WEB application development platform security protection method, device, equipment and medium

Abstract

The present invention relates to the technical field of data processing, and provides a method, device, equipment and medium for protecting the security of a WEB application development platform. On the one hand, an encrypted watermark image is obtained by encrypting a URL address, a user information ID and a current timestamp dynamically obtained based on user access using a configuration encryption algorithm, and a unique encrypted watermark image is generated based on multidimensional data, which fully utilizes the uniqueness and dynamics of the URL address to ensure the unpredictability, uniqueness, timeliness and security of each watermark; on the other hand, the encrypted watermark image is dynamically attached to the top layer of each WEB page as an invisible mask, which not only does not affect the user experience, but is also difficult to be detected and bypassed by attackers.

Description

Technical Field

[0001] The present invention relates to the field of data processing technology, and in particular to a security protection method, device, equipment and medium for a WEB application development platform. Background Art

[0002] In today's Internet era, WEB (World Wide Web) application development platforms have become key tools for enterprises and developers to build and deploy various online services. These platforms provide a convenient development environment, rich functional modules and efficient deployment processes, allowing developers to quickly create and publish WEB applications. However, with the widespread use of WEB application development platforms, the problems of unauthorized use and data theft are becoming increasingly serious. Illegal users can bypass existing security measures through various means to illegally access and use these development platforms, resulting in data leakage, intellectual property infringement and economic losses.

[0003] Traditional protection methods for WEB application development platforms mainly include access control, data encryption, and watermark technology. These methods can improve the security of the platform to a certain extent, but there are still some obvious shortcomings. Specifically, the access control mechanism restricts access to the platform through user authentication and permission management, but if there are loopholes in the system or user credentials are stolen, this protection measure will fail; data encryption technology encrypts the transmitted and stored data to prevent data from being stolen and tampered with, but once the encryption algorithm is cracked, the security of the data will be difficult to guarantee; watermark technology embeds watermarks in web page content to identify the copyright and ownership of the content, but traditional watermark technology is easy to identify and remove, and may affect the display effect of the web page during the embedding process.

[0004] Therefore, the existing security protection measures for WEB application development platforms mainly have the following problems:

[0005] 1. Insufficient concealment: Traditional watermarking technology and access control mechanisms are relatively explicit and can be easily identified and bypassed by attackers. Moreover, once attackers discover these protection measures, they can take corresponding countermeasures to circumvent them.

[0006] 2. Limited security: Once the encryption algorithm and access control mechanism are cracked, the security of the WEB application development platform will be difficult to guarantee. With the advancement of technology, attackers can use more powerful tools and techniques to crack existing protection measures, threatening the security of the platform;

[0007] 3. Impact on user experience: Protection methods such as obvious watermarks may affect the user's normal user experience and reduce user satisfaction. For example, a conspicuous watermark may block important content and affect the user's reading and operation experience;

[0008] 4. Difficulty in obtaining evidence: The existing protection methods make it difficult to quickly obtain evidence to safeguard the legitimate rights and interests of the right holder when illegal use occurs. Due to the lack of effective evidence collection methods, tracing illegal use and legal rights protection become complicated and difficult.

[0009] Therefore, there is an urgent need for a method that can effectively protect the security of WEB application development platforms. Summary of the invention

[0010] In view of the above, it is necessary to provide a WEB application development platform security protection method, device, equipment and medium, aiming to solve the problem of being unable to provide effective security protection for the WEB application development platform.

[0011] A web application development platform security protection method, the web application development platform security protection method comprising:

[0012] When it is detected that a user has accessed the WEB application development platform, the user information ID of the user is obtained;

[0013] Obtain the URL address of the page visited by the user and obtain the current timestamp;

[0014] The URL address, the user information ID and the current timestamp are encrypted using a configured encryption algorithm to obtain an encrypted watermark image;

[0015] Converting the encrypted watermark image into an invisible encrypted layer;

[0016] The invisible encryption layer is attached to the topmost layer of the page.

[0017] According to a preferred embodiment of the present invention, obtaining the user information ID of the user includes:

[0018] When the user does not access the WEB application development platform for the first time, read the pre-stored user information ID from the configuration database; or

[0019] When the user visits the WEB application development platform for the first time, a UUID is randomly generated, and the UUID is converted into a string format to obtain a first string, and characters of a specified type in the first string are deleted to obtain the user information ID.

[0020] According to a preferred embodiment of the present invention, the step of encrypting the URL address, the user information ID and the current timestamp using a configured encryption algorithm to obtain an encrypted watermark image includes:

[0021] Combining the URL address, the user information ID and the current timestamp in sequence to obtain a second character string;

[0022] Encrypting the second character string using the configured encryption algorithm to obtain watermark data;

[0023] Convert the watermark data into a picture format to obtain the encrypted watermark picture;

[0024] The configuration encryption algorithm includes a symmetric encryption algorithm, an asymmetric encryption algorithm, or a hybrid encryption algorithm combining the symmetric encryption algorithm and the asymmetric encryption algorithm.

