Access method and system, electronic equipment and storage medium
By encrypting access information in links and verifying consistency, the method prevents tampering, ensuring secure access to target content.
Patent Information
- Application Number
- CN202411136972.3
- Authority / Receiving Office
- CN · China
- Patent Type
- Applications(China)
- Current Assignee / Owner
- Filing Date
- 2024-08-16
- Publication Date
- 2024-12-10
AI Technical Summary
There is a risk of tampering with access links during transmission from a server to a client, compromising the security of the target content displayed upon link access.
Encrypt access information in links using an encryption processing method, combine the encrypted information with the link to create a ciphertext, store this encrypted link on a server, and verify the consistency of access and ciphertext information upon client request to ensure secure access.
Ensures secure access by preventing tampering of access information and target content, thereby enhancing client access security.
Smart Images
Figure CN119109628A_ABST
Abstract
Description
Technical Field
[0001] Multiple embodiments of this specification relate to the field of information technology, and specifically to an access method and system, an electronic device, and a storage medium. Background Art
[0002] A link is a connection relationship pointing to a target content. The target content can be another web page or a different location on the same web page. When a user clicks a link, the target content will be displayed on the client. However, there is a risk of tampering with the link during the process of being sent from the server to the client. Therefore, when the client clicks the link to jump to the target content, the displayed target content is also at risk of being tampered with.
[0003] Therefore, there is an urgent need for a method that can improve the security of client link access. Summary of the invention
[0004] The embodiments of this specification provide an access method and system, an electronic device, and a storage medium, and the technical solutions thereof are as follows:
[0005] In a first aspect, an embodiment of the present specification provides an access method, which is applied to a server, including:
[0006] Obtaining a first link including access information and obtaining a first encryption processing method;
[0007] Encrypting the access information in the first link based on the first encryption processing method to obtain first ciphertext information, and combining the first ciphertext information with the first link to obtain a second link;
[0008] storing the second link in a database, and sending the second link to the client;
[0009] In response to the first link access request from the client, when the access information and ciphertext information in the link stored in the database are consistent with the access information and ciphertext information in the link in the first link access request, the access request from the client is approved.
[0010] In a second aspect, an embodiment of the present specification provides an access system, which is applied to a server, including:
[0011] A first acquisition module, acquiring a first link including access information and acquiring a first encryption processing method;
[0012] A second acquisition module encrypts the access information in the first link based on the first encryption processing method to obtain first ciphertext information, and combines the first ciphertext information with the first link to obtain a second link;
[0013] A storage and delivery module, storing the second link in a database, and delivering the second link to a client;
[0014] The response module responds to the first link access request of the client, and when the access information and ciphertext information in the link stored in the database are consistent with the access information and ciphertext information in the link in the first link access request, the access request of the client is approved.
[0015] In a third aspect, an embodiment of this specification provides an electronic device, comprising a processor and a memory; the processor is connected to the memory; the memory is used to store executable program code; the processor runs a program corresponding to the executable program code by reading the executable program code stored in the memory, so as to execute the steps described in the first aspect of the above embodiment.
[0016] In a fourth aspect, an embodiment of this specification provides a computer storage medium, wherein the computer storage medium stores a plurality of instructions, wherein the instructions are suitable for being loaded by a processor and executing the steps described in the first aspect of the above embodiment.
[0017] The beneficial effects brought by the technical solutions provided by some embodiments of this specification include at least:
[0018] The access information in the first link is encrypted to obtain ciphertext information, and the ciphertext information is combined with the original link to obtain a second link. The second link is stored on the server and then sent to the client. After the client clicks on the link, the server can respond to the client's link access request and determine whether the access information and ciphertext information in the link stored by the server are consistent with the access information and ciphertext information in the link access request. The client's access request is approved only when they are consistent. That is, the ciphertext information corresponding to the access information is generated and combined to obtain a link. When responding to the client's link access request, the access information and ciphertext information in the link access request are verified at the same time. The client's access is allowed only after all verifications are passed, thereby avoiding tampering of the access information in the link, and then avoiding tampering of the target content presented by the client, thereby improving the client's access security. BRIEF DESCRIPTION OF THE DRAWINGS
[0019] In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative work.
[0020] Figure 1 It is a schematic diagram of the architecture of an access method implementation process provided in an embodiment of this specification.
[0021] Figure 2 It is a flowchart of an access method provided in an embodiment of this specification.
[0022] Figure 3 It is a schematic diagram of an application scenario of an access method provided in an embodiment of this specification.
[0023] Figure 4 This is another application scenario diagram of an access method provided in an embodiment of this specification.
[0024] Figure 5 It is a structural diagram of an access system provided in an embodiment of this specification.
[0025] Figure 6 It is a structural schematic diagram of an electronic device provided in an embodiment of this specification. DETAILED DESCRIPTION
[0026] The technical solutions in the embodiments of this specification will be described clearly and completely below in conjunction with the drawings in the embodiments of this specification.
