Order submission method and device
By using the device fingerprint information on the H5 purchase page to obtain seed information and obtain the target method identification based on the information, the problem that the H5 purchase page plus sign verification function is easily cracked, and the interception of illegal order submission requests and the improvement of data transmission security is achieved.
Patent Information
- Application Number
- CN202411943338.0
- Authority / Receiving Office
- CN · China
- Patent Type
- Applications(China)
- Current Assignee / Owner
- Filing Date
- 2024-12-26
- Publication Date
- 2025-04-04
- Estimated Expiration
- 2044-12-26
AI Technical Summary
The sign-up verification function of the H5 rush purchase page is easily cracked illegally, resulting in the inability to intercept illegal order submission requests, which is relatively low in security.
By sending a seed acquisition request including device fingerprint information to the server, the seed information is obtained and sent to the application. The application side obtains the target device fingerprint information and the target index identifier based on the seed information. After the match is successful, the target method identifier is obtained from the method set and used to send an order to submit a request to the server.
It improves the security of the order submission process, can intercept illegal order submission requests, prevent information leakage or tampering, improves the reliability and stability of the rush purchase system, and thus improves the user experience.
Smart Images

Figure CN119762192A_ABST
Abstract
Description
Technical Field
[0001] The present invention relates to the field of computer technology, and in particular to an order submission method and device. Background Art
[0002] In the field of e-commerce, a rush purchase scenario is a scenario where consumers rush to purchase goods or services in a specific scenario with a limited time and quantity. In a rush purchase scenario, the signature verification function of the transmitted data is generally performed on the front end and the server to intercept abnormal order submission requests. In order to adapt to the reusability of multiple terminals, the front-end rush purchase page generally uses an H5 rush purchase page.
[0003] However, the code cracking cost of the H5 rush purchase page is low, and the signature adding and verification functions are easy to be illegally cracked, or by simulating real users to call the code's signature adding and verification functions, resulting in the inability to intercept illegal order submission requests, and low security. Summary of the invention
[0004] In view of this, the embodiments of the present invention provide an order submission method and device, which can improve the security of the order submission process, improve the reliability and stability of the system, and thus improve the user experience.
[0005] To achieve the above object, according to one aspect of an embodiment of the present invention, a method for submitting an order is provided, comprising:
[0006] Sending a seed acquisition request to the server, wherein the seed acquisition request includes device fingerprint information;
[0007] Receiving the seed information corresponding to the seed acquisition request returned by the server, and sending the seed information to the application;
[0008] Receive a target method identifier sent by the application end, and send an order submission request to the server end according to the target method identifier, wherein the target method identifier is obtained from a method set according to a target index identifier when the application end matches the target device fingerprint information with the device fingerprint information and, if the match is successful, the target device fingerprint information and the target index identifier are obtained by the application end according to the seed information, and the method set includes multiple index identifiers and a method identifier corresponding to each index identifier.
[0009] Optionally, before sending a seed acquisition request to the server, the following steps are also included:
[0010] Send a request to obtain device fingerprint information to the application end, and receive the device fingerprint information returned by the application end.
[0011] Optionally, after sending the order submission request to the server according to the target method identifier, the method further includes:
[0012] Receive an order submission result corresponding to the order submission request returned by the server, wherein the order submission result is obtained by the server after verifying the target method identifier.
[0013] According to another aspect of an embodiment of the present invention, there is provided an order submission method, comprising:
[0014] Receiving seed information sent by the page module, the seed information is obtained from the server by the page module sending a seed acquisition request to the server according to the device fingerprint information;
[0015] Obtaining target device fingerprint information and target index identifier from the seed information;
[0016] Matching the target device fingerprint information with the device fingerprint information, and if the match is successful, obtaining a target method identifier corresponding to the target index identifier from a method set; the method set includes multiple index identifiers and a method identifier corresponding to each index identifier;
[0017] The target method identifier is sent to the page module, so that the page module sends an order submission request to the server according to the target method identifier.
[0018] Optionally, before receiving the seed information sent by the page module, the method further includes:
[0019] Receiving an information acquisition request sent by the page module, wherein the information acquisition request indicates a calling method;
[0020] The calling method is executed to obtain the device fingerprint information, and the device fingerprint information is returned to the page module.
[0021] Optionally, before obtaining the target method identifier corresponding to the target index identifier from the method set, the method further includes:
[0022] Sending a method acquisition request to the server, wherein the method acquisition request includes encrypted order business data;
[0023] Receive the method set corresponding to the method acquisition request returned by the server, where the method set is obtained from the configuration center based on the decrypted order business data after the server decrypts the encrypted order business data, and the configuration center stores the method set corresponding to the order business data.
[0024] Optionally, the seed information is obtained by the server according to the device fingerprint information and the index identifier to be issued, and encrypted using an asymmetric encryption algorithm;
[0025] Obtaining a target device identifier and a target index identifier from the seed information includes:
[0026] The seed information is decrypted using an asymmetric decryption algorithm to obtain the target device identifier and the target index identifier.
[0027] According to another aspect of an embodiment of the present invention, there is provided an order submission method, comprising:
[0028] Receive a seed acquisition request sent by the page module, wherein the seed acquisition request includes device fingerprint information;
[0029] Acquire an index identifier to be issued corresponding to the device fingerprint information, generate seed information corresponding to the seed acquisition request according to the device fingerprint information and the index identifier to be issued, and send the seed information to the page module;
[0030] Receiving an order submission request sent by the page module according to a target method identifier, the target method identifier is obtained by the application end by matching the target device fingerprint information with the device fingerprint information, and if the match is successful, the target device fingerprint information and the target index identifier are obtained by the application end according to the seed information sent by the page module, and the method set includes multiple index identifiers and a method identifier corresponding to each index identifier;
[0031] The target method identifier is verified, and if the verification passes, an order submission result corresponding to the order submission request is returned.
