CN111182010B

CN111182010B - Local service providing method and device

Info

Publication number: CN111182010B
Application number: CN201811332866.7A
Authority: CN
Inventors: 冯中坚; 李奎
Original assignee: Hangzhou Hikvision Digital Technology Co Ltd
Current assignee: Hangzhou Hikvision Digital Technology Co Ltd
Priority date: 2018-11-09
Filing date: 2018-11-09
Publication date: 2023-04-07
Anticipated expiration: 2038-11-09
Also published as: CN111182010A

Abstract

The invention provides a method and a device for providing local service, wherein the method is applied to terminal equipment, the terminal equipment runs a service process and loads a Web client, and the method comprises the following steps: the Web client determines a first password; the Web client sends the connection request carrying the first password to the service process, so that the service process judges whether to allow the establishment of the connection between the Web client and the service process according to the first password carried by the received connection request; the connection request is used for requesting to establish connection between the Web client and a service process, and the connection is used for the service process to provide local service for the Web client. The problem of a three-party application that should not be served calling a local service is prevented.

Description

Local service providing method and device

Technical Field

The present invention relates to the field of computer technologies, and in particular, to a method and an apparatus for providing local services.

Background

The presentation of some content, such as videos, games, etc., in a Web page is done through an associated plug-in. For example, when a video is played in a Web page, an NPAPI or an ActiveX plug-in is required to be used to embed the video into a browser. However, as browsers have evolved, many browsers have disabled NPAPI, activeX, etc. plug-ins.

At present, in order to solve the problem that the plug-in is disabled or may be disabled so as not to enable the required content to be presented on the Web page, a service process is started in the background to connect with the Web client where the Web page is located, so as to provide the local service required by the Web client, for example, provide the local service required by playing a video on the Web page for the Web client.

In the above manner, the connection between the Web client and the service process is not authenticated by the local service, which may cause a problem that the local service should not be invoked by the served three-party application.

Disclosure of Invention

In view of this, the present invention provides a method and an apparatus for providing local services, which prevent a problem that a local service is called by a third-party application that should not be served.

A first aspect of the present invention provides a local service providing method, which is applied to a terminal device, where the terminal device runs a service process and loads a Web client, and the method includes:

the Web client determines a first password;

the Web client sends the connection request carrying the first password to the service process, so that the service process judges whether to allow the establishment of the connection between the Web client and the service process according to the first password carried by the received connection request;

the connection request is used for requesting to establish connection between the Web client and a service process, and the connection is used for providing local service for the Web client by the service process.

According to one embodiment of the invention, the Web client determining the first password comprises:

the Web client determines a first password according to the loaded file; the format of the file is a binary format.

According to an embodiment of the present invention, the determining, by the Web client, the first password according to the loaded file includes:

the Web client runs the loaded file to acquire a first password generation function and password parameters from the file;

and the Web client inputs the password parameters into the first password generation function, so that a first password is generated and output according to the input password parameters by using the first password generation function.

According to an embodiment of the present invention, the connection request further carries the password parameter;

the service process judges whether to allow the establishment of the connection between the Web client and the service process according to the first password carried by the received connection request, and the method comprises the following steps:

the service process inputs the password parameters carried in the connection request into a second password generating function built in the service process, so that a second password is generated and output by the second password generating function according to the input password parameters; wherein the second password generation function is the same as the first password generation function;

the service process judges whether the first password is matched with the second password;

and if so, the service process establishes the connection between the service process and the Web client so that the service process provides local service for the Web client through the connection.

According to an embodiment of the present invention, before the Web client determines the first password according to the loaded file, the method further includes:

the Web client decrypts the acquired file by using a preset decryption algorithm; wherein the acquired file has been encrypted by an encryption algorithm, the encryption algorithm corresponding to the decryption algorithm;

and the Web client loads the decrypted file.

According to an embodiment of the present invention, the determining, by the service process, whether to allow establishment of the connection between the Web client and the service process according to the first password carried in the received connection request includes:

the service process searches the first password in a preset password list; the password list records the password received by the service process within the set time;

if not, the service process acquires a second password according to the connection request and judges whether the first password is matched with the second password, and if so, the service process establishes connection between the service process and the Web client so that the service process provides local service for the Web client through the connection.

