Remote calling method and device, electronic equipment, medium and vehicle

Abstract

The invention relates to a remote calling method and device, electronic equipment, a medium and a vehicle, and the method comprises the steps: carrying out the authentication of the identity of terminal equipment in response to an identity authentication request sent by the terminal equipment, and sending a first authentication passing response to the terminal equipment when the authentication passes; receiving an authority authentication request sent by the terminal equipment; authenticating the access authority of the authority certificate corresponding to the terminal equipment, and sending a second authentication passing response to the terminal equipment when the authentication is passed; and in response to a remote procedure call request sent by the terminal equipment, performing access control according to the callable function list, obtaining an initial request result corresponding to the remote procedure call request, determining the initial request result as to-be-encrypted data, performing encryption and integrity signature processing on the initial request result to obtain a target request result, and sending the target request result to the terminal equipment. And sending the target request result to the terminal equipment.

Description

Technical Field

[0001] The present disclosure relates to the field of security technology, and in particular to a remote calling method, device, electronic device, medium and vehicle. Background Art

[0002] Remote Procedure Call (RPC) refers to a technology used for communication interaction between a client and a server. In the prior art, when communication interaction is performed between a client and a server based on RPC, the TLS protocol is used to ensure the security of the communication interaction. Specifically, during communication interaction, identity authentication will be performed between the client and the server. After the identity authentication is passed, when communication data is transmitted between the client and the server, the communication data will be encrypted to ensure the security of the communication interaction.

[0003] The commonly used underlying transmission protocols in remote procedure calls include: Transmission Control Protocol (TCP) and User Datagram Protocol (UDP). However, the TLS protocol is only applicable to TCP, not UDP. Therefore, without using the TLS protocol, how to perform secure communication interaction in remote procedure calls based on the TCP protocol or UDP protocol is an urgent problem to be solved. Summary of the invention

[0004] In order to solve the above technical problems, the present disclosure provides a remote calling method, device, electronic device, medium and vehicle.

[0005] In a first aspect, an embodiment of the present disclosure provides a remote calling method, which is applied to a server, including: responding to an identity authentication request sent by a terminal device, authenticating the identity of the terminal device, and when the authentication is successful, sending a first authentication success response to the terminal device, wherein the first authentication success response carries a first public key corresponding to the server;

[0006] Receiving a permission authentication request sent by the terminal device, wherein the permission authentication request carries a permission certificate corresponding to the terminal device, and the permission authentication includes: a list of callable functions corresponding to the terminal device;

[0007] Authenticating the access rights of the authority certificate corresponding to the terminal device, and when the authentication is successful, sending a second authentication success response to the terminal device;

[0008] In response to the remote procedure call request sent by the terminal device, access control is performed according to the callable function list, an initial request result corresponding to the remote procedure call request is obtained, and the initial request result is determined to be data to be encrypted, the initial request result is encrypted and integrity signed to obtain a target request result, and the target request result is sent to the terminal device, wherein the first public key is used to enable the terminal device to decrypt the target request result, and the target request result carries a complete verification code, and the complete verification code is used to enable the terminal device to perform an integrity check on the initial request result.

[0009] Optionally, the identity authentication request carries a second public key corresponding to the terminal device and a preset key generation algorithm;

[0010] In the authenticating the identity of the terminal device, when the authentication is successful, the method further includes:

[0011] A session key is generated according to the second public key, the first private key corresponding to the server, and a preset key generation algorithm.

[0012] Optionally, after authenticating the access rights of the authority certificate corresponding to the terminal device, if the authentication is successful, the method further includes:

[0013] Obtain a list of callable functions included in the authority certificate and save it;

[0014] The callable function list includes a plurality of preset functions, and the preset functions are used to obtain the initial request result corresponding to the remote procedure call request.

[0015] Optionally, in response to the remote procedure call request sent by the terminal device, performing access control according to the callable function list, obtaining an initial request result corresponding to the remote procedure call request, determining that the initial request result is data to be encrypted, encrypting and performing integrity signature processing on the initial request result, and obtaining a target request result, includes:

[0016] In response to the remote procedure call request sent by the terminal device, calling a target function corresponding to the remote procedure call request from the plurality of preset functions, and calculating an initial request result corresponding to the remote procedure call request;

[0017] Determine that the initial request result is data to be encrypted, and use the session key to encrypt and integrity-sign the initial request result at a preset configuration layer on the server to obtain a target request result, wherein the preset configuration layer includes: a proxy layer and a transport layer.

[0018] Optionally, the method further includes:

[0019] When it is determined that the initial request result is non-confidential data, integrity signature processing is performed on the initial request result to obtain the target request result.

[0020] Optionally, the identity authentication request also carries an identity certificate corresponding to the terminal device, and the proxy layer of the server is deployed with a first verification identity certificate corresponding to the identity certificate and a first verification authority certificate corresponding to the authority certificate, and the first verification identity certificate is associated one-to-one with the first verification authority certificate, or the transport layer of the server is deployed with a second verification identity certificate corresponding to the identity certificate and a second verification authority certificate corresponding to the authority certificate, and the second verification identity certificate is associated one-to-one with the second verification authority certificate;

[0021] The authenticating the identity of the terminal device and the authenticating the access rights of the authority certificate corresponding to the terminal device include:

[0022] authenticating the identity certificate at the proxy layer of the server through the first verification identity certificate;

[0023] authenticating the authority certificate through the first verification authority certificate;

[0024] or

[0025] authenticating the identity certificate at the transport layer of the server by using the second verification identity certificate;

[0026] The authority certificate is authenticated through the second verification authority certificate.

[0027] In a second aspect, an embodiment of the present disclosure provides a remote calling method, characterized in that it is applied to a terminal device and includes:

[0028] Sending an identity authentication request to the server, the identity authentication request is used to request the server to authenticate the identity of the terminal device, the identity authentication request carries the second public key corresponding to the terminal device and a preset key generation algorithm;

[0029] In response to the first authentication pass response sent by the server, sending an authorization authentication request to the server, wherein the authorization authentication request carries an authorization certificate corresponding to the terminal device, and the authorization authentication includes: a list of callable functions corresponding to the terminal device;

[0030] In response to the second authentication pass response sent by the server, a remote procedure call request is sent to the server, a target request result sent by the server is received, and the target request result is decrypted to obtain an initial request result and a complete verification code, and the initial request result is integrity checked according to the complete verification code.

[0031] Optionally, the first authentication success response carries a first public key corresponding to the server; after the first authentication success response sent in response to the server, the method further includes:

[0032] Generate a session key according to the second private key corresponding to the terminal device, the first public key and a preset key generation algorithm;

[0033] The decrypting process of the target request result includes:

[0034] The target request result is decrypted using the session key.

