Server identity authentication method, device, system, computer device, storage medium and computer program product

Abstract

The application relates to a server identity authentication method, device, system, computer equipment, storage medium and computer program product, relates to the technical field of computers, and can be used in the field of financial technology or other related fields. The method comprises the following steps: determining a first delay time according to a first server identifier and a second server identifier; generating a first communication request sent to the second server according to a current time and the first delay time; the first communication request carries a first sending time, the first sending time being determined according to the current time and the first delay time; verifying the first sending time and a second sending time to obtain a first time verification result; the second sending time being determined according to the current time and the first delay time; and determining a first identity authentication result corresponding to the first server and the second server according to the first time verification result. By adopting the method, the security of server identity authentication can be improved.

Description

TECHNICAL FIELD

[0001] The present application relates to the technical field of computer, in particular to a server identity authentication method, device, system, computer equipment, computer readable storage medium and computer program product. BACKGROUND

[0002] At present, in order to avoid malicious server participating in transaction or obtaining sensitive information, guarantee the security of financial transaction, it is very important to perform server identity authentication.

[0003] In the prior art, when performing server identity authentication, a fixed time authentication method is usually used. However, this method is easy to be predicted and simulated by attackers, resulting in low security of server identity authentication. SUMMARY

[0004] Therefore, it is necessary to provide a server identity authentication method, device, system, computer equipment, computer readable storage medium and computer program product capable of improving the security of server identity authentication.

[0005] In a first aspect, the present application provides a server identity authentication method applied to a first server, comprising:

[0006] determining a first delay time according to a first server identifier and a second server identifier; the first server identifier is used to represent a server identifier corresponding to the first server, and the second server identifier is used to represent a server identifier corresponding to a second server; the first server and the second server both belong to a financial data server;

[0007] generating a first communication request sent to the second server according to a current time and the first delay time; the first communication request carries a first sending time, and the first sending time is determined according to the current time and the first delay time;

[0008] verifying the first sending time and a second sending time to obtain a first time verification result; the second sending time is used to represent a sending time carried by a second communication request sent by the second server to the first server; the second sending time is determined according to the current time and the first delay time;

[0009] determining a first identity authentication result corresponding to the first server and the second server according to the first time verification result.

[0010] In one of the embodiments, the first delay time is determined according to the first server identifier and the second server identifier, comprising:

[0011] combining the first server identity and the second server identity to obtain a combined server identity as a key corresponding to the first server identity and the second server identity;

[0012] determining a first time delay according to the key.

[0013] In one embodiment, the determining of the first time delay according to the key comprises:

[0014] converting the key into a string corresponding to the key according to a preset mapping relationship; the preset mapping relationship is used to represent a corresponding relationship between a key and a string;

[0015] truncating the string corresponding to the key to obtain the first time delay.

[0016] In one embodiment, after the determining of the first identity verification result corresponding to the first server and the second server according to the first time verification result, the method further comprises:

[0017] establishing a data transmission channel between the first server and the second server in a case where the first identity verification result is successful.

[0018] In one embodiment, after the establishing of the data transmission channel between the first server and the second server, the method further comprises:

[0019] sending a current data packet carrying a check code to the second server through the data transmission channel, determining a second time delay according to the check code, and determining a fourth sending time according to the second time delay and a third sending time corresponding to the current data packet; the second server is configured to determine the second time delay according to the check code, and generate an identity verification request according to the second time delay and the third sending time; the identity verification request carries a fifth sending time, and the fifth sending time is determined according to the third sending time and the second time delay.

[0020] receiving the identity verification request sent by the second server, and verifying the fourth sending time and the fifth sending time to obtain a second time verification result.

[0021] determining a second identity verification result corresponding to the first server and the second server according to the second time verification result.

[0022] In one embodiment, after the determining of the first identity verification result corresponding to the first server and the second server according to the first time verification result, the method further comprises:

[0023] In a case where the first identity authentication result is a failure, jumping to the step of determining the first delay time according to the first server identifier and the second server identifier, and obtaining a failure number corresponding to the first identity authentication result;

[0024] In a case where the failure number meets a preset number condition, generating a fault prompt information.

[0025] In a second aspect, the application further provides a server identity authentication method applied to a second server, the method comprising:

[0026] determining a first delay time according to a first server identifier and a second server identifier; the first server identifier is used to represent a server identifier corresponding to the first server, and the second server identifier is used to represent a server identifier corresponding to the second server; the first server and the second server both belong to financial data servers;

[0027] generating a second communication request sent to the first server according to a current time and the first delay time; the second communication request carries a second sending time, which is determined according to the current time and the first delay time;

[0028] verifying the first sending time and the second sending time to obtain a third time verification result; the first sending time is used to represent a sending time carried by a first communication request sent by the first server to the second server; the first sending time is determined according to the current time and the first delay time;

[0029] determining a third identity authentication result corresponding to the first server and the second server according to the third time verification result.

[0030] In a third aspect, the application further provides a server identity authentication device applied to a first server, comprising:

[0031] a first time determination module, configured to determine a first delay time according to a first server identifier and a second server identifier; the first server identifier is used to represent a server identifier corresponding to the first server, and the second server identifier is used to represent a server identifier corresponding to the second server; the first server and the second server both belong to financial data servers;

[0032] a first request sending module, configured to generate a first communication request sent to the second server according to a current time and the first delay time; the first communication request carries a first sending time, which is determined according to the current time and the first delay time;

[0033] The first time verification module is configured to verify the first sending time and the second sending time to obtain a first time verification result, wherein the second sending time is used to represent a sending time carried by a second communication request sent by the second server to the first server, and the second sending time is determined according to the current time and the first delay time.

[0034] The first result determination module is configured to determine a first identity verification result corresponding to the first server and the second server according to the first time verification result.

[0035] In a fourth aspect, the present application further provides a server identity verification apparatus applied to a second server, comprising:

[0036] The second time determination module is configured to determine a first delay time according to a first server identifier and a second server identifier, wherein the first server identifier is used to represent a server identifier corresponding to the first server, the second server identifier is used to represent a server identifier corresponding to the second server, and the first server and the second server both belong to financial data servers.

[0037] The second request sending module is configured to generate a second communication request sent to the first server according to a current time and the first delay time, wherein the second communication request carries a second sending time, and the second sending time is determined according to the current time and the first delay time.

[0038] The second time verification module is configured to verify the first sending time and the second sending time to obtain a third time verification result, wherein the first sending time is used to represent a sending time carried by a first communication request sent by the first server to the second server, and the first sending time is determined according to the current time and the first delay time.

[0039] The second result determination module is configured to determine a third identity verification result corresponding to the first server and the second server according to the third time verification result.

[0040] In a fifth aspect, the present application further provides a server identity verification system, comprising a first server and a second server, wherein the first server and the second server both belong to financial data servers.

[0041] The first server is configured to determine a first time delay according to a first server identifier and a second server identifier, generate a first communication request according to a current time and the first time delay, and send the first communication request to the second server; the first server identifier is used to represent a server identifier corresponding to the first server, and the second server identifier is used to represent a server identifier corresponding to the second server; the first communication request carries a first sending time, which is determined according to the current time and the first time delay;

[0042] The second server is configured to generate a second communication request according to the current time and the first time delay, and send the second communication request to the first server; the second communication request carries a second sending time, which is determined according to the current time and the first time delay.

[0043] The first server is further configured to verify the first sending time and the second sending time to obtain a first time verification result, and determine a first identity verification result corresponding to the first server and the second server according to the first time verification result.