[0025] According to a preferred embodiment of the present invention, converting the encrypted watermark image into an invisible encrypted layer comprises:

[0026] Create a DIV element as a mask layer; wherein the attribute of the mask layer element of the mask layer is to cover the entire page to which it belongs and be invisible;

[0027] The encrypted watermark image is configured as the background image of the mask layer to obtain the invisible encrypted layer.

[0028] According to a preferred embodiment of the present invention, the method further comprises:

[0029] When the page is a static page or a uniform style page, after converting the encrypted watermark image into the invisible encrypted layer, the invisible encrypted layer is attached to the top layer of the page using a CSS cascading style sheet; or

[0030] When the page is a dynamic page or a changing page, JavaScript is used to dynamically generate the invisible encryption layer, and the invisible encryption layer is attached to the top layer of the page.

[0031] According to a preferred embodiment of the present invention, the method further comprises:

[0032] When the WEB application development platform is deployed in an environment that is not highly time-sensitive, the URL address and the user information ID are encrypted using the configuration encryption algorithm to obtain the encrypted watermark image; or

[0033] When the WEB application development platform is deployed in an environment with high requirements for user information confidentiality, the URL address and the current timestamp are encrypted using the configured encryption algorithm to obtain the encrypted watermark image; or

[0034] When the WEB application development platform is deployed in an environment that does not require high dynamics of the URL address, the user information ID and the current timestamp are encrypted using the configured encryption algorithm to obtain the encrypted watermark image.

[0035] According to a preferred embodiment of the present invention, the method further comprises:

[0036] In response to a risk detection instruction for a target platform, access the target platform;

[0037] Take a screenshot of the visited page to obtain the image to be processed;

[0038] Decrypting the image to be processed using the configured encryption algorithm to obtain decrypted information;

[0039] When the decryption is successful, it is determined that the target platform has a risk of unauthorized deployment of the WEB application development platform;

[0040] Obtain the access log, HTML code and server response characteristics of the target platform by pre-installing points in the WEB application development platform;

[0041] Detecting whether a pre-configured first identifier exists in the access log to obtain a first detection result;

[0042] Detecting whether there is a pre-configured second identifier in the server response feature to obtain a second detection result;

[0043] Detecting the similarity between the HTML code and the code of the WEB application development platform to obtain a third detection result;

[0044] Combining the image to be processed, the decrypted information, the first detection result, the second detection result, and the third detection result to obtain evidence that there is a risk of unauthorized deployment of the WEB application development platform on the target platform;

[0045] The evidence is encrypted and sent to a designated terminal device.

[0046] A web application development platform security protection device, the web application development platform security protection device comprising:

[0047] An acquisition unit, used to acquire the user information ID of a user when it is detected that a user has accessed the WEB application development platform;

[0048] The acquisition unit is further used to acquire the URL address of the page visited by the user and acquire the current timestamp;

[0049] An encryption unit, used to encrypt the URL address, the user information ID and the current timestamp using a configured encryption algorithm to obtain an encrypted watermark image;

[0050] A conversion unit, used for converting the encrypted watermark image into an invisible encrypted layer;

[0051] The attachment unit is used to attach the invisible encrypted layer to the top layer of the page.

[0052] A computer device, comprising:

[0053] a memory storing at least one instruction; and

[0054] The processor executes the instructions stored in the memory to implement the security protection method of the WEB application development platform.

[0055] A computer-readable storage medium stores at least one instruction, and the at least one instruction is executed by a processor in a computer device to implement the WEB application development platform security protection method.

[0056] It can be seen from the above technical solutions that, on the one hand, the URL address, user information ID and current timestamp dynamically obtained based on user access are encrypted by configuring an encryption algorithm to obtain an encrypted watermark image, and a unique encrypted watermark image is generated based on multidimensional data, which makes full use of the uniqueness and dynamics of the URL address to ensure the unpredictability, uniqueness, timeliness and security of each watermark; on the other hand, the encrypted watermark image is dynamically attached to the top layer of each WEB page as an invisible mask, which not only does not affect the user experience, but also is difficult to be detected and bypassed by attackers. BRIEF DESCRIPTION OF THE DRAWINGS

[0057] Figure 1 It is a flow chart of a preferred embodiment of the security protection method for a WEB application development platform of the present invention;

[0058] Figure 2 It is a functional module diagram of a preferred embodiment of the security protection device for the WEB application development platform of the present invention;

[0059] Figure 3 It is a structural schematic diagram of a computer device of a preferred embodiment of the present invention for implementing a security protection method for a WEB application development platform. DETAILED DESCRIPTION

[0060] In order to make the purpose, technical solutions and advantages of the present invention more clear, the present invention is described in detail below with reference to the accompanying drawings and specific embodiments.

[0061] like Figure 1 FIG. 1 is a flowchart of a preferred embodiment of the WEB application development platform security protection method of the present invention. According to different requirements, the order of the steps in the flowchart can be changed, and some steps can be omitted.

[0062] The WEB application development platform security protection method is applied to one or more computer devices, and the computer device is a device that can automatically perform numerical calculations and / or information processing according to pre-set or stored instructions, and its hardware includes but is not limited to microprocessors, application specific integrated circuits (Application Specific Integrated Circuit, ASIC), programmable gate arrays (Field-Programmable Gate Array, FPGA), digital processors (Digital Signal Processor, DSP), embedded devices, etc.

