A business processing method, apparatus, electronic device, and computer-readable medium

Abstract

This application discloses a business processing method, apparatus, electronic device, and computer-readable medium, relating to the field of computer technology. The method includes: in response to program startup, obtaining a corresponding executable file; obtaining file decryption code and an encrypted file from the executable file; decrypting the encrypted file using the file decryption code to obtain a decrypted file; triggering the execution of a cross-platform desktop application framework to create a window component; loading and displaying a webpage through the window component; obtaining a server unique identifier through the webpage; calling a business interface to generate an initial signature based on the server unique identifier after secondary encryption; processing the initial signature using the cross-platform desktop application framework to generate a final signature and returning the final signature to the webpage; and executing a business verification method based on the server unique identifier and the final signature carried on the webpage and returning the business verification result data. This improves the security of content interacting between the client and the server.

Description

Technical Field

[0001] This application relates to the field of computer technology, and in particular to a business processing method, apparatus, electronic device, and computer-readable medium. Background Technology

[0002] Currently, the core code logic of Electron applications is written in Javascript. Although the Electron official website provides code obfuscation and ASAR archiving solutions, hackers can still easily unpack the application, modify the logic, repackage it, and then distribute cracked versions. The security of the interaction content between the client and the server is poor. Summary of the Invention

[0003] In view of this, embodiments of this application provide a business processing method, apparatus, electronic device, and computer-readable medium that can solve the problem of poor security of interactive content when existing clients interact with servers.

[0004] To achieve the above objectives, according to one aspect of the embodiments of this application, a business processing method is provided, comprising: in response to program startup, obtaining a corresponding executable file, and then obtaining file decryption code and an encrypted file from the executable file; using the file decryption code to decrypt the encrypted file to obtain a decrypted file, triggering the execution of a cross-platform desktop application framework to create a window component, which loads and displays a webpage; obtaining a server unique identifier through the webpage, and then calling a business interface to generate an initial signature based on the server unique identifier through secondary encryption; the cross-platform desktop application framework performing data processing on the initial signature to generate a final signature, and returning the final signature to the webpage; and executing a business verification method based on the server unique identifier and the final signature carried on the webpage and returning business verification result data.

[0005] Optionally, the initial signature is generated by double-encrypting the server's unique identifier, including: calling a cross-platform desktop application framework to encrypt the server's unique identifier for the first time to generate an encrypted identifier; and calling a virtual instruction set architecture method to encrypt the encrypted identifier for the second time to generate the initial signature.

[0006] Optionally, the initial signature is processed by a cross-platform desktop application framework to generate a final signature, including: determining the format of the initial signature, and adjusting the format of the initial signature to the preset format in response to the inconsistency between the format and the preset format to generate the final signature.

[0007] Optionally, the business verification method includes: performing source authenticity verification based on the server's unique identifier; and performing information integrity verification based on the final signature.

[0008] Optionally, the method further includes: if the source authenticity verification fails or the information integrity verification fails, the business verification result data corresponds to business verification failure; if the source authenticity verification succeeds and the information integrity verification succeeds, the business verification result data corresponds to business verification success.

[0009] Optionally, after obtaining the server's unique identifier through a webpage, the method further includes: obtaining the counter record corresponding to the server's unique identifier; if the counter record is empty, executing the business interface call process; if the counter record is not empty, displaying a duplicate message.

[0010] In addition, this application also provides a business processing apparatus, including: an acquisition unit configured to acquire a corresponding executable file in response to program startup, and then acquire file decryption code and an encrypted file from the executable file; a page loading unit configured to decrypt the encrypted file using the file decryption code to obtain a decrypted file, trigger the execution of a cross-platform desktop application framework to create a window component, and load and display a web page by the window component; an encryption unit configured to acquire a server unique identifier through the web page, and then call a business interface to generate an initial signature based on the server unique identifier through secondary encryption; a data processing unit configured to perform data processing on the initial signature by the cross-platform desktop application framework to generate a final signature, and return the final signature to the web page; and a business verification unit configured to execute a business verification method based on the server unique identifier and the final signature carried on the web page and return business verification result data.

[0011] Optionally, the encryption unit is further configured to: invoke a cross-platform desktop application framework to perform a first encryption of the server's unique identifier to generate an encrypted identifier; and invoke a virtual instruction set architecture method to perform a second encryption of the encrypted identifier to generate an initial signature.