[0032] Optionally, verifying the target method identifier includes:
[0033] Obtaining a corresponding method identifier to be issued from a configuration center service according to the index identifier to be issued; the configuration center service stores the method set;
[0034] Compare the method identifier to be issued with the target method identifier to obtain a comparison result;
[0035] When the comparison result indicates that the method identifier to be issued is the same as the target method identifier, it is determined that the verification is passed.
[0036] According to another aspect of an embodiment of the present invention, there is provided an order submission device, comprising:
[0037] A first sending module sends a seed acquisition request to a server, wherein the seed acquisition request includes device fingerprint information;
[0038] A first receiving module receives the seed information corresponding to the seed acquisition request returned by the server, and sends the seed information to the application end;
[0039] A submission module receives a target method identifier sent by the application end, and sends an order submission request to the server end according to the target method identifier, wherein the target method identifier is obtained from a method set according to a target index identifier when the application end matches the target device fingerprint information with the device fingerprint information and, if the match is successful, the target device fingerprint information and the target index identifier are obtained by the application end according to the seed information, and the method set includes multiple index identifiers and a method identifier corresponding to each index identifier.
[0040] According to another aspect of an embodiment of the present invention, there is provided an order submission device, comprising:
[0041] A second receiving module receives seed information sent by the page module, where the page module sends a seed acquisition request to the server according to the device fingerprint information and obtains the seed information from the server;
[0042] An acquisition module, which acquires target device fingerprint information and target index identifier from the seed information;
[0043] a matching module, matching the target device fingerprint information with the device fingerprint information, and if the match is successful, obtaining a target method identifier corresponding to the target index identifier from a method set; the method set includes multiple index identifiers and a method identifier corresponding to each index identifier;
[0044] The second sending module sends the target method identifier to the page end, so that the page end sends an order submission request to the server end according to the target method identifier.
[0045] According to another aspect of an embodiment of the present invention, there is provided an order submission device, comprising:
[0046] A third receiving module receives a seed acquisition request sent by the page module, wherein the seed acquisition request includes device fingerprint information;
[0047] a third sending module, which obtains an index identifier to be issued corresponding to the device fingerprint information, generates seed information corresponding to the seed acquisition request according to the device fingerprint information and the index identifier to be issued, and sends the seed information to the page module;
[0048] a fourth receiving module, receiving an order submission request sent by the page module according to a target method identifier, wherein the target method identifier is obtained from a method set according to a target index identifier by matching the target device fingerprint information with the device fingerprint information by the application end, if the match is successful, wherein the target device fingerprint information and the target index identifier are obtained by the application end according to the seed information sent by the page module, and the method set includes a plurality of index identifiers and a method identifier corresponding to each index identifier;
[0049] The verification module verifies the target method identifier and returns an order submission result corresponding to the order submission request if the verification passes.
[0050] According to another aspect of an embodiment of the present invention, there is provided an electronic device, including:
[0051] one or more processors;
[0052] a storage device for storing one or more programs,
[0053] When the one or more programs are executed by the one or more processors, the one or more processors implement the order submission method provided by the present invention.
[0054] According to another aspect of an embodiment of the present invention, a computer-readable medium is provided, on which a computer program is stored, and when the program is executed by a processor, the order submission method provided by the present invention is implemented.
[0055] One embodiment of the above invention has the following advantages or beneficial effects: the order submission method of the embodiment of the present invention obtains seed information from the server by sending a seed acquisition request including device fingerprint information to the server; then the seed information is sent to the application, so that the application obtains the target device fingerprint information and the target index identifier according to the seed information, and when the target device fingerprint information matches the device fingerprint information successfully, the corresponding target method identifier is obtained from the method set according to the target index identifier; the target method identifier returned by the application is received, and an order submission request is sent to the server according to the target method identifier. The method obtains seed information according to the device fingerprint information, obtains the target method identifier through the seed information, realizes order submission, improves the security of data transmission, can intercept illegal order submission requests, realizes the interception of risky traffic, effectively prevents information leakage or tampering, improves the reliability and stability of the rush purchase system, and thus improves the user experience.
[0056] The further effects of the above-mentioned non-conventional optional manner will be described below in conjunction with the specific implementation manner. BRIEF DESCRIPTION OF THE DRAWINGS
[0057] The accompanying drawings are used to better understand the present invention and do not constitute an improper limitation of the present invention.
[0058] Figure 1 is a schematic diagram of the main process of an order submission method according to an embodiment of the present invention;
[0059] Figure 2 is a schematic diagram of the main process of another order submission method according to an embodiment of the present invention;
[0060] Figure 3 is a schematic diagram of the main process of another order submission method according to an embodiment of the present invention;
[0061] Figure 4 It is a flowchart of an order submission method according to an embodiment of the present invention;
[0062] Figure 5 is a schematic diagram of main modules of an order submission device according to an embodiment of the present invention;
[0063] Figure 6 is a schematic diagram of main modules of another order submission device according to an embodiment of the present invention;
[0064] Figure 7 is a schematic diagram of main modules of another order submission device according to an embodiment of the present invention;
[0065] Figure 8 is an exemplary system architecture diagram to which embodiments of the present invention may be applied;
[0066] Fig. 9 It is a schematic diagram of the structure of a computer system of a terminal device or a server suitable for implementing an embodiment of the present invention. DETAILED DESCRIPTION
[0067] The following is a description of exemplary embodiments of the present invention in conjunction with the accompanying drawings, including various details of the embodiments of the present invention to facilitate understanding, which should be considered as merely exemplary. Therefore, it should be recognized by those of ordinary skill in the art that various changes and modifications may be made to the embodiments described herein without departing from the scope and spirit of the present invention. Similarly, for clarity and conciseness, the description of well-known functions and structures is omitted in the following description.