[0044] In a sixth aspect, the present application further provides a computer device, comprising a memory and a processor, the memory stores a computer program, and the processor implements the following steps when executing the computer program:

[0045] determine a first time delay according to a first server identifier and a second server identifier; the first server identifier is used to represent a server identifier corresponding to the first server, and the second server identifier is used to represent a server identifier corresponding to the second server; the first server and the second server both belong to financial data servers;

[0046] generate a first communication request sent to the second server according to a current time and the first time delay; the first communication request carries a first sending time, which is determined according to the current time and the first time delay;

[0047] verify the first sending time and the second sending time to obtain a first time verification result; the second sending time is used to represent a sending time carried by a second communication request sent by the second server to the first server; the second sending time is determined according to the current time and the first time delay;

[0048] determine a first identity verification result corresponding to the first server and the second server according to the first time verification result.

[0049] In a seventh aspect, the present application provides a computer device, comprising a memory and a processor, wherein the memory stores a computer program, and the processor implements the following steps when executing the computer program:

[0050] determining a first delay time according to a first server identifier and a second server identifier, wherein the first server identifier is used to represent a server identifier corresponding to the first server, the second server identifier is used to represent a server identifier corresponding to the second server, and the first server and the second server both belong to financial data servers;

[0051] generating a second communication request sent to the first server according to a current time and the first delay time, wherein the second communication request carries a second sending time, and the second sending time is determined according to the current time and the first delay time;

[0052] verifying the first sending time and the second sending time to obtain a third time verification result, wherein the first sending time is used to represent a sending time carried by a first communication request sent by the first server to the second server, and the first sending time is determined according to the current time and the first delay time;

[0053] determining a third identity verification result corresponding to the first server and the second server according to the third time verification result.

[0054] In an eighth aspect, the present application provides a computer readable storage medium, which stores a computer program, and the computer program is executed by a processor to implement the following steps:

[0055] determining a first delay time according to a first server identifier and a second server identifier, wherein the first server identifier is used to represent a server identifier corresponding to the first server, the second server identifier is used to represent a server identifier corresponding to the second server, and the first server and the second server both belong to financial data servers;

[0056] generating a first communication request sent to the second server according to a current time and the first delay time, wherein the first communication request carries a first sending time, and the first sending time is determined according to the current time and the first delay time;

[0057] verifying the first sending time and the second sending time to obtain a first time verification result, wherein the second sending time is used to represent a sending time carried by a second communication request sent by the second server to the first server, and the second sending time is determined according to the current time and the first delay time;

[0058] According to the first time verification result, a first identity verification result corresponding to the first server and the second server is determined.

[0059] In a ninth aspect, the present application further provides a computer readable storage medium, which has a computer program stored thereon, and the computer program is executed by a processor to implement the following steps:

[0060] According to the first server identifier and the second server identifier, a first delay time is determined; the first server identifier is used to represent a server identifier corresponding to the first server, and the second server identifier is used to represent a server identifier corresponding to the second server; the first server and the second server both belong to financial data servers;

[0061] According to the current time and the first delay time, a second communication request sent to the first server is generated; the second communication request carries a second sending time, and the second sending time is determined according to the current time and the first delay time;

[0062] The first sending time and the second sending time are verified to obtain a third time verification result; the first sending time is used to represent a sending time carried by a first communication request sent by the first server to the second server; the first sending time is determined according to the current time and the first delay time;

[0063] According to the third time verification result, a third identity verification result corresponding to the first server and the second server is determined.

[0064] In a tenth aspect, the present application further provides a computer program product, which comprises a computer program, and the computer program is executed by a processor to implement the following steps:

[0065] According to the first server identifier and the second server identifier, a first delay time is determined; the first server identifier is used to represent a server identifier corresponding to the first server, and the second server identifier is used to represent a server identifier corresponding to the second server; the first server and the second server both belong to financial data servers;

[0066] According to the current time and the first delay time, a first communication request sent to the second server is generated; the first communication request carries a first sending time, and the first sending time is determined according to the current time and the first delay time;

[0067] verify the first sending time and the second sending time to obtain a first time verification result; the second sending time is used to represent a sending time carried by a second communication request sent by the second server to the first server; the second sending time is determined according to the current time and the first delay time;

[0068] determine a first identity verification result corresponding to the first server and the second server according to the first time verification result.

[0069] In a first aspect, a method for identity verification is provided, including:

[0070] determine a first delay time according to a first server identifier and a second server identifier; the first server identifier is used to represent a server identifier corresponding to the first server, and the second server identifier is used to represent a server identifier corresponding to the second server; the first server and the second server both belong to financial data servers;

[0071] generate a second communication request sent to the first server according to a current time and the first delay time; the second communication request carries a second sending time, which is determined according to the current time and the first delay time;

[0072] verify the first sending time and the second sending time to obtain a third time verification result; the first sending time is used to represent a sending time carried by a first communication request sent by the first server to the second server; the first sending time is determined according to the current time and the first delay time;

[0073] determine a third identity verification result corresponding to the first server and the second server according to the third time verification result.

[0074] The server identity authentication method, device, system, computer device, storage medium and computer program product determine a first delay time according to a first server identifier corresponding to the first server and a second server identifier corresponding to the second server, determine a first sending time according to a current time and the first delay time, generate a first communication request carrying the first sending time and sent to the second server, then verify the first sending time and a second sending time to obtain a first time verification result, and finally determine a first identity authentication result corresponding to the first server and the second server according to the first time verification result. In this way, when performing server identity authentication, the sending time determined according to the current time and the delay time is verified to determine the identity authentication result, which is beneficial to guarantee the security and reliability of the interaction between servers and reduce potential risks. Moreover, the sending time determined by the method is not a fixed time, which avoids the defect that the security of server identity authentication is low due to the fact that the fixed time verification method is easily predicted and simulated by attackers, thereby improving the security of server identity authentication. BRIEF DESCRIPTION OF DRAWINGS

[0075] In order to more clearly illustrate the technical solutions in the embodiments of the present application or the related art, the drawings needed to be used in the description of the embodiments of the present application or the related art will be briefly introduced. Obviously, the drawings in the following description are only some embodiments of the present application, and for those skilled in the art, other related drawings can also be obtained without creative labor on the basis of these drawings.

[0076] Figure 1 An application environment diagram of a server identity authentication method in an embodiment;

[0077] Figure 2 A flowchart of a server identity authentication method in an embodiment;

[0078] Figure 3 A flowchart of a step of determining a first delay time in an embodiment;

[0079] Figure 4 A flowchart of a server identity authentication method in another embodiment;

[0080] Figure 5 A flowchart of a server identity authentication method in still another embodiment;

[0081] Figure 6 A block diagram of a server identity authentication device in an embodiment;

[0082] Figure 7A structural block diagram of a server identity authentication device in another embodiment;

[0083] Figure 8 An internal structural diagram of a computer device in an embodiment. DETAILED DESCRIPTION

[0084] For the purpose, technical solutions and advantages of the present application to be more clear and explicit, the present application is further described in detail below in combination with the drawings and embodiments. It should be understood that the specific embodiments described herein are only used to explain the present application and not to limit the present application.

[0085] The collected information is information and data authorized by the user or fully authorized by all parties, and the collection, storage, use, processing, transmission, provision, disclosure and application of related data comply with relevant laws, regulations and standards of the country and region, necessary security measures are taken, public order and good customs are not violated, and appropriate operation portals are provided for the user to choose authorization or refusal.