[0063] The computer device may be any electronic product that can perform human-computer interaction with a user, such as a personal computer, a tablet computer, a smart phone, a personal digital assistant (PDA), a game console, an interactive network television (IPTV), a smart wearable device, etc.

[0064] The computer device may also include a network device and / or a user device, wherein the network device includes, but is not limited to, a single network server, a server group consisting of multiple network servers, or a cloud consisting of a large number of hosts or network servers based on cloud computing.

[0065] The server can be an independent server or a cloud server that provides basic cloud computing services such as cloud services, cloud databases, cloud computing, cloud functions, cloud storage, network services, cloud communications, middleware services, domain name services, security services, content delivery networks (CDN), as well as big data and artificial intelligence platforms.

[0066] Among them, Artificial Intelligence (AI) is the theory, method, technology and application system that uses digital computers or machines controlled by digital computers to simulate, extend and expand human intelligence, perceive the environment, acquire knowledge and use knowledge to obtain the best results.

[0067] AI basic technologies generally include sensors, dedicated AI chips, cloud computing, distributed storage, big data processing technology, operation / interaction systems, mechatronics, etc. AI software technologies mainly include computer vision technology, robotics technology, biometrics technology, speech processing technology, natural language processing technology, and machine learning / deep learning.

[0068] The network where the computer device is located includes but is not limited to the Internet, a wide area network, a metropolitan area network, a local area network, a virtual private network (VPN), etc.

[0069] S10, when it is detected that a user accesses a WEB (World Wide Web) application development platform, the user information ID of the user is obtained.

[0070] In this embodiment, the WEB application development platform can simplify the development process of Web application programs and provide a series of functions and tools to help developers create, test and maintain Web applications more efficiently.

[0071] In this embodiment, the user information ID is used to uniquely identify a user, and to identify and track the behavior of each accessing user, so as to ensure that the responsible party can be quickly located and identified when illegal use occurs.

[0072] In this embodiment, obtaining the user information ID of the user includes:

[0073] When the user does not access the WEB application development platform for the first time, read the pre-stored user information ID from the configuration database; or

[0074] When the user accesses the WEB application development platform for the first time, a UUID (Universally Unique Identifier) ​​is randomly generated, and the UUID is converted into a string format to obtain a first string, and characters of a specified type in the first string are deleted to obtain the user information ID.

[0075] The configuration database may be a remote database communicating with the WEB application development platform or a local database of the WEB application development platform. The configuration database is used to store relevant data of the WEB application development platform, such as user information ID, logs, user behavior data, etc.

[0076] The characters of the specified type may include special characters such as hyphens.

[0077] S11, obtaining the URL (Uniform Resource Locator) address of the page visited by the user, and obtaining the current timestamp.

[0078] In this embodiment, each URL address corresponds to a specific development result page, that is, different pages have different URL addresses, and the URL address can be dynamically obtained according to the different pages visited by the user. When the page is loaded, the URL address of the page can be obtained in time.

[0079] In this embodiment, the current timestamp refers to the standard time when the URL address of the page visited by the user is obtained.

[0080] Specifically, to ensure that an accurate timestamp is obtained, you can first synchronize with a standard time source (such as an NTP server (Network Time Protocol)) to avoid inaccurate timestamps due to different system times.

[0081] In this embodiment, the acquired user information ID, the URL address and the current timestamp may be stored in the configuration database, and the association relationship between the three may be recorded in the configuration database.

[0082] S12, using a configured encryption algorithm to encrypt the URL address, the user information ID and the current timestamp to obtain an encrypted watermark image.

[0083] In this embodiment, the configuration encryption algorithm is used to encrypt the URL address, the user information ID and the current timestamp to obtain an encrypted watermark image, including:

[0084] Combining the URL address, the user information ID and the current timestamp in sequence to obtain a second character string;

[0085] Encrypting the second character string using the configured encryption algorithm to obtain watermark data;

[0086] Convert the watermark data into a picture format to obtain the encrypted watermark picture;

[0087] The configuration encryption algorithm includes a symmetric encryption algorithm, an asymmetric encryption algorithm, or a hybrid encryption algorithm combining the symmetric encryption algorithm and the asymmetric encryption algorithm.

[0088] Among them, the use of the URL address fully utilizes the uniqueness and dynamic nature of the URL address, and performs dynamic encryption according to the user's access situation to ensure the uniqueness of the encrypted data, increasing the difficulty for attackers to obtain valid information, while ensuring the unpredictability and high security of each watermark, avoiding security vulnerabilities caused by fixed addresses.

[0089] Among them, using the user information ID can facilitate the subsequent identification and tracking of the behavior of each accessing user, ensuring that the responsible party can be quickly located and identified when illegal use occurs.

[0090] Among them, using the current timestamp can ensure the uniqueness of the generated encrypted watermark image to prevent reuse and forgery, thereby increasing the security and effectiveness of the watermark.