[0068] Figure 1 is a schematic diagram of the main process of an order submission method according to an embodiment of the present invention, such as Figure 1 As shown, the order submission method includes the following steps:
[0069] Step S101: Send a seed acquisition request to the server, where the seed acquisition request includes device fingerprint information;
[0070] Step S102: receiving seed information corresponding to the seed acquisition request returned by the server, and sending the seed information to the application;
[0071] Step S103: Receive the target method identifier sent by the application, and send an order submission request to the server according to the target method identifier, wherein the target method identifier is obtained from the method set according to the target index identifier by the application when matching the target device fingerprint information with the device fingerprint information. If the match is successful, the target device fingerprint information and the target index identifier are obtained by the application according to the seed information, and the method set includes multiple index identifiers and a method identifier corresponding to each index identifier.
[0072] In an embodiment of the present invention, the order submission method is executed on the client side, and the execution subject can be an H5 (a page design form based on HTML5 technology) rush purchase page embedded in the application side, that is, the application program side, that is, the page module. That is, the order submission method can be executed by the H5 rush purchase page embedded in the shopping software for rush purchase of goods. The order submission method can be applied to the rush purchase scenario in the e-commerce field, and can further intercept illegal order submission requests on the basis of the signature verification function, thereby improving the security of data transmission.
[0073] In an embodiment of the present invention, the H5 rush purchase page sends a seed acquisition request to the server, and the seed acquisition request includes device fingerprint information, and the device fingerprint information is used to identify the device on which the client is installed, that is, the device fingerprint information can be a device identifier, such as eid (electronic identifier). The server is requested to obtain the seed information corresponding to the seed acquisition request through the device fingerprint information, and then the order submission interface is obtained through the seed information, and the order submission is implemented according to the order submission interface. Among them, the seed acquisition request is the acquisition request of the seed information, and different seed information corresponds to different order submission interfaces, that is, the seed of the order submission interface is obtained. The seed information is generated according to the target device fingerprint information and the target index identifier, and is encrypted by an asymmetric encryption algorithm; the target device fingerprint information and the target index identifier can be obtained by decrypting the seed information through an asymmetric decryption algorithm, and then the target method identifier is obtained, and the corresponding order submission interface is determined according to the target method identifier to implement order submission.
[0074] After receiving the seed information returned by the server, the seed information is sent to the application so that the application processes the seed information, and then receives the target method identifier returned by the application. The target method identifier is used to identify the target method, that is, the order submission interface. According to the target method identifier, an order submission request is sent to the server, and the normal order submission process is carried out to obtain the corresponding order submission result.
[0075] Among them, after receiving the seed information, the application end obtains the target device fingerprint information and the target index identifier from the seed information, matches the target device fingerprint information with the device fingerprint information, and if the two are the same, the match is successful. The corresponding target method identifier is obtained from the method set according to the target index identifier. The method set includes multiple index identifiers and method identifiers corresponding to each index identifier. The method identifier is queried from the method set through the index identifier, which can ensure the security of obtaining the method identifier.
[0076] In the embodiment of the present invention, before sending a seed acquisition request to the server, it also includes: sending an acquisition request for device fingerprint information to the application, and receiving the device fingerprint information returned by the application. That is, the device fingerprint information is obtained from the application by sending an acquisition request to the application. Since the H5 rush purchase page is embedded in the application, the device fingerprint information can be obtained from the application. By obtaining the device fingerprint information, the security of the rush purchase page can be increased, ensuring that the order submission request sent to the server comes from a legitimate device, effectively preventing tampering, and ensuring security.
[0077] In the embodiment of the present invention, after sending the order submission request to the server according to the target method identifier, the following steps are included:
[0078] The order submission result corresponding to the order submission request returned by the receiving server is obtained after the server verifies the target method identifier.
[0079] In an embodiment of the present invention, after sending an order submission request to the server, the server verifies the order submission request, including verifying the target method identifier to determine whether the target method identifier exists on the server. The server includes a configuration center service, and the configuration center service includes a method set. If so, the verification passes, otherwise, the verification fails.
[0080] In an embodiment of the present invention, after the seed information is sent to the application end, the target device fingerprint information sent by the application end is received, and the order submission request includes the target device fingerprint information. The order submission result can also be obtained by the server after verifying the target device fingerprint information and the target method identifier. That is, it is determined whether the target device fingerprint information is the same as the device fingerprint information stored in the server end and whether the target method identifier exists in the server end. If so, the verification is passed, and if not, the verification fails. Among them, the device fingerprint information stored by the server end can be obtained from the seed acquisition request.
[0081] The order submission method of the embodiment of the present invention obtains seed information from the server by sending a seed acquisition request including device fingerprint information to the server; then the seed information is sent to the application, so that the application obtains the target device fingerprint information and the target index identifier according to the seed information, and when the target device fingerprint information matches the device fingerprint information successfully, the corresponding target method identifier is obtained from the method set according to the target index identifier; the target method identifier returned by the application is received, and an order submission request is sent to the server according to the target method identifier. The method obtains seed information according to the device fingerprint information, obtains the target method identifier through the seed information, and implements order submission, thereby improving the security of data transmission, being able to intercept illegal order submission requests, intercepting risky traffic, effectively preventing information leakage or tampering, and improving the reliability and stability of the rush purchase system, thereby improving the user experience.
[0082] Another aspect of the embodiment of the present invention is as follows Figure 2 As shown, an order submission method is provided, including:
[0083] Step S201: receiving seed information sent by the page module, where the page module sends a seed acquisition request to the server according to the device fingerprint information and obtains the seed information from the server;
[0084] Step S202: Obtain target device fingerprint information and target index identifier from the seed information;
[0085] Step S203: Match the target device fingerprint information with the device fingerprint information, and if the match is successful, obtain the target method identifier corresponding to the target index identifier from the method set; the method set includes multiple index identifiers and a method identifier corresponding to each index identifier;
[0086] Step S204: Send the target method identifier to the page module, so that the page module sends an order submission request to the server according to the target method identifier.