[0012] Optionally, the data processing unit is further configured to: determine the format of the initial signature, and in response to a discrepancy between the format and a preset format, adjust the format of the initial signature to the preset format to generate the final signature.

[0013] Optionally, the business verification unit is further configured to: perform source authenticity verification based on the server's unique identifier; and perform information integrity verification based on the final signature.

[0014] Optionally, the business verification unit is further configured such that: if the source authenticity verification fails or the information integrity verification fails, the business verification result data corresponds to business verification failure; if the source authenticity verification succeeds and the information integrity verification succeeds, the business verification result data corresponds to business verification success.

[0015] Optionally, the device further includes a prompting unit configured to: obtain the counting record corresponding to the server's unique identifier; execute the business interface call process in response to the counting record being empty; and prompt a duplicate message in response to the counting record being non-empty.

[0016] In addition, this application also provides a business processing electronic device, including: one or more processors; and a storage device for storing one or more programs, which, when executed by one or more processors, enable the one or more processors to implement the business processing method described above.

[0017] In addition, this application also provides a computer-readable medium having a computer program stored thereon, which, when executed by a processor, implements the business processing method described above.

[0018] To achieve the above objectives, according to another aspect of the embodiments of this application, a computer program product is provided.

[0019] A computer program product according to an embodiment of this application includes a computer program that, when executed by a processor, implements the business processing method provided in the embodiment of this application.

[0020] One embodiment of the above invention has the following advantages or beneficial effects: In response to program startup, this application obtains the corresponding executable file, and then obtains file decryption code and encrypted files from the executable file; it uses the file decryption code to decrypt the encrypted file to obtain the decrypted file, triggering the execution of a cross-platform desktop application framework to create a window component, which loads and displays a webpage; it obtains the server's unique identifier through the webpage, and then calls the business interface to generate an initial signature based on the server's unique identifier after secondary encryption; the cross-platform desktop application framework processes the initial signature to generate a final signature, and returns the final signature to the webpage; based on the server's unique identifier and the final signature carried on the webpage, it executes a business verification method and returns the business verification result data. This improves the security of content interacting between the client and the server.

[0021] The further effects of the aforementioned unconventional alternative methods will be explained below in conjunction with specific implementation methods. Attached Figure Description

[0022] The accompanying drawings are provided to better understand this application and do not constitute an undue limitation thereof. Wherein:

[0023] Figure 1 This is a schematic diagram of the main flow of a business processing method according to an embodiment of this application;

[0024] Figure 2 This is a schematic diagram of the main flow of a business processing method according to an embodiment of this application;

[0025] Figure 3 This is a schematic diagram of the main flow of a business processing method according to an embodiment of this application;

[0026] Figure 4 This is a schematic diagram of the main units of a service processing apparatus according to an embodiment of this application;

[0027] Figure 5 This is an exemplary system architecture diagram to which embodiments of this application can be applied;

[0028] Figure 6 This is a schematic diagram of the structure of a computer system suitable for implementing terminal devices or servers in the embodiments of this application. Detailed Implementation

[0029] The following description, in conjunction with the accompanying drawings, illustrates exemplary embodiments of this application, including various details to aid understanding. These embodiments should be considered merely exemplary. Therefore, those skilled in the art should recognize that various changes and modifications can be made to the embodiments described herein without departing from the scope and spirit of this application. Similarly, for clarity and brevity, descriptions of well-known functions and structures are omitted in the following description. It should be noted that the acquisition, transmission, storage, use, and processing of data in the technical solutions of this application comply with relevant national laws and regulations. It should also be noted that certain software, components, models, and other existing industry solutions may be mentioned in the embodiments of this application. These should be considered exemplary, intended only to illustrate the feasibility of implementing the technical solutions of this application, and do not imply that the applicant has already used or necessarily used such solutions. The collection, analysis, use, transmission, and storage of user personal information involved in the technical solutions of this application all comply with relevant laws and regulations, are used for legal and reasonable purposes, are not shared, disclosed, or sold outside of these legal uses, and are subject to supervision and management by regulatory authorities. Necessary measures should be taken to prevent unauthorized access to user personal information data, ensure that personnel authorized to access such data comply with relevant laws and regulations, and safeguard user personal information security. Once this user personal information data is no longer needed, risks should be minimized by restricting or even prohibiting data collection and / or deleting the data.

