Request response method, device, electronic device and storage medium

Abstract

The present disclosure provides a request response method, which can be applied to the fields of information security technology and finance. The request response method is applied to an application mutual trust platform, and the method includes: receiving a mutual trust request initiated by a first application, wherein the mutual trust request is used to request to establish a mutual trust relationship with a second application, and the mutual trust request includes the identification information of the first application and the identification information of the second application; performing trusted authentication on the first application according to the identification information of the first application; in the case where the first application passes the trusted authentication, calling a pass service interface; and using a pass service corresponding to the pass service interface to establish a mutual trust relationship between the first application and the second application based on the identification information of the first application and the identification information of the second application. The present disclosure also provides a request response device, equipment, and storage medium.

Description

Technical Field

[0001] The present disclosure relates to the fields of information security technology and finance, and more specifically to an application mutual trust method, device, equipment, medium and program product. Background Art

[0002] In the era of mobile Internet, multiple application products are often launched to meet users' needs for social interaction, shopping, life payment, investment and financial management, etc. At present, in order to connect applications, mutual trust is usually established between applications, and business function portals are used to achieve mutual jumps between applications to increase the linkage between applications and better serve users.

[0003] In the process of realizing the inventive concept of the present disclosure, the inventors found that there are at least the following problems in the related technologies: the applications of the related technologies are directly connected between the two parties, and there is a lack of unified standards and processes. When a new application is connected, multiple applications are involved in the transformation, which makes the system more complex, difficult to maintain, and prone to security risks. Summary of the invention

[0004] In view of the above problems, the present disclosure provides a request response method, apparatus, device, medium and program product.

[0005] According to a first aspect of the present disclosure, a request response method is provided, which is applied to an application mutual trust platform, including:

[0006] Receiving a mutual trust request initiated by a first application, wherein the mutual trust request is used to request to establish a mutual trust relationship with a second application, and the mutual trust request includes identification information of the first application and identification information of the second application;

[0007] Performing trustworthy authentication on the first application according to the identification information of the first application;

[0008] In the case where the first application passes the trusted authentication, calling the pass service interface; and

[0009] A mutual trust relationship is established between the first application and the second application based on the identification information of the first application and the identification information of the second application using the pass service corresponding to the pass service interface.

[0010] According to an embodiment of the present disclosure, the use of the pass service corresponding to the pass service interface to establish a mutual trust relationship between the first application and the second application based on the identification information of the first application and the identification information of the second application includes:

[0011] When the pass service corresponding to the pass service interface determines that a mutual trust relationship is allowed to be established between the first application and the second application based on the identification information of the first application and the identification information of the second application, a mutual trust relationship is established between the first application and the second application.

[0012] According to an embodiment of the present disclosure, when the pass service corresponding to the pass service interface determines that a mutual trust relationship is allowed to be established between the first application and the second application based on the identification information of the first application and the identification information of the second application, establishing a mutual trust relationship between the first application and the second application includes:

[0013] Based on the identification information of the first application and the identification information of the second application, obtaining a first mutual trust flag corresponding to the first application and a second mutual trust flag corresponding to the second application from a mutual trust information table, wherein the mutual trust information table includes mutual trust information of each application in the application mutual trust platform;

[0014] In a case where it is determined according to the first mutual trust flag and the second mutual trust flag that a mutual trust relationship is allowed to be established between the first application and the second application, a mutual trust relationship is established between the first application and the second application.

[0015] According to an embodiment of the present disclosure, when the pass service corresponding to the pass service interface determines that a mutual trust relationship is allowed to be established between the first application and the second application based on the identification information of the first application and the identification information of the second application, establishing a mutual trust relationship between the first application and the second application includes:

[0016] Based on the identification information of the first application and the identification information of the second application, obtaining a first security level corresponding to the first application and a second security level corresponding to the second application;

[0017] Analyze the security levels of the first security level and the second security level using the pass service corresponding to the pass service interface to obtain an analysis result;

[0018] In the case where the analysis result indicates that the security level corresponding to the first security level is higher than the security level corresponding to the second security level, a mutual trust relationship is established between the first application and the second application.

[0019] According to an embodiment of the present disclosure, the request response method further includes:

[0020] When the analysis result indicates that the security level corresponding to the first security level is lower than the security level corresponding to the second security level, a prompt message indicating that the establishment of the mutual trust relationship fails is sent to the first application.

[0021] According to an embodiment of the present disclosure, the mutual trust request also includes information to be transmitted;

[0022] The above method further includes:

[0023] After establishing a mutual trust relationship between the first application and the second application, encrypting the information to be transmitted according to the public key corresponding to the second application using the pass service corresponding to the pass service interface to obtain encrypted information; and

[0024] The encrypted information is returned to the first application so that the first application sends the encrypted information to the second application and the second application decrypts the encrypted information.

[0025] According to an embodiment of the present disclosure, the information to be transmitted is encrypted according to the public key corresponding to the second application to obtain the encrypted information, which includes:

[0026] Determining an encryption algorithm corresponding to the second security level according to the second security level corresponding to the second application;

[0027] The above-mentioned pass service is used to encrypt the above-mentioned information to be transmitted according to the above-mentioned public key and the above-mentioned encryption algorithm to obtain the above-mentioned encrypted information.

[0028] According to an embodiment of the present disclosure, the mutual trust request also includes user information;

[0029] The above method further includes:

[0030] Before calling the pass service interface, determining the user type corresponding to the user information according to the user information;

[0031] When the above user type meets the preset conditions, the above pass service interface is called.

[0032] According to an embodiment of the present disclosure, the request response method further includes:

[0033] Before calling the pass service interface, obtaining the login information of the first application in real time;

[0034] In the case where the above-mentioned login information meets the preset risk prevention and control strategy, the risk prevention and control authentication strategy corresponding to the above-mentioned preset risk prevention and control strategy is used to perform trustworthy authentication on the above-mentioned first application.

[0035] A second aspect of the present disclosure provides a request response device, which is applied to an application mutual trust platform and includes:

[0036] A receiving module, configured to receive a mutual trust request initiated by a first application, wherein the mutual trust request is used to request to establish a mutual trust relationship with a second application, and the mutual trust request includes identification information of the first application and identification information of the second application;

[0037] A first trusted authentication module, used to perform trusted authentication on the first application according to the identification information of the first application;

[0038] A first calling module is used to call the pass service interface when the first application passes the trusted authentication; and

[0039] An establishment module is used to establish a mutual trust relationship between the first application and the second application based on the identification information of the first application and the identification information of the second application by using the pass service corresponding to the pass service interface.

[0040] The third aspect of the present disclosure provides an electronic device, comprising: one or more processors; and a memory for storing one or more programs, wherein when the one or more programs are executed by the one or more processors, the one or more processors execute the above-mentioned request response method.

[0041] The fourth aspect of the present disclosure further provides a computer-readable storage medium having executable instructions stored thereon, which, when executed by a processor, causes the processor to execute the above-mentioned request response method.

