Safe data downloading method and device, computer equipment and storage medium

Abstract

The invention relates to a safe data downloading method and device, computer equipment and a storage medium. Comprising the following steps: acquiring session login information of a target user and a device identifier of a client, and generating authentication information; based on the preset encrypted communication link, a data downloading request message is sent to a service provider, and the data downloading request message comprises authentication information; receiving a response message of the data downloading request message returned by the service provider; executing an identity verification operation on the service provider according to the response message; and if the result of the identity verification operation is passing, downloading target data from the service provider. Visibly, a two-way identity verification mechanism is constructed, on one hand, the session login information and the device identifier are combined, and identity verification of the client side is completed; and on the other hand, identity verification on the service provider side is realized by carrying out identity verification on the response message. The mechanism solves the problem of security vulnerabilities existing in a one-way identity verification mode, and the security risk of data leakage is practically avoided.

Description

Technical Field

[0001] This application relates to the field of mobile application data distribution and secure transmission, and in particular to a data security download method, apparatus, computer device and storage medium. Background Technology

[0002] With the development of the digital economy, the internet has been deeply integrated into various core scenarios such as government affairs, finance, healthcare, and enterprise office work. As a key production factor, data is being transferred and acquired more frequently. Users are placing higher demands on the security of their data downloads.

[0003] Currently, traditional secure data download methods primarily employ one-way authentication. Specifically, the user first logs in by entering their account password and verification code, and the server then generates a unique session record for the user. Next, the user sends a data download request to the server, carrying this session record. Finally, the server verifies the session record in the download request; if the verification is successful, the user is allowed to download the data.

[0004] However, one-way authentication methods have significant security vulnerabilities. Session information is essentially a string of transmittable digital identifiers. Once stolen through network interception or phishing attacks, attackers do not need to know the user's original account password; they can simply reuse the credential on any unfamiliar device to bypass server-side verification, leading to data leakage. Summary of the Invention

[0005] This application provides a data security download method, apparatus, computer device, and storage medium, aiming to solve the technical problem that one-way identity verification methods are prone to data leakage.

[0006] In a first aspect, embodiments of this application provide a secure data download method, wherein the method applies a client, which includes: Obtain the target user's session login information and the client's device identifier; Authentication information is generated based on the session login information and the device identifier; Based on a preset encrypted communication link, a data download request message is sent to the service provider. The data download request message is used to request the download of target data and includes the authentication information. Receive a response message from the service provider in response to the data download request message. Perform an authentication operation on the service provider based on the response message; If the authentication operation is successful, the target data is downloaded from the service provider.

[0007] Optionally, the response information includes a target certificate, and the step of performing an authentication operation on the service provider based on the response message includes: Determine whether the domain name information bound in the target certificate is consistent with the domain name information of the service provider; If so, the result of the authentication operation is successful; If not, the authentication operation will fail.

[0008] Optionally, if the authentication operation is successful, downloading the target data from the service provider includes: If the authentication operation is successful, the target data is downloaded from the service provider using a concurrent download method based on a preset concurrent task volume.

[0009] Optionally, before downloading the target data from the service provider using a concurrent download method based on a preset concurrent task volume if the authentication operation is successful, the method further includes: Obtain the network signal quality of the client; The preset concurrent task volume is adjusted according to the network signal quality; If the authentication operation is successful, then based on a preset concurrent task volume, the target data is downloaded from the service provider using a concurrent download method, including: If the authentication operation is successful, the target data is downloaded from the service provider using the concurrent download method based on the adjusted preset concurrent task volume.

[0010] Optionally, obtaining the network signal quality of the client includes: Obtain the mobile network type of the client; The network signal quality is determined based on the mobile network type.

[0011] Optionally, the method for obtaining the network signal quality of the client further includes: Obtain the Wi-Fi signal strength of the client; The network signal quality is determined based on the Wi-Fi signal strength.

[0012] Optionally, after downloading the target data from the service provider if the authentication operation is successful, the method further includes: The target data is encrypted using a preset encryption algorithm; Store the encrypted target data.

[0013] Secondly, embodiments of this application also provide a data security download device, which includes a unit for performing the above-described method.

[0014] Thirdly, embodiments of this application also provide a computer device, which includes a memory and a processor, wherein the memory stores a computer program, and the processor executes the computer program to implement the above-described method.