[0087] In an embodiment of the present invention, the order submission method is executed on the client side, and the execution subject can be the application side of the client side, such as the order submission method can be executed by a shopping application, and the shopping application includes various forms such as shopping APP and web version, which include a complete shopping experience scene in addition to the software itself. First, the seed information sent by the page module is received, and the seed information is obtained by the page module from the server side according to the device fingerprint information, that is, the page module sends a seed acquisition request to the server side, and the seed acquisition request includes the device fingerprint information, and the server side returns the seed information to the page module according to the device fingerprint information.
[0088] The target device fingerprint information and target index identifier are obtained from the seed information, and then the target device fingerprint information and the device fingerprint information are matched to determine whether the two are the same. If they are the same, the corresponding target method identifier is obtained from the method set according to the target index identifier, and the target method identifier is returned to the page module, so that the page module sends an order submission request to the server according to the target method identifier.
[0089] In an embodiment of the present invention, before receiving the seed information sent by the page module, it also includes: receiving an information acquisition request sent by the page module, the information acquisition request indicates a calling method; executing the calling method to obtain device fingerprint information, and returning the device fingerprint information to the page module.
[0090] In an embodiment of the present invention, before receiving the seed information sent by the page module, an information acquisition request sent by the page module is received. The acquisition request may be sent by the page module during the page loading process. The information acquisition request indicates a calling method, which is a method in the client's SDK (Software Development Kit) for obtaining device fingerprint information. The device fingerprint information can be obtained by executing the calling method, thereby returning the device fingerprint information to the page module. The device fingerprint information can be generated based on the information of the device on which the client is installed, or based on the device information and the client information. The device information may include information such as the device code and the device model, and the client information may include information such as the client identifier.
[0091] In the embodiment of the present invention, before obtaining the target method identifier corresponding to the target index identifier from the method set, the method further includes:
[0092] Send a method acquisition request to the server, which includes the encrypted order business data;
[0093] The method set corresponding to the method acquisition request returned by the receiving server is obtained from the configuration center based on the decrypted order business data after the server decrypts the encrypted order business data. The configuration center stores the method set corresponding to the order business data.
[0094] In an embodiment of the present invention, before obtaining the target method identifier corresponding to the target index identifier from the method set, it is necessary to obtain the method set from the server. Specifically, a method acquisition request is sent to the server, and the method acquisition request includes encrypted order business data. The order business data may include an order scene identifier, such as an identifier of a rush purchase scene. The order business data may also include item information, such as an item identifier, that is, the order business data indicates the rush purchase scene and the goods involved in the rush purchase.
[0095] The order business data may be encrypted using an encryption algorithm to improve the security of data transmission, and then a method acquisition request is sent based on the encrypted order business data, wherein the encryption algorithm may be an AES encryption algorithm or other encryption algorithms.
[0096] After receiving the method acquisition request, the server decrypts the encrypted order business data to obtain the decrypted order business data, and then obtains the corresponding method set from the configuration center based on the decrypted order business data. The configuration center stores the method set corresponding to the order business data. Furthermore, the application server corresponding to the order scenario identifier is obtained based on the decrypted order business data. The application server includes a configuration center, and the configuration center is configured with a method set corresponding to the order scenario identifier. The method set includes multiple index identifiers and a method identifier corresponding to each index identifier. The multiple method identifiers can be randomly generated. Each index identifier and the corresponding method identifier can be stored in a map (key-value pair set) structure. The index identifier can be the coordinates of the method identifier, and the method identifier can be the method name. Requesting the configuration center of the server by encryption and decryption can improve the security of data transmission and effectively prevent the leakage or tampering of sensitive information.
[0097] In the embodiment of the present invention, the seed information is obtained by the server according to the device fingerprint information and the index identifier to be issued, and is encrypted by an asymmetric encryption algorithm;
[0098] Obtaining a target device identifier and a target index identifier from the seed information includes: decrypting the seed information using an asymmetric decryption algorithm to obtain the target device identifier and the target index identifier.
[0099] In an embodiment of the present invention, after receiving the seed acquisition request sent by the page module, the server randomly obtains an index identifier to be issued corresponding to the device fingerprint information from the method set, and encrypts the seed information based on the asymmetric encryption algorithm according to the device fingerprint information and the index identifier to be issued. After receiving the seed information sent by the page module, the application end uses an asymmetric decryption algorithm to obtain the target device fingerprint information and the target index identifier from the seed information. The seed information is generated by an asymmetric encryption algorithm to ensure the security of the seed information, and the seed information is decrypted by an asymmetric decryption algorithm to ensure that only the legitimate application end can decrypt and obtain the correct target device fingerprint information and the target index identifier.
[0100] The order submission method of the embodiment of the present invention, after receiving the seed information sent by the page module, obtains the target device fingerprint information and the target index identifier from the seed information, and then matches the target device fingerprint information with the device fingerprint information. If the match is successful, the target method identifier corresponding to the target index identifier is obtained from the method set, and the target method identifier is sent to the page module, so that the page module sends an order submission request. The method obtains the target method identifier through the seed information and the method set, ensures the security of data transmission, prevents tampering or cracking, and improves the reliability and stability of the system.
[0101] According to another aspect of the embodiment of the present invention, Figure 3 As shown, an order submission method is provided, including:
[0102] Step S301: receiving a seed acquisition request sent by a page module, where the seed acquisition request includes device fingerprint information;
[0103] Step S302: obtaining an index identifier to be issued corresponding to the device fingerprint information, generating seed information corresponding to the seed acquisition request according to the device fingerprint information and the index identifier to be issued, and sending the seed information to the page module;
[0104] Step S303: receiving an order submission request sent by the page module according to a target method identifier, the target method identifier is obtained from a method set according to a target index identifier by matching the target device fingerprint information with the device fingerprint information by the application end, if the match is successful, the target device fingerprint information and the target index identifier are obtained by the application end according to the seed information sent by the page module, and the method set includes multiple index identifiers and a method identifier corresponding to each index identifier;
[0105] Step S304: verify the target method identifier, and if the verification passes, return the order submission result corresponding to the order submission request.
