Method and device for downloading applet and storage medium

Abstract

The invention discloses a method and device for downloading an applet and a storage medium, relates to the field of communication, and can improve the security of downloading the applet. The method comprises the following steps that: a service management server sends first request information to a service server and requests a certificate management server to issue a certificate of a preset applet under the condition of determining that the preset applet is safe in a scene of a new communication service call; the service management server receives an applet package of the preset applet sent by the service server and a certificate of the preset applet sent by the certificate management server; the service management server sends an applet package of the preset applet and a certificate of the preset applet to a new communication control plane network element NCP; the certificate of the preset applet is used for verifying the security of the applet package of the preset applet. The embodiment of the invention is applied to the process of downloading the applet.

Description

Technical Field

[0001] The present application relates to the field of communications, and in particular to a method, device and storage medium for downloading a mini-program. Background Art

[0002] The new communication services of the fifth generation mobile communication technology (5G) are characterized by high definition, visuality and interactivity. 5G new communications can use the data channels of the voice call (VoLTE) / Voice over New Radio (VoNR) basic network based on Long Term Evolution (LTE) to achieve high definition, video interaction and immersive native video calls, thus improving the user experience.

[0003] In the related art, under the new call system, the terminal device can download the mini-program from the third-party service server through the data channel. However, the current public network environment changes rapidly and contains a large number of illegal mini-programs. The terminal device may download illegal mini-programs from a complex network environment, which seriously affects the security of the terminal device downloading the mini-program. Therefore, how to improve the security of downloading mini-programs during the call of the terminal device is a technical problem that still needs to be solved. Summary of the invention

[0004] The present application provides a method, device and storage medium for downloading a mini-program, which are used to improve the security of mini-program downloading.

[0005] In order to achieve the above purpose, this application adopts the following technical solutions:

[0006] In the first aspect, the present application provides a method for downloading a mini-program, which is applied to the scenario of a new communication service call, and the method includes: when determining that the preset mini-program is safe, the service management server sends a first request information to the service server, and requests the certificate management server to issue the certificate of the preset mini-program; the first request information is used to request the download of the mini-program package of the preset mini-program, and the service server stores the mini-program package of the preset mini-program; the service management server receives the mini-program package of the preset mini-program sent by the service server and the certificate of the preset mini-program sent by the certificate management server; the service management server sends the mini-program package of the preset mini-program and the certificate of the preset mini-program to the new communication control plane network element NCP; the certificate of the preset mini-program is used to verify the security of the mini-program package of the preset mini-program.

[0007] In one possible implementation, a second request message is received from the NCP; the second request message is used to request downloading of a preset applet; a service server is determined based on identification information and application rules of the preset applet in the second request message; the application rules include identification information of at least one applet and a service server corresponding to the identification information of at least one applet.

[0008] In one possible implementation, the first key corresponding to the preset mini-program is determined based on the identification information and application rules of the preset mini-program in the second request information; the application rules also include a key corresponding to the identification information of at least one mini-program; the first key is added to the first request information; the first key is used to verify the validity of the first request information.

[0009] In one possible implementation, the initial packet loss rate and initial delay of the preset applet are determined based on the identification information and application rules of the preset applet in the second request information; the application rules include the identification information of at least one applet, and the initial packet loss rate and initial delay corresponding to the identification information of at least one applet; when it is determined that the preset applet is safe, the first request information and the negotiation request information are sent to the business server, and the certificate management server is requested to issue a certificate for the preset applet; the negotiation request information includes the initial packet loss rate and initial delay of the preset applet; the negotiation request information is used to negotiate the packet loss rate and delay of the preset applet.

[0010] In one possible implementation, a mini-program package of a preset mini-program sent from a business server, negotiation response information, and a certificate of the preset mini-program sent from a certificate management server are received; the negotiation response information includes a negotiated packet loss rate of the preset mini-program and a negotiated delay of the preset mini-program; the negotiated packet loss rate of the preset mini-program is negotiated between the business management server and the business server based on the initial packet loss rate of the preset mini-program; the negotiated delay of the preset mini-program is negotiated between the business management server and the business server based on the initial delay of the preset mini-program.

[0011] In a possible implementation, the profile information of the preset applet is sent to the new communication unified media plane network element UMF through NCP; the profile information includes: the negotiated packet loss rate of the preset applet and the negotiated delay of the preset applet; the profile information is used to determine the communication service quality level of the preset applet.

[0012] In a possible implementation, the certificate of the preset applet includes identification information and validity information of the preset applet.

[0013] In the second aspect, the present application provides a device for downloading mini-programs, including: a processing unit and a processing unit: the processing unit is used to send a first request information to a business server and request a certificate management server to issue a certificate of the preset mini-program when determining that the preset mini-program is safe; the first request information is used to request the download of a mini-program package of the preset mini-program, and the business server stores the mini-program package of the preset mini-program; the communication unit is also used to receive the mini-program package of the preset mini-program sent from the business server and the certificate of the preset mini-program sent from the certificate management server; the communication unit is also used to send the mini-program package of the preset mini-program and the certificate of the preset mini-program to the NCP; the certificate of the preset mini-program is used to verify the security of the mini-program package of the preset mini-program.

[0014] In one possible implementation, the communication unit is also used to receive a second request information from the NCP; the second request information is used to request downloading of a preset applet; the processing unit is also used to determine the business server based on the identification information and application rules of the preset applet in the second request information; the application rules include the identification information of at least one applet and the business server corresponding to the identification information of at least one applet.

[0015] In one possible implementation, the processing unit is also used to determine the first key corresponding to the preset mini-program based on the identification information and application rules of the preset mini-program in the second request information; the application rules also include a key corresponding to the identification information of at least one mini-program; the processing unit is also used to add the first key to the first request information; the first key is used to verify the validity of the first request information.

