method executes step S103; when the method receives a certificate query request (OCSP) initiated by the client system, the method executes step S106.

[0069] In this embodiment, OCSP (Online Certificate Status Protocol) refers to the Online Certificate Status Protocol, which is a mode for maintaining the security of servers and other network resources.

[0070] S103. Identify whether the digital certificate request is a merchant identity certificate request or a data content certificate request.

[0071] S104: When the digital certificate request is a merchant identity certificate request, the merchant identity is verified, and when the verification is passed, the merchant identity certificate is issued to the corresponding data distribution subsystem.

[0072] As an optional implementation, the method further includes:

[0073] When the digital certificate request is not a merchant identity certificate request, the reason for the certificate application failure is fed back to the data distribution subsystem.

[0074] In this embodiment, the method can verify the merchant identity through online or offline methods, and issue a merchant identity certificate if it passes, and feedback the reason for the failure of the certificate application if it fails.

[0075] S105. When the digital certificate request is a data content certificate request, obtain the data content corresponding to the data content certificate request, review the data content and the data security of the data content, and issue a data digital certificate to the corresponding data distribution subsystem when the review is passed.

[0076] As an optional implementation, the steps of obtaining data content corresponding to the data content certificate request, reviewing the data content and the data security of the data content, and issuing a data digital certificate to the corresponding data distribution subsystem when the review is passed include:

[0077] Request authentication of the merchant identity certificate based on the data content certificate;

[0078] Determine whether the merchant identity certificate is within the validity period;

[0079] When the merchant identity certificate is within the validity period, obtaining the first HASH value or the first MAC value included in the data content certificate request, and obtaining the data content corresponding to the data content certificate request;

[0080] Calculate a second HASH value of the data content or a second MAC value of the data content;

[0081] Determine whether the first HASH value is the same as the second HASH value, or determine whether the first MAC value is the same as the second MAC value;

[0082] When the first HASH value is the same as the second HASH value or the first MAC value is the same as the second MAC value, the data content and data security are reviewed, and a data digital certificate is issued to the corresponding data distribution subsystem when the review is passed; the CN code of the data digital certificate is the same as the CN code of the merchant identity certificate.

[0083] In this embodiment, the HASH value refers to the hash value.

[0084] In this embodiment, the certificate is also called a "digital certificate" or a "public key certificate", which is a file that helps maintain the security of network communications.

[0085] In this embodiment, the MAC (Message Authentication Code) value, also known as the message authentication code, file message authentication code, message authentication code, information authentication code, is a short piece of information generated by a specific algorithm to check the integrity of a message and perform identity verification. It can be used to check whether the content of a message has been changed during the message transmission process, regardless of whether the reason for the change is accidental or intentional. At the same time, it can be used as an identity verification of the source of the message to confirm the source of the message.

[0086] In this embodiment, the method can first use the merchant identity certificate to complete the authentication of the merchant identity, and then determine whether the merchant identity certificate is still within the validity period, and perform subsequent review steps when the merchant identity certificate is within the validity period; otherwise, the reason for the request failure is fed back.

[0087] In this embodiment, the data content certificate request should include the HASH value or MAC value of the advertisement content.

[0088] In this embodiment, the method may intercept data content sent along with the data content certificate request, the data content matching the data content certificate.

[0089] In this embodiment, the method can calculate the HASH value or MAC value of the data content and compare it with the HASH value or MAC value carried in the data content certificate request. If they are consistent, the data content and data security are reviewed; if they are inconsistent, the reason for the failure of the certificate application is fed back.

[0090] In this embodiment, when the data content and data security are reviewed and approved, a data digital certificate for the data content is issued; otherwise, the reason for the failure of the certificate application is fed back.

[0091] In this embodiment, the data content certificate request may carry other content according to specific scenario requirements.

[0092] In this embodiment, the CN code of the digital certificate of the advertisement is consistent with the CN code of its merchant identity certificate, which is convenient for later verification.

