Cipher module verification method and device

Abstract

The invention provides a password module verification method and device, relates to the technical field of testing, and can be used in the financial field or other technical fields. The method comprises the following steps: determining a plurality of threads respectively corresponding to each type of cryptographic algorithm in a cryptographic module, and determining a network communication parameter configuration item respectively corresponding to each thread according to network communication configuration information to be verified; respectively sending a data acquisition request to a server through each thread; and if a first data acquisition response message returned by the server according to the data acquisition request is received through all threads, determining that the functional verification of the password module is completed. The device executes the method. According to the password module verification method and device provided by the embodiment of the invention, the verification working efficiency of the password module can be improved.

Description

Technical Field

[0001] The present invention relates to the field of testing technology, and in particular to a verification method and device for a password module. Background Art

[0002] The cryptographic module is obtained by abstracting the specific cryptographic product through a formal language. The security of the cryptographic product is determined by evaluating the basic items, functional items, security protection items, and management items of the cryptographic module and outputting the evaluation results corresponding to each evaluation method.

[0003] Although the existing technology guarantees the security of the cryptographic module, it cannot guarantee whether the cryptographic module can be actually used in production and whether it is compatible with the host application. In addition, in order to ensure that the cryptographic module is compatible with the host application, a large amount of testing and verification work is required. These testing and verification work are independent of each other, and it is time-consuming and labor-intensive to conduct separate testing and verification one by one, making the verification work inefficient. Summary of the invention

[0004] In view of the problems in the prior art, the embodiments of the present invention provide a method and device for verifying a password module, which can at least partially solve the problems in the prior art.

[0005] In one aspect, the present invention provides a method for verifying a password module, comprising:

[0006] Determine a plurality of threads corresponding to each type of cryptographic algorithm in the cryptographic module, and determine a network communication parameter configuration item corresponding to each thread according to the network communication configuration information to be verified; each network communication parameter configuration item corresponding to each thread is a random configuration parameter generated according to each type of network communication configuration information to be verified;

[0007] Sending a data acquisition request to the server through each thread; the data acquisition request carries each type of cryptographic algorithm identification and network communication parameter configuration items; the server is pre-set with a service access link corresponding to each type of cryptographic algorithm;

[0008] If the first data acquisition response message returned by the server according to the data acquisition request is received through all threads, it is determined that the functional verification of the cryptographic module is completed; the first data acquisition response message carries the network communication parameter configuration item that determines the configuration to take effect.

[0009] The step of determining the network communication parameter configuration items corresponding to each thread according to the network communication configuration information to be verified includes:

[0010] The Header configuration parameters, Cookies configuration parameters and cache configuration parameters corresponding to each thread are determined according to the network communication configuration information to be verified.

[0011] The verification method of the password module further includes:

[0012] If it is determined that there is at least one first target thread that receives the second data acquisition response message returned by the server according to the data acquisition request, it is determined that the functional verification of the cryptographic module has not been completed; the second data acquisition response message carries a network communication parameter configuration item that is determined to be ineffective.

[0013] The verification method of the password module further includes:

[0014] The second data acquisition response message is parsed to obtain the network communication parameter configuration item whose configuration has not taken effect, and the target network communication configuration information corresponding to the network communication parameter configuration item whose configuration has not taken effect is separately functionally verified.

[0015] The verification method of the password module further includes:

[0016] If it is determined that there is at least one second target thread that cannot receive the data acquisition response message returned by the server according to the data acquisition request, it is determined that the functional verification of the cryptographic module is not completed.

[0017] The verification method of the password module further includes:

[0018] The target data acquisition request corresponding to the unreceivable data acquisition response message is parsed to obtain a target cryptographic algorithm, and functional verification is performed on the target cryptographic algorithm separately.

[0019] The verification method of the password module further includes:

[0020] Verify the timeout functionality of network communications.

[0021] In one aspect, the present invention provides a verification device for a password module, comprising:

[0022] A determination unit is used to determine a plurality of threads corresponding to each type of cryptographic algorithm in the cryptographic module, and determine a network communication parameter configuration item corresponding to each thread according to the network communication configuration information to be verified; each network communication parameter configuration item corresponding to each thread is a random configuration parameter generated according to each type of network communication configuration information to be verified;

[0023] A sending unit, used to send a data acquisition request to the server through each thread; the data acquisition request carries each type of cryptographic algorithm identifier and network communication parameter configuration items; the server is pre-set with a service access link corresponding to each type of cryptographic algorithm;

[0024] A verification unit is used to determine that the functional verification of the cryptographic module is completed if a first data acquisition response message returned by the server according to the data acquisition request is received through all threads; the first data acquisition response message carries a network communication parameter configuration item that determines that the configuration is effective.

