An order submission method and apparatus
By obtaining device fingerprint information from the H5 flash sale page and generating seed information using an asymmetric encryption algorithm, and matching the target method identifier to send an order submission request, the problem of low security of the H5 flash sale page is solved, and the security of data transmission and system stability are improved.
Patent Information
- Application Number
- CN202411943338.0
- Authority / Receiving Office
- CN · China
- Patent Type
- Patents(China)
- Current Assignee / Owner
- Filing Date
- 2024-12-26
- Publication Date
- 2026-02-17
- Estimated Expiration
- 2044-12-26
AI Technical Summary
The signature verification function on H5 flash sale pages is easily cracked, making it difficult to effectively intercept order submission requests and resulting in low security.
Seed information is obtained by sending device fingerprint information to the server. The application matches the target device fingerprint information to obtain the target method identifier. Based on the target method identifier, an order submission request is sent to the server. Asymmetric encryption algorithm is used to ensure data transmission security.
It enhances the security of the order submission process, effectively blocks illegal requests, prevents information leakage or tampering, improves the reliability and stability of the flash sale system, and enhances the user experience.
Smart Images

Figure CN119762192B_ABST
Abstract
Description
TECHNICAL FIELD
[0001] The present application relates to the technical field of computer, and in particular to an order submission method and device. BACKGROUND
[0002] In the field of e-commerce, the purchase scene is a scene in which consumers purchase goods or services in a specific scenario of time limit and quantity limit. In the purchase scene, the front end and the service end generally perform the functions of signing and verifying the data transmission to intercept abnormal order submission requests. The purchase page of the front end generally uses an H5 purchase page to adapt to the multiplicity of the front end.
[0003] However, the code of the H5 purchase page has a low cracking cost, and the signing and verifying function is easily cracked illegally, or the signing and verifying function is simulated by calling the code of the real user, so that the illegal order submission request cannot be intercepted, and the security is low. SUMMARY
[0004] Therefore, the embodiments of the present application provide an order submission method and device, which can improve the security of the order submission process, improve the reliability and stability of the system, and further improve the user experience.
[0005] To achieve the above-mentioned purpose, according to an aspect of an embodiment of the present application, an order submission method is provided, comprising:
[0006] sending a seed acquisition request to a service end, wherein the seed acquisition request comprises device fingerprint information;
[0007] receiving seed information returned by the service end corresponding to the seed acquisition request, and sending the seed information to an application end;
[0008] receiving a target method identifier sent by the application end, and sending an order submission request to the service end according to the target method identifier, wherein the target method identifier is obtained from a method set according to a target index identifier by matching the target device fingerprint information with the device fingerprint information by the application end, the target device fingerprint information and the target index identifier are obtained by the application end according to the seed information, and the method set comprises a plurality of index identifiers and a method identifier corresponding to each index identifier.
[0009] Optionally, before sending the seed acquisition request to the service end, the method further comprises:
[0010] sending a device fingerprint information acquisition request to the application end, and receiving the device fingerprint information returned by the application end.
[0011] Optionally, after sending the order submission request to the service end according to the target method identifier, the method further comprises:
[0012] receiving an order submission result corresponding to the order submission request returned by the server, the order submission result being obtained by the server after the target method identifier is verified.
[0013] According to another aspect of the embodiment of the present application, an order submission method is provided, comprising:
[0014] receiving seed information sent by a page module, the seed information being obtained by the page module from a server according to a device fingerprint information by sending a seed acquisition request to the server;
[0015] obtaining target device fingerprint information and a target index identifier from the seed information;
[0016] matching the target device fingerprint information with the device fingerprint information, and obtaining a target method identifier corresponding to the target index identifier from a method set in the case of successful matching, the method set comprising a plurality of index identifiers and a method identifier corresponding to each index identifier;
[0017] sending the target method identifier to the page module, so that the page module sends an order submission request to the server according to the target method identifier.
[0018] Optionally, before receiving the seed information sent by the page module, the method further comprises:
[0019] receiving an information acquisition request sent by the page module, the information acquisition request indicating a calling method;
[0020] obtaining the device fingerprint information by executing the calling method, and returning the device fingerprint information to the page module.
[0021] Optionally, before obtaining the target method identifier corresponding to the target index identifier from the method set, the method further comprises:
[0022] sending a method acquisition request to the server, the method acquisition request comprising encrypted order business data;
[0023] receiving the method set corresponding to the method acquisition request returned by the server, the method set being obtained by the server from a configuration center according to decrypted order business data after the encrypted order business data is decrypted, the configuration center storing a method set corresponding to the order business data.
[0024] Optionally, the seed information is obtained by the server according to the device fingerprint information and an index identifier to be issued, and is encrypted by an asymmetric encryption algorithm;
[0025] obtaining a target device identifier and a target index identifier from the seed information, comprising:
[0026] decrypting the seed information by using an asymmetric decryption algorithm to obtain the target device identifier and the target index identifier.
[0027] According to still another aspect of the embodiments of the present application, an order submission method is provided, comprising:
[0028] receiving a seed obtaining request sent by a page module, the seed obtaining request comprising device fingerprint information;
[0029] obtaining an index identifier to be issued corresponding to the device fingerprint information, generating seed information corresponding to the seed obtaining request according to the device fingerprint information and the index identifier to be issued, and sending the seed information to the page module;
[0030] receiving an order submission request sent by the page module according to a target method identifier, the target method identifier being obtained from a method set according to a target index identifier in a case that target device fingerprint information is matched with the device fingerprint information by an application end, the target device fingerprint information and the target index identifier being obtained by the application end according to the seed information sent by the page module, the method set comprising a plurality of index identifiers and method identifiers corresponding to each index identifier;
[0031] verifying the target method identifier, and returning an order submission result corresponding to the order submission request in a case that the verification is passed.