[0030] When used, including in certain relevant applications, data is deidentified to protect user privacy, for example by removing specific identifiers, controlling the amount or specificity of stored data, controlling how data is stored, and / or other methods.

[0031] Figure 1This is a schematic diagram of the main flow of a business processing method according to an embodiment of this application, as shown below. Figure 1 As shown, the business processing method mainly includes the following steps S101-S105.

[0032] Step S101: In response to program startup, obtain the corresponding executable file, and then obtain the file decryption code and encrypted file from the executable file.

[0033] In this embodiment, the execution entity of the business processing method (e.g., a server) can detect in real time whether a program is starting via a wired or wireless connection. If a program is detected to be starting, the execution file corresponding to the started program is obtained. This execution file may carry file decryption code and an encrypted file. The execution entity can obtain the file decryption code and the encrypted file carried in the execution file. The file decryption code is the decryption code corresponding to an already encrypted archive file. The encrypted file is the file obtained by encrypting the archive file.

[0034] Step S102: Decrypt the encrypted file using the file decryption code to obtain the decrypted file, trigger the execution of the cross-platform desktop application framework to create a window component, which then loads and displays the web page.

[0035] The encrypted file in the executable file is decrypted using the file decryption code in the executable file, resulting in a decrypted file. After obtaining the decrypted file, the cross-platform desktop application framework Electron JS is triggered to create a window component, which then loads and displays the web page.

[0036] Step S103: Obtain the server's unique identifier through the webpage, and then call the business interface to generate an initial signature based on the server's unique identifier through secondary encryption.

[0037] The system interacts with the server via a webpage to obtain the server's unique identifier. Then, through a business interface, it calls the cross-platform desktop application framework Electron JS to perform an initial encryption of the server's unique identifier, generating an encrypted identifier. This encrypted identifier is then further encrypted using a virtual instruction set architecture method (i.e., the WebAssembly method) to obtain a second, encrypted identifier, which is the initial signature. By encrypting the server's unique identifier twice using different methods, the generated initial signature is difficult to crack, ensuring the security of the corresponding business processes.

[0038] Specifically, after obtaining the server's unique identifier through the webpage, the method also includes: obtaining the counter record corresponding to the server's unique identifier; if the counter record is empty, executing the business interface call process; if the counter record is not empty, displaying a duplicate message.

[0039] The server's unique identifier can only be obtained once within a preset time period to prevent duplication, which helps avoid wasting computing resources and improve business processing performance.

[0040] In step S104, the cross-platform desktop application framework processes the initial signature to generate the final signature and returns the final signature to the web page.

[0041] Specifically, the cross-platform desktop application framework processes the initial signature to generate the final signature, including: determining the format of the initial signature, and adjusting the format of the initial signature to the preset format in response to the inconsistency between the format and the preset format, so as to generate the final signature.

[0042] Data processing for the initial signature can include format adjustment, image-text conversion, and scrambling to improve the security and confidentiality of the initial signature.

[0043] Step S105: Based on the server's unique identifier and final signature carried on the webpage, execute the business verification method and return the business verification result data.

[0044] Specifically, the business verification methods include: performing source authenticity verification based on the server's unique identifier; and performing information integrity verification based on the final signature.

[0045] The server's unique identifier is used for source verification. By matching the server's unique identifier with each source identifier in the preset source identifier database, if a match is found, it means that the server's unique identifier is in the preset source identifier database, and the source authenticity verification is successful.

[0046] The final signature is used to verify message integrity. Upon receiving the message and the final signature, the final signature is decrypted using the public key to obtain the original hash value. Simultaneously, the received message is hashed using the same hash function. If the two hash values ​​match, the verification is successful, indicating that the message has not been tampered with, is intact, and indeed came from the claimed sender.

[0047] Specifically, the business processing method also includes: if the source authenticity verification fails or the information integrity verification fails, the business verification result data corresponds to business verification failure; if the source authenticity verification succeeds and the information integrity verification succeeds, the business verification result data corresponds to business verification success.