[0025] In another aspect, an embodiment of the present invention provides an electronic device, including: a processor, a memory, and a bus, wherein:

[0026] The processor and the memory communicate with each other via the bus;

[0027] The memory stores program instructions that can be executed by the processor, and the processor calls the program instructions to execute the following method:

[0028] Determine a plurality of threads corresponding to each type of cryptographic algorithm in the cryptographic module, and determine a network communication parameter configuration item corresponding to each thread according to the network communication configuration information to be verified; each network communication parameter configuration item corresponding to each thread is a random configuration parameter generated according to each type of network communication configuration information to be verified;

[0029] Sending a data acquisition request to the server through each thread; the data acquisition request carries each type of cryptographic algorithm identification and network communication parameter configuration items; the server is pre-set with a service access link corresponding to each type of cryptographic algorithm;

[0030] If the first data acquisition response message returned by the server according to the data acquisition request is received through all threads, it is determined that the functional verification of the cryptographic module is completed; the first data acquisition response message carries the network communication parameter configuration item that determines the configuration to take effect.

[0031] An embodiment of the present invention provides a non-transitory computer-readable storage medium, including:

[0032] The non-transitory computer-readable storage medium stores computer instructions, which cause the computer to execute the following method:

[0033] Determine a plurality of threads corresponding to each type of cryptographic algorithm in the cryptographic module, and determine a network communication parameter configuration item corresponding to each thread according to the network communication configuration information to be verified; each network communication parameter configuration item corresponding to each thread is a random configuration parameter generated according to each type of network communication configuration information to be verified;

[0034] Sending a data acquisition request to the server through each thread; the data acquisition request carries each type of cryptographic algorithm identification and network communication parameter configuration items; the server is pre-set with a service access link corresponding to each type of cryptographic algorithm;

[0035] If the first data acquisition response message returned by the server according to the data acquisition request is received through all threads, it is determined that the functional verification of the cryptographic module is completed; the first data acquisition response message carries the network communication parameter configuration item that determines the configuration to take effect.

[0036] The verification method and device of the password module provided by the embodiment of the present invention determine multiple threads corresponding to each type of password algorithm in the password module, and determine the network communication parameter configuration items corresponding to each thread according to the network communication configuration information to be verified; each network communication parameter configuration item corresponding to each thread is a random configuration parameter generated according to each type of network communication configuration information to be verified; a data acquisition request is sent to the server through each thread; the data acquisition request carries each type of password algorithm identifier and network communication parameter configuration item; the server is pre-set with a service access link corresponding to each type of password algorithm; if the first data acquisition response message returned by the server according to the data acquisition request is received through all threads, it is determined that the functional verification of the password module is completed; the first data acquisition response message carries the network communication parameter configuration item that determines the configuration to take effect, which can improve the verification work efficiency of the password module. BRIEF DESCRIPTION OF THE DRAWINGS

[0037] In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the following briefly introduces the drawings required for use in the embodiments or the prior art descriptions. Obviously, the drawings described below are only some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without creative work. In the drawings:

[0038] Figure 1 It is a flowchart of a verification method of a password module provided by an embodiment of the present invention.

[0039] Figure 2 It is a schematic diagram of the structure of a verification device for a password module provided by an embodiment of the present invention.

[0040] Figure 3 A schematic diagram of the physical structure of an electronic device provided by an embodiment of the present invention. DETAILED DESCRIPTION

[0041] In order to make the purpose, technical scheme and advantages of the embodiments of the present invention more clear, the embodiments of the present invention are further described in detail below in conjunction with the accompanying drawings. Here, the illustrative embodiments of the present invention and their descriptions are used to explain the present invention, but are not intended to limit the present invention. It should be noted that, in the absence of conflict, the embodiments in this application and the features in the embodiments can be combined with each other arbitrarily.

[0042] Figure 1 FIG. 1 is a flow chart of a verification method of a password module provided by an embodiment of the present invention. Figure 1 As shown, the verification method of the password module provided by the embodiment of the present invention includes:

[0043] Step S1: determine multiple threads corresponding to each type of cryptographic algorithm in the cryptographic module, and determine the network communication parameter configuration items corresponding to each thread according to the network communication configuration information to be verified; each network communication parameter configuration item corresponding to each thread is a random configuration parameter generated according to each type of network communication configuration information to be verified.