[0042] The fifth aspect of the present disclosure also provides a computer program product, including a computer program, which implements the above-mentioned request response method when executed by a processor.

[0043] According to an embodiment of the present disclosure, a mutual trust request initiated by a first application for requesting to establish a mutual trust relationship with a second application is received through an application mutual trust platform, and the mutual trust request includes the identification information of the first application and the identification information of the second application; then the first application is trusted authenticated according to the identification information of the first application; when the first application passes the trusted authentication, the pass service interface is called; then the pass service corresponding to the pass service interface is used to establish a mutual trust relationship between the first application and the second application based on the identification information of the first application and the identification information of the second application. The technical solution of the embodiment of the present disclosure maintains the mutual trust information between each application through the application mutual trust platform, so that each application only needs to connect with the application mutual trust platform, thereby reducing the communication cost between applications, reducing the complexity of the system, reducing the development workload, and improving the overall security. At least partially solves the technical problems in the related art that due to the direct connection between the two parties of the mutual trust application, there is a lack of unified standards and processes. When a new application is connected, it involves the transformation of multiple applications, making the system more complex, difficult to maintain, and prone to security risks. BRIEF DESCRIPTION OF THE DRAWINGS

[0044] The above contents and other objects, features and advantages of the present disclosure will become more apparent through the following description of the embodiments of the present disclosure with reference to the accompanying drawings, in which:

[0045] Figure 1 The flowchart of applying the mutual trust method in the related art is schematically shown.

[0046] Figure 2 The flowchart of the request response method according to the embodiment of the present disclosure is schematically shown.

[0047] Figure 3 A diagram schematically illustrates an application scenario of a request response method, apparatus, device, medium, and program product according to an embodiment of the present disclosure;

[0048] Figure 4 A flowchart of a request response method according to an embodiment of the present disclosure is schematically shown;

[0049] Figure 5 A flowchart of a method for establishing a mutual trust relationship between a first application and a second application according to an embodiment of the present disclosure is schematically shown;

[0050] Figure 6 A flowchart of a request response method according to another embodiment of the present disclosure is schematically shown;

[0051] Figure 7 The structure block diagram of the request response device according to the embodiment of the present disclosure is schematically shown;

[0052] Figure 8A structural block diagram schematically shows a request response device according to another embodiment of the present disclosure; and

[0053] Fig. 9 A block diagram of an electronic device suitable for implementing the request response method according to an embodiment of the present disclosure is schematically shown. DETAILED DESCRIPTION

[0054] Hereinafter, embodiments of the present disclosure will be described with reference to the accompanying drawings. However, it should be understood that these descriptions are exemplary only and are not intended to limit the scope of the present disclosure. In the following detailed description, for ease of explanation, many specific details are set forth to provide a comprehensive understanding of the embodiments of the present disclosure. However, it is apparent that one or more embodiments may also be implemented without these specific details. In addition, in the following description, descriptions of known structures and technologies are omitted to avoid unnecessary confusion of the concepts of the present disclosure.

[0055] The terms used herein are only for describing specific embodiments and are not intended to limit the present disclosure. The terms "comprise", "include", etc. used herein indicate the existence of the features, steps, operations and / or components, but do not exclude the existence or addition of one or more other features, steps, operations or components.

[0056] All terms (including technical and scientific terms) used herein have the meanings commonly understood by those skilled in the art, unless otherwise defined. It should be noted that the terms used herein should be interpreted as having a meaning consistent with the context of this specification, and should not be interpreted in an idealized or overly rigid manner.

[0057] When using expressions such as "at least one of A, B, and C, etc.", they should generally be interpreted according to the meaning of the expression commonly understood by those skilled in the art (for example, "a system having at least one of A, B, and C" should include but is not limited to a system having A alone, B alone, C alone, A and B, A and C, B and C, and / or A, B, C, etc.).

[0058] In the era of mobile Internet, multiple application products are often launched to meet users' needs for social interaction, shopping, life payment, investment and financial management, etc. At present, in order to connect applications, mutual trust is usually established between applications, and business function portals are used to realize mutual jumps between applications, so as to increase the linkage between applications and form a complete system to better serve users.

[0059] However, if Figure 1As shown in the figure, the applications of related technologies are directly connected to each other. If one of the applications is hacked, the other applications that trust each other will also be hacked, which poses certain security risks. In addition, due to the lack of unified standards and processes, when new applications are connected, multiple applications need to be modified, making the system more complex and difficult to maintain.

[0060] Figure 2 The flowchart of the request response method according to the embodiment of the present disclosure is schematically shown.

[0061] In view of this, the present disclosure is directed to the above technical problems, such as Figure 2 As shown, by using the application mutual trust platform to maintain the mutual trust information between applications, each application only needs to connect with the application mutual trust platform. The application mutual trust platform receives the mutual trust request initiated by application A to request to establish a mutual trust relationship with application B. The mutual trust request includes the identification information of application A and the identification information of application B. Then the application mutual trust platform performs trusted authentication on application A according to the identification information of application A. After the trusted authentication is passed, the pass service is used to establish a mutual trust relationship between application A and application B. This solution allows each application to only need to connect with the application mutual trust platform. For newly connected applications, it only needs to maintain application information in the application mutual trust, and mutual trust with existing applications can be easily achieved, thereby reducing the communication cost between applications, reducing the complexity of the system, and reducing the development workload. At the same time, the application is trusted and authenticated by the application mutual trust platform, which improves the security of the application.

[0062] Specifically, an embodiment of the present disclosure provides a request response method, which is applied to an application mutual trust platform, including: receiving a mutual trust request initiated by a first application, wherein the mutual trust request is used to request to establish a mutual trust relationship with a second application, and the mutual trust request includes identification information of the first application and identification information of the second application; performing trusted authentication on the first application according to the identification information of the first application; in a case where the first application passes the trusted authentication, calling a pass service interface; and establishing a mutual trust relationship between the first application and the second application based on the identification information of the first application and the identification information of the second application using a pass service corresponding to the pass service interface.

[0063] It should be noted that the request response method and device provided in the embodiments of the present disclosure can be used in the field of information security technology and the financial field. The request response method and device provided in the embodiments of the present disclosure can also be used in any field other than the field of information security technology and the financial field. The application field of the request response method and device provided in the embodiments of the present disclosure is not limited.

[0064] In the technical solution of the present disclosure, the user's authorization or consent is obtained before obtaining or collecting the user's personal information.

[0065] In the technical solution disclosed in the present invention, the acquisition, collection, storage, use, processing, transmission, provision, disclosure and application of data are in compliance with the provisions of relevant laws and regulations, necessary confidentiality measures are taken, and do not violate public order and good morals.

[0066] Figure 3 The application scenario diagram of the request response method, apparatus, device, medium and program product according to the embodiments of the present disclosure is schematically shown.

[0067] like Figure 3 As shown, the application scenario 300 according to this embodiment may include a network, a terminal device and a server. The network 304 is used to provide a medium for a communication link between the terminal devices 301, 302, 303 and the server 305. The network 304 may include various connection types, such as wired, wireless communication links or optical fiber cables, etc.

