Method, apparatus and system for processing information

Abstract

The application discloses a kind of information processing method, device and system.The method comprises: in response to the adjustment instruction triggered on target application program, call the configuration information in the key tool package associated with target application program, and based on adjustment instruction to configuration information is adjusted, wherein, key tool package at least includes encryption strategy and decryption strategy;In response to receiving request information, using the encryption strategy corresponding to the adjusted configuration information, encrypt request information, obtain encryption result, and send encryption result to the server corresponding to the client, wherein, encryption strategy indicates the rule that request information is encrypted;In response to the response information corresponding to encryption result returned by server, using the decryption strategy corresponding to the adjusted configuration information, decrypt response information, obtain decryption result, wherein, decryption strategy indicates the rule that response information is decrypted.The application solves the technical problem that the flexibility of information processing is poor.

Description

Technical Field

[0001] This invention relates to the field of communication technology, and more specifically, to an information processing method, apparatus, and system. Background Technology

[0002] In related technologies, information processing typically relies on encryption and decryption strategies. In scenarios with high concurrency or large-scale information transmission, users have higher requirements for the security and timeliness of information transmission. In such cases, it is necessary to adjust encryption and decryption strategies to meet these enhanced demands. However, since encryption and decryption strategies are fixed in the code, they often require code modification and recompilation, which is not only time-consuming and labor-intensive but also prone to introducing new errors and vulnerabilities. Furthermore, because different platforms use different encryption and decryption libraries, compatibility issues arise when adjusting encryption and decryption strategies across platforms, failing to meet the needs of different users. Therefore, the technical problem of poor flexibility in information processing persists.

[0003] There is currently no effective solution to the above problems. Summary of the Invention

[0004] The present invention provides an information processing method, apparatus and system to at least solve the technical problem of poor flexibility in information processing.

[0005] According to one aspect of the present invention, an information processing method is provided, applied to a client, on which a target application is deployed. The method may include: in response to an adjustment instruction triggered on the target application, invoking configuration information in a key toolkit associated with the target application, and adjusting the configuration information based on the adjustment instruction, wherein the key toolkit includes at least an encryption policy and a decryption policy; in response to receiving a request message, encrypting the request message using the encryption policy corresponding to the adjusted configuration information to obtain an encryption result, and sending the encryption result to a server corresponding to the client, wherein the encryption policy is used to represent the rules for encrypting the request message; in response to a response message returned by the server corresponding to the encryption result, decrypting the response message using the decryption policy corresponding to the adjusted configuration information to obtain a decryption result, wherein the decryption policy is used to represent the rules for decrypting the response message.

[0006] Optionally, the target application and the key toolkit are connected via an application programming interface (API). The functional modules of the key toolkit include a parameter configuration module. In response to an adjustment command triggered on the target application, the configuration information in the key toolkit associated with the target application is called, and the configuration information is adjusted based on the adjustment command. This includes: in response to an adjustment command triggered on the target application, calling the configuration information in the key toolkit via the API; and adjusting the called configuration information according to the adjustment command using the parameter configuration module to obtain an adjustment result, wherein the adjustment result is used to indicate whether the configuration information adjustment is complete.

[0007] Optionally, according to the adjustment instruction, the parameter configuration module is used to adjust the called configuration information to obtain the adjustment result, including: using the parameter configuration module to parse the adjustment instruction and determine the configuration file of the target configuration format; and adjusting the configuration information based on the adjustment parameters in the configuration file to obtain the adjustment result.

[0008] Optionally, the method further includes: generating an encryption strategy for request information received by the client to be encrypted at a future time based on the adjusted configuration information; and encrypting the request information using the encryption strategy corresponding to the adjusted configuration information in response to receiving the request information, thereby obtaining an encryption result, including: in response to the parameter configuration module completing the adjustment of the configuration information and receiving the request information, calling the encryption strategy through the application programming interface to encrypt the request information and obtain an encryption result.

[0009] Optionally, the graphical user interface of the target application in the client includes at least one configuration template control, which corresponds to a configuration template. The method further includes: triggering an adjustment instruction in response to a click operation performed on the configuration template control; and in response to the adjustment instruction triggered on the target application, calling the configuration information in the key toolkit associated with the target application, including: parsing the adjustment parameters in the configuration template and adjusting the configuration information using the parsed adjustment parameters.

[0010] Optionally, the graphical user interface of the target application in the client includes a documentation control, and the method further includes: triggering a viewing instruction in response to a click operation performed on the documentation control; and displaying functional documentation of each functional module of the key toolkit based on the viewing instruction.

[0011] Optionally, the functional module includes an exception management module, which includes at least one of the following: a configuration exception submodule, a request exception submodule, and an unloaded implementation package exception submodule. The method further includes: in response to a first exception state during the process of adjusting configuration information, processing the first exception state using the configuration exception submodule to ensure successful configuration information adjustment; and / or, in response to a second exception state during the process of encrypting request information, processing the second exception state using the request exception submodule to ensure successful encryption of the request information; and / or, in response to a third exception state during the process of calling the key toolkit, processing the third exception state using the unloaded implementation package exception submodule to successfully call the key toolkit.

[0012] According to another aspect of the present invention, an information processing apparatus is also provided, comprising: an adjustment unit, configured to, in response to an adjustment instruction triggered on a target application on a client, call configuration information in a key toolkit associated with the target application, and adjust the configuration information based on the adjustment instruction, wherein the key toolkit includes at least an encryption strategy and a decryption strategy; an encryption unit, configured to, in response to receiving request information, encrypt the request information using the encryption strategy corresponding to the adjusted configuration information to obtain an encryption result, and send the encryption result to a server corresponding to the client, wherein the encryption strategy is used to represent the rules for encrypting the request information; and a decryption unit, configured to, in response to a response information returned by the server corresponding to the encryption result, decrypt the response information using the decryption strategy corresponding to the adjusted configuration information to obtain a decryption result, wherein the decryption strategy is used to represent the rules for decrypting the response information.

[0013] According to another aspect of the present invention, an information processing system is also provided, comprising: a client, configured to, in response to an adjustment instruction triggered on a target application of the client, invoke configuration information in a key toolkit associated with the target application, and adjust the configuration information based on the adjustment instruction, wherein the key toolkit includes at least an encryption strategy and a decryption strategy; in response to receiving a request message, encrypt the request message using the encryption strategy corresponding to the adjusted configuration information to obtain an encryption result, and send the encryption result to a server corresponding to the client, wherein the encryption strategy is used to represent the rules for encrypting the request message; in response to a response message returned by the server corresponding to the encryption result, decrypt the response message using the decryption strategy corresponding to the adjusted configuration information to obtain a decryption result, wherein the decryption strategy is used to represent the rules for decrypting the response message; and a server, configured to, in response to receiving the encryption result, return response information corresponding to the encryption result to the client.

[0014] According to another aspect of the present invention, a processor is also provided for running a program, wherein the program is executed by the processor to perform any of the above-described information processing methods.

[0015] According to another aspect of the present invention, a computer-readable storage medium is also provided, which stores a plurality of instructions adapted for a processor to load and execute any of the above-described information processing methods.

[0016] According to another aspect of the present invention, an electronic device is also provided, including a memory and a processor, wherein the memory stores a computer program and the processor is configured to run the computer program to perform any of the above-described information processing methods.

[0017] According to another aspect of the embodiments of this application, a computer program product is also provided. This computer program product includes a computer program that, when executed by a processor, implements the information processing method described in the embodiments of this application.