[0044] Step S2: Sending a data acquisition request to the server through each thread; the data acquisition request carries each type of cryptographic algorithm identification and network communication parameter configuration items; the server is pre-set with a service access link corresponding to each type of cryptographic algorithm.

[0045] Step S3: If the first data acquisition response message returned by the server according to the data acquisition request is received through all threads, it is determined that the functional verification of the cryptographic module is completed; the first data acquisition response message carries the network communication parameter configuration items that determine the configuration to take effect.

[0046] In the above step S1, the device determines multiple threads corresponding to each type of cryptographic algorithm in the cryptographic module, and determines the network communication parameter configuration items corresponding to each thread according to the network communication configuration information to be verified; each network communication parameter configuration item corresponding to each thread is a random configuration parameter generated according to each type of network communication configuration information to be verified. The device can be a computer device that executes the method, etc., and can specifically include a client. It should be noted that the information collected in the embodiments of the present invention is information and data authorized by the user or fully authorized by all parties, and the collection, storage, use, processing, transmission, provision, disclosure and application of the relevant data comply with the relevant laws, regulations and standards of the relevant countries and regions, take necessary confidentiality measures, do not violate public order and good customs, and provide corresponding operation entrances for users to choose to authorize or refuse.

[0047] Provide users with corresponding operation entrances for them to choose to agree or reject the automated decision-making results; if the user chooses to reject, the expert decision-making process will be entered.

[0048] Taking two types of cryptographic algorithms, such as the Elliptic Curve Cryptography (ECC) algorithm and the ECDHE encryption algorithm, which are variants of the Elliptic Curve Diffie-Hellman (ECDH) key exchange, the characteristics of the Elliptic Curve Cryptography (ECC) are utilized to determine two threads, thread C1 corresponding to the ECC algorithm, and thread C2 corresponding to the ECDHE algorithm.

[0049] The network communication configuration information to be verified includes Header configuration information, Cookies configuration information, and cache configuration information.

[0050] Header configuration information refers to adding one or more parameter configurations to the Header parameters when verifying the network communication function. For example, after setting parameters such as User-Agent UA and ContentType, a data acquisition request is sent, and a tool is used to capture packets to determine whether the Header parameters of the current data acquisition request contain the corresponding configuration.

[0051] Cookies configuration information refers to adding a new cookie when verifying the network communication function, then sending a data acquisition request, and using a tool to capture the package to determine whether the current data acquisition request contains the newly added cookies information.

[0052] Cache configuration information refers to setting different cache types when verifying the network communication function. For example, if you set not to use cache, use the tool to capture packets to determine whether the data acquisition request will be resent each time the data acquisition function is executed. If you set to use cache, use the tool to capture packets to determine whether the data acquisition request will not be resent for subsequent executions of the data acquisition function except for the first request.

[0053] Taking the Header configuration information as an example, the random configuration parameters generated corresponding to the network communication configuration information to be verified are the random configuration parameter a1 corresponding to the UA and the random configuration parameter a2 corresponding to the ContentType.

[0054] Taking thread C1 as an example, each network communication parameter configuration item corresponding thereto is the above-mentioned a1, a2, the random configuration parameter b1 of cookies, and the random configuration parameter c1 indicating that the cache is not used.

[0055] Similarly, taking thread C2 as an example, each network communication parameter configuration item corresponding thereto may be different from the above a1, a2, b1 and c1. It should be noted that due to the random generation of configuration parameters, there is also the possibility of being the same as the above a1, a2, b1 and c1.

[0056] In the above step S2, the device sends a data acquisition request to the server through each thread; the data acquisition request carries each type of cryptographic algorithm identifier and network communication parameter configuration items; the server is pre-set with a service access link corresponding to each type of cryptographic algorithm. By sending a data acquisition request to the server through each thread, parallel verification of cryptographic modules equal to the number of cryptographic algorithm types can be achieved. Each type of cryptographic algorithm identifier can be specifically a cryptographic algorithm name, such as the above-mentioned ECC algorithm and ECDHE algorithm.

[0057] Since the server has pre-set service access links corresponding to each type of cryptographic algorithm, only data acquisition requests carrying the same cryptographic algorithm as that type of cryptographic algorithm are allowed to access the service access link, and then there will be corresponding data acquisition response messages.