[0015] Fourthly, embodiments of this application also provide a computer-readable storage medium storing a computer program that, when executed by a processor, can implement the above-described method.

[0016] This application provides a secure data download method, apparatus, computer device, and storage medium. The method applies a client and includes: acquiring a target user's session login information and the client's device identifier; generating authentication information based on the session login information and the device identifier; sending a data download request message to a service provider via a preset encrypted communication link, the data download request message requesting the download of target data, the data download request message including the authentication information; receiving a response message from the service provider regarding the data download request message; performing an authentication operation on the service provider based on the response message; and downloading the target data from the service provider if the authentication operation is successful. Therefore, the technical solution of this application acquires the target user's session login information and the client's device identifier. Then, authentication information is generated based on the session login information and the device identifier. Furthermore, a data download request message is sent to a service provider via a preset encrypted communication link. The data download request message is used to request the download of target data; the data request message includes authentication information. Next, a response message is received from the service provider regarding the data download request message. Finally, an authentication operation is performed on the service provider based on the response message. If the identity verification operation passes, the target data is downloaded from the service provider. Therefore, the technical solution of this application constructs a two-way identity verification mechanism: on the one hand, it combines the target user's session login information and the client's device identifier to complete the client-side identity legitimacy verification; on the other hand, it verifies the identity validity of the service provider by performing identity verification on the response message returned by the service provider. Only when both the client and service provider identity verifications pass can the client download the target data from the service provider. This mechanism effectively solves the security vulnerabilities of one-way identity verification methods, and effectively avoids the security risk of data leakage from the two-way identity access level of data interaction. Attached Figure Description

[0017] The accompanying drawings, which are incorporated in and form part of this specification, illustrate embodiments consistent with this application and, together with the description, serve to explain the principles of this application.

[0018] To more clearly illustrate the technical solutions in the embodiments of this application or the prior art, the drawings used in the description of the embodiments or the prior art will be briefly introduced below. Obviously, for those skilled in the art, other drawings can be obtained based on these drawings without creative effort.

[0019] One or more embodiments are illustrated by way of example with reference numerals in the accompanying drawings. These illustrations do not constitute a limitation on the embodiments. Elements with the same reference numerals in the drawings are denoted as similar elements. Unless otherwise stated, the figures in the drawings are not to be limited by scale.

[0020] Figure 1 A flowchart illustrating a secure data download method provided in this application embodiment; Figure 2 A schematic block diagram of a data security download device provided in an embodiment of this application; Figure 3 A computer device provided in an embodiment of this application. Detailed Implementation

[0021] To make the objectives, technical solutions, and advantages of the embodiments of this application clearer, the technical solutions of the embodiments of this application will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some embodiments of this application, not all embodiments. Based on the embodiments of this application, all other embodiments obtained by those skilled in the art without creative effort are within the scope of protection of this application.

[0022] The following disclosure provides numerous different embodiments or examples for implementing various structures of this application. To simplify the disclosure, specific examples of components and arrangements are described below. These are merely examples and are not intended to limit the scope of this application. Furthermore, reference numerals and / or letters may be repeated in different examples. Such repetition is for simplification and clarity and does not in itself indicate a relationship between the various embodiments and / or arrangements discussed.

[0023] It should be understood that, when used in this specification and the appended claims, the terms "comprising" and "including" indicate the presence of the described features, integrals, steps, operations, elements and / or components, but do not exclude the presence or addition of one or more other features, integrals, steps, operations, elements, components and / or collections thereof.

[0024] It should also be understood that the terminology used in this specification is for the purpose of describing particular embodiments only and is not intended to limit the scope of the application. As used in this specification and the appended claims, the singular forms “a,” “an,” and “the” are intended to include the plural forms unless the context clearly indicates otherwise.

[0025] It should also be further understood that the term “and / or” as used in this application specification and the appended claims means any combination of one or more of the associated listed items and all possible combinations, and includes such combinations.

[0026] As used in this specification and the appended claims, the term "if" may be interpreted, depending on the context, as "when," "once," "in response to determination," or "in response to detection." Similarly, the phrase "if determined" or "if [described condition or event] is detected" may be interpreted, depending on the context, as "once determined," "in response to determination," "once [described condition or event] is detected," or "in response to detection of [described condition or event]."

[0027] To address the technical problem that one-way identity verification methods in existing technologies are prone to data leakage, this application provides a data security download device that enables secure data download.