[0032] Optionally, verifying the target method identifier comprises:
[0033] obtaining a method identifier to be issued corresponding to the index identifier to be issued from a configuration center service, the configuration center service storing the method set;
[0034] comparing the method identifier to be issued with the target method identifier to obtain a comparison result;
[0035] determining that the verification is passed in a case that the comparison result indicates that the method identifier to be issued is same as the target method identifier.
[0036] According to still another aspect of the embodiments of the present application, an order submission device is provided, comprising:
[0037] a first sending module configured to send a seed obtaining request to a server, the seed obtaining request comprising device fingerprint information;
[0038] The first receiving module receives the seed information corresponding to the seed acquisition request returned by the server and sends the seed information to the application end.
[0039] The submitting module receives the target method identifier sent by the application end, and sends an order submitting request to the server according to the target method identifier, wherein the target method identifier is obtained from a method set according to a target index identifier in a case that the target device fingerprint information is matched with the device fingerprint information by the application end, the target device fingerprint information and the target index identifier are obtained by the application end according to the seed information, and the method set includes a plurality of index identifiers and a method identifier corresponding to each index identifier.
[0040] According to still another aspect of the embodiment of the present application, an order submitting device is provided, which comprises:
[0041] The second receiving module receives the seed information sent by the page module, wherein the seed information is obtained from the server by the page module according to the device fingerprint information and by sending a seed acquisition request to the server;
[0042] The obtaining module obtains target device fingerprint information and a target index identifier from the seed information;
[0043] The matching module matches the target device fingerprint information with the device fingerprint information, and obtains a target method identifier corresponding to the target index identifier from a method set in a case that the matching is successful, wherein the method set includes a plurality of index identifiers and a method identifier corresponding to each index identifier;
[0044] The second sending module sends the target method identifier to the page end, so that the page end sends an order submitting request to the server according to the target method identifier.
[0045] According to still another aspect of the embodiment of the present application, an order submitting device is provided, which comprises:
[0046] The third receiving module receives a seed acquisition request sent by a page module, wherein the seed acquisition request includes device fingerprint information;
[0047] The third sending module obtains an index identifier to be issued corresponding to the device fingerprint information, generates seed information corresponding to the seed acquisition request according to the device fingerprint information and the index identifier to be issued, and sends the seed information to the page module.
[0048] a fourth receiving module, configured to receive an order submission request sent by the page module according to a target method identifier, the target method identifier being obtained from a method set according to a target index identifier in a case that target device fingerprint information is matched with the device fingerprint information by the application end, the target device fingerprint information and the target index identifier being obtained by the application end according to the seed information sent by the page module, the method set including a plurality of index identifiers and a method identifier corresponding to each index identifier;
[0049] a checking module, configured to check the target method identifier, and return an order submission result corresponding to the order submission request in a case that the checking is passed.
[0050] According to another aspect of the embodiments of the present application, an electronic device is provided, including:
[0051] one or more processors;
[0052] a storage device configured to store one or more programs,
[0053] when the one or more programs are executed by the one or more processors, the one or more processors implement the order submission method provided by the present application.
[0054] According to still another aspect of the embodiments of the present application, a computer readable medium having a computer program stored thereon is provided, the program being executed by a processor to implement the order submission method provided by the present application.
[0055] The order submission method provided by the embodiments of the present application has the following advantages or beneficial effects: the order submission method provided by the embodiments of the present application sends a seed acquisition request including device fingerprint information to a server to obtain seed information from the server; then sends the seed information to an application end to make the application end obtain target device fingerprint information and a target index identifier according to the seed information, in a case that the target device fingerprint information is matched with the device fingerprint information successfully, obtains a corresponding target method identifier from a method set according to the target index identifier; receives the target method identifier returned by the application end, and sends an order submission request to the server according to the target method identifier. The method obtains seed information according to device fingerprint information, obtains a target method identifier through the seed information, implements order submission, improves the security of data transmission, can intercept illegal order submission requests, implements interception of risk traffic, effectively prevents information leakage or tampering, improves the reliability and stability of a purchase system, and further improves user experience.
[0056] Further effects of the above non-conventional optional modes will be described in the following combined with specific embodiments. BRIEF DESCRIPTION OF DRAWINGS
[0057] The accompanying drawings are used to better understand the present application and do not constitute undue limitations on the present application. Among them:
[0058] Figure 1 is a schematic diagram of the main process of an order submission method according to an embodiment of the present application;
[0059] Figure 2 is a schematic diagram of the main process of another order submission method according to an embodiment of the present application;
[0060] Figure 3 is a schematic diagram of the main process of yet another order submission method according to an embodiment of the present application;
[0061] Figure 4 is a schematic diagram of the process of an order submission method according to an embodiment of the present application;
[0062] Figure 5 is a schematic diagram of the main modules of an order submission device according to an embodiment of the present application;
[0063] Figure 6 is a schematic diagram of the main modules of another order submission device according to an embodiment of the present application;
[0064] Figure 7 is a schematic diagram of the main modules of yet another order submission device according to an embodiment of the present application;
[0065] Figure 8 is an exemplary system architecture diagram to which an embodiment of the present application can be applied;
[0066] Figure 9 is a structural schematic diagram of a computer system of a terminal device or a server suitable for implementing an embodiment of the present application. DETAILED DESCRIPTION
[0067] The exemplary embodiments of the present application are described below with reference to the accompanying drawings, which include various details of the embodiments of the present application to assist in understanding, and should be considered as merely exemplary. Therefore, those of ordinary skill in the art should recognize that various changes and modifications can be made to the embodiments described herein without departing from the scope and spirit of the present application. Also, in order to be clear and concise, descriptions of well-known functions and structures are omitted in the following description.
