Information tamper-proofing method and device, server, medium and product

Abstract

The embodiment of the invention discloses an information tamper-proofing method and device, a server, a medium and a product, and the method comprises the steps: obtaining to-be-verified equipment information of equipment when a preset interaction behavior is detected; when the to-be-verified equipment information is consistent with pre-stored target equipment information and the to-be-verified equipment information comprises the target token key, generating a target secret order based on the target token key, the to-be-verified equipment information and interaction data corresponding to a preset interaction behavior; and sending the target secret order and the interaction data to a target authentication server, so as to execute a target event corresponding to the interaction data when the target secret order is successfully verified based on the target authentication server, and receiving feedback information of completion of execution of the target event fed back by the target task server, and displaying the target interface of successful execution of the preset interaction behavior, thereby achieving the effect of data security in the whole data processing process.

Description

Technical Field

[0001] Embodiments of the present invention relate to the field of information security technology, and in particular, to an information tamper-proofing method, device, server, medium and product. Background Art

[0002] With the development of the Internet, especially mobile Internet, the business functions of mobile banking are constantly updated and improved. However, behind the convenience and efficiency, the biggest factor restricting the development of mobile banking is information security. Attacks on network applications may lead to serious consequences such as privacy leakage and personal property loss. Data tampering is a common attack method. In other words, data tampering is a common application vulnerability. After the data is tampered, the impact range is very wide and the degree of harm is very large.

[0003] For Web and mobile applications, zero trust should be maintained on the front end. The fields on the front end may be maliciously tampered with, which will lead to data tampering vulnerabilities. For example, taking the credit scenario on a mobile terminal as an example, when a user submits a credit application on the client, the server will receive the credit application and verify the credit amount in the credit application to ensure that the credit amount meets the preset conditions. However, the credit amount is usually checked on the front-end page, that is, it will be verified on the client side. If it does not meet the requirements, the credit application cannot be submitted. If the front-end verification is bypassed or the application amount in the credit application is tampered with, and the background is not verified, serious consequences will occur.

[0004] Based on the above, it can be seen that in the entire data processing process, data tamper-proofing to ensure the security of data transmission has become an urgent problem to be solved. Summary of the invention

[0005] The embodiments of the present invention provide an information tamper-proof method, device, server, medium and product to improve the data security during data transmission or processing.

[0006] In a first aspect, an embodiment of the present invention provides an information tamper-proof method, the method comprising:

[0007] When a preset interactive behavior is detected, the device information to be verified of the device to which it belongs is obtained;

[0008] When the device information to be verified is consistent with the pre-stored target device information and includes a target token key, generating a target secret code based on the target token key, the device information to be verified and the interaction data corresponding to the preset interaction behavior;

[0009] Sending the target secret code and the interaction data to a target authentication server, so that when the target secret code is successfully verified by the target authentication server, a target event corresponding to the interaction data is executed;

[0010] Receive feedback information on the completion of the target event execution fed back by the target task server, and display the target interface showing the successful execution of the preset interactive behavior.

[0011] Furthermore, the method further comprises:

[0012] Generate a random number, and encrypt the target device information of the device based on the random number to obtain encrypted data; and,

[0013] Encrypting the random number based on the built-in public key to obtain an encrypted random number;

[0014] The encrypted data and the encrypted random number are sent to the first server, and after the encrypted data and the encrypted random number are decrypted based on the first server, they are sent to the target authentication server, so as to generate the target token key based on the target authentication server and feedback it.

[0015] Further, the decrypting the encrypted data and the encrypted random number based on the first server and sending them to the target authentication server includes:

[0016] Decrypting the encrypted random number based on a private key corresponding to the public key built into the first server to obtain the random number;

[0017] The encrypted data is decrypted based on the random number to obtain the device information to be verified, and the device information to be verified is sent to the target authentication service end based on the first server.

[0018] Further, generating the target token key based on the target authentication server includes:

[0019] Generate a token to be processed based on the target authentication server, and encrypt the token to be processed and the device information to be verified to obtain the target token key;

[0020] The target token key is sent to the first server based on the target authentication service end, so that the first server encrypts the target token key based on the random number and then feeds back the encrypted key.

[0021] Further, after receiving the encrypted target token key, the method further includes:

[0022] Decryption processing of the target token key encrypted based on the random number to obtain the target token key;

[0023] The target token key and the target device information are stored, and the random number is destroyed.

[0024] Furthermore, the method further comprises:

[0025] When the device information to be verified is inconsistent with the pre-stored target device information and / or the target token information is not stored, the target token information corresponding to the device is regenerated and stored based on the device information to be verified, and the operation of displaying the target interface is re-executed.

[0026] Further, the generating of the target secret code based on the target token key, the device information to be verified and the interaction data corresponding to the preset interaction behavior includes:

[0027] The target token key, the device information to be verified and the interactive data are encrypted using a preset encryption algorithm to obtain the target secret code.

[0028] Further, when the target password verification based on the target authentication server is successful, executing the target event corresponding to the interaction data includes:

[0029] Generate multiple secret codes to be used within the authentication time window based on the target authentication server, and determine whether the multiple secret codes to be used include the target secret code;

[0030] If the target password is included, the target password is verified successfully and the target event corresponding to the interaction data is executed.

