Request information processing method and device and electronic equipment

Abstract

The invention discloses a request information processing method and device and electronic equipment. The method comprises the following steps: receiving a to-be-processed request sent by a target user; adding the to-be-processed requests to a first buffer pool, and combining all the to-be-processed requests in the first buffer pool to obtain a target request; signing the target request, sending the signed target request to a certificate issuing module, and receiving a certificate file package sent by the certificate issuing module; verifying the certificate file package, analyzing the certificate file package according to a verification result to obtain a plurality of certificate files, and storing the plurality of certificate files in a second buffer pool; and under the condition that a certificate query request sent by a target user is received, obtaining a certificate file of the target user from the second buffer pool according to the user information, and sending the certificate file to the target user. Through application of the method and the device, the problem of relatively low certificate application and release efficiency caused by the fact that a digital certificate authentication system independently processes each certificate application request in related technologies is solved.

Description

Technical Field

[0001] The present application relates to the field of information security, and in particular to a method, device and electronic device for processing request information. Background Art

[0002] With the continuous development of network communication technology, information security issues are becoming increasingly serious. In order to prevent information from being leaked or tampered with during network communication, it is very important to encrypt and verify the communication content. The existing method ensures the confidentiality and integrity of information during network communication through the digital certificate authentication system in the PKI system.

[0003] The digital certificate authentication system in the traditional PKI system processes each certificate application request separately. During a certificate application and issuance process, the RA system submits the certificate application, calls the CA system to issue the certificate, and returns the certificate to the RA system. However, when the number of certificate application requests is large, frequent interactions are required between the systems, affecting the performance and efficiency of certificate application and issuance.

[0004] Currently, no effective solution has been proposed to address the problem in the related art that the digital certificate authentication system processes each certificate application request individually, resulting in low efficiency in certificate application and issuance. Summary of the invention

[0005] The present application provides a method, device and electronic device for processing request information to solve the problem in the related art that a digital certificate authentication system processes each certificate application request individually, resulting in low efficiency in certificate application and issuance.

[0006] According to one aspect of the present application, a method for processing request information is provided. The method includes: receiving a pending request sent by a target user, wherein the pending request is used to request the generation of a digital signature certificate, and the pending request carries the user information of the target user; adding the pending request to a first buffer pool, and combining all pending requests in the first buffer pool to obtain a target request; signing the target request and sending it to a certificate issuance module, and receiving a certificate file package sent by the certificate issuance module, wherein the certificate file package carries multiple certificate files; verifying the certificate file package, and parsing the certificate file package according to the verification result to obtain multiple certificate files, and storing the multiple certificate files in a second buffer pool; in the case of receiving a certificate query request sent by the target user, obtaining the certificate file of the target user from the second buffer pool according to the user information, and sending the certificate file to the target user.

[0007] Optionally, before combining all pending requests in the first buffer pool to obtain the target request, the method also includes: obtaining the storage duration of the first request with the longest storage time in the first buffer pool; determining whether the storage duration is equal to a preset duration; if the storage duration is less than the preset duration, counting the number of requests in the first buffer pool until the storage duration is equal to the preset duration; if the storage duration is equal to the preset duration, executing the step of combining all pending requests in the first buffer pool to obtain the target request.

[0008] Optionally, after counting the number of requests in the first buffer pool, the method further includes: determining whether the number of requests is greater than a preset number; when the number of requests is greater than or equal to the preset number, executing the step of combining all pending requests in the first buffer pool to obtain a target request; when the number of requests is less than the preset number, executing a waiting operation until the number of requests in the first buffer pool is greater than or equal to the preset number, or the storage duration is equal to the preset duration.

[0009] Optionally, combining all pending requests in the first buffer pool to obtain a target request includes: counting the number of requests in the first buffer pool; when the number of requests is less than or equal to a preset number, combining all pending requests in the first buffer pool to obtain a target request; when the number of requests is greater than a preset number, grouping all requests in the first buffer pool in storage time order according to the preset number to obtain multiple groups of requests, and combining each group of requests to obtain multiple target requests, wherein the number of requests in each group of requests is less than or equal to a preset number; signing the target request and sending it to the certificate issuance module includes: when there are multiple target requests, signing each target request in turn in storage time order and sending it to the certificate issuance module.

[0010] Optionally, signing the target request and sending it to the certificate issuance module includes: obtaining summary information in the target request, and encrypting the summary information through a preset private key to obtain a target signature; sending the target request and the target signature to the certificate issuance module, wherein the certificate issuance module uses a preset public key to verify the target signature, and processes the target request based on the verification result, and the preset public key is associated with the preset private key.

[0011] Optionally, the certificate issuance module parses the target request to obtain multiple pending requests, processes each pending request to obtain multiple digital certificates, assembles the multiple digital certificates to obtain a certificate file package, and sends the signature of the certificate file package to the registration module.

[0012] Optionally, before adding the pending request to the first buffer pool, the method further includes: acquiring historical information of the target user based on the user information; verifying the user information through the historical information to obtain a first verification result, wherein the first verification result is used to characterize whether there is an abnormality in the user information; verifying the request content of the pending request to obtain a second verification result, wherein the second verification result is used to characterize whether there is an abnormality in the request content; if there is no abnormality in the first verification result and the second verification result, executing the step of adding the pending request to the first buffer pool; if there is an abnormality in the first verification result and / or the second verification result, sending a prompt message to the target user, wherein the prompt message characterizes that the pending request is abnormal.

[0013] According to another aspect of the present application, a device for processing request information is provided. The device includes: a receiving unit, which is used to receive a pending request sent by a target user, wherein the pending request is used to request the generation of a digital signature certificate, and the pending request carries the user information of the target user; an adding unit, which is used to add the pending request to a first buffer pool, and combine all pending requests in the first buffer pool to obtain a target request; a first sending unit, which is used to sign the target request and send it to a certificate issuance module, and receive a certificate file package sent by the certificate issuance module, wherein the certificate file package carries multiple certificate files; a first verification unit, which is used to verify the certificate file package, and parse the certificate file package according to the verification result to obtain multiple certificate files, and store the multiple certificate files in a second buffer pool; a first acquisition unit, which is used to obtain the certificate file of the target user from the second buffer pool according to the user information when receiving a certificate query request sent by the target user, and send the certificate file to the target user.