A second aspect of the present invention provides a local service providing method, where the method is applied to a terminal device, where the terminal device runs a service process and loads a Web client, and the method includes:

the service process receives a connection request which is sent by the Web client and carries a first password, wherein the connection request is used for requesting to establish connection between the Web client and the service process;

and the service process judges whether to allow the connection between the Web client and the service process to be established according to a first password carried by the received connection request, wherein the connection is used for providing local service for the Web client by the service process.

the service process acquires a second password according to the connection request;

In accordance with one embodiment of the present invention,

the connection request also carries a password parameter;

the service process obtains a second password according to the connection request, and the method comprises the following steps:

and the service process inputs the password parameters carried in the connection request into a second password generating function built in the service process, so that a second password is generated and output by the second password generating function according to the input password parameters.

A third aspect of the present invention provides a local service providing apparatus, which is applied to a terminal device, where the terminal device runs a service process and loads a Web client, and the apparatus includes:

the first password determining module is used for determining a first password through the Web client;

the connection request sending module is used for sending the connection request carrying the first password to the service process through the Web client so that the service process judges whether to allow the establishment of the connection between the Web client and the service process according to the first password carried by the received connection request;

the connection request is used for requesting to establish connection between the Web client and a service process, and the connection is used for the service process to provide local service for the Web client.

According to an embodiment of the present invention, the first password determining module is specifically configured to: determining a first password according to the loaded file through the Web client; the format of the file is a binary format.

According to one embodiment of the invention, the first password determination module comprises:

a first obtaining unit, configured to obtain a first password generation function and a password parameter from the file by running the loaded file through the Web client;

and the first determining unit is used for inputting the password parameters to the first password generating function through the Web client, and generating and outputting a first password according to the input password parameters by using the first password generating function.

the service process, according to the first password carried by the received connection request, is specifically configured to:

and if the matching is carried out, the service process establishes the connection between the service process and the Web client so that the service process provides local service for the Web client through the connection.

According to an embodiment of the invention, the apparatus further comprises:

the file decryption module is used for decrypting the acquired file by using a preset decryption algorithm through the Web client; wherein the acquired file has been encrypted by an encryption algorithm, the encryption algorithm corresponding to the decryption algorithm;

and the file loading module is used for loading the decrypted file through the Web client.

According to an embodiment of the present invention, when the service process determines whether to allow establishing the connection between the Web client and the service process according to the first password carried in the received connection request, the service process is specifically configured to:

the service process searches the first password in a preset password list; the password list records the passwords received by the service process within the set time;

if not, the service process acquires a second password according to the connection request and judges whether the first password is matched with the second password, if so, the service process establishes connection between the service process and the Web client so that the service process provides local service for the Web client through the connection, and the connection is used for providing local service for the Web client by the service process.

A fourth aspect of the present invention provides a local service providing apparatus, which is applied to a terminal device, where the terminal device runs a service process and loads a Web client, and the apparatus includes:

a connection request receiving module, configured to receive, through the service process, a connection request carrying a first password and sent by the Web client, where the connection request is used to request establishment of a connection between the Web client and the service process;

and the local service authentication module is used for judging whether the connection between the Web client and the service process is allowed to be established or not according to a first password carried by the received connection request through the service process, wherein the connection is used for providing local service for the Web client by the service process.

According to one embodiment of the invention, the local service authentication module comprises:

the second obtaining unit is used for obtaining a second password according to the connection request through a service process;

the matching judgment unit is used for judging whether the first password is matched with the second password through the service process;

the password searching unit is used for searching the first password in a preset password list through the service process; the password list records the passwords received by the service process within the set time;

and the second connection unit is used for acquiring a second password by the service process according to the connection request if the second password is not found, judging whether the first password is matched with the second password, and if the first password is matched with the second password, establishing connection between the service process and the Web client by the service process so as to enable the service process to provide local service for the Web client through the connection.

In accordance with one embodiment of the present invention,

the connection request also carries a password parameter;

the service process is specifically configured to, when obtaining the second password according to the connection request:

The fifth aspect of the present invention provides a terminal device, where the terminal device runs a service process and loads a Web client, and the terminal device includes a processor and a memory; the memory stores a program that can be called by the processor; wherein, when the processor executes the program, the local service providing method as described in the foregoing embodiments is implemented.