[0031] In a second aspect, an embodiment of the present invention provides an information tamper-proof device, the device comprising:

[0032] The device information acquisition module is used to acquire the device information to be verified of the device when a preset interactive behavior is detected;

[0033] a target password generating module, configured to generate a target password based on the target token key, the device information to be verified and the interaction data corresponding to the preset interaction behavior when the device information to be verified is consistent with the pre-stored target device information and includes a target token key;

[0034] A target event execution module, used to send the target secret code and the interaction data to a target authentication server, so as to execute a target event corresponding to the interaction data when the target secret code is successfully verified by the target authentication server;

[0035] The interface display module is used to receive the feedback information of the target event execution completion fed back by the target task server, and display the target interface of the successful execution of the preset interactive behavior.

[0036] In a third aspect, an embodiment of the present invention provides a server, the server comprising:

[0037] one or more processors;

[0038] A memory for storing one or more programs;

[0039] When the one or more programs are executed by the one or more processors, the one or more processors implement the information tamper-proofing method provided by any embodiment of the present invention.

[0040] In a fourth aspect, an embodiment of the present invention further provides a computer-readable storage medium having a computer program stored thereon, which, when executed by a processor, implements the information tamper-proofing method provided by any embodiment of the present invention.

[0041] In a fifth aspect, an embodiment of the present invention further provides a computer program product, including a computer program, characterized in that when the computer program is executed by a processor, the computer program implements the information tamper-proofing method as described in any one of the embodiments of the present invention.

[0042] The technical solution provided by the embodiment of the present invention can obtain the device information of the device that generates the preset interactive behavior when detecting the generation of the preset interactive behavior, and use it as the device information to be verified. Further, when the device information to be verified is consistent with the target device information pre-stored in the client, and the client includes the target token key, the target password can be generated based on the target token key, the device information to be verified, and the interactive data corresponding to the preset interactive behavior. Since the target device information is the device information stored when the target token key is generated, when the verification passes, it is first ensured that the data is issued based on the same device, thereby achieving the effect of ensuring data security. Furthermore, the target password and the interactive data can be sent to the target authentication server, so that when the target authentication server successfully verifies the target password, the target event corresponding to the interactive data can be executed. At this time, if the interactive data has not been tampered with, the corresponding event can be executed, thereby ensuring the effect of data processing security. Finally, after the target authentication server completes the target event, it can provide feedback information on the completion of the execution and display the target interface with the preset interactive behavior on the client, which solves the problem of data tampering during data processing or transmission in the prior art, resulting in the inability to guarantee data security, and achieves the effect of data security in the entire data processing process. BRIEF DESCRIPTION OF THE DRAWINGS

[0043] In order to more clearly illustrate the technical solutions of the exemplary embodiments of the present invention, the following briefly introduces the drawings required to describe the embodiments. Obviously, the drawings introduced are only drawings of a part of the embodiments to be described in the present invention, rather than all the drawings. For ordinary technicians in this field, other drawings can be obtained based on these drawings without creative work.

[0044] Figure 1 A flowchart of an information tamper-proof method provided by an embodiment of the present invention;

[0045] Figure 2 A flowchart of an information tamper-proof method provided by an embodiment of the present invention;

[0046] Figure 3 A flowchart of an information tamper-proof method provided by an embodiment of the present invention;

[0047] Figure 4 A schematic diagram of the structure of an information tamper-proof device provided by an embodiment of the present invention;

[0048] Figure 5 A schematic diagram of the structure of a server provided in an embodiment of the present invention. DETAILED DESCRIPTION

[0049] The present invention will be further described in detail below in conjunction with the accompanying drawings and embodiments. It is to be understood that the specific embodiments described herein are only used to explain the present invention, rather than to limit the present invention. It should also be noted that, for ease of description, only parts related to the present invention, rather than all structures, are shown in the accompanying drawings.

[0050] The present invention will be further described in detail below in conjunction with the accompanying drawings and embodiments. It is to be understood that the specific embodiments described herein are only used to explain the present invention, rather than to limit the present invention. It should also be noted that, for ease of description, only parts related to the present invention, rather than all structures, are shown in the accompanying drawings.

[0051] Before introducing the technical solution provided by the embodiment of the present invention, an application scenario may be exemplified first.

[0052] The solution provided by the embodiment of the present invention can be applied in the scenario of mobile banking. That is, when transaction information is generated based on the triggering operation of the mobile banking, the effect of data security can be determined based on the solution provided by the embodiment of the present invention. The mobile banking can be installed on the terminal device, and the user can trigger the application on the terminal device and trigger the corresponding controls in the main interface of the application to complete certain services. Optionally, the services may include personal financial services. When triggering personal financial services, the solution provided by the embodiment of the present invention can be used to authenticate the transaction information, effectively preventing important information from being maliciously tampered with. At the same time, customer device authentication and transaction anti-replay can be achieved, thereby achieving risk control of financial services and improving the customer experience of mobile finance.

[0053] Figure 1 A flow chart of an information tamper-proofing method provided in an embodiment of the present invention. This embodiment can be applied to the scenario of authenticating transaction data generated in mobile banking. The information tamper-proofing method provided in this embodiment can be installed by an information tamper-proofing device integrated in an electronic device, which can be a mobile terminal or a PC, etc.