[0068] Users can use terminal devices 301, 302, 303 to interact with server 305 through network 304 to receive or send messages, etc. Various communication client applications can be installed on terminal devices 301, 302, 303, such as shopping applications, web browser applications, search applications, instant messaging tools, email clients, social platform software, financial applications, etc. (only for example).

[0069] The terminal devices 301 , 302 , and 303 may be various electronic devices having a display screen and supporting web browsing, including but not limited to smart phones, tablet computers, laptop computers, and desktop computers, etc.

[0070] The server 305 may be a server that provides various services, such as a background management server (only an example) that provides support for websites browsed by users using the terminal devices 301, 302, and 303. The background management server may analyze and process the received data such as user requests, and feed back the processing results (such as web pages, information, or data obtained or generated according to user requests) to the terminal device.

[0071] It should be noted that the request response method provided in the embodiment of the present disclosure can generally be executed by the server 305. Accordingly, the request response device provided in the embodiment of the present disclosure can generally be set in the server 305. The request response method provided in the embodiment of the present disclosure can also be executed by a server or server cluster that is different from the server 305 and can communicate with the terminal device 301, 302, 303 and / or the server 305. Accordingly, the request response device provided in the embodiment of the present disclosure can also be set in a server or server cluster that is different from the server 305 and can communicate with the terminal device 301, 302, 303 and / or the server 305. Alternatively, the request response method provided in the embodiment of the present disclosure can also be executed by the terminal device 301, 302, or 303, or it can also be executed by other terminal devices different from the terminal device 301, 302, or 303. Accordingly, the request response device provided in the embodiment of the present disclosure can also be set in the terminal device 301, 302, or 303, or it can be set in other terminal devices different from the terminal device 301, 302, or 303.

[0072] It should be understood that Figure 3 The number of terminal devices, networks and servers in the embodiment is only for illustration. Any number of terminal devices, networks and servers may be provided according to implementation requirements.

[0073] The following will be based on Figure 3 The scene described by Figures 4 to 6 The request response method of the disclosed embodiment is described in detail.

[0074] Figure 4 The flowchart of the request response method according to the embodiment of the present disclosure is schematically shown.

[0075] like Figure 4 As shown, the request response method of this embodiment is applied to an application mutual trust platform, and the request response method includes operations S410 to S440.

[0076] In operation S410, a mutual trust request initiated by a first application is received, wherein the mutual trust request is used to request to establish a mutual trust relationship with a second application, and the mutual trust request includes identification information of the first application and identification information of the second application.

[0077] According to an embodiment of the present disclosure, to establish a mutual trust relationship using the application mutual trust platform, it is necessary to register in advance on the application mutual trust platform, and the registered application information is managed and controlled through the application mutual trust information table.

[0078] According to an embodiment of the present disclosure, the application mutual trust information table includes information such as the application ID, the application key, the encryption algorithm corresponding to the application, and the application level, as shown in Table 1 for details.

[0079] According to an embodiment of the present disclosure, the identification information of the first application may include, for example, the ID of the first application in the application mutual trust information table. The identification information of the second application may include, for example, the ID of the second application in the application mutual trust information table.

[0080] In operation S420, the first application is authenticated as trustworthy according to the identification information of the first application.

[0081] According to an embodiment of the present disclosure, the legitimacy of the first application is verified based on the identification information of the first application, for example, whether the first application has been registered on the application platform, whether the user of the first application is a real-name user, whether there is a security risk in the first application, etc.

[0082] In operation S430, when the first application passes the trusted authentication, the pass service interface is called.

[0083] According to an embodiment of the present disclosure, calling the pass service interface facilitates establishing a mutual trust relationship between the first application and the second application using the pass service.

[0084] According to the embodiments of the present disclosure, through the trusted authentication of the first application, a mutual trust relationship can be established with the second application only after the trusted authentication is passed, thereby ensuring the safety and reliability of the application.

[0085] In operation S440, a mutual trust relationship is established between the first application and the second application based on the identification information of the first application and the identification information of the second application using the pass service corresponding to the pass service interface.

[0086] According to an embodiment of the present disclosure, a mutual trust request initiated by a first application for requesting to establish a mutual trust relationship with a second application is received through an application mutual trust platform, and the mutual trust request includes the identification information of the first application and the identification information of the second application; then the first application is trusted authenticated according to the identification information of the first application; when the first application passes the trusted authentication, the pass service interface is called; then the pass service corresponding to the pass service interface is used to establish a mutual trust relationship between the first application and the second application based on the identification information of the first application and the identification information of the second application. The technical solution of the embodiment of the present disclosure maintains the mutual trust information between each application through the application mutual trust platform, so that each application only needs to connect with the application mutual trust platform, thereby reducing the communication cost between applications, reducing the complexity of the system, reducing the development workload, and improving the overall security. At least partially solves the technical problems in the related art that due to the direct connection between the two parties of the mutual trust application, there is a lack of unified standards and processes. When a new application is connected, it involves the transformation of multiple applications, making the system more complex, difficult to maintain, and prone to security risks.

[0087] Table 1 Application mutual trust information table

[0088]

[0089] The application mutual trust platform controls applications by maintaining the application mutual trust information table. As shown in Table 1, the application mutual trust information table includes application ID, key, encryption algorithm, risk prevention and control strategy, target application URL (URL refers to uniform resource locator), security level, mutual trust flag, and user type.

[0090] The application ID is the unique identifier of the application. The application mutual trust platform maintains application information through the application ID.

[0091] Key: used to establish mutual trust between applications. The target application's key is used to encrypt the transmitted information. Mutual trust can be established only after the target application successfully decrypts it, ensuring that the transmitted information is not tampered with.

[0092] Encryption algorithm: When encrypting transmitted information, you can choose to use different encryption algorithms based on the security level of the application, taking into account both system performance and security.

[0093] Target application URL: The target application generally only allows the initiating application to access a specific URL.

[0094] Security level: The security level of applications is divided into different levels, such as Rong e-Link (social category) and mobile banking (financial category). Applications with low security levels are not allowed to establish mutual trust with applications with high security levels, or when applications with low security levels establish mutual trust with applications with high security levels, authentication operations such as face recognition and SMS authentication are not allowed to be added to ensure security.

[0095] Mutual trust flag: 0 means mutual trust is not allowed, 1 means mutual trust is allowed. The mutual trust flag can be used to control whether mutual trust with the current application is allowed. When a risk occurs, the mutual trust flag can be modified to quickly close the mutual trust with the current application.

[0096] User type: 0 indicates a non-real-name user, and 1 indicates a real-name user. User types can be divided into non-real-name users and real-name users. Real-name users undergo identity authentication, and the application can limit the mutual trust of users who undergo real-name authentication.