[0014] According to another aspect of the present invention, a computer program product is provided, including a computer program, and when the computer program is executed by a processor, a method for processing request information provided in the aforementioned embodiment of the present application is implemented.

[0015] According to another aspect of the present invention, an electronic device is also provided, comprising one or more processors and a memory; the memory stores computer-readable instructions, and the processor is used to execute the computer-readable instructions, wherein when the computer-readable instructions are executed, a method for processing request information provided in the aforementioned embodiment is executed.

[0016] Through the present application, the following steps are adopted: receiving a pending request sent by a target user, wherein the pending request is used to request the generation of a digital signature certificate, and the pending request carries the user information of the target user; adding the pending request to a first buffer pool, and combining all the pending requests in the first buffer pool to obtain a target request; signing the target request and sending it to a certificate issuance module, and receiving a certificate file package sent by the certificate issuance module, wherein the certificate file package carries multiple certificate files; verifying the certificate file package, and parsing the certificate file package according to the verification result to obtain multiple certificate files, and storing the multiple certificate files in a second buffer pool; in the case of receiving a certificate query request sent by the target user, according to the user The method obtains the certificate file of the target user from the second buffer pool based on the user information, and sends the certificate file to the target user. By adding the pending request to the first buffer pool, all the pending requests are combined into a target request, which is sent to the certificate issuance module after signing. After receiving the certificate file package sent by the module, the certificate file package is verified and parsed, and the obtained multiple certificate files are stored in the second buffer pool. When a certificate query request is received, the certificate file is sent to the target user, thereby combining and processing multiple requests, solving the problem in the related art that the digital certificate authentication system processes each certificate application request separately, resulting in low efficiency of certificate application and issuance, thereby achieving the technical effect of improving the efficiency of certificate application and issuance. BRIEF DESCRIPTION OF THE DRAWINGS

[0017] The drawings constituting a part of the present application are used to provide a further understanding of the present application. The illustrative embodiments and descriptions of the present application are used to explain the present application and do not constitute an improper limitation on the present application. In the drawings:

[0018] Figure 1 is a flowchart of a method for processing request information provided in an embodiment of the present application;

[0019] Figure 2 is a flowchart of an optional method for processing request information provided according to an embodiment of the present application;

[0020] Figure 3 is a schematic diagram of a device for processing request information provided according to an embodiment of the present application;

[0021] Figure 4 It is a schematic diagram of an electronic device provided according to an embodiment of the present application. DETAILED DESCRIPTION

[0022] It should be noted that, in the absence of conflict, the embodiments and features in the embodiments of the present application can be combined with each other. The present application will be described in detail below with reference to the accompanying drawings and in combination with the embodiments.

[0023] In order to enable those skilled in the art to better understand the solution of the present application, the technical solution in the embodiments of the present application will be clearly and completely described below in conjunction with the drawings in the embodiments of the present application. Obviously, the described embodiments are only part of the embodiments of the present application, not all of the embodiments. Based on the embodiments in the present application, all other embodiments obtained by ordinary technicians in this field without creative work should fall within the scope of protection of the present application.

[0024] It should be noted that the terms "first", "second", etc. in the specification and claims of the present application and the above-mentioned drawings are used to distinguish similar objects, and are not necessarily used to describe a specific order or sequential order. It should be understood that the data used in this way can be interchanged where appropriate, so that the embodiments of the present application described here. In addition, the terms "including" and "having" and any of their variations are intended to cover non-exclusive inclusions, for example, a process, method, system, product or device comprising a series of steps or units is not necessarily limited to those steps or units clearly listed, but may include other steps or units that are not clearly listed or inherent to these processes, methods, products or devices.

[0025] It should be noted that the request information processing method, device and electronic device determined in the present disclosure can be used in the field of information security, and can also be used in any field other than the field of information security. The application field of the request information processing method, device and electronic device determined in the present disclosure is not limited.

[0026] It should be noted that the collected information, user information (including but not limited to user device information, user personal information, etc.) and data (including but not limited to data used for analysis, stored data, displayed data, etc.) used in this application are all information and data authorized by the user or fully authorized by all parties, and the collection, storage, use, processing, transmission, provision, disclosure and application of relevant data are in compliance with the relevant laws, regulations and standards of the relevant regions, necessary confidentiality measures are taken, and public order and good customs are not violated. Corresponding operation entrances are provided for users to choose to authorize use or refuse use. If the user chooses to refuse, the expert decision-making process is entered. For example, an interface is set between this system and relevant users or institutions. Before obtaining relevant information, it is necessary to send an acquisition request to the aforementioned user or institution through the interface, and obtain relevant information after receiving the consent information fed back by the aforementioned user or institution.

[0027] The embodiments or examples of the present disclosure are not exhaustive, but are only illustrative of some embodiments or examples, and are not intended to be specific limitations on the scope of protection of the present disclosure. In the absence of contradiction, each step in a certain embodiment or example can be implemented as an independent example, and the steps can be combined arbitrarily. For example, the scheme after removing some steps in a certain embodiment or example can also be implemented as an independent example, and the order of the steps in a certain embodiment or example can be arbitrarily exchanged. In addition, the optional methods or optional examples in a certain embodiment or example can be combined arbitrarily; in addition, the various embodiments or examples can be combined arbitrarily, for example, some or all steps of different embodiments or examples can be combined arbitrarily, and a certain embodiment or example can be combined arbitrarily with the optional methods or optional examples of other embodiments or examples.

[0028] For the convenience of description, some nouns or terms involved in the embodiments of the present application are explained below:

[0029] PKI system: PKI (Public Key Infrastructure) is a security framework for establishing and managing public key encryption and digital certificates. The PKI system is a set of standards and technologies based on public key cryptography to support secure network communications, digital signatures, identity authentication and other security mechanisms.

[0030] RA: RA (Registration Authority) is a part of the PKI system and is responsible for management operations such as user identity authentication and certificate request processing to ensure the legitimacy and security of certificates.