[0106] In an embodiment of the present invention, the execution subject of the order submission method is the server, such as the order submission method can be executed by the server of the shopping application. First, the receiving page module sends a seed acquisition request, and the seed acquisition request includes device fingerprint information; randomly obtains an index identifier to be issued from the method set of the configuration center, and then applies an asymmetric encryption algorithm based on the device fingerprint information and the index identifier to be issued, generates seed information, and returns the seed information to the page module; the receiving page module sends an order submission request based on the target method identifier, verifies the order submission request, and returns the order submission result after the verification passes.
[0107] The target method identifier is obtained from the method set according to the target index identifier when the target device fingerprint information matches the device fingerprint information successfully. The target device fingerprint information and the target index identifier are obtained from the seed information by the application using an asymmetric decryption algorithm.
[0108] In the embodiment of the present invention, verifying the order submission request may include verifying the target method identifier. Specifically, verifying the target method identifier includes:
[0109] According to the index identifier to be issued, the corresponding method identifier to be issued is obtained from the configuration center service; the configuration center service stores the method set;
[0110] Compare the method identifier to be issued with the target method identifier to obtain a comparison result;
[0111] When the comparison result indicates that the method identifier to be issued is the same as the target method identifier, it is determined that the verification is passed.
[0112] In an embodiment of the present invention, the corresponding method identifier to be issued is obtained from the method set of the configuration center according to the index identifier to be issued, and it is determined whether the target method identifier is the same as the method identifier to be issued. If they are the same, the verification passes and the order submission result is returned. Otherwise, the verification fails and the order submission request is intercepted.
[0113] In an embodiment of the present invention, the order submission request includes the target device fingerprint information, and the order submission request is verified, which may also include verifying the target device fingerprint information and the target method identifier. Specifically, the target device fingerprint information is compared with the stored device fingerprint information, and the target method identifier is compared with the method identifier to be issued. If the target device fingerprint information is the same as the stored device fingerprint information and the target method identifier is the same as the method identifier to be issued, the verification passes; otherwise, the verification fails.
[0114] The order submission method of the embodiment of the present invention, after receiving the seed acquisition request sent by the page module, generates seed information according to the device fingerprint information and the index identifier to be issued, which can ensure that the request comes from a legitimate device and prevent the transmitted data from being tampered with or cracked; the order submission request sent by the receiving page module is sent by the target method identifier obtained through the seed information, and the target method identifier is verified to intercept illegal requests, thereby improving the security, reliability and stability of the system.
[0115] Figure 4The interactive diagram of an order submission method of an embodiment of the present invention. The order submission method is applied to a rush-buying scenario. The application sends a method acquisition request to the server to obtain a method set for rush-buying. The method acquisition request indicates encrypted order business data, and the order business data includes a rush-buying scenario identifier. After receiving the method acquisition request, the server decrypts the encrypted order business data to obtain the decrypted order business data, requests the configuration center service to obtain the method set corresponding to the rush-buying scenario identifier, and returns the method set to the application. The method set includes multiple index identifiers and method identifiers corresponding to each index identifier, and the multiple method identifiers are randomly generated.
[0116] The H5 purchase page sends an information acquisition request to the application end. The information acquisition request indicates the calling method. The application end executes the calling method to obtain the device fingerprint information, and the application end returns the device fingerprint information to the H5 purchase page. The H5 purchase page sends a seed acquisition request to the server end according to the device fingerprint information. The server end generates seed information by applying an asymmetric encryption algorithm according to the device fingerprint information and the randomly obtained index identifier to be issued, and returns the seed information to the H5 purchase page.
[0117] The H5 purchase page sends the seed information to the application end;
[0118] After receiving the seed information, the application uses an asymmetric decryption algorithm to decrypt the seed information, obtain the target device fingerprint information and the target index identifier, match the target device fingerprint information with the device fingerprint information, and if the match is successful, obtain the target method identifier corresponding to the target index identifier from the method set, and return the target method identifier to the H5 purchase page;
[0119] The H5 shopping page sends an order submission request to the server according to the target method identifier. The server verifies the order submission request and returns the order submission result after the verification passes.
[0120] According to another aspect of the embodiment of the present invention, Figure 5 As shown, an order submission device 500 is provided, comprising:
[0121] The first sending module 501 sends a seed acquisition request to the server, where the seed acquisition request includes device fingerprint information;
[0122] The first receiving module 502 receives the seed information corresponding to the seed acquisition request returned by the server, and sends the seed information to the application;
[0123] The submission module 503 receives the target method identifier sent by the application end, and sends an order submission request to the server end according to the target method identifier, wherein the target method identifier is obtained from the method set according to the target index identifier when the application end matches the target device fingerprint information with the device fingerprint information. When the match is successful, the target device fingerprint information and the target index identifier are obtained by the application end according to the seed information, and the method set includes multiple index identifiers and a method identifier corresponding to each index identifier.
[0124] In the embodiment of the present invention, the first sending module 501 is further used to: before sending the seed acquisition request to the server, send a request to obtain device fingerprint information to the application end, and receive the device fingerprint information returned by the application end.
[0125] In an embodiment of the present invention, the submission module 503 is also used to: after sending an order submission request to the server according to the target method identifier, receive an order submission result corresponding to the order submission request returned by the server, and the order submission result is obtained by the server after verifying the target method identifier.