A sixth aspect of the present invention provides a machine-readable storage medium, characterized in that a program is stored thereon, which when executed by a processor, implements the local service providing method according to the foregoing embodiments.

Compared with the prior art, the embodiment of the invention has the following beneficial effects:

in the embodiment of the invention, when the Web client requests to establish the connection with the service process, the connection request carries the first password for authentication, and the service process carries out local service authentication according to the first password carried in the connection request, namely, whether the Web client and the service process are to be established or not is judged, so that the service process is ensured to only provide local service for the Web client which passes the authentication, and the problem that the local service is called by an application program which is not to be served is avoided.

In addition, the first password is determined by the Web client according to the loaded file in the binary format, and the internal information of the file cannot be checked on the Web client, so that the internal information of the file cannot be acquired by an application program which is not served, the reliability of the first password is ensured, and the reliability of local service provision is improved.

Drawings

Fig. 1 is a flowchart illustrating a local service providing method according to an embodiment of the present invention;

fig. 2 is a schematic flowchart of a local service providing method according to an embodiment of the present invention;

fig. 3 is a flowchart illustrating a local service providing method according to another embodiment of the present invention;

fig. 4 is a block diagram of a terminal device according to an embodiment of the present invention.

Detailed Description

Reference will now be made in detail to the exemplary embodiments, examples of which are illustrated in the accompanying drawings. The following description refers to the accompanying drawings in which the same numbers in different drawings represent the same or similar elements unless otherwise indicated. The embodiments described in the following exemplary embodiments do not represent all embodiments consistent with the present invention. Rather, they are merely examples of apparatus and methods consistent with certain aspects of the invention, as detailed in the appended claims.

The terminology used herein is for the purpose of describing particular embodiments only and is not intended to be limiting of the invention. As used in this specification and the appended claims, the singular forms "a", "an", and "the" are intended to include the plural forms as well, unless the context clearly indicates otherwise. It should also be understood that the term "and/or" as used herein refers to and encompasses any and all possible combinations of one or more of the associated listed items.

It is to be understood that although the terms first, second, third, etc. may be used herein to describe various information, these information should not be limited to these terms. These terms are only used to distinguish one type of information from another. For example, first information may also be referred to as second information, and similarly, second information may also be referred to as first information, without departing from the scope of the present invention. The word "if," as used herein, may be interpreted as "at … …" or "at … …" or "in response to a determination," depending on the context.

In order to make the description of the present invention clearer and more concise, some technical terms in the embodiments of the present invention are explained below:

WebAssembly (WASM for short, a new technology for running a portable program in a safe and effective mode, mainly aiming at a Web platform) is used as an emerging Web technology, C/C + + codes can be compiled into codes which can be interpreted by a browser, and a compiled WebAssembly file (with a file extension of the WASM) can be loaded by the browser.

The local service providing method of the embodiment of the invention can be applied to terminal equipment with a browser, such as PC (personal computer) equipment and tablet equipment, but is not limited to the PC equipment and the tablet equipment, and can also be other terminal equipment supporting the browser to be operated to load a Web page. The operating systems on the terminal devices may be, for example, windows systems, MAC systems, etc., and different systems may call the local service differently, and may specifically perform adaptive adjustment according to actual situations.

The browser is a container for bearing Web pages, and can load the Web pages through the browser on the terminal equipment to form a Web client loaded on the equipment. The Web page may be stored on a server, and the Web page may be obtained from the server by sending a Web page request to the server through a browser.

The service process is a process which runs locally and can provide local service for the Web client, and the service process can be started locally in an installation package mode. The installation package may be, for example, an executable program with a file extension of. Exe, and may also be, for example, an apk file, a COM file, and the like. The obtaining mode of the installation package is not limited, and the installation package may be stored locally, or obtained from an external storage device, or obtained by downloading from a server through a Web client, and the like. And running a service process on the local to provide local service for the authenticated Web client. In the embodiment of the present invention, the local means a terminal device to which the local service providing method is applied.

The premise of the service process providing local service for the Web client is that the connection between the service process and the Web client is established. The local service providing method provided by the embodiment of the invention is an authentication process before the connection is established between the service process and the Web client, and the connection can be established only through authentication so that the service process provides local service for the Web client. Thus, an unauthenticated three-party application cannot invoke a local service through a service process.