[0086] The server identity authentication method provided by the embodiments of the present application can be applied in an application environment as shown in Figure 1 . Specifically, the first server 102 communicates with the second server 104 through a network. Specifically, referring to Figure 1 , the first server 102 determines a first delay time according to a first server identifier and a second server identifier, generates a first communication request according to a current time and the first delay time, and sends the first communication request to the second server 104; the first server identifier is used to represent the server identifier corresponding to the first server 102, and the second server identifier is used to represent the server identifier corresponding to the second server 104; the first communication request carries a first sending time, and the first sending time is determined according to the current time and the first delay time; the second server 104 generates a second communication request according to the current time and the first delay time, and sends the second communication request to the first server 102; the second communication request carries a second sending time, and the second sending time is determined according to the current time and the first delay time; the first server 102 verifies the first sending time and the second sending time to obtain a first time verification result, and determines a first identity authentication result corresponding to the first server 102 and the second server 104 according to the first time verification result. The first server 102 and the second server 104 can be implemented by an independent server or a server cluster composed of multiple servers.

[0087] In an exemplary embodiment, as shown in Figure 2 , a server identity authentication method is provided. Taking the first server in Figure 1 as an example for illustration, the method in the embodiment includes the following steps:

[0088] In step S201, a first delay time is determined according to a first server identifier and a second server identifier; the first server identifier is used to represent a server identifier corresponding to the first server, and the second server identifier is used to represent a server identifier corresponding to the second server; the first server and the second server both belong to a financial data server.

[0089] The first server identifier refers to a server identifier corresponding to the first server.

[0090] The server identifier refers to a unique identity identifier corresponding to the server. In an actual scenario, the server identifier can be a server certificate number, or a random string composed of self-compiled letters and characters.

[0091] The second server identifier refers to a server identifier corresponding to the second server.

[0092] The first delay time refers to a delay value determined according to the first server identifier and the second server identifier. It should be noted that the first delay time is in seconds.

[0093] Exemplarily, the first server responds to an identity authentication instruction corresponding to the first server and the second server, obtains a server identifier corresponding to the first server from a financial database as the first server identifier, and obtains a server identifier corresponding to the second server as the second server identifier; then, the first server obtains a corresponding relationship between the first server identifier, the second server identifier and the delay time, and determines a delay time corresponding to the first server identifier and the second server identifier as the first delay time according to the corresponding relationship, the first server identifier and the second server identifier.

[0094] In step S202, a first communication request sent to the second server is generated according to a current time and the first delay time; the first communication request carries a first sending time, and the first sending time is determined according to the current time and the first delay time.

[0095] The current time refers to the current network time, which can be the time corresponding to the determination of the first delay time.

[0096] The first communication request refers to a communication request sent by the first server to the second server.

[0097] The first sending time refers to a time corresponding to the first communication request sent to the second server. In an actual scenario, the first sending time refers to a timestamp.

[0098] Exemplarily, the first server determines, according to the current time and the first delay time, a sending time corresponding to the current time and the first delay time as the first sending time; then, the first server generates a first communication request carrying the first sending time and sent to the second server according to the current time and the first delay time; and then, the first server sends the first communication request to the second server.

[0099] For example, at the next whole hour (13:00:00 on March 26, 2024) after the current time (12:20:32 on March 26, 2024), the delay (the first delay time obtained by the foregoing truncation) initiates a communication request to the other party, and carries a timestamp of the time when the communication request is sent (both use network time, which ensures the same verification reference) in the communication request.

[0100] In step S203, the first sending time and the second sending time are verified to obtain a first time verification result; the second sending time is used to represent a sending time carried by a second communication request sent by the second server to the first server; and the second sending time is determined according to the current time and the first delay time.

[0101] The second sending time refers to a time corresponding to the second communication request sent to the first server.

[0102] The second communication request refers to a communication request sent by the second server to the first server.

[0103] The first time verification result is used to represent a time verification result corresponding to the first sending time and the second sending time, which can be success or failure. For example, in the case that the first sending time and the second sending time are equal, the first time verification result is success; and in the case that the first sending time and the second sending time are not equal, the first time verification result is failure.

[0104] Exemplarily, the first server receives the second communication request sent by the second server, and analyzes the second communication request to obtain the first sending time carried by the second communication request; then, the first server verifies the first sending time and the second sending time to obtain a time verification result corresponding to the first sending time and the second sending time as the first time verification result; for example, the first server verifies whether a timestamp of the communication request sent by the second server is consistent with a timestamp of the communication request sent by the first server to obtain the time verification result corresponding to the first sending time and the second sending time as the first time verification result.

[0105] In step S204, a first identity verification result corresponding to the first server and the second server is determined according to the first time verification result.

[0106] The first identity verification result is used to represent the identity verification result corresponding to the first server and the second server before data transmission. For example, when the first-time identity verification result is successful, the first identity verification result is successful; when the first-time identity verification result is failed, the first identity verification result is failed.

[0107] For example, the first server determines the identity verification result corresponding to the first server and the second server according to the first-time identity verification result and the correspondence between the time verification result and the identity verification result, as the first identity verification result.

[0108] In the above server identity verification method, the first delay time is determined according to the first server identifier corresponding to the first server and the second server identifier corresponding to the second server, the first sending time is determined according to the current time and the first delay time, the first communication request carrying the first sending time sent to the second server is generated, then the first sending time and the second sending time are verified to obtain the first-time identity verification result, and finally the first-time identity verification result is determined according to the first-time identity verification result. In this way, when the identity of the server is verified, the identity verification result is determined by determining the delay time corresponding to the server identifier and verifying the sending time determined according to the current time and the delay time, which is beneficial to guarantee the security and reliability of the interaction between the servers and reduce the potential risk. Moreover, the sending time determined by the method is not a fixed time, which avoids the defect that the security of server identity verification is low due to the fact that the method of verifying the fixed time is easily predicted and simulated by attackers, thereby improving the security of server identity verification.

[0109] In one exemplary embodiment, as shown in Figure 2 The step S201 of determining the first delay time according to the first server identifier and the second server identifier specifically includes the following steps:

[0110] The step S301 combines the first server identifier and the second server identifier to obtain a combined server identifier as a key corresponding to the first server identifier and the second server identifier.

[0111] The step S302 determines the first delay time according to the key.

[0112] The combined server identifier refers to the server identifier obtained by combining the first server identifier and the second server identifier.

[0113] The key is used to represent the encryption information corresponding to the first server identifier and the second server identifier.

[0114] Exemplarily, the first server combines the first server identifier and the second server identifier to obtain a combined server identifier as a combined server identifier; then, the first server takes the combined server identifier as a key corresponding to the first server identifier and the second server identifier; and then, the first server obtains a delay time corresponding to the key as the first delay time according to a correspondence between the key and the delay time.

[0115] For example, assuming that the first server identifier is "4dA3e9B2f" and the second server identifier is "hX7gV5cQ1", the first server combines the first server identifier and the second server identifier by means of interval insertion to obtain a combined server identifier "4hdXA73geV95B221f" as a combined server identifier; then, the first server takes the combined server identifier as a key "4hdXA73geV95B221f" corresponding to the first server identifier and the second server identifier.

[0116] In this embodiment, the first server identifier and the second server identifier are combined to obtain a key corresponding to the first server identifier and the second server identifier, and the key is generated by means of this unique combination, which increases the complexity and randomness of the key and improves the security protection capability of the system and reduces the risk of being cracked or attacked.

[0117] In an exemplary embodiment, the step S302 of determining the first delay time according to the key further includes: converting the key into a string corresponding to the key according to a preset mapping relationship; the preset mapping relationship is used to represent a correspondence between the key and the string; and the string corresponding to the key is intercepted to obtain the first delay time.

[0118] The preset mapping relationship is used to represent a correspondence between the key and the string. In an actual scenario, the preset mapping relationship refers to a correspondence between letters and numbers, for example, a=1, b=2, …, z=26, and the original numbers are retained.