[0068] Figure 1 is a schematic diagram of the main process of an order submission method according to an embodiment of the present application, as Figure 1 shown, the order submission method comprises the following steps:
[0069] Step S101: sending a seed acquisition request to a server, the seed acquisition request comprising device fingerprint information;
[0070] Step S102: receiving the seed information corresponding to the seed acquisition request returned by the server, and sending the seed information to the application end;
[0071] Step S103: receiving the target method identifier sent by the application end, and sending an order submission request to the server according to the target method identifier, wherein the target method identifier is obtained from the method set according to the target index identifier by matching the target device fingerprint information with the device fingerprint information by the application end, the target device fingerprint information and the target index identifier are obtained by the application end according to the seed information, and the method set includes a plurality of index identifiers and a method identifier corresponding to each index identifier.
[0072] In the embodiment of the application, the order submission method is executed on the client side, and the execution subject can be an H5 (a page design form based on HTML5 technology) grab page embedded in the application end, i.e., the application program end, i.e., the page module. That is, the order submission method can be executed by the H5 grab page embedded in the shopping software for grabbing goods. The order submission method can be applied to the grab scene in the e-commerce field, and can further intercept illegal order submission requests on the basis of the signing and verification function, thereby improving the security of data transmission.
[0073] In the embodiment of the application, the H5 grab page sends a seed acquisition request to the server, and the seed acquisition request includes device fingerprint information, which is used to identify the device on which the client is installed, i.e., the device fingerprint information can be a device identifier such as eid (electronic identifier). The device fingerprint information is used to request the server to obtain the seed information corresponding to the seed acquisition request, and then the seed information is used to obtain the order submission interface, and the order submission is realized according to the order submission interface. The seed acquisition request is a request for obtaining seed information, different seed information corresponds to different order submission interfaces, i.e., the seed for obtaining the order submission interface. The seed information is generated by encrypting the target device fingerprint information and the target index identifier by using an asymmetric encryption algorithm; the target device fingerprint information and the target index identifier can be obtained by decrypting the seed information by using an asymmetric decryption algorithm, and then the target method identifier is obtained, the corresponding order submission interface is determined according to the target method identifier, and the order submission is realized.
[0074] After receiving the seed information returned by the server, the seed information is sent to the application end, so that the application end processes the seed information, and then receives the target method identifier returned by the application end, the target method identifier is used to identify the target method, i.e., the order submission interface. An order submission request is sent to the server according to the target method identifier, and a normal order submission process is performed to obtain the corresponding order submission result.
[0075] The application end obtains target device fingerprint information and a target index identifier from the seed information after receiving the seed information, matches the target device fingerprint information with the device fingerprint information, and if they are the same, the matching is successful, the corresponding target method identifier is obtained from the method set according to the target index identifier, the method set includes multiple index identifiers and method identifiers corresponding to each index identifier, and the method identifier is queried from the method set through the index identifier, so that the security of the obtained method identifier can be ensured.
[0076] In the embodiment of the application, before the seed acquisition request is sent to the service end, the method further comprises: sending an acquisition request of the device fingerprint information to the application end, and receiving the device fingerprint information returned by the application end. That is, the device fingerprint information is obtained from the application end by sending an acquisition request to the application end. Since the H5 purchase page is embedded in the application end, the device fingerprint information can be obtained from the application end, and the security of the purchase page can be increased by obtaining the device fingerprint information, so that the order submission request sent to the service end is ensured to come from a legal device, tampering is effectively prevented, and the security is ensured.
[0077] In the embodiment of the application, after the order submission request is sent to the service end according to the target method identifier, the method further comprises:
[0078] Receiving an order submission result corresponding to the order submission request returned by the service end, the order submission result being obtained by the service end after the target method identifier is verified.
[0079] In the embodiment of the application, after the order submission request is sent to the service end, the service end verifies the order submission request, including verifying the target method identifier, and determining whether the target method identifier exists in the service end, the service end including a configuration center service, the configuration center service including a method set, if yes, the verification is passed, otherwise, the verification is not passed.
[0080] In the embodiment of the application, after the seed information is sent to the application end, the target device fingerprint information sent by the application end is received, the order submission request includes the target device fingerprint information, and the order submission result can also be obtained by the service end after the target device fingerprint information and the target method identifier are verified. That is, it is determined whether the target device fingerprint information is the same as the device fingerprint information stored in the service end and whether the target method identifier exists in the service end, if yes, the verification is passed, if no, the verification is not passed. The device fingerprint information stored in the service end can be obtained from the seed acquisition request.
[0081] The order submission method of the embodiment of the application comprises the following steps: a seed information acquisition request including device fingerprint information is sent to a server to acquire seed information from the server; the seed information is sent to an application end to enable the application end to acquire target device fingerprint information and a target index identifier according to the seed information, acquire a corresponding target method identifier from a method set according to the target index identifier in the case that the target device fingerprint information matches the device fingerprint information successfully; and an order submission request is sent to the server according to the target method identifier returned by the application end. The method acquires seed information according to device fingerprint information, acquires a target method identifier through the seed information, realizes order submission, improves the security of data transmission, can intercept illegal order submission requests, realizes the interception of risk traffic, effectively prevents information leakage or tampering, improves the reliability and stability of the purchase system, and further improves the user experience.
[0082] Another aspect of the embodiment of the application provides an order submission method, as shown in the following. Figure 2 The order submission method comprises the following steps:
[0083] Step S201: receiving seed information sent by a page module, wherein the seed information is acquired from a server by the page module according to device fingerprint information and by sending a seed acquisition request to the server;
[0084] Step S202: acquiring target device fingerprint information and a target index identifier from the seed information;
[0085] Step S203: matching the target device fingerprint information with the device fingerprint information, and acquiring a target method identifier corresponding to the target index identifier from a method set in the case that the matching is successful, wherein the method set comprises a plurality of index identifiers and a method identifier corresponding to each index identifier;
[0086] Step S204: sending the target method identifier to the page module to enable the page module to send an order submission request to the server according to the target method identifier.