[0027] The terms "first", "second", "third", etc. in the description and claims of this specification and the above-mentioned drawings are used to distinguish different objects, rather than to describe a specific order. In addition, the terms "including" and "having" and any variations thereof are intended to cover non-exclusive inclusions. For example, a process, method, system, product or device that includes a series of steps or units is not limited to the listed steps or units, but optionally includes steps or units that are not listed, or optionally includes other steps or units inherent to these processes, methods, products or devices.
[0028] The following description provides examples and does not limit the scope, applicability or examples set forth in the claims. Changes may be made to the functions and arrangements of the elements described without departing from the scope of the present specification. Various processes or components may be appropriately omitted, substituted or added to each example. For example, the described method may be performed in an order different from the order described, and various steps may be added, omitted or combined. In addition, features described with respect to some examples may be combined in other examples.
[0029] Reference Figure 1 The figure is a schematic diagram of the environment architecture for implementing the access method provided in one or more embodiments of the present specification.
[0030] The access method provided in one or more embodiments of the present specification may be applicable to an implementation environment in which an access link for accessing target content is issued to a client user, wherein the target content may be, but is not limited to, a payment page, a product details page, etc., wherein the payment page may include, but is not limited to, payment amount content, payment object ID content, etc., and the product details page may include, but is not limited to, product appearance picture content, product price content, product sales content, etc.
[0031] The implementation environment architecture of the method at least includes a client 101 and a server 102 . In addition, the implementation environment architecture may also include a client 103 .
[0032] Among them, client 101 and client 103 can be mobile phones, personal computers, tablet computers, e-book readers, devices for information interaction based on VR (Virtual Reality) technology, vehicle-mounted terminals, IoT (Internet of Things) devices, wearable smart devices, laptops and desktop computers, etc.
[0033] The server 102 may be a server, a server cluster consisting of several servers, or one or more cloud servers in a cloud computing platform. The server 102 may be understood as a background server of an application.
[0034] The following is an explanation of the implementation process of the access method provided in the embodiment of this specification based on the above payment scenario and product recommendation scenario:
[0035] Product recommendation scenario: The server 102 can, but is not limited to, generate a corresponding first product details page link based on the user's historical product browsing information and / or purchase information. The server 102 encrypts the access information (such as the item number information) in the first product details page link and obtains the first ciphertext information. The server 102 combines the first ciphertext information with the first product details page link to obtain the second product details page link. The second product details page link is stored in the local database and then sent to the client 101 and / or client 103. The user of client 101 and / or the user of client 103 clicks on the link presented by their client, and server 102 responds to the first link access request of client 101 and / or client 103, and when the access information and ciphertext information in the link stored in the database are consistent with the access information and ciphertext information of the link in the first link access request, the server approves the access request of the client (Note: approving the access request of the client may mean allowing the client to render the product details page corresponding to the link, or allowing the client user to perform subsequent operations on the product details page corresponding to the link, such as browsing, purchasing, collecting, etc.).
[0036] Payment scenario: The user of client 101 initiates a payment for the user of client 103 on the corresponding application of his client. The server 102 generates a corresponding first payment link based on the payment information initiated by client 101. The server 102 encrypts the access information (such as payment amount information, payment object ID information) in the first payment link and obtains the first ciphertext information. The server 102 combines the first ciphertext information with the first payment link to obtain the second payment link. The second payment link is stored in the local database and sent to client 103. The user of client 103 clicks on the link presented by his client. At this time, the server 102 responds to the first link access request of client 103, and when the access information and ciphertext information in the link stored in the database are consistent with the access information and ciphertext information of the link in the first link access request, the client's access request is approved (Note: Approving the client's access request can be allowing the client to render the payment page corresponding to the link, or allowing the client user to perform subsequent payment operations on the payment page corresponding to the link).
[0037] In the above implementation process, the server 102 generates ciphertext information corresponding to the access information and combines them to obtain a link. When responding to the link access request of the client, the access information and ciphertext information of the link in the link access request are verified at the same time. The client is allowed to access only after all the verifications are passed, thereby avoiding the tampering of the access information in the link, and then avoiding the tampering of the target content presented by the client, thereby improving the client access security. For example, in the payment scenario, it can avoid the user's payment amount or payment object error, and in the product recommendation scenario, it can avoid the presentation error of the recommended product.
[0038] Reference Figure 2 As shown, Figure 2 A flowchart of an access method provided in an embodiment of this specification is applied to the server 102 and may include at least the following steps:
[0039] Step 202: obtaining a first link including access information and obtaining a first encryption processing method;
[0040] Step 204: encrypt the access information in the first link based on the first encryption processing method to obtain first ciphertext information, and combine the first ciphertext information with the first link to obtain a second link;
[0041] Step 206: store the second link in a database, and send the second link to the client;
[0042] Step 208: In response to the first link access request from the client, when the access information and ciphertext information in the link stored in the database are consistent with the access information and ciphertext information in the link in the first link access request, the access request from the client is approved.