[0028] Figure 1 This is a flowchart illustrating a secure data download method provided in an embodiment of this application. In one embodiment, the method uses a client and includes steps S101-S106.

[0029] S101. Obtain the target user's session login information and the client's device identifier.

[0030] The client can be a terminal device such as a mobile phone or computer. The client's device identifier can be the client's device serial number. It should be noted that the device identifier uniquely identifies the client.

[0031] It should be noted that the target user enters verification information into the service provider. After successful verification, the service provider generates corresponding session login information for the target user. This verification information includes, but is not limited to, the target user's account, password, and verification code.

[0032] S102. Generate authentication information based on session login information and device identifier.

[0033] The authentication information includes, but is not limited to, the user's session login information and the client's device identifier.

[0034] S103. Based on the preset encrypted communication link, send a data download request message to the service provider.

[0035] The data download request message is used to request the download of the target data. The data download request message includes authentication information.

[0036] It should be noted that the preset encrypted communication link is a TLS connection established using a pre-set CA certificate or other certificates before initiating a data download request. In this embodiment, the data download request message is sent to the service provider based on the preset encrypted communication link, thereby ensuring the security of the data carried in the data download request message. Furthermore, if a new CA certificate or other certificate needs to be issued, it must be updated and persisted to the client within the already verified TLS before establishing a connection using the new CA certificate or other certificate.

[0037] S104. Receive a response message from the data download request message returned by the service provider.

[0038] After receiving a data download request message, the service provider extracts the target user's session login information and the client's device identifier from the message. Next, the service provider verifies the target user's session login information to ensure the target user is a currently logged-in authorized user. Simultaneously, the service provider also identifies the client's device identifier. It should be noted that, in one embodiment, the service provider internally stores a list of allowed devices, which includes at least one client's device identifier. In this embodiment, the service provider checks whether the received device identifier exists in the device list. If the client's device identifier exists in the list, the client is an authorized client, and access to the service provider is permitted. Otherwise, access to the service provider is not permitted. In another embodiment, when a client establishes a session connection with the service provider, it sends its own device identifier to the service provider. After establishing a connection for the client, the service provider saves the client's device identifier. Subsequent accesses by the client to the service provider require carrying the client's device identifier, and the service provider needs to verify the client's device identifier to prevent attackers from impersonating the target user, using other clients to access the service provider, and illegally obtaining data.

[0039] S105. Perform authentication operations on the service provider based on the response message.

[0040] It should be noted that the response message returned by the service provider includes the service provider's identity information. Upon receiving this response message, the client needs to verify the service provider's identity to effectively prevent impersonating the service provider from transmitting illegal data to the client. Illegal data includes, but is not limited to, Trojan programs.

[0041] S106. If the authentication operation is successful, download the target data from the service provider.

[0042] If the service provider's authentication process passes, it indicates that the service provider is trustworthy. At this point, the client can download the target data from the service provider.

[0043] This application provides a secure data download method. The method applies a client and includes: acquiring a target user's session login information and the client's device identifier; generating authentication information based on the session login information and the device identifier; sending a data download request message to a service provider via a preset encrypted communication link, the data download request message requesting the download of target data, the data download request message including the authentication information; receiving a response message from the service provider regarding the data download request message; performing an authentication operation on the service provider based on the response message; and downloading the target data from the service provider if the authentication operation is successful. Therefore, this application's technical solution acquires the target user's session login information and the client's device identifier. Then, authentication information is generated based on the session login information and the device identifier. Furthermore, a data download request message is sent to the service provider via a preset encrypted communication link. The data download request message requests the download of target data; the data request message includes authentication information. Next, a response message from the service provider is received. Finally, an authentication operation is performed on the service provider based on the response message. If the identity verification operation passes, the target data is downloaded from the service provider. Therefore, the technical solution of this application constructs a two-way identity verification mechanism: on the one hand, it combines the target user's session login information and the client's device identifier to complete the client-side identity legitimacy verification; on the other hand, it verifies the identity validity of the service provider by performing identity verification on the response message returned by the service provider. Only when both the client and service provider identity verifications pass can the client download the target data from the service provider. This mechanism effectively solves the security vulnerabilities of one-way identity verification methods, and effectively avoids the security risk of data leakage from the two-way identity access level of data interaction.

[0044] In one embodiment, the response information includes the target certificate, and S105 specifically includes the following steps: S1051-S1053.