[0087] In the embodiment of the application, the order submission method is executed on a client, and the execution subject can be an application end of the client, for example, the order submission method can be executed by a shopping application, and the shopping application comprises a shopping APP, a web version and other forms, and in addition to the software itself, the shopping application also comprises a complete shopping experience scene. First, seed information sent by a page module is received, wherein the seed information is acquired from a server by the page module according to device fingerprint information, that is, the page module sends a seed acquisition request to the server, the seed acquisition request includes device fingerprint information, and the server returns seed information to the page module according to the device fingerprint information.
[0088] The target device fingerprint information and the target index identifier are acquired from the seed information, and then the target device fingerprint information and the device fingerprint information are matched, that is, whether they are the same is judged, if yes, the corresponding target method identifier is acquired from the method set according to the target index identifier, and the target method identifier is returned to the page module, so that the page module sends an order submission request to the server according to the target method identifier.
[0089] In the embodiment of the application, before receiving the seed information sent by the page module, the information acquisition request sent by the page module is received, and the information acquisition request indicates a calling method; the device fingerprint information is obtained by executing the calling method, and the device fingerprint information is returned to the page module.
[0090] In the embodiment of the application, before receiving the seed information sent by the page module, the information acquisition request sent by the page module is received, and the information acquisition request indicates a calling method; the device fingerprint information is obtained by executing the calling method, and the device fingerprint information is returned to the page module.
[0091] In the embodiment of the application, before acquiring the target method identifier corresponding to the target index identifier from the method set, the following steps are further included:
[0092] The method acquisition request is sent to the server, and the method acquisition request includes the encrypted order business data;
[0093] The method set corresponding to the method acquisition request returned by the server is received, and the method set is acquired from the configuration center according to the decrypted order business data by the server after the encrypted order business data is decrypted, and the configuration center stores the method set corresponding to the order business data.
[0094] In the embodiment of the application, before acquiring the target method identifier corresponding to the target index identifier from the method set, the method set needs to be acquired from the server. Specifically, the method acquisition request is sent to the server, and the method acquisition request includes the encrypted order business data, and the order business data can include the order scene identifier, such as the identifier of the purchase scene, and the order business data can also include the item information, such as the item identifier, that is, the order business data indicates the purchase scene and the goods participating in the purchase.
[0095] The order service data can be encrypted by using an encryption algorithm to improve the security of data transmission, and then the method acquisition request is sent based on the encrypted order service data, wherein the encryption algorithm can be an AES encryption algorithm or other encryption algorithm.
[0096] The server decrypts the encrypted order service data after receiving the method acquisition request to obtain decrypted order service data, and then acquires the corresponding method set from the configuration center according to the decrypted order service data, wherein the configuration center stores the method set corresponding to the order service data. Further, the application server corresponding to the order scene identifier is acquired according to the decrypted order service data, wherein the application server includes the configuration center, and the configuration center configures the method set corresponding to the order scene identifier. The method set includes multiple index identifiers and method identifiers corresponding to each index identifier, the multiple method identifiers can be randomly generated, each index identifier and the corresponding method identifier can be stored in a map (key-value pair set) structure, the index identifier can be the coordinates of the method identifier, and the method identifier can be the method name. By requesting the configuration center of the server through encryption and decryption, the security of data transmission can be improved, and the leakage or tampering of sensitive information can be effectively prevented.
[0097] In the embodiment of the application, the seed information is obtained by encrypting the device fingerprint information and the index identifier to be issued by the server through an asymmetric encryption algorithm;
[0098] The target device identifier and the target index identifier are acquired from the seed information, including: the seed information is decrypted by using an asymmetric decryption algorithm to obtain the target device identifier and the target index identifier.
[0099] In the embodiment of the application, the server randomly acquires an index identifier to be issued corresponding to the device fingerprint information from the method set after receiving the seed acquisition request sent by the page module, and encrypts the seed information based on the device fingerprint information and the index identifier to be issued through an asymmetric encryption algorithm. The application end acquires the target device fingerprint information and the target index identifier from the seed information by using an asymmetric decryption algorithm after receiving the seed information sent by the page module. The seed information is generated by using the asymmetric encryption algorithm to ensure the security of the seed information, and the seed information is decrypted by using the asymmetric decryption algorithm to ensure that only the legal application end can decrypt the correct target device fingerprint information and the target index identifier.
[0100] The order submission method provided in the embodiment of the application, after receiving the seed information sent by the page module, acquires the target device fingerprint information and the target index identifier from the seed information, then matches the target device fingerprint information with the device fingerprint information, in the case of successful matching, acquires the target method identifier corresponding to the target index identifier from the method set, and sends the target method identifier to the page module, so that the page module sends an order submission request. The method acquires the target method identifier through the seed information and the method set, ensures the security of data transmission, prevents tampering or cracking, and improves the reliability and stability of the system.
[0101] According to another aspect of the embodiment of the application, as shown in Figure 3 An order submission method is provided, comprising:
[0102] Step S301: receiving a seed acquisition request sent by a page module, the seed acquisition request comprising device fingerprint information;
[0103] Step S302: acquiring an index identifier to be issued corresponding to the device fingerprint information, generating seed information corresponding to the seed acquisition request according to the device fingerprint information and the index identifier to be issued, and sending the seed information to the page module;
[0104] Step S303: receiving an order submission request sent by the page module according to a target method identifier, the target method identifier being obtained by matching target device fingerprint information with the device fingerprint information by an application end in the case of successful matching, the target device fingerprint information and the target index identifier being obtained by the application end according to the seed information sent by the page module, the method set comprising a plurality of index identifiers and a method identifier corresponding to each index identifier;
[0105] Step S304: verifying the target method identifier, and returning an order submission result corresponding to the order submission request in the case of verification passing.