[0043] In some application scenarios, it is necessary to generate an access link and send it to the client so that the client user can access it and perform subsequent operations. Figure 3 In the payment scenario shown, an access link for the client user to make a payment needs to be generated and sent to the client for the user to click and access and make a payment. The access link may include, but is not limited to, access information such as the payment amount and the payment object ID number. The client will also render the page based on the access information in the access link for the user to perform subsequent operations. However, the link may be tampered with during the process of being sent, for example, Figure 3 The access information "amount=10.00", "userid=20885678" in the access link shown in the figure is tampered with into "amount=20.00", "userid=20885689". If no verification mechanism is added at this time, the client user cannot make a correct payment after clicking the access link.
[0044] Therefore, in this embodiment, when the server sends the access link to the client, it first encrypts the access information in the first link to obtain the first ciphertext information, and combines the first ciphertext information with the first link to obtain the second link. After further storing the second link, the second link is sent to the client. After the client user clicks the client display link, the server can respond to the client's link access request, and determine whether the access information and ciphertext information in the link stored by the server are consistent with the access information and ciphertext information in the link access request, and only agree to the client's access request when they are consistent. That is, the ciphertext information corresponding to the access information is generated, and the link is obtained by combining. When responding to the client's link access request, the access information and ciphertext information of the link in the link access request are verified at the same time. The client's access is allowed only after all the verifications are passed, thereby avoiding the tampering of the access information in the link, and then avoiding the tampering of the target content presented by the client, thereby improving the client's access security. Among them, blocking the client's access can be, but not limited to, directly blocking the client's target content rendering, and can also be blocking the client's subsequent operations after completing the target content rendering.
[0045] It should be noted that the consistency between the link stored in the database and the link in the link access request may be determined in, but is not limited to, the following two scenarios:
[0046] Scenario 1: Determine the consistency of all links stored in the database with the link in the link access request, that is, do not perform a corresponding consistency evaluation on the links. Therefore, there may be access information in the previously stored links in the database that is consistent with the access information after tampering. In this case, if only the consistency of the access information is considered, and the consistency of the ciphertext information is not considered, incorrect access may still occur. After adding the ciphertext information consistency judgment, it is difficult for the tampering party to tamper with the ciphertext information corresponding to the original access information in the access link into ciphertext information that is consistent with the tampered access information. Therefore, verifying the consistency of the access information and the consistency of the ciphertext information at the same time can greatly improve the access security of client users in this scenario.
[0047] Scenario 2: Determine the consistency of the link in the link access request and the link stored in the database that has a corresponding relationship with the link in the link access request, that is, perform a consistency evaluation on the link. In this case, the tampering party can tamper with the access information of the client link and the corresponding link in the database at the same time to achieve the purpose of access information consistency (Note: because the location of the access information is easier to identify), and the tampering party is likely to miss the corresponding tampering operation because it fails to identify the ciphertext information part of the link (Note: because in this scenario, the tampering party needs to tamper with the server information in order to successfully tamper with the access information, so the tampering party can actually know the link details stored by the server, but because the ciphertext information is not easy to identify, the tampering party can easily miss the tampering operation on it). Therefore, verifying the consistency of access information and ciphertext information at the same time can also greatly improve the access security of client users in this scenario.
[0048] It should be noted that in the above scenario 1, the tampering party may also miss the possibility of tampering with the ciphertext information.
[0049] In summary, by verifying the consistency of access information and ciphertext information at the same time, on the one hand, the tampering party is likely to miss the corresponding tampering operation on the ciphertext information, and on the other hand, it is also difficult for the tampering party to crack the correct tampering method for the ciphertext information, thereby improving the access security of client users.
[0050] Figure 3 In the link shown, "amount=10.00" and "userid=20885678" are access information, while "token=ASGDYGDHIIYUEW" is ciphertext information.
[0051] It should also be noted that Figure 3 The SMS interface shown in is only an illustrative application scenario, and the access link may also be presented in other applications of the client.
[0052] In one embodiment of the present specification, before responding to the first link access request from the client, the method further includes:
[0053] Obtaining the acquisition timestamp of the link stored in the database;
[0054] The responding to the first link access request from the client and approving the access request from the client when the access information and ciphertext information in the link stored in the database are consistent with the access information and ciphertext information in the link in the first link access request includes:
[0055] In response to the first link access request from the client, a request timestamp of the first link access request is obtained, and when the access information and ciphertext information in the link stored in the database are consistent with the access information and ciphertext information of the link in the first link access request, and the acquisition timestamp of the stored link and the request timestamp of the first link access request meet preset conditions, the access request of the client is approved.
[0056] It is understandable that the access link has a certain time limit. After the corresponding time limit has expired, even if the consistency of the access information and the ciphertext information is recognized, the client user is not allowed to access normally. This method can firstly avoid repeated access by users, and secondly avoid providing time for the tampering party to crack the correct tampering method.