[0016] In one possible implementation, the processing unit is also used to determine the initial packet loss rate and initial delay of the preset applet based on the identification information and application rules of the preset applet in the second request information; the application rules include the identification information of at least one applet, and the initial packet loss rate and initial delay corresponding to the identification information of at least one applet; the processing unit is also used to send the first request information and the negotiation request information to the business server when determining that the preset applet is safe, and request the certificate management server to issue the certificate of the preset applet; the negotiation request information includes the initial packet loss rate and initial delay of the preset applet; the negotiation request information is used to negotiate the packet loss rate and delay of the preset applet.

[0017] In one possible implementation, the communication unit is also used to receive a mini-program package of a preset mini-program sent from a business server, a negotiation response information, and a certificate of a preset mini-program sent from a certificate management server; the negotiation response information includes a negotiated packet loss rate of the preset mini-program and a negotiated delay of the preset mini-program; the negotiated packet loss rate of the preset mini-program is negotiated between the business management server and the business server based on the initial packet loss rate of the preset mini-program; the negotiated delay of the preset mini-program is negotiated between the business management server and the business server based on the initial delay of the preset mini-program.

[0018] In a possible implementation, the communication unit is further used to send profile information of a preset applet to the UMF through the NCP; the profile information includes: a negotiated packet loss rate of the preset applet and a negotiated delay of the preset applet; the profile information is used to determine the communication service quality level of the preset applet.

[0019] In a possible implementation, the certificate of the preset applet includes identification information and validity information of the preset applet.

[0020] In the third aspect, an embodiment of the present application provides a device for downloading a mini-program, the device for downloading a mini-program comprising: a processor and a memory; wherein the memory is used to store computer execution instructions, and when the device for downloading a mini-program is running, the processor executes the computer execution instructions stored in the memory, so that the device for downloading a mini-program executes the method for downloading a mini-program as described in the first aspect and any possible implementation method of the first aspect.

[0021] In a fourth aspect, an embodiment of the present application provides a computer-readable storage medium, in which instructions are stored. When the instructions in the computer-readable storage medium are executed by a processor of a device for downloading a mini-program, the device for downloading a mini-program is enabled to execute the method for downloading a mini-program as described in the first aspect and any possible implementation of the first aspect.

[0022] In the fifth aspect, an embodiment of the present application provides a chip, the chip including a processor and a communication interface, the communication interface and the processor are coupled, and the processor is used to run a computer program or instructions to implement the method of downloading a mini-program described in the above-mentioned first aspect and any possible implementation method of the first aspect.

[0023] In a sixth aspect, a computer program product comprising instructions is provided, which, when executed on a computer, enables the computer to execute the method for downloading a mini-program described in the first aspect and any possible implementation of the first aspect.

[0024] In the present disclosure, the name of the device for downloading the applet does not limit the device or functional module itself. In actual implementation, these devices or functional modules may appear with other names. As long as the functions of each device or functional module are similar to those of the present disclosure, they fall within the scope of the claims of the present disclosure and their equivalent technologies.

[0025] These and other aspects of the present application will become more apparent from the following description.

[0026] The above scheme brings at least the following beneficial effects: In the present application, since the service management server requests the service server to download the applet package of the preset applet when determining that the preset applet is safe, and requests the certificate of the preset applet from the certificate management server. Therefore, the certificate of the preset applet received by the service management server can characterize the security of the applet package of the preset applet. In this way, when the service management server sends the applet package of the preset applet and the certificate of the preset applet to the NCP, the NCP can determine whether the applet package of the preset applet is safe based on the certificate of the preset applet, and choose whether to send the applet package of the preset applet to the terminal device based on the security of the applet package of the preset applet, thereby improving the security of the terminal device downloading the applet during the call. BRIEF DESCRIPTION OF THE DRAWINGS

[0027] In order to more clearly illustrate the technical solutions in the embodiments of the present application, the drawings required for use in the description of the embodiments will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present application. For ordinary technicians in this field, other drawings can be obtained based on these drawings without creative work.

[0028] Figure 1 A schematic diagram of the structure of a system for downloading mini-programs provided in an embodiment of the present application;

[0029] Figure 2 A schematic diagram of the structure of a device for downloading a small program provided in an embodiment of the present application;

[0030] Figure 3 A flowchart of a method for downloading a mini-program provided in an embodiment of the present application;

[0031] Figure 4 A flowchart of a method for downloading a mini-program provided in an embodiment of the present application;

[0032] Figure 5 A flowchart of a method for downloading a mini-program provided in an embodiment of the present application;

[0033] Figure 6 A flowchart of a method for downloading a mini-program provided in an embodiment of the present application;

[0034] Figure 7 A flowchart of a method for downloading a mini-program provided in an embodiment of the present application;

[0035] Figure 8 A flowchart of a method for downloading a mini-program provided in an embodiment of the present application;

[0036] Fig. 9 A schematic diagram of a new 5G communication architecture provided for an embodiment of the present application;

[0037] Fig.10 A flowchart of a method for downloading a mini-program provided in an embodiment of the present application;

[0038] Fig.11 A schematic diagram of the structure of another device for downloading mini-programs provided in an embodiment of the present application. DETAILED DESCRIPTION

[0039] The term "and / or" in this article is merely a description of the association relationship of associated objects, indicating that three relationships may exist. For example, A and / or B can mean: A exists alone, A and B exist at the same time, and B exists alone.

[0040] The terms "first" and "second" and the like in the specification and drawings of this application are used to distinguish different objects, or to distinguish different processing of the same object, rather than to describe a specific order of objects.

[0041] In addition, the terms "including" and "having" and any variations thereof mentioned in the description of the present application are intended to cover non-exclusive inclusions. For example, a process, method, system, product or device that includes a series of steps or units is not limited to the listed steps or units, but may optionally include other steps or units that are not listed, or may optionally include other steps or units that are inherent to these processes, methods, products or devices.

