A method, device and system for encrypting page link parameters

Abstract

The present invention relates to the field of computers, and in particular to a method, device and system for encrypting page link parameters, wherein the method can encrypt link parameters of a page link to form an encrypted string, and can also replace the encrypted string by generating another set of strings, so that the replaced string is finally displayed, that is, double protection of the link parameters is achieved, and the difficulty for others to obtain the link parameters in the page link is increased, thereby effectively maintaining the security of user information.

Description

Technical Field

[0001] The present invention relates to the field of computers, and in particular to a method, device and system for encrypting page link parameters. Background Art

[0002] Page links refer to hyperlinks that can open web pages. By clicking on these links, you can jump to another web page, which can help users browse and access relevant information on the page.

[0003] Page link parameters refer to the extra information attached to a web link, usually starting with a question mark "?", followed by a parameter name and parameter value. These parameters are used to pass data to the target web page and can affect the content or behavior of the target page. Page link parameters often include relatively private user parameters and business parameters; however, existing page links are displayed in plain text, which means that as long as others obtain the page link, they can easily obtain and change the parameters in the page link, thus posing a serious threat to user information security. Summary of the invention

[0004] Based on this, it is necessary to provide a page link parameter encryption method, device and system to address the above-mentioned problems.

[0005] The embodiment of the present invention is implemented as follows: a method for encrypting page link parameters, the method comprising:

[0006] S1: Get the first page link to be encrypted;

[0007] S2: identifying each link parameter from the first page link;

[0008] S3: classifying each link parameter to obtain a plurality of link parameter groups, wherein each link parameter group includes a plurality of link parameters of the same parameter type, and different link parameter groups correspond to different parameter types;

[0009] S4: for each link parameter group, merge the link parameters in the link parameter group into a JSON object;

[0010] S5: converting the combined JSON object into a JSON string, and encrypting the JSON string using an encryption algorithm to obtain an encrypted string;

[0011] S6: Request the encryption server to generate a target string;

[0012] S7: When the target character string is generated, the encrypted character string is sent to the encryption server, so that the encryption server returns the target character string;

[0013] S8: Delete each link parameter in the first page link, and add the target string to the first page link to obtain a target link displayed externally.

[0014] In one embodiment, the present invention provides a device for encrypting page link parameters, the device comprising:

[0015] An acquisition module, used to acquire the first page link to be encrypted;

[0016] A first processing module, used for identifying each link parameter from the first page link;

[0017] The second processing module is used to classify each link parameter to obtain a plurality of link parameter groups;

[0018] A third processing module is used for merging, for each link parameter group, the link parameters in the link parameter group into a JSON object;

[0019] A fourth processing module is used to convert the merged JSON object into a JSON string, and encrypt the JSON string by an encryption algorithm to obtain an encrypted string;

[0020] A request module is used to request the encryption server to generate a target string;

[0021] The sending module is used to send the encrypted string to the encryption server when the target string is generated, so that the encryption server returns the target string;

[0022] The fifth processing module is used to delete each link parameter in the first page link and add the target string to the first page link to obtain the target link displayed externally.

[0023] In one embodiment, the present invention provides a page link parameter encryption system, the system comprising:

[0024] Encryption server, used to generate the target string;

[0025] The computer device communicates with the encryption server and is used to execute the page link parameter encryption method.

[0026] The present invention provides a computer-readable storage medium, including obtaining a first page link to be encrypted; identifying each link parameter from the first page link; classifying each link parameter to obtain a plurality of link parameter groups; for each link parameter group, merging each link parameter in the link parameter group into a JSON object; converting the merged JSON object into a JSON string, and encrypting the JSON string through an encryption algorithm to obtain an encrypted string; requesting an encryption server to generate a target string; when the target string is generated, sending the encrypted string to the encryption server so that the encryption server returns the target string; deleting each link parameter in the first page link, and adding the target string to the first page link to obtain a target link displayed externally; in the present application, the link parameters of the page link can be encrypted to form an encrypted string, and the encrypted string can be replaced by generating another set of strings, so that the replaced string is finally displayed, that is, double protection of the link parameters is achieved, and the difficulty for others to obtain the link parameters in the page link is increased, thereby effectively maintaining the security of user information. BRIEF DESCRIPTION OF THE DRAWINGS