[0058] In the above step S3, if the device receives the first data acquisition response message returned by the server according to the data acquisition request through all threads, it is determined that the functional verification of the password module is completed; the first data acquisition response message carries the network communication parameter configuration item for determining the configuration to take effect. The server receives the network communication parameter configuration item carried in the data acquisition request, and can perform parameter configuration according to the network communication parameter configuration item. After the configuration is successful, it can be considered that the configuration is effective. If the configuration is unsuccessful, it can be considered that the configuration is not effective. As for the reason why the configuration is not effective, it can reflect the poor compatibility of the password module functional verification to a certain extent.

[0059] If all threads receive the first data acquisition response message returned by the server according to the data acquisition request, it means that both the algorithm function verification and the network communication parameter function verification of the cryptographic module have passed.

[0060] The verification method of the password module also includes:

[0061] If it is determined that there is at least one first target thread that receives the second data acquisition response message returned by the server according to the data acquisition request, it is determined that the functional verification of the cryptographic module has not been completed; the second data acquisition response message carries a network communication parameter configuration item that is determined to be ineffective.

[0062] The verification method of the password module also includes:

[0063] The second data acquisition response message is parsed to obtain the network communication parameter configuration item for which the configuration has not taken effect, and a functional verification is separately performed on the target network communication configuration information corresponding to the network communication parameter configuration item for which the configuration has not taken effect. Referring to the above description, if the network communication parameter configuration item for which the configuration has not taken effect carried in the second data acquisition response message received by C1 is c1, it means that the setting of not using cache has not taken effect, c1 is obtained by parsing, and a functional verification is separately performed on the setting of not using cache. If the functional verification is passed separately, it is determined that it is a compatibility issue, and subsequent improvements can be made from the aspect of solving the compatibility issue.

[0064] If the functional verification fails alone, it is determined to be a functional verification problem, and subsequent improvements can be made by not using cache configuration.

[0065] The verification method of the password module also includes:

[0066] If it is determined that there is at least one second target thread that cannot receive the data acquisition response message returned by the server according to the data acquisition request, it is determined that the functional verification of the cryptographic module is not completed.

[0067] The verification method of the password module also includes:

[0068] Parse the target data acquisition request corresponding to the data acquisition response message that cannot be received, obtain the target cryptographic algorithm, and perform functional verification on the target cryptographic algorithm separately. Referring to the above description, if C2 cannot receive the data acquisition response message, it means that the ECDHE algorithm is not effective, that is, the cryptographic algorithm functional verification of the cryptographic module has not passed.

[0069] Parse the data acquisition request corresponding to C2, obtain the ECDHE algorithm, and perform functional verification on the target cryptographic algorithm separately.

[0070] The specific instructions are as follows:

[0071] Taking the ECDHE algorithm as an example, first set the server to only support the ECDHE algorithm to interact with the server, and then use the "network request image resource" function on the client to verify whether it can successfully obtain the image resources sent by the server. At the same time, use the tool to capture the packet to determine whether the current request uses the ECDHE algorithm. Other algorithms are also verified in this way.

[0072] The verification method of the password module also includes:

[0073] Verify the timeout function of network communication. Instructions are as follows:

[0074] In the client application, set the timeout of the current request function to 1s and 5s respectively, and set the request URL of the image resource to the error URL. Verify whether the function reports a timeout error after 1s and 5s respectively. If an error is reported, it can be verified that the configuration is effective.

[0075] After completing functional verification, software compatibility verification, hardware compatibility verification and performance verification can also be performed. There is no specific limitation on the time sequence of the above three types of verification.

[0076] They are described as follows:

[0077] Software compatibility verification: Use different client apps (such as different apps, different versions of the same app) to integrate and use the password module, execute different functions (such as "network request for image resources", "login", "upload files", "submit forms", etc.), and verify whether all functions can be successfully executed. For this part of the test, you can write a test script, write all the processes operated on the App into the test script according to the instruction set, and after the computer PC and the client are connected through a data cable or hub, the instructions of the test script can be sent from the computer to the client for pass testing. This method supports multi-process automated testing.

[0078] Hardware compatibility verification: Use mobile phones of different models and operating system versions, install the client app integrated with the cryptographic module, and execute the network request function to verify whether the transaction function of the app on all mobile phones is available. This part of the test is similar to the parallel test method for verifying software compatibility.