[0091] Furthermore, combined with a complex encryption algorithm, it can ensure that the generated encrypted watermark image cannot be easily cracked and copied, thereby increasing the concealment and security of the watermark.

[0092] Of course, in other embodiments, other encryption algorithms such as SM4 may also be used.

[0093] In this embodiment, the method further includes:

[0094] When the WEB application development platform is deployed in an environment that is not highly time-sensitive, the URL address and the user information ID are encrypted using the configuration encryption algorithm to obtain the encrypted watermark image; or

[0095] When the WEB application development platform is deployed in an environment with high requirements for user information confidentiality, the URL address and the current timestamp are encrypted using the configured encryption algorithm to obtain the encrypted watermark image; or

[0096] When the WEB application development platform is deployed in an environment that does not require high dynamics of the URL address, the user information ID and the current timestamp are encrypted using the configured encryption algorithm to obtain the encrypted watermark image.

[0097] For example, environments that are not very time-sensitive may include development environments, test environments, and drill environments. Environments that have high requirements for user information confidentiality refer to scenarios that have high requirements for WEB site security. This deployment environment emphasizes strict protection of user information to ensure the security and privacy of user data. Environments that do not have high requirements for URL address dynamics refer to environments that do not require frequent changes or updates to URL addresses.

[0098] In the above embodiment, encryption can be combined with different environmental flexibility to ensure the adaptability and rationality of the generated encrypted watermark image to the environment.

[0099] S13, converting the encrypted watermark image into an invisible encrypted layer.

[0100] In this embodiment, converting the encrypted watermark image into an invisible encrypted layer includes:

[0101] Create a DIV (DIVision, layer) element as a mask layer; wherein the attribute of the mask layer element of the mask layer is to cover the entire page to which it belongs and be invisible;

[0102] The encrypted watermark image is configured as the background image of the mask layer to obtain the invisible encrypted layer.

[0103] In the above embodiment, different from the traditional explicit watermark, this embodiment can ensure that the watermark is invisible on the page by converting the encrypted watermark image into an invisible encrypted layer, which will not affect the display effect of the page and the normal user experience. Therefore, it is not easy to be detected and bypassed by attackers, thereby enhancing the defense capability of the system. At the same time, it provides efficient protection measures, which makes visitors unaware and will not be detected by users and attackers, so they will not take measures to bypass the watermark, thereby improving security.

[0104] S14, attaching the invisible encryption layer to the topmost layer of the page.

[0105] In this embodiment, the method further includes:

[0106] When the page is a static page or a uniform style page, after converting the encrypted watermark image into the invisible encrypted layer, the invisible encrypted layer is attached to the top layer of the page using CSS (Cascading Style Sheets); or

[0107] When the page is a dynamic page or a changing page, JavaScript is used to dynamically generate the invisible encryption layer, and the invisible encryption layer is attached to the top layer of the page.

[0108] In the above embodiment, different processing methods can be used to attach the invisible encrypted layer to the top layer of the page according to different page types.

[0109] In this embodiment, the method further includes:

[0110] In response to a risk detection instruction for a target platform, access the target platform;

[0111] Take a screenshot of the visited page to obtain the image to be processed;

[0112] Decrypting the image to be processed using the configured encryption algorithm to obtain decrypted information;

[0113] When the decryption is successful, it is determined that the target platform has a risk of unauthorized deployment of the WEB application development platform;

[0114] Obtaining access logs, HTML (Hyper Text Markup Language) codes and server response characteristics of the target platform by pre-installing points in the WEB application development platform;

[0115] Detecting whether a pre-configured first identifier exists in the access log to obtain a first detection result;

[0116] Detecting whether there is a pre-configured second identifier in the server response feature to obtain a second detection result;

[0117] Detecting the similarity between the HTML code and the code of the WEB application development platform to obtain a third detection result;

[0118] Combining the image to be processed, the decrypted information, the first detection result, the second detection result, and the third detection result to obtain evidence that there is a risk of unauthorized deployment of the WEB application development platform on the target platform;

[0119] The evidence is encrypted and sent to a designated terminal device.

[0120] The target platform is a platform where the WEB application development platform may be deployed without authorization.