[0018] In this embodiment of the invention, if a user needs to adjust the configuration information in the key toolkit to process subsequent request information using the encryption and decryption strategies corresponding to the adjusted configuration information, it can detect whether an adjustment instruction to adjust the above strategies has been triggered on the target application. If an adjustment instruction is detected, the configuration information in the key toolkit associated with the target application can be called, and the configuration information can be adjusted based on the adjustment instruction. When the client receives the request information, it can use the encryption strategy corresponding to the adjusted configuration information to encrypt the request information, obtain the encryption result, and send the encryption result to the server corresponding to the client. Based on the response information returned by the server corresponding to the encryption result, the response information can be decrypted using the decryption strategy corresponding to the adjusted configuration information to obtain the decryption result. In this embodiment, through the adjustment instruction on the target application, the configuration information in the key toolkit can be called, and the encryption and decryption strategies can be dynamically adjusted between the client and the server based on the adjustment instruction. This overcomes the limitations of static configuration in related technologies, as well as the problem of not being able to flexibly select and change encryption and decryption strategies according to real-time scenarios or user needs, thereby achieving the technical effect of improving the flexibility of information processing and solving the technical problem of poor flexibility in information processing. Attached Figure Description

[0019] The accompanying drawings, which are included to provide a further understanding of the invention and form part of this application, illustrate exemplary embodiments of the invention and, together with their description, serve to explain the invention and do not constitute an undue limitation thereof. In the drawings:

[0020] Figure 1 This is a flowchart of an information processing method according to an embodiment of the present invention;

[0021] Figure 2 This is a schematic diagram of an apparatus for a unified implementation of a hypertext transfer protocol communication client program based on a national cryptographic algorithm, according to an embodiment of the present invention.

[0022] Figure 3 This is a schematic diagram of the structure of an information processing device according to an embodiment of the present invention;

[0023] Figure 4 This is a schematic diagram of the structure of an information processing system according to an embodiment of the present invention;

[0024] Figure 5 This is a schematic diagram of an electronic device for an information processing method according to an embodiment of the present invention. Detailed Implementation

[0025] To enable those skilled in the art to better understand the present invention, the technical solutions of the present invention will be clearly and completely described below with reference to the accompanying drawings of the embodiments of the present invention. Obviously, the described embodiments are only some embodiments of the present invention, and not all embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those skilled in the art without creative effort should fall within the scope of protection of the present invention.

[0026] It should be noted that the terms "first," "second," etc., in the specification, claims, and accompanying drawings of this invention are used to distinguish similar objects and are not necessarily used to describe a specific order or sequence. It should be understood that such data can be interchanged where appropriate so that the embodiments of the invention described herein can be implemented in orders other than those illustrated or described herein. Furthermore, the terms "comprising" and "having," and any variations thereof, are intended to cover a non-exclusive inclusion; for example, a process, method, system, product, or apparatus that comprises a series of steps or units is not necessarily limited to those steps or units explicitly listed, but may include other steps or units not explicitly listed or inherent to such processes, methods, products, or apparatus.

[0027] Example 1

[0028] According to an embodiment of the present invention, an embodiment of an information processing method is provided. It should be noted that the steps shown in the flowchart in the accompanying drawings can be executed in a computer system such as a set of computer-executable instructions. Furthermore, although a logical order is shown in the flowchart, in some cases, the steps shown or described may be executed in a different order than that shown here.

[0029] Figure 1 This is a flowchart of an information processing method according to an embodiment of the present invention, such as... Figure 1 As shown, this method is applied to a client on which the target application is deployed, and includes the following steps:

[0030] Step S102: In response to the adjustment instruction triggered on the target application, the configuration information in the key toolkit associated with the target application is called, and the configuration information is adjusted based on the adjustment instruction.

[0031] In the technical solution provided in step S102 of this embodiment of the invention, the target application can be a Hypertext Transfer Protocol (HTTP) communication client program. The key toolkit can be a national cryptographic toolkit / encrypted communication toolkit, which can at least include encryption and decryption strategies and stores configuration information related to encryption and decryption. The configuration information is a set of rules and parameters that can define the specific operations in the encryption and decryption process, such as the selection of encryption algorithm, key size, padding method, certificate path, exception handling, etc. The above configuration information can be stored in the key toolkit for unified management and invocation.

[0032] In this embodiment, during the operation of the HTTP communication client program, it can detect in real time whether an adjustment command has been triggered on the target application. If an adjustment command is triggered, the HTTP communication client program can call the configuration information stored in the national cryptographic toolkit / encrypted communication toolkit to modify the parameters related to the encryption and decryption strategies. If no adjustment command is triggered, the HTTP communication client program will continue to perform encryption and decryption operations according to the existing configuration information without actively changing the configuration information.

[0033] Optionally, when user needs change—for example, when a user may need to modify encryption strength, encryption algorithm, or key management strategy to flexibly adjust encryption and decryption strategies to address evolving security threats and business requirements—an adjustment command can be triggered. Upon receiving the adjustment command, the HTTP communication client can invoke its associated key toolkit to make specific adjustments to the configuration information within the key toolkit. These adjustments ensure that the modified encryption and decryption strategies still meet both security and performance requirements.

[0034] For example, if the tuning instructions require increased encryption strength, the key kit can change the encryption algorithm to a more complex one, or increase the key length. Conversely, if the tuning instructions are for performance optimization, the key kit can choose a faster but potentially slightly less secure encryption algorithm, or reduce the key size.

[0035] Optionally, without modifying the HTTP communication client program code, the encryption and decryption strategies can be dynamically adjusted to cope with various real-time changing scenarios, ensuring that the encryption and decryption strategies during the communication process always meet the user's needs, thereby improving the flexibility and security of information processing.

[0036] Step S104: In response to receiving the request information, the request information is encrypted using the encryption strategy corresponding to the adjusted configuration information to obtain the encryption result, and the encryption result is sent to the server corresponding to the client.

[0037] In the technical solution provided by step S104 of this embodiment of the invention, after detecting the adjustment instruction triggered on the target application, calling the configuration information in the key toolkit associated with the target application, and adjusting the configuration information based on the adjustment instruction, when a request information is received, the request information can be encrypted using the encryption strategy corresponding to the adjusted configuration information to obtain the encryption result, and the encryption result can be sent to the server corresponding to the client. The encryption strategy can be used to represent the rules for encrypting the request information.

[0038] In this embodiment, when the target application on the client receives the request information, it can invoke the previously adjusted configuration information. Using the encryption strategy corresponding to the adjusted configuration information, the target application on the client can encrypt the request information to ensure confidentiality and integrity. After encryption, the target application on the client can send the encrypted result (i.e., the encrypted request information) to the corresponding server. The encrypted result can be encapsulated in a specific HTTP request header or HTTP request body to distinguish it from unencrypted information transmission. The HTTP request header is the metadata part of the request message and can be used to carry additional information about the request, such as the user agent, accepted media type, authentication information, etc. The HTTP request body is the main data part of the request message and can be used to carry the actual request data. When the amount of encrypted data is small, it can be encapsulated in a specific HTTP request header. When the amount of encrypted data is large, it can be encapsulated in the HTTP request body.

[0039] Optionally, an encryption strategy is a set of rules defined in the key toolkit that can be used to guide key parameters in the encryption process, such as the selection of encryption algorithms, key generation, padding methods, and certificate invocation. Encrypting request information using an encryption strategy can prevent unauthorized parties from stealing or tampering with the information during transmission, improving cross-platform compatibility and user trust, and enhancing the security of information processing.

[0040] Step S106: In response to the response information returned by the server corresponding to the encryption result, the response information is decrypted using the decryption strategy corresponding to the adjusted configuration information to obtain the decryption result.