[0042] It should be noted that, in the embodiments of the present application, words such as "exemplary" or "for example" are used to indicate examples, illustrations or descriptions. Any embodiment or design described as "exemplary" or "for example" in the embodiments of the present application should not be interpreted as being more preferred or more advantageous than other embodiments or designs. Specifically, the use of words such as "exemplary" or "for example" is intended to present related concepts in a specific way.

[0043] In the description of the present application, unless otherwise specified, “plurality” means two or more.

[0044] The following is an explanation of the terms used in this application.

[0045] 1. New communications services

[0046] 5G new communication services, also known as 5G real-time communication services, refer to service innovation based on the operator's IP Multimedia Subsystem (IMS) network, which enables individuals to have an immersive experience and enterprises to have an improved user experience. The new communication service adds a data channel (IMS DATA CHANNEL) based on the IMS audio and video channels to achieve interactive information for users during calls, upgrade the user's call experience, and provide an immersive service experience. The new communication services currently being developed and piloted by major operators include caller name cards, simultaneous interpretation and other services, which enrich the call experience and increase the fun of calls.

[0047] The above is an explanation of the terms in this application.

[0048] 5G new communication services are characterized by high definition, visuality, and interactivity. 5G new communication can use the data channel of the VoLTE / VoNR basic network to achieve high-definition, video interaction, and immersive native video calls, improving user experience.

[0049] In the related art, under the new call system, the terminal device can download the mini-program from the third-party service server through the data channel. However, the current public network environment changes rapidly and contains a large number of illegal mini-programs. The terminal device may download illegal mini-programs from a complex network environment, which seriously affects the security of the terminal device downloading the mini-program. Therefore, how to improve the security of downloading mini-programs during the call of the terminal device is a technical problem that still needs to be solved.

[0050] In order to solve the technical problems existing in the related art, in this application, when the service management server determines that the preset applet is safe, it requests the service server to download the applet package of the preset applet, and requests the certificate of the preset applet from the certificate management server. Therefore, the certificate of the preset applet received by the service management server can represent the security of the applet package of the preset applet. In this way, when the service management server sends the applet package of the preset applet and the certificate of the preset applet to the NCP, the NCP can determine whether the applet package of the preset applet is safe based on the certificate of the preset applet, and based on the security of the applet package of the preset applet, choose whether to send the applet package of the preset applet to the terminal device, thereby improving the security of the terminal device downloading the applet during the call.

[0051] Below, combined with the attached Figure 1 A system 10 for downloading a small program provided in an embodiment of the present application is described in detail. Figure 1As shown, the system 10 for downloading small programs includes: a business management server 11, a business server 12, a certificate management server 13 and an NCP 14.

[0052] Among them, the business management server 11 is configured to: send a first request information to the business server, and request the certificate management server to issue a certificate of a preset applet; the first request information is used to request the download of a mini-program package of a preset applet, and the business server stores the mini-program package of the preset applet; receive the mini-program package of the preset applet sent by the business server and the certificate of the preset applet sent by the certificate management server; send the mini-program package of the preset applet and the certificate of the preset applet to the new communication control plane network element NCP; the certificate of the preset applet is used to verify the security of the mini-program package of the preset applet.

[0053] The service server 12 is configured to: receive the first request information sent by the service management server 11, and send a small program package of a preset small program to the service management server 11.

[0054] The certificate management server 13 is configured to send the certificate of the preset applet to the service management server 11 .

[0055] NCP 14 is configured to: receive a small program package of a preset small program and a certificate of the preset small program sent by the service management server 11, and receive request information of a terminal device for downloading the small program package of the preset small program.

[0056] It should be noted that the terminal device is a device with wireless communication function, which can be deployed on land, including indoors or outdoors, handheld or vehicle-mounted. It can also be deployed on the water surface (such as ships, etc.). It can also be deployed in the air (such as airplanes, balloons and satellites, etc.). The terminal device is also called a mobile station (MS), a mobile terminal (MT) and a terminal, etc., which is a device that provides voice and / or data connectivity to users. For example, the terminal device 12 includes a handheld device with wireless connection function, a vehicle-mounted device, etc. At present, the terminal device 12 can be: a mobile phone, a tablet computer, a laptop computer, a PDA, a mobile internet device (MID), a wearable device (such as a smart watch, a smart bracelet, a pedometer, etc.), an in-vehicle device (such as a car, a bicycle, an electric car, an airplane, a ship, a train, a high-speed train, etc.), a virtual reality (VR) device, an augmented reality (AR) device, a wireless terminal in industrial control, a smart home device (such as a refrigerator, a TV, an air conditioner, an electric meter, etc.), an intelligent robot, a workshop device, a wireless terminal in self-driving, a wireless terminal in remote medical surgery, a wireless terminal in a smart grid, a wireless terminal in transportation safety, a wireless terminal in a smart city, or a wireless terminal in a smart home, a flying device (such as an intelligent robot, a hot air balloon, a drone, an airplane), etc. In a possible application scenario of the present application, the terminal device is a terminal device that often works on the ground, such as an in-vehicle device. In this application, for the sake of convenience, chips deployed in the above-mentioned devices, such as system-on-a-chip (SOC), baseband chips, etc., or other chips with communication functions may also be referred to as terminal devices.

[0057] Optionally, the terminal device may be an embedded communication device or a user's handheld communication device, including a mobile phone, a tablet computer, etc.

[0058] As an example, in an embodiment of the present application, the terminal device may also be a wearable device. Wearable devices may also be referred to as wearable smart devices, which are a general term for wearable devices that are intelligently designed and developed using wearable technology for daily wear, such as glasses, gloves, watches, clothing, and shoes. A wearable device is a portable device that is worn directly on the body or integrated into the user's clothes or accessories. Wearable devices are not just hardware devices, but also achieve powerful functions through software support, data interaction, and cloud interaction. Broadly speaking, wearable smart devices include full-featured, large-sized, and fully or partially independent of smartphones, such as smart watches or smart glasses, as well as devices that only focus on a certain type of application function and need to be used in conjunction with other devices such as smartphones, such as various types of smart bracelets and smart jewelry for vital sign monitoring.