[0054] like Figure 1 As shown, the method specifically comprises the following steps:

[0055] S110. When it is detected that a preset condition is met, a random number is generated, and target device information of the device is encrypted based on the random number to obtain encrypted data.

[0056] Among them, the preset condition can be a condition for the user to log in to the target application, and / or, after the preset interactive behavior is generated, it is detected that the target token key is not stored in the client. The client can generate a random number. Since the random number is randomly generated, when the target token key is determined based on the random number, the security of data transmission can be improved. The device mainly refers to the terminal device where the target application is deployed. The target device information mainly refers to the device information of the terminal device obtained. Optionally, the target device information may include mac address, device model, IP address and other device-related parameters. The target device information can be encrypted based on the random number to obtain encrypted data. That is, the random number is mainly used to encrypt the target device information.

[0057] Specifically, when it is detected that the target application login is satisfied, or when it is detected that the target token key is not stored in the target application, the client can generate a random number. At the same time, the target device information of the device to which the target application belongs is obtained. After obtaining the random number and the target device information, the target device information can be encrypted based on the random number, and the data obtained at this time is used as encrypted data.

[0058] For example, a user can trigger an application installed on a terminal device. When the user clicks on the application and logs in to the client, that is, the customer information is verified by displaying the mobile client, a random number can be generated. At the same time, the target device information of the device to which the client belongs is obtained. The target device information is encrypted with a random number using an existing confidentiality algorithm to obtain encrypted data.

[0059] S120: Encrypt the random number based on the built-in public key to obtain an encrypted random number.

[0060] Among them, a public key and a private key can be generated in the server. The public key is sent to the client for storage, so as to encrypt the random data based on the public key. The private key is stored in the server, so that when the encrypted data sent by the client is received, the encrypted data can be decrypted based on the private key.

[0061] Specifically, the random number is encrypted based on the public key stored in the client, and the obtained data is used as the encrypted random number.

[0062] Exemplarily, the client may generate a random number as Kt, and encrypt the random number based on the public key to obtain an encrypted random number.

[0063] S130, sending the encrypted data and the encrypted random number to the first server, decrypting the encrypted data and the encrypted random number based on the first server, and sending them to the target authentication server, so as to generate a target token key based on the target authentication server and feedback.

[0064] The first server may be a server corresponding to the client. Optionally, if the client is a mobile banking client, the first server may be a mobile banking server. The first server is used to receive the encrypted data and encrypted random number sent by the client, and decrypt the received data and send it to the target authentication server, so that the target authentication server can authenticate the data. That is, the target authentication server is mainly used for data authentication.

[0065] Specifically, the client can send the encrypted data and the encrypted random number to the first server, and the first server can decrypt the encrypted data and the encrypted random number after receiving them, and send the decrypted result to the target authentication server. The target authentication server can generate a target token key based on the received decrypted data and feed it back to the client.

[0066] In this embodiment, the encrypted data and the encrypted random number are decrypted based on the first server and sent to the target authentication server, including: decrypting the encrypted random number based on a private key corresponding to the public key built into the first server to obtain the random number; decrypting the encrypted data based on the random number to obtain the device information to be verified, and sending the device information to be verified to the target authentication server based on the first server.

[0067] The encrypted random number can be decrypted based on the private key corresponding to the public key to obtain the random number. At the same time, the encrypted data can be decrypted based on the random number to obtain the device information to be verified. The device information to be verified can be sent to the target authentication server.

[0068] In this embodiment, the reason and benefit of sending the device information to be verified to the target authentication server based on the above method is that the device information to be verified can be sent to the target authentication server under the premise of ensuring data security, thereby ensuring the security of the obtained target token key.

[0069] In this embodiment, the target token key is generated based on the target authentication server, including: generating a token to be processed based on the target authentication server, and encrypting the token to be processed and the device information to be verified to obtain the target token key; sending the target token key to the first server based on the target authentication server, so that the first server encrypts the target token key based on the random number and then feeds back.

[0070] Among them, the token to be processed is a token randomly generated by the server. The token to be processed and the device information to be verified can be encrypted to obtain the target token key. It can be understood that the token can be bound to the hardware information of the device used by the user. The timing for the target authentication server to generate the token to be processed is that it can only be generated after receiving the device information to be verified and verifying it. The reason and benefit of this is that the token key can only be downloaded and updated on a trusted terminal. Therefore, after receiving the device information to be verified and verifying it, the token to be processed can be generated, and the token to be processed and the device information to be verified can be encrypted to obtain the target token key.

[0071] S140: Receive and cache the target token key.

[0072] After receiving the target token key, the server can cache it. The reason and benefit of caching is that it can be processed based on the target token key during the subsequent data transmission process, thereby achieving the effect of data transmission security.

[0073] In this embodiment, after receiving the encrypted target token key sent by the first server, the method also includes: decrypting the encrypted target token key based on the random number to obtain the target token key; storing the target token key and the target device information, and destroying the random number.