[0041] In the technical solution provided in step S106 of this embodiment of the invention, after encrypting the request information using the encryption strategy corresponding to the adjusted configuration information, obtaining the encryption result, and sending the encryption result to the server corresponding to the client, the response information returned by the server corresponding to the encryption result can be decrypted using the decryption strategy corresponding to the adjusted configuration information to obtain the decryption result. The decryption strategy can be used to represent the rules for decrypting the response information. The decryption result can be the successfully decoded response data required by the user.

[0042] In this embodiment, after receiving the response from the server, the HTTP communication client program can invoke the decryption strategy in the key toolkit. According to the decryption strategy, the key toolkit can perform decryption operations on the encrypted data in the response, such as decryption algorithm determination, key reading, reverse padding, and certificate verification. The response may contain encrypted data, status codes, response headers, etc.; this is merely an example and not a specific limitation.

[0043] Optionally, the decryption algorithm determination operation involves selecting the corresponding decryption algorithm based on the decryption strategy, matching the algorithm used during encryption. The key reading operation means that the decryption strategy contains information about the decryption key, and the key toolkit can read or generate the correct key according to the strategy. The reverse padding operation means that if padding was used during encryption, reverse padding can be performed during decryption to ensure integrity. The certificate verification operation means that if the encryption strategy includes the use of a certificate, the validity of the certificate can be verified during decryption to ensure the reliability of the encrypted data's origin.

[0044] Optionally, the decryption strategy is a set of rules based on the adjusted configuration information, which can be used to guide key parameters such as algorithm selection, key usage, and padding methods during the decryption process. The decryption strategy corresponds to the encryption strategy, ensuring the consistency and correctness of the encryption and decryption processes. By calling and applying the adjusted decryption strategy, the response information is decrypted, ensuring the security of information during transmission and providing the user with the decrypted data.

[0045] In steps S102 to S106 of this embodiment, if a user needs to adjust the configuration information in the key toolkit to process subsequent request information using the encryption and decryption strategies corresponding to the adjusted configuration information, it can detect whether an adjustment instruction to adjust the above strategies has been triggered on the target application. If an adjustment instruction is detected, the configuration information in the key toolkit associated with the target application can be called, and the configuration information can be adjusted based on the adjustment instruction. When the client receives the request information, it can use the encryption strategy corresponding to the adjusted configuration information to encrypt the request information, obtain the encryption result, and send the encryption result to the server corresponding to the client. Based on the response information returned by the server corresponding to the encryption result, the response information can be decrypted using the decryption strategy corresponding to the adjusted configuration information to obtain the decryption result. In this embodiment, through the adjustment instruction on the target application, the configuration information in the key toolkit can be called, and the encryption and decryption strategies can be dynamically adjusted between the client and the server based on the adjustment instruction. It overcomes the limitations of static configuration in related technologies, as well as the inability to flexibly select and change encryption and decryption strategies according to real-time scenarios or user needs, thereby achieving the technical effect of improving the flexibility of information processing and solving the technical problem of poor information processing flexibility.

[0046] The embodiments of the present invention will now be described in detail with reference to the steps described above.

[0047] As an optional embodiment, the target application and the key toolkit are connected via an application programming interface (API). The functional modules of the key toolkit include a parameter configuration module. In step S102, in response to an adjustment command triggered on the target application, configuration information in the key toolkit associated with the target application is called, and the configuration information is adjusted based on the adjustment command. This includes: in response to an adjustment command triggered on the target application, calling the configuration information in the key toolkit via the API; and adjusting the called configuration information using the parameter configuration module according to the adjustment command to obtain an adjustment result, wherein the adjustment result is used to indicate whether the configuration information adjustment is complete.

[0048] In this embodiment, the target application and the key toolkit can be connected via an application programming interface (API). The functional modules of the key toolkit may include a parameter configuration module. The API can be used to configure encryption algorithms, set encryption parameters, select encryption protocols, and can serve as an encryption configuration interface. During the process of detecting an adjustment command triggered on the target application, calling the configuration information in the key toolkit associated with the target application, and adjusting the configuration information based on the adjustment command, the configuration information in the key toolkit can be called through the API according to the adjustment command triggered on the target application. The parameter configuration module can be used to adjust the called configuration information according to the adjustment command to obtain the adjustment result. The adjustment result indicates whether the configuration information adjustment is complete.

[0049] Optionally, the target application connects to the key toolkit via an application programming interface (API), allowing the target application to dynamically call and adjust the configuration information in the key toolkit without directly modifying the key toolkit's code or underlying structure.

[0050] Optionally, in the target application, developers or system administrators can trigger adjustment commands via a user interface or command-line tools, such as changing encryption algorithms, updating certificates, or adjusting key lengths. Based on the adjustment commands, the target application can call configuration information in the key toolkit via a predefined API, avoiding the security risks and code coupling issues that might arise from direct access to the key toolkit. The called configuration information can be passed to the parameter configuration module, which can parse the adjustment commands and modify the configuration information according to the command requirements. After adjustment, the parameter configuration module can return the adjustment result, such as a boolean value or status code, to indicate whether the configuration information adjustment is complete. If the adjustment is successful, the target application can continue to use the adjusted configuration information for encrypted communication; if the adjustment fails, the API will provide error information to help developers or system administrators locate and correct the problem.

[0051] Optionally, the parameter configuration module can be used to store and manage configuration parameters required for encrypted communication. These configuration parameters may include, but are not limited to, encryption algorithm type, key length, padding method, and certificate information. The parameter configuration module provides a configuration interface, allowing users to adjust these configuration parameters according to their needs, thereby generating encryption and decryption policies. The parameter configuration module may include an encryption configuration model, a default encryption configuration component, and a certificate hostname verification configuration component. The encryption configuration model manages encryption policies, including configuration information such as encryption algorithm, key length, and padding method. The default encryption configuration component provides a configuration interface, allowing users to adjust configuration parameters according to their needs. The certificate hostname verification configuration component is used to configure the certificate verification mechanism, ensuring the server's certificate is valid and improving communication security.

[0052] Optionally, all HTTP communication-related operations, including request sending and response receiving, can be encapsulated through a simple and easy-to-use communication interface. Users only need to call the corresponding API to complete the entire communication process. The communication interface supports asynchronous processing, which can improve concurrency performance and response speed.

[0053] As an optional embodiment, the configuration information called is adjusted using the parameter configuration module according to the adjustment instruction to obtain the adjustment result, including: parsing the adjustment instruction using the parameter configuration module to determine the configuration file of the target configuration format; and adjusting the configuration information based on the adjustment parameters in the configuration file to obtain the adjustment result.

[0054] In this embodiment, if the configuration information to be called is to be adjusted according to the adjustment instruction and the adjustment result is to be obtained by using the parameter configuration module, the adjustment instruction can be parsed by the parameter configuration module to determine the configuration file of the target configuration format; the configuration information can be adjusted based on the adjustment parameters in the configuration file to obtain the adjustment result.

[0055] Optionally, when the parameter configuration module receives adjustment instructions sent by the target application via API, it can parse these instructions, identify the various adjustment parameters and their corresponding configuration format requirements, and thus determine the target configuration file format. For example, configuration files in formats such as Extensible Markup Language (XML) or JavaScript Object Notation (JSON) can be used to correctly read and modify configuration information later. It should be noted that the above configuration file format is only an example and no specific limitations are imposed here.