[0093] In the embodiment of the present application, the CN code, namely the common name (Common Name), is also called the CN field.

[0094] S106: Determine whether the network request information is a certificate query request. If so, execute step S107; if not, end this process.

[0095] S107: Feedback the certificate query result to the corresponding client system according to the certificate query request.

[0096] As an optional implementation, step S107 includes:

[0097] Extract the data digital certificate and the merchant identity certificate included in the certificate query request, and extract the first CN code in the data digital certificate and the second CN code in the merchant identity certificate;

[0098] Determine whether the first CN code and the second CN code are the same;

[0099] When the first CN code and the second CN code are the same, determining whether the data digital certificate and the merchant identity certificate are both within the validity period;

[0100] When both the data digital certificate and the merchant identity certificate are within the validity period, a certificate query result is generated and fed back to the corresponding client system.

[0101] In this embodiment, the method receives the data digital certificate and the first CN code of the merchant identity certificate sent by the client system; verifies the identity of the merchant based on the merchant identity certificate, and if it fails, feeds back the specific problem to the customer; then, the method confirms that the advertisement is issued by the merchant based on the first CN code of the data digital certificate and the second CN code of the merchant identity certificate, and if it fails, feeds back the specific problem to the customer; thereafter, confirms whether both the data digital certificate and the merchant identity certificate are within the validity period, and if it fails, feeds back the specific problem to the customer; finally, based on all queries and verifications, the final certificate query result is fed back to the client system.

[0102] In this embodiment, the method re-executes step S101 after executing step S104, S105 or S107.

[0103] In this embodiment, the data distribution center system can process multiple requests from the data distribution subsystem or client system within the concurrency upper limit.

[0104] In this embodiment, the data in this embodiment can be understood as advertisement data, that is, advertisement.

[0105] In this embodiment, the execution subject of the method may be a computing device such as a computer or a server, and no limitation is made in this embodiment.

[0106] In this embodiment, the execution subject of the method may also be a smart device such as a smart phone, a tablet computer, etc., which is not limited in this embodiment.

[0107] It can be seen that the implementation of the data distribution method described in this embodiment can control the merchant identity certificate of the data distribution subsystem and the data content certificate of the advertising data to be distributed through the data distribution center system, so that the data distribution subsystem can distribute legal advertising data with timeliness when it has the legal authority to distribute data. It can be seen that the implementation of this implementation method can distribute advertising data based on digital certificates, thereby avoiding conflicts between networking actions and advertising actions; at the same time, the implementation of this implementation method can also reasonably control advertising data and merchants, so that the advertising data issued by the score is more secure and avoids causing trouble to users.

[0108] Example 2

[0109] Please see Figure 2 , Figure 2 A flow chart of another data distribution method is provided for an embodiment of the present application. The data distribution method is applied to a data distribution subsystem, and the data distribution method includes:

[0110] S201, check whether the data distribution subsystem has a merchant identity certificate, if so, execute step S203; if not, execute step S202.

[0111] S202: Send a merchant identity certificate request to the data distribution center system.

[0112] S203, determine whether the merchant identity certificate is within the validity period, if so, execute step S205; if not, execute step S204.

[0113] S204: Send a merchant identity certificate request to the data distribution center system.

[0114] S205: Determine the data content to be distributed.

[0115] In this embodiment, the data content may be advertisement data to be distributed.

[0116] S206. Send a data content certificate request to the data distribution center system based on the data content.

[0117] S207, receiving the data digital certificate issued by the data distribution center system.

[0118] S208: Building a data wireless network based on the merchant identity certificate, and distributing data content and data digital certificates to the client system through the data wireless network.

[0119] In this embodiment, the method can build a wireless data network with authentication based on the identity certificate. If a customer's authentication accesses the wireless network of the data distribution subsystem, the certificate authentication process initiated by the customer is completed.

[0120] In this embodiment, the data distribution subsystem can push the advertisement data according to the data receiving rules fed back by the client device, and then confirm the data distribution situation and feed back the data distribution situation to the data distribution center system.