[0031] CA: CA (Certificate Authority) is responsible for verifying the identity of users or entities and issuing digital certificates to them to prove the legitimacy and validity of their public keys. CA systems usually consist of CA servers, CA databases, CA management tools, and CA signing tools, which are used to generate, issue, and manage digital certificates to ensure the security and credibility of the PKI system.

[0032] Digital signature certificate: A digital certificate used to verify the authenticity and integrity of a digital signature. It contains the signer's public key and related information to prove the signer's identity and the authenticity of the signature.

[0033] OCSP system: The OCSP (Online Certificate Status Protocol) system is a network protocol used to verify the validity of digital certificates. It allows clients to obtain real-time information about the status of digital certificates when using them, and to promptly check whether digital certificates have been revoked or expired, thus ensuring the security and integrity of communications.

[0034] LDAP system: LDAP (Lightweight Directory Access Protocol) system is a network protocol for storing and retrieving directory information. LDAP system is usually used to organize and manage user identities, permissions, and other related information for authentication and authorization in the network.

[0035] According to an embodiment of the present application, a method for processing request information is provided.

[0036] Figure 1 1 is a flowchart of a method for processing request information provided in an embodiment of the present application. Figure 1 As shown, the method comprises the following steps:

[0037] Step S101: receiving a pending request sent by a target user, wherein the pending request is used to request generation of a digital signature certificate, and the pending request carries user information of the target user.

[0038] Specifically, the executor of this embodiment is a registration module, which can be implemented through the RA system. During the process of processing request information by the registration module, it can first receive a pending request sent by a target user, wherein the pending request is used to request the generation of a digital signature certificate, and the security of network communication can be ensured by the digital signature certificate.

[0039] It should be noted that the pending request received by the registration module may carry user information of the target user, where the user information may include key information such as the target user's name, email address, contact number, etc. The registration module can verify and confirm the identity of the target user through the user information to ensure the security and credibility of the digital certificate.

[0040] Step S102: adding the pending request to the first buffer pool, and combining all the pending requests in the first buffer pool to obtain a target request.

[0041] Specifically, after the registration module receives the pending request sent by the target user, the pending request can be added to the first buffer pool, wherein the first buffer pool can be a certificate application buffer pool, which is used to temporarily store the pending requests submitted by the user and organize and manage the pending requests. After the pending request sent by the target user is added to the first buffer pool, all the pending requests in the first buffer pool can be combined to obtain the target request.

[0042] It should be noted that, in the process of combining all pending requests, if the number of pending requests in the first buffer pool is small, all pending requests can be combined into a group of requests to obtain a target request. If the number of pending requests in the first buffer pool is large, all pending requests can be grouped and combined to obtain multiple target requests.

[0043] Step S103: Sign the target request and send it to the certificate issuing module, and receive the certificate file package sent by the certificate issuing module, wherein the certificate file package carries multiple certificate files.

[0044] Specifically, after the registration module obtains the target request, the target request can be signed, and the target request can be encrypted through encryption technology to achieve the signing of the target request. For example, the registration module can use the private key to encrypt the information in the target request to obtain the signed target request, and then the signed target request can be sent to the certificate issuance module, and the certificate file package sent by the certificate issuance module can be received, wherein the certificate file package carries multiple certificate files.

[0045] It should be noted that the certificate issuing module can be a CA system. After the target request is signed and sent to the certificate issuing module, the certificate issuing module can use the public key corresponding to the encrypted private key to verify the signature of the target request to ensure that the target request has not been tampered with during the transmission process, and to ensure the integrity and security of the information. After the verification, multiple pending requests can be extracted from the target request, and multiple digital certificates can be generated based on the multiple pending requests. After assembling multiple digital certificates to obtain a certificate file package, the certificate file package signature can be sent to the registration module, and the certificate file package can also be sent to the OCSP and LDAP systems, where the OCSP and LDAP systems can be used to store certificates and certificate status.

[0046] Step S104, verifying the certificate file package, parsing the certificate file package according to the verification result, obtaining a plurality of certificate files, and storing the plurality of certificate files in a second buffer pool.

[0047] Specifically, after receiving the certificate file package sent by the certificate issuance module, the registration module can verify the certificate file package. For example, the public key corresponding to the private key used to encrypt the certificate file package can be used to verify the signature value of the certificate file package to ensure the integrity and authenticity of the file package. After the verification, the certificate file package can be parsed to extract multiple certificate files therein, and then the multiple certificate files can be stored in a second buffer pool, where the second buffer pool can be a certificate application response buffer pool for responding to certificate query requests from target users.

[0048] Step S105: upon receiving a certificate query request sent by the target user, obtaining the certificate file of the target user from the second buffer pool according to the user information, and sending the certificate file to the target user.

[0049] Specifically, after storing multiple certificate files in the second buffer pool, when a certificate query request sent by a target user is received, wherein the certificate query request is used to request a query for a certificate file, and the certificate query request may carry user information of the target user, such as name, etc., the registration module may obtain the certificate file of the target user in the second buffer pool according to the user information, and finally send the certificate file to the target user, thereby ensuring the timely provision of the digital certificate and the security of information during network communication.

[0050] The method for processing request information provided by the embodiment of the present application receives a pending request sent by a target user, wherein the pending request is used to request generation of a digital signature certificate, and the pending request carries user information of the target user; adds the pending request to a first buffer pool, and combines all pending requests in the first buffer pool to obtain a target request; signs the target request and sends it to a certificate issuance module, and receives a certificate file package sent by the certificate issuance module, wherein the certificate file package carries multiple certificate files; verifies the certificate file package, and parses the certificate file package according to the verification result to obtain multiple certificate files, and stores the multiple certificate files in a second buffer pool; upon receiving the certificate query sent by the target user In the case of a request, the certificate file of the target user is obtained from the second buffer pool according to the user information, and the certificate file is sent to the target user. By adding the pending requests to the first buffer pool, all the pending requests are combined into a target request, which is sent to the certificate issuance module after signing. After receiving the certificate file package sent by the module, the certificate file package is verified and parsed, and the obtained multiple certificate files are stored in the second buffer pool. In the case of receiving a certificate query request, the certificate file is sent to the target user, which solves the problem in the related technology that the digital certificate authentication system processes each certificate application request separately, resulting in low efficiency of certificate application and issuance, thereby achieving the technical effect of improving the efficiency of certificate application and issuance.