[0056] Optionally, the parameter configuration module can read the original configuration information from the configuration file and modify it according to the parameters in the adjustment instructions. Furthermore, the parameter configuration module can handle dependencies between configuration items, ensuring that all related configuration items are updated correctly. After adjusting the configuration information, the parameter configuration module can generate the adjustment result, such as a status code or message, to indicate whether the adjustment was successful. If any problems are encountered during the adjustment process, such as incorrect configuration file format or parameters exceeding the range, the parameter configuration module can generate corresponding error messages to facilitate error handling by the target application or to provide user feedback.

[0057] As an optional embodiment, the method further includes: generating an encryption strategy for the request information received by the client to be encrypted at a future time based on the adjusted configuration information; step S104, in response to receiving the request information, encrypting the request information using the encryption strategy corresponding to the adjusted configuration information to obtain an encryption result, including: in response to the parameter configuration module completing the adjustment of the configuration information and receiving the request information, calling the encryption strategy through the application programming interface to encrypt the request information to obtain an encryption result.

[0058] In this embodiment, based on the adjusted configuration information, an encryption strategy is generated for request information received by the client in the future. This ensures that the client can handle future information encryption needs according to the latest security requirements and configuration parameters. To encrypt the received request information using the encryption strategy corresponding to the adjusted configuration information, the encryption strategy can be invoked through the application programming interface after the configuration information has been adjusted in the parameter configuration module and the request information has been received.

[0059] Optionally, by invoking the encryption policy through the application programming interface (API), the client to be encrypted can seamlessly communicate with the parameter configuration module, applying the latest encryption policy in real time to encrypt the requested information. This dynamic configuration and real-time encryption mechanism improves the security and flexibility of information processing, while also simplifying client development and maintenance, making the encryption process more efficient and easier to manage.

[0060] As an optional embodiment, the graphical user interface of the target application in the client includes at least one configuration template control, which corresponds to a configuration template. The method further includes: triggering an adjustment instruction in response to a click operation performed on the configuration template control; and in response to the adjustment instruction triggered on the target application, calling the configuration information in the key toolkit associated with the target application, including: parsing the adjustment parameters in the configuration template and adjusting the configuration information using the parsed adjustment parameters.

[0061] In this embodiment, to simplify the configuration process of the target application in the client and improve user-friendliness and configuration efficiency, the client's graphical user interface can be designed to include at least one configuration template control, which corresponds to a configuration template. Clicking the configuration template control can trigger an adjustment command; adjustment commands triggered on the target application can call configuration information from the key toolkit associated with the target application; adjustment parameters in the configuration template can be parsed, and the parsed adjustment parameters can be used to adjust the configuration information. When a user clicks the configuration template control on the graphical user interface, an adjustment command can be triggered, loading and applying the selected configuration template to adjust the current configuration information to meet new encrypted communication requirements.

[0062] Optionally, configuration templates can be provided through standardized configuration methods, covering most common scenarios. Users can directly select a suitable configuration template for configuration, and can also customize it, for example, by adjusting the configuration parameters according to specific needs, achieving a combination of standardization and personalization.

[0063] As an optional embodiment, the graphical user interface of the target application in the client includes a documentation control, and the method further includes: triggering a viewing instruction in response to a click operation performed on the documentation control; and displaying functional documentation of each functional module of the key toolkit based on the viewing instruction.

[0064] In this embodiment, the graphical user interface of the target application in the client may include a documentation control, allowing users to quickly access the documentation of the key toolkit without leaving the application or searching for external documents. A click on the documentation control triggers a viewing instruction, which instructs the application to load and display the documentation related to the key toolkit. Based on the viewing instruction, functional documentation for each module of the key toolkit can be displayed.

[0065] Optionally, detailed documentation can be provided for each functional module, including input / output parameters, exception handling mechanisms, and other relevant information, enabling users to better understand and use the services offered. The documentation can also include extensive sample code and practical suggestions to further lower the barrier to entry for users.

[0066] Optionally, the document description can be displayed via a pop-up window, a new tab, or directly in the current interface. The document format can be Hypertext Markup Language (HTML), Portable Document Format (PDF), etc.

[0067] It should be noted that the display methods and document formats described above are merely illustrative examples and are not intended to impose specific limitations. Any display method and document format that can ensure users can read and understand the document content intuitively is within the protection scope of this invention.

[0068] As an optional embodiment, the functional module includes an exception management module, which includes at least one of the following: a configuration exception submodule, a request exception submodule, and an unloaded implementation package exception submodule. The method further includes: in response to a first exception state during the process of adjusting configuration information, processing the first exception state using the configuration exception submodule to ensure successful adjustment of the configuration information; and / or, in response to a second exception state during the process of encrypting request information, processing the second exception state using the request exception submodule to ensure successful encryption of the request information; and / or, in response to a third exception state during the process of calling a key toolkit, processing the third exception state using the unloaded implementation package exception submodule to successfully call the key toolkit.

[0069] In this embodiment, to enhance the stability of information processing and the ability to handle anomalies, an anomaly management module can be designed within the functional modules to monitor and handle possible anomalies during configuration information adjustment, request information encryption, and key toolkit invocation. The anomaly management module may include at least one of the following sub-modules: a configuration anomaly sub-module, a request anomaly sub-module, and an unloaded implementation package anomaly sub-module. When the process of adjusting configuration information is in a first anomaly state, the configuration anomaly sub-module can be used to handle the first anomaly state to ensure successful configuration information adjustment; and / or, when the process of encrypting request information is in a second anomaly state, the request anomaly sub-module can be used to handle the second anomaly state to ensure successful encryption of the request information; and / or, when the process of invoking the key toolkit is in a third anomaly state, the unloaded implementation package anomaly sub-module can be used to handle the third anomaly state to successfully invoke the key toolkit.

[0070] Optionally, the configuration exception submodule can be triggered when configuration parameters are incorrect, to handle configuration-related exceptions. The request exception submodule can be triggered when errors occur during the request process, such as network failures or incorrect request formats. The unloaded implementation package exception submodule can be triggered when attempting to use an unloaded or non-existent implementation package, preventing runtime errors. The exception management module may also include a client implementation package conflict exception submodule, which can be triggered when multiple client implementation packages are loaded simultaneously, causing conflicts, to ensure stable operation of information processing.

[0071] Optionally, by integrating the aforementioned sub-modules into the exception management module, various anomalies that may be encountered during configuration information adjustments, request information encryption, and key toolkit invocation can be intelligently identified and handled. When an anomaly occurs, a timely response can be provided, clear error messages can be given, and attempts can be made to automatically repair the abnormal state or guide the user to perform manual repair, thereby ensuring the smooth operation of the encrypted communication process. This anomaly handling mechanism is crucial for ensuring the security and stability of encrypted communication, especially for application scenarios with extremely high data security requirements.

[0072] In this embodiment of the invention, if a user needs to adjust the configuration information in the key toolkit to process subsequent request information using the encryption and decryption strategies corresponding to the adjusted configuration information, it can detect whether an adjustment instruction to adjust the above strategies has been triggered on the target application. If an adjustment instruction is detected, the configuration information in the key toolkit associated with the target application can be called, and the configuration information can be adjusted based on the adjustment instruction. When the client receives the request information, it can use the encryption strategy corresponding to the adjusted configuration information to encrypt the request information, obtain the encryption result, and send the encryption result to the server corresponding to the client. Based on the response information returned by the server corresponding to the encryption result, the response information can be decrypted using the decryption strategy corresponding to the adjusted configuration information to obtain the decryption result. In this embodiment, through the adjustment instruction on the target application, the configuration information in the key toolkit can be called, and the encryption and decryption strategies can be dynamically adjusted between the client and the server based on the adjustment instruction. This overcomes the limitations of static configuration in related technologies, as well as the problem of not being able to flexibly select and change encryption and decryption strategies according to real-time scenarios or user needs, thereby achieving the technical effect of improving the flexibility of information processing and solving the technical problem of poor flexibility in information processing.