[0074] Specifically, after the client receives the encrypted target token key, it can decrypt the encrypted target token key based on the random number to obtain the target token key. The target token key is stored in the client, so that after the preset interactive behavior is generated, the interactive data corresponding to the preset interactive behavior can be processed based on the target token key to ensure the security of interactive data processing. In order to avoid the situation where the data is tampered with in the subsequent data processing process, the random number can be destroyed after receiving the target token key.

[0075] As an optional embodiment of the above embodiment, the method of generating the target token key may be:

[0076] See also Figure 2 After the user information is verified, you can log in to the application installed on the client. The client can generate a random number, which can be 16 bytes, and use the generated random number as Kt (data encryption key). Use the data encryption key Kt to encrypt the data part of the request message. At this time, the request message mainly refers to the target device information of the device. Use the built-in public key to encrypt the random number Kt to obtain the encrypted data Kts. The encrypted data can be sent to the first server (palm-banking server) together with the message data. The palm-banking server uses the corresponding private key to decrypt the encrypted data Kts to obtain Kt. Then use Kt to decrypt the plaintext of the message data. Send the target device information to the target authentication server. After the target authentication server completes the processing, the palm-banking server can use Kt to encrypt the sent data and send it to the client. The client receives the response data and uses Kt to decrypt the plaintext data. After receiving the target token key generated by the authentication server, the random number generated in the client can be destroyed.

[0077] The technical solution provided by the embodiment of the present invention can obtain the device information of the device that generates the preset interactive behavior when detecting the generation of the preset interactive behavior, and use it as the device information to be verified. Further, when the device information to be verified is consistent with the target device information pre-stored in the client, and the client includes the target token key, the target password can be generated based on the target token key, the device information to be verified, and the interactive data corresponding to the preset interactive behavior. Since the target device information is the device information stored when the target token key is generated, when the verification passes, it is first ensured that the data is issued based on the same device, thereby achieving the effect of ensuring data security. Furthermore, the target password and the interactive data can be sent to the target authentication server, so that when the target authentication server successfully verifies the target password, the target event corresponding to the interactive data can be executed. At this time, if the interactive data has not been tampered with, the corresponding event can be executed, thereby ensuring the effect of data processing security. Finally, after the target authentication server completes the target event, it can provide feedback information on the completion of the execution and display the target interface with the preset interactive behavior on the client, which solves the problem of data tampering during data processing or transmission in the prior art, resulting in the inability to guarantee data security, and achieves the effect of data security in the entire data processing process.

[0078] Figure 3 A flow chart of an information tamper-proofing method provided in an embodiment of the present invention. This embodiment can be applied to the scenario of authenticating transaction data generated in mobile banking. The information tamper-proofing method provided in this embodiment can be installed by an information tamper-proofing device integrated in an electronic device, which can be a mobile terminal or a PC, etc.

[0079] On the basis of the above embodiment, that is, on the basis that the client has generated the target token key, if data processing is performed, it can be implemented based on this embodiment.

[0080] like Figure 3 As shown, the method specifically comprises the following steps:

[0081] S210: When a preset interactive behavior is detected, the device information to be verified of the device is obtained.

[0082] Among them, the preset interactive behavior is a pre-set behavior that needs to be detected. Optionally, the preset interactive behavior is a payment interactive behavior, a credit interactive behavior, etc. It can be understood that the preset interactive behavior is the behavior corresponding to any triggering operation on the mobile banking client. When the preset interactive behavior is detected, the device information to be verified of the device to which the current client belongs can be obtained. At this time, the device information to be verified mainly refers to any device-related information such as the mac address, device model, login IP address, etc., which are all used as the device information to be verified.

[0083] Specifically, when it is detected that the user triggers a preset interactive behavior on the client, the device information of the device to which the client belongs can be obtained, and the device information can be used as the device information to be verified.

[0084] S220. When the device information to be verified is consistent with the pre-stored target device information and includes the target token key, a target password is generated based on the target token key, the device information to be verified and the interaction data corresponding to the preset interaction behavior.

[0085] After obtaining the device information to be verified, it can be determined whether the device information to be verified is the same as the target device information. If they are the same, it means that the device is trustworthy. At the same time, when the target token key is also stored in the client, the target password can be generated based on the obtained target token key, the device information to be verified, and the interaction data generated by the preset interaction behavior.

[0086] In this embodiment, the method also includes: when the device information to be verified is inconsistent with the pre-stored target device information and / or the target token key is not stored, regenerating and storing the target token information corresponding to the device based on the device information to be verified, and re-executing the operation of displaying the target interface.

[0087] It can be understood that: if the device information to be verified is inconsistent with the pre-stored target device information, or if the target token key is not stored in the client, the corresponding target token key can be regenerated and stored based on the device to be verified. After obtaining the target token key, the interactive data corresponding to the preset interactive behavior is processed to ensure the security of the processed data.

[0088] S230, sending the target secret code and the interaction data to the target authentication server, so that when the target secret code is successfully verified by the target authentication server, a target event corresponding to the interaction data is executed.

[0089] It can be understood that after sending the target secret code and the interaction data to the target authentication server, the target authentication server can verify the target secret code. After the verification is successful, the target event corresponding to the interaction data can be executed.