[0126] According to another aspect of the embodiment of the present invention, Figure 6 As shown, an order submission device 600 is provided, comprising:
[0127] The second receiving module 601 receives seed information sent by the page module, where the seed information is obtained from the server by the page module sending a seed acquisition request to the server according to the device fingerprint information;
[0128] An acquisition module 602 acquires target device fingerprint information and target index identifier from seed information;
[0129] The matching module 603 matches the target device fingerprint information with the device fingerprint information, and if the match is successful, obtains the target method identifier corresponding to the target index identifier from the method set; the method set includes multiple index identifiers and a method identifier corresponding to each index identifier;
[0130] The second sending module 604 sends the target method identifier to the page end, so that the page end sends an order submission request to the server end according to the target method identifier.
[0131] In an embodiment of the present invention, the second receiving module 601 is also used to: before receiving the seed information sent by the page module, receive an information acquisition request sent by the page module, and the information acquisition request indicates a calling method; execute the calling method to obtain the device fingerprint information, and return the device fingerprint information to the page module.
[0132] In an embodiment of the present invention, the matching module 603 is also used to: before obtaining the target method identifier corresponding to the target index identifier from the method set, send a method acquisition request to the server, the method acquisition request including encrypted order business data; receive the method set corresponding to the method acquisition request returned by the server, the method set is obtained from the configuration center after the server decrypts the encrypted order business data, and the configuration center stores the method set corresponding to the order business data.
[0133] In the embodiment of the present invention, the seed information is obtained by the server according to the device fingerprint information and the index identifier to be issued, and encrypted by an asymmetric encryption algorithm;
[0134] The acquisition module 602 is further used to: use an asymmetric decryption algorithm to decrypt the seed information to obtain the target device identifier and the target index identifier.
[0135] According to another aspect of the embodiment of the present invention, Figure 7 As shown, an order submission device 700 is provided, comprising:
[0136] The third receiving module 701 receives a seed acquisition request sent by the page module, where the seed acquisition request includes device fingerprint information;
[0137] The third sending module 702 obtains the index identifier to be issued corresponding to the device fingerprint information, generates seed information corresponding to the seed acquisition request according to the device fingerprint information and the index identifier to be issued, and sends the seed information to the page module;
[0138] The fourth receiving module 703 receives the order submission request sent by the page module according to the target method identifier, the target method identifier is obtained from the method set according to the target index identifier by the application end matching the target device fingerprint information with the device fingerprint information when the match is successful, the target device fingerprint information and the target index identifier are obtained by the application end according to the seed information sent by the page module, and the method set includes multiple index identifiers and a method identifier corresponding to each index identifier;
[0139] The verification module 704 verifies the target method identifier, and returns the order submission result corresponding to the order submission request if the verification passes.
[0140] In an embodiment of the present invention, the verification module 704 is further used to: obtain a corresponding method identifier to be issued from a configuration center service according to the index identifier to be issued; the configuration center service stores the method set; compare the method identifier to be issued with the target method identifier to obtain a comparison result; when the comparison result indicates that the method identifier to be issued is the same as the target method identifier, determine that the verification is passed.
[0141] According to another aspect of an embodiment of the present invention, there is provided an electronic device, comprising: one or more processors; a storage device for storing one or more programs, wherein when the one or more programs are executed by the one or more processors, the one or more processors implement the order submission method provided by the present invention.
[0142] According to another aspect of an embodiment of the present invention, a computer-readable medium is provided, on which a computer program is stored, and when the program is executed by a processor, the order submission method provided by the present invention is implemented.
[0143] Figure 8 An exemplary system architecture 800 is shown to which an order submission method or an order submission device according to an embodiment of the present invention can be applied.
[0144] like Figure 8 As shown, system architecture 800 may include terminal devices 801, 802, 803, a network 804, and a server 805. Network 804 is used to provide a medium for communication links between terminal devices 801, 802, 803 and server 805. Network 804 may include various connection types, such as wired, wireless communication links, or optical fiber cables, etc.
[0145] Users can use terminal devices 801, 802, and 803 to interact with server 805 through network 804 to receive or send messages, etc. Various communication client applications can be installed on terminal devices 801, 802, and 803, such as shopping applications, web browser applications, search applications, instant messaging tools, email clients, social platform software, etc. (only examples).
[0146] The terminal devices 801 , 802 , and 803 may be various electronic devices having a display screen and supporting web browsing, including but not limited to smart phones, tablet computers, laptop computers, desktop computers, and the like.
[0147] The server 805 may be a server that provides various services, such as a backend management server (only an example) that provides support for shopping websites browsed by users using the terminal devices 801, 802, and 803. The backend management server may analyze and process the received data such as product information query requests, and feed back the processing results (such as target push information, product information - only an example) to the terminal device.
[0148] It should be noted that the order submission method provided in the embodiment of the present invention is generally executed by the terminal device 801, 802, 803 or the server 805, and accordingly, the order submission device is generally arranged in the terminal device 801, 802, 803 or the server 805.
[0149] It should be understood that Figure 8 The number of terminal devices, networks and servers in the embodiment is only for illustration. Any number of terminal devices, networks and servers may be provided according to implementation requirements.
[0150] Reference below Fig. 9 , which shows a schematic diagram of the structure of a computer system 900 of a terminal device suitable for implementing an embodiment of the present invention. Fig. 9 The terminal device shown is only an example and should not bring any limitation to the functions and scope of use of the embodiments of the present invention.
[0151] like Fig. 9 As shown, the computer system 900 includes a central processing unit (CPU) 901, which can perform various appropriate actions and processes according to a program stored in a read-only memory (ROM) 902 or a program loaded from a storage part 908 into a random access memory (RAM) 903. In the RAM 903, various programs and data required for the operation of the system 900 are also stored. The CPU 901, the ROM 902, and the RAM 903 are connected to each other via a bus 904. An input / output (I / O) interface 905 is also connected to the bus 904.