[0121] In this embodiment, the data in this embodiment can be understood as advertisement data, that is, advertisement.

[0122] In the embodiment of the present application, the execution subject of the method can be a computing device such as a computer or a server, and no limitation is made in this embodiment.

[0123] In the embodiment of the present application, the execution subject of the method can also be a smart device such as a smart phone, a tablet computer, etc., and there is no limitation on this in the present embodiment.

[0124] It can be seen that the implementation of the data distribution method described in this embodiment can enable the data distribution subsystem to automatically perform validity checks on the merchant identity certificates and certificate validity periods stored in itself, and automatically request a new merchant identity certificate when the merchant identity certificate does not exist or expires, thereby realizing automatic update of the merchant identity certificate. At the same time, the method can also automatically request a data content certificate for the advertising data to ensure that the distributed advertising data is legal.

[0125] Example 3

[0126] Please see Figure 3 , Figure 3 A flow chart of another data distribution method is provided for an embodiment of the present application. The data distribution method is applied to a client system and includes:

[0127] S301. When scanning the merchant's data wireless network, determine whether the data wireless network is in the preset data network whitelist. If so, execute step S302; if not, end this process.

[0128] In this embodiment, the user can select in advance which merchants provide advertisement data to receive, as well as rules such as the data content of the received advertisements, and scan nearby wireless networks based on these.

[0129] S302: Generate a random number and a timestamp, and compose time information according to the random number and the timestamp.

[0130] In this embodiment, the client system can scan the data wireless networks of nearby merchants and determine whether the data wireless network is a data wireless network of the merchant allowed by itself based on the wireless network name (this information is carried in the extended information of the merchant's identity certificate). If it is the name of a data wireless network in the data network whitelist (the data network whitelist is a wireless network directly selected or screened according to custom rules from all wireless networks under the current data distribution center system after the client system connects to the data distribution center system).

[0131] In this embodiment, the client system may generate a random number R1 and a timestamp T1, and use them to form the time information Token1 {= R1 || T1}.

[0132] S303: Use the merchant's encryption public key to encrypt the time information to obtain encrypted information.

[0133] In this embodiment, the client system may also use the merchant's encryption public key to encrypt the time information Token1 {= R1 || T1} to obtain E2 (Token1).

[0134] S304: Send the encrypted information to the data distribution subsystem, so that the data distribution subsystem signs the generated feedback information through the merchant identity certificate after verifying the encrypted information.

[0135] In this embodiment, the client sends Token1||E2(Token1) to the data distribution subsystem.

[0136] S305: Receive feedback information from the merchant and extract the merchant identity certificate.

[0137] In this embodiment, when the data distribution subsystem receives the encrypted information, it decrypts it to obtain Token1, and confirms the time information according to its content to prevent information replay.

[0138] In this embodiment, the data distribution subsystem can generate a random number R2 and time T2 by itself to form Token2{=R1||R2||T1||T2}, sign it, and then feed back the feedback information Token2||S2(Token2) to the client system.

[0139] S306: Verify the merchant identity certificate, and establish a network connection with the data wireless network if the verification is successful.

[0140] In this embodiment, the client system can perform signature verification through OCSP, and when the verification is successful, establish a network connection to receive advertisements.

[0141] In this embodiment, if an error occurs in the above process, the process returns to step S301.

[0142] S307, receiving data content and data digital certificate, and sending a digital certificate request to the data distribution center system according to the data digital certificate.

[0143] In this embodiment, when the client system receives the advertisement data and the digital certificate of the advertisement data, it can send the digital certificate of the advertisement data to the data distribution center system, so that the data distribution center system can perform corresponding verification based on the digital certificate to verify whether the advertisement is a merchant-affiliated advertisement.

[0144] S308: Receive the certificate query result fed back by the data distribution center system.

[0145] S309: Load data content or discard data content according to the query result.