[0106] In the embodiment of the application, the execution subject of the order submission method is a server, for example, the order submission method can be executed by a server of a shopping application. First, a seed acquisition request sent by a page module is received, the seed acquisition request comprising device fingerprint information; an index identifier to be issued is randomly acquired from a method set of a configuration center, then an asymmetric encryption algorithm is applied according to the device fingerprint information and the index identifier to be issued, seed information is generated, and the seed information is returned to the page module; an order submission request sent by the page module according to a target method identifier is received, the order submission request is verified, and an order submission result is returned after verification passing.
[0107] The target method identifier is obtained from the method set according to the target index identifier in the case that the application end successfully matches the target device fingerprint information with the device fingerprint information, and the target device fingerprint information and the target index identifier are obtained from the seed information by the application end using an asymmetric decryption algorithm.
[0108] In the embodiment of the application, the verification on the order submission request can include verification on the target method identifier, and specifically, the verification on the target method identifier includes:
[0109] The corresponding method identifier to be issued is obtained from the configuration center service according to the index identifier to be issued, and the configuration center service stores the method set;
[0110] The method identifier to be issued is compared with the target method identifier to obtain a comparison result;
[0111] In the case that the comparison result indicates that the method identifier to be issued is the same as the target method identifier, it is determined that the verification is passed.
[0112] In the embodiment of the application, the method identifier to be issued is obtained from the method set of the configuration center according to the index identifier to be issued, and it is determined whether the target method identifier is the same as the method identifier to be issued, if yes, the verification is passed, and the order submission result is returned, otherwise, the verification is not passed, and the order submission request is intercepted.
[0113] In the embodiment of the application, the order submission request includes the target device fingerprint information, and the verification on the order submission request can also include verification on the target device fingerprint information and the target method identifier, and specifically, the target device fingerprint information is compared with the stored device fingerprint information, and the target method identifier is compared with the method identifier to be issued, if the target device fingerprint information is the same as the stored device fingerprint information and the target method identifier is the same as the method identifier to be issued, the verification is passed, otherwise, the verification is not passed.
[0114] The order submission method in the embodiment of the application can generate seed information according to the device fingerprint information and the index identifier to be issued after receiving the seed acquisition request sent by the page module, so as to ensure that the request comes from a legal device and prevent the transmitted data from being tampered with or cracked, receive the order submission request sent by the page module, the order submission request is sent by the target method identifier obtained through the seed information, the illegal request is intercepted by verifying the target method identifier, and the safety, reliability and stability of the system are improved.
[0115] Figure 4An interaction schematic diagram of an order submission method of an embodiment of the present application. The order submission method is applied to a purchase scenario. An application end sends a method acquisition request to a server to acquire a method set for purchase, the method acquisition request indicating encrypted order business data, the order business data including a purchase scenario identifier; the server receives the method acquisition request, decrypts the encrypted order business data to obtain decrypted order business data, requests a configuration center service to acquire the method set corresponding to the purchase scenario identifier, and returns the method set to the application end; wherein the method set includes multiple index identifiers and a method identifier corresponding to each index identifier, and the multiple method identifiers are randomly generated;
[0116] The H5 purchase page sends an information acquisition request to the application end, the information acquisition request indicating a call method, the application end executes the call method to obtain device fingerprint information, and the application end returns the device fingerprint information to the H5 purchase page; the H5 purchase page sends a seed acquisition request to the server according to the device fingerprint information; the server applies an asymmetric encryption algorithm to generate seed information according to the device fingerprint information and a randomly acquired index identifier to be issued, and returns the seed information to the H5 purchase page;
[0117] The H5 purchase page sends the seed information to the application end;
[0118] After the application end receives the seed information, the application end decrypts the seed information by using an asymmetric decryption algorithm to obtain target device fingerprint information and a target index identifier, matches the target device fingerprint information with the device fingerprint information, acquires a target method identifier corresponding to the target index identifier from the method set in a case of successful matching, and returns the target method identifier to the H5 purchase page;
[0119] The H5 purchase page sends an order submission request to the server according to the target method identifier, and the server verifies the order submission request, and returns an order submission result after verification.
[0120] According to another aspect of the embodiment of the present application, as shown in Figure 5 An order submission device 500 is provided, which includes:
[0121] A first sending module 501 sends a seed acquisition request to a server, the seed acquisition request including device fingerprint information;
[0122] A first receiving module 502 receives seed information corresponding to the seed acquisition request returned by the server, and sends the seed information to an application end;
[0123] The submitting module 503 receives the target method identifier sent by the application end, and sends an order submitting request to the service end according to the target method identifier, wherein the target method identifier is obtained from a method set according to a target index identifier by the application end in a case of successful matching of target device fingerprint information and device fingerprint information, the target device fingerprint information and the target index identifier are obtained by the application end according to seed information, and the method set includes a plurality of index identifiers and a method identifier corresponding to each index identifier.
[0124] In the embodiment of the application, the first sending module 501 is further configured to: before sending the seed obtaining request to the service end, send a device fingerprint information obtaining request to the application end, and receive the device fingerprint information returned by the application end.
[0125] In the embodiment of the application, the submitting module 503 is further configured to: after sending the order submitting request to the service end according to the target method identifier, receive an order submitting result corresponding to the order submitting request returned by the service end, wherein the order submitting result is obtained by the service end after the target method identifier is verified.