The local service that the service process can provide for the Web client is not particularly limited, and a local corresponding interface can be called for the Web client according to the request of the Web client to realize the functions required by the Web client. For example, when a video is played in a Web client, after the service process receives a video playing request from the Web client, the service process can call an interface for controlling a pop-up dialog box according to the video playing request to pop-up the dialog box, and embed the pop-up dialog box into the Web client, so that the video can be played in the pop-up dialog box, and the video can be played in the Web client.

The local service providing method according to the embodiment of the present invention is described in detail below, but should not be limited thereto.

A first aspect of the present invention provides a local service providing method, referring to fig. 1, in one embodiment, the method may include the steps of:

s100: the Web client determines a first password;

s200: the Web client sends the connection request carrying the first password to the service process, so that the service process judges whether to allow the connection between the Web client and the service process to be established or not according to the first password carried by the received connection request;

The method is applied to terminal equipment which runs a service process and loads a Web client, and the steps S100-S200 are realized through the Web client.

In step S100, the Web client determines a first password.

The way of determining the first password by the Web client is not particularly limited. For example, when the terminal device loads the Web client, the Web client itself carries the first password; alternatively, the Web client may generate the first password in a preset manner or obtain the first password from the outside, but other determination manners may also be available.

In step S200, the Web client carries the first password determined in step S100 in the connection request, and sends the connection request carrying the first password to the service process.

The connection request is used for requesting to establish connection between the Web client and the service process. The connection request may include, for example, a url (uniform resource locator) of a Web page, and the first password may be carried behind the url, for example, and the specific carrying location is not limited, and the information of the connection request itself is not affected. It is understood that the connection request may also carry other information, as needed.

The first password used for authentication judgment is carried in the connection request, and the service process can establish connection with the Web client directly according to the connection request after the Web client passes the authentication, so that unnecessary interaction is omitted.

After receiving a connection request from a Web client, a service process acquires a first password from the connection request, and judges whether to allow the connection between the Web client and the service process to be established according to the first password, namely judges whether the Web client passes authentication according to the first password. If the authentication is passed, the Web client is a legal user, the service process can establish a connection with the Web client, and local service is provided for the Web client through the connection.

The method for judging whether to provide local service to the Web client according to the first password is not particularly limited, and preferably, the service process may obtain a corresponding second password according to the received connection request, and judge whether the first password is matched with the second password, if so, the service process establishes a connection between the service process and the Web client, so that the service process provides local service for the Web client through the connection.

After the connection is established between the service process and the Web client, the service process can return an identifier indicating the successful establishment of the connection to the Web client, and the request sent by the Web client to the service process is provided with the specified identifier, so that the service process can identify the corresponding Web client according to the specified identifier and transmit some information of the interface called according to the request to the Web client through the connection.

In an embodiment, in step S100, the determining, by the Web client, the first password specifically includes:

The format of the file is binary format, that is, the content of the file is encoded in binary language, so that the source code information inside the file cannot be viewed on the Web page (the source code of javascript language on the Web page can be viewed).

The Web client needs to determine the first password according to the file in the binary format, and because the internal information of the file is confidential, the internal information of the file cannot be stolen by other application programs which do not use local services, so that the security of the first password is ensured.

In this embodiment, since the first password is determined by the Web client according to the loaded file in the binary format, and the internal information of the file cannot be viewed on the Web client, the application program that should not be served cannot acquire the internal information of the file, so that the reliability of the first password is ensured, and the reliability of providing the local service is improved.

Preferably, the file is a WebAssembly binary file with a file extension of. The WebAssembly binary file can be operated by various browsers, so that the local service providing method provided by the embodiment of the invention has a wider application range. It is understood that the specific type of the file is not limited, as long as the file is a compiled binary file and can be loaded and run by the Web client.

The file can be acquired through the Web client, and the acquired file is loaded. The file is associated with the Web page, and the Web client side arbitrarily loaded with the Web page can acquire the file associated with the Web page without constraint.

Preferably, the file is obtained from a server that provides a Web page loaded in the Web client, and the file may be obtained by a request from the server by the Web client. In other words, the file and the Web page are stored in the same server, the corresponding file can be acquired only by the Web client request file loaded with the Web page on the server, and the file cannot be acquired by the Web client request file loaded with the Web page on another server, so that the security of the file is further ensured.