[0073] Example 2

[0074] The following describes in detail another optional implementation method.

[0075] Currently, the security requirements for data transmission are extremely high. As a cryptographic algorithm with independent intellectual property rights in my country, the national cryptographic algorithm is widely used in encrypted data communication. In practical applications, using different Chinese-language HTTP communication clients for national cryptographic encrypted communication presents challenges such as inconsistent national cryptographic algorithm software development kits (SDKs), complex and error-prone configuration processes, and high coupling between third-party components and application code. Specifically, the lack of a unified national cryptographic toolkit leads to differences in the national cryptographic algorithms and protocols used by different members of the same development team, increasing the difficulty of development and maintenance. Existing national cryptographic encrypted communication configurations typically require manually setting complex parameters, which is prone to errors and has a high learning curve, increasing the burden on developers. To implement national cryptographic encryption functions, different third-party libraries are often introduced, which not only increases complexity but may also lead to security vulnerabilities.

[0076] In related technologies, the implementation of national cryptographic encryption communication suffers from several challenges: Inconsistent national cryptographic toolkits exist, with different HTTP communication clients using different toolkits, leading to differences in national cryptographic algorithms and protocols between clients, increasing development and maintenance difficulty. The lack of a unified configuration standard forces developers to configure and debug separately for different clients, increasing workload and the probability of errors. The configuration process is complex and error-prone: Existing national cryptographic encryption communication configurations typically require manually setting complex parameters, making the process cumbersome and prone to errors. Developers need high levels of expertise to correctly configure and use the national cryptographic toolkit, increasing the learning and usage threshold. Configuration errors can lead to security vulnerabilities, affecting overall security. High coupling between third-party components and application code: To implement national cryptographic encryption functionality, different development teams may introduce multiple third-party libraries, increasing complexity and potentially leading to security vulnerabilities. The updates and maintenance of third-party libraries rely on external vendors, and compatibility issues or security vulnerabilities may not be resolved promptly. The highly coupled code structure makes modular management and maintenance difficult, increasing maintenance costs. The lack of standardized configuration methods: Existing solutions lack a unified configuration standard, resulting in varying configuration methods across different projects, increasing the difficulty of cross-project collaboration. The lack of standardized configuration methods makes it difficult for developers to quickly get started and migrate, impacting development efficiency. Insufficient scalability and flexibility: Existing solutions are typically based on specific encryption toolkits or communication clients, lacking support for extensions and replacements, limiting their application scenarios. The lack of flexible configuration options makes it difficult for developers to customize configurations according to specific needs, affecting adaptability and flexibility. These problems not only increase the difficulty of development and maintenance but also affect security and reliability.

[0077] This invention proposes a unified implementation method for HTTP communication clients based on Chinese national cryptographic algorithms (CNCA), enabling more efficient and convenient implementation of CNCA-encrypted communication while reducing configuration complexity and enhancing configuration standardization and security. By providing a unified CNCA HTTP communication toolkit, it addresses the inconsistency caused by different HTTP communication clients using different CNCA toolkits. A standardized CNCA toolkit paired with the communication client ensures consistency in CNCA algorithms and protocols across clients, reducing development and maintenance difficulty. The simplified configuration process addresses the complexity and error-prone nature of existing technologies by providing simple and unified encryption configuration and communication interfaces, reducing the complexity and error probability of manual configuration and improving development efficiency. The reduced coupling between third-party components and application code addresses the high coupling issue in existing technologies by encapsulating and decoupling, reducing complexity and improving security and maintainability. Enhanced configuration standardization and security by providing standardized configuration methods ensures the standardization of the configuration process, reducing security vulnerabilities caused by configuration errors and improving overall security. Improved scalability and flexibility by providing flexible configuration options and supporting highly customizable configurations to meet the needs of different scenarios, enhancing adaptability and flexibility. It supports multiple HTTP communication clients, ensuring cross-platform compatibility and expanding application scope. By simplifying the configuration process, reducing coupling, enhancing configuration standardization and security, and improving scalability and flexibility, it enables more efficient, convenient, and accurate implementation of national cryptographic encryption communication. This achieves the technical effect of improving the flexibility of information processing and solves the technical problem of poor information processing flexibility.

[0078] The method will be further described below.

[0079] Figure 2 This is a schematic diagram of an apparatus for a unified implementation of a Hypertext Transfer Protocol (HTTP) communication client program based on a national cryptographic algorithm, according to an embodiment of the present invention. Figure 2 As shown, it includes: parameter configuration module 201, enumeration management module 202, encrypted communication tool core module 203, communication client model definition module 204, request and response model definition module 205, exception management module 206, third-party dependency module one 207, extension package management module 208, communication client management module 209, request and response management module 210, and third-party dependency module two 211.

[0080] The parameter configuration module 201 stores and manages configuration parameters required for encrypted communication. These parameters may include, but are not limited to, encryption algorithm type, key length, padding method, and certificate information. The parameter configuration module 201 provides a configuration interface, allowing users to adjust these parameters as needed to generate encryption and decryption strategies. The parameter configuration module 201 may include an encryption configuration model 2011, a default encryption configuration component 2012, and a certificate hostname verification configuration component 2013. The encryption configuration model 2011 manages encryption strategies, including configuration information such as encryption algorithm, key length, and padding method. The default encryption configuration component 2012 provides a configuration interface, allowing users to adjust configuration parameters as needed. The certificate hostname verification configuration component 2013 is used to configure the certificate verification mechanism, ensuring the server's certificate is valid and improving communication security.

[0081] The enumeration management module 202 can be used to define and manage various enumeration types that may be used in encrypted communication, such as encryption algorithm types, padding methods, and exception types. It provides a unified enumeration type definition for other modules, ensuring data consistency and type security. The enumeration management module 202 can include key manager algorithm type 2021, Secure Sockets Layer (SSL) protocol type 2022, and keystore type 2023. Key manager algorithm type 2021 can define the available key management algorithm types, ensuring the standardization and consistency of algorithm selection. SSL protocol type 2022 can list the supported SSL / TLS protocol versions, providing a basis for selecting the appropriate security protocol. Keystore type 2023 can enumerate keystore types, supporting different types of key storage.

[0082] The core module 203 of the encrypted communication tool is the engine that implements encryption and decryption functions. Based on the encryption and decryption strategies provided by the parameter configuration module, it provides encryption and decryption services, ensuring the security and efficiency of encrypted communication. The core module 203 may include an extension package loader model 2031, an extension package scanner 2032, and a control core 2033. The extension package loader model 2031 can dynamically load and manage encrypted extension packages, supporting encryption algorithms and protocols in different scenarios. The extension package scanner 2032 can scan available extension packages in the system or a specified path, automatically discovering and loading new national cryptographic algorithm implementations. The control core 2033 serves as the core of the encrypted communication tool, coordinating the work of various modules and ensuring the correct execution of the encryption and decryption process.

[0083] The communication client model definition module 204 defines a general model for communication clients, providing interfaces and classes for abstracting and encapsulating HTTP communication clients. This allows other modules to interact with different HTTP clients without needing to know the implementation details of the specific clients. The communication client model definition module 204 may include a communication client factory model 2041 and a general communication client model 2042. The communication client factory model 2041 can create and initialize communication clients, supporting unified management of multiple HTTP clients. The general communication client model 2042 provides an abstract communication client interface, allowing core modules to interact with different clients without needing to know the specific implementation details of the clients.