[0035] In a third aspect, an embodiment of the present disclosure provides a remote calling device, which is applied to a server, and includes:

[0036] A first authentication module, configured to respond to an identity authentication request sent by a terminal device, authenticate the identity of the terminal device, and send a first authentication success response to the terminal device when the authentication succeeds, wherein the first authentication success response carries a first public key corresponding to the server;

[0037] A receiving module, configured to receive a permission authentication request sent by the terminal device, wherein the permission authentication request carries a permission certificate corresponding to the terminal device, and the permission authentication includes: a list of callable functions corresponding to the terminal device;

[0038] A second authentication module, used to authenticate the access rights of the authority certificate corresponding to the terminal device, and when the authentication is successful, send a second authentication success response to the terminal device;

[0039] A target request result acquisition module is used to respond to the remote procedure call request sent by the terminal device, perform access control according to the callable function list, obtain the initial request result corresponding to the remote procedure call request, and determine that the initial request result is data to be encrypted, encrypt and perform integrity signature processing on the initial request result to obtain the target request result, and send the target request result to the terminal device, wherein the first public key is used to enable the terminal device to decrypt the target request result, and the target request result carries a complete verification code, and the complete verification code is used to enable the terminal device to perform integrity verification on the initial request result.

[0040] In a fourth aspect, an embodiment of the present disclosure provides a remote calling device, applied to a terminal device, including:

[0041] An identity authentication request sending module, used to send an identity authentication request to a server, wherein the identity authentication request is used to request the server to authenticate the identity of the terminal device, and the identity authentication request carries a second public key corresponding to the terminal device and a preset key generation algorithm;

[0042] The authorization authentication request sending module is used to send an authorization authentication request to the server in response to the first authentication pass response sent by the server, wherein the authorization authentication request carries the authorization certificate corresponding to the terminal device, and the authorization authentication includes: a list of callable functions corresponding to the terminal device;

[0043] The target request result acquisition module is used to respond to the second authentication pass response sent by the server, send a remote procedure call request to the server, receive the target request result sent by the server, and decrypt the target request result to obtain the initial request result and the complete verification code, and perform integrity verification on the initial request result according to the complete verification code.

[0044] In a fifth aspect, an embodiment of the present disclosure provides an electronic device, including:

[0045] one or more processors;

[0046] a storage device for storing one or more programs,

[0047] When the one or more programs are executed by the one or more processors, the one or more processors implement any method described in the first aspect, or any method described in the second aspect.

[0048] In a sixth aspect, an embodiment of the present disclosure provides a computer-readable storage medium having a computer program stored thereon, which, when executed by a processor, implements any method described in the first aspect, or any method described in the second aspect.

[0049] In the seventh aspect, an embodiment of the present disclosure provides a vehicle, comprising: a processor, a memory, and a computer program stored in the memory and executable on the processor, wherein when the computer program is executed by the processor, the method described in any one of the first aspect or the method described in any one of the second aspect is implemented.

[0050] Compared with the prior art, the technical solution provided by the embodiments of the present disclosure has the following advantages:

[0051] The remote calling method provided by the embodiment of the present disclosure authenticates the identity of the terminal device by responding to the identity authentication request sent by the terminal device, and when the authentication is successful, sends a first authentication success response to the terminal device, and the first authentication success response carries a first public key corresponding to the server; receives an authority authentication request sent by the terminal device, and the authority authentication request carries an authority certificate corresponding to the terminal device, and the authority authentication includes: a list of callable functions corresponding to the terminal device; authenticates the access rights of the authority certificate corresponding to the terminal device, and when the authentication is successful, sends a second authentication success response to the terminal device; responds to the remote procedure call request sent by the terminal device, performs access control according to the callable function list, obtains the initial request result corresponding to the remote procedure call request, and determines that the initial request result is data to be encrypted, encrypts and performs integrity signature processing on the initial request result, obtains the target request result, and sends the target request result to the terminal device, wherein the first public key is used to enable the terminal device to decrypt the target request result, and the target request result carries a complete verification code, and the complete verification code is used to enable the terminal device to perform integrity verification on the initial request result. In the above process, after the server realizes the identity authentication of the terminal device, it needs to authenticate the legitimacy of the access rights of the terminal device's authority certificate. After confirming that the authentication is successful, the server can legally access the list of callable functions included in the access right certificate, so that when the remote procedure call request sent by the terminal device is received, the operation of accessing the callable function list is triggered to obtain the initial request result corresponding to the remote procedure call request, thereby improving the security of access control between the server and the terminal device. Furthermore, when the initial request result is encrypted data that needs to be encrypted, in order to ensure the security of the initial request result during transmission, the initial request result needs to be encrypted. In this way, there is no need to use the TLS protocol, and secure communication interaction based on the TCP protocol or the UDP protocol can be achieved in the remote procedure call. BRIEF DESCRIPTION OF THE DRAWINGS

[0052] The accompanying drawings, which are incorporated in and constitute a part of this specification, illustrate embodiments consistent with the present disclosure and, together with the description, serve to explain the principles of the present disclosure.

[0053] In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, for ordinary technicians in this field, other drawings can be obtained based on these drawings without paying any creative labor.

[0054] Figure 1 It is a flowchart of a remote calling method provided by an embodiment of the present disclosure;

[0055] Figure 2It is a schematic diagram of a server-side verification identity certificate and verification authority certificate deployment provided by an embodiment of the present disclosure;

[0056] Figure 3 It is a schematic diagram of another server-side verification identity certificate and verification authority certificate deployment provided by an embodiment of the present disclosure;

[0057] Figure 4 is a flowchart of another remote calling method provided by an embodiment of the present disclosure;

[0058] Figure 5 It is a structural diagram of a remote calling device provided by an embodiment of the present disclosure;

[0059] Figure 6 is a structural diagram of another remote calling device provided by an embodiment of the present disclosure;

[0060] Figure 7 It is a structural schematic diagram of an electronic device provided by an embodiment of the present disclosure. DETAILED DESCRIPTION

[0061] In order to more clearly understand the above-mentioned objectives, features and advantages of the present disclosure, the scheme of the present disclosure will be further described below. It should be noted that the embodiments of the present disclosure and the features in the embodiments can be combined with each other without conflict.

[0062] In the following description, many specific details are set forth to facilitate a full understanding of the present disclosure, but the present disclosure may also be implemented in other ways different from those described herein; it is obvious that the embodiments in the specification are only part of the embodiments of the present disclosure, rather than all of the embodiments.