In one embodiment, the Web client determining the first password according to the loaded file may include the following steps:

s101: the Web client runs the loaded file to acquire a first password generation function and password parameters from the file;

s102: and the Web client inputs the password parameters to the first password generation function so as to generate and output a first password according to the input password parameters by using the first password generation function.

A first password generation function and password parameters are arranged in the file, and the first password generation function and the password parameters in the file can be obtained after the Web client runs the file, so that a first password can be generated by the first password generation function according to the password parameters.

The first password is not directly written in the file, but the first password generating function and the password parameter are built in the file, and the first password generating function and the password parameter are utilized to generate the required first password, so that the difficulty of deciphering the first password can be increased, and the reliability of the first password is further improved.

In one embodiment, the connection request further carries the cryptographic parameters;

The connection request sent by the Web client to the service process also carries the password parameter, so that the service process can perform authentication according to the first password and the password parameter carried by the connection request after receiving the connection request.

The service process is internally provided with a second password generating function, and the first password generating function is the same as the second password generating function. Thus, under the same conditions, the generated passwords will be the same.

And after receiving the connection request, the service process generates a second password according to the password parameter carried in the connection request by using a second password generation function built in the service process, judges whether the second password is matched with (for example, the second password is the same as) the first password carried in the connection request, and determines to provide local service for the Web client if the second password is matched with the first password carried in the connection request. The first password generation function and the second password generation function are the same, and when the password parameters are the same, the first password and the second password are matched.

The first and second cryptographic generation functions may be, for example, pseudo-random number generation functions, the cryptographic parameters being seeds of the pseudo-random number generation functions, and the generated first and second cryptographic codes being identical pseudo-random numbers if the seeds are identical.

In one embodiment, before the Web client determines the first password according to the loaded file, the method further includes the following steps:

s010: the Web client decrypts the acquired file by using a preset decryption algorithm; wherein the acquired file has been encrypted by an encryption algorithm, the encryption algorithm corresponding to the decryption algorithm;

s020: and the Web client loads the decrypted file.

The file can be obtained by a request of the Web client to a server providing the Web page, and after receiving the request, the server can encrypt the file according to a preset encryption algorithm and then issue the file to the Web client. After receiving the file, the Web client decrypts the acquired file by using a preset decryption algorithm, loads the decrypted file, and then executes step S100. The encryption algorithm and the decryption algorithm are not particularly limited, and may be corresponding.

The file is encrypted, the Web client needs to decrypt the acquired file, and the difficulty of decoding the first password is further increased, so that the reliability of the first password is higher.

Preferably, the steps S010 and S020 may be replaced by the following steps:

and the Web client judges whether the acquired file is encrypted or not, if so, the Web client decrypts the acquired file by using a preset decryption algorithm, and loads the decrypted file, otherwise, the Web client directly loads the file. The determination of whether to encrypt may be made so that the method is compatible with processing files that are encrypted or unencrypted.

It can be understood that, when the Web client decrypts the acquired file by using the preset decryption algorithm, if the decryption fails, the decryption is ended, and the subsequent steps are executed only if the decryption succeeds.

In one embodiment, the determining, by the service process, whether to allow establishment of the connection between the Web client and the service process according to the first password carried in the received connection request includes:

After receiving the connection request, the service process firstly judges whether a first password carried in the connection request exists in the password list, if not, the first password is not received within the set time, the subsequent operation is allowed to be executed, if so, the first password is received before, and at this time, the Web client is determined not to pass the authentication. Therefore, the first password is guaranteed to be invalid after being used once, the first password is prevented from being stolen and then being reused, third-party application is prevented from being provided through local service by utilizing the first password, and the safety performance is enhanced.

The service process may obtain the second password according to the connection request in the manner described in the foregoing embodiment, that is, the service process inputs the password parameter carried in the connection request to the second password generating function built in the service process, so as to generate and output the second password according to the input password parameter by using the second password generating function; the service process itself may also carry the second password, or the second password is preset on the terminal device and is directly obtained from the terminal device, or other manners may also be used.