[0079] Performance verification: The performance part mainly considers whether the application after integrating the cryptographic module is the same as the same application without the cryptographic module integrated in terms of performance:

[0080] (1) CPU usage: When executing the same transaction function, use the built-in performance tools such as Xcode and Android studio to view the changes in CPU usage before and after integration.

[0081] (2) Memory usage: When executing the same transaction function, use the built-in performance tools of Xcode, Android studio, etc. to view the changes in memory usage before and after integration.

[0082] The verification method of the password module provided by the embodiment of the present invention determines multiple threads corresponding to each type of password algorithm in the password module, and determines the network communication parameter configuration items corresponding to each thread according to the network communication configuration information to be verified; each network communication parameter configuration item corresponding to each thread is a random configuration parameter generated according to each type of network communication configuration information to be verified; a data acquisition request is sent to the server through each thread; the data acquisition request carries each type of password algorithm identifier and network communication parameter configuration item; the server is pre-set with a service access link corresponding to each type of password algorithm; if the first data acquisition response message returned by the server according to the data acquisition request is received through all threads, it is determined that the functional verification of the password module is completed; the first data acquisition response message carries the network communication parameter configuration item that determines the configuration to take effect, which can improve the verification work efficiency of the password module.

[0083] Further, the determining of the network communication parameter configuration items corresponding to each thread respectively according to the network communication configuration information to be verified includes:

[0084] The Header configuration parameters, Cookies configuration parameters and cache configuration parameters corresponding to each thread are determined according to the network communication configuration information to be verified. The above embodiments can be referred to for explanation and will not be described in detail.

[0085] The password module verification method provided by the embodiment of the present invention can comprehensively determine the network communication parameter configuration items.

[0086] Furthermore, the verification method of the password module also includes:

[0087] If it is determined that at least one first target thread receives the second data acquisition response message returned by the server according to the data acquisition request, it is determined that the functional verification of the password module has not been completed; the second data acquisition response message carries a network communication parameter configuration item that is determined to be ineffective. The above embodiment can be referred to for explanation and will not be repeated here.

[0088] The password module verification method provided by the embodiment of the present invention can further accurately perform functional verification of the password module.

[0089] Furthermore, the verification method of the password module also includes:

[0090] The second data acquisition response message is parsed to obtain the ineffective network communication parameter configuration item, and the target network communication configuration information corresponding to the ineffective network communication parameter configuration item is functionally verified separately.

[0091] The password module verification method provided by the embodiment of the present invention can further accurately perform functional verification of the password module.

[0092] Furthermore, the verification method of the password module also includes:

[0093] If it is determined that at least one second target thread cannot receive the data acquisition response message returned by the server according to the data acquisition request, it is determined that the functional verification of the password module is not completed.

[0094] The password module verification method provided by the embodiment of the present invention can further accurately perform functional verification of the password module.

[0095] Furthermore, the verification method of the password module also includes:

[0096] The target data acquisition request corresponding to the unreceivable data acquisition response message is parsed to obtain the target cryptographic algorithm, and the functional verification of the target cryptographic algorithm is performed separately. The above-mentioned embodiments can be referred to for explanation and will not be described in detail.

[0097] The password module verification method provided by the embodiment of the present invention can further accurately perform functional verification of the password module.

[0098] Furthermore, the verification method of the password module also includes:

[0099] Verify the timeout function of network communication. Please refer to the above embodiment for description, which will not be repeated here.

[0100] The password module verification method provided by the embodiment of the present invention can further comprehensively verify the functionality of the password module.

[0101] It should be noted that the verification method of the password module provided in the embodiment of the present invention can be used in the financial field, and can also be used in any technical field other than the financial field. The embodiment of the present invention does not limit the application field of the verification method of the password module.

[0102] Figure 2 FIG. 1 is a schematic diagram of a structure of a verification device for a password module provided by an embodiment of the present invention. Figure 2 As shown, the verification device of the password module provided by the embodiment of the present invention includes a determination unit 201, a sending unit 202 and a verification unit 203, wherein:

[0103] The determination unit 201 is used to determine multiple threads corresponding to each type of cryptographic algorithm in the cryptographic module, and determine the network communication parameter configuration items corresponding to each thread according to the network communication configuration information to be verified; each network communication parameter configuration item corresponding to each thread is a random configuration parameter generated according to each type of network communication configuration information to be verified; the sending unit 202 is used to send a data acquisition request to the server through each thread; the data acquisition request carries each type of cryptographic algorithm identifier and the network communication parameter configuration item; the server is pre-set with a service access link corresponding to each type of cryptographic algorithm; the verification unit 203 is used to determine that the functional verification of the cryptographic module is completed if the first data acquisition response message returned by the server according to the data acquisition request is received through all threads; the first data acquisition response message carries the network communication parameter configuration item that determines the configuration to take effect.