[0057] The preset condition can be, but is not limited to, set to a time difference between the acquisition timestamp of the storage link and the request timestamp of the link access request that does not exceed a preset time length, and the preset time length can be, but is not limited to, set to 30 seconds, 1 minute, 3 minutes, etc., and can be specifically set according to actual conditions or needs.
[0058] In one embodiment of the present specification, when the access information and ciphertext information in the link stored in the database are consistent with the access information and ciphertext information in the link in the first link access request, and the acquisition timestamp of the stored link and the request timestamp of the first link access request do not meet a preset condition, the method further includes:
[0059] Step 210: Obtain a second encryption processing method, and encrypt the access information in the first link based on the second encryption processing method to obtain second ciphertext information, and combine the second ciphertext information with the first link to obtain a third link;
[0060] Step 212: store the third link in a database, and send the third link to the client;
[0061] Step 214, in response to the second link access request from the client, obtain the request timestamp of the second link access request, and when the access information and ciphertext information in the link stored in the database are consistent with the access information and ciphertext information of the link in the second link access request, and when the acquisition timestamp of the stored link and the request timestamp of the second link access request meet the preset conditions, approve the access request from the client.
[0062] In one embodiment of the present specification, when the access information and ciphertext information in the link stored in the database are consistent with the access information and ciphertext information of the link in the link access request, but the acquisition timestamp of the stored link and the request timestamp of the link access request do not meet the preset conditions, a new encryption processing method, i.e., the second encryption processing method, is obtained, and the access information in the first link is re-encrypted based on the new encryption processing method to obtain the second ciphertext information, and the second ciphertext information is combined with the first link to obtain a third link, and the third link is used as the access link and re-sent to the client for user access.
[0063] It is understandable that when the acquisition timestamp of the storage link and the request timestamp of the link access request do not meet the preset conditions, for example, the time difference between the acquisition timestamp of the storage link and the request timestamp of the link access request exceeds the preset time length, it is possible that the tampering party has cracked the correct ciphertext generation method within a certain period of time and completed the tampering of the link. Therefore, in this embodiment, a new encryption method is obtained and the access information is re-encrypted, which not only improves the access security, but also the re-issuing method also guarantees the normal access of the client user to a large extent.
[0064] Please refer to Figure 4 As shown, Figure 4 The request timestamp of the first transfer access link does not meet the preset conditions, so a new transfer access link encrypted with a new encryption method is reissued. The ciphertext information "token=BQSSHUSDASDDFAIUOSHDUIIJNDFH" in the new transfer access link is different from the ciphertext information "token=ASGDYGDHIIYUEW" in the first transfer access link.
[0065] In one embodiment of the present specification, before obtaining the second encryption processing method, the method further includes:
[0066] Preset multiple encryption processing methods with different security levels;
[0067] The obtaining of the second encryption processing method includes:
[0068] Step 2102: Obtain a time difference between an acquisition timestamp of the storage link and a request timestamp of the second link access request;
[0069] Step 2104: Based on the time difference, a second encryption processing method is selected from a plurality of preset encryption processing methods with different security levels.
[0070] It can be understood that the greater the time difference between the acquisition timestamp of the storage link and the request timestamp of the link access request, the greater the risk of tampering. Therefore, in the access method provided in this embodiment, based on the time difference, the new encryption processing method is selected from a plurality of preset encryption processing methods with different security levels. Specifically, it can be set that the greater the time difference, the higher the security level of the selected encryption processing method.
[0071] In one embodiment of the present specification, in order to speed up the sending speed of the third link, when the access information and ciphertext information in the link stored in the database are consistent with the access information and ciphertext information of the link in the first link access request, and the acquisition timestamp of the stored link and the request timestamp of the first link access request do not meet the preset conditions, the method may also include:
[0072] Performing information adjustment on the first ciphertext information to obtain adjusted ciphertext information, and combining the adjusted ciphertext information with the first link to obtain a third link;
[0073] Storing the third link in a database, and sending the third link to a client;
[0074] In response to the client's second link access request, a request timestamp of the second link access request is obtained, and when the access information and ciphertext information in the link stored in the database are consistent with the access information and ciphertext information of the link in the second link access request, and the acquisition timestamp of the stored link and the request timestamp of the second link access request meet preset conditions, the client's access request is approved.
[0075] Similarly, before adjusting the first ciphertext information to obtain the adjusted ciphertext information, the process further includes:
[0076] Preset multiple information adjustment methods with different security levels;
[0077] The step of adjusting the first ciphertext information to obtain adjusted ciphertext information includes:
[0078] Obtaining a time difference between an acquisition timestamp of the storage link and a request timestamp of the second link access request;
[0079] Based on the time difference, a corresponding information adjustment method is selected from a plurality of preset information adjustment methods of different security levels;
[0080] The first ciphertext information is adjusted based on the selected information adjustment method to obtain adjusted ciphertext information.