[0059] The embodiment provides a device for downloading a small program, which is applied to execute the system for downloading a small program provided in the embodiment of the present application. Figure 2 A schematic diagram of a device for downloading a small program provided in an embodiment of the present application. Figure 2 As shown, the device 200 for downloading a small program includes at least one processor 201, a communication line 202, and at least one communication interface 204, and may also include a memory 203. The processor 201, the memory 203 and the communication interface 204 may be connected via the communication line 202.

[0060] The processor 201 may be a central processing unit (CPU), an application specific integrated circuit (ASIC), or one or more integrated circuits configured to implement the embodiments of the present application, such as one or more digital signal processors (DSP), or one or more field programmable gate arrays (FPGA).

[0061] The communication link 202 may include a path for transmitting information between the above-mentioned components.

[0062] The communication interface 204 is used to communicate with other devices or communication networks, and can use any transceiver-like device, such as Ethernet, radio access network (RAN), WLAN, etc.

[0063] The memory 203 may be a read-only memory (ROM) or other types of static storage devices that can store static information and instructions, a random access memory (RAM) or other types of dynamic storage devices that can store information and instructions, or an electrically erasable programmable read-only memory (EEPROM), a compact disc read-only memory (CD-ROM) or other optical disc storage, an optical disc storage (including compressed optical discs, laser discs, optical discs, digital versatile discs, Blu-ray discs, etc.), a magnetic disk storage medium or other magnetic storage device, or any other medium that can be used to include or store desired program code in the form of instructions or data structures and can be accessed by a computer, but is not limited to these.

[0064] In one possible design, the memory 203 can exist independently of the processor 201, that is, the memory 203 can be a memory outside the processor 201. In this case, the memory 203 can be connected to the processor 201 through the communication line 202, and is used to store execution instructions or application code, and the execution is controlled by the processor 201 to implement the method for downloading small programs provided in the following embodiments of this application. In another possible design, the memory 203 can also be integrated with the processor 201, that is, the memory 203 can be the internal memory of the processor 201. For example, the memory 203 is a high-speed cache that can be used to temporarily store some data and instruction information.

[0065] As an implementation method, the processor 201 may include one or more CPUs, for example Figure 2 As another possible implementation, the device 200 for downloading the applet may include multiple processors, such as Figure 2 As another possible implementation, the apparatus 200 for downloading a small program may further include an output device 205 and an input device 206.

[0066] Below, combined with the attached Figure 3 The method for downloading the mini-program provided in the embodiment of the present application is described in detail. Figure 3 As shown, the method for downloading the applet includes:

[0067] S301. When determining that the preset applet is safe, the business management server sends a first request message to the business server and requests the certificate management server to issue a certificate for the preset applet.

[0068] The first request information is used to request downloading of a small program package of a preset small program, and the business server stores the small program package of the preset small program.

[0069] In one possible implementation, the business management server responds to the mini-program package download request, and when it determines that the preset mini-program is safe, sends a first request message to the business server through the application data channel (ADC); the business management server sends a request message to the certificate management server through the ADC, and the request message is used to request the issuance of the certificate of the preset mini-program.

[0070] It should be explained that the ADC can be established between the calling terminal device and the called terminal device, or between the calling terminal device and the IMS network, and is used to transmit application data of the data channel application between the two ends of the devices.

[0071] It is understandable that the service management server can analyze the information of the mini-program package to be downloaded in the mini-program package download request to determine whether the preset mini-program is safe.

[0072] S302: The service management server receives a mini-program package of a preset mini-program sent by a service server and a certificate of the preset mini-program sent by a certificate management server.

[0073] The certificate of the preset applet includes identification information and validity information of the preset applet.

[0074] Optionally, the valid information includes time information or resolution times information.

[0075] It should be explained that every time the device obtains the content of the certificate of the preset applet, the certificate of the preset applet will record the number of times the certificate is parsed. When the number of times the certificate is parsed is greater than the first threshold, the certificate may be illegally stolen by others, and the certificate of the preset applet is considered invalid. The certificate of the preset applet records the valid use period of the certificate. If the current time is not in the valid use period of the certificate, the certificate of the preset applet is considered invalid.

[0076] S303: The service management server sends a mini-program package of a preset mini-program and a certificate of the preset mini-program to the NCP.

[0077] Among them, the certificate of the preset applet is used to verify the security of the applet package of the preset applet.

[0078] In a possible implementation, when the applet package download request is a data channel (DC) call request, the service management server sends the applet package of the preset applet and the certificate of the preset applet to the new communication control plane network element (NCP).

[0079] It should be explained that after the NCP receives the certificate of the preset applet, it can determine that the applet package of the preset applet is safe. In this way, the NCP can directly send the applet package of the preset applet to the terminal device and / or store the applet package of the preset applet in the application list. In this way, the terminal device can directly download the applet of the preset applet from the application list according to its own needs.

[0080] Optionally, the download application list includes the name of at least one mini program and a mini program package of at least one mini program.

[0081] The above scheme brings at least the following beneficial effects: In the embodiment of the present application, in the present application, since the service management server requests the service server to download the applet package of the preset applet when determining that the preset applet is safe, and requests the certificate of the preset applet from the certificate management server. Therefore, the certificate of the preset applet received by the service management server can characterize the security of the applet package of the preset applet. In this way, when the service management server sends the applet package of the preset applet and the certificate of the preset applet to the NCP, the NCP can determine whether the applet package of the preset applet is safe based on the certificate of the preset applet, and based on the security of the applet package of the preset applet, choose whether to send the applet package of the preset applet to the terminal device, thereby improving the security of the terminal device downloading the applet during the call.