[0097] Risk prevention and control strategy: Set various strategies according to the current status of the user for more detailed management and control. Risk prevention and control strategies include, for example, whether the number of logins on the same day exceeds the preset number, whether the current device is a commonly used device in the target channel, whether the current application is mutually trusted for the first time, whether there are multiple users logging in to the same device, whether the same user logs in on multiple devices, whether there are multiple users logging in to the same network address, and whether the same user logs in using different network addresses. If a risk is identified, the current user is generally not allowed to apply mutual trust to ensure the security of the user's financial account.

[0098] According to an embodiment of the present disclosure, the above-mentioned establishment of a mutual trust relationship between the first application and the second application by using the pass service corresponding to the above-mentioned pass service interface based on the identification information of the above-mentioned first application and the identification information of the above-mentioned second application includes: establishing a mutual trust relationship between the above-mentioned first application and the above-mentioned second application when it is determined that the mutual trust relationship is allowed to be established between the above-mentioned first application and the above-mentioned second application by using the pass service corresponding to the above-mentioned pass service interface based on the identification information of the above-mentioned first application and the identification information of the above-mentioned second application.

[0099] According to an embodiment of the present disclosure, a pass service is used to determine whether to allow the first application and the second application to establish mutual trust. Only when mutual trust is allowed can a mutual trust relationship be established between the first application and the second application.

[0100] According to an embodiment of the present disclosure, in the case where mutual trust is not allowed to be established between the first application and the second application, prompt information indicating that the mutual trust relationship establishment fails is sent.

[0101] According to an embodiment of the present disclosure, a method for determining whether a mutual trust relationship is allowed to be established between a first application and a second application includes: determining whether a mutual trust relationship is allowed to be established based on a first mutual trust flag of the first application and a second mutual trust flag of the second application, and determining whether a mutual trust relationship is allowed to be established based on a first security level corresponding to the first application and a second security level corresponding to the second application.

[0102] According to an embodiment of the present disclosure, in the case where the pass service corresponding to the pass service interface determines that a mutual trust relationship is allowed to be established between the first application and the second application based on the identification information of the first application and the identification information of the second application, the mutual trust relationship is established between the first application and the second application, including: based on the identification information of the first application and the identification information of the second application, obtaining a first mutual trust flag corresponding to the first application and a second mutual trust flag corresponding to the second application from a mutual trust information table, wherein the mutual trust information table includes mutual trust information of each application in the application mutual trust platform; in the case where it is determined that a mutual trust relationship is allowed to be established between the first application and the second application based on the first mutual trust flag and the second mutual trust flag, a mutual trust relationship is established between the first application and the second application.

[0103] According to an embodiment of the present disclosure, when the first mutual trust flag and the second mutual trust flag are mutual trust permission flags, it indicates that a mutual trust relationship is allowed to be established between the first application and the second application.

[0104] According to the embodiments of the present disclosure, the mutual trust flag can be used to control whether mutual trust with the current application can be established. When a risk occurs, the mutual trust with the current application can be quickly closed by modifying the mutual trust flag.

[0105] According to an embodiment of the present disclosure, in the case where the pass service corresponding to the pass service interface determines that a mutual trust relationship is allowed to be established between the first application and the second application based on the identification information of the first application and the identification information of the second application, the establishment of a mutual trust relationship between the first application and the second application includes: obtaining a first security level corresponding to the first application and a second security level corresponding to the second application based on the identification information of the first application and the identification information of the second application; analyzing the security levels of the first security level and the second security level using the pass service corresponding to the pass service interface to obtain an analysis result; in the case where the analysis result indicates that the security level corresponding to the first security level is higher than the security level corresponding to the second security level, establishing a mutual trust relationship between the first application and the second application.

[0106] According to an embodiment of the present disclosure, the request response method further includes: when the analysis result indicates that the security level corresponding to the first security level is lower than the security level corresponding to the second security level, face recognition or SMS authentication is required.

[0107] According to an embodiment of the present disclosure, applications are divided into security levels, and when an application with a low security level establishes mutual trust with an application with a high security level, face recognition or SMS authentication is performed.

[0108] For example, the first application is Rong e Lian, and since Rong e Lian is a social application, the security level of the application is configured as 1. The second application is mobile banking, and since mobile banking is a financial application, the security level of the application is configured as 3. When Rong e Lian establishes mutual trust with mobile banking, since the security level of Rong e Lian is lower than that of mobile banking, face recognition or SMS authentication is required.

[0109] According to an embodiment of the present disclosure, the request response method further includes: sending a prompt message indicating failure to establish a mutual trust relationship to the first application when the analysis result indicates that the security level corresponding to the first security level is lower than the security level corresponding to the second security level.

[0110] According to the embodiments of the present disclosure, applications are classified into security levels, and generally, mutual trust is not established between applications with low security levels and applications with high security levels, and prompt information indicating failure to establish a mutual trust relationship is sent to applications with low security levels.

[0111] For example, the first application is Rong e Lian, and since Rong e Lian is a social application, the security level of the application is configured as 1. The second application is mobile banking, and since mobile banking is a financial application, the security level of the application is configured as 3. When Rong e Lian establishes mutual trust with mobile banking, since the security level of Rong e Lian is lower than that of mobile banking, Rong e Lian is not allowed to establish mutual trust with mobile banking, and a prompt message indicating that the establishment of mutual trust relationship fails is sent to Rong e Lian.

[0112] Figure 5 The flowchart schematically shows a method for establishing a mutual trust relationship between a first application and a second application according to an embodiment of the present disclosure.

[0113] like Figure 5 As shown, the method includes operations S501 to S507.

[0114] In operation S501, based on identification information of a first application and identification information of a second application, a first security level corresponding to the first application and a second security level corresponding to the second application are acquired.

[0115] In operation S502, the security levels of the first security level and the second security level are analyzed using the pass service corresponding to the pass service interface to obtain an analysis result.

[0116] In operation S503, it is determined whether the security level corresponding to the first security level is higher than the security level corresponding to the second security level according to the analysis result. In the case where the security level corresponding to the first security level is lower than the security level corresponding to the second security level, operations S504 to S507 are performed. In the case where the security level corresponding to the first security level is higher than the security level corresponding to the second security level, operation S507 is directly performed.

[0117] In operation S504, secondary authentication is performed on the first application, where the secondary authentication includes SMS authentication or face recognition authentication.

[0118] In operation S505, it is determined whether the secondary authentication of the first application has passed. If the secondary authentication has not passed, operation S506 is performed; if the secondary authentication has passed, operation S507 is performed.

[0119] In operation S506, a prompt message indicating that the mutual trust relationship establishment fails is sent to the first application.

[0120] In operation S507 , a mutual trust relationship is established between the first application and the second application.

[0121] According to an embodiment of the present disclosure, the mutual trust request also includes information to be transmitted; the method also includes: after establishing a mutual trust relationship between the first application and the second application, encrypting the information to be transmitted according to the public key corresponding to the second application using the pass service corresponding to the pass service interface to obtain encrypted information; and returning the encrypted information to the first application, so that the first application sends the encrypted information to the second application and the second application decrypts the encrypted information.