[0045] S1051. Determine whether the domain name information bound in the target certificate is consistent with the domain name information of the service provider. If yes, proceed to S1052. If no, proceed to S1053.

[0046] S1052, then the result of the authentication operation is successful.

[0047] S1053, then the result of the authentication operation is failure.

[0048] It should be noted that S1051-S1053 will be explained in detail below.

[0049] The target certificate carries the service provider's domain name information. In this embodiment, the service provider's domain name information is extracted from the target certificate, and then compared with the service provider's actual domain name information. If the extracted domain name information is the same as the service provider's actual domain name information, the authentication operation for the service provider is successful; otherwise, the authentication operation for the service provider is unsuccessful.

[0050] It should be noted that the target certificate also carries other information. In this embodiment, at least one of the following information also needs to be verified: the certificate's validity period, the certificate's signature chain, and the certificate's revocation status. In one embodiment, S106 specifically includes the following steps: S1061.

[0051] S1061. If the authentication operation is successful, the target data is downloaded from the service provider using a concurrent download method based on the preset concurrent task volume.

[0052] The preset concurrent task volume is set by the applicant based on the client's device parameters and operating parameters. This application does not impose any restrictions on this. The client's device parameters include, but are not limited to, the number of CPUs, CPU frequency, and memory size. The client's operating parameters include, but are not limited to, CPU utilization, memory utilization, and bandwidth.

[0053] In this embodiment, the target data is downloaded simultaneously from the service provider using a concurrent download method, and finally the downloaded data is spliced ​​together to form the complete target data.

[0054] In one embodiment, before downloading the target data from the service provider using a concurrent download method based on a preset concurrent task volume if the authentication operation is successful, the method further includes: S107. Obtain the network signal quality of the client.

[0055] In one embodiment, S107 specifically includes the following steps: S1071-S1072.

[0056] S1071. Obtain the mobile network type of the client; S1072. Determine the network signal quality based on the mobile network type.

[0057] It should be noted that S1071-S1072 will be explained in detail below.

[0058] If the client is connected to a mobile network, the network type of the mobile network to which the client is currently connected can be obtained. Then, the network signal quality of the current mobile network is determined based on the mobile network type. It should be noted that if the mobile network type is 2G or 3G, the network signal quality is considered poor. Otherwise, the network signal quality is considered good.

[0059] In another embodiment, the above-mentioned S107 further includes the following steps: S1073-S1074.

[0060] S1073. Obtain the client's WIFI signal strength; S1074. Determine the network signal quality based on the WIFI signal strength.

[0061] It should be noted that S1073-S1074 will be explained in detail below.

[0062] Specifically, if the client is connected to a Wi-Fi network, the Wi-Fi RSSI value can be measured. If the Wi-Fi RSSI value is lower than a preset threshold, it indicates that the client is currently in a weak network environment, and the preset concurrent task load needs to be reduced. Preferably, the preset threshold is -90dBm.

[0063] S108. Adjust the preset concurrent task volume according to the network signal quality.

[0064] It should be noted that when the client's current network environment is poor, the preset concurrent task load should be reduced to avoid network congestion, which could affect the normal operation of other services. When the client's current network environment is good, the preset concurrent task load can be appropriately increased to improve the download speed of the target data.

[0065] The above S1061 specifically includes the following steps: S10611.

[0066] S10611. If the authentication operation is successful, the target data is downloaded from the service provider using a concurrent download method based on the adjusted preset concurrent task volume.

[0067] It should be noted that the preset concurrent connection count can be adjusted in real time during the download of target data in this embodiment. When the network environment currently connected to the client is of good quality, the concurrent connection count can be appropriately increased to speed up the download of target data.

[0068] In one embodiment, after the step of downloading the target data from the service provider if the authentication operation is successful, the method further includes steps S109-S110.

[0069] S109. Encrypt the target data using a preset encryption algorithm.

[0070] S110, Store the encrypted target data.

[0071] It should be noted that S109-S110 will be explained in detail below.

[0072] The preset encryption algorithm includes, but is not limited to, symmetric key encryption algorithms or asymmetric key encryption algorithms. In this embodiment, the downloaded target data can be encrypted using a preset encryption algorithm to ensure the storage security of the target data.