[0121] It is understandable that after the WEB application development platform is deployed, a corresponding invisible encryption layer will be generated when a user visits any page. Therefore, if the target platform is deployed based on the WEB application development platform, the image to be processed obtained by screenshot will also have an invisible encryption layer. Furthermore, the image to be processed is decrypted based on the encryption algorithm of the WEB application development platform, and the URL address, user information ID and timestamp used during encryption can be obtained. If the target platform is not deployed based on the WEB application development platform, the image to be processed obtained by screenshot cannot be decrypted based on the encryption algorithm of the WEB application development platform. Therefore, when the decryption is successful, it can be determined that the target platform is at risk of unauthorized deployment of the WEB application development platform. Furthermore, in order to obtain evidence, the access log, HTML code and server response characteristics of the target platform are obtained by pre-installing points in the WEB application development platform (wherein, for a platform deployed based on the WEB application development platform, the access log will carry a pre-configured first identifier, so when the access log is identified as carrying the first identifier, it further proves that the target platform is at risk of unauthorized deployment of the WEB application development platform; similarly, for a platform deployed based on the WEB application development platform, the server response characteristics will carry a pre-configured second identifier, so when the server response characteristics are identified as carrying the second identifier, it further proves that the target platform is at risk of unauthorized deployment of the WEB application development platform; and when the HTML code has a high degree of similarity with the code of the WEB application development platform, it further proves that the target platform is at risk of unauthorized deployment of the WEB application development platform; wherein, the first identifier and the second identifier can be configured according to the actual application scenario), and combined with the image to be processed and the decryption information (such as whether it can be successfully decrypted, the data obtained after decryption, etc.) as evidence that the target platform is at risk of unauthorized deployment of the WEB application development platform. Furthermore, the evidence is encrypted and sent to the terminal device of the security protection or relevant authority to assist in handling the event of unauthorized deployment of the WEB application development platform on the target platform, solving the problem of difficulty in collecting evidence due to the lack of effective means of collecting evidence, so as to facilitate the tracing of illegal use and legal rights protection.

[0122] By attaching the invisible encryption layer to the top layer of the page, this embodiment can provide a protection method with higher concealment and security without affecting the user experience. It can not only improve the overall security of the platform, but also quickly collect evidence when illegal use occurs, and effectively deal with possible illegal authorized use and data leakage problems in the platform to safeguard the legitimate rights and interests of the right holders.

[0123] Of course, in order to further ensure the security of the WEB application development platform, all data can be encrypted through HTTPS (Hypertext Transfer Protocol Secure) during transmission to prevent data from being stolen and tampered with; during data transmission, a hash algorithm is used to check the integrity of the data to ensure that the data has not been tampered with; access to sensitive data is strictly controlled, and only authorized users can access and operate the data.

[0124] Of course, it can also be combined with other security technologies, such as firewalls, intrusion detection systems (IDS) and anti-virus software, to build a multi-level security protection system to comprehensively enhance the platform's security protection capabilities.

[0125] This embodiment can be used in various WEB application development platforms such as online education platforms, content management systems (CMS), internal enterprise systems, e-commerce platforms, etc., to achieve security protection for related platforms, namely systems.

[0126] The security protection solution of this embodiment can be deployed on a server or an existing system. It does not require expensive hardware equipment or complex software systems. It is easy to integrate into an existing WEB application development platform, has a low implementation cost, and fully considers the characteristics of the WEB application development platform, so that it has wide applicability and significant commercial value in multiple fields (such as online education, content management, internal enterprise systems, e-commerce, etc.), and realizes an efficient, concealed and low-cost protection mechanism, which has broad application prospects in practical applications.

[0127] It can be seen from the above technical solutions that, on the one hand, the URL address, user information ID and current timestamp dynamically obtained based on user access are encrypted by configuring an encryption algorithm to obtain an encrypted watermark image, and a unique encrypted watermark image is generated based on multidimensional data, which makes full use of the uniqueness and dynamics of the URL address to ensure the unpredictability, uniqueness, timeliness and security of each watermark; on the other hand, the encrypted watermark image is dynamically attached to the top layer of each WEB page as an invisible mask, which not only does not affect the user experience, but also is difficult to be detected and bypassed by attackers.

[0128] like Figure 2As shown, it is a functional module diagram of a preferred embodiment of the security protection device for a WEB application development platform of the present invention. The WEB application development platform security protection device 11 includes an acquisition unit 110, an encryption unit 111, a conversion unit 112, and an attachment unit 113. The module / unit referred to in the present invention refers to a series of computer program segments that can be executed by a processor and can perform fixed functions, which are stored in a memory. In this embodiment, the functions of each module / unit will be described in detail in subsequent embodiments.

[0129] The acquisition unit 110 is used to acquire the user information ID of the user when it is detected that a user accesses the WEB application development platform;

[0130] The acquisition unit 110 is further used to acquire the URL address of the page visited by the user and acquire the current timestamp;

[0131] The encryption unit 111 is used to encrypt the URL address, the user information ID and the current timestamp using a configured encryption algorithm to obtain an encrypted watermark image;

[0132] The conversion unit 112 is used to convert the encrypted watermark image into an invisible encrypted layer;

[0133] The attaching unit 113 is used to attach the invisible encrypted layer to the top layer of the page.

[0134] It can be seen from the above technical solutions that, on the one hand, the URL address, user information ID and current timestamp dynamically obtained based on user access are encrypted by configuring an encryption algorithm to obtain an encrypted watermark image, and a unique encrypted watermark image is generated based on multidimensional data, which makes full use of the uniqueness and dynamics of the URL address to ensure the unpredictability, uniqueness, timeliness and security of each watermark; on the other hand, the encrypted watermark image is dynamically attached to the top layer of each WEB page as an invisible mask, which not only does not affect the user experience, but also is difficult to be detected and bypassed by attackers.

[0135] like Figure 3 The figure is a schematic diagram of the structure of a computer device of a preferred embodiment of the present invention for implementing the security protection method for a WEB application development platform.