[0063] Remote Procedure Call (RPC) refers to a technology used to communicate and interact between a client and a server. The architecture of RPC technology includes: client, client stub, server, and server stub. The client is used to initiate a service call, the client stub is used to store the address of the called server, package the information sent by the client to the service, such as the remote procedure call request, and send it to the server; the server stores the service that the client wants to call, and the server stub is used to receive the packaged information sent by the client, unpack it, and call the local method to obtain the corresponding result.

[0064] Figure 1 is a flowchart of a remote calling method provided by an embodiment of the present disclosure, which is applied to the server, such as Figure 1 As shown, the remote calling method provided by the embodiment of the present disclosure includes:

[0065] S11. In response to the identity authentication request sent by the terminal device, the identity of the terminal device is authenticated, and when the authentication is successful, a first authentication success response is sent to the terminal device.

[0066] The main purpose of the identity authentication request is to determine the identity of the terminal device that communicates with the server.

[0067] The first authentication success response carries the first public key corresponding to the server, so that the terminal device can generate a session key for encrypting the transmission data between the server and the terminal device based on the first public key. The first authentication success response is used to notify the terminal device that the identity authentication is successful.

[0068] Specifically, the server receives an identity authentication request sent by the terminal device, and in response to the identity authentication request, authenticates the identity of the terminal device. When it is determined that the identity authentication of the terminal device is successful, a first authentication success response is sent to the terminal device. Accordingly, the first authentication success response is passed so that the terminal device determines that the current identity authentication is successful.

[0069] Optionally, based on the above embodiments, in some embodiments of the present disclosure, the identity authentication request carries the identity certificate corresponding to the terminal device. The identity certificate is used to enable the server to authenticate the terminal device. The identity certificate is the unique identifier of the terminal device. The identity certificate can be generated by CA signature. Further, in order to meet the different needs of communication interaction between the terminal device and the server, there are two implementation methods for deploying the verification authority certificate on the server, such as Figure 2 As shown, one is to deploy a first verification identity certificate corresponding to the identity certificate at the proxy layer of the server, i.e., the server stub. The first verification identity certificate can be generated by the serverstub of the server through a CA signature. It should be noted that the first verification identity certificate only authenticates the identity certificate of the terminal device corresponding to it, thereby realizing independent identity authentication for the terminal device. However, it is not limited to this, and the present disclosure is not specifically limited. Those skilled in the art can make specific settings according to actual conditions. Based on this, one implementation method for authenticating the identity of the terminal device can be:

[0070] The proxy layer on the server side authenticates the identity certificate by first verifying the identity certificate.

[0071] Specifically, the server receives an identity authentication request sent by the terminal device and responds to the identity authentication request. At the proxy layer of the server, the identity certificate corresponding to the terminal device carried in the identity authentication request is authenticated through the first verification identity certificate. When it is determined that the identity certificate authentication is successful, it indicates that the identity authentication of the terminal device is successful at this time.

[0072] Optionally, based on the above embodiments, in some embodiments of the present disclosure, the parameter information corresponding to the identity certificate can be authenticated by verifying the parameter information included in the identity certificate. The parameter information is, for example, the identity identification of the terminal device, such as XXL9-001, XXL9-002, but is not limited to this. The present disclosure does not specifically limit this, and technical personnel in this field can make specific settings according to actual conditions.

[0073] Optionally, based on the above embodiments, in some embodiments of the present disclosure, reference Figure 3 As shown, a second verification identity certificate corresponding to the identity certificate is deployed at the transport layer of the server. It should be noted that the second verification identity certificate deployed at the transport layer of the server can authenticate the identity certificate of any terminal device that communicates with the server, thereby achieving identity authentication for the terminal device. However, it is not limited to this, and the present disclosure is not specifically limited. Those skilled in the art can make specific settings according to actual conditions. Based on this, another implementation method for authenticating the identity of the terminal device can be:

[0074] The identity certificate is authenticated through a second verification identity certificate at the transport layer of the server.

[0075] Specifically, the server receives the identity authentication request sent by the terminal device and responds to the identity authentication request. At the transport layer of the server, the identity certificate corresponding to the terminal device carried in the identity authentication request is authenticated through the second verification identity certificate. When it is determined that the identity certificate authentication is successful, it indicates that the identity authentication of the terminal device is successful at this time.

[0076] In this way, the remote calling method provided by the embodiment of the present disclosure can meet the different needs of terminal devices and flexibly implement identity authentication of terminal devices by deploying verification identity certificates at the proxy layer and the transport layer.

[0077] Optionally, on the basis of the above embodiments, in some embodiments of the present disclosure, after the server receives the identity authentication request sent by the terminal device and authenticates the identity of the terminal device and the authentication is passed, further, in order to ensure the security of communication between the terminal device and the server, the server will also send an identity authentication request to the terminal device so that the terminal device authenticates the identity of the server. However, it should be noted that whether the terminal device authenticates the identity of the server can be determined based on actual conditions.

[0078] Optionally, based on the above embodiment, in some embodiments of the present disclosure, the identity authentication request sent by the terminal device carries the second public key corresponding to the terminal device and the preset key generation algorithm. Based on this, in order to ensure the security and integrity of the transmitted data during the subsequent data transmission between the terminal device and the server, after the identity of the terminal device is authenticated, when the authentication is passed, it also includes:

[0079] A session key is generated according to the second public key, the first private key corresponding to the server, and a preset key generation algorithm.

[0080] Among them, the first private key corresponding to the server corresponds one-to-one to the first public key corresponding to the server, and the preset key generation algorithm refers to the algorithm used to generate the session key. The preset key generation algorithm can be, for example, Diffie-Hellman key exchange or RSA key exchange, but is not limited to this. The present disclosure does not specifically limit it, and technical personnel in this field can make specific settings according to actual conditions.

[0081] Specifically, the server generates a session key according to the second public key corresponding to the terminal device, the first private key corresponding to the server, and a preset key generation algorithm.

[0082] Optionally, based on the above embodiments, in some embodiments of the present disclosure, one implementation method of generating a session key according to the second public key, the first private key corresponding to the server, and a preset key generation algorithm may be:

[0083] The server generates a pre-master key according to the second public key corresponding to the terminal device and the first private key corresponding to the server. After obtaining the pre-master key, the server generates a session key through a preset key generation algorithm and the pre-master key.

[0084] In this way, the remote calling method provided by the embodiment of the present disclosure generates a session key for encrypting the transmission data between the terminal device and the server after the identity authentication of the terminal device is passed, thereby avoiding the transmission data between the terminal device and the server from being tampered with, thereby ensuring the security and integrity of the transmission data between the terminal device and the server.