[0051] Optionally, in the request information processing method provided in the embodiment of the present application, before combining all pending requests in the first buffer pool to obtain the target request, the method also includes: obtaining the storage duration of the first request with the longest storage time in the first buffer pool; determining whether the storage duration is equal to a preset duration; if the storage duration is less than the preset duration, counting the number of requests in the first buffer pool until the storage duration is equal to the preset duration; if the storage duration is equal to the preset duration, executing the step of combining all pending requests in the first buffer pool to obtain the target request.

[0052] It should be noted that, before combining all pending requests in the first buffer pool to obtain the target request, the registration module can first determine the first request with the longest storage time in the first buffer pool, that is, the first request stored in the first buffer pool for the longest time, and then obtain the storage duration of the first request, that is, the storage time length of the first request in the buffer pool, and then determine whether the storage duration is equal to the preset duration, where the preset duration can be a pre-set time threshold, such as one minute.

[0053] Specifically, in the process of determining whether the storage time is equal to the preset time, if the storage time is less than the preset time, the registration module can count the number of requests in the first buffer pool until the storage time is equal to the preset time. If the storage time is equal to the preset time, the registration module can perform a combination operation on all pending requests in the first buffer pool to finally obtain the target request.

[0054] For example, three pending requests are stored in the first buffer pool, and the storage time is: request A is stored for 3 minutes, request B is stored for 2 minutes, and request C is stored for 4 minutes. Therefore, the first request with the longest storage time is request C, and the storage time is 4 minutes. Assuming that the preset time is 5 minutes, the storage time is less than the preset time. The number of requests in the first buffer pool can be counted. During the statistical process, new pending requests may be stored in the first buffer pool until the storage time of request C reaches five minutes. The number can be stopped, and all pending requests in the first buffer pool, namely request A, request B, request C, and possible newly added pending requests, are combined to finally obtain the target request.

[0055] This embodiment compares the storage time of the first request in the first buffer pool with the preset time, and then combines all pending requests when the storage time reaches the preset time to obtain a target request, thereby ensuring efficiency and timeliness in processing request information.

[0056] Optionally, in the request information processing method provided in the embodiment of the present application, after counting the number of requests in the first buffer pool, the method also includes: determining whether the number of requests is greater than a preset number; when the number of requests is greater than or equal to the preset number, executing the step of combining all pending requests in the first buffer pool to obtain a target request; when the number of requests is less than the preset number, executing a waiting operation until the number of requests in the first buffer pool is greater than or equal to the preset number, or the storage duration is equal to the preset duration.

[0057] It should be noted that, after determining that the storage duration of the first request is less than the preset duration and counting the number of requests in the first buffer pool, the number of requests can be judged to determine whether the number of requests in the first buffer pool is greater than the preset number, wherein the preset number can be a pre-set threshold of the number of requests to be processed, which is used to judge the size of the number of requests in the first buffer pool.

[0058] Specifically, in the process of determining whether the number of requests is greater than a preset number, when the number of requests is greater than or equal to the preset number, the registration module may perform the following steps: combining all pending requests in the first buffer pool to obtain a target request; when the number of requests is less than the preset number, a waiting operation may be performed, during which the registration module continuously counts the number of requests in the first buffer pool until the number of requests in the first buffer pool is greater than or equal to the preset number, or the storage duration is equal to the preset duration, and then a combination operation may be performed on all pending requests in the first buffer pool to obtain a target request.

[0059] For example, assuming that the preset duration is 5 minutes, the preset number is 10, the storage duration of the first request in the first buffer pool is 4 minutes, the registration module performs a statistical quantity operation, and when the result shows that the number of requests in the first buffer pool is 11, even if the storage duration of the first request does not reach the preset duration, all pending requests can be combined to obtain the target request. When the result shows that the number of requests in the first buffer pool is 8, a waiting operation can be performed until the storage duration of the first request reaches 5 minutes, or the number of requests in the first buffer pool increases to 10 or more, and all pending requests can be combined to finally obtain the target request.

[0060] This embodiment compares the number of requests in the first buffer pool with a preset number, and then combines all pending requests when the number of requests is greater than or equal to the preset number or the storage time reaches the preset time to obtain a target request, thereby ensuring the efficiency and timeliness of processing request information.

[0061] Optionally, in the request information processing method provided in the embodiment of the present application, combining all pending requests in the first buffer pool to obtain a target request includes: counting the number of requests in the first buffer pool; when the number of requests is less than or equal to a preset number, combining all pending requests in the first buffer pool to obtain a target request; when the number of requests is greater than the preset number, grouping all requests in the first buffer pool in storage time order according to the preset number to obtain multiple groups of requests, and combining each group of requests to obtain multiple target requests, wherein the number of requests in each group of requests is less than or equal to the preset number; signing the target request and sending it to the certificate issuance module includes: when there are multiple target requests, signing each target request in sequence in storage time order and sending them to the certificate issuance module.

[0062] It should be noted that, in the process of combining all pending requests in the first buffer pool to obtain a target request, the number of requests in the first buffer pool can be counted first, and then the number of requests is compared with a preset number to determine the way to combine all pending requests. When the comparison result shows that the number of requests in the first buffer pool is less than or equal to the preset number, all pending requests in the first buffer pool can be combined to obtain a target request. When the number of requests is greater than the preset number, all pending requests can be grouped and combined according to the preset number to obtain multiple target requests.

[0063] Specifically, in the process of grouping and combining all pending requests according to a preset number to obtain multiple target requests, all requests in the first buffer pool can be grouped in the order of storage time to obtain multiple groups of requests, and then each group of requests can be combined into a target request. Finally, multiple groups of requests are combined to obtain multiple target requests, wherein the number of requests in each group of requests is less than or equal to the preset number.