[0048] This embodiment, in response to program startup, obtains the corresponding executable file, and then retrieves the file decryption code and encrypted file from the executable file; it uses the file decryption code to decrypt the encrypted file to obtain the decrypted file, triggering the execution of a cross-platform desktop application framework to create a window component, which loads and displays a webpage; it obtains the server's unique identifier from the webpage, and then calls the business interface to generate an initial signature based on the server's unique identifier through secondary encryption; the cross-platform desktop application framework processes the initial signature to generate a final signature, which is then returned to the webpage; based on the server's unique identifier and the final signature carried on the webpage, the business verification method is executed and the business verification result data is returned. This improves the security of content interacting between the client and the server.

[0049] Figure 2 This is a schematic diagram of the main flow of a business processing method according to an embodiment of this application, such as... Figure 2 As shown, the business processing method mainly includes the following steps S201-S206.

[0050] Step S201: In response to program startup, obtain the corresponding executable file, and then obtain the file decryption code and encrypted file from the executable file.

[0051] If a program is detected to be running, the executable file corresponding to that program is retrieved. This executable file may contain file decryption code and an encrypted file. The executing entity can retrieve the file decryption code and the encrypted file from this executable file. The file decryption code corresponds to the decryption code of an already encrypted archive file. The encrypted file is the file obtained by encrypting the archive file.

[0052] Step S202: Decrypt the encrypted file using the file decryption code to obtain the decrypted file, trigger the execution of the cross-platform desktop application framework to create a window component, which then loads and displays the web page.

[0053] Upon obtaining the decrypted file, a cross-platform desktop application framework is triggered to create a window component based on the loaded decrypted file. The created window component then loads and displays the webpage corresponding to the decrypted file.

[0054] Step S203: Obtain the server's unique identifier through the webpage, and then call the business interface to invoke the cross-platform desktop application framework to encrypt the server's unique identifier for the first time, so as to generate an encrypted identifier.

[0055] When a cross-platform desktop application framework needs to encrypt the server's unique identifier for the first time, it can first use a first hash function to generate a first hash value for the server's unique identifier, and then use a private key to encrypt the first hash value to generate an encrypted identifier.

[0056] Step S204: Invoke the virtual instruction set architecture method to perform a second encryption on the encrypted identifier to generate an initial signature.

[0057] The virtual instruction set architecture method performs a second encryption on the encrypted identifier. First, a second hash function is used to generate a second hash value for the encrypted identifier. Then, this second hash value is encrypted using a private key to generate an initial signature. This ensures that the generated initial signature is difficult to crack, guaranteeing the security of the corresponding business processes.

[0058] Understandably, the first hash function and the second hash function can be any two different hash functions among hash functions, additive hash functions, multiplicative hash functions, division hash functions, perfect hash functions, and cryptographic hash functions.

[0059] In step S205, the cross-platform desktop application framework processes the initial signature to generate the final signature and returns the final signature to the web page.

[0060] Data processing for the initial signature can include format adjustment, image-text conversion, and scrambling to improve the security and confidentiality of the initial signature.

[0061] Step S206: Based on the server's unique identifier and final signature carried on the webpage, execute the business verification method and return the business verification result data.

[0062] The executing entity can generate a business verification task based on the server's unique identifier and final signature carried on the webpage, and call the thread pool to execute the business verification task to improve the response speed of business processing.

[0063] The server's unique identifier is used for source verification. It is matched against various source identifiers in a pre-defined source identifier database. A successful match indicates the server's unique identifier is in the database, thus confirming successful source authenticity verification. The final signature is used for information integrity verification. Upon receiving the information and the final signature, the public key is used to decrypt the final signature, yielding the original hash value. Simultaneously, the received information is hashed using the same hash function. If the two hash values ​​match, the verification is successful, indicating the information has not been tampered with, is complete, and indeed originates from the claimed sender. The business verification result data can include both successful and failed verification results. The business processing method described in this application can improve the security of content interacting between the client and server.

[0064] Figure 3 This is a schematic diagram of the main flow of a business processing method according to an embodiment of this application. The business processing method of this embodiment protects client content security through a multi-technology stack including client-side native code, client-side JS code, WebAssembly technology, web page code, and server-side code. It protects client content security through a complete process. In this embodiment, Electron: Electron is a framework for building cross-platform desktop applications using JavaScript, HTML, and CSS. Electron is compatible with Mac, Windows, and Linux, and can build applications for all three platforms. WebAssembly: WebAssembly is a technology that allows code to be written in non-JavaScript programming languages ​​and run in a browser. This code can be C, C++, or Rust, etc., and is compiled into the browser, running on the CPU at near-native speed. This code is in binary form and can be used directly as modules in JavaScript.