[0085] S12. Receive a permission authentication request sent by a terminal device.

[0086] The authorization authentication request carries the authorization certificate corresponding to the terminal device, and the authorization authentication includes: a list of callable functions corresponding to the terminal device. The authorization authentication request is used to request the server to authenticate the legitimacy of the access rights of the terminal device authorization certificate.

[0087] S13. Authenticate the access rights of the authority certificate corresponding to the terminal device, and when the authentication is successful, send a second authentication success response to the terminal device.

[0088] Specifically, the server receives the permission authentication request sent by the terminal device, responds to the permission authentication request, authenticates the legitimacy of the access rights of the permission certificate corresponding to the terminal device, and after determining that the legitimacy of the access rights is authenticated, sends a second authentication success response to the terminal device.

[0089] Optionally, based on the above embodiments, in some embodiments of the present disclosure, continue to refer to Figure 2 As shown, a first verification authority certificate corresponding to the authority certificate is deployed in the proxy layer of the server, i.e., the server stub. The first verification identity certificate is associated one-to-one with the first verification authority certificate. The first verification authority certificate can be generated and deployed by the server stub of the server through a CA signature. It should be noted that the first verification authority certificate only authenticates the authority certificate of the terminal device corresponding to it, thereby realizing independent authority authentication for the terminal device. Exemplarily, the association between the identity certificate corresponding to the terminal device and the authority certificate can be realized by including the same parameter information as the authority certificate, such as the identity identifier of the terminal device. However, it is not limited to this, and the present disclosure is not specifically limited. Those skilled in the art can make specific settings according to actual conditions. Based on this, one implementation method for authenticating the access rights of the authority certificate of a terminal device can be:

[0090] The proxy layer at the server side authenticates the authority certificate through the first verification authority certificate.

[0091] Specifically, the server receives the permission authentication request sent by the terminal device, responds to the permission authentication request, and authenticates the legitimacy of the access rights of the terminal device permission certificate through the first verification permission certificate at the proxy layer of the server. When it is determined that the authentication is successful, it indicates that the legitimacy of the access rights of the terminal device permission certificate has been authenticated.

[0092] Optionally, based on the above embodiments, in some embodiments of the present disclosure, reference Figure 3 As shown, a second verification authority certificate corresponding to the authority certificate is deployed at the transport layer of the server. It should be noted that the second verification authority certificate deployed at the transport layer of the server can authenticate the authority certificate of any terminal device that communicates and interacts with the server. However, it is not limited to this, and the present disclosure is not specifically limited. Those skilled in the art can make specific settings according to actual conditions. Based on this, another implementation method for authenticating the access rights of the authority certificate of the terminal device can be:

[0093] The authority certificate is authenticated by a second verification authority certificate at the transport layer of the server.

[0094] Specifically, the server receives the permission authentication request sent by the terminal device, responds to the permission authentication request, and authenticates the legitimacy of the access rights of the terminal device permission certificate through a second verification permission certificate at the transport layer of the server. When it is determined that the authentication is successful, it indicates that the legitimacy of the access rights of the terminal device permission certificate has been authenticated.

[0095] In this way, the remote calling method provided by the embodiment of the present disclosure can meet the different needs of terminal devices and flexibly implement the authority authentication of terminal devices by deploying the verification authority certificate at the proxy layer and the transport layer.

[0096] Optionally, based on the above embodiment, in some embodiments of the present disclosure, the permission authentication request includes a callable function list, based on which, the access rights of the permission certificate corresponding to the terminal device are authenticated, and when the authentication is passed, it also includes:

[0097] Get the list of callable functions included in the permission certificate and save it.

[0098] The callable function list includes a plurality of preset functions, and the preset functions are used to obtain the initial request result corresponding to the remote procedure call request.

[0099] Specifically, the server obtains a callable function list included in the authority authentication corresponding to the terminal device, wherein the callable function list includes a plurality of preset functions.

[0100] In this way, the remote calling method provided by the embodiment of the present disclosure can obtain the list of callable functions included in the authority certificate corresponding to the terminal device after the legitimacy of the authority certificate is authenticated, so that when a remote procedure call request from the terminal device is subsequently received, the initial request result corresponding to the remote procedure call request can be obtained through the corresponding target function among the multiple preset functions included in the callable function list, thereby realizing the access control of the terminal device to the server.

[0101] S14. In response to the remote procedure call request sent by the terminal device, access control is performed according to the callable function list, an initial request result corresponding to the remote procedure call request is obtained, and the initial request result is determined to be data to be encrypted, the initial request result is encrypted and integrity signed, a target request result is obtained, and the target request result is sent to the terminal device.

[0102] Among them, the first public key is used to enable the terminal device to decrypt the target request result, and the target request result carries a complete verification code, which is used to enable the terminal device to perform integrity verification on the initial request result.

[0103] Specifically, the server receives a remote procedure call request sent by a terminal device, and responds to the remote procedure call request, performs access control according to a callable function list to obtain an initial request result corresponding to the remote procedure call request, and after obtaining the initial request result corresponding to the remote procedure call request, determines whether the initial request result is data to be encrypted, and if so, encrypts and performs integrity signature processing on the initial request result to obtain an encrypted target request result, and sends the target request result to the terminal device, carrying a complete verification code for the target request result, so that after receiving the target request result, the terminal device decrypts the target request result to obtain a complete verification code and the initial result, and uses the complete verification code to perform integrity verification on the initial request result.

[0104] Optionally, based on the above embodiment, in some embodiments of the present disclosure, an implementation manner of S14 may be:

[0105] Step A: In response to a remote procedure call request sent by a terminal device, a target function corresponding to the remote procedure call request is called from a plurality of preset functions, and an initial request result corresponding to the remote procedure call request is calculated.

[0106] Step B: Determine that the initial request result is data to be encrypted, and encrypt and complete the initial request result at the preset configuration layer of the server using the session key to obtain the target request result.

[0107] Among them, the preset configuration layer includes: a proxy layer and a transport layer.

[0108] Specifically, the server receives a remote procedure call request sent by a terminal device, and in response to the remote procedure call request, determines a target function corresponding to the remote procedure call request from a plurality of preset functions included in a list of callable functions stored in the server, calls the target function, calculates an initial request result corresponding to the remote procedure call request, and after obtaining the initial request result corresponding to the remote procedure call request, determines whether the initial request result is data to be encrypted that needs to be encrypted. If so, the initial request result is encrypted and integrity signed at a preset configuration layer of the server, such as a proxy layer and a transport layer, using a session key generated by the server, to obtain the encrypted target request result.