[0027] Figure 1 A flowchart of a method for encrypting page link parameters provided in one embodiment;

[0028] Figure 2 A module flow chart of a page link parameter encryption device provided in one embodiment;

[0029] Figure 3 A schematic diagram of the composition of a page link parameter encryption system provided in one embodiment;

[0030] Figure 4 FIG. 4 is a block diagram of the internal structure of a computer device in one embodiment. DETAILED DESCRIPTION

[0031] In order to make the purpose, technical solution and advantages of the present invention more clearly understood, the present invention is further described in detail below in conjunction with the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are only used to explain the present invention and are not intended to limit the present invention.

[0032] It is understood that the terms "first", "second", etc. used in the present invention may be used herein to describe various elements, but unless otherwise specified, these elements are not limited by these terms. These terms are only used to distinguish a first element from another element. For example, a first xx script may be referred to as a second xx script, and similarly, a second xx script may be referred to as a first xx script without departing from the scope of the present invention.

[0033] like Figure 1As shown, in one embodiment, a method for encrypting page link parameters is proposed, the method comprising:

[0034] S1: Get the first page link to be encrypted;

[0035] S2: identifying each link parameter from the first page link;

[0036] S3: classifying each link parameter to obtain a plurality of link parameter groups, wherein each link parameter group includes a plurality of link parameters of the same parameter type, and different link parameter groups correspond to different parameter types;

[0037] S4: for each link parameter group, merge the link parameters in the link parameter group into a JSON object;

[0038] S5: converting the combined JSON object into a JSON string, and encrypting the JSON string using an encryption algorithm to obtain an encrypted string;

[0039] S6: Request the encryption server to generate a target string;

[0040] S7: When the target character string is generated, the encrypted character string is sent to the encryption server, so that the encryption server returns the target character string;

[0041] S8: deleting each link parameter in the first page link, and adding the target string to the first page link to obtain a target link displayed externally;

[0042] In this embodiment, the computer device can be an independent physical server or terminal, or a server cluster composed of multiple physical servers, and can be a cloud server that provides basic cloud computing services such as cloud servers, cloud databases, cloud storage and CDN; the encryption server is also an independent physical server or terminal; the encryption server communicates with the computer device, and the computer device cooperates with the encryption server to execute this method.

[0043] In this embodiment, for example, in the page link 'https: / / example.com / page?order=12345&product=56789&name=john&phone=18812345678', order=12345 is an order parameter, product=56789 is a product parameter, name=john is a user name parameter, phone=18812345678 is a user phone parameter, and the order parameter, product parameter, user name parameter, and user phone parameter are all link parameters; among which, the order parameter and the product parameter belong to the same parameter type (business parameter), so these two parameters are grouped together as a link parameter group; the user name parameter and the user phone parameter belong to the same parameter type (user parameter), so these two parameters are grouped together as a link parameter group;

[0044] In this embodiment, the JSON (JavaScript Object Notation) object is a lightweight data exchange format used to store and transmit data, and is easy for computers to read; in this embodiment, the obtained JSON object can be encrypted using the AES (Advanced Encryption Standard) encryption algorithm or other encryption algorithms to obtain an encrypted string, thereby achieving the first layer of protection for the link parameters;

[0045] In this embodiment, after the computer device requests the encryption server to generate a target string, the encryption server immediately generates the target string. When the target string is generated, the encryption server notifies the computer device that the target string has been generated. After receiving the notification, the computer device sends the encrypted string to the encryption server (and deletes the local encrypted string at the same time). After receiving the encrypted string, the encryption server returns the target string, thereby enabling the computer device to replace the encrypted string with the target string and add it to the first page link. The target string finally presented is a virtual string, so that even if others know how to decrypt, they cannot obtain the link parameters without obtaining the encrypted string, thereby achieving the second layer of protection. In this embodiment, a target string can be obtained corresponding to each link parameter group, and the target link can be obtained after each target string is added to the first page link.