[0081] It can be understood that the greater the time difference between the acquisition timestamp of the storage link and the request timestamp of the link access request, the greater the risk of tampering. Therefore, in the access method provided in this embodiment, based on the time difference, a corresponding information adjustment method is selected from a plurality of preset information adjustment methods with different security levels. Specifically, it can be set that the greater the time difference, the higher the security level of the selected information adjustment method.
[0082] The information adjustment method may be, but is not limited to, a sequence adjustment operation of ciphertext information, a data hiding operation, a data supplementation operation, etc.
[0083] In one embodiment of the present specification, the encrypting the access information in the first link based on the first encryption processing mode to obtain the first ciphertext information includes:
[0084] Step 2042: adjusting the access information in the first link to obtain adjustment information;
[0085] Step 2044: encrypt the adjustment information based on the first encryption processing method to obtain first ciphertext information.
[0086] It is understandable that in order to increase the difficulty of cracking the ciphertext information, before encrypting the access information, the access information is adjusted. The adjustment operation may be but is not limited to an access information sequence adjustment operation, a data hiding operation, a data supplement operation, etc.
[0087] In one embodiment of the present specification, the access information in the first link includes a plurality of access sub-information;
[0088] The step of adjusting the access information in the first link to obtain adjustment information includes:
[0089] Step 20422: perform separate information adjustment on the multiple access sub-information respectively to obtain multiple adjustment sub-information;
[0090] Step 20424: perform overall information adjustment on multiple adjustment sub-information to obtain adjustment information.
[0091] It can be understood that when there are multiple access sub-information in the access information (Note: the above-mentioned payment amount information and payment object id information can be considered as one access sub-information, and the payment amount information and payment object id information as a whole can be considered as access information), in order to further increase the difficulty of cracking the ciphertext information, the adjustment operation can first be adjusted for each access sub-information, and then all adjustment sub-information can be adjusted as a whole. The adjustment operation can still be but not limited to sequential adjustment operations, data hiding operations, data supplement operations, etc.
[0092] In one embodiment of the present specification, the encrypting the adjustment information based on the first encryption processing mode to obtain the first ciphertext information includes:
[0093] Part of the adjustment information is encrypted based on the first encryption processing method to obtain first ciphertext information.
[0094] It is understandable that in order to improve the storage and delivery efficiency, the access link should not be too long and the encryption process needs to be as fast as possible, so in this embodiment, only part of the adjustment information is encrypted to obtain the first ciphertext information. From another perspective, only part of the information is encrypted, which can also increase the difficulty of cracking the ciphertext information, because it is difficult for the tampering party to know which part of the information is encrypted.
[0095] The partial information may be, but is not limited to, encrypting only the header information of the adjustment information, encrypting only the middle information of the adjustment information, encrypting only the tail information of the adjustment information, or encrypting selected partial information at the header, middle, and tail of the adjustment information. The specific setting can be made according to actual conditions and needs.
[0096] In one embodiment of the present specification, obtaining the first encryption processing method includes:
[0097] Step 20442: Obtain information type and / or information volume of access information in the first link;
[0098] Step 20444: Obtain a first encryption processing method based on the information type and / or information volume of the access information in the first link.
[0099] It is understandable that there are many types of access information in the link, such as the payment amount information and recommended product information mentioned above, and different types of access information have different requirements for access security. Therefore, different encryption processing methods can be used for different types of access information. For example, for access information involving fund transfer such as payment amount, a higher security level encryption method can be used.
[0100] It can also be understood that the greater the amount of access information in the link, generally speaking, the greater the risk of tampering. Therefore, in this embodiment, the greater the amount of access information, the more encryption methods with higher security levels can be used.
[0101] The above is a description of a specific embodiment of the specification. Other embodiments are within the scope of the appended claims. In some cases, the actions or steps recorded in the claims can be performed in an order different from that in the embodiments and still achieve the desired results. In addition, the processes depicted in the drawings do not necessarily require the specific order or continuous order shown to achieve the desired results. In some embodiments, multitasking and parallel processing are also possible or may be advantageous.
[0102] See next Figure 5 , Figure 5 A schematic diagram of the structure of an access system provided in an embodiment of this specification is shown.
[0103] The access system is applied to the server 102, such as Figure 5 As shown, the access system may include at least:
[0104] A first acquisition module 501, acquiring a first link including access information and acquiring a first encryption processing method;
[0105] The second acquisition module 502 encrypts the access information in the first link based on the first encryption processing method to obtain first ciphertext information, and combines the first ciphertext information with the first link to obtain a second link;
[0106] A storage and delivery module 503 stores the second link in a database and delivers the second link to a client;
[0107] The response module 504 responds to the first link access request from the client, and when the access information and ciphertext information in the link stored in the database are consistent with the access information and ciphertext information in the link in the first link access request, the access request of the client is approved.
[0108] In this embodiment, ciphertext information corresponding to the access information is generated and combined to obtain a link. When responding to a link access request from a client, the access information and ciphertext information of the link in the link access request are verified at the same time. The client is allowed to access only after all verifications are passed, thereby preventing the access information in the link from being tampered with, and further preventing the target content presented by the client from being tampered with, thereby improving the security of client access.