[0090] In this embodiment, the target password is generated based on the target token key, the device information to be verified and the interaction data corresponding to the preset interaction behavior, including: using a preset encryption algorithm to encrypt the target token key, the device information to be verified and the interaction data to obtain the target password.

[0091] The preset encryption algorithm is a pre-set algorithm for encrypting relevant information. The information obtained after processing it based on the preset encryption algorithm is used as the target password.

[0092] In this embodiment, a preset encryption algorithm can be used to encrypt the target token key, the device information to be verified, and the interaction data to obtain the target password, and the target password can be sent to the target authentication server, so that the target authentication server can further determine whether the data has been tampered with during the transmission process based on the target password, thereby achieving the effect of ensuring the security of the entire data processing link.

[0093] On the basis of the above technical solution, when the target password is successfully verified based on the target authentication server, the target event corresponding to the interaction data is executed, including: generating multiple passwords to be used within the authentication time window based on the target authentication server, and determining whether the multiple passwords to be used include the target password; if the target password is included, the target password is successfully verified, and the target event corresponding to the interaction data is executed.

[0094] The authentication time window is a time window corresponding to the detection of a preset interaction behavior and a preset duration. Multiple to-be-used secret codes can be generated based on relevant information within this event window. If the to-be-used secret codes include a target secret code, it means that the target secret code has been successfully verified, and the target event corresponding to the interaction data can be executed.

[0095] S240: Receive feedback information from the target authentication server indicating that the target event has been executed, and display a target interface indicating that the preset interactive behavior has been successfully executed.

[0096] The feedback information may be feedback information that the interaction data corresponding to the preset interaction behavior has been processed. For example, if it is a credit scenario, the feedback information may be information that the credit is approved and can be loaned. The target interface may be the interface corresponding to the successful execution of the preset interaction behavior. Of course, if it is a scenario where the verification fails, the target interface may be the interface where the preset interaction behavior is not completed.

[0097] As an alternative embodiment of the above embodiment, after obtaining the target token key, the method for implementing information tamper-proofing based on the target token key may be:

[0098] The user triggers a payment operation on the client, that is, the user triggers a payment transaction control on the mobile banking application. The client can obtain the device information to be verified of the device, and determine whether the device information to be verified is the same as the target device information stored in the client. If they are the same, the identity authentication is passed. If the authentication is not passed, a new target token key can be generated based on the device information to be verified. In either case, after the verification is passed, the device information to be verified of the device, that is, the firmware information of the device to which the client belongs, can be obtained. The client generates a dynamic password (target password) through an encryption algorithm (SM3 algorithm) based on the client token key (target token key), the client device firmware information (device information to be verified), and the transaction elements (amount, account number, etc.), and submits it to the mobile banking server (first server) together with the transaction information. The mobile banking server (first server) submits the received transaction information and dynamic password to the target authentication server for authentication. The authentication server authenticates the submitted password within the authentication time window. The processing method is to generate a dynamic password through the SM3 algorithm based on the client token key, client device firmware information, and transaction elements (amount, account number, etc.), that is, to generate a dynamic password within the authentication time window. If the dynamic password generated by the target authentication server and the received dynamic password are compared and passed, the subsequent payment process will be carried out. If the transaction elements are tampered with, the comparison fails and the failure information is fed back. Whether the proofreading is successful or failed, the corresponding page will be generated on the client for display on the client.

[0099] The technical solution provided by the embodiment of the present invention can prevent the key transaction elements from being tampered with during the transaction process. Its specific advantages are as follows: First, the token can effectively prevent phishing and SMS hijacking, avoid the security risks of current SMS authentication, and improve the security of financial services. Second, the token can generate a dynamic password for each transaction. The dynamic password is related to the transaction elements and is one-time, which prevents the transaction from being replayed and the key elements from being tampered with.

[0100] Furthermore, the token key is securely sent to the mobile banking client and bound to the hardware information. The dynamic token code is related to the user's transaction elements, effectively preventing the information from being tampered with and replayed during the transaction, and improving the security of data transactions.

[0101] The technical solution provided by the embodiment of the present invention can obtain the device information of the device that generates the preset interactive behavior when detecting the generation of the preset interactive behavior, and use it as the device information to be verified. Further, when the device information to be verified is consistent with the target device information pre-stored in the client, and the client includes the target token key, the target password can be generated based on the target token key, the device information to be verified, and the interactive data corresponding to the preset interactive behavior. Since the target device information is the device information stored when the target token key is generated, when the verification passes, it is first ensured that the data is issued based on the same device, thereby achieving the effect of ensuring data security. Furthermore, the target password and the interactive data can be sent to the target authentication server, so that when the target authentication server successfully verifies the target password, the target event corresponding to the interactive data can be executed. At this time, if the interactive data has not been tampered with, the corresponding event can be executed, thereby ensuring the effect of data processing security. Finally, after the target authentication server completes the target event, it can provide feedback information on the completion of the execution and display the target interface with the preset interactive behavior on the client, which solves the problem of data tampering during data processing or transmission in the prior art, resulting in the inability to guarantee data security, and achieves the effect of data security in the entire data processing process.

[0102] The following is an embodiment of an information tamper-proof method device provided by an embodiment of the present invention. The device and the information tamper-proof method of the above embodiments belong to the same inventive concept. For details not described in detail in the embodiment of the information tamper-proof method device, please refer to the embodiment of the above information tamper-proof method.