[0136] The computer device 1 may include a memory 12, a processor 13 and a bus, and may also include a computer program stored in the memory 12 and executable on the processor 13, such as a WEB application development platform security protection program.

[0137] Those skilled in the art will appreciate that the schematic diagram is merely an example of the computer device 1 and does not constitute a limitation on the computer device 1. The computer device 1 may be a bus-type structure or a star-type structure. The computer device 1 may also include more or less other hardware or software than shown in the diagram, or a different arrangement of components. For example, the computer device 1 may also include input and output devices, network access devices, etc.

[0138] It should be noted that the computer device 1 is only an example, and other existing or future electronic products that are suitable for the present invention should also be included in the protection scope of the present invention and included here by reference.

[0139] Among them, the memory 12 includes at least one type of readable storage medium, and the readable storage medium includes flash memory, mobile hard disk, multimedia card, card-type memory (for example: SD or DX memory, etc.), magnetic memory, disk, optical disk, etc. In some embodiments, the memory 12 can be an internal storage unit of the computer device 1, such as a mobile hard disk of the computer device 1. In other embodiments, the memory 12 can also be an external storage device of the computer device 1, such as a plug-in mobile hard disk, a smart memory card (Smart Media Card, SMC), a secure digital (SecureDigital, SD) card, a flash card (Flash Card), etc. equipped on the computer device 1. Further, the memory 12 can also include both an internal storage unit of the computer device 1 and an external storage device. The memory 12 can not only be used to store application software and various types of data installed in the computer device 1, such as the code of the security protection program of the WEB application development platform, but also can be used to temporarily store data that has been output or is to be output.

[0140] In some embodiments, the processor 13 may be composed of an integrated circuit, for example, a single packaged integrated circuit, or a plurality of packaged integrated circuits with the same or different functions, including one or more central processing units (CPUs), microprocessors, digital processing chips, graphics processors, and combinations of various control chips. The processor 13 is the control core (Control Unit) of the computer device 1, and uses various interfaces and lines to connect various components of the entire computer device 1, and executes various functions and processes data of the computer device 1 by running or executing programs or modules stored in the memory 12 (for example, executing a security protection program for a WEB application development platform, etc.), and calling data stored in the memory 12.

[0141] The processor 13 executes the operating system of the computer device 1 and various installed applications. The processor 13 executes the applications to implement the steps in the above-mentioned various WEB application development platform security protection method embodiments, such as Figure 1 Steps shown.

[0142] Exemplarily, the computer program may be divided into one or more modules / units, which are stored in the memory 12 and executed by the processor 13 to complete the present invention. The one or more modules / units may be a series of computer-readable instruction segments capable of completing specific functions, which are used to describe the execution process of the computer program in the computer device 1. For example, the computer program may be divided into an acquisition unit 110, an encryption unit 111, a conversion unit 112, and an attachment unit 113.

[0143] The above-mentioned integrated unit implemented in the form of a software function module can be stored in a computer-readable storage medium. The above-mentioned software function module is stored in a storage medium, and includes a number of instructions for enabling a computer device (which can be a personal computer, a computer device, or a network device, etc.) or a processor to execute the part of the WEB application development platform security protection method described in each embodiment of the present invention.

[0144] If the module / unit integrated in the computer device 1 is implemented in the form of a software functional unit and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on this understanding, the present invention implements all or part of the processes in the above-mentioned embodiment method, and can also be completed by instructing the relevant hardware devices through a computer program. The computer program can be stored in a computer-readable storage medium, and when the computer program is executed by a processor, the steps of each of the above-mentioned method embodiments can be implemented.

[0145] The computer program includes computer program code, which may be in source code form, object code form, executable file or some intermediate form, etc. The computer readable medium may include: any entity or device capable of carrying the computer program code, recording medium, USB flash drive, mobile hard disk, magnetic disk, optical disk, computer memory, read-only memory (ROM), random access memory, etc.

[0146] Furthermore, the computer-readable storage medium may mainly include a program storage area and a data storage area, wherein the program storage area may store an operating system, an application required for at least one function, etc.; the data storage area may store data created according to the use of the blockchain node, etc.

[0147] The blockchain referred to in this invention is a new application model of computer technologies such as distributed data storage, peer-to-peer transmission, consensus mechanism, encryption algorithm, etc. Blockchain is essentially a decentralized database, a string of data blocks generated by cryptographic methods. Each data block contains a batch of network transaction information, which is used to verify the validity of its information (anti-counterfeiting) and generate the next block. Blockchain can include the blockchain underlying platform, platform product service layer, and application service layer.

[0148] The bus can be a peripheral component interconnect (PCI) bus or an extended industry standard architecture (EISA) bus. The bus can be divided into an address bus, a data bus, a control bus, etc. For ease of representation, Figure 3 The bus is represented by only one straight line, but it does not mean that there is only one bus or one type of bus. The bus is configured to realize the connection and communication between the memory 12 and at least one processor 13, etc.