[0084] The request and response model definition module 205 defines a general model for requests and responses, describing the data structure and behavior of HTTP requests and responses. It can include key parts such as request headers, request bodies, response status codes, and response bodies, ensuring the consistency and standardization of request and response data in encrypted communication. The request and response model definition module 205 can include a general request model 2051 and a general response model 2052. The general request model 2051 defines the basic structure of an HTTP request, including the request method, Uniform Resource Locator (URL), request headers, and request body, providing a foundation for encrypted requests. The general response model 2052 defines the structure of an HTTP response, including response status codes, response headers, and response bodies, facilitating the decryption of response data.

[0085] The exception management module 206 can handle various abnormal situations that may occur during encrypted communication, such as key generation failure, encryption / decryption operation errors, and network communication errors. It defines exception types and handling procedures, improving the system's robustness and error recovery capabilities. The exception management module 206 can include configuration exceptions 2061, client implementation package conflict exceptions 2062, request exceptions 2063, and unloaded implementation package exceptions 2064. Configuration exception 2061 can be triggered when configuration parameters are incorrect, handling configuration-related exceptions. Client implementation package conflict exception 2062 can be triggered when multiple client implementation packages are loaded simultaneously, causing conflicts, ensuring stable device operation. Request exception 2063 can be triggered when errors occur during the request process, such as network failures or incorrect request formats. Unloaded implementation package exception 2064 can be triggered when attempting to use an unloaded or non-existent implementation package, preventing runtime errors.

[0086] Third-party dependency module 207 can contain external libraries and tools needed to implement encrypted communication, such as Java Cryptography Extension (JCE) and Java Secure Socket Extension (JSSE) implementations of Chinese national cryptographic algorithms, providing underlying support for encrypted communication functions. It can include JCE 2071 and JSSE 2072. JCE 2071 provides a JCE implementation of Chinese national cryptographic algorithms, supporting encryption and decryption operations. JSSE 2072 provides an SSL / TLS protocol implementation based on Chinese national cryptographic algorithms, enhancing communication security.

[0087] The extension package management module 208 provides the ability to dynamically load and unload extension packages, enhancing the device's scalability and flexibility. It may include an extension package loader 2081, which can load and manage potentially needed extension packages, providing users with more encryption algorithm choices and enhancing flexibility and scalability.

[0088] The communication client management module 209 manages multiple instances of HTTP communication clients, creating and destroying client instances through a communication client factory model. It provides a unified client management interface, enabling the core module of the encrypted communication tool to interact with different clients without directly depending on the specific implementation of the client. The communication client management module 209 may include a communication client factory 2091 and a communication client wrapper 2092. The communication client factory 2091 is used to create and manage instances of communication clients, supporting the simultaneous operation of multiple clients. The communication client wrapper 2092 provides a layer of encapsulation for communication clients, isolating the specific implementation details of the clients, allowing the core module to interact with them in a unified manner.

[0089] The request and response management module 210 can handle the entire lifecycle of requests and responses, including request construction and sending, and response reception and parsing. It uses request wrappers and response wrappers to encapsulate the raw data, ensuring data integrity and consistency during encryption and decryption. The request and response management module 210 may include a request wrapper 2101 and a response wrapper 2102. The request wrapper 2101 encapsulates HTTP requests, facilitating the use and management of encryption tools. The response wrapper 2102 encapsulates HTTP responses, facilitating the use and management of decryption tools and ensuring secure data transmission.

[0090] Third-party dependency module 211 is used for integration. The native communication client 2111 is an HTTP client that does not rely on specific national cryptographic algorithms and directly uses the SSL / TLS support provided by the operating system or programming language environment to establish secure connections, offering good performance and compatibility.

[0091] In this embodiment of the invention, the device for unified implementation of HTTP communication client programs based on national cryptographic algorithms achieves a unified and secure implementation of HTTP communication client programs based on national cryptographic algorithms through a modular design. This is achieved through a core package of encrypted communication tools consisting of a parameter configuration module 201, an enumeration management module 202, an encrypted communication tool core module 203, a communication client model definition module 204, a request and response model definition module 205, an exception management module 206, and a third-party dependency module 207; and an extended package of encrypted communication tools consisting of an extension package management module 208, a communication client management module 209, a request and response management module 210, and a third-party dependency module 211. The modules interact through clear interfaces, reducing complexity and improving security, flexibility, and maintainability. This design not only supports multiple HTTP communication clients but also allows for rapid adaptation to new national cryptographic algorithms and protocols, providing strong technical support for industries with high data security requirements, such as finance. This achieves the technical effect of improving the flexibility of information processing and solves the technical problem of poor information processing flexibility.

[0092] Example 3

[0093] This invention provides an information processing apparatus. It should be noted that the information processing apparatus of this invention can be used to perform... Figure 1 The present invention provides an information processing method according to embodiments thereof. The following describes the information processing apparatus provided in the embodiments of the present invention.

[0094] Figure 3 This is a schematic diagram of the structure of an information processing device according to an embodiment of the present invention, such as... Figure 3 As shown, the information processing device 300 may include: an adjustment unit 302, an encryption unit 304, and a decryption unit 306.

[0095] The adjustment unit 302 is used to respond to an adjustment instruction triggered on the target application on the client, call the configuration information in the key toolkit associated with the target application, and adjust the configuration information based on the adjustment instruction, wherein the key toolkit includes at least an encryption policy and a decryption policy.

[0096] The encryption unit 304 is used to respond to the received request information by encrypting the request information using the encryption strategy corresponding to the adjusted configuration information, obtaining the encryption result, and sending the encryption result to the server corresponding to the client. The encryption strategy is used to represent the rules for encrypting the request information.

[0097] The decryption unit 306 is used to respond to the response information returned by the server corresponding to the encryption result, and to decrypt the response information using the decryption strategy corresponding to the adjusted configuration information to obtain the decryption result. The decryption strategy is used to represent the rules for decrypting the response information.

[0098] The information processing apparatus provided in this embodiment of the invention, through adjustment unit 302 responding to an adjustment instruction triggered on a target application on a client, calls configuration information in a key toolkit associated with the target application and adjusts the configuration information based on the adjustment instruction, wherein the key toolkit includes at least an encryption strategy and a decryption strategy; through encryption unit 304 responding to received request information, encrypts the request information using the encryption strategy corresponding to the adjusted configuration information, obtains an encryption result, and sends the encryption result to the server corresponding to the client, wherein the encryption strategy represents the rules for encrypting the request information; through decryption unit 306 responding to the response information returned by the server corresponding to the encryption result, decrypts the response information using the decryption strategy corresponding to the adjusted configuration information, obtains a decryption result, wherein the decryption strategy represents the rules for decrypting the response information. This achieves the technical effect of improving the flexibility of information processing and solves the technical problem of poor information processing flexibility.

[0099] The aforementioned information processing device may further include a processor and a memory. The aforementioned units are all stored in the memory as program units, and the processor executes the aforementioned program units stored in the memory to realize the corresponding functions.

[0100] The aforementioned processor contains a kernel, which retrieves the corresponding program units from memory. One or more kernels can be configured, and by adjusting kernel parameters, graceful shutdown of devices of the same type awaiting shutdown can be controlled.

[0101] The aforementioned memory may include non-permanent memory in computer-readable media, such as random access memory (RAM) and / or non-volatile memory, such as read-only memory (ROM) or flash RAM, and the memory includes at least one memory chip.

[0102] The processor contains a kernel, which retrieves the corresponding program units from memory. One or more kernels can be configured, and adjusting kernel parameters can improve the efficiency of traders.