[0126] According to another aspect of the embodiment of the application, as shown in Figure 6 Fig. 6, an order submitting device 600 is provided, which includes:
[0127] The second receiving module 601 receives the seed information sent by the page module, wherein the seed information is obtained from the service end by the page module according to a device fingerprint information sending seed obtaining request to the service end;
[0128] The obtaining module 602 obtains target device fingerprint information and a target index identifier from the seed information;
[0129] The matching module 603 matches the target device fingerprint information with the device fingerprint information, and obtains a target method identifier corresponding to the target index identifier from a method set in a case of successful matching; the method set includes a plurality of index identifiers and a method identifier corresponding to each index identifier;
[0130] The second sending module 604 sends the target method identifier to the page end, so that the page end sends an order submitting request to the service end according to the target method identifier.
[0131] In the embodiment of the application, the second receiving module 601 is further configured to: before receiving the seed information sent by the page module, receive an information obtaining request sent by the page module, wherein the information obtaining request indicates a calling method; execute the calling method to obtain the device fingerprint information, and return the device fingerprint information to the page module.
[0132] In the embodiment of the present application, the matching module 603 is further configured to: before obtaining the target method identifier corresponding to the target index identifier from the method set, send a method obtaining request to the server, wherein the method obtaining request comprises encrypted order business data; and receive the method set corresponding to the method obtaining request returned by the server, wherein the method set is obtained by the server from a configuration center according to the decrypted order business data after decrypting the encrypted order business data, and the configuration center stores the method set corresponding to the order business data.
[0133] In the embodiment of the present application, the seed information is obtained by encrypting the device fingerprint information and the index identifier to be distributed by the server through an asymmetric encryption algorithm.
[0134] The obtaining module 602 is further configured to: decrypt the seed information through an asymmetric decryption algorithm to obtain the target device identifier and the target index identifier.
[0135] According to another aspect of the embodiment of the present application, as shown in Figure 7 The order submission device 700 comprises:
[0136] The third receiving module 701 receives the seed obtaining request sent by the page module, wherein the seed obtaining request comprises device fingerprint information.
[0137] The third sending module 702 obtains the index identifier to be distributed corresponding to the device fingerprint information, generates the seed information corresponding to the seed obtaining request according to the device fingerprint information and the index identifier to be distributed, and sends the seed information to the page module.
[0138] The fourth receiving module 703 receives the order submission request sent by the page module according to the target method identifier, wherein the target method identifier is obtained from the method set according to the target index identifier by matching the target device fingerprint information with the device fingerprint information by the application end, the target device fingerprint information and the target index identifier are obtained by the application end according to the seed information sent by the page module, and the method set comprises a plurality of index identifiers and a method identifier corresponding to each index identifier.
[0139] The verification module 704 verifies the target method identifier, and returns an order submission result corresponding to the order submission request in the case of passing the verification.
[0140] In the embodiments of the present application, the checking module 704 is further configured to: acquire a corresponding to-be-deployed method identifier from the configuration center service according to the to-be-deployed index identifier; the configuration center service stores the method set; compare the to-be-deployed method identifier with the target method identifier to obtain a comparison result; and determine that the checking is passed when the comparison result indicates that the to-be-deployed method identifier is the same as the target method identifier.
[0141] According to another aspect of the embodiments of the present application, an electronic device is provided, which includes: one or more processors; a storage device configured to store one or more programs, when the one or more programs are executed by the one or more processors, the one or more processors implement the order submission method provided by the present application.
[0142] According to still another aspect of the embodiments of the present application, a computer readable medium is provided, which stores a computer program, when the program is executed by a processor, the order submission method provided by the present application is implemented.
[0143] Figure 8 An exemplary system architecture 800 to which the order submission method or the order submission device according to the embodiments of the present application can be applied is shown.
[0144] As shown in the figure, the system architecture 800 can include terminal devices 801, 802, 803, a network 804 and a server 805. The network 804 is a medium for providing a communication link between the terminal devices 801, 802, 803 and the server 805. The network 804 can include various connection types, such as wired, wireless communication links or optical fiber cables, etc. Figure 8 A user can use the terminal devices 801, 802, 803 to interact with the server 805 through the network 804 to receive or send messages, etc. Various communication client applications can be installed on the terminal devices 801, 802, 803, such as shopping applications, web browser applications, search applications, instant messaging tools, email clients, social platform software, etc. (only as examples).
[0145] The terminal devices 801, 802, 803 can be various electronic devices with display screens and supporting web browsing, including but not limited to smart phones, tablet computers, laptop computers and desktop computers, etc.
[0146]
[0147] The server 805 can be a server that provides various services, such as a background management server that provides support for a shopping website browsed by a user using the terminal device 801, 802, 803 (as an example). The background management server can analyze and process received product information query request data, and feed back the processing result (such as target push information, product information - as an example) to the terminal device.
[0148] It should be noted that the order submission method provided by the embodiment of the present application is generally executed by the terminal device 801, 802, 803 or the server 805, and accordingly, the order submission apparatus is generally arranged in the terminal device 801, 802, 803 or the server 805.
[0149] It should be understood that, Figure 8 The number of terminal devices, networks and servers in the above-mentioned system is only illustrative. Any number of terminal devices, networks and servers can be provided according to the implementation needs.
[0150] Reference is made to Figure 9 which shows a structural schematic diagram of a computer system 900 suitable for implementing the terminal device of the embodiment of the present application. Figure 9 The terminal device shown is only an example, and should not impose any limitation on the function and use range of the embodiment of the present application.
[0151] As shown in Figure 9 , the computer system 900 includes a central processing unit (CPU) 901, which can perform various appropriate actions and processes according to programs stored in a read-only memory (ROM) 902 or programs loaded from a storage portion 908 into a random access memory (RAM) 903. Various programs and data required for the operation of the system 900 are also stored in the RAM 903. The CPU 901, the ROM 902 and the RAM 903 are connected to each other through a bus 904. An input / output (I / O) interface 905 is also connected to the bus 904.