[0119] The string refers to a pure number character corresponding to the key.

[0120] The string corresponding to the key is intercepted, which means that the numbers in the string corresponding to the key are intercepted from front to back.

[0121] Exemplarily, the first server converts the key into a string corresponding to the key according to a preset mapping relationship; then, the first server intercepts the string corresponding to the key to obtain an intercepted string as the first delay time.

[0122] For example, the first server converts the key "4hdXA73geV95B221f" into a string of pure digital characters according to the correspondence between letters and numbers, as the string corresponding to the key "484241735229522216"; then, the server obtains the interception rule (for example, intercepting several numbers from front to back as the delay value, and the delay value does not exceed 3600), and intercepts the string corresponding to the key to obtain the intercepted string "484" as the first delay time "484 seconds".

[0123] Further, the first server can intercept the first four digits of the string corresponding to the key, and perform threshold judgment on the numerical value corresponding to the first four digits of the string, and determine the first delay time according to the result of the threshold judgment. For example, the first server intercepts the first four digits "4842" of the string "484241735229522216" corresponding to the key, and compares the first four digits of the string with the threshold "3600". Since 4842 is greater than 3600, only the first three digits "484" of the string are intercepted as the first delay time "484 seconds".

[0124] In this embodiment, the correspondence between different keys and strings can be flexibly set according to specific needs through the preset mapping relationship, so that the obtained delay time is no longer a fixed value. Moreover, the delay time is obtained by directly intercepting the string, which is relatively simple and efficient, and reduces the complex calculation process.

[0125] In one exemplary embodiment, after determining the first identity verification result corresponding to the first server and the second server according to the first time verification result, it further includes: in the case that the first identity verification result is successful, establishing a data transmission channel between the first server and the second server.

[0126] Among them, the data transmission channel refers to the path formed between the first server and the second server for information intercommunication.

[0127] Exemplarily, the first server obtains the first IP address of the first server and the second IP address of the second server in the case that the first identity verification result is successful; then, the first server establishes a data transmission channel between the first server and the second server according to the first IP address and the second IP address.

[0128] In this embodiment, by ensuring that the data transmission channel is established only after the identity verification is successful, the security of data transmission is improved, unauthorized access and data leakage are prevented, and it is beneficial to effectively protect the data transmission in a specific and safe environment, thereby reducing the risk and error in the data transmission process.

[0129] In one exemplary embodiment, after the data transmission channel between the first server and the second server is established, the method further comprises: sending the current data packet carrying the check code to the second server through the data transmission channel, determining the second delay time according to the check code, and determining the fourth sending time according to the second delay time and the third sending time corresponding to the current data packet; the second server is configured to determine the second delay time according to the check code, and generate an identity verification request according to the second delay time and the third sending time; the identity verification request carries the fifth sending time, which is determined according to the third sending time and the second delay time; receiving the identity verification request sent by the second server, and verifying the fourth sending time and the fifth sending time to obtain a second time verification result; determining a second identity verification result corresponding to the first server and the second server according to the second time verification result.

[0130] The check code is used to represent a unique identification code corresponding to the current data packet, and is used for data integrity verification.

[0131] The current data packet refers to a data packet sent by the first server to the second server at the current time.

[0132] The second delay time refers to a delay value determined according to the check code. It should be noted that the second delay time is in seconds.

[0133] The third sending time refers to a time corresponding to the data packet sent by the first server to the second server.

[0134] The fourth sending time refers to a sending time determined by the first server according to the second delay time and the third sending time.

[0135] The identity verification request refers to request information corresponding to identity verification between the first server and the second server.

[0136] The fifth sending time refers to a sending time determined by the second server according to the second delay time and the third sending time.

[0137] The second time verification result is used to represent a time verification result corresponding to the fourth sending time and the fifth sending time, which can be success or failure. For example, in the case that the fourth sending time and the fifth sending time are equal, the second time verification result is success; in the case that the fourth sending time and the fifth sending time are not equal, the second time verification result is failure.

[0138] The second identity verification result is used to represent identity verification results corresponding to the first server and the second server in the data transmission process. For example, when the second time verification result is success, the second identity verification result is success; when the second time verification result is failure, the second identity verification result is failure.

[0139] Exemplarily, the first server sends the current data packet carrying the check code to the second server through the data transmission channel between the first server and the second server, and converts the check code into a string corresponding to the check code according to the corresponding relationship between the check code and the string. Then, the first server intercepts the string corresponding to the check code to obtain the second delay time. Then, the first server determines a sending time corresponding to the second delay time and a third sending time corresponding to the current data packet as a fourth sending time according to the second delay time and the third sending time. For example, the first server sums the second delay time and the third sending time to obtain the fourth sending time. After the second server receives the check code sent by the first server, the second server converts the check code into a string corresponding to the check code according to the corresponding relationship between the check code and the string. Then, the second server intercepts the string corresponding to the check code to obtain the second delay time, and determines a sending time corresponding to the second delay time and the third sending time as a fifth sending time according to the second delay time and the third sending time. Then, the second server generates an identity verification request carrying the fifth sending time and sends the identity verification request to the first server according to the second delay time and the third sending time. The first server receives the identity verification request sent by the second server, and obtains the fifth sending time by analyzing the identity verification request. Then, the first server verifies the fourth sending time and the fifth sending time to obtain a second time verification result. Then, the first server determines a second identity verification result corresponding to the first server and the second server according to the second time verification result and the corresponding relationship between the time verification result and the identity verification result.

[0140] In this embodiment, the second identity verification result corresponding to the first server and the second server is determined by the non-fixed check code, which is beneficial to ensure the integrity and correctness of the data and reduce data transmission errors. Moreover, the complex identity verification mechanism and the time-related verification process further ensure the security of data transmission and prevent illegal access and data tampering.

[0141] In an example embodiment, after determining the first identity verification result corresponding to the first server and the second server according to the first time verification result, the method further comprises: in the case that the first identity verification result is a failure, jumping to the step of determining the first delay time according to the first server identifier and the second server identifier, and obtaining a failure number corresponding to the first identity verification result; in the case that the failure number meets a preset number condition, generating a fault prompt information.

[0142] The failure number refers to the number of times corresponding to the failure of the first identity verification result.

[0143] The preset number condition refers to a preset number threshold, such as 3, which is used to judge the failure number corresponding to the first identity verification result. It should be noted that the preset number condition can be determined as appropriate.

[0144] The fault prompt information is used to represent information corresponding to the failure of the identity verification result between the first server and the second server.

[0145] For example, in the case that the first identity verification result is a failure, the first server jumps to the step of determining the first delay time according to the first server identifier and the second server identifier, and obtains the failure number corresponding to the first identity verification result; then, the first server obtains the preset number condition and judges the failure number according to the preset number condition; in the case that the failure number meets the preset number condition, the first server generates the fault prompt information; for example, in the case that the failure number is greater than or equal to the preset number, the first server generates the fault prompt information.

[0146] In this embodiment, when the identity verification fails, the delay time is determined again and the failure number is obtained, which can avoid misjudgment caused by network fluctuations or other reasons, and improve the stability and reliability of the system; moreover, when the failure number meets the preset number condition, the fault prompt information is generated, which is beneficial to timely discovering and solving the fault in the identity verification system, and thus improves the availability and maintenance efficiency of the system.

[0147] In an example embodiment, as shown in Figure 4 The present application also provides another server identity verification method, which is applied to the second server in Figure 1 for example, and specifically includes the following contents:

[0148] Step S401, determining a first delay time according to a first server identifier and a second server identifier; the first server identifier is used to represent a server identifier corresponding to the first server, and the second server identifier is used to represent a server identifier corresponding to the second server; the first server and the second server both belong to a financial data server.