[0082] In one possible implementation, combining Figure 3 ,like Figure 4 As shown, in the above S301, before the service management server sends the first request information to the service server and requests the certificate management server to issue the certificate of the preset applet, the service management server determines the service server. The process of the service management server determining the service server can be specifically implemented through the following S401-S402.

[0083] S401: The service management server receives second request information from the NCP.

[0084] The second request information is used to request downloading of a preset applet.

[0085] It should be explained that the calling terminal device establishes a voice call with the called terminal device and establishes a bootstrap data channel (BDC); the calling terminal device downloads the application list through the BDC, and the calling terminal device can download the applet from the NCP based on the identification information of the applet in the application list. When the identification information of the preset applet does not exist in the application list, the NCP makes a second request to the service management server.

[0086] It should be noted that BDC is a data channel established between the terminal device and the IMS network.

[0087] Optionally, the second request information includes the identification information of the preset applet and the "a=content" field and the 3gpp-qos-hint field. The 3gpp-qos-hint field has two automatic voice processing (AVP): loss and latency, where loss is the initial packet loss rate of the applet and latency is the initial delay of the applet. The 3gpp-qos-hint field is also used to indicate the establishment of an ADC between the calling terminal device and the called terminal device.

[0088] It should be explained that when the "a=content" field is unicom.webrtc-datachannel.adc, what the NCP receives is a DC call from the terminal device.

[0089] S402: The service management server determines a service server based on the identification information and application rules of the preset applet in the second request information.

[0090] The application rules include identification information of at least one mini-program and a business server corresponding to the identification information of at least one mini-program.

[0091] In a possible implementation, the business management server parses the second request information to obtain identification information of a preset applet; and determines device information of the business server based on the identification information and application rules of the preset applet.

[0092] Optionally, the device information of the business server includes at least one of the following: an identification (ID) of the business server, the capacity of the business server, the resource occupancy of the business server, the remaining resources of the business server, and an Internet Protocol (IP) for interconnection between networks of the business servers.

[0093] The above scheme brings at least the following beneficial effects: In the embodiment of the present application, the NCP receives the applet download request of the terminal device and sends the second request information to the service management server. Since the service management server determines the service server based on the identification information and application rules of the preset applet in the second request information, the service management server can send the first request information to the service server storing the applet package of the preset applet, thereby improving the download efficiency of the applet.

[0094] In one possible implementation, combining Figure 4 ,like Figure 5 As shown, in S402, after the service management server determines the service server based on the identification information and application rules of the preset applet in the second request information, the service management server modifies the first request information. The process of the service management server modifying the first request information can be specifically implemented through the following S501-S502.

[0095] S501. The service management server determines a first key corresponding to a preset applet based on identification information and application rules of the preset applet in the second request information.

[0096] The application rules also include a key corresponding to identification information of at least one mini-program.

[0097] In a possible implementation, after the service management server obtains the application rules from the storage unit, it determines the first key corresponding to the preset applet based on the identification information and the application rules of the preset applet.

[0098] It should be explained that the storage unit can be set in the business management server or outside the business management server, and this application does not make any further limitations on this.

[0099] In another possible implementation, after the business management server determines the second key corresponding to the preset applet, it determines the first time limit information based on the identification information of the preset applet, and adds the first time limit information to the second key to obtain the first key.

[0100] It should be explained that, since the first key includes the first validity information, the business management service can stipulate the validity of the first key and improve the accuracy of the NCP using the first key.

[0101] S502: The service management server adds the first key to the first request information.

[0102] The first key is used to verify the validity of the first request information.

[0103] In a possible implementation, the service management server adds the first key to the header of the first message. The first message is used to carry the first request information. In this way, when the NCP receives the first message from the service management server, it can first parse the first key in the message and verify the validity of the first request information based on the first key. In the case that the validity verification of the first request information fails, the first message can be discarded in time, and the NCP does not need to parse the entire content of the first message, thereby avoiding waste of resources and improving the download efficiency of the mini program package of the mini program.

[0104] In another possible implementation manner, the service management server adds the first key to the first request information based on a preset rule.

[0105] Optionally, the preset rule may be an encryption rule.

[0106] It should be explained that the service management server adds the first key to the first request information, so that after receiving the first request information, the service server can verify the legitimacy of the first request information based on the first key. After the first request information passes the legitimacy verification, the mini program package of the preset mini program can be sent to the service server; after the first request information fails to pass the legitimacy verification, the mini program package of the preset mini program is refused to be sent to the service server, thereby improving the security of mini program downloads.

[0107] The above scheme brings at least the following beneficial effects: in the embodiment of the present application, the business management server determines and sends a first key to the business server, so that after the business server receives the first request information, it can verify the legitimacy of the first request information based on the first key, thereby improving the security of the mini program download.

[0108] In one possible implementation, combining Figure 3 ,like Figure 6 As shown, the above-mentioned process of S301, in which the business management server sends the first request information to the business server and requests the certificate management server to issue the certificate of the preset applet, can be specifically implemented through the following S601-S602.

[0109] S601. The service management server determines an initial packet loss rate and an initial delay of the preset applet based on the identification information and application rules of the preset applet in the second request information.

[0110] The application rules include identification information of at least one mini-program, and an initial packet loss rate and an initial delay corresponding to the identification information of at least one mini-program.

[0111] In a possible implementation, the service management server obtains the type of the preset applet, and determines the initial packet loss rate and initial delay of the preset applet based on the identification information and application rules of the preset applet and the type of the preset applet.

[0112] It needs to be explained that the initial packet loss rate and initial delay of different types of mini-programs are different.

[0113] Exemplarily, the initial packet loss rate and initial delay of a game-type mini-program are smaller than those of a video-type mini-program; the initial packet loss rate and initial delay of a video-type mini-program are smaller than those of a voice-type mini-program; the initial packet loss rate and initial delay of a voice-type mini-program are smaller than those of a picture-type mini-program; the initial packet loss rate and initial delay of a picture-type mini-program are smaller than those of a text-type mini-program.