As a specific example of the local service providing method, referring to fig. 2, the method includes the steps of:

21 Web client obtains file from server, then executes step 22); specifically, the Web client requests a file from the server, and the server issues the file corresponding to the request to the Web client, wherein after receiving the request, the server can encrypt the file by using a preset encryption algorithm and then issue the file to the Web client;

22 After receiving the file sent by the server, the Web client judges whether the file is encrypted, if so, step 23) is executed, and if not, step 25) is executed;

23 Web client decrypts the file and then performs step 24); specifically, the Web client may decrypt the file by using a preset decryption algorithm, where the decryption algorithm corresponds to the encryption algorithm, and the decryption may be successful as long as no exception (exception, such as incomplete file, etc.) occurs;

24 The Web client judges whether the decryption is successful, if so, the step 25) is executed, and if not, the decryption is finished;

25 The Web client obtains the first password generation function and the password parameters from the file, and then executes step 26); the Web client can load and run files, and a built-in first password generation function and password parameters are obtained from the files during running;

26 The Web client generates a first password according to the password parameter by using a first password generation function, and then executes step 27); specifically, the password parameters are input into a first password generation function, and the first password generation function is used to generate a corresponding first password according to the input password parameters, wherein the generated first password is preferably a pseudo-random number;

27 The Web client carries the first password and password parameters on the connection request, and then performs step 28); the connection request is used for requesting to establish the connection between the Web client and the service process;

28 The Web client sends a connection request to the service process, then step 29) is entered;

29 After receiving the connection request, the service process generates a second password according to the password parameter carried in the connection request by using a second password generation function built in the service process, and then executes step 30); specifically, the service process inputs the password parameter into a second password generating function, so as to generate a second password according to the input password parameter by using the second password generating function, wherein the second password generating function is the same as the first password generating function, so that the same password parameter can be input by the second password generating function and the first password generating function to obtain the same password;

30 The service process judges whether the first password and the second password are matched, if so, the step 31) is executed, and if not, the step 32) is executed;

31 The service process establishes a connection with the Web client and then ends; after the service process establishes the connection with the Web client, the service process subsequently provides local service for the Web client through the connection, and of course, the service process can also return an identifier of successful connection establishment;

32 The service process refuses to provide local service for the Web client and ends; of course, the service process may also return rejection information to the Web client.

A second aspect of the present invention provides a local service providing method, which, in one embodiment, with reference to fig. 3, may include the steps of:

t100: the service process receives a connection request which is sent by the Web client and carries a first password, wherein the connection request is used for requesting to establish connection between the Web client and the service process;

t200: and the service process judges whether to allow the connection between the Web client and the service process to be established according to a first password carried by the received connection request, wherein the connection is used for providing local service for the Web client by the service process.

The method is applied to terminal equipment, the terminal equipment runs a service process and loads a Web client, and the steps from T100 to T200 are realized through the service process.

Preferably, the first password is determined by the Web client according to a loaded file, and the format of the file is a binary format.

In an embodiment, in step T200, the determining, by the service process according to the first password carried in the received connection request, whether to allow establishing the connection between the Web client and the service process may include the following steps:

t201: the service process acquires a second password according to the connection request;

t202: the service process judges whether the first password is matched with the second password;

t203: and if so, the service process establishes the connection between the service process and the Web client so that the service process provides local service for the Web client through the connection.

The obtaining manner of the second password is not limited, and for example, the second password may be generated by the service process according to the received connection request, or determined from a password preset by the service process according to the received connection request, which is not limited specifically. The executable program with the file extension of exe can be run in the local, and the internal information of the service process cannot be viewed, so that the information leakage about the second password is avoided.

And only when the first password in the connection request is matched with the second password acquired by the service process, the service process determines to establish the connection between the service process and the Web client so that the service process provides local service for the Web client, namely, the Web client is determined to pass the authentication, otherwise, the Web client cannot pass the authentication.

In an embodiment, in step T200, the determining, by the service process, whether to allow the connection between the Web client and the service process to be established according to the first password carried in the received connection request may include the following steps:

t211: the service process searches the first password in a preset password list; the password list records the password received by the service process within the set time;

t212: if not, the service process acquires a second password according to the connection request and judges whether the first password is matched with the second password, and if so, the service process establishes the connection between the service process and the Web client so that the service process provides local service for the Web client through the connection.

Further, if the first password is found in a preset password list, the service process refuses to provide local service to the Web client, and the connection between the service process and the Web client cannot be established, that is, the Web client fails to be authenticated.