[0149] Step S402, generating a second communication request sent to the first server according to the current time and the first delay time; the second communication request carries a second sending time, and the second sending time is determined according to the current time and the first delay time.

[0150] Step S403, verifying the first sending time and the second sending time to obtain a third time verification result; the first sending time is used to represent a sending time carried by a first communication request sent by the first server to the second server; and the first sending time is determined according to the current time and the first delay time.

[0151] Step S404, determining a third identity verification result corresponding to the first server and the second server according to the third time verification result.

[0152] The third time verification result is used to represent a time verification result corresponding to the first sending time and the second sending time, which can be success or failure. For example, in the case that the first sending time and the second sending time are equal, the third time verification result is success; in the case that the first sending time and the second sending time are not equal, the third time verification result is failure.

[0153] The third identity verification result is used to represent an identity verification result corresponding to the first server and the second server before data transmission. For example, in the case that the first time verification result is success, the third identity verification result is success; in the case that the first time verification result is failure, the third identity verification result is failure.

[0154] Exemplarily, the second server obtains, from the financial database, the server identification corresponding to the first server as the first server identification and the server identification corresponding to the second server as the second server identification in response to the identity authentication instruction corresponding to the first server and the second server; then, the second server obtains the correspondence among the first server identification, the second server identification and the delay time, and determines the delay time corresponding to the first server identification and the second server identification as the first delay time according to the correspondence and the first server identification and the second server identification; then, the second server determines the sending time corresponding to the current time and the first delay time as the second sending time according to the current time and the first delay time; then, the second server generates the second communication request carrying the second sending time and sent to the first server according to the current time and the first delay time; then, the second server sends the second communication request to the first server; then, the second server receives the first communication request sent by the first server and analyzes the first communication request to obtain the first sending time carried by the first communication request; then, the second server verifies the first sending time and the second sending time to obtain the time verification result corresponding to the first sending time and the second sending time as the third time verification result; for example, the second server verifies whether the time stamp of the communication request sent by the second server is consistent with the time stamp of the communication request sent by the second server to obtain the time verification result corresponding to the first sending time and the second sending time as the third time verification result; then, the second server determines the identity authentication result corresponding to the first server and the second server as the third identity authentication result according to the third time verification result and the correspondence between the time verification result and the identity authentication result.

[0155] It should be noted that the specific limitations of the above steps can refer to the related embodiments of steps S201 to S204, which will not be repeated here.

[0156] In this embodiment, when performing identity authentication of the server, the delay time corresponding to the server identification is determined, and the sending time determined according to the current time and the delay time is verified to determine the identity authentication result, which is beneficial to guarantee the security and reliability of the interaction between the servers and reduce the potential risk; moreover, the sending time determined by the method is not a fixed time, which avoids the defect that the security of the server identity authentication is relatively low due to the fact that the method of verifying the fixed time is easily predicted and simulated by the attacker, thereby improving the security of the server identity authentication.

[0157] In one exemplary embodiment, as shown in Figure 5 Another server identity authentication method is provided, and the method is applied to the server identity authentication system as shown in Figure 1The first server in the first server is taken as an example for illustration, including the following steps:

[0158] In step S501, the first server identifier and the second server identifier are combined to obtain a combined server identifier as a key corresponding to the first server identifier and the second server identifier; the first server identifier is used to represent the server identifier corresponding to the first server, and the second server identifier is used to represent the server identifier corresponding to the second server; the first server and the second server both belong to the financial data server.

[0159] In step S502, the key is converted into a string corresponding to the key according to a preset mapping relationship; the preset mapping relationship is used to represent the corresponding relationship between the key and the string; the string corresponding to the key is intercepted to obtain a first delay time.

[0160] In step S503, a first communication request sent to the second server is generated according to the current time and the first delay time; the first communication request carries a first sending time, and the first sending time is determined according to the current time and the first delay time.

[0161] In step S504, the first sending time and the second sending time are verified to obtain a first time verification result; the second sending time is used to represent the sending time carried by the second communication request sent by the second server to the first server; the second sending time is determined according to the current time and the first delay time.

[0162] In step S505, the first identity verification result corresponding to the first server and the second server is determined according to the first time verification result.

[0163] In step S506, in the case that the first identity verification result is successful, a data transmission channel between the first server and the second server is established.

[0164] In step S507, the current data packet carrying the check code is sent to the second server through the data transmission channel, and the second delay time is determined according to the check code, and the fourth sending time is determined according to the second delay time and the third sending time corresponding to the current data packet; the second server is used to determine the second delay time according to the check code, and generate an identity verification request according to the second delay time and the third sending time; the identity verification request carries a fifth sending time, and the fifth sending time is determined according to the third sending time and the second delay time; the identity verification request sent by the second server is received, and the fourth sending time and the fifth sending time are verified to obtain a second time verification result; the second identity verification result corresponding to the first server and the second server is determined according to the second time verification result.

[0165] Step S508, in the case that the first identity verification result is failure, jump to the step of determining the first delay time according to the first server identifier and the second server identifier, and obtaining the failure number corresponding to the first identity verification result.

[0166] Step S509, in the case that the failure number meets the preset number condition, generate a fault prompt information.

[0167] In the above server identity verification method, when identity verification of the server is performed, the server identifier and the corresponding delay time are determined, and the sending time determined according to the current time and the delay time is verified to determine the identity verification result, which is beneficial to guarantee the security and reliability of the interaction between the servers and reduce potential risks. Moreover, the sending time determined by the method is not a fixed time, which avoids the defect that the security of the server identity verification is low due to the fact that the method of verifying by using a fixed time is easily predicted and simulated by attackers, and thus the security of the server identity verification is improved.

[0168] In one exemplary embodiment, in order to more clearly illustrate the server identity verification method provided by the embodiments of the present application, the server identity verification method is specifically described below with one specific embodiment. In one embodiment, the present application further provides a server identity verification method for bank data migration between servers. When identity verification of the server is performed, first, the first delay time is determined according to the first server identifier corresponding to the first server and the second server identifier corresponding to the second server, then the first sending time is determined according to the current time and the first delay time, and the first communication request carrying the first sending time is generated and sent to the second server, next, the first sending time and the second sending time are verified to obtain the first time verification result, and finally, the first identity verification result corresponding to the first server and the second server is determined according to the first time verification result. Specifically, the following contents are included:

[0169] Step one, before starting data transmission, identity authentication is completed between the two servers to establish a reliable and secure data transmission channel.

[0170] Specifically, it includes:

[0171] 1. Apply for the certificates ab of the server A and the server B in the third-party certificate authority, and install the certificate ab on the server A and the server B, and the server A and the server B generate a communication token or become a double key according to their own certificate a and the certificate b of the other party;

[0172] 2. Server A and server B get a pure digital string based on the key processing, and get a delay value M by taking Y bits from the Xth bit of the pure digital string. Then, server A and server B simultaneously initiate a communication request to each other after the delay value of the next whole point hour of the current time, and carry the time stamp of the time when the communication request is sent by themselves (both use network time to ensure the same check reference) in the communication request. Then, it is verified whether the time stamp of the communication request sent by the other party is consistent with the time stamp of the communication request sent by itself. If they are consistent, it means that the identity verification is passed.

[0173] Specifically, an embodiment is provided for illustration:

[0174] We assume that the certificate is a 10-digit random string containing letters and numbers, and then the certificates a and b are 4dA3e9B2f and hX7gV5cQ1 respectively. Then, the key is generated. In order to facilitate the illustration and understanding, the key is obtained by inserting intervals in this embodiment, that is, 4hdXA73geV95B221f. In actual application, other more complex algorithms can be used, which are not illustrated here.