[0109] In one embodiment of the present specification, the access system further includes a third acquisition module 505;
[0110] The third acquisition module 505 acquires an acquisition timestamp of the link stored in the database;
[0111] The response module 504, in response to the first link access request from the client, obtains the request timestamp of the first link access request, and approves the access request from the client when the access information and ciphertext information in the link stored in the database are consistent with the access information and ciphertext information of the link in the first link access request, and when the acquisition timestamp of the stored link and the request timestamp of the first link access request meet the preset conditions.
[0112] In one embodiment of the present specification, a fourth acquisition module 506 is further included;
[0113] The fourth acquisition module 506 acquires the second encryption processing mode when the access information and ciphertext information in the link stored in the database are consistent with the access information and ciphertext information in the link in the first link access request, and the acquisition timestamp of the stored link and the request timestamp of the first link access request do not meet a preset condition;
[0114] The second acquisition module 502 further encrypts the access information in the first link based on the second encryption processing method to obtain second ciphertext information, and combines the second ciphertext information with the first link to obtain a third link;
[0115] The storage and delivery module 503 further stores the third link in a database, and delivers the third link to the client;
[0116] The response module 504 also responds to the second link access request of the client, obtains the request timestamp of the second link access request, and approves the access request of the client when the access information and ciphertext information in the link stored in the database are consistent with the access information and ciphertext information of the link in the second link access request, and the acquisition timestamp of the stored link and the request timestamp of the second link access request meet the preset conditions.
[0117] In one embodiment of the present specification, a preset module 507 is also included;
[0118] The preset module 507 presets a plurality of encryption processing methods with different security levels;
[0119] The fourth acquisition module 506 acquires the time difference between the acquisition timestamp of the storage link and the request timestamp of the second link access request, and selects a second encryption processing method from among a plurality of preset encryption processing methods with different security levels based on the time difference.
[0120] In one embodiment of the present specification, the second acquisition module 502 includes an adjustment unit 5021 and an encryption unit 5022;
[0121] The adjusting unit 5021 adjusts the access information in the first link to obtain adjustment information;
[0122] The encryption unit 5022 encrypts the adjustment information based on the first encryption processing method to obtain first ciphertext information.
[0123] In one embodiment of the present specification, the access information in the first link acquired by the first acquisition module 501 includes a plurality of access sub-information;
[0124] The adjustment unit 5021 includes a first adjustment subunit 50211 and a second adjustment subunit 50212;
[0125] The first adjustment sub-unit 50211 performs separate information adjustment on the multiple access sub-information respectively to obtain multiple adjustment sub-information;
[0126] The second adjustment subunit 50212 performs overall information adjustment on the multiple adjustment sub-information to obtain adjustment information.
[0127] In one embodiment of the present specification, the encryption unit 5022 encrypts part of the adjustment information based on a first encryption processing method to obtain first ciphertext information.
[0128] In one embodiment of the present specification, the access system further includes a fifth acquisition module 508;
[0129] The fifth acquisition module 508 acquires the information type and / or information volume of the access information in the first link;
[0130] The second acquisition module 502 acquires a first encryption processing method based on the information type and / or information volume of the access information in the first link.
[0131] Each embodiment in this specification is described in a progressive manner, and the same or similar parts between the embodiments can be referred to each other, and each embodiment focuses on the differences from other embodiments. In particular, for the access system embodiment, since it is basically similar to the access method embodiment, the description is relatively simple, and the relevant parts can be referred to the partial description of the access method embodiment.
[0132] See also Figure 6 A schematic diagram of the structure of an electronic device provided in an embodiment of this specification is shown.
[0133] like Figure 6As shown, the electronic device 600 may include: at least one processor 601 , at least one network interface 604 , a user interface 603 , a memory 605 , and at least one communication bus 602 .
[0134] The communication bus 602 may be used to realize the connection and communication among the above-mentioned components.
[0135] The user interface 603 may include buttons, and the optional user interface may also include a standard wired interface or a wireless interface.
[0136] The network interface 604 may include, but is not limited to, a Bluetooth module, an NFC module, a Wi-Fi module, etc.
[0137] Among them, the processor 601 may include one or more processing cores. The processor 601 uses various interfaces and lines to connect the various parts of the entire electronic device 600, and executes various functions and processes data of the electronic device 600 by running or executing instructions, programs, code sets or instruction sets stored in the memory 605, and calling data stored in the memory 605. Optionally, the processor 601 can be implemented in at least one hardware form of DSP, FPGA, and PLA. The processor 601 can integrate one or a combination of CPU, GPU, modem, etc. Among them, the CPU mainly processes the operating system, user interface, and application programs; the GPU is responsible for rendering and drawing the content to be displayed on the display screen; the modem is used to handle wireless communications. It can be understood that the above-mentioned modem may not be integrated into the processor 601, and it can be implemented separately through a chip.