[0065] like Figure 3 As shown in Figures ① and ②, the Electron App development phase related to business processing is as follows.

[0066] ① Disable browser and Node.js debugging at the application layer to prevent the possibility of obtaining source code through debugging tools.

[0067] ② Encode the cross-platform desktop application framework (Electron JS) into bytecode; package and generate an ASAR archive file; develop a file encryption program to encrypt the archive file and generate a CSAR file (Cloud ServiceArchive); modify the Electron native code, add CSAR file decryption code, delete debugging tool-related dependencies, and repackage and generate the executable file.

[0068] The operational phases are shown in ③-⑩.

[0069] ③ Once the program starts, the Electron native code decrypts and loads the CSAR file in the executable file, entering the Electron JS execution phase.

[0070] ④ Electron JS creates window components, which load and display web pages.

[0071] ⑤ Before calling the business interface, the web page communicates with the server to obtain the server's unique identifier (one identifier each time, and the server controls to prevent replay).

[0072] ⑥ The web page calls the Electron JS (cross-platform desktop application framework) method, passing in the server's unique identifier to obtain a signature.

[0073] ⑦ Electron JS performs the first encryption on the server's unique identifier and calls the WebAssembly (virtual instruction set architecture) method to pass the first encrypted identifier, i.e., to pass the encrypted identifier.

[0074] ⑧The WebAssembly method performs a second encryption on the first encrypted identifier (i.e., the encrypted identifier), generates an initial signature, and returns it to Electron JS.

[0075] ⑨ Electron JS processes the initial signature to generate the final signature and returns it to the web page.

[0076] ⑩ The web page carries the server's unique identifier obtained in step ⑤ and this initial signature to call the business method. The server verifies the unique identifier and the initial signature, and returns a result upon successful verification. The client-server communication uses various techniques to sign messages, making it difficult to crack.

[0077] This application's embodiments protect client security through a combination of technologies. Cracking only a single technology stack is insufficient to compromise the client; all technologies must be cracked for successful cracking, making it significantly more difficult. The entire process is autonomous and controllable, allowing for customized encryption and decryption logic. By protecting the communication between the client and server, even if the client is unpacked, it is difficult to crack and use the client by modifying its logic, thus enhancing client security.

[0078] Figure 4 This is a schematic diagram of the main units of a service processing apparatus according to an embodiment of this application. Figure 4 As shown, the business processing device 400 includes an acquisition unit 401, a page loading unit 402, an encryption unit 403, a data processing unit 404, and a business verification unit 405.

[0079] The acquisition unit 401 is configured to acquire the corresponding executable file in response to program startup, and then acquire the file decryption code and encrypted file from the executable file.

[0080] Page loading unit 402 is configured to decrypt an encrypted file using file decryption code to obtain a decrypted file, triggering the execution of a cross-platform desktop application framework to create a window component, which then loads and displays the web page.

[0081] Encryption unit 403 is configured to obtain the server's unique identifier through a web page, and then call the business interface to generate an initial signature based on the server's unique identifier through secondary encryption.

[0082] The data processing unit 404 is configured to process the initial signature using a cross-platform desktop application framework to generate a final signature and return the final signature to a web page.

[0083] The business verification unit 405 is configured to execute the business verification method and return the business verification result data based on the server's unique identifier and final signature carried on the web page.

[0084] In some embodiments, the encryption unit 403 is further configured to: invoke a cross-platform desktop application framework to perform a first encryption of the server's unique identifier to generate an encrypted identifier; and invoke a virtual instruction set architecture method to perform a second encryption of the encrypted identifier to generate an initial signature.

[0085] In some embodiments, the data processing unit 404 is further configured to: determine the format of the initial signature, and adjust the format of the initial signature to the preset format in response to the inconsistency between the format and the preset format, so as to generate the final signature.

[0086] In some embodiments, the business verification unit 405 is further configured to: perform source authenticity verification based on the server's unique identifier; and perform information integrity verification based on the final signature.