[0175] Then, the key is converted into a string of pure digital characters "2763141016115134915121218". In order to convert the string 4hdXA73geV95B221f into pure digital characters, a simple mapping algorithm is used. This algorithm converts each letter according to its position in the English alphabet table to the corresponding number (for example, a=1, b=2,…, z=26), and retains the original numbers. For capital letters, the same mapping rule is also used. In actual application, more complex conversion or encryption methods are needed. Here, only a basic character-to-number conversion method is used for example, without involving complex encryption or hash algorithms.

[0176] Then, several digits are taken from "2763141016115134915121218" from front to back as the delay value. The cutting rule is: no more than 3600, and as close to 3600 as possible. Then, we can cut "2763" from this string.

[0177] Subsequently, the two servers initiate communication with each other after the delay value of the next whole hour of the current time, which means that the next whole hour (13:00:00 on March 26, 2024) of the current time (for example, 12:20:32 on March 26, 2024) is delayed by 2763 seconds (the delay value obtained by intercepting "2763" from 13:00:00), and a communication request is initiated to the other party, and the time stamp of the time when the communication request is sent is carried in the communication request (both use network time to ensure the same verification reference), and then it is verified whether the time stamp of the communication request sent by the other party is consistent with the time stamp of the communication request sent by itself. If they are consistent, it means that the identity verification is passed.

[0178] At this point, the identity authentication between the two servers before starting data transmission is completed.

[0179] Further, it can be seen that the previous method may have the problem of long delay time, so the number (3600) in the interception rule can be changed according to actual needs, or it can not be intercepted from the first digit, but a few digits behind to increase complexity, and the starting point can be selected as the next hour, the next ten minutes, etc. to reduce the overall delay time.

[0180] Step two, real-time identity authentication between the two servers during data transmission.

[0181] Specifically, it includes:

[0182] When migrating data from server A to server B, the data is migrated in the form of data packets, so each data packet needs to be encrypted and verified, so each data packet will have a verification code for verification.

[0183] Therefore, server A generates a pure digital string according to the verification code of the current data packet when sending each data packet, and intercepts the delay value, and calculates the verification time stamp after delaying the delay value from the time point when the current data packet is sent.

[0184] Therefore, when server B receives the data packet, it will record the time point when the current data packet is sent, generate a pure digital string according to the verification code of the current data packet in the same way, and intercept the delay value. The identity verification request is sent to server A after delaying the delay value from the time point when the current data packet is sent, and carries the sending time stamp. Server A verifies whether the sending time stamp of the identity verification request is consistent with the verification time stamp. If they are consistent, it means that the identity verification is passed.

[0185] Because the verification code and the sending completion time of each data packet are inconsistent, the dynamic verification effect of non-fixed time verification can be achieved, and the security and reliability of identity verification are improved.

[0186] In this way, real-time identity authentication between two servers during data transmission is completed.

[0187] Because the embodiments provided in the present application use basic algorithms and rules for ease of understanding, some problems may occur, but this does not mean that the present application can only use the algorithms and rules in the embodiments,

[0188] The character-to-number conversion method in the embodiments is relatively simple and may not be suitable for high-security scenarios. In actual applications, more complex encryption or hashing algorithms may be used to protect data security.

[0189] The delay value mentioned in the embodiments may be too long, resulting in actual communication delay. In actual use, the delay start point can be adjusted for optimization, but this requires a balance between security and efficiency.

[0190] In the embodiments, relying on network time may lead to inaccurate time synchronization, especially in cases of network delay or server clock desynchronization. In actual use, a more accurate time synchronization mechanism is needed, such as using NTP (Network Time Protocol).

[0191] Regarding the problem of secure communication between servers, how to ensure the security of communication is a key issue when transmitting data between servers. The present application ensures the authenticity and reliability of the identity of both parties through the identity authentication mechanism, thereby avoiding the risk of unauthorized access and data leakage.

[0192] Regarding the limitations of fixed-time verification, traditional identity verification methods often use fixed-time or fixed-frequency verification methods, which are easily predicted and simulated by attackers, thereby reducing the security of verification. The present application uses a dynamic verification method based on data packet checksum to achieve non-fixed-time verification, greatly improving the security and reliability of verification.

[0193] Regarding the problem of delay control, how to reasonably control the delay during identity authentication is a problem that needs to be solved. Too long a delay may result in low communication efficiency and affect user experience; while too short a delay may increase the complexity of verification and even cause verification failure. The present application optimizes the calculation and interception rules of the delay value to effectively control the delay, ensuring both communication efficiency and verification security.

[0194] Regarding the security monitoring in the data transmission process, how to monitor the integrity and security of data in real time during data transmission is an important problem. The present application encrypts and checks each data packet through a real-time identity authentication mechanism, ensures the security and integrity of the data transmission process, thereby effectively preventing data tampering and man-in-the-middle attacks.

[0195] The above embodiment, when performing server identity authentication, determines the server identity and the corresponding delay time, and verifies the sending time determined according to the current time and the delay time to determine the identity authentication result, which helps to ensure the security and reliability of the interaction between servers and reduce potential risks; moreover, the sending time determined by the method is not a fixed time, which avoids the defect that the security of server identity authentication is low due to the fact that the fixed time verification method is easy to be predicted and simulated by attackers, thereby improving the security of server identity authentication. At the same time, in terms of security improvement, the identity authentication mechanism ensures the security and reliability of the data transmission channel; the use of certificates issued by a third-party certificate authority enables the identity of the communication parties to be effectively verified; in addition, in the data transmission process, real-time identity authentication further enhances the security of data transmission and prevents the risk of man-in-the-middle attacks or data tampering. In terms of dynamic verification effect, the present application adopts a dynamic verification method based on data packet check code, each data packet has a unique check code and sending completion time, which leads to non-fixed time sending of identity authentication requests; this dynamic verification mechanism greatly improves the complexity and security of identity authentication, making it difficult for attackers to predict and simulate the identity authentication process. In terms of delay control optimization, in the calculation and interception of the delay value, the present application provides various optimization means, such as changing the numbers in the interception rule, starting from the non-first position, selecting different time points as the delay starting point, etc., which can effectively reduce the overall delay time and improve the response speed and efficiency of the system. In terms of flexibility and scalability, the present application considers flexibility and scalability in the design; for example, when generating keys, various algorithms can be used to meet the security requirements in different scenarios; at the same time, the real-time identity authentication process can also be customized and optimized according to specific data transmission requirements.

[0196] It should be understood that although the steps in the flowcharts involved in the embodiments described above are shown in sequence according to the arrows, the steps are not necessarily executed in the order indicated by the arrows. Unless otherwise specified herein, the execution of the steps is not strictly limited in sequence, and the steps can be executed in other orders. Moreover, at least some of the steps in the flowcharts involved in the embodiments described above can include multiple steps or multiple stages, which are not necessarily executed at the same time, but can be executed at different times, and the execution order of the steps or stages is not necessarily sequential, but can be alternately or alternately executed with at least part of other steps or steps or stages in other steps.

[0197] Based on the same inventive concept, the embodiments of the present application also provide a server identity authentication device for implementing the above-mentioned server identity authentication method. The implementation scheme for solving the problem provided by the device is similar to the implementation scheme described in the above method, so the specific limitations in one or more server identity authentication device embodiments provided below can refer to the limitations of the server identity authentication method described above, which will not be repeated here.