[0103] The memory may include non-permanent memory in computer-readable media, such as random access memory (RAM) and / or non-volatile memory, such as read-only memory (ROM) or flash RAM, and the memory includes at least one memory chip.

[0104] Example 4

[0105] According to embodiments of the present invention, an information processing system is also provided. Figure 4 This is a schematic diagram of the structure of an information processing system according to an embodiment of the present invention, such as... Figure 4 As shown, the information processing system 400 includes a client 402 and a server 404.

[0106] Client 402 is configured to respond to an adjustment instruction triggered on the target application on the client, invoke configuration information in the key toolkit associated with the target application, and adjust the configuration information based on the adjustment instruction, wherein the key toolkit includes at least an encryption policy and a decryption policy; in response to receiving a request message, encrypt the request message using the encryption policy corresponding to the adjusted configuration information, obtain an encryption result, and send the encryption result to the server corresponding to the client, wherein the encryption policy is used to represent the rules for encrypting the request message; in response to the response message returned by the server corresponding to the encryption result, decrypt the response message using the decryption policy corresponding to the adjusted configuration information, obtain a decryption result, wherein the decryption policy is used to represent the rules for decrypting the response message.

[0107] A 404 error is a server response used to indicate that an encryption result has been received and to return the corresponding response information to the client.

[0108] The information processing system provided in this embodiment of the invention, through client 402 responding to an adjustment command triggered on the target application of the client, calls the configuration information in the key toolkit associated with the target application, and adjusts the configuration information based on the adjustment command. The key toolkit includes at least an encryption strategy and a decryption strategy. In response to receiving a request message, the system encrypts the request message using the encryption strategy corresponding to the adjusted configuration information, obtains an encryption result, and sends the encryption result to the server corresponding to the client. The encryption strategy represents the rules for encrypting the request message. In response to the response message returned by the server corresponding to the encryption result, the system decrypts the response message using the decryption strategy corresponding to the adjusted configuration information, obtains a decryption result. The decryption strategy represents the rules for decrypting the response message. Through server 404 responding to receiving the encryption result, the system returns the corresponding response message to the client. This achieves the technical effect of improving the flexibility of information processing and solves the technical problem of poor information processing flexibility.

[0109] Example 5

[0110] According to an embodiment of the present invention, a computer-readable storage medium is also provided, on which a program is stored, which, when executed by a processor, implements a method for processing information.

[0111] Example 6

[0112] According to an embodiment of the present invention, a processor is also provided, which is used to run a program, wherein the program executes a method for processing information during runtime.

[0113] Example 7

[0114] Figure 5 This is a schematic diagram of an electronic device for an information processing method according to an embodiment of the present invention, as shown below. Figure 5 As shown in the embodiment of the present invention, an electronic device 500 is also provided. The device includes a processor 501, a memory 502, and a program stored in the memory and executable on the processor 501. The processor 501 executes the steps described above in the embodiment of the present invention.

[0115] Example 7

[0116] Embodiments of this application also provide a computer program product. Optionally, in this embodiment, the computer program product may include a computer program that, when executed by a processor, implements the information processing method described in the embodiments of this application.

[0117] The devices mentioned in this article can be servers, PCs, tablets, mobile phones, etc.

[0118] The present invention also provides a computer program product, which, when executed on a data processing device, is adapted to the above-described steps in the embodiments of the present invention.

[0119] Those skilled in the art will understand that embodiments of this application can be provided as methods, systems, or computer program products. Therefore, this application can take the form of a completely hardware embodiment, a completely software embodiment, or an embodiment combining software and hardware aspects. Furthermore, this application can take the form of a computer program product embodied on one or more computer-usable storage media (including, but not limited to, disk storage, CD-ROM, optical storage, etc.) containing computer-usable program code.

[0120] This application is described with reference to flowchart illustrations and / or block diagrams of methods, apparatus (systems), and computer program products according to embodiments of this application. It will be understood that each block of the flowchart illustrations and / or block diagrams, and combinations of blocks in the flowchart illustrations and / or block diagrams, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, special-purpose computer, embedded processor, or other programmable data processing apparatus to produce a machine, such that the instructions, which execute via the processor of the computer or other programmable data processing apparatus, generate instructions for implementing the flowchart... Figure 1 One or more processes and / or boxes Figure 1 A device that provides the functions specified in one or more boxes.

[0121] These computer program instructions may also be stored in a computer-readable storage medium that can direct a computer or other programmable data processing device to function in a particular manner, such that the instructions stored in the computer-readable storage medium produce an article of manufacture including instruction means, which are implemented in a process Figure 1 One or more processes and / or boxes Figure 1 The function specified in one or more boxes.

[0122] These computer program instructions may also be loaded onto a computer or other programmable data processing equipment to cause a series of operational steps to be performed on the computer or other programmable equipment to produce a computer-implemented process, thereby providing instructions that execute on the computer or other programmable equipment for implementing the process. Figure 1 One or more processes and / or boxes Figure 1 The steps of the function specified in one or more boxes.

[0123] In a typical configuration, a computing device includes one or more processors (CPU), input / output interfaces, network interfaces, and memory.

[0124] Memory may include non-persistent memory in computer-readable media, such as random access memory (RAM) and / or non-volatile memory, such as read-only memory (ROM) or flash RAM. Memory is an example of computer-readable media.

[0125] Computer-readable media includes both permanent and non-permanent, removable and non-removable media that can store information using any method or technology. Information can be computer-readable instructions, data structures, modules of programs, or other data. Examples of computer storage media include, but are not limited to, phase-change memory (PRAM), static random access memory (SRAM), dynamic random access memory (DRAM), other types of random access memory (RAM), read-only memory (ROM), electrically erasable programmable read-only memory (EEPROM), flash memory or other memory technologies, CD-ROM, digital versatile optical disc (DVD) or other optical storage, magnetic tape, magnetic disk storage or other magnetic storage devices, or any other non-transferable medium that can be used to store information accessible by a computing device. As defined herein, computer-readable media does not include transient computer-readable media, such as modulated data signals and carrier waves.

[0126] It should also be noted that the terms "comprising," "including," or any other variations thereof are intended to cover non-exclusive inclusion, such that a process, method, article, or apparatus that comprises a list of elements includes not only those elements but also other elements not expressly listed, or elements inherent to such process, method, article, or apparatus. Unless otherwise specified, an element defined by the phrase "comprising one..." does not exclude the presence of other identical elements in the process, method, article, or apparatus that includes that element.

[0127] Those skilled in the art will understand that embodiments of this application can be provided as methods, systems, or computer program products. Therefore, this application can take the form of a completely hardware embodiment, a completely software embodiment, or an embodiment combining software and hardware aspects. Furthermore, this application can take the form of a computer program product embodied on one or more computer-usable storage media (including, but not limited to, disk storage, CD-ROM, optical storage, etc.) containing computer-usable program code.

[0128] The above are merely embodiments of this application and are not intended to limit the scope of this application. Various modifications and variations can be made to this application by those skilled in the art. Any modifications, equivalent substitutions, improvements, etc., made within the spirit and principles of this application should be included within the scope of the claims of this application.