[0152] The following components are connected to the I / O interface 905: an input portion 906 including a keyboard, a mouse, etc.; an output portion 907 including a cathode ray tube (CRT), a liquid crystal display (LCD), etc., and a speaker, etc.; a storage portion 908 including a hard disk, etc.; and a communication portion 909 including a network interface card such as a LAN card, a modem, etc. The communication portion 909 performs communication processing via a network such as the Internet. A drive 910 is also connected to the I / O interface 905 as needed. A removable medium 911 such as a magnetic disk, an optical disk, a magneto-optical disk, a semiconductor memory, etc. is mounted on the drive 910 as needed, so that a computer program read therefrom is installed in the storage portion 908 as needed.
[0153] In particular, the processes described above with reference to the flow charts can be implemented as a computer software program in accordance with the embodiments disclosed herein. For example, embodiments disclosed herein include a computer program product which includes a computer program tangibly embodied on a computer readable medium, the computer program containing program code for executing the methods illustrated by the flow charts. In such embodiments, the computer program can be downloaded and installed from a network via the communication section 909 and / or installed from the removable media 911. When the computer program is executed by the central processing unit (CPU) 901, the above-described functions defined in the system of the present application are executed.
[0154] Note that the computer readable medium shown in the present application can be a computer readable signal medium or a computer readable storage medium or any combination thereof. The computer readable storage medium may, for example, be, but is not limited to, an electronic, magnetic, optical, electromagnetic, infrared, or semiconductor system, device or apparatus, or any combination thereof. More specific examples of the computer readable storage medium can include, but are not limited to, an electrical connection having one or more wires, a portable computer diskette, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), an optical fiber, a portable compact disk read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination thereof. In the present application, the computer readable storage medium can be any tangible medium that contains or stores a program that can be used by or in connection with an instruction execution system, apparatus or device. In the present application, the computer readable signal medium can include a data signal carried in a baseband or as a carrier wave in a propagated data signal, in which the computer readable program code is carried. Such a propagated data signal can take many forms, including but not limited to, an electromagnetic signal, an optical signal or any suitable combination thereof. The computer readable signal medium can also be any computer readable medium that can send, propagate or transfer a program for use by or in connection with an instruction execution system, apparatus or device. The program code contained on the computer readable medium can be transmitted using any suitable medium, including but not limited to, wireless, wire line, optical fiber cable, RF, etc., or any suitable combination thereof.
[0155] The computer program product of the present application can be a computer program embodied on a computer readable medium. When the computer program runs on a computing device, various exemplary embodiments of present application are performed. The computer program product of the present application can be a computer program embodied on a computer readable medium. When the computer program runs on a computing device, various exemplary embodiments of present application are performed.
[0156] The modules described in the embodiments of the present application can be implemented by software, or by hardware, or by a combination of software and hardware. The modules described can be set in a processor, for example, can be described as: a processor includes a first sending module, a first receiving module and a submitting module. Among them, the names of these modules do not constitute the limitation of the modules themselves in some cases, for example, the first sending module can also be described as: a module for sending a seed acquisition request to a server.
[0157] As another aspect, the present application also provides a computer readable medium, which can be included in the device described in the above embodiments, or can exist independently without being assembled into the device. The computer readable medium carries one or more programs, when the one or more programs are executed by the device, the device includes: sending a seed acquisition request to a server, the seed acquisition request including device fingerprint information; receiving the seed information returned by the server corresponding to the seed acquisition request, and sending the seed information to an application end; receiving the target method identifier sent by the application end, and sending an order submission request to the server according to the target method identifier, wherein the target method identifier is obtained from the method set according to the target index identifier by matching the target device fingerprint information with the device fingerprint information by the application end, the target device fingerprint information and the target index identifier are obtained by the application end according to the seed information, and the method set includes a plurality of index identifiers and the method identifier corresponding to each index identifier.
[0158] According to the technical scheme of the embodiment of the present application, the order submission method of the embodiment of the present application sends a seed acquisition request including device fingerprint information to a server to acquire seed information from the server, then sends the seed information to an application end to enable the application end to acquire target device fingerprint information and a target index identifier according to the seed information, acquire a corresponding target method identifier from a method set according to the target index identifier in the case that the target device fingerprint information and the device fingerprint information are successfully matched, and receive the target method identifier returned by the application end and send an order submission request to the server according to the target method identifier. The method acquires seed information according to device fingerprint information, obtains a target method identifier through the seed information, implements order submission, improves the security of data transmission, can intercept illegal order submission requests, implements interception of risk traffic, effectively prevents information leakage or tampering, improves the reliability and stability of the purchase system, and further improves the user experience.
[0159] The above detailed description does not constitute a limitation on the protection scope of the present application. Those skilled in the art should understand that various modifications, combinations, sub-combinations and substitutions can occur depending on design requirements and other factors. Any modification, equivalent replacement and improvement within the spirit and principle of the present application should be included in the protection scope of the present application.
Claims
1. An order submission method, characterized by, The method comprises the following steps: sending a seed acquisition request to a server, wherein the seed acquisition request comprises device fingerprint information; receiving seed information returned by the server in response to the seed acquisition request, and sending the seed information to an application end; receiving a target method identifier sent by the application end, and sending an order submission request to the server according to the target method identifier, wherein the target method identifier is obtained from a method set according to a target index identifier by matching target device fingerprint information with the device fingerprint information by the application end, the target device fingerprint information and the target index identifier are obtained by the application end according to the seed information, and the method set comprises a plurality of index identifiers and method identifiers corresponding to each index identifier.
2. The method of claim 1, wherein, Before sending the seed acquisition request to the server, the method further comprises the following steps: sending a device fingerprint information acquisition request to the application end, and receiving the device fingerprint information returned by the application end.