[0073] See Figure 2 , Figure 2 This is a schematic block diagram of a data security download device provided in an embodiment of this application. Corresponding to the above-described data security download method, this application also provides a data security download device. This data security download device includes a unit for executing the above-described data security download method, and can be configured in a terminal such as a desktop computer, tablet computer, or laptop computer. Specifically, the method applies a client, and the data security download device includes: Acquisition unit 201 is used to acquire the target user's session login information and the client's device identifier; The generation unit 202 is used to generate authentication information based on the session login information and the device identifier; The sending unit 203 is used to send a data download request message to the service provider based on a preset encrypted communication link. The data download request message is used to request the download of target data and includes the authentication information. The receiving unit 204 is configured to receive a response message from the data download request message returned by the service provider; Execution unit 205 is configured to perform an authentication operation on the service provider based on the response message; Download unit 206 is used to download the target data from the service provider if the authentication operation is successful.

[0074] In one embodiment, the response information includes a target certificate, and the execution unit 205 is specifically used for: Determine whether the domain name information bound in the target certificate is consistent with the domain name information of the service provider; If so, the result of the authentication operation is successful; If not, the authentication operation will fail.

[0075] In one embodiment, the download unit 206 is specifically used for: If the authentication operation is successful, the target data is downloaded from the service provider using a concurrent download method based on a preset concurrent task volume.

[0076] In one embodiment, before downloading the target data from the service provider using a concurrent download method based on a preset concurrent task volume if the authentication operation is successful, the acquisition unit 201 is further configured to acquire the network signal quality of the client. The preset concurrent task volume is adjusted according to the network signal quality; If the authentication operation is successful, then based on a preset concurrent task volume, the target data is downloaded from the service provider using a concurrent download method, including: If the authentication operation is successful, the target data is downloaded from the service provider using the concurrent download method based on the adjusted preset concurrent task volume.

[0077] In one embodiment, the acquisition unit 201 is specifically used for: Obtain the mobile network type of the client; The network signal quality is determined based on the mobile network type.

[0078] In one embodiment, the acquisition unit 201 is specifically used for: Obtain the Wi-Fi signal strength of the client; The network signal quality is determined based on the Wi-Fi signal strength.

[0079] In one embodiment, after downloading the target data from the service provider if the authentication operation is successful, the apparatus further includes: Encryption unit 207 is used to encrypt the target data using a preset encryption algorithm; Storage unit 208 is used to store the encrypted target data.

[0080] like Figure 3 As shown, this application provides a computer device including a processor 31, a communication interface 32, a memory 33, and a communication bus 34. The processor 31, the communication interface 32, and the memory 33 communicate with each other through the communication bus 34. The memory 33 is used to store computer programs. In one embodiment of this application, when the processor 31 executes the program stored in the memory 33, it implements the data security download control method provided in any of the foregoing method embodiments.

[0081] It will be understood by those skilled in the art that all or part of the processes in the methods of the above embodiments can be implemented by a computer program instructing related hardware. The computer program may be stored in a storage medium, which is a computer-readable storage medium. The computer program is executed by at least one processor in the computer system to implement the process steps of the embodiments of the above methods.

[0082] Therefore, embodiments of this application also provide a computer-readable storage medium having a computer program stored thereon, wherein the computer program, when executed by a processor, implements the steps of the data secure download method provided in any of the foregoing method embodiments.

[0083] The storage medium is a physical, non-transient storage medium, such as a USB flash drive, external hard drive, read-only memory (ROM), magnetic disk, or optical disk, or any other physical storage medium capable of storing program code. The computer-readable storage medium can be non-volatile or volatile.

[0084] Those skilled in the art will recognize that the units and algorithm steps of the various examples described in conjunction with the embodiments disclosed herein can be implemented in electronic hardware, computer software, or a combination of both. To clearly illustrate the interchangeability of hardware and software, the components and steps of the various examples have been generally described in terms of functionality in the foregoing description. Whether these functions are implemented in hardware or software depends on the specific application and design constraints of the technical solution. Those skilled in the art can use different methods to implement the described functions for each specific application, but such implementations should not be considered beyond the scope of this application.

[0085] In the several embodiments provided in this application, it should be understood that the disclosed apparatus and methods can be implemented in other ways. For example, the apparatus embodiments described above are merely illustrative. For example, the division of each unit is merely a logical functional division, and there may be other division methods in actual implementation. For example, multiple units or components may be combined or integrated into another system, or some features may be ignored or not executed.