[0146] In this embodiment, the data in this embodiment can be understood as advertisement data, that is, advertisement.

[0147] In the embodiment of the present application, the execution subject of the method can be a computing device such as a computer or a server, and no limitation is made in this embodiment.

[0148] In the embodiment of the present application, the execution subject of the method can also be a smart device such as a smart phone, a tablet computer, etc., and there is no limitation on this in the present embodiment.

[0149] It can be seen that the implementation of the data distribution method described in this embodiment can give priority to determining whether the target wireless network is a wireless network that the user allows to receive data, thereby achieving the effect of customizing the advertising data receiving network; at the same time, the method can also perform certificate authentication on the received advertising data, thereby ensuring that the received advertising data is legal, avoiding the reception of illegal advertising data, and thereby ensuring the security of the client system in the user device.

[0150] Example 4

[0151] Please see Figure 4 , Figure 4 This is a schematic diagram of the structure of a data distribution system provided in an embodiment of the present application. Figure 4 As shown, the data distribution system includes a data distribution center system, a data distribution subsystem and a client system, wherein:

[0152] The data distribution center system 400 is used to receive the network request information sent by the data distribution subsystem 500 and feed back the digital certificate to the data distribution subsystem 500;

[0153] The data distribution center system 400 is also used for the certificate query request sent by the client system 600, and feeds back the certificate query result to the client system 600;

[0154] Data distribution subsystem 500, used to distribute data content to client system 600;

[0155] The client system 600 is used to receive the data content distributed by the data distribution subsystem 500.

[0156] In this embodiment, the data in this embodiment can be understood as advertisement data, that is, advertisement.

[0157] In the embodiments of the present application, the explanation of the data distribution system can refer to the description in Embodiment 1, Embodiment 2 or Embodiment 3, and will not be further elaborated in this embodiment.

[0158] It can be seen that the implementation of the data distribution system described in this embodiment can use wireless networks to realize online flyer-style advertising distribution; at the same time, the introduction of digital certificates can realize security verification during the advertising delivery and reception process; in addition, binding the timeliness of the advertiser's certificate with the timeliness of the advertisement itself can also realize automated management of the advertisement life cycle.

[0159] An embodiment of the present application provides an electronic device, including a memory and a processor, wherein the memory is used to store a computer program, and the processor runs the computer program to enable the electronic device to execute the data distribution method in embodiment 1, embodiment 2 or embodiment 3 of the present application.

[0160] An embodiment of the present application provides a computer-readable storage medium storing computer program instructions. When the computer program instructions are read and executed by a processor, the data distribution method in Embodiment 1, Embodiment 2 or Embodiment 3 of the present application is executed.

[0161] In several embodiments provided in the present application, it should be understood that the disclosed system and method can also be implemented in other ways. The system embodiments described above are merely schematic. For example, the flowcharts and block diagrams in the accompanying drawings show the possible architecture, functions and operations of the systems, methods and computer program products according to multiple embodiments of the present application. In this regard, each box in the flowchart or block diagram can represent a module, a program segment or a part of a code, and the module, a program segment or a part of a code contains one or more executable instructions for implementing the specified logical function. It should also be noted that in some alternative implementations, the functions marked in the box can also occur in a different order from the order marked in the accompanying drawings. For example, two consecutive boxes can actually be executed substantially in parallel, and they can sometimes be executed in the opposite order, depending on the functions involved. It should also be noted that each box in the block diagram and / or the flowchart, and the combination of boxes in the block diagram and / or the flowchart can be implemented with a dedicated hardware-based system that performs a specified function or action, or can be implemented with a combination of dedicated hardware and computer instructions.

[0162] In addition, the functional modules in the various embodiments of the present application may be integrated together to form an independent part, or each module may exist separately, or two or more modules may be integrated to form an independent part.