[0198] In an exemplary embodiment, as shown in Figure 6 A server identity authentication device is provided, comprising: a first time determination module 601, a first request sending module 602, a first time verification module 603, and a first result determination module 604, wherein:

[0199] The first time determination module 601 is configured to determine a first delay time according to a first server identifier and a second server identifier; the first server identifier is used to represent the server identifier corresponding to the first server, and the second server identifier is used to represent the server identifier corresponding to the second server; the first server and the second server both belong to the financial data server.

[0200] The first request sending module 602 is configured to generate a first communication request sent to the second server according to the current time and the first delay time; the first communication request carries a first sending time, and the first sending time is determined according to the current time and the first delay time.

[0201] The first time verification module 603 is configured to verify the first sending time and a second sending time to obtain a first time verification result; the second sending time is used to represent the sending time carried by the second communication request sent by the second server to the first server; the second sending time is determined according to the current time and the first delay time.

[0202] The first result determination module 604 is configured to determine a first identity verification result corresponding to the first server and the second server according to the first time verification result.

[0203] In an example embodiment, the first time determination module 601 is further configured to combine the first server identifier and the second server identifier to obtain a combined server identifier as a key corresponding to the first server identifier and the second server identifier, and determine the first delay time according to the key.

[0204] In an example embodiment, the first time determination module 601 is further configured to convert the key into a string corresponding to the key according to a preset mapping relationship, wherein the preset mapping relationship is used to represent a corresponding relationship between the key and the string, and obtain the first delay time by intercepting the string corresponding to the key.

[0205] In an example embodiment, the server identity verification apparatus further includes a transmission channel establishment module configured to establish a data transmission channel between the first server and the second server in a case where the first identity verification result is successful.

[0206] In an example embodiment, the server identity verification apparatus further includes a third result determination module configured to send a current data packet carrying a check code to the second server through the data transmission channel, determine a second delay time according to the check code, and determine a fourth sending time according to the second delay time and a third sending time corresponding to the current data packet; the second server is configured to determine the second delay time according to the check code, generate an identity verification request according to the second delay time and the third sending time, wherein the identity verification request carries a fifth sending time determined according to the third sending time and the second delay time; receive the identity verification request sent by the second server, and verify the fourth sending time and the fifth sending time to obtain a second time verification result; and determine a second identity verification result corresponding to the first server and the second server according to the second time verification result.

[0207] In an example embodiment, the server identity verification apparatus further includes a prompt information generation module configured to jump to the step of determining the first delay time according to the first server identifier and the second server identifier in a case where the first identity verification result is failed, and obtain a failure number corresponding to the first identity verification result; and generate a fault prompt information in a case where the failure number satisfies a preset number condition.

[0208] In an example embodiment, as shown in Figure 7 Another server identity verification apparatus is provided, which includes a second time determination module 701, a second request sending module 702, a second time verification module 703, and a second result determination module 704, wherein:

[0209] The second time determining module 701 is configured to determine a first delay time according to a first server identifier and a second server identifier, the first server identifier being used to represent a server identifier corresponding to the first server, and the second server identifier being used to represent a server identifier corresponding to the second server, the first server and the second server both belonging to the financial data server.

[0210] The second request sending module 702 is configured to generate a second communication request sent to the first server according to the current time and the first delay time, the second communication request carrying a second sending time, the second sending time being determined according to the current time and the first delay time.

[0211] The second time verifying module 703 is configured to verify the first sending time and the second sending time to obtain a third time verifying result, the first sending time being used to represent a sending time carried by a first communication request sent by the first server to the second server, the first sending time being determined according to the current time and the first delay time.

[0212] The second result determining module 704 is configured to determine a third identity verifying result corresponding to the first server and the second server according to the third time verifying result.

[0213] The above-mentioned modules in the server identity verifying apparatus can be all or partially realized by software, hardware and a combination thereof. The above-mentioned modules can be embedded in or independent of a processor in a computer device in a hardware form, or can be stored in a memory in a computer device in a software form, so as to be called and executed by a processor to perform the operations corresponding to the above-mentioned modules.

[0214] In one exemplary embodiment, referring to Figure 1 , a server identity verifying system is provided, the system comprising a first server 102 and a second server 104, the first server 102 and the second server 104 both belonging to a financial data server;

[0215] The first server 102 is configured to determine a first delay time according to a first server identifier and a second server identifier, generate a first communication request according to a current time and the first delay time, and send the first communication request to the second server 104, the first server identifier being used to represent a server identifier corresponding to the first server 102, the second server identifier being used to represent a server identifier corresponding to the second server 104, the first communication request carrying a first sending time, the first sending time being determined according to the current time and the first delay time;

[0216] The second server 104 is configured to generate a second communication request according to the current time and the first delay time, and send the second communication request to the first server 102; the second communication request carries a second sending time, and the second sending time is determined according to the current time and the first delay time.

[0217] The first server 102 is further configured to verify the first sending time and the second sending time to obtain a first time verification result, and determine a first identity verification result corresponding to the first server 102 and the second server 104 according to the first time verification result.

[0218] In the server identity verification system, when the identity of the server is verified, the identity verification result is determined by determining the server identity and the corresponding delay time, and verifying the sending time determined according to the current time and the delay time, which is beneficial to guarantee the security and reliability of the interaction between the servers and reduce the potential risk. Moreover, the sending time determined by the method is not a fixed time, which avoids the defect that the security of the server identity verification is low due to the fact that the fixed time verification method is easy to be predicted and simulated by attackers, and thus improves the security of the server identity verification.

[0219] In an exemplary embodiment, a computer device, which can be a server, is provided, and an internal structure diagram of the computer device can be as shown in Figure 8 The computer device includes a processor, a memory, an input / output interface (I / O) and a communication interface. The processor, the memory and the input / output interface are connected through a system bus, and the communication interface is connected to the system bus through the input / output interface. The processor of the computer device is configured to provide computing and control capabilities. The memory of the computer device includes a non-volatile storage medium and an internal memory. The non-volatile storage medium stores an operating system, a computer program and a database. The internal memory provides an environment for the operating system and the computer program in the non-volatile storage medium to run. The database of the computer device is configured to store delay time, server identity and other data. The input / output interface of the computer device is configured to exchange information between the processor and external devices. The communication interface of the computer device is configured to communicate with external terminals through network connection. The computer program is executed by the processor to implement a server identity verification method.

[0220] Those skilled in the art can understand that Figure 8 The structure shown in the above embodiment is only a block diagram of part of the structure related to the scheme of the present application, and does not constitute a limitation on the computer device to which the scheme of the present application is applied. Specifically, the computer device can include more or fewer components than those shown in the figure, or combine certain components, or have a different component arrangement.

[0221] In an example embodiment, a computer device is also provided, including a memory and a processor, the memory storing a computer program, and the processor implementing the steps in the above method embodiments when executing the computer program.

[0222] In an example embodiment, a computer readable storage medium is provided, storing a computer program, and the computer program implementing the steps in the above method embodiments when executed by a processor.

[0223] In an example embodiment, a computer program product is provided, including a computer program, and the computer program implementing the steps in the above method embodiments when executed by a processor.

[0224] It should be noted that the user information (including but not limited to user device information, user personal information, etc.) and data (including but not limited to data for analysis, stored data, displayed data, etc.) involved in the present application are all information and data authorized by the user or authorized by all parties, and the collection, use and processing of related data need to comply with relevant regulations.