After receiving the connection request, the service process firstly judges whether a first password carried in the connection request exists in a password list, if not, the first password is not received within the set time, and the subsequent operation is allowed to be executed, if so, the first password is received before, and at this moment, the Web client is determined not to pass the authentication. Therefore, the first password is guaranteed to be invalid after being used once, the first password is prevented from being stolen and then being reused, third-party application is prevented from utilizing the first password and being provided through local service, and the safety performance is enhanced.

Further, the connection request also carries the password parameter;

For the contents of the local service providing method according to the second aspect of the present invention, reference may be made to the foregoing description in the first aspect of the present invention, and the same parts will not be described herein again.

According to an embodiment of the invention, the apparatus further comprises:

if not, the service process acquires a second password according to the connection request and judges whether the first password is matched with the second password, if so, the service process establishes connection between the service process and the Web client so that the service process provides local service for the Web client through the connection, and the connection is used for providing the local service for the Web client by the service process.

The implementation process of the function and the action of each unit in the apparatus provided by the third aspect of the present invention is specifically detailed in the implementation process of the corresponding step in the method provided by the first aspect of the present invention, and is not described herein again.

A fourth aspect of the present invention provides a local service providing apparatus, where the apparatus is applied to a terminal device, and the terminal device runs a service process and loads a Web client, and the apparatus includes:

a connection request receiving module, configured to receive, through the service process, a connection request that is sent by the Web client and carries a first password, where the connection request is used to request establishment of a connection between the Web client and the service process;

and the first connection unit is used for establishing the connection between the service process and the Web client by the service process if the Web client is matched with the service process, so that the service process provides local service for the Web client through the connection.

the password searching unit is used for searching the first password in a preset password list through the service process; the password list records the password received by the service process within the set time;

In accordance with one embodiment of the present invention,

the connection request also carries a password parameter;

The detailed implementation process of the functions and actions of each unit in the apparatus provided in the fourth aspect of the present invention is the implementation process of the corresponding step in the method provided in the second aspect of the present invention, and is not described herein again.

For the device embodiments, since they substantially correspond to the method embodiments, reference may be made to the partial description of the method embodiments for relevant points. The above-described embodiments of the apparatus are merely illustrative, wherein the units described as separate parts may or may not be physically separate, and the parts shown as units may or may not be physical units.

The invention also provides a terminal device, which runs the service process and loads the Web client, and comprises a processor and a memory; the memory stores a program that can be called by the processor; wherein, when the processor executes the program, the local service providing method as described in the foregoing embodiments is implemented.

The embodiment of the local service providing method can be applied to the terminal equipment. Taking software implementation as an example, the local service providing method is formed by reading corresponding computer program instructions in the nonvolatile memory into the memory for operation through the processor of the terminal device to which the local service providing method is applied. From a hardware aspect, as shown in fig. 4, fig. 4 is a hardware structure diagram of a terminal device according to an exemplary embodiment of the present invention, except for the processor 510, the memory 530, the network interface 520, and the nonvolatile memory 540 shown in fig. 4, a program is stored on the memory 530, and when the program is executed by the processor, the local service providing method according to any one of the foregoing embodiments is implemented, in which the terminal device in the embodiment may further include other hardware generally according to an actual function of the terminal device, which is not described again.

The present invention also provides a machine-readable storage medium on which a program is stored, which when executed by a processor, implements the local service providing method as described in any one of the preceding embodiments.

The present invention may take the form of a computer program product embodied on one or more storage media including, but not limited to, disk storage, CD-ROM, optical storage, and the like, having program code embodied therein. Machine-readable storage media include both permanent and non-permanent, removable and non-removable media, and the storage of information may be accomplished by any method or technology. The information may be computer readable instructions, data structures, modules of a program, or other data. Examples of machine-readable storage media include, but are not limited to: phase change memory (PRAM), static Random Access Memory (SRAM), dynamic Random Access Memory (DRAM), other types of Random Access Memory (RAM), read Only Memory (ROM), electrically Erasable Programmable Read Only Memory (EEPROM), flash memory or other memory technologies, compact disc read only memory (CD-ROM), digital Versatile Discs (DVD) or other optical storage, magnetic tape storage or other magnetic storage devices, or any other non-transmission medium, may be used to store information that may be accessed by a computing device.