[0086] The steps in the methods of this application embodiment can be adjusted, merged, or deleted according to actual needs. The units in the apparatus of this application embodiment can be merged, divided, or deleted according to actual needs. Furthermore, the functional units in the various embodiments of this application can be integrated into one processing unit, or each unit can exist physically separately, or two or more units can be integrated into one unit.

[0087] If the integrated unit is implemented as a software functional unit and sold or used as an independent product, it can be stored in a storage medium. Based on this understanding, the technical solution of this application, in essence, or the part that contributes to the prior art, or all or part of the technical solution, can be embodied in the form of a software product. This computer software product is stored in a storage medium and includes several instructions to cause a computer device (which may be a personal computer, a terminal, or a network device, etc.) to execute all or part of the steps of the methods described in the various embodiments of this application.

[0088] In the above embodiments, the descriptions of each embodiment have different focuses. For parts that are not described in detail in a certain embodiment, please refer to the relevant descriptions in other embodiments.

[0089] Obviously, those skilled in the art can make various modifications and variations to this application without departing from the spirit and scope of this application. Since these modifications and variations fall within the scope of the claims and their equivalents, this application also intends to include these modifications and variations.

[0090] The above description is merely a specific embodiment of this application, but the scope of protection of this application is not limited thereto. Any person skilled in the art can easily conceive of various equivalent modifications or substitutions within the technical scope disclosed in this application, and these modifications or substitutions should all be covered within the scope of protection of this application. Therefore, the scope of protection of this application should be determined by the scope of the claims.

Claims

1. A method for securely downloading data, characterized in that, The method is applied to a client, and the method includes: Obtain the target user's session login information and the client's device identifier; Authentication information is generated based on the session login information and the device identifier; Based on a preset encrypted communication link, a data download request message is sent to the service provider. The data download request message is used to request the download of target data and includes the authentication information. Receive a response message from the service provider in response to the data download request message. Perform an authentication operation on the service provider based on the response message; If the authentication operation is successful, the target data is downloaded from the service provider.

2. The method according to claim 1, characterized in that, The response information includes the target certificate, and the step of performing authentication operations on the service provider based on the response message includes: Determine whether the domain name information bound in the target certificate is consistent with the domain name information of the service provider; If so, the result of the authentication operation is successful; If not, the authentication operation will fail.

3. The method according to claim 1 or 2, characterized in that, If the authentication operation is successful, then downloading the target data from the service provider includes: If the authentication operation is successful, the target data is downloaded from the service provider using a concurrent download method based on a preset concurrent task volume.

4. The method according to claim 3, characterized in that, Before downloading the target data from the service provider using a concurrent download method based on a preset concurrent task volume if the authentication operation is successful, the method further includes: Obtain the network signal quality of the client; The preset concurrent task volume is adjusted according to the network signal quality; If the authentication operation is successful, then based on a preset concurrent task volume, the target data is downloaded from the service provider using a concurrent download method, including: If the authentication operation is successful, the target data is downloaded from the service provider using the concurrent download method based on the adjusted preset concurrent task volume.

5. The method according to claim 4, characterized in that, The process of obtaining the network signal quality of the client includes: Obtain the mobile network type of the client; The network signal quality is determined based on the mobile network type.

6. The method according to claim 4, characterized in that, The method for obtaining the network signal quality of the client further includes: Obtain the Wi-Fi signal strength of the client; The network signal quality is determined based on the Wi-Fi signal strength.

7. The method according to claim 1 or 2, characterized in that, After downloading the target data from the service provider if the authentication operation is successful, the method further includes: The target data is encrypted using a preset encryption algorithm; Store the encrypted target data.

8. A data security download device, characterized in that, The device application client, the device includes: The acquisition unit is used to acquire the target user's session login information and the client's device identifier; The generation unit is used to generate authentication information based on the session login information and the device identifier; The sending unit is configured to send a data download request message to the service provider based on a preset encrypted communication link. The data download request message is used to request the download of target data and includes the authentication information. A receiving unit is configured to receive a response message from the service provider in response to the data download request message. An execution unit is configured to perform an authentication operation on the service provider based on the response message; The download unit is used to download the target data from the service provider if the authentication operation is successful.

9. A computer device, characterized in that, The computer device includes a memory and a processor, the memory storing a computer program, and the processor executing the computer program to implement the method as described in any one of claims 1 to 7.

10. A computer-readable storage medium, characterized in that, The storage medium stores a computer program that, when executed by a processor, can implement the method as described in any one of claims 1 to 7.

Images