Claims

1. An information processing method, characterized in that, Applied to a client on which the target application is deployed, the method further includes: In response to an adjustment command triggered on the target application, the configuration information in the key toolkit associated with the target application is invoked, and the configuration information is adjusted based on the adjustment command. The key toolkit includes at least an encryption strategy and a decryption strategy, and the key toolkit is a national cryptographic toolkit or an encrypted communication toolkit. In response to receiving a request message, the request message is encrypted using the encryption strategy corresponding to the adjusted configuration information to obtain an encryption result, and the encryption result is sent to the server corresponding to the client. The encryption strategy is used to represent the rules for encrypting the request message. In response to the response information returned by the server corresponding to the encryption result, the response information is decrypted using the decryption strategy corresponding to the adjusted configuration information to obtain a decryption result, wherein the decryption strategy is used to represent the rules for decrypting the response information; The target application and the key toolkit are connected via an application programming interface (API). The key toolkit includes a parameter configuration module. In response to an adjustment command triggered on the target application, the module calls configuration information from the key toolkit associated with the target application and adjusts the configuration information based on the adjustment command. This includes: in response to the adjustment command triggered on the target application, calling the configuration information from the key toolkit via the API and passing the configuration information to the parameter configuration module. The parameter configuration module stores and manages configuration parameters required for encrypted communication, including at least encryption algorithm type, key length, padding method, and certificate information. In response to the configuration information being passed to the parameter configuration module, the module parses the adjustment command and modifies the configuration information according to the parsed command. In response to the configuration information being adjusted, the parameter configuration module returns an adjustment result, indicating whether the configuration information adjustment is complete. The method further includes: in response to the successful adjustment of the configuration information, using the target application to perform encrypted communication through the adjusted configuration information; in response to the failure of the configuration information adjustment, outputting error information, wherein the error information is at least used to locate and correct security risk issues and code coupling issues.

2. The processing method according to claim 1, characterized in that, According to the adjustment instruction, the parameter configuration module adjusts the called configuration information to obtain the adjustment result, including: The parameter configuration module parses the adjustment command and determines the configuration file in the target configuration format; Based on the adjustment parameters in the configuration file, the configuration information is adjusted to obtain the adjustment result.

3. The processing method according to claim 2, characterized in that, The method further includes: Based on the adjusted configuration information, an encryption strategy is generated to encrypt the request information received by the client at a future time. In response to receiving the request information, the request information is encrypted using the encryption strategy corresponding to the adjusted configuration information to obtain an encryption result, including: In response to the parameter configuration module completing the adjustment of the configuration information and receiving the request information, the encryption strategy is invoked through the application programming interface to encrypt the request information and obtain the encryption result.

4. The processing method according to claim 1, characterized in that, The graphical user interface of the target application in the client includes at least one configuration template control, the configuration template control corresponding to a configuration template, and the method further includes: The adjustment instruction is triggered in response to a click operation performed on the configuration template control; In response to an adjustment command triggered on the target application, the configuration information in the key toolkit associated with the target application is invoked, including: The adjustment parameters in the configuration template are parsed, and the configuration information is adjusted using the parsed adjustment parameters.

5. The processing method according to claim 1, characterized in that, The graphical user interface of the target application in the client includes documentation controls, and the method further includes: A viewing command is triggered in response to a click operation performed on the document description control; Based on the viewing command, the functional documentation of each functional module of the key toolkit is displayed.

6. The processing method according to claim 1, characterized in that, The functional module includes an exception management module, which includes at least one of the following: a configuration exception submodule, a request exception submodule, and an unloaded implementation package exception submodule. The method further includes: In response to the configuration information adjustment process being in a first abnormal state, the configuration abnormality submodule is used to handle the first abnormal state so that the configuration information adjustment is successful; and / or, In response to the encryption process of the request information being in a second abnormal state, the request abnormality submodule is used to process the second abnormal state so that the request information is successfully encrypted; and / or, In response to the third exception state occurring during the invocation of the key toolkit, the third exception state is handled using the unloaded implementation package exception submodule to successfully invoke the key toolkit.

7. An information processing apparatus, characterized in that, include: An adjustment unit is configured to respond to an adjustment command triggered on a target application on a client, call the configuration information in the key toolkit associated with the target application, and adjust the configuration information based on the adjustment command. The key toolkit includes at least an encryption strategy and a decryption strategy, and the key toolkit is a national cryptographic toolkit or an encrypted communication toolkit. An encryption unit is configured to, in response to receiving request information, encrypt the request information using the encryption strategy corresponding to the adjusted configuration information, obtain an encryption result, and send the encryption result to the server corresponding to the client, wherein the encryption strategy is used to represent the rules for encrypting the request information; A decryption unit is configured to respond to the response information returned by the server corresponding to the encryption result, and decrypt the response information using the decryption strategy corresponding to the adjusted configuration information to obtain a decryption result, wherein the decryption strategy is used to represent the rules for decrypting the response information; The target application and the key toolkit are connected via an application programming interface (API). The key toolkit includes a parameter configuration module. The adjustment unit is further configured to perform the following steps: in response to an adjustment command triggered on the target application, the configuration information in the key toolkit is invoked through the API, and the configuration information is transmitted to the parameter configuration module. The parameter configuration module stores and manages configuration parameters required for encrypted communication, and the configuration parameters include at least encryption algorithm type, key length, padding method, and certificate information. In response to the configuration information being transmitted to the parameter configuration module, the parameter configuration module parses the adjustment command and modifies the configuration information according to the parsed adjustment command. In response to the configuration information being adjusted, the parameter configuration module returns an adjustment result, whereby the adjustment result indicates whether the configuration information has been adjusted successfully. The device is further configured to perform the following steps: in response to the successful adjustment of the configuration information, to use the target application to perform encrypted communication through the adjusted configuration information; in response to the failure of the configuration information adjustment, to output error information, wherein the error information is used at least to locate and correct security risk issues and code coupling issues.

8. An information processing system, characterized in that, include: A client, in response to an adjustment command triggered on a target application on the client, invokes configuration information in a key toolkit associated with the target application and adjusts the configuration information based on the adjustment command. The key toolkit includes at least an encryption strategy and a decryption strategy, and is either a national cryptographic toolkit or an encrypted communication toolkit. In response to receiving a request message, the client encrypts the request message using the encryption strategy corresponding to the adjusted configuration information to obtain an encryption result, and sends the encryption result to the server corresponding to the client. The encryption strategy represents the rules for encrypting the request message, and the encryption result is encapsulated in a Hypertext Transfer Protocol (HTTP) request header or a HTTP request body. The HTTP request body carries the request message, and the HTTP request header carries additional information about the request message. In response to a response message returned by the server corresponding to the encryption result, the client decrypts the response message using the decryption strategy corresponding to the adjusted configuration information to obtain a decryption result. The decryption strategy represents the rules for decrypting the response message. The server is configured to return the response information corresponding to the encryption result to the client in response to receiving the encryption result; The target application and the key toolkit are connected via an application programming interface (API). The key toolkit includes a parameter configuration module. The client is further configured to perform the following steps: In response to an adjustment command triggered on the target application, the client calls the configuration information in the key toolkit through the API and transmits the configuration information to the parameter configuration module. The parameter configuration module stores and manages configuration parameters required for encrypted communication, including at least encryption algorithm type, key length, padding method, and certificate information. In response to the configuration information being transmitted to the parameter configuration module, the parameter configuration module parses the adjustment command and modifies the configuration information according to the parsed command. In response to the configuration information being adjusted, the parameter configuration module returns an adjustment result, indicating whether the configuration information has been adjusted successfully. The client is also configured to perform the following steps: in response to the successful adjustment of the configuration information, to use the target application to perform encrypted communication through the adjusted configuration information; in response to the failure of the configuration information adjustment, to output error information, wherein the error information is used at least to locate and correct security risk issues and code coupling issues.

9. A computer-readable storage medium, characterized in that, The computer-readable storage medium includes a stored program, wherein, when the program is executed, it controls the device containing the computer-readable storage medium to perform the information processing method according to any one of claims 1 to 6.

Images