[0087] In some embodiments, the service verification unit 405 is further configured to: if the source authenticity verification fails or the information integrity verification fails, the service verification result data corresponds to service verification failure; if the source authenticity verification succeeds and the information integrity verification succeeds, the service verification result data corresponds to service verification success.

[0088] In some embodiments, the business processing apparatus further includes Figure 4 The prompting unit (not shown) is configured to: retrieve the count record corresponding to the server's unique identifier; if the count record is empty, execute the business interface call process; if the count record is not empty, prompt a duplicate message.

[0089] It should be noted that the business processing method and business processing device in this application are related in terms of specific implementation content, so repeated content will not be described again.

[0090] Figure 5 An exemplary system architecture 500 is shown that can be applied to the business processing method or business processing apparatus of the embodiments of this application.

[0091] like Figure 5 As shown, system architecture 500 may include terminal devices 501, 502, and 503, a network 504, and a server 505. Network 504 serves as the medium for providing communication links between terminal devices 501, 502, and 503 and server 505. Network 504 may include various connection types, such as wired or wireless communication links, or fiber optic cables, etc.

[0092] Users can use terminal devices 501, 502, and 503 to interact with server 505 via network 504 to receive or send messages, etc. Various communication client applications can be installed on terminal devices 501, 502, and 503, such as shopping applications, web browser applications, search applications, instant messaging tools, email clients, social media platform software, etc. (for example only).

[0093] Terminal devices 501, 502, and 503 can be various electronic devices with business processing screens and support web browsing, including but not limited to smartphones, tablets, laptops, and desktop computers.

[0094] Server 505 can be a server providing various services, such as a background management server supporting programs launched by users using terminal devices 501, 502, and 503 (for example only). The background management server can respond to program startup by obtaining the corresponding executable file, then retrieving file decryption code and an encrypted file from the executable file; using the file decryption code to decrypt the encrypted file to obtain the decrypted file, triggering the execution of a cross-platform desktop application framework to create a window component, which loads and displays a webpage; obtaining the server's unique identifier through the webpage, then calling the business interface to generate an initial signature based on the server's unique identifier through secondary encryption; the cross-platform desktop application framework processes the initial signature to generate a final signature, which is then returned to the webpage; based on the server's unique identifier and the final signature carried on the webpage, the business verification method is executed and the business verification result data is returned. This improves the security of content interacting between the client and the server.

[0095] It should be noted that the business processing method provided in this application embodiment is generally executed by server 505, and correspondingly, the business processing device is generally set in server 505.

[0096] It should be understood that Figure 5 The number of terminal devices, networks, and servers shown is merely illustrative. Depending on implementation needs, any number of terminal devices, networks, and servers can be included.

[0097] The following is for reference. Figure 6 It shows a schematic diagram of the structure of a computer system 600 suitable for implementing a terminal device according to the embodiments of this application. Figure 6 The terminal device shown is merely an example and should not impose any limitations on the functionality and scope of use of the embodiments of this application.

[0098] like Figure 6 As shown, the computer system 600 includes a central processing unit (CPU) 601, which can perform various appropriate actions and processes based on programs stored in read-only memory (ROM) 602 or programs loaded from storage section 608 into random access memory (RAM) 603. The RAM 603 also stores various programs and data required for the operation of the computer system 600. The CPU 601, ROM 602, and RAM 603 are interconnected via a bus 604. An input / output (I / O) interface 605 is also connected to the bus 604.

[0099] The following components are connected to I / O interface 605: an input section 606 including a keyboard, mouse, etc.; an output section 607 including a cathode ray tube (CRT), liquid crystal display (LCD), etc., and speakers, etc.; a storage section 608 including a hard disk, etc.; and a communication section 609 including a network interface card such as a LAN card, modem, etc. The communication section 609 performs communication processing via a network such as the Internet. A drive 610 is also connected to I / O interface 605 as needed. A removable medium 611, such as a disk, optical disk, magneto-optical disk, semiconductor memory, etc., is installed on drive 610 as needed so that computer programs read from it can be installed into storage section 608 as needed.