[0104] Specifically, the determination unit 201 in the device is used to determine multiple threads corresponding to each type of cryptographic algorithm in the cryptographic module, and determine the network communication parameter configuration items corresponding to each thread according to the network communication configuration information to be verified; each network communication parameter configuration item corresponding to each thread is a random configuration parameter generated according to each type of network communication configuration information to be verified; the sending unit 202 is used to send a data acquisition request to the server through each thread; the data acquisition request carries each type of cryptographic algorithm identifier and the network communication parameter configuration item; the server is pre-set with a service access link corresponding to each type of cryptographic algorithm; the verification unit 203 is used to determine that the functional verification of the cryptographic module is completed if the first data acquisition response message returned by the server according to the data acquisition request is received through all threads; the first data acquisition response message carries the network communication parameter configuration item that determines the configuration to take effect.

[0105] The verification device of the password module provided by the embodiment of the present invention determines multiple threads corresponding to each type of password algorithm in the password module, and determines the network communication parameter configuration items corresponding to each thread according to the network communication configuration information to be verified; each network communication parameter configuration item corresponding to each thread is a random configuration parameter generated according to each type of network communication configuration information to be verified; a data acquisition request is sent to the server through each thread; the data acquisition request carries each type of password algorithm identifier and network communication parameter configuration item; the server is pre-set with a service access link corresponding to each type of password algorithm; if the first data acquisition response message returned by the server according to the data acquisition request is received through all threads, it is determined that the functional verification of the password module is completed; the first data acquisition response message carries the network communication parameter configuration item that determines the configuration to take effect, which can improve the verification work efficiency of the password module.

[0106] Furthermore, the determining unit 201 is specifically configured to:

[0107] The Header configuration parameters, Cookies configuration parameters and cache configuration parameters corresponding to each thread are determined according to the network communication configuration information to be verified.

[0108] The verification device of the password module provided by the embodiment of the present invention can comprehensively determine the network communication parameter configuration items.

[0109] Furthermore, the verification device of the password module is also used for:

[0110] If it is determined that there is at least one first target thread that receives the second data acquisition response message returned by the server according to the data acquisition request, it is determined that the functional verification of the cryptographic module has not been completed; the second data acquisition response message carries a network communication parameter configuration item that is determined to be ineffective.

[0111] The password module verification device provided by the embodiment of the present invention can further accurately perform functional verification of the password module.

[0112] Furthermore, the verification device of the password module is also used for:

[0113] The second data acquisition response message is parsed to obtain the network communication parameter configuration item whose configuration has not taken effect, and the target network communication configuration information corresponding to the network communication parameter configuration item whose configuration has not taken effect is separately functionally verified.

[0114] The password module verification device provided by the embodiment of the present invention can further accurately perform functional verification of the password module.

[0115] Furthermore, the verification device of the password module is also used for:

[0116] If it is determined that there is at least one second target thread that cannot receive the data acquisition response message returned by the server according to the data acquisition request, it is determined that the functional verification of the cryptographic module is not completed.

[0117] The password module verification device provided by the embodiment of the present invention can further accurately perform functional verification of the password module.

[0118] Furthermore, the verification device of the password module is also used for:

[0119] The target data acquisition request corresponding to the unreceivable data acquisition response message is parsed to obtain a target cryptographic algorithm, and functional verification is performed on the target cryptographic algorithm separately.

[0120] The password module verification device provided by the embodiment of the present invention can further accurately perform functional verification of the password module.

[0121] Furthermore, the verification device of the password module is also used for:

[0122] Verify the timeout functionality of network communications.

[0123] The password module verification device provided by the embodiment of the present invention can further perform comprehensive functional verification of the password module.

[0124] The embodiment of the verification device of the password module provided by the embodiment of the present invention can be specifically used to execute the processing flow of the above-mentioned method embodiments. Its functions are not repeated here, and reference can be made to the detailed description of the above-mentioned method embodiments.