[0138] Among them, the memory 605 may include RAM or ROM. Optionally, the memory 605 includes a non-transient computer-readable medium. The memory 605 can be used to store instructions, programs, codes, code sets or instruction sets. The memory 605 may include a program storage area and a data storage area, wherein the program storage area may store instructions for implementing an operating system, instructions for at least one function (such as a touch function, a sound playback function, an image playback function, etc.), instructions for implementing the above-mentioned various method embodiments, etc.; the data storage area may store data involved in the above various method embodiments, etc. The memory 605 may also be at least one storage device located away from the aforementioned processor 601. The memory 605 as a computer storage medium may include an operating system, a network communication module, a user interface module, and an access application. The processor 601 can be used to call the access application stored in the memory 605 and execute the steps of the access method mentioned in the aforementioned embodiment.
[0139] The embodiments of this specification also provide a computer-readable storage medium, which stores instructions, and when the instructions are executed on a computer or a processor, the computer or the processor executes one or more steps in the above-mentioned access method embodiment. If the component modules of the above-mentioned electronic device are implemented in the form of software functional units and sold or used as independent products, they can be stored in the computer-readable storage medium.
[0140] In the above embodiments, it can be implemented in whole or in part by software, hardware, firmware or any combination thereof. When implemented using software, it can be implemented in whole or in part in the form of a computer program product. The computer program product includes one or more computer instructions. When the computer program instructions are loaded and executed on a computer, the process or function described in the embodiment of this specification is generated in whole or in part. The computer can be a general-purpose computer, a special-purpose computer, a computer network, or other programmable device. The computer instructions can be stored in a computer-readable storage medium or transmitted through the computer-readable storage medium. The computer instructions can be transmitted from a website site, computer, server or data center to another website site, computer, server or data center by wired (e.g., coaxial cable, optical fiber, digital subscriber line (Digital Subscriber Line, DSL)) or wireless (e.g., infrared, wireless, microwave, etc.) mode. The computer-readable storage medium can be any available medium that a computer can access or a data storage device such as a server, data center, etc. that contains one or more available media integrated. The available medium may be a magnetic medium (eg, a floppy disk, a hard disk, a magnetic tape), an optical medium (eg, a digital versatile disc (DVD)), or a semiconductor medium (eg, a solid state disk (SSD)).
[0141] Those skilled in the art can understand that all or part of the processes in the above-mentioned embodiments can be implemented by instructing the relevant hardware through a computer program, and the program can be stored in a computer-readable storage medium. When the program is executed, it can include the processes of the embodiments of the above-mentioned methods. The aforementioned storage medium includes: ROM, RAM, magnetic disk or optical disk and other media that can store program codes. In the absence of conflict, the technical features in this embodiment and the implementation scheme can be combined arbitrarily.
[0142] The embodiments described above are merely preferred embodiments of this specification and are not intended to limit the scope of this specification. Without departing from the design spirit of this specification, various modifications and improvements made to the technical solutions of this specification by ordinary technicians in this field should fall within the scope of protection determined by the claims of this specification.
Claims
1. An access method, applied to a server, comprising: Obtaining a first link including access information and obtaining a first encryption processing method; Encrypting the access information in the first link based on the first encryption processing method to obtain first ciphertext information, and combining the first ciphertext information with the first link to obtain a second link; storing the second link in a database, and sending the second link to the client; In response to the first link access request from the client, when the access information and ciphertext information in the link stored in the database are consistent with the access information and ciphertext information in the link in the first link access request, the access request from the client is approved.
2. The access method according to claim 1, before responding to the first link access request from the client, further comprising: Obtaining the acquisition timestamp of the link stored in the database; The responding to the first link access request from the client and approving the access request from the client when the access information and ciphertext information in the link stored in the database are consistent with the access information and ciphertext information in the link in the first link access request includes: In response to the first link access request from the client, a request timestamp of the first link access request is obtained, and when the access information and ciphertext information in the link stored in the database are consistent with the access information and ciphertext information of the link in the first link access request, and the acquisition timestamp of the stored link and the request timestamp of the first link access request meet preset conditions, the access request of the client is approved.
3. An access method according to claim 2, wherein: When the access information and ciphertext information in the link stored in the database are consistent with the access information and ciphertext information in the link in the first link access request, and the acquisition timestamp of the stored link and the request timestamp of the first link access request do not meet the preset condition, the method further includes: Obtain a second encryption processing method, and encrypt the access information in the first link based on the second encryption processing method to obtain second ciphertext information, and combine the second ciphertext information with the first link to obtain a third link; Storing the third link in a database, and sending the third link to a client; In response to the client's second link access request, a request timestamp of the second link access request is obtained, and when the access information and ciphertext information in the link stored in the database are consistent with the access information and ciphertext information of the link in the second link access request, and the acquisition timestamp of the stored link and the request timestamp of the second link access request meet preset conditions, the client's access request is approved.