[0149] Although not shown, the computer device 1 may also include a power source (such as a battery) for supplying power to various components. Preferably, the power source may be logically connected to the at least one processor 13 through a power management device, so that the power management device can realize functions such as charging management, discharging management, and power consumption management. The power source may also include any components such as one or more DC or AC power sources, recharging devices, power failure detection circuits, power converters or inverters, and power status indicators. The computer device 1 may also include a variety of sensors, Bluetooth modules, Wi-Fi modules, etc., which will not be repeated here.

[0150] Furthermore, the computer device 1 may also include a network interface. Optionally, the network interface may include a wired interface and / or a wireless interface (such as a WI-FI interface, a Bluetooth interface, etc.), which is usually used to establish a communication connection between the computer device 1 and other computer devices.

[0151] Optionally, the computer device 1 may further include a user interface, which may be a display, an input unit (such as a keyboard), or a standard wired interface or a wireless interface. Optionally, in some embodiments, the display may be an LED display, a liquid crystal display, a touch-sensitive liquid crystal display, and an OLED (Organic Light-Emitting Diode) touch device. The display may also be appropriately referred to as a display screen or a display unit, which is used to display information processed in the computer device 1 and to display a visual user interface.

[0152] It should be understood that the embodiment is for illustration only and the scope of the patent application is not limited to this structure.

[0153] It can be understood by those skilled in the art that Figure 3 The structure shown does not constitute a limitation on the computer device 1, and may include fewer or more components than shown in the figure, or combine certain components, or arrange the components differently.

[0154] Combination Figure 1 The memory 12 in the computer device 1 stores a plurality of instructions to implement a security protection method for a WEB application development platform, and the processor 13 can execute the plurality of instructions to implement:

[0155] When it is detected that a user has accessed the WEB application development platform, the user information ID of the user is obtained;

[0156] Obtain the URL address of the page visited by the user and obtain the current timestamp;

[0157] The URL address, the user information ID and the current timestamp are encrypted using a configured encryption algorithm to obtain an encrypted watermark image;

[0158] Converting the encrypted watermark image into an invisible encrypted layer;

[0159] The invisible encryption layer is attached to the topmost layer of the page.

[0160] Specifically, the specific implementation method of the processor 13 for the above instructions can refer to Figure 1 The description of the relevant steps in the corresponding embodiments will not be repeated here.

[0161] It should be noted that the data involved in this case were all obtained legally.

[0162] In the several embodiments provided by the present invention, it should be understood that the disclosed systems, devices and methods can be implemented in other ways. For example, the device embodiments described above are only illustrative, for example, the division of the modules is only a logical function division, and there may be other division methods in actual implementation.

[0163] The present invention can be used in many general or special computer system environments or configurations. For example: personal computers, server computers, handheld or portable devices, tablet devices, multiprocessor systems, microprocessor-based systems, set-top boxes, programmable consumer electronic devices, network PCs, minicomputers, mainframe computers, distributed computing environments including any of the above systems or devices, etc. The present invention can be described in the general context of computer-executable instructions executed by a computer, such as program modules. Generally, program modules include routines, programs, objects, components, data structures, etc. that perform specific tasks or implement specific abstract data types. The present invention can also be practiced in distributed computing environments, in which tasks are performed by remote processing devices connected through a communication network. In a distributed computing environment, program modules can be located in local and remote computer storage media including storage devices.

[0164] The modules described as separate components may or may not be physically separated, and the components shown as modules may or may not be physical units, that is, they may be located in one place or distributed on multiple network units. Some or all of the modules may be selected according to actual needs to achieve the purpose of the solution of this embodiment.

[0165] In addition, each functional module in each embodiment of the present invention may be integrated into one processing unit, each unit may exist physically separately, or two or more units may be integrated into one unit. The above-mentioned integrated unit may be implemented in the form of hardware or in the form of hardware plus software functional modules.

[0166] It is obvious to those skilled in the art that the present invention is not limited to the details of the above exemplary embodiments, and that the present invention can be implemented in other specific forms without departing from the spirit or essential characteristics of the present invention.

[0167] Therefore, no matter from which point of view, the embodiments should be regarded as illustrative and non-restrictive, and the scope of the present invention is limited by the appended claims rather than the above description, so it is intended that all changes falling within the meaning and scope of the equivalent elements of the claims are included in the present invention. Any attached figure mark in the claims should not be regarded as limiting the claims involved.

[0168] In addition, it is clear that the word "comprising" does not exclude other units or steps, and the singular does not exclude the plural. Multiple units or devices stated in the present invention can also be implemented by one unit or device through software or hardware. The words first, second, etc. are used to indicate names, and do not indicate any particular order.

[0169] Finally, it should be noted that the above embodiments are only used to illustrate the technical solution of the present invention rather than to limit it. Although the present invention has been described in detail with reference to the preferred embodiments, those skilled in the art should understand that the technical solution of the present invention can be modified or replaced by equivalents without departing from the spirit and scope of the technical solution of the present invention.