[0103] Figure 4 This is a structural diagram of an information tamper-proof method device provided in an embodiment of the present invention. The device specifically includes: a device information acquisition module 310, a target command generation module 320, a target event execution module 330 and an interface display module 340.

[0104] Among them, the device information acquisition module 310 is used to obtain the device information to be verified of the device to which it belongs when a preset interactive behavior is detected; the target command generation module 320 is used to generate a target command based on the target token key, the device information to be verified and the interactive data corresponding to the preset interactive behavior when the device information to be verified is consistent with the pre-stored target device information and includes a target token key; the target event execution module 330 is used to send the target command and the interactive data to the target authentication server, so as to execute the target event corresponding to the interactive data when the target command is successfully verified based on the target authentication server; the interface display module 340 is used to receive feedback information on the completion of the target event execution fed back by the target task server, and display the target interface of the successful execution of the preset interactive behavior.

[0105] On the basis of the above technical solution, the device further comprises:

[0106] A random number generation module, used to generate a random number, and encrypt the target device information of the device based on the random number to obtain encrypted data; and

[0107] An encryption module, used for encrypting the random number based on a built-in public key to obtain an encrypted random number;

[0108] A token key generation module is used to send the encrypted data and the encrypted random number to the first server, so that after decrypting the encrypted data and the encrypted random number based on the first server, the encrypted data and the encrypted random number are sent to the target authentication server to generate the target token key based on the target authentication server and feedback it.

[0109] Based on the above technical solutions, the token key generation module includes:

[0110] a random number generating unit, configured to decrypt the encrypted random number based on a private key corresponding to the public key built into the first server to obtain the random number;

[0111] An information sending unit is used to decrypt the encrypted data based on the random number to obtain the device information to be verified, and send the device information to be verified to the target authentication service end based on the first server.

[0112] Based on the above technical solutions, the token key generation module includes:

[0113] A token key generation unit, used to generate a token to be processed based on the target authentication server, and encrypt the token to be processed and the device information to be verified to obtain the target token key;

[0114] An information feedback unit is used to send the target token key to the first server based on the target authentication server, so that the first server encrypts the target token key based on the random number and then feeds back.

[0115] On the basis of the above technical solutions, the device further includes:

[0116] A decryption module, used for decrypting the encrypted target token key based on the random number to obtain the target token key;

[0117] The random number destruction unit is used to store the target token key and the target device information, and destroy the random number.

[0118] On the basis of the above technical solutions, the device further includes:

[0119] A token information regeneration module is used to regenerate and store the target token information corresponding to the device based on the device information to be verified, and re-execute the operation of displaying the target interface when the device information to be verified is inconsistent with the pre-stored target device information and / or the target token information is not stored.

[0120] On the basis of the above technical solutions, the token key generation module is also used to: use a preset encryption algorithm to encrypt the target token key, the device information to be verified and the interactive data to obtain the target password.

[0121] On the basis of the above technical solutions, the device further includes:

[0122] A secret code generation unit, configured to generate a plurality of secret codes to be used within an authentication time window based on the target authentication server, and determine whether the plurality of secret codes to be used include the target secret code;

[0123] An event verification unit is used to verify the target password successfully if the target password is included, and execute the target event corresponding to the interaction data.

[0124] The technical solution provided by the embodiment of the present invention can obtain the device information of the device that generates the preset interactive behavior when detecting the generation of the preset interactive behavior, and use it as the device information to be verified. Further, when the device information to be verified is consistent with the target device information pre-stored in the client, and the client includes the target token key, the target password can be generated based on the target token key, the device information to be verified, and the interactive data corresponding to the preset interactive behavior. Since the target device information is the device information stored when the target token key is generated, when the verification passes, it is first ensured that the data is issued based on the same device, thereby achieving the effect of ensuring data security. Furthermore, the target password and the interactive data can be sent to the target authentication server, so that when the target authentication server successfully verifies the target password, the target event corresponding to the interactive data can be executed. At this time, if the interactive data has not been tampered with, the corresponding event can be executed, thereby ensuring the effect of data processing security. Finally, after the target authentication server completes the target event, it can provide feedback information on the completion of the execution and display the target interface with the preset interactive behavior on the client, which solves the problem of data tampering during data processing or transmission in the prior art, resulting in the inability to guarantee data security, and achieves the effect of data security in the entire data processing process.

[0125] The information tamper-proof method device provided in the embodiment of the present invention can execute the information tamper-proof method provided in any embodiment of the present invention, and has the corresponding functional modules and beneficial effects for executing the information tamper-proof method.

[0126] It is worth noting that in the embodiment of the above-mentioned information anti-tampering method device, the various units and modules included are only divided according to functional logic, but are not limited to the above-mentioned division, as long as the corresponding functions can be achieved; in addition, the specific names of the functional units are only for the convenience of distinguishing each other, and are not used to limit the scope of protection of the present invention.

[0127] Figure 5 A schematic diagram of the structure of a server provided in an embodiment of the present invention. Figure 5 A block diagram of an exemplary server 12 suitable for use in implementing embodiments of the present invention is shown. Figure 5 The server 12 shown is only an example and should not bring any limitation to the functions and scope of use of the embodiments of the present invention.