[0064] For example, assuming that the preset number is 5, in the process of combining all pending requests in the first buffer pool, when statistics show that the number of requests in the first buffer pool is 4, the 4 pending requests can be combined to obtain a target request; when statistics show that the number of requests in the first buffer pool is 15, the 15 pending requests can be grouped in descending order of storage time, and the number of requests in each group is less than or equal to the preset number, such as being divided into 3 groups of requests, each group of requests including 5 pending requests, and finally each group of requests is combined to obtain 3 target requests.

[0065] It should be noted that after obtaining the target request, the target request can be signed and sent to the certificate issuance module. In the case of multiple target requests as mentioned above, each target request can be signed in sequence according to the order of storage time and then sent to the certificate issuance module.

[0066] This embodiment compares the number of requests in the first cache pool with a preset number, and then determines a method for combining all pending requests to obtain a target request based on the comparison result, thereby improving the efficiency of processing request information and ensuring that the CA can normally receive the target request, thereby avoiding an excessive number of pending requests in the target request, which causes the CA to be unable to process the target request after receiving it.

[0067] Optionally, in the request information processing method provided in the embodiment of the present application, signing the target request and sending it to the certificate issuance module includes: obtaining summary information in the target request, and encrypting the summary information through a preset private key to obtain a target signature; sending the target request and the target signature to the certificate issuance module, wherein the certificate issuance module uses a preset public key to verify the target signature, and processes the target request based on the verification result, and the preset public key is associated with the preset private key.

[0068] It should be noted that after obtaining the aforementioned target request, the target request can be signed and sent to the certificate issuance module. First, the summary information in the target request can be obtained, where the summary information can include some key content of the target request, such as the type of certificate applied for, the timestamp of the request, etc. Then the registration module can use the preset private key to encrypt the summary information to obtain the target signature, where the private key is the key used for encryption, and the signature of the target request summary information can be achieved through private key encryption.

[0069] Specifically, after obtaining the target signature, the target request and the target signature can be sent to a certificate issuing module. The certificate issuing module can be a CA system. After the target request is signed and sent to the certificate issuing module, the certificate issuing module can use a preset public key to verify the target signature, wherein the preset public key is associated with a preset private key, that is, only the preset public key paired with the preset private key can decrypt the target signature, ensuring that the target request is not tampered with during transmission, and ensuring the integrity and security of the request information. After the verification is passed, the certificate issuing module can generate a digital certificate based on the obtained target request.

[0070] This embodiment encrypts the target request to obtain the target request, and then sends it to the certificate issuing module, thereby ensuring the security and integrity of the target request during transmission.

[0071] Optionally, in the request information processing method provided in the embodiment of the present application, the certificate issuance module parses the target request to obtain multiple pending requests, processes each pending request to obtain multiple digital certificates, assembles the multiple digital certificates to obtain a certificate file package, and sends the signature of the certificate file package to the registration module.

[0072] It should be noted that after the target request and target signature are sent to the certificate issuance module, the certificate issuance module verifies the target signature. After the verification is passed, the target request can be parsed first to extract multiple pending requests. Then the certificate issuance module can process the multiple pending requests and generate a digital certificate for each pending request to obtain multiple digital certificates. Then, the generated multiple digital certificates can be assembled to obtain a certificate file package, wherein the certificate file package contains multiple certificate files, and each certificate file corresponds to a digital certificate.

[0073] It should be noted that after obtaining the certificate file package, the certificate issuing module can use the preset private key to sign the certificate file package to ensure the integrity and authenticity of the certificate file package, wherein the preset public key corresponding to the preset private key can be obtained in the registration module, and then the signed certificate file package can be sent to the registration module. At the same time, the certificate file package can also be sent to the OCSP and LDAP systems through the certificate publisher, wherein the certificate publisher is used to issue digital certificates, and the OCSP and LDAP systems can be used to store certificates and certificate status.

[0074] This embodiment generates a digital certificate according to the target request through the certificate issuance module, and assembles multiple digital certificates into a certificate file package, signs it and sends it to the registration module, thereby improving the security of the certificate file package during transmission and the efficiency of request information processing.

[0075] Optionally, in the request information processing method provided in the embodiment of the present application, before adding the pending request to the first buffer pool, the method also includes: obtaining historical information of the target user based on the user information; verifying the user information through the historical information to obtain a first verification result, wherein the first verification result is used to characterize whether there is an abnormality in the user information; verifying the request content of the pending request to obtain a second verification result, wherein the second verification result is used to characterize whether there is an abnormality in the request content; if there is no abnormality in the first verification result and the second verification result, executing the step of adding the pending request to the first buffer pool; if there is an abnormality in the first verification result and / or the second verification result, sending a prompt message to the target user, wherein the prompt message characterizes that the pending request is abnormal.

[0076] It should be noted that before the registration module adds the pending request sent by the target user to the first buffer pool, the historical information of the target user can be obtained based on the user information of the target user such as the user name and contact number carried in the pending request, and then the user information is verified through the historical information to obtain a first verification result. For example, the neural network model can be trained through the historical information of the target user, and the model parameters can be continuously optimized to accurately capture the characteristics of the user information to the greatest extent possible. After the model accuracy reaches the expected value, the user information of the target user carried in the pending request can be input into the trained model, and the first verification result can be obtained through the output result of the model.

[0077] It should be noted that after obtaining the first verification result, the request content of the request to be processed can be verified to obtain a second verification result, wherein the verification of the content of the request to be processed can be performed through a pre-trained anomaly detection model, and the second verification result can be obtained based on the output result of the model to determine whether there is an anomaly in the request content of the request to be processed. Finally, whether to execute the step of adding the request to be processed to the first buffer pool can be determined based on the first verification result and the second verification result.

[0078] Specifically, in the process of determining whether the pending request can be added to the first buffer pool, if both the first verification result and the second verification result are normal, the step of adding the pending request to the first buffer pool can be executed, and if at least one of the first verification result and the second verification result is abnormal, a prompt message can be sent to the target user to prompt the target user that the pending request is abnormal.

[0079] This implementation verifies user information and the request content of pending requests to identify whether there are any abnormalities, thereby ensuring the security of user information and request information.

[0080] It should be noted that the steps shown in the flowcharts of the accompanying drawings can be executed in a computer system such as a set of computer executable instructions, and that, although a logical order is shown in the flowcharts, in some cases, the steps shown or described can be executed in an order different from that shown here.