[0046] In the present application, the link parameters of the page link can be encrypted to form an encrypted string, and the encrypted string can be replaced by generating another set of strings so that the replaced string is finally displayed, thereby achieving double protection for the link parameters, increasing the difficulty for others to obtain the link parameters in the page link, and thus effectively maintaining the security of user information.

[0047] As a preferred embodiment, the JSON string is encrypted by an encryption algorithm to obtain an encrypted string including:

[0048] Generate encryption keys;

[0049] Splitting the encryption key into a first subkey and a second subkey;

[0050] Adding a first check bit to the first subkey and adding a second check bit to the second subkey;

[0051] Generate a random string of set length;

[0052] Randomly determine a first position and a second position in the random string;

[0053] The first subkey is embedded in the first position of the random string, and the second subkey is embedded in the second position of the random string, thereby obtaining an encrypted string.

[0054] In this embodiment, for example, the encryption key is a randomly generated 16-bit character, each character is a number from 0 to 9, or a letter from a to f, such as '3dd1b080687dfd2b'; the first 8 bits of the encryption key are used as the first subkey, that is, '3dd1b080', and the last 8 bits of the encryption key are used as the second subkey, that is, '687dfd2b', and then a number from 0 to 9 is randomly generated as the first check digit, such as 6, and the first check digit is added to the first subkey, so that the first subkey becomes '63dd1b080', and the random Generate a number from 0 to 9 as the second check digit, such as 8, and add the second check digit to the second subkey, so that the second subkey becomes '687dfd2b8'; in order to improve the concealment of the key, the generated random string is a longer string, such as 60 bits, 80 bits or other lengths; the first position and the second position are the positions in the random string, such as 'between the 8th and 9th bits' of the random string; after the two subkeys are respectively embedded in the corresponding positions in the random string, the key is hidden in the random string to form an encrypted string.

[0055] As a preferred embodiment, between step S5 and step S6, the following steps are also included:

[0056] integrating the encryption key, the first subkey, the second subkey, the first check digit, the second check digit, the first position, and the second position into encrypted information;

[0057] The encrypted information is uploaded to the encryption server so that the user who needs to decrypt the encrypted string can decrypt the encrypted string after obtaining the encrypted information from the encryption server.

[0058] In this embodiment, after uploading the encrypted information to the encryption server, the computer device deletes the local encrypted information, which is equivalent to storing the encrypted information in the encryption server, that is, it is necessary to obtain authorization from the encryption server (for example, only the device storing the information can obtain the encrypted information from the encryption server) to obtain the encrypted information to decrypt the encrypted string and obtain the link parameters, making it difficult for other individuals or devices to obtain the encrypted information, and thus unable to decrypt the encrypted string to obtain the link parameters, thereby ensuring the security of the link parameters.

[0059] As a preferred embodiment, requesting the encryption server to generate the target character string also includes:

[0060] The time limit input by the user is sent to the encryption server, so that the encryption server generates a time-limited certificate corresponding to the encrypted string and returns the generated time-limited certificate.

[0061] When a limited-time voucher expires, it also includes:

[0062] Sending a certificate replacement request and an expired time-limited certificate to the encryption server, so that the encryption server generates a new time-limited certificate and a new target string corresponding to the encrypted string, and returns the new time-limited certificate and the new target string;

[0063] After receiving the new limited-time credential and the new target string, the old target string in the target link is replaced with the new target string, thereby updating the target link.

[0064] In this embodiment, in order to further ensure data security, the generated target string has a certain timeliness so that the target string is continuously updated; the time limit is the same as the effective time of the target string; the time-limited certificate is a unique certificate for a device to have ownership of a target string, which includes an 8-digit unique certificate code, the identity information of the computer device to which it belongs, and the time limit. The computer needs to send the time-limited certificate to the encryption server, and the encryption server will return the encrypted string, and the computer device can decrypt it to obtain the link parameters; when the time-limited certificate expires, the time-limited certificate and the target string can be updated through the method of this embodiment, so that even if other devices steal the old time-limited certificate, they cannot obtain the encrypted string, further enhancing the protection of the encrypted string.