3. The method of claim 1, wherein, After sending the order submission request to the server according to the target method identifier, the method further comprises the following steps: receiving an order submission result returned by the server in response to the order submission request, wherein the order submission result is obtained by the server after verifying the target method identifier.
4. An order submission method characterized by comprising: The method comprises the following steps: receiving seed information sent by a page module, wherein the seed information is obtained from a server by the page module according to device fingerprint information by sending a seed acquisition request to the server; obtaining target device fingerprint information and a target index identifier from the seed information; matching the target device fingerprint information with the device fingerprint information, and obtaining a target method identifier corresponding to the target index identifier from a method set in a case of successful matching, wherein the method set comprises a plurality of index identifiers and method identifiers corresponding to each index identifier; sending the target method identifier to the page module, so that the page module sends an order submission request to the server according to the target method identifier.
5. The method of claim 4, wherein, Before receiving the seed information sent by the page module, the method further comprises the following steps: receiving an information acquisition request sent by the page module, wherein the information acquisition request indicates a calling method; executing the calling method to obtain the device fingerprint information, and returning the device fingerprint information to the page module.
6. The method of claim 4, wherein, Before obtaining the target method identifier corresponding to the target index identifier from the method set, the method further comprises the following steps: sending a method acquisition request to the server, wherein the method acquisition request comprises encrypted order business data; receiving the method set returned by the server in response to the method acquisition request, wherein the method set is obtained from a configuration center by the server after decrypting the encrypted order business data, the configuration center stores the method set corresponding to the order business data.
7. The method of claim 4, wherein, The seed information is obtained by the server according to the device fingerprint information and an index identifier to be delivered, and is encrypted by an asymmetric encryption algorithm; obtaining the target device fingerprint information and the target index identifier from the seed information comprises the following steps: Decrypt the seed information by using an asymmetric decryption algorithm to obtain the target device fingerprint information and the target index identifier.
8. An order submission method characterized by comprising: Comprise: A seed acquisition request is received from a page module, and the seed acquisition request includes device fingerprint information. An index identifier to be issued corresponding to the device fingerprint information is obtained, and seed information corresponding to the seed acquisition request is generated according to the device fingerprint information and the index identifier to be issued, and the seed information is sent to the page module. An order submission request is received from the page module according to a target method identifier, the target method identifier is obtained from a method set according to a target index identifier by matching target device fingerprint information with the device fingerprint information by an application end, the target device fingerprint information and the target index identifier are obtained by the application end according to the seed information sent by the page module, and the method set includes a plurality of index identifiers and a method identifier corresponding to each index identifier. The target method identifier is verified, and an order submission result corresponding to the order submission request is returned if the verification is passed.
9. The method of claim 8, wherein, The target method identifier is verified, comprising: A to-be-issued method identifier corresponding to the to-be-issued index identifier is obtained from a configuration center service; and the configuration center service stores the method set. The to-be-issued method identifier is compared with the target method identifier to obtain a comparison result. If the to-be-issued method identifier is the same as the target method identifier as indicated by the comparison result, it is determined that the verification is passed.
10. An order submission apparatus, characterized by comprising: Comprise: A first sending module sends a seed acquisition request to a server, and the seed acquisition request includes device fingerprint information. A first receiving module receives seed information corresponding to the seed acquisition request returned by the server, and sends the seed information to an application end. A submission module receives a target method identifier sent by the application end, and sends an order submission request to the server according to the target method identifier, wherein the target method identifier is obtained from a method set according to a target index identifier by matching target device fingerprint information with the device fingerprint information by the application end if the matching is successful, the target device fingerprint information and the target index identifier are obtained by the application end according to the seed information, and the method set includes a plurality of index identifiers and a method identifier corresponding to each index identifier.
11. An order submission apparatus, characterized by comprising: Comprise: A second receiving module receives seed information sent by a page module, and the seed information is obtained from a server by the page module according to device fingerprint information by sending a seed acquisition request to the server. A target device fingerprint information and a target index identifier are obtained from the seed information by an obtaining module. A matching module matches the target device fingerprint information with the device fingerprint information, and obtains a target method identifier corresponding to the target index identifier from a method set if the matching is successful, and the method set includes a plurality of index identifiers and a method identifier corresponding to each index identifier. The second sending module sends the target method identifier to the page module, so that the page module sends an order submission request to the server according to the target method identifier.
12. An order submission apparatus characterized by comprising: The method comprises the following steps: The third receiving module receives a seed acquisition request sent by the page module, wherein the seed acquisition request comprises device fingerprint information; The third sending module acquires an index identifier to be issued corresponding to the device fingerprint information, generates seed information corresponding to the seed acquisition request according to the device fingerprint information and the index identifier to be issued, and sends the seed information to the page module; The fourth receiving module receives an order submission request sent by the page module according to a target method identifier, wherein the target method identifier is obtained by matching target device fingerprint information with the device fingerprint information by the application end, and the target method identifier is obtained from a method set according to a target index identifier in the case of successful matching, the target device fingerprint information and the target index identifier are obtained by the application end according to the seed information sent by the page module, and the method set comprises a plurality of index identifiers and a method identifier corresponding to each index identifier; The verification module verifies the target method identifier, and returns an order submission result corresponding to the order submission request in the case of verification passing.
13. An electronic device, comprising: The method comprises the following steps: One or more processors; A storage device for storing one or more programs, When the one or more programs are executed by the one or more processors, the one or more processors implement the method according to any one of claims 1-9.
14. A computer readable medium having stored thereon a computer program, characterized in that, The program is executed by the processor to implement the method according to any one of claims 1-9.
Citation Information
Patent Citations
Data query and calculation method and system and storage medium
CN111783108A
Order processing method, system and device, order query method, system and device and electronic equipment
CN113127231A