[0128] like Figure 5 As shown, the server 12 is in the form of a general purpose computing device. The components of the server 12 may include, but are not limited to: one or more processors or processing units 16, a system memory 28, and a bus 18 that connects various system components (including the system memory 28 and the processing unit 16).

[0129] Bus 18 represents one or more of several types of bus structures, including a memory bus or memory controller, a peripheral bus, an accelerated graphics port, a processor or a local bus using any of a variety of bus architectures. By way of example, these architectures include, but are not limited to, an Industry Standard Architecture (ISA) bus, a Micro Channel Architecture (MAC) bus, an Enhanced ISA bus, a Video Electronics Standards Association (VESA) local bus, and a Peripheral Component Interconnect (PCI) bus.

[0130] The server 12 typically includes a variety of computer system readable media. These media can be any available media that can be accessed by the server 12, including volatile and non-volatile media, removable and non-removable media.

[0131] The system memory 28 may include computer system readable media in the form of volatile memory, such as random access memory (RAM) 30 and / or cache memory 32. The server 12 may further include other removable / non-removable, volatile / non-volatile computer system storage media. By way of example only, the storage system 34 may be used to read and write non-removable, non-volatile magnetic media ( Figure 5 not shown, usually called a "hard drive"). Although Figure 5 Not shown in the figure, a disk drive for reading and writing to a removable non-volatile disk (e.g., a "floppy disk"), and an optical disk drive for reading and writing to a removable non-volatile optical disk (e.g., a CD-ROM, a DVD-ROM, or other optical media) may be provided. In these cases, each drive may be connected to the bus 18 via one or more data medium interfaces. The system memory 28 may include at least one program product having a set (e.g., at least one) of program modules that are configured to perform the functions of the various embodiments of the present invention.

[0132] A program / utility 40 having a set (at least one) of program modules 42 may be stored, for example, in system memory 28, such program modules 42 including, but not limited to, an operating system, one or more application programs, other program modules, and program data, each of which or some combination may include an implementation of a network environment. Program modules 42 generally perform the functions and / or methods of the embodiments described herein.

[0133] The server 12 may also communicate with one or more external devices 14 (e.g., keyboards, pointing devices, displays 24, etc.), may communicate with one or more devices that enable a user to interact with the server 12, and / or may communicate with any device that enables the server 12 to communicate with one or more other computing devices (e.g., network cards, modems, etc.). Such communication may be performed via an input / output (I / O) interface 22. In addition, the server 12 may also communicate with one or more networks (e.g., local area networks (LANs), wide area networks (WANs), and / or public networks, such as the Internet) via a network adapter 20. As shown, the network adapter 20 communicates with other modules of the server 12 via a bus 18. It should be understood that, although not shown in the figure, other hardware and / or software modules may be used in conjunction with the server 12, including, but not limited to, microcode, device drivers, redundant processing units, external disk drive arrays, RAID systems, tape drives, and data backup storage systems.

[0134] The processing unit 16 executes various functional applications and data processing by running the program stored in the system memory 28, for example, implementing the steps of the information tamper-proof method provided in the first embodiment of the present invention, which includes:

[0135] When a preset interactive behavior is detected, the device information to be verified of the device to which it belongs is obtained;

[0136] When the device information to be verified is consistent with the pre-stored target device information and includes a target token key, generating a target secret code based on the target token key, the device information to be verified and the interaction data corresponding to the preset interaction behavior;

[0137] Sending the target secret code and the interaction data to a target authentication server, so that when the target secret code is successfully verified by the target authentication server, a target event corresponding to the interaction data is executed;

[0138] Receive feedback information of target event execution completion fed back by the target authentication server, and display the target interface of successful execution of the preset interactive behavior.

[0139] Of course, those skilled in the art can understand that the processor can also implement the technical solution of the information tamper-proof method provided by any embodiment of the present invention.

[0140] This embodiment provides a computer-readable storage medium, on which a computer program is stored. When the program is executed by a processor, the steps of the information tamper-proof method provided in the above embodiment of the present invention are implemented. The method includes:

[0141] When a preset interactive behavior is detected, the device information to be verified of the device to which it belongs is obtained;

[0142] When the device information to be verified is consistent with the pre-stored target device information and includes a target token key, generating a target secret code based on the target token key, the device information to be verified and the interaction data corresponding to the preset interaction behavior;

[0143] Sending the target secret code and the interaction data to a target authentication server, so that when the target secret code is successfully verified by the target authentication server, a target event corresponding to the interaction data is executed;

[0144] Receive feedback information of target event execution completion fed back by the target authentication server, and display the target interface of successful execution of the preset interactive behavior.

[0145] The computer storage medium of the embodiment of the present invention can adopt any combination of one or more computer-readable media. The computer-readable medium can be a computer-readable signal medium or a computer-readable storage medium. The computer-readable storage medium can be, for example, but not limited to, an electrical, magnetic, optical, electromagnetic, infrared, or semiconductor system, device or device, or any combination of the above. More specific examples (non-exhaustive list) of computer-readable storage media include: an electrical connection with one or more wires, a portable computer disk, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), an optical fiber, a portable compact disk read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination of the above. In this document, a computer-readable storage medium can be any tangible medium containing or storing a program, which can be used by an instruction execution system, device or device or used in combination with it.