[0109] Optionally, based on the above embodiments, in some embodiments of the present disclosure, when it is determined that the initial request result is non-confidential data, it also includes: performing integrity signature processing on the initial request result to obtain a target request result.

[0110] It should be noted that whether the initial request result is data to be encrypted can be determined based on whether the initial request result is sensitive data, or the user's privacy data such as user passwords, etc., or it can be determined based on the performance of the terminal device and the application scenario of communication and interaction between the terminal device and the server, but it is not limited to this. The present disclosure does not specifically limit it, and technical personnel in this field can make specific settings according to actual conditions.

[0111] In this way, the remote calling method provided by the embodiment of the present disclosure authenticates the identity of the terminal device by responding to the identity authentication request sent by the terminal device, and when the authentication is successful, sends a first authentication success response to the terminal device, and the first authentication success response carries the first public key corresponding to the server; receives the permission authentication request sent by the terminal device, and the permission authentication request carries the permission certificate corresponding to the terminal device, and the permission authentication includes: a list of callable functions corresponding to the terminal device; authenticates the access rights of the permission certificate corresponding to the terminal device, and when the authentication is successful, sends a second authentication success response to the terminal device; responds to the remote procedure call request sent by the terminal device, performs access control according to the callable function list, obtains the initial request result corresponding to the remote procedure call request, and determines that the initial request result is data to be encrypted, encrypts and performs integrity signature processing on the initial request result, obtains the target request result, and sends the target request result to the terminal device, wherein the first public key is used to enable the terminal device to decrypt the target request result, and the target request result carries a complete verification code, and the complete verification code is used to enable the terminal device to perform integrity verification on the initial request result. In the above process, after the server realizes the identity authentication of the terminal device, it needs to authenticate the legitimacy of the access rights of the terminal device's authority certificate. After confirming that the authentication is successful, the server can legally access the list of callable functions included in the access right certificate, so that when the remote procedure call request sent by the terminal device is received, the operation of accessing the callable function list is triggered to obtain the initial request result corresponding to the remote procedure call request, thereby improving the security of access control between the server and the terminal device. Furthermore, when the initial request result is encrypted data that needs to be encrypted, in order to ensure the security of the initial request result during transmission, the initial request result needs to be encrypted. In this way, there is no need to use the TLS protocol, and secure communication interaction based on the TCP protocol or the UDP protocol can be achieved in the remote procedure call.

[0112] Figure 4 is a flowchart of another remote calling method provided by an embodiment of the present disclosure, which is applied to a terminal device such as Figure 4 As shown, the remote calling method provided by the embodiment of the present disclosure includes:

[0113] S21. Send an identity authentication request to the server.

[0114] The identity authentication request is used to request the server to authenticate the identity of the terminal device. The identity authentication request carries the second public key corresponding to the terminal device and a preset key generation algorithm.

[0115] S22. In response to the first authentication success response sent by the server, send an authorization authentication request to the server.

[0116] The permission authentication request carries the permission certificate corresponding to the terminal device, and the permission authentication includes: a list of callable functions corresponding to the terminal device.

[0117] S23. In response to the second authentication pass response sent by the server, a remote procedure call request is sent to the server, a target request result is received from the server, and the target request result is decrypted to obtain an initial request result and a complete verification code, and an integrity check is performed on the initial request result according to the complete verification code.

[0118] Specifically, the terminal device sends an identity authentication request to the server, and requests the server to authenticate the identity of the terminal device through the identity authentication request. When a first authentication success response is received from the server, in response to the first authentication success response, a permission authentication request is sent to the server, and the server is requested to authenticate the access rights of the terminal device permission authentication through the permission authentication request. When a second authentication success response is received from the server, in response to the second authentication success response, a remote procedure call request is sent to the server, and a target request result sent by the server is received, the target request result is decrypted to obtain an initial request result and a complete verification code, and the initial request result is integrity verified according to the complete verification code.

[0119] In this way, the remote calling method provided by the embodiment of the present disclosure sends an identity authentication request to the server, the identity authentication request is used to request the server to authenticate the identity of the terminal device, and the identity authentication request carries the second public key and preset key generation algorithm corresponding to the terminal device; in response to the first authentication pass response sent by the server, sends an authority authentication request to the server, the authority authentication request carries the authority certificate corresponding to the terminal device, and the authority authentication includes: a list of callable functions corresponding to the terminal device; in response to the second authentication pass response sent by the server, sends a remote procedure call request to the server, receives the target request result sent by the server, and decrypts the target request result to obtain the initial request result and the complete verification code, and performs integrity verification on the initial request result according to the complete verification code. In the above process, the terminal device sends an identity authentication request and a permission authentication request to the server. After the server realizes the identity authentication of the terminal device, it needs to authenticate the legitimacy of the access rights of the terminal device's permission certificate. After confirming that the authentication is successful, the server can legally access the list of callable functions included in the permission certificate. When the remote procedure call request sent by the terminal device is received, the operation of accessing the callable function list is triggered to obtain the initial request result corresponding to the remote procedure call request, thereby improving the security of access control between the server and the terminal device. Furthermore, when the initial request result is encrypted data that needs to be encrypted, in order to ensure the security of the initial request result during transmission, the initial request result needs to be encrypted. In this way, there is no need to use the TLS protocol, and secure communication interaction based on the TCP protocol or the UDP protocol can be achieved in the remote procedure call.

[0120] Optionally, based on the above embodiment, in some embodiments of the present disclosure, the first authentication success response carries the first public key corresponding to the server; based on this, in order to ensure the security and integrity of the transmitted data during subsequent data transmission between the terminal device and the server, after responding to the first authentication success response sent by the server, it also includes:

[0121] A session key is generated according to the second private key corresponding to the terminal device, the first public key and a preset key generation algorithm.

[0122] Specifically, the terminal device generates a session key according to the second private key corresponding to the terminal device, the first public key corresponding to the server, and a preset key generation algorithm.

[0123] Optionally, based on the above embodiments, in some embodiments of the present disclosure, according to the second private key, the first public key and the preset key generation algorithm corresponding to the terminal device, an implementation method of generating a session key may be:

[0124] The terminal device generates a pre-master key according to the second private key and the first public key corresponding to the server. After obtaining the pre-master key, the terminal device generates a session key through a preset key generation algorithm and the pre-master key.

[0125] In this way, the remote calling method provided by the embodiment of the present disclosure generates a session key for encrypting the transmission data between the terminal device and the server after the identity authentication of the terminal device is passed, thereby avoiding the transmission data between the terminal device and the server from being tampered with, thereby ensuring the security and integrity of the transmission data between the terminal device and the server.