[0065] As a preferred embodiment, when the user needs to decrypt the target link, it also includes:

[0066] Send a time-limited certificate to the encryption server, so that the encryption server returns an encrypted string and encrypted information;

[0067] Decrypt the encrypted string according to the encrypted information to obtain various link parameters.

[0068] In this embodiment, after receiving the encrypted string and encrypted information, the computer can perform reverse decryption to obtain various link parameters. Since only the computer device has a limited-time credential, it is the only device that can obtain the link parameters, ensuring the security of the link parameters.

[0069] The process of each module in the page link parameter encryption method device provided in the embodiment of the present application realizing its own function can be specifically referred to the aforementioned Figure 1 The description of the illustrated embodiment will not be repeated here.

[0070] like Figure 3 As shown, in one embodiment, a device for encrypting page link parameters is provided, the device comprising:

[0071] An acquisition module, used to acquire the first page link to be encrypted;

[0072] A first processing module, used for identifying each link parameter from the first page link;

[0073] The second processing module is used to classify each link parameter to obtain a plurality of link parameter groups;

[0074] A third processing module is used for merging, for each link parameter group, the link parameters in the link parameter group into a JSON object;

[0075] A fourth processing module is used to convert the merged JSON object into a JSON string, and encrypt the JSON string by an encryption algorithm to obtain an encrypted string;

[0076] A request module is used to request the encryption server to generate a target string;

[0077] The sending module is used to send the encrypted string to the encryption server when the target string is generated, so that the encryption server returns the target string;

[0078] The fifth processing module is used to delete each link parameter in the first page link and add the target string to the first page link to obtain the target link displayed externally.

[0079] like Figure 4 As shown, in one embodiment, a page link parameter encryption system is provided, the system comprising:

[0080] Encryption server, used to generate the target string;

[0081] The computer device communicates with the encryption server and is used to execute the page link parameter encryption method.

[0082] In the present application, a computer device cooperates with an encryption server to execute a page link parameter encryption method, which can encrypt the link parameters of a page link to form an encrypted string, and can also replace the encrypted string by generating another set of strings so that the final displayed string is the replaced string, thereby achieving double protection for the link parameters, increasing the difficulty for others to obtain the link parameters in the page link, and thus effectively maintaining the security of user information.

[0083] Figure 4 FIG. 2 shows an internal structure diagram of a computer device in one embodiment. Figure 4 As shown, the computer device includes a processor, a memory, a network interface, an input device and a display screen connected through a system bus. Among them, the memory includes a non-volatile storage medium and an internal memory. The non-volatile storage medium of the computer device stores an operating system and may also store a computer program. When the computer program is executed by the processor, the processor can implement the page link parameter encryption method provided in the embodiment of the present invention. The internal memory may also store a computer program. When the computer program is executed by the processor, the processor can execute the page link parameter encryption method provided in the embodiment of the present invention. The display screen of the computer device may be a liquid crystal display screen or an electronic ink display screen, and the input device of the computer device may be a touch layer covering the display screen, or a button, trackball or touchpad provided on the housing of the computer device, or an external keyboard, touchpad or mouse, etc.

[0084] Those skilled in the art will understand that Figure 4 The structure shown in the figure is only a block diagram of a part of the structure related to the solution of the present invention, and does not constitute a limitation on the computer device to which the solution of the present invention is applied. The specific computer device may include more or fewer components than those shown in the figure, or combine certain components, or have a different arrangement of components.

[0085] In one embodiment, the page link parameter encryption device provided by the embodiment of the present invention can be implemented in the form of a computer program. The computer program can be Figure 4 The memory of the computer device can store various program modules constituting the page link parameter encryption device, for example, Figure 2 The acquisition module, the first processing module, the second processing module, the third processing module, the fourth processing module, the request module, the sending module, and the fifth processing module shown in the figure enable the processor to execute the steps of the page link parameter encryption method of each embodiment of the present invention described in this specification.

[0086] For example, Figure 4 The computer device shown can be Figure 2 The acquisition module in the page link parameter encryption device shown executes step S1; the computer device can execute step S2 through the first processing module; the computer device can execute step S3 through the second processing module; the computer device can execute step S4 through the third processing module; the computer device can execute step S5 through the fourth processing module; the computer device can execute step S6 through the request module; the computer device can execute step S7 through the sending module; the computer device can execute step S8 through the fifth processing module.