[0081] Figure 2 is a flowchart of an optional method for processing request information provided according to an embodiment of the present application, such as Figure 2 As shown, the process includes the following steps:

[0082] In the process of processing the request information, the registration module will first receive the pending request sent by the target user. The registration module can verify the request content of the pending request and the user information carried by the pending request to identify whether there is an abnormality. After the verification, the pending request can be added to the first buffer pool, and when the storage time of the first request in the first buffer pool reaches a preset time, or the number of all pending requests reaches a preset number, all pending requests in the first buffer pool are combined to form one or more target requests, and then the target request can be signed and sent to the certificate issuance module.

[0083] After receiving the target request and target signature, the certificate issuance module can verify the target signature, parse the target request after verification, and generate corresponding multiple digital certificates based on the multiple pending requests obtained through parsing. Then, the multiple digital certificates can be assembled to obtain a certificate file package, and then the certificate file package can be sent to the OCSP and LDAP systems through the certificate publisher for storing certificates and certificate status. At the same time, the certificate file package can be signed and sent to the registration module.

[0084] After the registration module receives the certificate file package sent by the certificate issuing module, it can verify the certificate file package, parse it after the verification is passed, and obtain multiple certificate files. Then, the multiple certificate files can be stored in the second buffer pool. When the registration module receives a certificate query request sent by the target user, the certificate file of the target user can be obtained from the second buffer pool according to the user information, and the certificate file can be sent to the target user.

[0085] The embodiment of the present application also provides a request information processing device. It should be noted that the request information processing device of the embodiment of the present application can be used to execute the request information processing method provided by the embodiment of the present application. The request information processing device provided by the embodiment of the present application is introduced below.

[0086] Figure 3 Schematic diagram of a device for processing request information provided according to an embodiment of the present application. Figure 3 As shown, the device comprises:

[0087] The receiving unit 31 is used to receive a pending request sent by a target user, wherein the pending request is used to request generation of a digital signature certificate and carries user information of the target user.

[0088] The adding unit 32 is used to add the pending request to the first buffer pool, and combine all the pending requests in the first buffer pool to obtain a target request.

[0089] The first sending unit 33 is used to sign the target request and send it to the certificate issuing module, and receive the certificate file package sent by the certificate issuing module, wherein the certificate file package carries multiple certificate files.

[0090] The first verification unit 34 is used to verify the certificate file package, parse the certificate file package according to the verification result, obtain multiple certificate files, and store the multiple certificate files in the second buffer pool.

[0091] The first acquisition unit 35 is configured to, upon receiving a certificate query request sent by a target user, acquire the certificate file of the target user from the second buffer pool according to the user information, and send the certificate file to the target user.

[0092] The request information processing device provided in the embodiment of the present application receives a pending request sent by a target user through a receiving unit 31, wherein the pending request is used to request the generation of a digital signature certificate, and the pending request carries the user information of the target user; the adding unit 32 adds the pending request to the first buffer pool, and combines all the pending requests in the first buffer pool to obtain the target request; the first sending unit 33 signs the target request and sends it to the certificate issuing module, and receives the certificate file package sent by the certificate issuing module, wherein the certificate file package carries multiple certificate files; the first verification unit 34 verifies the certificate file package, and parses the certificate file package according to the verification result to obtain multiple certificate files, and stores the multiple certificate files in the second buffer pool; the first acquisition unit 33 When Yuan 35 receives a certificate query request sent by a target user, it obtains the certificate file of the target user from the second buffer pool according to the user information, and sends the certificate file to the target user. By adding the pending requests to the first buffer pool, all pending requests are combined into a target request, which is sent to the certificate issuance module after signing. After receiving the certificate file package sent by the module, the certificate file package is verified and parsed, and the obtained multiple certificate files are stored in the second buffer pool. When a certificate query request is received, the certificate file is sent to the target user, which solves the problem in the related technology that the digital certificate authentication system processes each certificate application request separately, resulting in low efficiency of certificate application and issuance, thereby achieving the technical effect of improving the efficiency of certificate application and issuance.

[0093] Optionally, in the request information processing device provided in the embodiment of the present application, before combining all pending requests in the first buffer pool to obtain the target request, the device also includes: a second acquisition unit, used to obtain the storage duration of the first request with the longest storage time in the first buffer pool; a first judgment unit, used to judge whether the storage duration is equal to a preset duration; a counting unit, used to count the number of requests in the first buffer pool when the storage duration is less than the preset duration until the storage duration is equal to the preset duration; and a first execution unit, used to execute the step of combining all pending requests in the first buffer pool to obtain the target request when the storage duration is equal to the preset duration.

[0094] Optionally, in the request information processing device provided in the embodiment of the present application, after counting the number of requests in the first buffer pool, the device also includes: a second judgment unit, used to judge whether the number of requests is greater than a preset number; a second execution unit, used to execute the step of combining all pending requests in the first buffer pool to obtain a target request when the number of requests is greater than or equal to the preset number; and a third execution unit, used to execute a waiting operation when the number of requests is less than the preset number, until the number of requests in the first buffer pool is greater than or equal to the preset number, or the storage duration is equal to the preset duration.

[0095] Optionally, in the request information processing device provided in the embodiment of the present application, the adding unit 32 includes: a statistical module, used to count the number of requests in the first buffer pool; a combining module, used to combine all pending requests in the first buffer pool to obtain a target request when the number of requests is less than or equal to a preset number; a grouping module, used to group all requests in the first buffer pool in storage time order according to the preset number when the number of requests is greater than the preset number, to obtain multiple groups of requests, and combine each group of requests to obtain multiple target requests, wherein the number of requests in each group of requests is less than or equal to the preset number; the sending unit includes: a first sending module, used to sign each target request in sequence according to the storage time order and send it to the certificate issuance module when there are multiple target requests.

[0096] Optionally, in the request information processing device provided in the embodiment of the present application, the first sending unit 33 includes: an acquisition module, used to obtain summary information in the target request, and encrypt the summary information through a preset private key to obtain a target signature; a second sending module, used to send the target request and the target signature to a certificate issuing module, wherein the certificate issuing module uses a preset public key to verify the target signature, and processes the target request according to the verification result, and the preset public key is associated with the preset private key.