[0163] If the functions are implemented in the form of software function modules and sold or used as independent products, they can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present application can be essentially or partly embodied in the form of a software product that contributes to the prior art. The computer software product is stored in a storage medium, including several instructions to enable a computer device (which can be a personal computer, a server, or a network device, etc.) to perform all or part of the steps of the methods described in each embodiment of the present application. The aforementioned storage medium includes: various media that can store program codes, such as a USB flash drive, a mobile hard disk, a read-only memory (ROM), a random access memory (RAM), a magnetic disk or an optical disk.

[0164] The above description is only an embodiment of the present application and is not intended to limit the scope of protection of the present application. For those skilled in the art, the present application may have various changes and variations. Any modifications, equivalent substitutions, improvements, etc. made within the spirit and principles of the present application should be included in the scope of protection of the present application. It should be noted that similar reference numerals and letters represent similar items in the following drawings, so once an item is defined in one drawing, it does not need to be further defined and explained in the subsequent drawings.

[0165] The above is only a specific implementation of the present application, but the protection scope of the present application is not limited thereto. Any technician familiar with the technical field can easily think of changes or substitutions within the technical scope disclosed in the present application, which should be included in the protection scope of the present application. Therefore, the protection scope of the present application should be based on the protection scope of the claims.

[0166] It should be noted that, in this article, relational terms such as first and second, etc. are only used to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any such actual relationship or order between these entities or operations. Moreover, the terms "include", "comprise" or any other variants thereof are intended to cover non-exclusive inclusion, so that a process, method, article or device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, article or device. In the absence of further restrictions, the elements defined by the sentence "comprise a ..." do not exclude the existence of other identical elements in the process, method, article or device including the elements.

Claims

1. A data distribution method, characterized in that: The data distribution method is applied to a data distribution center system, and the method comprises: Receive network request information; Determining whether the network request information is a digital certificate request; When the network request information is the digital certificate request, verifying the digital certificate request, and issuing a digital certificate to the corresponding data distribution subsystem when the verification is passed; When the network request information is not the digital certificate request, determining whether the network request information is a certificate query request; When the network request information is the certificate query request, feeding back the certificate query result to the corresponding client system according to the certificate query request; The step of feeding back the certificate query result to the corresponding client system according to the certificate query request includes: Extract the data digital certificate and the merchant identity certificate included in the certificate query request, and extract the first CN code in the data digital certificate and the second CN code in the merchant identity certificate; Determine whether the first CN code and the second CN code are the same; When the first CN code and the second CN code are the same, determining whether the data digital certificate and the merchant identity certificate are both within the validity period; When both the data digital certificate and the merchant identity certificate are within the validity period, a certificate query result is generated and fed back to the corresponding client system.

2. The data distribution method according to claim 1, characterized in that: The step of verifying the digital certificate request and issuing the digital certificate to the corresponding data distribution subsystem when the verification is passed includes: Identify whether the digital certificate request is a merchant identity certificate request; When the digital certificate request is a merchant identity certificate request, verifying the merchant identity, and issuing the merchant identity certificate to the corresponding data distribution subsystem when the verification is passed; When the digital certificate request is not a request for the merchant identity certificate, the reason for the failure of the certificate application is fed back to the data distribution subsystem.

3. The data distribution method according to claim 1, characterized in that: The step of verifying the digital certificate request and issuing the digital certificate to the corresponding data distribution subsystem when the verification is passed includes: Identifying whether the digital certificate request is a data content certificate request; When the digital certificate request is the data content certificate request, authenticating the merchant identity certificate according to the data content certificate request; Determine whether the merchant identity certificate is within the validity period; When the merchant identity certificate is within the validity period, obtaining a first HASH value or a first MAC value included in the data content certificate request, and obtaining data content corresponding to the data content certificate request; Calculate a second HASH value of the data content or a second MAC value of the data content; Determine whether the first HASH value is the same as the second HASH value, or determine whether the first MAC value is the same as the second MAC value; When the first HASH value is the same as the second HASH value or the first MAC value is the same as the second MAC value, the data content and data security are reviewed, and when the review is passed, a data digital certificate is issued to the corresponding data distribution subsystem; the CN code of the data digital certificate is the same as the CN code of the merchant identity certificate.