[0126] Optionally, based on the above embodiments, in some embodiments of the present disclosure, the target request result is decrypted, including: decrypting the target request result through a session key pair.

[0127] Figure 5 is a schematic diagram of a remote calling device provided by an embodiment of the present disclosure, such as Figure 5 As shown, the remote calling device includes: a first authentication module 11, a receiving module 12, a second authentication module 13 and a target request result acquisition module 14.

[0128] The first authentication module 11 is used to respond to the identity authentication request sent by the terminal device, authenticate the identity of the terminal device, and send a first authentication success response to the terminal device when the authentication is successful, wherein the first authentication success response carries a first public key corresponding to the server;

[0129] The receiving module 12 is used to receive a permission authentication request sent by the terminal device, wherein the permission authentication request carries a permission certificate corresponding to the terminal device, and the permission authentication includes: a list of callable functions corresponding to the terminal device;

[0130] The second authentication module 13 is used to authenticate the access rights of the authority certificate corresponding to the terminal device, and when the authentication is successful, send a second authentication success response to the terminal device;

[0131] The target request result acquisition module 14 is used to respond to the remote procedure call request sent by the terminal device, perform access control according to the callable function list, obtain the initial request result corresponding to the remote procedure call request, and determine that the initial request result is data to be encrypted, encrypt and perform integrity signature processing on the initial request result to obtain the target request result, and send the target request result to the terminal device, wherein the first public key is used to enable the terminal device to decrypt the target request result, and the target request result carries a complete verification code, and the complete verification code is used to enable the terminal device to perform integrity verification on the initial request result.

[0132] The remote calling device provided by the embodiment of the present disclosure uses a first authentication module to respond to an identity authentication request sent by a terminal device to authenticate the identity of the terminal device, and when the authentication is successful, a first authentication success response is sent to the terminal device, and the first authentication success response carries a first public key corresponding to the server; a receiving module is used to receive an authority authentication request sent by the terminal device, and the authority authentication request carries an authority certificate corresponding to the terminal device, and the authority authentication includes: a list of callable functions corresponding to the terminal device; a second authentication module is used to authenticate the access rights of the authority certificate corresponding to the terminal device, and when the authentication is successful, a first authentication success response is sent to the terminal device. The terminal device sends a second authentication success response; the target request result acquisition module is used to respond to the remote procedure call request sent by the terminal device, perform access control according to the callable function list, obtain the initial request result corresponding to the remote procedure call request, and determine that the initial request result is data to be encrypted, encrypt and complete the signature of the initial request result, obtain the target request result, and send the target request result to the terminal device, wherein the first public key is used to enable the terminal device to decrypt the target request result, and the target request result carries a complete verification code, and the complete verification code is used to enable the terminal device to perform integrity verification on the initial request result. After the server implements the identity authentication of the terminal device, it needs to authenticate the legitimacy of the access rights of the terminal device's authority certificate. After determining that the authentication is successful, the server can legally access the callable function list included in the authority certificate, so that when receiving the remote procedure call request sent by the terminal device, it triggers the operation of accessing the callable function list to obtain the initial request result corresponding to the remote procedure call request, thereby improving the security of access control between the server and the terminal device. Furthermore, when the initial request result is data to be encrypted, in order to ensure the security of the initial request result during transmission, the initial request result needs to be encrypted. In this way, there is no need to use the TLS protocol, and secure communication interaction based on the TCP protocol or the UDP protocol can be achieved in the remote procedure call.

[0133] Optionally, the identity authentication request carries a second public key corresponding to the terminal device and a preset key generation algorithm; the device also includes: a session key generation module, used to generate a session key based on the second public key, the first private key corresponding to the server and a preset key generation algorithm.

[0134] Optionally, the device further comprises: an acquisition module, configured to acquire and save a list of callable functions included in the authority certificate;

[0135] The callable function list includes a plurality of preset functions, and the preset functions are used to obtain the initial request result corresponding to the remote procedure call request.

[0136] Optionally, a target request result acquisition module 14 is specifically used to respond to the remote procedure call request sent by the terminal device, call the target function corresponding to the remote procedure call request among the multiple preset functions, and calculate the initial request result corresponding to the remote procedure call request; determine that the initial request result is data to be encrypted, and use the session key to encrypt and integrity sign the initial request result in the preset configuration layer of the server to obtain the target request result, wherein the preset configuration layer includes: a proxy layer and a transport layer.

[0137] Optionally, the target request result acquisition module 14 is further configured to, when it is determined that the initial request result is non-confidential data, perform integrity signature processing on the initial request result to obtain the target request result.

[0138] Optionally, the identity authentication request also carries an identity certificate corresponding to the terminal device, and the proxy layer of the server is deployed with a first verification identity certificate corresponding to the identity certificate and a first verification authority certificate corresponding to the authority certificate, and the first verification identity certificate is associated one-to-one with the first verification authority certificate, or the transport layer of the server is deployed with a second verification identity certificate corresponding to the identity certificate and a second verification authority certificate corresponding to the authority certificate, and the second verification identity certificate is associated one-to-one with the second verification authority certificate;

[0139] The first authentication module 11 is specifically used to authenticate the identity certificate through the first verification identity certificate at the proxy layer of the server; or to authenticate the identity certificate through the second verification identity certificate at the transport layer of the server;

[0140] The second authentication module 12 is specifically configured to authenticate the authority certificate through the first authentication authority certificate; or to authenticate the authority certificate through the second authentication authority certificate.

[0141] Figure 6 is a schematic diagram of the structure of another remote calling device provided by an embodiment of the present disclosure, such as Figure 6 As shown, the remote calling device includes: an identity authentication request sending module 21, an authority authentication request sending module 22 and a target request result obtaining module 23.

[0142] The identity authentication request sending module 21 is used to send an identity authentication request to the server, wherein the identity authentication request is used to request the server to authenticate the identity of the terminal device, and the identity authentication request carries the second public key corresponding to the terminal device and a preset key generation algorithm;

[0143] The authorization authentication request sending module 22 is used to send an authorization authentication request to the server in response to the first authentication success response sent by the server, wherein the authorization authentication request carries the authorization certificate corresponding to the terminal device, and the authorization authentication includes: a list of callable functions corresponding to the terminal device;

[0144] The target request result acquisition module 23 is used to respond to the second authentication pass response sent by the server, send a remote procedure call request to the server, receive the target request result sent by the server, and decrypt the target request result to obtain the initial request result and the complete verification code, and perform integrity verification on the initial request result according to the complete verification code.