[0097] Optionally, in the request information processing device provided in the embodiment of the present application, the certificate issuance module parses the target request to obtain multiple requests to be processed, processes each request to be processed to obtain multiple digital certificates, assembles the multiple digital certificates to obtain a certificate file package, and sends the signature of the certificate file package to the registration module.

[0098] Optionally, in the request information processing device provided in the embodiment of the present application, before adding the pending request to the first buffer pool, the device also includes: a third acquisition unit, used to obtain historical information of the target user based on the user information; a second verification unit, used to verify the user information through the historical information to obtain a first verification result, wherein the first verification result is used to characterize whether there is an abnormality in the user information; a third verification unit, used to verify the request content of the pending request to obtain a second verification result, wherein the second verification result is used to characterize whether there is an abnormality in the request content; a fourth execution unit, used to execute the step of adding the pending request to the first buffer pool when there is no abnormality in the first verification result and the second verification result; a second sending unit, used to send a prompt message to the target user when there is an abnormality in the first verification result and / or the second verification result, wherein the prompt message characterizes that the pending request is abnormal.

[0099] The processing device for the above-mentioned request information includes a processor and a memory. The above-mentioned receiving unit 31, adding unit 32, first sending unit 33, first verification unit 34, first acquisition unit 35, etc. are all stored in the memory as program units, and the processor executes the above-mentioned program units stored in the memory to realize corresponding functions.

[0100] The processor includes a kernel, which retrieves the corresponding program unit from the memory. One or more kernels can be set, and the problem that the digital certificate authentication system in the related technology processes each certificate application request separately, resulting in low efficiency of certificate application and issuance, is solved by adjusting kernel parameters, thereby achieving the technical effect of improving the efficiency of certificate application and issuance.

[0101] The memory may include non-permanent memory in a computer-readable medium, random access memory (RAM) and / or non-volatile memory, such as read-only memory (ROM) or flash RAM, and the memory includes at least one memory chip.

[0102] An embodiment of the present invention provides a computer-readable storage medium on which a program is stored. When the program is executed by a processor, the method for processing request information is implemented.

[0103] An embodiment of the present invention provides a processor, which is used to run a program, wherein the method for processing request information is executed when the program is running.

[0104] Figure 4 is a schematic diagram of an electronic device provided according to an embodiment of the present application, such as Figure 4 As shown, an embodiment of the present invention provides an electronic device, the electronic device 40 includes a processor, a memory and a program stored in the memory and can be run on the processor, and the processor implements the following steps when executing the program: receiving a pending request sent by a target user, wherein the pending request is used to request the generation of a digital signature certificate, and the pending request carries the user information of the target user; adding the pending request to a first buffer pool, and combining all pending requests in the first buffer pool to obtain a target request; signing the target request and sending it to a certificate issuance module, and receiving a certificate file package sent by the certificate issuance module, wherein the certificate file package carries multiple certificate files; verifying the certificate file package, and parsing the certificate file package according to the verification result to obtain multiple certificate files, and storing the multiple certificate files in a second buffer pool; in the case of receiving a certificate query request sent by the target user, obtaining the certificate file of the target user from the second buffer pool according to the user information, and sending the certificate file to the target user. The device in this article can be a server, a PC, a PAD, a mobile phone, etc.

[0105] The present application also provides a computer program product, which, when executed on a data processing device, is suitable for executing a program that is initialized with the following method steps: receiving a pending request sent by a target user, wherein the pending request is used to request the generation of a digital signature certificate, and the pending request carries user information of the target user; adding the pending request to a first buffer pool, and combining all pending requests in the first buffer pool to obtain a target request; signing the target request and sending it to a certificate issuance module, and receiving a certificate file package sent by the certificate issuance module, wherein the certificate file package carries multiple certificate files; verifying the certificate file package, and parsing the certificate file package according to the verification result to obtain multiple certificate files, and storing the multiple certificate files in a second buffer pool; when receiving a certificate query request sent by the target user, obtaining the certificate file of the target user from the second buffer pool according to the user information, and sending the certificate file to the target user.

[0106] Those skilled in the art will appreciate that the embodiments of the present application may be provided as methods, systems, or computer program products. Therefore, the present application may adopt the form of a complete hardware embodiment, a complete software embodiment, or an embodiment in combination with software and hardware. Moreover, the present application may adopt the form of a computer program product implemented in one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) that include computer-usable program code.

[0107] The present application is described with reference to the flowcharts and / or block diagrams of the methods, devices (systems), and computer program products according to the embodiments of the present application. It should be understood that each process and / or box in the flowchart and / or block diagram, as well as the combination of the processes and / or boxes in the flowchart and / or block diagram, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, an embedded processor, or other programmable data processing device to generate a machine, so that the instructions executed by the processor of the computer or other programmable data processing device generate instructions for implementing the processes in the flowchart and / or block diagram. Figure 1 A process or multiple processes and / or boxes Figure 1 A device that provides the functions specified in a block or multiple blocks.

[0108] These computer program instructions may also be stored in a computer-readable memory capable of directing a computer or other programmable data processing device to operate in a specific manner, so that the instructions stored in the computer-readable memory produce an article of manufacture comprising an instruction device, which implements the process Figure 1 A process or multiple processes and / or boxes Figure 1 A function specified in one or more boxes.

[0109] These computer program instructions can also be loaded onto a computer or other programmable data processing device so that a series of operating steps are executed on the computer or other programmable device to produce a computer-implemented process, thereby providing instructions for implementing the process. Figure 1 A process or multiple processes and / or boxes Figure 1 The steps for the functions specified in one or more boxes.

[0110] In a typical configuration, a computing device includes one or more processors (CPU), input / output interfaces, network interfaces, and memory.

[0111] The memory may include non-permanent memory in a computer-readable medium, random access memory (RAM) and / or non-volatile memory in the form of read-only memory (ROM) or flash RAM. The memory is an example of a computer-readable medium.