4. A data distribution method, characterized in that: The data distribution method is applied to a data distribution subsystem, and the method comprises: Detecting whether the data distribution subsystem has a merchant identity certificate; the merchant identity certificate includes a second CN code; When the data distribution subsystem does not have the merchant identity certificate, sending a merchant identity certificate request to the data distribution center system; When the data distribution subsystem has the merchant identity certificate, determining whether the merchant identity certificate is within the validity period; When the merchant identity certificate is not within the validity period, sending a merchant identity certificate request to the data distribution center system; When the merchant identity certificate is within the validity period, determining the data content to be distributed; According to the data content, sending a data content certificate request to the data distribution center system; Receiving a data digital certificate issued by the data distribution center system; the data digital certificate includes a first CN code; A data wireless network is established according to the merchant identity certificate, and the data content and the data digital certificate are distributed to the client system through the data wireless network.

5. A data distribution method, characterized in that: The data distribution method is applied to a client system, and the method comprises: When scanning a merchant's data wireless network, determining whether the data wireless network is in a preset data network whitelist; When the data wireless network is in the data network whitelist, authenticating the data wireless network, and establishing a network connection with the data wireless network when the authentication passes; Receive data content and a data digital certificate, and send a digital certificate request to a data distribution center system according to the data digital certificate; so that the data distribution center system extracts the data digital certificate and the merchant identity certificate included in the digital certificate request, and extracts the first CN code in the data digital certificate and the second CN code in the merchant identity certificate; determines whether the first CN code and the second CN code are the same; when the first CN code and the second CN code are the same, determines whether the data digital certificate and the merchant identity certificate are both within the validity period; when the data digital certificate and the merchant identity certificate are both within the validity period, generates a certificate query result, and feeds back the certificate query result to the corresponding client system; Receiving the certificate query result fed back by the data distribution center system; According to the query result, the data content is loaded or discarded.

6. The data distribution method according to claim 5, characterized in that: The step of authenticating the data wireless network and establishing a network connection with the data wireless network when the authentication is passed includes: Generate a random number and a timestamp, and form time information according to the random number and the timestamp; Encrypt the time information using the merchant's encryption public key to obtain encrypted information; Sending the encrypted information to the data distribution subsystem, so that the data distribution subsystem signs the generated feedback information through the merchant identity certificate after verifying it according to the encrypted information; Receive feedback information from the merchant and extract the merchant identity certificate; The merchant identity certificate is verified, and a network connection is established with the data wireless network when the verification is passed.

7. A data distribution system, characterized in that: The data distribution system includes a data distribution center system, a data distribution subsystem and a client system, wherein: The data distribution center system is used to receive the network request information sent by the data distribution subsystem and feed back the digital certificate to the data distribution subsystem; The data distribution center system is also used for the certificate query request sent by the client system and feeds back the certificate query result to the client system; The data distribution subsystem is used to distribute data content to the client system; The client system is used to receive the data content distributed by the data distribution subsystem; Among them, the data distribution center system is specifically used to extract the data digital certificate and merchant identity certificate included in the certificate query request, and extract the first CN code in the data digital certificate and the second CN code in the merchant identity certificate; determine whether the first CN code and the second CN code are the same; when the first CN code and the second CN code are the same, determine whether the data digital certificate and the merchant identity certificate are both within the validity period; when the data digital certificate and the merchant identity certificate are both within the validity period, generate a certificate query result, and feed back the certificate query result to the corresponding client system.

8. An electronic device, characterized in that: The electronic device comprises a memory and a processor, the memory is used to store a computer program, and the processor runs the computer program to enable the electronic device to perform the data distribution method according to any one of claims 1 to 6.

9. A readable storage medium, characterized in that: The readable storage medium stores computer program instructions, and when the computer program instructions are read and executed by a processor, the data distribution method according to any one of claims 1 to 6 is executed.

Images