[0114] S602: The service management server sends first request information and negotiation request information to the service server, and requests the certificate management server to issue a certificate for a preset applet.

[0115] The negotiation request information includes the initial packet loss rate and initial delay of the preset applet; the negotiation request information is used to negotiate the packet loss rate and delay of the preset applet.

[0116] It needs to be explained that the business server stores the mini-program packages of the preset mini-programs, and can more clearly understand the packet loss rate and delay requirements of the preset mini-programs. Therefore, the business server can determine the negotiated packet loss rate and negotiated delay of the preset mini-program based on the initial packet loss rate and initial delay of the preset mini-program, and can more accurately determine the packet loss rate and delay required by the preset mini-program.

[0117] The above scheme brings at least the following beneficial effects: In an embodiment of the present application, the business management server determines and sends the initial packet loss rate and initial delay of the preset applet to the business server, so that the business server and the business management server negotiate the packet loss rate and delay of the preset applet and provide appropriate network resources for the terminal device.

[0118] In one possible implementation, combining Figure 6 ,like Figure 7 As shown, the above S302, the process in which the business management server receives the applet package of the preset applet sent from the business server and the certificate of the preset applet sent by the certificate management server, can be specifically implemented through the following S701.

[0119] S701. The service management server receives a small program package of a preset small program sent by a service server, negotiation response information, and a certificate of the preset small program sent by a certificate management server.

[0120] Among them, the negotiation response information includes the negotiated packet loss rate of the preset applet and the negotiated delay of the preset applet; the negotiated packet loss rate of the preset applet is negotiated between the business management server and the business server based on the initial packet loss rate of the preset applet; the negotiated delay of the preset applet is negotiated between the business management server and the business server based on the initial delay of the preset applet.

[0121] Optionally, the negotiation packet loss rate of the preset mini-program is LOSS rev, and the negotiation delay of the preset mini-program is latencyrev.

[0122] The above scheme brings at least the following beneficial effects: In the embodiment of the present application, when the service management server receives the applet package of the preset applet and the certificate of the preset applet, it can also receive the negotiation response information. Since the negotiation response information includes the negotiation packet loss rate of the preset applet and the negotiation delay of the preset applet, in this way, the packet loss rate and delay of the preset applet can be determined more accurately, and appropriate network resources can be provided for the terminal device.

[0123] In one possible implementation, combining Figure 7 ,like Figure 8 As shown, in S303, after the service management server sends the applet package and the certificate of the preset applet to the NCP, the service management server sends the archive information of the preset applet to the UMF. The process of the service management server sending the archive information of the preset applet to the UMF can be specifically implemented by the following S801.

[0124] S801. The service management server sends the archive information of the preset applet to the UMF via the NCP.

[0125] Among them, the file information includes: the negotiated packet loss rate of the preset applet and the negotiated delay of the preset applet; the file information is used to determine the communication service quality level of the preset applet.

[0126] It should be explained that after the service management server sends the archive information of the preset applet to the unified media function (UMF) of the new communication network element through the NCP, the UMF can Fig. 9 Interface 2 shown in the figure sends the profile information of the preset applet to the Policy Control Function (PCF) in the 5G network. The PCF can determine the communication service quality level of the preset applet based on the profile information of the preset applet, thereby dynamically configuring the service quality inspection (Quality of Service, QoS) parameters in the preset applet network to achieve communication of the preset applet.

[0127] The above scheme brings at least the following beneficial effects: In the embodiment of the present application, the service management server sends the archive information of the preset applet to the UMF through the NCP. Since the archive information includes: the negotiated packet loss rate of the preset applet and the negotiated delay of the preset applet, the UMF can send the negotiated packet loss rate of the preset applet and the negotiated delay of the preset applet to the PCF, so that the PCF provides more accurate network resources for the preset applet in the terminal device.

[0128] Below, combined with the attached Fig.10 The method for downloading the mini-program provided in the embodiment of the present application is described in detail. Fig.10 As shown, the method for downloading the applet includes:

[0129] S1001. A calling terminal device and a called terminal device establish a BDC for a voice call.

[0130] S1002: The calling terminal device downloads an application list from the NCP.

[0131] In a possible implementation, the calling terminal device downloads the application list from the NCP through the BDC.

[0132] S1003: The calling terminal device downloads the application program to the NCP.

[0133] In a possible implementation, the calling terminal device downloads the application program to the NCP through the BDC.

[0134] S1004: The calling terminal device and the called terminal device establish an ADC.

[0135] S1005. The NCP sends a second request message to the service management server.

[0136] In a possible implementation, the NCP searches for a preset applet in the application list, and when identification information of the preset applet does not exist in the application list, a second request for information is made to the service management server.

[0137] S1006. The service management server sends first request information to the third-party application server.

[0138] The first request information includes a first key corresponding to a preset mini-program.

[0139] S1007. The service management server receives a mini-program package of a preset mini-program sent by a third-party application and a certificate of the preset mini-program sent by a certificate management server.

[0140] S1008. The service management server sends a mini-program package of a preset mini-program and a certificate of the preset mini-program to the NCP.

[0141] S1009: The preset applet in the calling user equipment communicates via ADC.

[0142] In a possible implementation, after a preset applet in the calling user equipment is started, a joint game application may be sent to the called user equipment, and the two may be connected to a game server together.

[0143] The above scheme brings at least the following beneficial effects: In the present application, since the service management server requests the service server to download the applet package of the preset applet when determining that the preset applet is safe, and requests the certificate of the preset applet from the certificate management server. Therefore, the certificate of the preset applet received by the service management server can characterize the security of the applet package of the preset applet. In this way, when the service management server sends the applet package of the preset applet and the certificate of the preset applet to the NCP, the NCP can determine whether the applet package of the preset applet is safe based on the certificate of the preset applet, and choose whether to send the applet package of the preset applet to the terminal device based on the security of the applet package of the preset applet, thereby improving the security of the terminal device downloading the applet during the call. After the terminal device downloads the preset applet, it can start the applet and communicate normally.