[0152] The following components are connected to the I / O interface 905: an input section 906 including a keyboard, a mouse, etc.; an output section 907 including a cathode ray tube (CRT), a liquid crystal display (LCD), etc., and a speaker, etc.; a storage section 908 including a hard disk, etc.; and a communication section 909 including a network interface card such as a LAN card, a modem, etc. The communication section 909 performs communication processing via a network such as the Internet. A drive 910 is also connected to the I / O interface 905 as needed. A removable medium 911, such as a magnetic disk, an optical disk, a magneto-optical disk, a semiconductor memory, etc., is installed on the drive 910 as needed, so that a computer program read therefrom is installed into the storage section 908 as needed.
[0153] In particular, according to the embodiments disclosed in the present invention, the process described above with reference to the flowchart can be implemented as a computer software program. For example, the embodiments disclosed in the present invention include a computer program product, which includes a computer program carried on a computer-readable medium, and the computer program includes a program code for executing the method shown in the flowchart. In such an embodiment, the computer program can be downloaded and installed from the network through the communication part 909, and / or installed from the removable medium 911. When the computer program is executed by the central processing unit (CPU) 901, the above-mentioned functions defined in the system of the present invention are executed.
[0154] It should be noted that the computer-readable medium shown in the present invention may be a computer-readable signal medium or a computer-readable storage medium or any combination of the above two. The computer-readable storage medium may be, for example, but not limited to, an electrical, magnetic, optical, electromagnetic, infrared, or semiconductor system, device or device, or any combination of the above. More specific examples of computer-readable storage media may include, but are not limited to: an electrical connection with one or more wires, a portable computer disk, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), an optical fiber, a portable compact disk read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination of the above. In the present invention, a computer-readable storage medium may be any tangible medium containing or storing a program that can be used by or in combination with an instruction execution system, device or device. In the present invention, a computer-readable signal medium may include a data signal propagated in a baseband or as part of a carrier wave, which carries a computer-readable program code. This propagated data signal may take a variety of forms, including but not limited to electromagnetic signals, optical signals, or any suitable combination of the above. Computer-readable signal media may also be any computer-readable medium other than computer-readable storage media, which may send, propagate or transmit a program for use by or in conjunction with an instruction execution system, apparatus or device. The program code contained on the computer-readable medium may be transmitted using any appropriate medium, including but not limited to: wireless, wire, optical cable, RF, etc., or any suitable combination of the above.
[0155] The flow chart and block diagram in the accompanying drawings illustrate the possible architecture, function and operation of the system, method and computer program product according to various embodiments of the present invention. In this regard, each box in the flow chart or block diagram can represent a module, a program segment, or a part of a code, and the above-mentioned module, program segment, or a part of a code contains one or more executable instructions for realizing the specified logical function. It should also be noted that in some alternative implementations, the functions marked in the box can also occur in a different order from the order marked in the accompanying drawings. For example, two boxes represented in succession can actually be executed substantially in parallel, and they can sometimes be executed in the opposite order, depending on the functions involved. It should also be noted that each box in the block diagram or flow chart, and the combination of the boxes in the block diagram or flow chart can be implemented with a dedicated hardware-based system that performs a specified function or operation, or can be implemented with a combination of dedicated hardware and computer instructions.
[0156] The modules involved in the embodiments of the present invention may be implemented by software or hardware. The modules described may also be arranged in a processor, for example, it may be described as: a processor includes a first sending module, a first receiving module and a submitting module. The names of these modules do not constitute a limitation on the modules themselves in some cases, for example, the first sending module may also be described as a "module for sending a seed acquisition request to a server".
[0157] As another aspect, the present invention also provides a computer-readable medium, which may be included in the device described in the above embodiment; or it may exist independently and not be assembled into the device. The above computer-readable medium carries one or more programs. When the above one or more programs are executed by a device, the device includes: sending a seed acquisition request to the server, the seed acquisition request includes device fingerprint information; receiving seed information corresponding to the seed acquisition request returned by the server, and sending the seed information to the application; receiving the target method identifier sent by the application, and sending an order submission request to the server according to the target method identifier, wherein the target method identifier is obtained from the method set according to the target index identifier by the application matching the target device fingerprint information with the device fingerprint information, and when the match is successful, the target device fingerprint information and the target index identifier are obtained by the application according to the seed information, and the method set includes multiple index identifiers and method identifiers corresponding to each index identifier.
[0158] According to the technical solution of the embodiment of the present invention, the order submission method of the embodiment of the present invention obtains seed information from the server by sending a seed acquisition request including device fingerprint information to the server; then the seed information is sent to the application, so that the application obtains the target device fingerprint information and the target index identifier according to the seed information, and when the target device fingerprint information matches the device fingerprint information successfully, the corresponding target method identifier is obtained from the method set according to the target index identifier; the target method identifier returned by the application is received, and an order submission request is sent to the server according to the target method identifier. The method obtains seed information according to the device fingerprint information, obtains the target method identifier through the seed information, realizes order submission, improves the security of data transmission, can intercept illegal order submission requests, realizes the interception of risky traffic, effectively prevents information leakage or tampering, improves the reliability and stability of the rush purchase system, and thus improves the user experience.
[0159] The above specific implementations do not constitute a limitation on the protection scope of the present invention. It should be understood by those skilled in the art that various modifications, combinations, sub-combinations and substitutions may occur depending on design requirements and other factors. Any modification, equivalent substitution and improvement made within the spirit and principle of the present invention shall be included in the protection scope of the present invention.
Claims
1. A method for submitting an order, characterized in that: include: Sending a seed acquisition request to the server, wherein the seed acquisition request includes device fingerprint information; Receiving the seed information corresponding to the seed acquisition request returned by the server, and sending the seed information to the application; Receive a target method identifier sent by the application end, and send an order submission request to the server end according to the target method identifier, wherein the target method identifier is obtained from a method set according to a target index identifier when the application end matches the target device fingerprint information with the device fingerprint information and, if the match is successful, the target device fingerprint information and the target index identifier are obtained by the application end according to the seed information, and the method set includes multiple index identifiers and a method identifier corresponding to each index identifier.