[0100] Specifically, according to the embodiments disclosed in this application, the processes described above with reference to the flowcharts can be implemented as computer software programs. For example, embodiments disclosed in this application include a computer program product comprising a computer program carried on a computer-readable medium, the computer program containing program code for performing the methods shown in the flowcharts. In such embodiments, the computer program can be downloaded and installed from a network via communication section 609, and / or installed from removable medium 611. When the computer program is executed by central processing unit (CPU) 601, it performs the functions defined above in the system of this application.

[0101] It should be noted that the computer-readable medium shown in this application can be a computer-readable signal medium or a computer-readable storage medium, or any combination of the two. Computer-readable storage media can be, for example, an electrical, magnetic, optical, electromagnetic, infrared, or semiconductor system, apparatus, or device, or any combination thereof. More specific examples of computer-readable storage media may include, but are not limited to: electrical connections having one or more wires, portable computer disks, hard disks, random access memory (RAM), read-only memory (ROM), erasable programmable read-only memory (EPROM or flash memory), optical fiber, portable compact disk read-only memory (CD-ROM), optical storage devices, magnetic storage devices, or any suitable combination thereof. In this application, a computer-readable storage medium can be any tangible medium containing or storing a program that can be used by or in conjunction with an instruction execution system, apparatus, or device. In this application, a computer-readable signal medium can include a data signal propagated in baseband or as part of a carrier wave, carrying computer-readable program code. Such propagated data signals can take various forms, including but not limited to electromagnetic signals, optical signals, or any suitable combination thereof. Computer-readable signal media can also be any computer-readable medium other than computer-readable storage media, which can send, propagate, or transmit a program for use by or in connection with an instruction execution system, apparatus, or device. The program code contained on the computer-readable medium can be transmitted using any suitable medium, including but not limited to: wireless, wire, optical fiber, RF, etc., or any suitable combination thereof.

[0102] The flowcharts and block diagrams in the accompanying drawings illustrate the architecture, functionality, and operation of possible implementations of systems, methods, and computer program products according to various embodiments of this application. In this regard, each block in a flowchart or block diagram may represent a module, segment, or portion of code containing one or more executable instructions for implementing a specified logical function. It should also be noted that in some alternative implementations, the functions indicated in the blocks may occur in a different order than those indicated in the drawings. For example, two consecutively indicated blocks may actually be executed substantially in parallel, and they may sometimes be executed in reverse order, depending on the functions involved. It should also be noted that each block in a block diagram or flowchart, and combinations of blocks in a block diagram or flowchart, may be implemented using a dedicated hardware-based system that performs the specified function or operation, or using a combination of dedicated hardware and computer instructions.

[0103] The units described in the embodiments of this application can be implemented in software or hardware. The described units can also be housed in a processor; for example, a processor may be described as including an acquisition unit, a page loading unit, an encryption unit, a data processing unit, and a business verification unit. The names of these units do not necessarily limit the specific unit itself.

[0104] In another aspect, this application also provides a computer-readable medium, which may be included in the device described in the above embodiments; or it may exist independently and not assembled into the device. The computer-readable medium carries one or more programs. When one or more programs are executed by the device, the device, in response to program startup, obtains the corresponding executable file, and then obtains file decryption code and an encrypted file from the executable file; decrypts the encrypted file using the file decryption code to obtain the decrypted file, triggers the execution of a cross-platform desktop application framework to create a window component, which loads and displays a webpage; obtains the server's unique identifier through the webpage, and then calls the business interface to generate an initial signature based on the server's unique identifier after secondary encryption; the cross-platform desktop application framework processes the initial signature to generate a final signature and returns the final signature to the webpage; based on the server's unique identifier and the final signature carried on the webpage, a business verification method is executed and business verification result data is returned.

[0105] The computer program product of this application includes a computer program that, when executed by a processor, implements the business processing method in the embodiments of this application.

[0106] The technical solution according to the embodiments of this application can improve the security of the content interacting between the client and the server.

[0107] The specific embodiments described above do not constitute a limitation on the scope of protection of this application. Those skilled in the art should understand that various modifications, combinations, sub-combinations, and substitutions can occur depending on design requirements and other factors. Any modifications, equivalent substitutions, and improvements made within the spirit and principles of this application should be included within the scope of protection of this application.