[0144] It can be seen that the technical solution provided by the embodiment of the present application is introduced above mainly from the perspective of the method. In order to realize the above functions, it includes hardware structures and / or software modules corresponding to the execution of each function. Those skilled in the art should be easily aware that, in combination with the modules and algorithm steps of each example described in the embodiment disclosed herein, the embodiment of the present application can be implemented in the form of hardware or a combination of hardware and computer software. Whether a function is executed in the form of hardware or computer software driving hardware depends on the specific application and design constraints of the technical solution. Professional and technical personnel can use different methods to implement the described functions for each specific application, but such implementation should not be considered to exceed the scope of the present invention.

[0145] The embodiment of the present application can divide the functional modules of the device for downloading the applet according to the above method example. For example, each functional module can be divided according to each function, or two or more functions can be integrated into one processing module. The above integrated modules can be implemented in the form of hardware or in the form of software functional modules. Optionally, the division of modules in the embodiment of the present application is schematic and is only a logical functional division. There may be other division methods in actual implementation.

[0146] like Fig.11 , which is a schematic diagram of a structure of a device 110 for downloading a small program provided in an embodiment of the present application. The device 110 for downloading a small program includes: a processing unit 1101 and a communication unit 1102 .

[0147] Processing unit 1101 is used to send a first request message to the business server and request the certificate management server to issue the certificate of the preset applet when determining that the preset applet is secure; the first request message is used to request downloading of the applet package of the preset applet, and the business server stores the applet package of the preset applet; communication unit 1102 is also used to receive the applet package of the preset applet sent from the business server and the certificate of the preset applet sent from the certificate management server; communication unit 1102 is also used to send the applet package of the preset applet and the certificate of the preset applet to NCP; the certificate of the preset applet is used to verify the security of the applet package of the preset applet.

[0148] Optionally, the communication unit 1102 is also used to receive a second request information from the NCP; the second request information is used to request downloading of a preset mini-program; the processing unit 1101 is also used to determine the business server based on the identification information and application rules of the preset mini-program in the second request information; the application rules include the identification information of at least one mini-program and the business server corresponding to the identification information of at least one mini-program.

[0149] Optionally, processing unit 1101 is also used to determine the first key corresponding to the preset mini-program based on the identification information and application rules of the preset mini-program in the second request information; the application rules also include a key corresponding to the identification information of at least one mini-program; processing unit 1101 is also used to add the first key to the first request information; the first key is used to verify the validity of the first request information.

[0150] Optionally, processing unit 1101 is also used to determine the initial packet loss rate and initial delay of the preset mini-program based on the identification information and application rules of the preset mini-program in the second request information; the application rules include the identification information of at least one mini-program, and the initial packet loss rate and initial delay corresponding to the identification information of at least one mini-program; processing unit 1101 is also used to send the first request information and the negotiation request information to the business server when determining that the preset mini-program is safe, and request the certificate management server to issue the certificate of the preset mini-program; the negotiation request information includes the initial packet loss rate and initial delay of the preset mini-program; the negotiation request information is used to negotiate the packet loss rate and delay of the preset mini-program.

[0151] Optionally, the communication unit 1102 is also used to receive a mini-program package of a preset mini-program sent from a business server, a negotiation response information, and a certificate of a preset mini-program sent from a certificate management server; the negotiation response information includes a negotiated packet loss rate of the preset mini-program and a negotiated delay of the preset mini-program; the negotiated packet loss rate of the preset mini-program is obtained by negotiation between the business management server and the business server based on the initial packet loss rate of the preset mini-program; the negotiated delay of the preset mini-program is obtained by negotiation between the business management server and the business server based on the initial delay of the preset mini-program.

[0152] Optionally, the communication unit 1102 is further used to send profile information of a preset applet to the UMF via the NCP; the profile information includes: a negotiated packet loss rate of the preset applet and a negotiated delay of the preset applet; the profile information is used to determine the communication service quality level of the preset applet.

[0153] Optionally, the certificate of the preset applet includes identification information and validity information of the preset applet.

[0154] The processing unit 1101 may be a processor or a controller. It may implement or execute various exemplary logic blocks, modules and circuits described in conjunction with the disclosure of this application. The processor may also be a combination that implements computing functions, such as a combination of one or more microprocessors, a combination of a DSP and a microprocessor, etc. The communication unit 1102 may be a transceiver circuit or a communication interface, etc. The storage module may be a memory. When the processing unit 1101 is a processor, the communication unit 1102 is a communication interface, and the storage module is a memory, the device for downloading a small program involved in the embodiment of the present application may be Figure 2 The device for downloading the applet is shown.

[0155] Through the description of the above implementation methods, technicians in the relevant field can clearly understand that for the convenience and simplicity of description, only the division of the above functional modules is used as an example. In actual applications, the above functions can be assigned to different functional modules as needed, that is, the internal structure of the network node is divided into different functional modules to complete all or part of the functions described above. The specific working process of the system, module and network node described above can refer to the corresponding process in the aforementioned method embodiment, and will not be repeated here.

[0156] An embodiment of the present application also provides a computer-readable storage medium, in which instructions are stored. When a computer executes the instructions, the computer executes each step in the method flow shown in the above method embodiment.

[0157] An embodiment of the present application also provides a chip, which includes a processor and a communication interface, the communication interface and the processor are coupled, and the processor is used to run a computer program or instruction to implement the method of downloading a mini-program in the above method embodiment.

[0158] An embodiment of the present application provides a computer program product including instructions, which, when executed on a computer, enables the computer to execute the method for downloading a small program in the above method embodiment.