2. The method according to claim 1, characterized in that Before sending a seed acquisition request to the server, it also includes: Send a request to obtain device fingerprint information to the application end, and receive the device fingerprint information returned by the application end.
3. The method according to claim 1, characterized in that After sending the order submission request to the server according to the target method identifier, it includes: Receive an order submission result corresponding to the order submission request returned by the server, wherein the order submission result is obtained by the server after verifying the target method identifier.
4. An order submission method, characterized in that: include: Receiving seed information sent by the page module, the seed information is obtained from the server by the page module sending a seed acquisition request to the server according to the device fingerprint information; Obtaining target device fingerprint information and target index identifier from the seed information; Matching the target device fingerprint information with the device fingerprint information, and if the match is successful, obtaining a target method identifier corresponding to the target index identifier from a method set; the method set includes multiple index identifiers and a method identifier corresponding to each index identifier; The target method identifier is sent to the page module, so that the page module sends an order submission request to the server according to the target method identifier.
5. The method according to claim 4, characterized in that Before receiving the seed information sent by the page module, it also includes: Receiving an information acquisition request sent by the page module, wherein the information acquisition request indicates a calling method; The calling method is executed to obtain the device fingerprint information, and the device fingerprint information is returned to the page module.
6. The method according to claim 4, characterized in that Before obtaining the target method identifier corresponding to the target index identifier from the method set, the method further includes: Sending a method acquisition request to the server, wherein the method acquisition request includes encrypted order business data; Receive the method set corresponding to the method acquisition request returned by the server, where the method set is obtained from the configuration center based on the decrypted order business data after the server decrypts the encrypted order business data, and the configuration center stores the method set corresponding to the order business data.
7. The method according to claim 4, characterized in that: The seed information is obtained by the server according to the device fingerprint information and the index identifier to be issued, and is encrypted by an asymmetric encryption algorithm; Obtaining a target device identifier and a target index identifier from the seed information includes: The seed information is decrypted using an asymmetric decryption algorithm to obtain the target device identifier and the target index identifier.
8. An order submission method, characterized in that: include: Receive a seed acquisition request sent by the page module, wherein the seed acquisition request includes device fingerprint information; Acquire an index identifier to be issued corresponding to the device fingerprint information, generate seed information corresponding to the seed acquisition request according to the device fingerprint information and the index identifier to be issued, and send the seed information to the page module; Receiving an order submission request sent by the page module according to a target method identifier, the target method identifier is obtained by the application end by matching the target device fingerprint information with the device fingerprint information, and if the match is successful, the target device fingerprint information and the target index identifier are obtained by the application end according to the seed information sent by the page module, and the method set includes multiple index identifiers and a method identifier corresponding to each index identifier; The target method identifier is verified, and if the verification passes, an order submission result corresponding to the order submission request is returned.
9. The method according to claim 7, characterized in that: Verifying the target method identifier includes: Obtaining a corresponding method identifier to be issued from a configuration center service according to the index identifier to be issued; the configuration center service stores the method set; Compare the method identifier to be issued with the target method identifier to obtain a comparison result; When the comparison result indicates that the method identifier to be issued is the same as the target method identifier, it is determined that the verification is passed.
10. An order submission device, characterized in that: include: A first sending module sends a seed acquisition request to a server, wherein the seed acquisition request includes device fingerprint information; A first receiving module receives the seed information corresponding to the seed acquisition request returned by the server, and sends the seed information to the application end; A submission module receives a target method identifier sent by the application end, and sends an order submission request to the server end according to the target method identifier, wherein the target method identifier is obtained from a method set according to a target index identifier when the application end matches the target device fingerprint information with the device fingerprint information and, if the match is successful, the target device fingerprint information and the target index identifier are obtained by the application end according to the seed information, and the method set includes multiple index identifiers and a method identifier corresponding to each index identifier.
11. An order submission device, characterized in that: include: A second receiving module receives seed information sent by the page module, where the page module sends a seed acquisition request to the server according to the device fingerprint information and obtains the seed information from the server; An acquisition module, which acquires target device fingerprint information and target index identifier from the seed information; a matching module, matching the target device fingerprint information with the device fingerprint information, and obtaining a target method identifier corresponding to the target index identifier from a method set if the match is successful; the method set includes multiple index identifiers and a method identifier corresponding to each index identifier; The second sending module sends the target method identifier to the page end, so that the page end sends an order submission request to the server end according to the target method identifier.
12. An order submission device, characterized in that: include: A third receiving module receives a seed acquisition request sent by the page module, wherein the seed acquisition request includes device fingerprint information; a third sending module, which obtains an index identifier to be issued corresponding to the device fingerprint information, generates seed information corresponding to the seed acquisition request according to the device fingerprint information and the index identifier to be issued, and sends the seed information to the page module; a fourth receiving module, receiving an order submission request sent by the page module according to a target method identifier, wherein the target method identifier is obtained from a method set according to a target index identifier by matching the target device fingerprint information with the device fingerprint information by the application end, if the match is successful, wherein the target device fingerprint information and the target index identifier are obtained by the application end according to the seed information sent by the page module, and the method set includes a plurality of index identifiers and a method identifier corresponding to each index identifier; The verification module verifies the target method identifier and returns an order submission result corresponding to the order submission request if the verification passes.
13. An electronic device, characterized in that: include: one or more processors; a storage device for storing one or more programs, When the one or more programs are executed by the one or more processors, the one or more processors implement the method according to any one of claims 1 to 9.
14. A computer readable medium having a computer program stored thereon, characterized in that: When the program is executed by a processor, the method according to any one of claims 1 to 9 is implemented.
Citation Information
Patent Citations
Data query and calculation method and system and storage medium
CN111783108A
Order processing method, system and device, order query method, system and device and electronic equipment
CN113127231A
Order information query system, order information query method, device and equipment
CN114722262A
Business processing method and device, electronic equipment and computer readable medium
CN115965440A
Light emitting display device and manufacturing method thereof
KR1020250064127A