[0122] According to an embodiment of the present disclosure, the information to be transmitted may include, for example, information carried by the first application in the jump from the first application to the second application. For example, the information to be transmitted includes transaction information and the like.

[0123] According to an embodiment of the present disclosure, the pass service is used to encrypt the information to be transmitted according to the public key corresponding to the second application to obtain encrypted information, and the encrypted information is returned to the first application. The first application sends the encrypted information to the second application, and the second application decrypts the encrypted information using the private key. After the decryption is successful, it can jump to the second application.

[0124] According to an embodiment of the present disclosure, the above-mentioned information to be transmitted is encrypted according to the public key corresponding to the above-mentioned second application to obtain the encrypted information, which includes: determining the encryption algorithm corresponding to the above-mentioned second security level according to the second security level corresponding to the above-mentioned second application; and encrypting the above-mentioned information to be transmitted according to the above-mentioned public key and the above-mentioned encryption algorithm using the above-mentioned pass service to obtain the above-mentioned encrypted information.

[0125] According to the embodiments of the present disclosure, applications are classified into security levels, and different encryption algorithms are selected for use according to the security level of the application when encrypting information to be transmitted, thereby taking into account both system performance and security.

[0126] According to an embodiment of the present disclosure, the encryption algorithm may include national encryption and non-national encryption, for example.

[0127] For example, for the application Rong e-Link, due to its low security level, it is sufficient to use a non-national secret encryption algorithm to encrypt the information to be transmitted. For the application mobile banking, due to its high security level, it is necessary to use a national secret encryption algorithm to encrypt the information to be transmitted.

[0128] Figure 6 The following schematically shows a flowchart of a request response method according to another embodiment of the present disclosure.

[0129] like Figure 6 As shown, the request response method of this embodiment includes operations S601 to S617.

[0130] In operation S601, the first application sends a mutual trust request to the application mutual trust platform to establish a mutual trust relationship with the second application.

[0131] In operation S602, the application mutual trust platform receives a mutual trust request initiated by a first application, wherein the mutual trust request includes identification information of the first application, identification information of the second application, and information to be transmitted.

[0132] In operation S603, the application mutual trust platform determines whether the first application has been registered on the application mutual trust platform according to the identification information of the first application. If it is determined that the first application has not been registered on the application mutual trust platform, operation S604 is performed; if it is determined that the first application has been registered on the application mutual trust platform, operations S605 to S606 are performed.

[0133] In operation S604, a prompt message indicating that the mutual trust relationship establishment fails is sent to the first application.

[0134] In operation S605, the pass service interface is called.

[0135] In operation S606, the pass service determines whether to allow a mutual trust relationship to be established between the first application and the second application based on the identification information of the first application and the identification information of the second application. If it is determined that a mutual trust relationship is not allowed to be established between the first application and the second application, operation S607 is performed; if it is determined that a mutual trust relationship is allowed to be established between the first application and the second application, operations S608 to S617 are performed.

[0136] In operation S607, a prompt message indicating that the mutual trust relationship establishment fails is sent to the first application.

[0137] In operation S608 , a mutual trust relationship is established between the first application and the second application.

[0138] In operation S609, the pass service encrypts the information to be transmitted according to the public key corresponding to the second application to obtain encrypted information.

[0139] In operation S610, the encrypted information is returned to the application mutual trust platform.

[0140] In operation S611, the application trust platform receives the encrypted information.

[0141] In operation S612, encrypted information is sent to the first application.

[0142] In operation S613, the first application receives the encrypted information sent by the application mutual trust platform.

[0143] In operation S614, the first application sends the encrypted information to the second application.

[0144] In operation S615 , the second application receives the encrypted information.

[0145] In operation S616, the encrypted information is decrypted using the private key of the second application.

[0146] In operation S617 , the process jumps to the second application.

[0147] According to the embodiments of the present disclosure, the security and legality of applications are authenticated with the help of an application mutual trust platform, and the keys of each application are maintained by a pass service to encrypt the transmission information between applications to ensure the reliability of information transmission and prevent information tampering.

[0148] According to an embodiment of the present disclosure, the above-mentioned mutual trust request also includes user information; the above-mentioned method also includes: before calling the above-mentioned pass service interface, determining the user type corresponding to the above-mentioned user information according to the above-mentioned user information; when the above-mentioned user type meets the preset conditions, calling the above-mentioned pass service interface.

[0149] According to an embodiment of the present disclosure, user information may include information characterizing a user type, for example. User information may include user identification information, user name information, etc. User types may include, for example, non-real-name users and real-name users.

[0150] According to an embodiment of the present disclosure, the real-name user may include, for example, a user who has been authenticated; and the non-real-name user may include, for example, a user who has not been authenticated.

[0151] According to an embodiment of the present disclosure, when the user type meets a preset condition, calling the pass service interface may, for example, include calling the pass service interface when the user type is a real-name user.

[0152] According to an embodiment of the present disclosure, when the user type meets a preset condition, calling the pass service interface may also include, for example, not allowing the pass service interface to be called when the user type is a non-real-name user.

[0153] According to the embodiments of the present disclosure, by classifying user types, it is possible to limit the establishment of mutual trust after the user performs real-name verification, thereby further improving the security of applying mutual trust.

[0154] According to an embodiment of the present disclosure, the above-mentioned request response method also includes: before calling the above-mentioned pass service interface, obtaining the login information of the above-mentioned first application in real time; when the above-mentioned login information meets the preset risk prevention and control strategy, using the risk prevention and control authentication strategy corresponding to the above-mentioned preset risk prevention and control strategy to perform trusted authentication on the above-mentioned first application.

[0155] According to an embodiment of the present disclosure, the login information of the first application may include, for example, the number of login times of the first application, the number of logged-in users, and other information.

[0156] According to an embodiment of the present disclosure, the preset risk prevention and control strategy may, for example, include adding operations such as SMS verification and face recognition.

[0157] According to an embodiment of the present disclosure, for example, after the number of logins of a first application exceeds a preset number within a preset time period, SMS authentication or face recognition authentication is required for the first application.

[0158] Specifically, after the number of logins to the first application exceeds 50 in one day, SMS authentication or face recognition authentication is required for the first application.

[0159] According to an embodiment of the present disclosure, the request response method further includes identifying risks according to a risk prevention and control strategy. The risk prevention and control strategy includes, for example, whether the device that logs into the first application is a commonly used device, whether the first application is mutually trusted for the first time, whether there are multiple users logging into the same device, whether the same user logs in on multiple devices, whether there are multiple users logging in at the same network address, and whether the same user logs in using different network addresses.

[0160] If risks are identified according to the above risk prevention and control strategies, the current user will be stopped from applying mutual trust to ensure the security of the user's financial account.