[0159] Among them, the computer-readable storage medium can be, for example, but not limited to, an electrical, magnetic, optical, electromagnetic, infrared, or semiconductor system, device or device, or any combination of the above. More specific examples of computer-readable storage media (a non-exhaustive list) include: an electrical connection with one or more wires, a portable computer disk, and a hard disk. Random Access Memory (RAM), Read-Only Memory (ROM), Erasable Programmable Read Only Memory (EPROM), registers, hard disks, optical fibers, portable compact disk read-only memory (CD-ROM), optical storage devices, magnetic storage devices, or any other form of computer-readable storage medium in a suitable combination of the above, or numerical values ​​in the art. An exemplary storage medium is coupled to a processor so that the processor can read information from the storage medium and write information to the storage medium. Of course, the storage medium can also be a component of the processor. The processor and the storage medium can be located in an Application Specific Integrated Circuit (ASIC). In embodiments of the present invention, computer-readable storage media may be any tangible media that contains or stores a program that may be used by or in conjunction with an instruction execution system, apparatus, or device.

[0160] Since the apparatus, device, computer-readable storage medium, and computer program product in the embodiments of the present invention can be applied to the above-mentioned method, the technical effects that can be obtained can also refer to the above-mentioned method embodiments, and the embodiments of the present application will not be repeated here.

[0161] The above are only specific implementations of the present application, but the protection scope of the present application is not limited thereto. Any changes or substitutions within the technical scope disclosed in the present application should be included in the protection scope of the present application. Therefore, the protection scope of the present application should be based on the protection scope of the claims.

Claims

1. A method for downloading a small program, characterized in that: Applied to the scenario of a new communication service call, the method includes: When determining that the preset applet is safe, sending a first request message to the business server and requesting the certificate management server to issue the certificate of the preset applet; the first request message is used to request downloading the applet package of the preset applet, and the business server stores the applet package of the preset applet; Receiving a mini-program package of the preset mini-program sent from the business server and a certificate of the preset mini-program sent from the certificate management server; The applet package of the preset applet and the certificate of the preset applet are sent to the new communication control plane network element NCP; the certificate of the preset applet is used to verify the security of the applet package of the preset applet.

2. The method according to claim 1, characterized in that In the case where it is determined that the preset applet is safe, before sending the first request information to the service server, the method further includes: receiving a second request message from the NCP; the second request message is used to request downloading of the preset applet; The business server is determined based on the identification information and application rules of the preset applet in the second request information; the application rules include the identification information of at least one applet and the business server corresponding to the identification information of the at least one applet.

3. The method according to claim 2, characterized in that After determining the service server based on the identification information and application rules of the preset applet in the second request information, the method further includes: Determine a first key corresponding to the preset mini-program based on the identification information of the preset mini-program in the second request information and the application rule; the application rule also includes a key corresponding to the identification information of the at least one mini-program; The first key is added to the first request information; the first key is used to verify the validity of the first request information.

4. The method according to claim 1, characterized in that When determining that the preset applet is safe, sending first request information to the business server and requesting the certificate management server to issue the certificate of the preset applet includes: Determine the initial packet loss rate and initial delay of the preset applet based on the identification information and application rules of the preset applet in the second request information; the application rules include the identification information of at least one applet, and the initial packet loss rate and initial delay corresponding to the identification information of the at least one applet; When the preset mini-program is determined to be safe, a first request message and a negotiation request message are sent to the business server, and the certificate management server is requested to issue the certificate of the preset mini-program; the negotiation request message includes the initial packet loss rate and initial delay of the preset mini-program; the negotiation request message is used to negotiate the packet loss rate and delay of the preset mini-program.

5. The method according to claim 4, characterized in that The receiving the applet package of the preset applet sent by the business server and the certificate of the preset applet sent by the certificate management server includes: Receive the applet package of the preset applet sent by the business server, the negotiation response information and the certificate of the preset applet sent by the certificate management server; the negotiation response information includes the negotiated packet loss rate of the preset applet and the negotiated delay of the preset applet; the negotiated packet loss rate of the preset applet is negotiated between the business management server and the business server based on the initial packet loss rate of the preset applet; the negotiated delay of the preset applet is negotiated between the business management server and the business server based on the initial delay of the preset applet.

6. The method according to claim 5, characterized in that After sending the applet package of the preset applet and the certificate of the preset applet to the NCP, the method further includes: The profile information of the preset applet is sent to the new communication unified media plane network element UMF through the NCP; the profile information includes: the negotiated packet loss rate of the preset applet and the negotiated delay of the preset applet; the profile information is used to determine the communication service quality level of the preset applet.

7. The method according to any one of claims 1 to 6, characterized in that: The certificate of the preset applet includes identification information and validity information of the preset applet.

8. A device for downloading a small program, characterized in that: The device comprises a processing unit and a communication unit: The processing unit is used to send a first request message to the business server and request the certificate management server to issue a certificate of the preset applet when determining that the preset applet is safe; The first request information is used to request downloading of a small program package of the preset small program, and the business server stores the small program package of the preset small program; The communication unit is further configured to receive a small program package of the preset small program sent from the business server and a certificate of the preset small program sent from the certificate management server; The communication unit is further used to send the applet package of the preset applet and the certificate of the preset applet to the new communication control plane network element NCP; the certificate of the preset applet is used to verify the security of the applet package of the preset applet.

9. A device for downloading a small program, characterized in that: include: A processor and a memory; wherein the memory is used to store computer-executable instructions, and when the device for downloading the mini-program is running, the processor executes the computer-executable instructions stored in the memory, so that the device for downloading the mini-program executes the method for downloading the mini-program described in any one of claims 1-7.

10. A computer-readable storage medium, characterized in that: The computer-readable storage medium includes instructions, which, when executed by a device for downloading an applet, cause the computer to execute the method for downloading an applet according to any one of claims 1 to 7.

Images