[0146] Computer-readable signal media may include data signals propagated in baseband or as part of a carrier wave, which carry computer-readable program code. Such propagated data signals may take a variety of forms, including but not limited to electromagnetic signals, optical signals, or any suitable combination of the above. Computer-readable signal media may also be any computer-readable medium other than a computer-readable storage medium, which may send, propagate, or transmit a program for use by or in conjunction with an instruction execution system, apparatus, or device.

[0147] Program code embodied on a computer readable medium may be transmitted using any appropriate medium, including but not limited to wireless, wireline, optical fiber cable, RF, etc., or any suitable combination of the foregoing.

[0148] Computer program code for performing the operation of embodiments of the present invention may be written in one or more programming languages ​​or a combination thereof, including object-oriented programming languages, such as Java, Smalltalk, C++, and conventional procedural programming languages, such as "C" or similar programming languages. The program code may be executed entirely on the user's computer, partially on the user's computer, as an independent software package, partially on the user's computer and partially on a remote computer, or entirely on a remote computer or server. In the case of a remote computer, the remote computer may be connected to the user's computer via any type of network, including a local area network (LAN) or a wide area network (WAN), or may be connected to an external computer (e.g., via the Internet using an Internet service provider).

[0149] Note that the above are only preferred embodiments of the present invention and the technical principles used. Those skilled in the art will understand that the present invention is not limited to the specific embodiments herein, and that various obvious changes, readjustments and substitutions can be made by those skilled in the art without departing from the scope of protection of the present invention. Therefore, although the present invention has been described in more detail through the above embodiments, the present invention is not limited to the above embodiments, and may include more other equivalent embodiments without departing from the concept of the present invention, and the scope of the present invention is determined by the scope of the appended claims.

Claims

1. An information tamper-proof method, characterized in that: include: When a preset interactive behavior is detected, the device information to be verified of the device to which it belongs is obtained; When the device information to be verified is consistent with the pre-stored target device information and includes a target token key, generating a target secret code based on the target token key, the device information to be verified and the interaction data corresponding to the preset interaction behavior; Sending the target secret code and the interaction data to a target authentication server, so that when the target secret code is successfully verified by the target authentication server, a target event corresponding to the interaction data is executed; Receive feedback information of target event execution completion fed back by the target authentication server, and display the target interface of successful execution of the preset interactive behavior.

2. The method according to claim 1, characterized in that The method further comprises: When it is detected that the preset condition is met, a random number is generated, and the target device information of the device to which it belongs is encrypted based on the random number to obtain encrypted data; and Encrypting the random number based on the built-in public key to obtain an encrypted random number; Send the encrypted data and the encrypted random number to the first server, so that after the encrypted data and the encrypted random number are decrypted based on the first server, they are sent to the target authentication server, so that the target token key is generated based on the target authentication server and fed back; The target token key is received and cached.

3. The method according to claim 2, characterized in that The decrypting the encrypted data and the encrypted random number based on the first server and sending the decrypted data and the encrypted random number to the target authentication server includes: Decrypting the encrypted random number based on a private key corresponding to the public key built into the first server to obtain the random number; The encrypted data is decrypted based on the random number to obtain the device information to be verified, and the device information to be verified is sent to the target authentication service end based on the first server.

4. The method according to claim 2, characterized in that: Generating the target token key based on the target authentication server includes: Generate a token to be processed based on the target authentication server, and encrypt the token to be processed and the device information to be verified to obtain the target token key; The target token key is sent to the first server based on the target authentication service end, so that the first server encrypts the target token key based on the random number and sends it to the client.

5. The method according to claim 4, characterized in that After receiving the encrypted target token key sent by the first server, the method further includes: Decryption processing of the target token key encrypted based on the random number to obtain the target token key; The target token key and the target device information are stored, and the random number is destroyed.

6. The method according to claim 2, characterized in that The method further comprises: When the device information to be verified is inconsistent with the pre-stored target device information and / or the target token key is not stored, the target token key corresponding to the device is regenerated and stored based on the device information to be verified, and the operation of displaying the target interface is re-executed.

7. The method according to claim 1, characterized in that The generating a target secret code based on the target token key, the device information to be verified, and the interaction data corresponding to the preset interaction behavior includes: The target token key, the device information to be verified and the interactive data are encrypted using a preset encryption algorithm to obtain the target secret code.

8. The method according to claim 1, characterized in that When the target password verification based on the target authentication server is successful, executing the target event corresponding to the interaction data includes: Generate multiple secret codes to be used within the authentication time window based on the target authentication server, and determine whether the multiple secret codes to be used include the target secret code; If the target password is included, the target password is verified successfully and the target event corresponding to the interaction data is executed.

9. A computer-readable storage medium having a computer program stored thereon, characterized in that: When the program is executed by a processor, the information tamper-proofing method as described in any one of claims 1 to 8 is implemented.

10. A computer program product, comprising a computer program, characterized in that When the computer program is executed by a processor, the computer program implements the information tamper-proofing method as described in any one of claims 1 to 8.

Images