4. The access method according to claim 3, before obtaining the second encryption processing mode, further comprising: Preset multiple encryption processing methods with different security levels; The obtaining of the second encryption processing method includes: Obtaining a time difference between an acquisition timestamp of the storage link and a request timestamp of the second link access request; Based on the time difference, a second encryption processing method is selected from a plurality of preset encryption processing methods with different security levels.
5. According to the access method of claim 1, the encrypting the access information in the first link based on the first encryption processing mode to obtain the first ciphertext information comprises: Performing information adjustment on the access information in the first link to obtain adjustment information; The adjustment information is encrypted based on a first encryption processing method to obtain first ciphertext information.
6. An access method according to claim 5, wherein the access information in the first link includes a plurality of access sub-information; The step of adjusting the access information in the first link to obtain adjustment information includes: Performing separate information adjustments on the multiple access sub-information respectively to obtain multiple adjustment sub-information; An overall information adjustment is performed on a plurality of adjustment sub-information to obtain adjustment information.
7. An access method according to claim 5 or 6, wherein the step of encrypting the adjustment information based on the first encryption processing mode to obtain the first ciphertext information comprises: Part of the adjustment information is encrypted based on the first encryption processing method to obtain first ciphertext information.
8. According to the access method of claim 1, the obtaining of the first encryption processing mode comprises: Obtaining information type and / or information volume of access information in the first link; A first encryption processing method is obtained based on the information type and / or information volume of the access information in the first link.
9. An access system, applied to a server, comprising: A first acquisition module, acquiring a first link including access information and acquiring a first encryption processing method; A second acquisition module encrypts the access information in the first link based on the first encryption processing method to obtain first ciphertext information, and combines the first ciphertext information with the first link to obtain a second link; A storage and delivery module, storing the second link in a database, and delivering the second link to a client; The response module responds to the first link access request of the client, and when the access information and ciphertext information in the link stored in the database are consistent with the access information and ciphertext information in the link in the first link access request, the access request of the client is approved.
10. An access system according to claim 9, further comprising a third acquisition module; The third acquisition module acquires an acquisition timestamp of the link stored in the database; The response module, in response to the first link access request of the client, obtains the request timestamp of the first link access request, and approves the access request of the client when the access information and ciphertext information in the link stored in the database are consistent with the access information and ciphertext information of the link in the first link access request, and the acquisition timestamp of the stored link and the request timestamp of the first link access request meet the preset conditions.
11. An access system according to claim 10, further comprising a fourth acquisition module; The fourth acquisition module acquires the second encryption processing mode when the access information and ciphertext information in the link stored in the database are consistent with the access information and ciphertext information in the link in the first link access request, and the acquisition timestamp of the stored link and the request timestamp of the first link access request do not meet a preset condition; The second acquisition module further encrypts the access information in the first link based on a second encryption processing method to obtain second ciphertext information, and combines the second ciphertext information with the first link to obtain a third link; The storage and delivery module further stores the third link in a database, and delivers the third link to the client; The response module also responds to the client's second link access request, obtains the request timestamp of the second link access request, and approves the client's access request when the access information and ciphertext information in the link stored in the database are consistent with the access information and ciphertext information of the link in the second link access request, and the acquisition timestamp of the stored link and the request timestamp of the second link access request meet preset conditions.
12. An access system according to claim 11, further comprising a preset module; The preset module presets multiple encryption processing methods with different security levels; The fourth acquisition module obtains the time difference between the acquisition timestamp of the storage link and the request timestamp of the second link access request, and based on the time difference, selects a second encryption processing method from a plurality of preset encryption processing methods with different security levels.
13. An access system according to claim 9, wherein the second acquisition module comprises an adjustment unit and an encryption unit; The adjustment unit adjusts the access information in the first link to obtain adjustment information; The encryption unit encrypts the adjustment information based on a first encryption processing method to obtain first ciphertext information.
14. An access system according to claim 13, wherein the access information in the first link acquired by the first acquisition module comprises a plurality of access sub-information; The adjustment unit includes a first adjustment subunit and a second adjustment subunit; The first adjustment sub-unit performs separate information adjustment on the plurality of access sub-information respectively to obtain a plurality of adjustment sub-information; The second adjustment subunit performs overall information adjustment on the plurality of adjustment sub-information to obtain adjustment information.
15. An access system according to claim 14, wherein the encryption unit encrypts part of the adjustment information based on a first encryption processing method to obtain first ciphertext information.
16. An access system according to claim 9, further comprising a fifth acquisition module; The fifth acquisition module acquires the information type and / or information volume of the access information in the first link; The second acquisition module acquires the first encryption processing method based on the information type and / or information volume of the access information in the first link.
17. An electronic device comprising a processor and a memory; The processor is connected to the memory; The memory is used to store executable program code; The processor runs a program corresponding to the executable program code by reading the executable program code stored in the memory, so as to execute the method according to any one of claims 1 to 8.
18. A computer-readable storage medium having a computer program stored thereon, characterized in that: When the computer program is executed by a processor, the method according to any one of claims 1 to 8 is implemented.