[0161] According to the embodiments of the present disclosure, risk prevention and control is performed according to the risk prevention and control strategy using big data analysis technology. For example, the number of mutual trust initiated by the first application on the same day satisfies the Poisson distribution. Based on big data statistics, we can calculate the parameter u (the expected number of mutual trust initiations in one day) and the threshold t. When the probability p(n) of the number of mutual trust initiations n occurring on the same day is lower than the threshold, it means that the possibility of occurrence under normal circumstances is relatively small. It can be considered that the user account is at risk of being attacked, so mutual trust should be stopped or SMS or face recognition should be added. Mutual trust can only be enabled after passing the test.

[0162] According to the embodiments of the present disclosure, management and control are performed by maintaining the application mutual trust information table, and the corresponding mutual trust relationship can be dynamically configured and take effect immediately. When security risks occur, mutual trust can be closed in time to improve security.

[0163] According to the embodiments of the present disclosure, by using the application mutual trust platform to uniformly access applications, the application end is guaranteed to be safe and reliable, and the risk of being attacked is reduced. At the same time, since the pass service uniformly manages mutual trust, it manages multiple dimensions of applications and users from the system level, application level, user level and other granularities, and establishes accurate models through big data, dynamically adjusts, achieves optimal performance, and improves the security of user accounts.

[0164] It should be noted that, unless it is explicitly stated that there is a sequence of execution between different operations shown in the flowchart in the embodiments of the present disclosure, or there is a sequence of execution between different operations in technical implementation, otherwise, the execution order of multiple operations may not be prioritized, and multiple operations may also be executed simultaneously.

[0165] Based on the above request response method, the present disclosure also provides a request response device. Figure 7 The device is described in detail.

[0166] Figure 7 The structural block diagram of the request response device according to an embodiment of the present disclosure is schematically shown.

[0167] like Figure 7 As shown, the request response device 700 of this embodiment includes a receiving module 710 , a first trusted authentication module 720 , a first calling module 730 and an establishing module 740 .

[0168] The receiving module 710 is used to receive a mutual trust request initiated by the first application, wherein the mutual trust request is used to request to establish a mutual trust relationship with the second application, and the mutual trust request includes the identification information of the first application and the identification information of the second application. In one embodiment, the receiving module 710 can be used to perform the operation S210 described above, which will not be repeated here.

[0169] The first trusted authentication module 720 is used to perform trusted authentication on the first application according to the identification information of the first application. In one embodiment, the first trusted authentication module 720 can be used to perform the operation S220 described above, which will not be described in detail here.

[0170] The first calling module 730 is used to call the pass service interface when the first application passes the trusted authentication. In one embodiment, the first calling module 730 can be used to perform the operation S230 described above, which will not be repeated here.

[0171] The establishment module 740 is used to establish a mutual trust relationship between the first application and the second application using the pass service corresponding to the pass service interface based on the identification information of the first application and the identification information of the second application. In one embodiment, the establishment module 740 can be used to perform the operation S240 described above, which will not be repeated here.

[0172] According to an embodiment of the present disclosure, the above-mentioned establishment module is also used to establish a mutual trust relationship between the above-mentioned first application and the above-mentioned second application when the pass service corresponding to the above-mentioned pass service interface is used to determine that a mutual trust relationship is allowed to be established between the above-mentioned first application and the above-mentioned second application based on the identification information of the above-mentioned first application and the identification information of the above-mentioned second application.

[0173] According to an embodiment of the present disclosure, the above-mentioned establishment module includes: a first acquisition unit and a first establishment unit.

[0174] The first acquisition unit is used to acquire a first mutual trust flag corresponding to the first application and a second mutual trust flag corresponding to the second application from a mutual trust information table based on the identification information of the first application and the identification information of the second application, wherein the mutual trust information table includes mutual trust information of each application in the application mutual trust platform.

[0175] The first establishing unit is configured to establish a mutual trust relationship between the first application and the second application when it is determined according to the first mutual trust flag and the second mutual trust flag that the mutual trust relationship between the first application and the second application is allowed to be established.

[0176] According to an embodiment of the present disclosure, the above-mentioned establishment module further includes: a second acquisition unit, an analysis unit and a second establishment unit.

[0177] The second acquisition unit is used to acquire a first security level corresponding to the first application and a second security level corresponding to the second application based on the identification information of the first application and the identification information of the second application.

[0178] The analysis unit is used to analyze the security levels of the first security level and the second security level by using the pass service corresponding to the pass service interface to obtain an analysis result.

[0179] The second establishing unit is configured to establish a mutual trust relationship between the first application and the second application when the analysis result indicates that the security level corresponding to the first security level is higher than the security level corresponding to the second security level.

[0180] According to an embodiment of the present disclosure, the request response device further includes: a sending module for sending a prompt message indicating failure to establish a mutual trust relationship to the first application when the analysis result indicates that the security level corresponding to the first security level is lower than the security level corresponding to the second security level.

[0181] According to an embodiment of the present disclosure, the mutual trust request also includes information to be transmitted.

[0182] Figure 8 The structural block diagram of a request response device according to another embodiment of the present disclosure is schematically shown.

[0183] like Figure 8As shown, the request response device 700 of this embodiment includes a receiving module 710 , a first trusted authentication module 720 , a first calling module 730 , and an establishing module 740 , and also includes an encryption module 750 and a returning module 760 .

[0184] The encryption module 750 is used to encrypt the information to be transmitted according to the public key corresponding to the second application using the pass service corresponding to the pass service interface after establishing a mutual trust relationship between the first application and the second application to obtain encrypted information.

[0185] The return module 760 is used to return the encrypted information to the first application, so that the first application sends the encrypted information to the second application and the second application decrypts the encrypted information.

[0186] According to an embodiment of the present disclosure, the encryption module includes: a determination unit and an encryption unit.

[0187] The determination unit is used to determine the encryption algorithm corresponding to the second security level according to the second security level corresponding to the second application.

[0188] The encryption unit is used to utilize the pass service to encrypt the information to be transmitted according to the public key and the encryption algorithm to obtain the encrypted information.

[0189] According to an embodiment of the present disclosure, the mutual trust request also includes user information.

[0190] According to an embodiment of the present disclosure, the request response device further includes: a determination module and a second calling module.

[0191] A determination module is used to determine the user type corresponding to the above user information based on the above user information before calling the pass service interface.

[0192] The second calling module is used to call the above-mentioned pass service interface when the above-mentioned user type meets the preset conditions.

[0193] According to an embodiment of the present disclosure, the request response device further includes: an acquisition module and a second trusted authentication module.

[0194] The acquisition module is used to obtain the login information of the above-mentioned first application in real time before calling the above-mentioned pass service interface.

[0195] The second trusted authentication module is used to perform trusted authentication on the first application by adopting a risk prevention and control authentication strategy corresponding to the preset risk prevention and control strategy when the login information satisfies the preset risk prevention and control strategy.