[0145] The remote calling device provided by the embodiment of the present disclosure is configured to send an identity authentication request to a server through an identity authentication request sending module 21, wherein the identity authentication request is used to request the server to authenticate the identity of the terminal device, and the identity authentication request carries a second public key and a preset key generation algorithm corresponding to the terminal device; a permission authentication request sending module 22, configured to send an permission authentication request to the server in response to a first authentication pass response sent by the server, wherein the permission authentication request carries a permission certificate corresponding to the terminal device, and the permission authentication includes: a list of callable functions corresponding to the terminal device; a target request result acquisition module 23, configured to send a remote procedure call request to the server in response to a second authentication pass response sent by the server, receive a target request result sent by the server, and decrypt the target request result to obtain an initial request result and a complete verification code, and perform an integrity verification on the initial request result according to the complete verification code. In the above process, the terminal device sends an identity authentication request and a permission authentication request to the server. After the server realizes the identity authentication of the terminal device, it needs to authenticate the legitimacy of the permission certificate for accessing the terminal device. After determining that the authentication is successful, the server implements the list of callable functions included in the legal access permission certificate. When the remote procedure call request sent by the terminal device is received, the operation of accessing the callable function list is triggered to obtain the initial request result corresponding to the remote procedure call request, thereby improving the security of access control between the server and the terminal device. Furthermore, when the initial request result is encrypted data that needs to be encrypted, in order to ensure the security of the initial request result during transmission, the initial request result needs to be encrypted. In this way, there is no need to use the TLS protocol, and secure communication interaction based on the TCP protocol or the UDP protocol can be achieved in the remote procedure call.

[0146] Optionally, the first authentication response carries a first public key corresponding to the server; the device further comprises: a session key generation module, configured to generate a session key according to a second private key corresponding to the terminal device, the first public key and a preset key generation algorithm;

[0147] The target request result acquisition module 23 is specifically used to decrypt the target request result using the session key.

[0148] The device provided by the embodiment of the present invention can execute the method provided by any embodiment of the present invention, and has the corresponding functional modules and beneficial effects of the execution method.

[0149] It is worth noting that in the embodiment of the above-mentioned device, the various units and modules included are only divided according to functional logic, but are not limited to the above-mentioned division, as long as the corresponding functions can be achieved; in addition, the specific names of the functional units are only for the convenience of distinguishing each other, and are not used to limit the scope of protection of the present invention.

[0150] Figure 7 is a schematic diagram of the structure of an electronic device provided by an embodiment of the present disclosure, such as Figure 7 As shown, the electronic device includes a processor 710, a memory 720, an input device 730, and an output device 740; the number of processors 710 in the computer device can be one or more. Figure 7 A processor 710 is taken as an example; the processor 710, the memory 720, the input device 730 and the output device 740 in the electronic device can be connected via a bus or other means. Figure 7 The example of connecting through bus is taken in the following.

[0151] The memory 720 is a computer-readable storage medium that can be used to store software programs, computer executable programs and modules, such as program instructions / modules corresponding to the method in the embodiment of the present invention. The processor 710 executes various functional applications and data processing of the computer device by running the software programs, instructions and modules stored in the memory 720, that is, implementing the method provided in the embodiment of the present invention.

[0152] The memory 720 may mainly include a program storage area and a data storage area, wherein the program storage area may store an operating system and at least one application required for a function; the data storage area may store data created according to the use of the terminal, etc. In addition, the memory 720 may include a high-speed random access memory, and may also include a non-volatile memory, such as at least one disk storage device, a flash memory device, or other non-volatile solid-state storage device. In some instances, the memory 720 may further include a memory remotely arranged relative to the processor 710, and these remote memories may be connected to the computer device via a network. Examples of the above-mentioned network include, but are not limited to, the Internet, an intranet, a local area network, a mobile communication network, and combinations thereof.

[0153] The input device 730 may be used to receive input digital or character information and generate key signal input related to user settings and function control of the electronic device, and may include a keyboard, a mouse, etc. The output device 740 may include a display device such as a display screen.

[0154] The embodiment of the present disclosure also provides a storage medium containing computer executable instructions, and the computer executable instructions are used to implement the method provided by the embodiment of the present disclosure when executed by a computer processor.

[0155] Of course, the computer executable instructions of a storage medium including computer executable instructions provided by an embodiment of the present invention are not limited to the operations of the method described above, but can also execute related operations in the method provided by any embodiment of the present invention.

[0156] Through the above description of the implementation methods, the technicians in the relevant field can clearly understand that the present invention can be implemented by means of software and necessary general hardware, and of course it can also be implemented by hardware, but in many cases the former is a better implementation method. Based on such an understanding, the technical solution of the present invention, in essence, or the part that contributes to the prior art, can be embodied in the form of a software product, and the computer software product can be stored in a computer-readable storage medium, such as a computer floppy disk, read-only memory (ROM), random access memory (RAM), flash memory (FLASH), hard disk or optical disk, etc., including a number of instructions for a computer device (which can be a personal computer, a server, or a network device, etc.) to execute the methods described in each embodiment of the present invention.

[0157] It should be noted that, in this article, relational terms such as "first" and "second" are only used to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any such actual relationship or order between these entities or operations. Moreover, the terms "include", "comprise" or any other variants thereof are intended to cover non-exclusive inclusion, so that a process, method, article or device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, article or device. In the absence of further restrictions, the elements defined by the sentence "comprise a ..." do not exclude the existence of other identical elements in the process, method, article or device including the elements.

[0158] The above description is only a specific embodiment of the present disclosure, so that those skilled in the art can understand or implement the present disclosure. Various modifications to these embodiments will be apparent to those skilled in the art, and the general principles defined herein may be implemented in other embodiments without departing from the spirit or scope of the present disclosure. Therefore, the present disclosure will not be limited to the embodiments described herein, but will conform to the widest scope consistent with the principles and novel features disclosed herein.

Claims

1. A remote calling method, characterized in that: Applied to the server, including: In response to an identity authentication request sent by a terminal device, authenticate the identity of the terminal device, and when the authentication is successful, send a first authentication success response to the terminal device, wherein the first authentication success response carries a first public key corresponding to the server; Receiving a permission authentication request sent by the terminal device, wherein the permission authentication request carries a permission certificate corresponding to the terminal device, and the permission authentication includes: a list of callable functions corresponding to the terminal device; Authenticating the access rights of the authority certificate corresponding to the terminal device, and when the authentication is successful, sending a second authentication success response to the terminal device; In response to the remote procedure call request sent by the terminal device, access control is performed according to the callable function list, an initial request result corresponding to the remote procedure call request is obtained, and the initial request result is determined to be data to be encrypted, the initial request result is encrypted and integrity signed to obtain a target request result, and the target request result is sent to the terminal device, wherein the first public key is used to enable the terminal device to decrypt the target request result, and the target request result carries a complete verification code, and the complete verification code is used to enable the terminal device to perform an integrity check on the initial request result.