The above description is only for the purpose of illustrating the preferred embodiments of the present invention and is not to be construed as limiting the invention, and any modifications, equivalents, improvements and the like made within the spirit and principle of the present invention should be included in the scope of the present invention.

Claims

1. A local service providing method is applied to a terminal device, wherein the terminal device runs a service process and loads a Web client, and the method comprises the following steps:

the Web client is loaded with a Web page; the Web client acquires a file from a server providing the Web page, and determines a first password according to the file; the server stores the associated Web page and the associated file; the server is used for responding to a file request of any Web client side for loading the Web page and returning the file related to the Web page;

2. The local service provisioning method of claim 1 wherein said Web client determining a first password comprises:

3. The local service providing method as claimed in claim 2, wherein the determining of the first password by the Web client based on the loaded file comprises:

4. A local service provisioning method as recited in claim 3, wherein said connection request also carries said cryptographic parameters;

5. The local service provisioning method of claim 2 wherein prior to said Web client determining the first password from the loaded file, the method further comprises:

and the Web client loads the decrypted file.

6. The local service providing method according to claim 1, wherein the determining, by the service process, whether to allow establishing the connection between the Web client and the service process according to the first password carried in the received connection request includes:

7. A local service providing method is applied to a terminal device, wherein the terminal device runs a service process and loads a Web client, and the method comprises the following steps:

the service process receives a connection request which is sent by the Web client and carries a first password, wherein the connection request is used for requesting to establish connection between the Web client and the service process; the first password is determined according to a file obtained by the Web client from a server providing a Web page; the Web client is loaded with a Web page; the server stores the associated Web page and the associated file; the server is used for responding to a file request of any Web client side for loading the Web page and returning the file related to the Web page;

8. The local service providing method according to claim 7, wherein the determining, by the service process, whether to allow the connection between the Web client and the service process to be established according to the first password carried in the received connection request includes:

9. The local service providing method according to claim 7, wherein the determining, by the service process, whether to allow the connection between the Web client and the service process to be established according to the first password carried in the received connection request includes:

10. The local service providing method according to claim 8 or 9,

the connection request also carries a password parameter;

11. A local service providing device is characterized in that the device is applied to terminal equipment, the terminal equipment runs a service process and loads a Web client, and the Web client is loaded with a Web page; the device includes:

the first password determining module is used for acquiring a file from a server providing the Web webpage through the Web client and determining a first password according to the file; the server stores the associated Web page and the file; the server is used for responding to a file request of any Web client side for loading the Web page and returning the file related to the Web page;

12. The local service providing apparatus as claimed in claim 11, wherein said first password determining module is specifically configured to: determining a first password according to the loaded file through the Web client; the format of the file is a binary format.

13. The local service providing apparatus as claimed in claim 12, wherein said first password determination module comprises:

14. The local service providing apparatus as claimed in claim 13, wherein said connection request further carries said cryptographic parameter;

15. The local service providing apparatus as claimed in claim 12, wherein the apparatus further comprises:

16. The local service providing apparatus as claimed in claim 11, wherein the service process, when determining, according to the first password carried in the received connection request, whether to allow establishing the connection between the Web client and the service process, is specifically configured to:

17. A local service providing apparatus, which is applied to a terminal device, the terminal device running a service process and loading a Web client, the apparatus comprising:

a connection request receiving module, configured to receive, through the service process, a connection request carrying a first password and sent by the Web client, where the connection request is used to request establishment of a connection between the Web client and the service process; the first password is determined according to a file obtained by the Web client from a server providing a Web page; the Web client side is loaded with a Web page; the server stores the associated Web page and the associated file; the server is used for responding to a file request of any Web client side for loading the Web page and returning the file related to the Web page;

18. The local service providing apparatus as claimed in claim 17, wherein said local service authentication module comprises:

a second obtaining unit, configured to obtain a second password according to the connection request through a service process;

19. The local service providing apparatus as claimed in claim 17, wherein said local service authentication module comprises:

and if the connection request is not found, the service process acquires a second password according to the connection request, judges whether the first password is matched with the second password, and if the first password is matched with the second password, establishes the connection between the service process and the Web client by the service process so as to enable the service process to provide local service for the Web client through the connection.

20. The local service providing apparatus according to claim 18 or 19,

the connection request also carries a password parameter;