[0087] In one embodiment, a computer device is provided, the computer device comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein when the processor executes the computer program, the following steps are implemented:

[0088] S1: Get the first page link to be encrypted;

[0089] S2: identifying each link parameter from the first page link;

[0090] S3: classifying each link parameter to obtain a plurality of link parameter groups, wherein each link parameter group includes a plurality of link parameters of the same parameter type, and different link parameter groups correspond to different parameter types;

[0091] S4: for each link parameter group, merge the link parameters in the link parameter group into a JSON object;

[0092] S5: converting the combined JSON object into a JSON string, and encrypting the JSON string using an encryption algorithm to obtain an encrypted string;

[0093] S6: Request the encryption server to generate a target string;

[0094] S7: When the target character string is generated, the encrypted character string is sent to the encryption server, so that the encryption server returns the target character string;

[0095] S8: Delete each link parameter in the first page link, and add the target string to the first page link to obtain a target link displayed externally.

[0096] In one embodiment, a computer-readable storage medium is provided, on which a computer program is stored. When the computer program is executed by a processor, the processor performs the following steps:

[0097] S1: Get the first page link to be encrypted;

[0098] S2: identifying each link parameter from the first page link;

[0099] S3: classifying each link parameter to obtain a plurality of link parameter groups, wherein each link parameter group includes a plurality of link parameters of the same parameter type, and different link parameter groups correspond to different parameter types;

[0100] S4: for each link parameter group, merge the link parameters in the link parameter group into a JSON object;

[0101] S5: converting the combined JSON object into a JSON string, and encrypting the JSON string using an encryption algorithm to obtain an encrypted string;

[0102] S6: Request the encryption server to generate a target string;

[0103] S7: When the target character string is generated, the encrypted character string is sent to the encryption server, so that the encryption server returns the target character string;

[0104] S8: Delete each link parameter in the first page link, and add the target string to the first page link to obtain a target link displayed externally.

[0105] It should be understood that, although each step in the flow chart of each embodiment of the present invention is shown in sequence according to the indication of the arrow, these steps are not necessarily performed in sequence according to the order indicated by the arrow. Unless there is a clear explanation in this article, the execution of these steps does not have a strict order restriction, and these steps can be performed in other orders. Moreover, at least a portion of the steps in each embodiment may include a plurality of sub-steps or a plurality of stages, and these sub-steps or stages are not necessarily performed at the same time, but can be performed at different times, and the execution order of these sub-steps or stages is not necessarily performed in sequence, but can be performed in turn or alternately with at least a portion of other steps or sub-steps or stages of other steps.

[0106] A person of ordinary skill in the art can understand that all or part of the processes in the above-mentioned embodiment method can be completed by instructing the relevant hardware through a computer program, and the program can be stored in a non-volatile computer-readable storage medium. When the program is executed, it can include the processes of the embodiments of the above-mentioned methods. Among them, any reference to memory, storage, database or other media used in the embodiments provided by the present invention can include non-volatile and / or volatile memory. Non-volatile memory may include read-only memory (ROM), programmable ROM (PROM), electrically programmable ROM (EPROM), electrically erasable programmable ROM (EEPROM) or flash memory. Volatile memory may include random access memory (RAM) or external cache memory. As an illustration and not limitation, RAM is available in many forms, such as static RAM (SRAM), dynamic RAM (DRAM), synchronous DRAM (SDRAM), double data rate SDRAM (DDRSDRAM), enhanced SDRAM (ESDRAM), synchronous link (Synchlink) DRAM (SLDRAM), memory bus (Rambus) direct RAM (RDRAM), direct memory bus dynamic RAM (DRDRAM), and memory bus dynamic RAM (RDRAM).

[0107] The technical features of the above-described embodiments may be arbitrarily combined. To make the description concise, not all possible combinations of the technical features in the above-described embodiments are described. However, as long as there is no contradiction in the combination of these technical features, they should be considered to be within the scope of this specification.