[0196] According to the embodiments of the present invention, any one or more of the modules, submodules, units, and subunits, or at least part of the functions of any one of them can be implemented in one module. According to the embodiments of the present invention, any one or more of the modules, submodules, units, and subunits can be split into multiple modules for implementation. According to the embodiments of the present invention, any one or more of the modules, submodules, units, and subunits can be at least partially implemented as hardware circuits, such as field programmable gate arrays (FPGAs), programmable logic arrays (PLAs), systems on chips, systems on substrates, systems on packages, application specific integrated circuits (ASICs), or can be implemented by hardware or firmware in any other reasonable way of integrating or packaging the circuit, or implemented in any one of the three implementation methods of software, hardware, and firmware, or in any appropriate combination of any of them. Alternatively, according to the embodiments of the present invention, one or more of the modules, submodules, units, and subunits can be at least partially implemented as computer program modules, and when the computer program modules are run, the corresponding functions can be performed.

[0197] According to an embodiment of the present disclosure, any multiple modules of the receiving module 710, the first trusted authentication module 720, the first calling module 730, the establishing module 740, the encryption module 750 and the returning module 760 can be combined in one module for implementation, or any one of the modules can be split into multiple modules. Alternatively, at least part of the functions of one or more of these modules can be combined with at least part of the functions of other modules and implemented in one module. According to an embodiment of the present disclosure, at least one of the receiving module 710, the first trusted authentication module 720, the first calling module 730, the establishing module 740, the encryption module 750 and the returning module 760 can be at least partially implemented as a hardware circuit, such as a field programmable gate array (FPGA), a programmable logic array (PLA), a system on a chip, a system on a substrate, a system on a package, an application specific integrated circuit (ASIC), or can be implemented by hardware or firmware such as any other reasonable way of integrating or packaging the circuit, or by any one of the three implementation methods of software, hardware and firmware or by a suitable combination of any of them. Alternatively, at least one of the receiving module 710, the first trusted authentication module 720, the first calling module 730, the establishing module 740, the encryption module 750 and the returning module 760 may be at least partially implemented as a computer program module, which may perform corresponding functions when executed.

[0198] It should be noted that the request response device part in the embodiment of the present disclosure corresponds to the request response method part in the embodiment of the present disclosure. The description of the request response device part specifically refers to the request response method part, which will not be repeated here.

[0199] Fig. 9 A block diagram of an electronic device suitable for implementing the request response method according to an embodiment of the present disclosure is schematically shown.

[0200] like Fig. 9 As shown, the electronic device 900 according to an embodiment of the present disclosure includes a processor 901, which can perform various appropriate actions and processes according to a program stored in a read-only memory (ROM) 902 or a program loaded from a storage part 908 into a random access memory (RAM) 903. The processor 901 may include, for example, a general-purpose microprocessor (e.g., a CPU), an instruction set processor and / or a related chipset and / or a special-purpose microprocessor (e.g., an application-specific integrated circuit (ASIC)), etc. The processor 901 may also include an onboard memory for caching purposes. The processor 901 may include a single processing unit or multiple processing units for performing different actions of the method flow according to an embodiment of the present disclosure.

[0201] In RAM 903, various programs and data required for the operation of electronic device 900 are stored. Processor 901, ROM 902 and RAM 903 are connected to each other via bus 904. Processor 901 performs various operations of the method flow according to the embodiment of the present disclosure by executing the program in ROM 902 and / or RAM 903. It should be noted that the program can also be stored in one or more memories other than ROM 902 and RAM 903. Processor 901 can also perform various operations of the method flow according to the embodiment of the present disclosure by executing the program stored in the one or more memories.

[0202] According to an embodiment of the present disclosure, the electronic device 900 may further include an input / output (I / O) interface 905, which is also connected to the bus 904. The electronic device 900 may further include one or more of the following components connected to the I / O interface 905: an input portion 906 including a keyboard, a mouse, etc.; an output portion 907 including a cathode ray tube (CRT), a liquid crystal display (LCD), etc., and a speaker, etc.; a storage portion 908 including a hard disk, etc.; and a communication portion 909 including a network interface card such as a LAN card, a modem, etc. The communication portion 909 performs communication processing via a network such as the Internet. A drive 910 is also connected to the I / O interface 905 as needed. A removable medium 911, such as a magnetic disk, an optical disk, a magneto-optical disk, a semiconductor memory, etc., is installed on the drive 910 as needed, so that a computer program read therefrom is installed into the storage portion 908 as needed.

[0203] The present disclosure also provides a computer-readable storage medium, which may be included in the device / apparatus / system described in the above embodiments; or may exist independently without being assembled into the device / apparatus / system. The above computer-readable storage medium carries one or more programs, and when the above one or more programs are executed, the method according to the embodiment of the present disclosure is implemented.

[0204] According to an embodiment of the present disclosure, a computer-readable storage medium may be a non-volatile computer-readable storage medium, for example, may include but is not limited to: a portable computer disk, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), a portable compact disk read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination thereof. In the present disclosure, a computer-readable storage medium may be any tangible medium containing or storing a program, which may be used by or in combination with an instruction execution system, an apparatus, or a device. For example, according to an embodiment of the present disclosure, a computer-readable storage medium may include the ROM 902 and / or RAM 903 described above and / or one or more memories other than ROM 902 and RAM 903.

[0205] The embodiment of the present disclosure also includes a computer program product, which includes a computer program, and the computer program contains program code for executing the method shown in the flowchart. When the computer program product is run in a computer system, the program code is used to enable the computer system to implement the request response method provided by the embodiment of the present disclosure.

[0206] The above functions defined in the system / device of the embodiment of the present disclosure are performed when the computer program is executed by the processor 901. According to the embodiment of the present disclosure, the system, device, module, unit, etc. described above can be implemented by a computer program module.

[0207] In one embodiment, the computer program may be based on a tangible storage medium such as an optical storage device, a magnetic storage device, etc. In another embodiment, the computer program may also be transmitted and distributed in the form of a signal on a network medium, and downloaded and installed through the communication part 909, and / or installed from a removable medium 911. The program code contained in the computer program may be transmitted using any appropriate network medium, including but not limited to: wireless, wired, etc., or any suitable combination of the above.

[0208] In such an embodiment, the computer program can be downloaded and installed from the network through the communication part 909, and / or installed from the removable medium 911. When the computer program is executed by the processor 901, the above functions defined in the system of the embodiment of the present disclosure are performed. According to the embodiment of the present disclosure, the system, device, means, module, unit, etc. described above can be implemented by a computer program module.

[0209] According to an embodiment of the present disclosure, the program code for executing the computer program provided by the embodiment of the present disclosure can be written in any combination of one or more programming languages. Specifically, these computing programs can be implemented using high-level process and / or object-oriented programming languages, and / or assembly / machine languages. Programming languages ​​include, but are not limited to, Java, C++, python, "C" language or similar programming languages. The program code can be executed entirely on the user computing device, partially on the user device, partially on the remote computing device, or entirely on the remote computing device or server. In the case of a remote computing device, the remote computing device can be connected to the user computing device through any type of network, including a local area network (LAN) or a wide area network (WAN), or can be connected to an external computing device (for example, using an Internet service provider to connect through the Internet).