Claims

1. A security protection method for a WEB application development platform, characterized in that: The WEB application development platform security protection method includes: When it is detected that a user has accessed the WEB application development platform, the user information ID of the user is obtained; Obtaining the URL address of the page visited by the user, and obtaining the current timestamp; wherein different pages have different URL addresses; the current timestamp refers to the standard time when the URL address of the page visited by the user is obtained; The URL address, the user information ID and the current timestamp are encrypted by using a configuration encryption algorithm to obtain an encrypted watermark image, including: sequentially combining the URL address, the user information ID and the current timestamp to obtain a second character string; encrypting the second character string by using the configuration encryption algorithm to obtain watermark data; converting the watermark data into a picture format to obtain the encrypted watermark image; wherein the configuration encryption algorithm includes a symmetric encryption algorithm, an asymmetric encryption algorithm, or a hybrid encryption algorithm combining the symmetric encryption algorithm and the asymmetric encryption algorithm; Converting the encrypted watermark image into an invisible encrypted layer; The invisible encryption layer is attached to the topmost layer of the page.

2. The WEB application development platform security protection method according to claim 1, characterized in that: The obtaining of the user information ID of the user comprises: When the user does not access the WEB application development platform for the first time, read the pre-stored user information ID from the configuration database; or When the user visits the WEB application development platform for the first time, a UUID is randomly generated, and the UUID is converted into a string format to obtain a first string, and characters of a specified type in the first string are deleted to obtain the user information ID.

3. The WEB application development platform security protection method according to claim 1, characterized in that: The step of converting the encrypted watermark image into an invisible encrypted layer comprises: Create a DIV element as a mask layer; wherein the attribute of the mask layer element of the mask layer is to cover the entire page to which it belongs and be invisible; The encrypted watermark image is configured as the background image of the mask layer to obtain the invisible encrypted layer.

4. The WEB application development platform security protection method according to claim 1, characterized in that: The method further comprises: When the page is a static page or a uniform style page, after converting the encrypted watermark image into the invisible encrypted layer, the invisible encrypted layer is attached to the top layer of the page using a CSS cascading style sheet; or When the page is a dynamic page or a changing page, JavaScript is used to dynamically generate the invisible encryption layer, and the invisible encryption layer is attached to the top layer of the page.

5. The WEB application development platform security protection method according to claim 1, characterized in that: The method further comprises: When the WEB application development platform is deployed in an environment that is not highly time-sensitive, the URL address and the user information ID are encrypted using the configuration encryption algorithm to obtain the encrypted watermark image; or When the WEB application development platform is deployed in an environment with high requirements for user information confidentiality, the URL address and the current timestamp are encrypted using the configured encryption algorithm to obtain the encrypted watermark image; or When the WEB application development platform is deployed in an environment that does not require high dynamics of the URL address, the user information ID and the current timestamp are encrypted using the configured encryption algorithm to obtain the encrypted watermark image.

6. The WEB application development platform security protection method according to claim 1, characterized in that: The method further comprises: In response to a risk detection instruction for a target platform, access the target platform; Take a screenshot of the visited page to obtain the image to be processed; Decrypting the image to be processed using the configured encryption algorithm to obtain decrypted information; When the decryption is successful, it is determined that the target platform has a risk of unauthorized deployment of the WEB application development platform; Obtain the access log, HTML code and server response characteristics of the target platform by pre-installing points in the WEB application development platform; Detecting whether a pre-configured first identifier exists in the access log to obtain a first detection result; Detecting whether there is a pre-configured second identifier in the server response feature to obtain a second detection result; Detecting the similarity between the HTML code and the code of the WEB application development platform to obtain a third detection result; Combining the image to be processed, the decrypted information, the first detection result, the second detection result, and the third detection result to obtain evidence that there is a risk of unauthorized deployment of the WEB application development platform on the target platform; The evidence is encrypted and sent to a designated terminal device.

7. A security protection device for a WEB application development platform, characterized in that: The WEB application development platform security protection device includes: An acquisition unit, used to acquire the user information ID of a user when it is detected that a user has accessed the WEB application development platform; The acquisition unit is further used to acquire the URL address of the page visited by the user and to acquire the current timestamp; wherein different pages have different URL addresses; the current timestamp refers to the standard time when the URL address of the page visited by the user is acquired; The encryption unit is used to encrypt the URL address, the user information ID and the current timestamp using a configured encryption algorithm to obtain an encrypted watermark image, including: sequentially combining the URL address, the user information ID and the current timestamp to obtain a second character string; encrypting the second character string using the configured encryption algorithm to obtain watermark data; converting the watermark data into a picture format to obtain the encrypted watermark image; wherein the configured encryption algorithm includes a symmetric encryption algorithm, an asymmetric encryption algorithm, or a hybrid encryption algorithm combining the symmetric encryption algorithm and the asymmetric encryption algorithm; A conversion unit, used for converting the encrypted watermark image into an invisible encrypted layer; The attachment unit is used to attach the invisible encrypted layer to the top layer of the page.

8. A computer device, characterized in that: The computer device comprises: a memory storing at least one instruction; and A processor executes instructions stored in the memory to implement the WEB application development platform security protection method as described in any one of claims 1 to 6.

9. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores at least one instruction, and the at least one instruction is executed by a processor in a computer device to implement the WEB application development platform security protection method as described in any one of claims 1 to 6.

Images