2. The method according to claim 1, characterized in that The identity authentication request carries the second public key corresponding to the terminal device and a preset key generation algorithm; In the step of authenticating the identity of the terminal device, when the authentication is successful, the method further includes: A session key is generated according to the second public key, the first private key corresponding to the server, and a preset key generation algorithm.

3. The method according to claim 2, characterized in that The access authority of the authority certificate corresponding to the terminal device is authenticated, and when the authentication is passed, the method further includes: Obtain a list of callable functions included in the authority certificate and save it; The callable function list includes a plurality of preset functions, and the preset functions are used to obtain the initial request result corresponding to the remote procedure call request.

4. The method according to claim 3, characterized in that The step of responding to the remote procedure call request sent by the terminal device, performing access control according to the callable function list, obtaining an initial request result corresponding to the remote procedure call request, determining that the initial request result is data to be encrypted, encrypting and performing integrity signature processing on the initial request result, and obtaining a target request result includes: In response to the remote procedure call request sent by the terminal device, calling a target function corresponding to the remote procedure call request from the plurality of preset functions, and calculating an initial request result corresponding to the remote procedure call request; Determine that the initial request result is data to be encrypted, and use the session key to encrypt and integrity-sign the initial request result at a preset configuration layer on the server to obtain a target request result, wherein the preset configuration layer includes: a proxy layer and a transport layer.

5. The method according to claim 1, characterized in that The method further comprises: When it is determined that the initial request result is non-confidential data, integrity signature processing is performed on the initial request result to obtain the target request result.

6. The method according to claim 1, characterized in that The identity authentication request also carries the identity certificate corresponding to the terminal device, the proxy layer of the server is deployed with a first verification identity certificate corresponding to the identity certificate, and a first verification authority certificate corresponding to the authority certificate, and the first verification identity certificate is associated one-to-one with the first verification authority certificate, or the transport layer of the server is deployed with a second verification identity certificate corresponding to the identity certificate, and a second verification authority certificate corresponding to the authority certificate, and the second verification identity certificate is associated one-to-one with the second verification authority certificate; The authenticating the identity of the terminal device and the authenticating the access rights of the authority certificate corresponding to the terminal device include: authenticating the identity certificate at the proxy layer of the server through the first verification identity certificate; authenticating the authority certificate through the first verification authority certificate; or authenticating the identity certificate at the transport layer of the server by using the second verification identity certificate; The authority certificate is authenticated through the second verification authority certificate.

7. A remote calling method, characterized in that: Applied to terminal equipment, including: Sending an identity authentication request to the server, the identity authentication request is used to request the server to authenticate the identity of the terminal device, the identity authentication request carries the second public key corresponding to the terminal device and a preset key generation algorithm; In response to the first authentication pass response sent by the server, sending an authorization authentication request to the server, wherein the authorization authentication request carries an authorization certificate corresponding to the terminal device, and the authorization authentication includes: a list of callable functions corresponding to the terminal device; In response to the second authentication pass response sent by the server, a remote procedure call request is sent to the server, a target request result sent by the server is received, and the target request result is decrypted to obtain an initial request result and a complete verification code, and the initial request result is integrity checked according to the complete verification code.

8. The method according to claim 7, characterized in that The first authentication success response carries a first public key corresponding to the server; after the first authentication success response sent in response to the server, the method further includes: Generate a session key according to the second private key corresponding to the terminal device, the first public key and a preset key generation algorithm; The decrypting process of the target request result includes: The target request result is decrypted using the session key.

9. A remote calling device, characterized in that: Applied to the server, including: A first authentication module, configured to respond to an identity authentication request sent by a terminal device, authenticate the identity of the terminal device, and send a first authentication success response to the terminal device when the authentication succeeds, wherein the first authentication success response carries a first public key corresponding to the server; A receiving module, configured to receive a permission authentication request sent by the terminal device, wherein the permission authentication request carries a permission certificate corresponding to the terminal device, and the permission authentication includes: a list of callable functions corresponding to the terminal device; A second authentication module, used to authenticate the access rights of the authority certificate corresponding to the terminal device, and when the authentication is successful, send a second authentication success response to the terminal device; A target request result acquisition module is used to respond to the remote procedure call request sent by the terminal device, perform access control according to the callable function list, obtain the initial request result corresponding to the remote procedure call request, and determine that the initial request result is data to be encrypted, encrypt and perform integrity signature processing on the initial request result to obtain the target request result, and send the target request result to the terminal device, wherein the first public key is used to enable the terminal device to decrypt the target request result, and the target request result carries a complete verification code, and the complete verification code is used to enable the terminal device to perform integrity verification on the initial request result.

10. A remote calling device, characterized in that: Applied to terminal equipment, including: An identity authentication request sending module, used to send an identity authentication request to a server, wherein the identity authentication request is used to request the server to authenticate the identity of the terminal device, and the identity authentication request carries a second public key corresponding to the terminal device and a preset key generation algorithm; The authorization authentication request sending module is used to send an authorization authentication request to the server in response to the first authentication pass response sent by the server, wherein the authorization authentication request carries the authorization certificate corresponding to the terminal device, and the authorization authentication includes: a list of callable functions corresponding to the terminal device; The target request result acquisition module is used to respond to the second authentication pass response sent by the server, send a remote procedure call request to the server, receive the target request result sent by the server, and decrypt the target request result to obtain the initial request result and the complete verification code, and perform integrity verification on the initial request result according to the complete verification code.

11. An electronic device, characterized in that: include: one or more processors; a storage device for storing one or more programs, When the one or more programs are executed by the one or more processors, the one or more processors implement the remote calling method as described in any one of claims 1 to 6, or the remote calling method as described in any one of claims 7 to 8.

12. A computer-readable storage medium having a computer program stored thereon, characterized in that: When the program is executed by a processor, the remote calling method according to any one of claims 1 to 6 or the remote calling method according to any one of claims 7 to 8 is implemented.

13. A vehicle, characterized in that: include: A processor, a memory, and a computer program stored in the memory and executable on the processor, wherein the computer program, when executed by the processor, implements the remote calling method according to any one of claims 1 to 6, or the remote calling method according to any one of claims 7 to 8.

Images