[0125] Figure 3 A schematic diagram of the physical structure of an electronic device provided in an embodiment of the present invention, such as Figure 3 As shown, the electronic device includes: a processor (processor) 301, a memory (memory) 302 and a bus 303;

[0126] The processor 301 and the memory 302 communicate with each other via a bus 303;

[0127] The processor 301 is used to call the program instructions in the memory 302 to execute the methods provided by the above method embodiments, for example, including:

[0128] Determine a plurality of threads corresponding to each type of cryptographic algorithm in the cryptographic module, and determine a network communication parameter configuration item corresponding to each thread according to the network communication configuration information to be verified; each network communication parameter configuration item corresponding to each thread is a random configuration parameter generated according to each type of network communication configuration information to be verified;

[0129] Sending a data acquisition request to the server through each thread; the data acquisition request carries each type of cryptographic algorithm identification and network communication parameter configuration items; the server is pre-set with a service access link corresponding to each type of cryptographic algorithm;

[0130] If the first data acquisition response message returned by the server according to the data acquisition request is received through all threads, it is determined that the functional verification of the cryptographic module is completed; the first data acquisition response message carries the network communication parameter configuration item that determines the configuration to take effect.

[0131] This embodiment discloses a computer program product, which includes a computer program stored on a non-transitory computer-readable storage medium. The computer program includes program instructions. When the program instructions are executed by a computer, the computer can perform the methods provided by the above method embodiments, for example, including:

[0132] Determine a plurality of threads corresponding to each type of cryptographic algorithm in the cryptographic module, and determine a network communication parameter configuration item corresponding to each thread according to the network communication configuration information to be verified; each network communication parameter configuration item corresponding to each thread is a random configuration parameter generated according to each type of network communication configuration information to be verified;

[0133] Sending a data acquisition request to the server through each thread; the data acquisition request carries each type of cryptographic algorithm identification and network communication parameter configuration items; the server is pre-set with a service access link corresponding to each type of cryptographic algorithm;

[0134] If the first data acquisition response message returned by the server according to the data acquisition request is received through all threads, it is determined that the functional verification of the cryptographic module is completed; the first data acquisition response message carries the network communication parameter configuration item that determines the configuration to take effect.

[0135] This embodiment provides a computer-readable storage medium, wherein the computer-readable storage medium stores a computer program, wherein the computer program enables the computer to execute the methods provided by the above method embodiments, for example, including:

[0136] Determine a plurality of threads corresponding to each type of cryptographic algorithm in the cryptographic module, and determine a network communication parameter configuration item corresponding to each thread according to the network communication configuration information to be verified; each network communication parameter configuration item corresponding to each thread is a random configuration parameter generated according to each type of network communication configuration information to be verified;

[0137] Sending a data acquisition request to the server through each thread; the data acquisition request carries each type of cryptographic algorithm identification and network communication parameter configuration items; the server is pre-set with a service access link corresponding to each type of cryptographic algorithm;

[0138] If the first data acquisition response message returned by the server according to the data acquisition request is received through all threads, it is determined that the functional verification of the cryptographic module is completed; the first data acquisition response message carries the network communication parameter configuration item that determines the configuration to take effect.

[0139] Those skilled in the art will appreciate that embodiments of the present invention may be provided as methods, systems, or computer program products. Therefore, the present invention may take the form of a complete hardware embodiment, a complete software embodiment, or an embodiment combining software and hardware. Moreover, the present invention may take the form of a computer program product implemented on one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) containing computer-usable program code.

[0140] The present invention is described with reference to flowcharts and / or block diagrams of methods, devices (systems), and computer program products according to embodiments of the present invention. It should be understood that each process and / or block in the flowchart and / or block diagram, as well as the combination of processes and / or blocks in the flowchart and / or block diagram, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, an embedded processor, or other programmable data processing device to produce a machine, so that the instructions executed by the processor of the computer or other programmable data processing device generate instructions for implementing the processes in the flowchart and / or block diagram. Figure 1 A process or multiple processes and / or boxes Figure 1 A device that provides the functions specified in a block or multiple blocks.

[0141] These computer program instructions may also be stored in a computer-readable memory capable of directing a computer or other programmable data processing device to operate in a specific manner, so that the instructions stored in the computer-readable memory produce an article of manufacture comprising an instruction device, which implements the process Figure 1 A process or multiple processes and / or boxes Figure 1 A function specified in one or more boxes.

[0142] These computer program instructions can also be loaded onto a computer or other programmable data processing device so that a series of operating steps are executed on the computer or other programmable device to produce a computer-implemented process, thereby providing instructions for implementing the process. Figure 1 A process or multiple processes and / or boxes Figure 1 The steps for the functions specified in one or more boxes.