[0112] Computer readable media include permanent and non-permanent, removable and non-removable media that can be implemented by any method or technology to store information. Information can be computer readable instructions, data structures, program modules or other data. Examples of computer storage media include, but are not limited to, phase change memory (PRAM), static random access memory (SRAM), dynamic random access memory (DRAM), other types of random access memory (RAM), read-only memory (ROM), electrically erasable programmable read-only memory (EEPROM), flash memory or other memory technology, compact disk read-only memory (CD-ROM), digital versatile disk (DVD) or other optical storage, magnetic cassettes, magnetic tape disk storage or other magnetic storage devices or any other non-transmission media that can be used to store information that can be accessed by a computing device. As defined herein, computer readable media does not include temporary computer readable media (transitory media), such as modulated data signals and carrier waves.

[0113] It should also be noted that the terms "include", "comprises" or any other variations thereof are intended to cover non-exclusive inclusion, so that a process, method, commodity or device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, commodity or device. In the absence of more restrictions, the elements defined by the sentence "comprises a ..." do not exclude the existence of other identical elements in the process, method, commodity or device including the elements.

[0114] The above are only embodiments of the present application and are not intended to limit the present application. For those skilled in the art, the present application may have various changes and variations. Any modification, equivalent replacement, improvement, etc. made within the spirit and principle of the present application should be included within the scope of the claims of the present application.

Claims

1. A method for processing request information, characterized in that: include: Receiving a pending request sent by a target user, wherein the pending request is used to request generation of a digital signature certificate, and the pending request carries user information of the target user; Adding the pending request to a first buffer pool, and combining all pending requests in the first buffer pool to obtain a target request; Signing the target request and sending it to the certificate issuing module, and receiving the certificate file package sent by the certificate issuing module, wherein the certificate file package carries multiple certificate files; Verifying the certificate file package, parsing the certificate file package according to the verification result, obtaining a plurality of certificate files, and storing the plurality of certificate files in a second buffer pool; When receiving the certificate query request sent by the target user, the certificate file of the target user is obtained from the second buffer pool according to the user information, and the certificate file is sent to the target user.

2. The method according to claim 1, characterized in that: Before combining all pending requests in the first buffer pool to obtain a target request, the method further includes: Obtaining a storage duration of a first request having the longest storage duration in the first buffer pool; Determining whether the storage duration is equal to a preset duration; When the storage duration is less than the preset duration, counting the number of requests in the first buffer pool until the storage duration is equal to the preset duration; When the storage duration is equal to the preset duration, the step of combining all pending requests in the first buffer pool to obtain a target request is performed.

3. The method according to claim 2, characterized in that After counting the number of requests in the first buffer pool, the method further includes: Determine whether the request quantity is greater than a preset quantity; When the number of requests is greater than or equal to the preset number, performing the step of combining all pending requests in the first buffer pool to obtain a target request; When the number of requests is less than the preset number, a waiting operation is performed until the number of requests in the first buffer pool is greater than or equal to the preset number, or the storage duration is equal to the preset duration.

4. The method according to claim 1, characterized in that Combining all pending requests in the first buffer pool to obtain a target request includes: Counting the number of requests in the first buffer pool; When the number of requests is less than or equal to a preset number, all pending requests in the first buffer pool are combined to obtain a target request; In the case where the number of requests is greater than the preset number, grouping all requests in the first buffer pool in the order of storage time according to the preset number to obtain multiple groups of requests, and combining the groups of requests to obtain multiple target requests, wherein the number of requests in each group of requests is less than or equal to the preset number; The signing of the target request and sending it to the certificate issuing module comprises: In the case where there are multiple target requests, each target request is signed and sent to the certificate issuing module in sequence according to the storage time sequence.

5. The method according to claim 1, characterized in that: The signing of the target request and sending it to the certificate issuing module comprises: Obtain summary information in the target request, and encrypt the summary information using a preset private key to obtain a target signature; The target request and the target signature are sent to the certificate issuing module, wherein the certificate issuing module verifies the target signature using a preset public key and processes the target request according to the verification result, and the preset public key is associated with the preset private key.

6. The method according to claim 1, characterized in that The certificate issuance module parses the target request to obtain multiple pending requests, processes each pending request to obtain multiple digital certificates, assembles the multiple digital certificates to obtain the certificate file package, and sends the signature of the certificate file package to the registration module.

7. The method according to claim 1, characterized in that Before adding the pending request to the first buffer pool, the method further includes: Acquire historical information of the target user according to the user information; Verify the user information through the historical information to obtain a first verification result, wherein the first verification result is used to indicate whether there is an abnormality in the user information; Verifying the request content of the request to be processed to obtain a second verification result, wherein the second verification result is used to indicate whether there is an abnormality in the request content; When both the first verification result and the second verification result are normal, performing the step of adding the pending request to the first buffer pool; When there is an abnormality in the first verification result and / or the second verification result, a prompt message is sent to the target user, wherein the prompt message indicates that the request to be processed is abnormal.

8. A device for processing request information, characterized in that: include: A receiving unit, configured to receive a pending request sent by a target user, wherein the pending request is used to request generation of a digital signature certificate, and the pending request carries user information of the target user; an adding unit, configured to add the pending request to a first buffer pool, and combine all pending requests in the first buffer pool to obtain a target request; A first sending unit, configured to sign the target request and send it to a certificate issuing module, and receive a certificate file package sent by the certificate issuing module, wherein the certificate file package carries a plurality of certificate files; A first verification unit, configured to verify the certificate file package, parse the certificate file package according to the verification result, obtain a plurality of certificate files, and store the plurality of certificate files in a second buffer pool; The first acquisition unit is configured to, upon receiving a certificate query request sent by the target user, acquire the certificate file of the target user from the second buffer pool according to the user information, and send the certificate file to the target user.

9. A computer-readable storage medium, characterized in that: The computer-readable storage medium includes a stored executable program, wherein when the executable program is run, the device where the computer-readable storage medium is located is controlled to execute the method for processing request information according to any one of claims 1 to 7.

10. An electronic device, characterized in that: include: A memory storing an executable program; A processor is used to run the program, wherein the program executes the method for processing request information described in any one of claims 1 to 7 when running.

Images