[0225] Those skilled in the art can understand that all or part of the processes in the above-mentioned embodiment methods can be completed by instructing the relevant hardware through a computer program. The computer program can be stored in a non-volatile computer readable storage medium, and when the computer program is executed, the processes of the above-mentioned embodiments of the methods can be included. Any reference to memory, database or other medium used in the embodiments provided in the present application can include at least one of non-volatile and volatile memory. Non-volatile memory can include read-only memory (ROM), magnetic tape, floppy disk, flash memory, optical storage, high-density embedded non-volatile memory, resistive memory (ReRAM), magnetoresistive random access memory (MRAM), ferroelectric memory (FRAM), phase change memory (PCM), graphene memory, etc. Volatile memory can include random access memory (RAM) or external cache memory, etc. As an illustration but not limitation, RAM can be in various forms, such as static random access memory (SRAM) or dynamic random access memory (DRAM), etc. The database involved in the embodiments provided in the present application can include at least one of a relational database and a non-relational database. The non-relational database can include a distributed database based on a block chain, etc., without being limited thereto. The processor involved in the embodiments provided in the present application can be a general-purpose processor, a central processing unit, a graphics processing unit, a digital signal processor, a programmable logic device, a data processing logic device based on quantum computing, etc., without being limited thereto.

[0226] Any combination of the technical features of the above embodiments can be made. In order to make the description simple, all possible combinations of the technical features in the above embodiments are not described, however, as long as the combination of the technical features does not exist, it should be considered as the scope of the present application.

[0227] The above embodiments only express several implementation manners of the present application, and the description is more specific and detailed, but it should not be understood as a limitation on the scope of the patent of the present application. It should be pointed out that for ordinary skilled in the art, without departing from the concept of the present application, a number of modifications and improvements can be made, which are within the scope of protection of the present application. Therefore, the protection scope of the present application should be subject to the appended claims.

Claims

1. A server authentication method characterized by, The method applied to a first server comprises: determining a first delay time according to a first server identifier and a second server identifier; the first server identifier is used to represent a server identifier corresponding to the first server, and the second server identifier is used to represent a server identifier corresponding to a second server; the first server and the second server both belong to financial data servers; generating a first communication request sent to the second server according to a current time and the first delay time; the first communication request carries a first sending time, which is determined according to the current time and the first delay time; verifying the first sending time and a second sending time to obtain a first time verification result; the second sending time is used to represent a sending time carried by a second communication request sent by the second server to the first server; the second sending time is determined according to the current time and the first delay time; determining a first identity verification result corresponding to the first server and the second server according to the first time verification result.

2. The method of claim 1, wherein, The method further comprises: combining the first server identifier and the second server identifier to obtain a combined server identifier as a key corresponding to the first server identifier and the second server identifier; determining the first delay time according to the key.

3. The method of claim 2, wherein, The method further comprises: converting the key into a string corresponding to the key according to a preset mapping relationship; the preset mapping relationship is used to represent a corresponding relationship between a key and a string; cutting the string corresponding to the key to obtain the first delay time.

4. The method of claim 1, wherein, After determining the first identity verification result corresponding to the first server and the second server according to the first time verification result, the method further comprises: in a case where the first identity verification result is successful, establishing a data transmission channel between the first server and the second server.

5. The method of claim 4, wherein, After establishing the data transmission channel between the first server and the second server, the method further comprises: sending a current data packet carrying a check code to the second server through the data transmission channel, determining a second delay time according to the check code, and determining a fourth sending time according to the second delay time and a third sending time corresponding to the current data packet; the second server is used to determine the second delay time according to the check code, and generate an identity verification request according to the second delay time and the third sending time; the identity verification request carries a fifth sending time, which is determined according to the third sending time and the second delay time; receiving the identity verification request sent by the second server, and verifying the fourth sending time and the fifth sending time to obtain a second time verification result; determining a second identity verification result corresponding to the first server and the second server according to the second time verification result.

6. The method according to any one of claims 1 to 5, characterized in that, After determining the first identity verification result corresponding to the first server and the second server according to the first time verification result, the method further comprises: In the case that the first identity verification result is a failure, jumping to the step of determining the first delay time according to the first server identifier and the second server identifier, and obtaining the failure number corresponding to the first identity verification result; In the case that the failure number meets the preset number condition, generating a fault prompt information.

7. A server authentication method characterized by, The method applied to the second server comprises: Determining a first delay time according to a first server identifier and a second server identifier; the first server identifier is used to represent a server identifier corresponding to the first server, and the second server identifier is used to represent a server identifier corresponding to the second server; the first server and the second server both belong to financial data servers; Generating a second communication request sent to the first server according to a current time and the first delay time; the second communication request carries a second sending time, which is determined according to the current time and the first delay time; Verifying the first sending time and the second sending time to obtain a third time verification result; the first sending time is used to represent a sending time carried by a first communication request sent by the first server to the second server; the first sending time is determined according to the current time and the first delay time; Determining a third identity verification result corresponding to the first server and the second server according to the third time verification result.

8. A server authentication apparatus characterized by comprising: The device applied to the first server comprises: A first time determining module is configured to determine a first delay time according to a first server identifier and a second server identifier; the first server identifier is used to represent a server identifier corresponding to the first server, and the second server identifier is used to represent a server identifier corresponding to the second server; the first server and the second server both belong to financial data servers; A first request sending module is configured to generate a first communication request sent to the second server according to a current time and the first delay time; the first communication request carries a first sending time, which is determined according to the current time and the first delay time; A first time verification module is configured to verify the first sending time and the second sending time to obtain a first time verification result; the second sending time is used to represent a sending time carried by a second communication request sent by the second server to the first server; the second sending time is determined according to the current time and the first delay time; A first result determining module is configured to determine a first identity verification result corresponding to the first server and the second server according to the first time verification result.

9. A server authentication apparatus characterized by comprising: The device applied to the second server comprises: The second time determination module is configured to determine a first delay time according to a first server identifier and a second server identifier, wherein the first server identifier is used to represent a server identifier corresponding to the first server, the second server identifier is used to represent a server identifier corresponding to the second server, and the first server and the second server both belong to the financial data servers. The second request sending module is configured to generate a second communication request sent to the first server according to a current time and the first delay time, wherein the second communication request carries a second sending time, and the second sending time is determined according to the current time and the first delay time. The second time verification module is configured to verify the first sending time and the second sending time to obtain a third time verification result, wherein the first sending time is used to represent a sending time carried by a first communication request sent by the first server to the second server, and the first sending time is determined according to the current time and the first delay time. The second result determination module is configured to determine a third identity verification result corresponding to the first server and the second server according to the third time verification result.

10. A server authentication system characterized by comprising: The system comprises a first server and a second server, and the first server and the second server both belong to the financial data servers. The first server is configured to determine a first delay time according to a first server identifier and a second server identifier, generate a first communication request according to a current time and the first delay time, and send the first communication request to the second server, wherein the first server identifier is used to represent a server identifier corresponding to the first server, the second server identifier is used to represent a server identifier corresponding to the second server, the first communication request carries a first sending time, and the first sending time is determined according to the current time and the first delay time. The second server is configured to generate a second communication request according to the current time and the first delay time, and send the second communication request to the first server, wherein the second communication request carries a second sending time, and the second sending time is determined according to the current time and the first delay time. The first server is further configured to verify the first sending time and the second sending time to obtain a first time verification result, and determine a first identity verification result corresponding to the first server and the second server according to the first time verification result. 11.A computer device, comprising a memory and a processor, wherein the memory stores a computer program, and the computer device is configured to perform the method according to any one of claims 1-10 when the computer program is executed by the processor. The processor executes the computer program to implement the steps of the method in any one of claims 1 to 7.

12. A computer readable storage medium having stored thereon a computer program, characterized in that, The computer program is executed by the processor to implement the steps of the method in any one of claims 1 to 7.

13. A computer program product comprising a computer program, characterized in that, The computer program is executed by the processor to implement the steps of the method in any one of claims 1 to 7.

Images