Claims

1. A business processing method, characterized in that, include: In response to program startup, the corresponding executable file is obtained, and then the file decryption code and encrypted file are obtained from the executable file; The encrypted file is decrypted using the file decryption code to obtain the decrypted file, which triggers the execution of a cross-platform desktop application framework to create a window component, which then loads and displays a webpage. The server's unique identifier is obtained through the webpage, and then the business interface is called to generate an initial signature based on the server's unique identifier through secondary encryption. The cross-platform desktop application framework processes the initial signature to generate a final signature, and returns the final signature to the webpage. Based on the server's unique identifier and the final signature carried on the webpage, the business verification method is executed and the business verification result data is returned.

2. The method according to claim 1, characterized in that, The process of generating an initial signature based on the server's unique identifier through secondary encryption includes: The cross-platform desktop application framework is invoked to encrypt the server's unique identifier for the first time, in order to generate an encrypted identifier; The encrypted identifier is encrypted a second time by invoking the virtual instruction set architecture method to generate an initial signature.

3. The method according to claim 1, characterized in that, The process of processing the initial signature by the cross-platform desktop application framework to generate the final signature includes: The format of the initial signature is determined, and in response to the inconsistency between the format and the preset format, the format of the initial signature is adjusted to the preset format to generate the final signature.

4. The method according to claim 1, characterized in that, The execution business verification method includes: Based on the server's unique identifier, perform a source authenticity verification. Based on the final signature, perform information integrity verification.

5. The method according to claim 4, characterized in that, The method further includes: If the source authenticity verification fails or the information integrity verification fails, the business verification result data corresponds to the business verification failure. If the source authenticity verification is successful and the information integrity verification is successful, then the business verification result data corresponds to a successful business verification.

6. The method according to claim 1, characterized in that, After obtaining the server's unique identifier through the webpage, the method further includes: Obtain the count record corresponding to the unique identifier of the server. If the count record is empty, execute the business interface call process. If the count record is not empty, prompt a duplicate message.

7. A business processing apparatus, characterized in that, include: The acquisition unit is configured to acquire the corresponding executable file in response to program startup, and then acquire the file decryption code and encrypted file from the executable file; The page loading unit is configured to decrypt the encrypted file using the file decryption code to obtain the decrypted file, trigger the execution of the cross-platform desktop application framework to create a window component, which loads and displays the web page. The encryption unit is configured to obtain the server's unique identifier through the webpage, and then call the business interface to generate an initial signature based on the server's unique identifier through secondary encryption. The data processing unit is configured to process the initial signature using the cross-platform desktop application framework to generate a final signature and return the final signature to the webpage. The business verification unit is configured to execute a business verification method and return business verification result data based on the server's unique identifier and the final signature carried on the webpage.

8. The apparatus according to claim 7, characterized in that, The encryption unit is further configured to: The cross-platform desktop application framework is invoked to encrypt the server's unique identifier for the first time, in order to generate an encrypted identifier; The encrypted identifier is encrypted a second time by invoking the virtual instruction set architecture method to generate an initial signature.

9. The apparatus according to claim 7, characterized in that, The data processing unit is further configured to: The format of the initial signature is determined, and in response to the inconsistency between the format and the preset format, the format of the initial signature is adjusted to the preset format to generate the final signature.

10. The apparatus according to claim 7, characterized in that, The service verification unit is further configured to: Based on the server's unique identifier, perform a source authenticity verification. Based on the final signature, perform information integrity verification.

11. The apparatus according to claim 10, characterized in that, The service verification unit is further configured to: If the source authenticity verification fails or the information integrity verification fails, the business verification result data corresponds to the business verification failure. If the source authenticity verification is successful and the information integrity verification is successful, then the business verification result data corresponds to a successful business verification.

12. The apparatus according to claim 7, characterized in that, The device also includes a prompting unit configured to: Obtain the count record corresponding to the unique identifier of the server. If the count record is empty, execute the business interface call process. If the count record is not empty, prompt a duplicate message.

13. A business processing electronic device, characterized in that, include: One or more processors; Storage device for storing one or more programs. When the one or more programs are executed by the one or more processors, the one or more processors implement the method as described in any one of claims 1-6.

14. A computer-readable medium having a computer program stored thereon, characterized in that, When the program is executed by the processor, it implements the method as described in any one of claims 1-6.

15. A computer program product, comprising a computer program, characterized in that, When the computer program is executed by a processor, it implements the method as described in any one of claims 1-6.

Images