[0108] The above-mentioned embodiments only express several implementation methods of the present invention, and the description thereof is relatively specific and detailed, but it cannot be understood as limiting the scope of the patent of the present invention. It should be pointed out that, for ordinary technicians in this field, several variations and improvements can be made without departing from the concept of the present invention, which all belong to the protection scope of the present invention. Therefore, the protection scope of the patent of the present invention shall be subject to the attached claims.

Claims

1. A method for encrypting page link parameters, characterized in that: The method comprises: S1: Get the first page link to be encrypted; S2: identifying each link parameter from the first page link; S3: classifying each link parameter to obtain a plurality of link parameter groups, wherein each link parameter group includes a plurality of link parameters of the same parameter type, and different link parameter groups correspond to different parameter types; S4: for each link parameter group, merge the link parameters in the link parameter group into a JSON object; S5: converting the combined JSON object into a JSON string, and encrypting the JSON string using an encryption algorithm to obtain an encrypted string; S6: Request the encryption server to generate a target string; S7: When the target character string is generated, the encrypted character string is sent to the encryption server, so that the encryption server returns the target character string; S8: deleting each link parameter in the first page link, and adding the target string to the first page link to obtain a target link displayed externally; The request to the encryption server to generate the target string also includes: Send the time limit input by the user to the encryption server, so that the encryption server generates a time-limited certificate corresponding to the encrypted string, and returns the generated time-limited certificate; When a limited-time voucher expires, it also includes: Sending a certificate replacement request and an expired time-limited certificate to the encryption server, so that the encryption server generates a new time-limited certificate and a new target string corresponding to the encrypted string, and returns the new time-limited certificate and the new target string; After receiving the new limited-time credential and the new target string, the old target string in the target link is replaced with the new target string, thereby updating the target link.

2. The method according to claim 1, characterized in that The method further includes the following steps between step S5 and step S6: Generate encryption keys; Splitting the encryption key into a first subkey and a second subkey; Adding a first check bit to the first subkey and adding a second check bit to the second subkey; Generate a random string of set length; Randomly determine a first position and a second position in the random string; Embed the first subkey at a first position in the random string and embed the second subkey at a second position in the random string; integrating the encryption key, the first subkey, the second subkey, the first check digit, the second check digit, the first position, and the second position into encrypted information; The encrypted information is uploaded to the encryption server so that the user who needs to decrypt the encrypted string can decrypt the encrypted string after obtaining the encrypted information from the encryption server.

3. The method according to claim 1, characterized in that When the user needs to decrypt the target link, it also includes: Send a time-limited certificate to the encryption server, so that the encryption server returns an encrypted string and encrypted information; Decrypt the encrypted string according to the encrypted information to obtain various link parameters.

4. A page link parameter encryption device, characterized in that: The device comprises: An acquisition module, used to acquire the first page link to be encrypted; A first processing module, used for identifying each link parameter from the first page link; The second processing module is used to classify each link parameter to obtain a plurality of link parameter groups; A third processing module is used for merging, for each link parameter group, the link parameters in the link parameter group into a JSON object; A fourth processing module is used to convert the merged JSON object into a JSON string, and encrypt the JSON string by an encryption algorithm to obtain an encrypted string; A request module is used to request the encryption server to generate a target string; The sending module is used to send the encrypted string to the encryption server when the target string is generated, so that the encryption server returns the target string; A fifth processing module is used to delete each link parameter in the first page link and add the target string to the first page link to obtain a target link displayed externally; The request to the encryption server to generate the target string also includes: Send the time limit input by the user to the encryption server, so that the encryption server generates a time-limited certificate corresponding to the encrypted string, and returns the generated time-limited certificate; When a limited-time voucher expires, it also includes: Sending a certificate replacement request and an expired time-limited certificate to the encryption server, so that the encryption server generates a new time-limited certificate and a new target string corresponding to the encrypted string, and returns the new time-limited certificate and the new target string; After receiving the new limited-time credential and the new target string, the old target string in the target link is replaced with the new target string, thereby updating the target link.

5. A page link parameter encryption system, characterized in that: The system comprises: Encryption server, used to generate the target string; A computer device, communicating with an encryption server, is used to execute the page link parameter encryption method as described in any one of claims 1-3.

Images