[0143] In the description of this specification, the description with reference to the terms "one embodiment", "a specific embodiment", "some embodiments", "for example", "example", "specific example", or "some examples" means that the specific features, structures, materials or characteristics described in conjunction with the embodiment or example are included in at least one embodiment or example of the present invention. In this specification, the schematic representation of the above terms does not necessarily refer to the same embodiment or example. Moreover, the specific features, structures, materials or characteristics described may be combined in any one or more embodiments or examples in a suitable manner.

[0144] The specific embodiments described above further illustrate the objectives, technical solutions and beneficial effects of the present invention in detail. It should be understood that the above description is only a specific embodiment of the present invention and is not intended to limit the scope of protection of the present invention. Any modifications, equivalent substitutions, improvements, etc. made within the spirit and principles of the present invention should be included in the scope of protection of the present invention.

Claims

1. A method for verifying a password module, characterized in that: include: Determine a plurality of threads corresponding to each type of cryptographic algorithm in the cryptographic module, and determine a network communication parameter configuration item corresponding to each thread according to the network communication configuration information to be verified; each network communication parameter configuration item corresponding to each thread is a random configuration parameter generated according to each type of network communication configuration information to be verified; Sending a data acquisition request to the server through each thread; the data acquisition request carries each type of cryptographic algorithm identifier and network communication parameter configuration item; The server is pre-set with service access links corresponding to each type of cryptographic algorithm; If the first data acquisition response message returned by the server according to the data acquisition request is received through all threads, it is determined that the functional verification of the cryptographic module is completed; the first data acquisition response message carries the network communication parameter configuration item that determines the configuration to take effect.

2. The verification method of the password module according to claim 1, characterized in that: The determining of the network communication parameter configuration items corresponding to each thread respectively according to the network communication configuration information to be verified includes: The Header configuration parameters, Cookies configuration parameters and cache configuration parameters corresponding to each thread are determined according to the network communication configuration information to be verified.

3. The verification method of the password module according to claim 1, characterized in that: The verification method of the password module also includes: If it is determined that there is at least one first target thread that receives the second data acquisition response message returned by the server according to the data acquisition request, it is determined that the functional verification of the cryptographic module has not been completed; the second data acquisition response message carries a network communication parameter configuration item that is determined to be ineffective.

4. The verification method of the password module according to claim 3, characterized in that: The verification method of the password module also includes: The second data acquisition response message is parsed to obtain the network communication parameter configuration item whose configuration has not taken effect, and the target network communication configuration information corresponding to the network communication parameter configuration item whose configuration has not taken effect is separately functionally verified.

5. The verification method of the password module according to claim 3, characterized in that: The verification method of the password module also includes: If it is determined that there is at least one second target thread that cannot receive the data acquisition response message returned by the server according to the data acquisition request, it is determined that the functional verification of the cryptographic module is not completed.

6. The verification method of the password module according to claim 5, characterized in that: The verification method of the password module also includes: The target data acquisition request corresponding to the unreceivable data acquisition response message is parsed to obtain a target cryptographic algorithm, and functional verification is performed on the target cryptographic algorithm separately.

7. The verification method of a password module according to any one of claims 1 to 6, characterized in that: The verification method of the password module also includes: Verify the timeout functionality of network communications.

8. A verification device for a password module, characterized in that: include: A determination unit is used to determine a plurality of threads corresponding to each type of cryptographic algorithm in the cryptographic module, and determine a network communication parameter configuration item corresponding to each thread according to the network communication configuration information to be verified; each network communication parameter configuration item corresponding to each thread is a random configuration parameter generated according to each type of network communication configuration information to be verified; A sending unit, used to send a data acquisition request to the server through each thread; the data acquisition request carries each type of cryptographic algorithm identifier and network communication parameter configuration item; The server is pre-set with service access links corresponding to each type of cryptographic algorithm; A verification unit is used to determine that the functional verification of the cryptographic module is completed if a first data acquisition response message returned by the server according to the data acquisition request is received through all threads; the first data acquisition response message carries a network communication parameter configuration item that determines that the configuration is effective.

9. An electronic device comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, characterized in that: When the processor executes the computer program, the steps of the method according to any one of claims 1 to 7 are implemented.

10. A computer-readable storage medium having a computer program stored thereon, characterized in that: When the computer program is executed by a processor, the steps of the method according to any one of claims 1 to 7 are implemented.

Images