[0210] The flow charts and block diagrams in the accompanying drawings illustrate the possible architecture, functions and operations of the systems, methods and computer program products according to various embodiments of the present disclosure. In this regard, each box in the flow chart or block diagram can represent a module, a program segment, or a part of a code, and the above-mentioned module, program segment, or a part of a code contains one or more executable instructions for realizing the specified logical function. It should also be noted that in some alternative implementations, the functions marked in the box can also occur in a different order from the order marked in the accompanying drawings. For example, two boxes represented in succession can actually be executed substantially in parallel, and they can sometimes be executed in the opposite order, depending on the functions involved. It should also be noted that each box in the block diagram or flow chart, and the combination of the boxes in the block diagram or flow chart can be implemented with a dedicated hardware-based system that performs a specified function or operation, or can be implemented with a combination of dedicated hardware and computer instructions.

[0211] It will be appreciated by those skilled in the art that the features described in the various embodiments and / or claims of the present disclosure may be combined and / or combined in a variety of ways, even if such combinations and / or combinations are not explicitly described in the present disclosure. In particular, the features described in the various embodiments and / or claims of the present disclosure may be combined and / or combined in a variety of ways without departing from the spirit and teachings of the present disclosure. All of these combinations and / or combinations fall within the scope of the present disclosure.

[0212] The embodiments of the present disclosure are described above. However, these embodiments are only for illustrative purposes and are not intended to limit the scope of the present disclosure. Although the embodiments are described above separately, this does not mean that the measures in the various embodiments cannot be used in combination to advantage. The scope of the present disclosure is defined by the attached claims and their equivalents. Without departing from the scope of the present disclosure, those skilled in the art may make a variety of substitutions and modifications, which should all fall within the scope of the present disclosure.

Claims

1. A request response method, applied to an application mutual trust platform, comprising: Receiving a mutual trust request initiated by a first application, wherein the mutual trust request is used to request to establish a mutual trust relationship with a second application, and the mutual trust request includes identification information of the first application and identification information of the second application; Performing trustworthy authentication on the first application according to the identification information of the first application; When the first application passes the trusted authentication, calling the pass service interface; and Using the pass service corresponding to the pass service interface, based on the identification information of the first application and the identification information of the second application, to establish a mutual trust relationship between the first application and the second application; Wherein, using the pass service corresponding to the pass service interface to establish a mutual trust relationship between the first application and the second application based on the identification information of the first application and the identification information of the second application includes: acquiring, based on the identification information of the first application and the identification information of the second application, a first security level corresponding to the first application and a second security level corresponding to the second application; Analyzing the security levels of the first security level and the second security level using the pass service corresponding to the pass service interface to obtain an analysis result; In a case where the analysis result indicates that the security level corresponding to the first security level is higher than the security level corresponding to the second security level, a mutual trust relationship is established between the first application and the second application.

2. The method according to claim 1, wherein: The establishing a mutual trust relationship between the first application and the second application based on the identification information of the first application and the identification information of the second application by using the pass service corresponding to the pass service interface includes: When the pass service corresponding to the pass service interface determines that a mutual trust relationship is allowed to be established between the first application and the second application based on the identification information of the first application and the identification information of the second application, a mutual trust relationship is established between the first application and the second application.

3. The method according to claim 2, wherein: In the case where it is determined by using the pass service corresponding to the pass service interface based on the identification information of the first application and the identification information of the second application that a mutual trust relationship is allowed to be established between the first application and the second application, establishing a mutual trust relationship between the first application and the second application includes: Based on the identification information of the first application and the identification information of the second application, acquiring a first mutual trust flag corresponding to the first application and a second mutual trust flag corresponding to the second application from a mutual trust information table, wherein the mutual trust information table includes mutual trust information of each application in the application mutual trust platform; In a case where it is determined according to the first mutual trust flag and the second mutual trust flag that a mutual trust relationship is allowed to be established between the first application and the second application, a mutual trust relationship is established between the first application and the second application.

4. The method according to claim 1, further comprising: When the analysis result indicates that the security level corresponding to the first security level is lower than the security level corresponding to the second security level, prompt information indicating that establishment of a mutual trust relationship fails is sent to the first application.

5. The method according to claim 1, wherein: The mutual trust request also includes information to be transmitted; The method further comprises: After establishing a mutual trust relationship between the first application and the second application, encrypting the information to be transmitted according to the public key corresponding to the second application using the pass service corresponding to the pass service interface to obtain encrypted information; and The encrypted information is returned to the first application so that the first application sends the encrypted information to the second application and the second application decrypts the encrypted information.

6. The method according to claim 5, wherein: The encrypting the information to be transmitted according to the public key corresponding to the second application to obtain the encrypted information includes: Determining, according to a second security level corresponding to the second application, an encryption algorithm corresponding to the second security level; The pass service is used to encrypt the information to be transmitted according to the public key and the encryption algorithm to obtain the encrypted information.

7. The method according to claim 1, wherein: The mutual trust request also includes user information; The method further comprises: Before calling the pass service interface, determining a user type corresponding to the user information according to the user information; When the user type meets the preset conditions, the pass service interface is called.

8. The method according to claim 1, further comprising: Before calling the pass service interface, obtaining the login information of the first application in real time; In the case where the login information satisfies a preset risk prevention and control strategy, a risk prevention and control authentication strategy corresponding to the preset risk prevention and control strategy is used to perform trustworthy authentication on the first application.

9. A request response device, applied to an application mutual trust platform, comprising: a receiving module, configured to receive a mutual trust request initiated by a first application, wherein the mutual trust request is used to request to establish a mutual trust relationship with a second application, and the mutual trust request includes identification information of the first application and identification information of the second application; A first trusted authentication module, configured to perform trusted authentication on the first application according to the identification information of the first application; A first calling module, configured to call a pass service interface when the first application passes the trusted authentication; and an establishing module, configured to establish a mutual trust relationship between the first application and the second application based on the identification information of the first application and the identification information of the second application by using the pass service corresponding to the pass service interface; Wherein, the establishment module includes: a second acquiring unit, configured to acquire, based on the identification information of the first application and the identification information of the second application, a first security level corresponding to the first application and a second security level corresponding to the second application; an analyzing unit, configured to analyze the security levels of the first security level and the second security level by using the pass service corresponding to the pass service interface to obtain an analysis result; The second establishing unit is configured to establish a mutual trust relationship between the first application and the second application when the analysis result indicates that a security level corresponding to the first security level is higher than a security level corresponding to the second security level.

10. An electronic device comprising: one or more processors; a storage device for storing one or more programs, When the one or more programs are executed by the one or more processors, the one or more processors execute the method according to any one of claims 1 to 8.

11. A computer-readable storage medium having executable instructions stored thereon, which, when executed by a processor, causes the processor to execute the method according to any one of claims 1 to 8.

12. A computer program product, comprising a computer program, wherein when the computer program is executed by a processor, the method according to any one of claims 1 to 8 is implemented.

Images