CN103607402A - Online game data encryption and decryption method and equipment - Google Patents

Online game data encryption and decryption method and equipment Download PDF

Info

Publication number
CN103607402A
CN103607402A CN201310610956.9A CN201310610956A CN103607402A CN 103607402 A CN103607402 A CN 103607402A CN 201310610956 A CN201310610956 A CN 201310610956A CN 103607402 A CN103607402 A CN 103607402A
Authority
CN
China
Prior art keywords
data
encryption
network game
time
game
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Granted
Application number
CN201310610956.9A
Other languages
Chinese (zh)
Other versions
CN103607402B (en
Inventor
张志豪
庄礼深
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Guangzhou Boguan Information Technology Co Ltd
Original Assignee
Guangzhou Boguan Information Technology Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Guangzhou Boguan Information Technology Co Ltd filed Critical Guangzhou Boguan Information Technology Co Ltd
Priority to CN201310610956.9A priority Critical patent/CN103607402B/en
Publication of CN103607402A publication Critical patent/CN103607402A/en
Application granted granted Critical
Publication of CN103607402B publication Critical patent/CN103607402B/en
Active legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Images

Landscapes

  • Computer And Data Communications (AREA)
  • Data Exchanges In Wide-Area Networks (AREA)
  • Storage Device Security (AREA)

Abstract

The embodiment of the invention provides an online game data encryption method. The online game data encryption method includes the steps that a first encryption method is utilized in a script engine to conduct first encryption on online game data; the encrypted online game data in the script engine are sent to a game engine, a second encryption method is utilized in the game engine to conduct second encryption on the encrypted online game data in the script engine, and then the dually encrypted online game data are acquired; the dually encrypted online game data are sent to a server side through a network, after the server side receives the dually encrypted online game data, a second decryption method corresponding to the second encryption method and a first decryption method corresponding to the first encryption method are utilized to decrypt the dually encrypted online game data respectively. According to the online game data encryption method, the risk that the data are cracked is remarkably reduced, and transmission safety of the online game data is improved.

Description

A kind of data of network game encryption and decryption method and equipment
Technical field
Embodiments of the present invention relate to technical field of data processing, and more specifically, embodiments of the present invention relate to a kind of data of network game encryption and decryption method and equipment.
Background technology
The embodiments of the present invention that be intended to for stating in claims this part provide background or context.Description is not herein because be included in just admit it is prior art in this part.
Along with the development of computer networking technology, online game application has been subject to liking of numerous Internet users.Current online game is the operational mode based on client and server end mostly, and client communicates by network and server end, Internet game data.In order to improve the fail safe of transfer of data, in prior art, there is the method for using the encryption mechanism based on " PKI-private key " to be encrypted game data.In this method, server end uses public-key data is encrypted, and client is used corresponding private key to be decrypted.This implementation has improved the fail safe of data of network game transmission to a certain extent.
Summary of the invention
But, in prior art, because server end uses public-key, data of network game is encrypted, this is just exposed in the process of client deciphering the data of " expressly ", means by decompiling can obtain data expressly, thereby have endangered data of network game safety.The encryption method of prior art, the defect that existence is easily cracked, fail safe is low.
So in the prior art, the fail safe that how to improve data of network game transmission is very bothersome process.
For this reason, be starved of a kind of improved data of network game encryption and decryption method and equipment, improve the fail safe of data of network game transmission.
In the present context, embodiments of the present invention expectation provides a kind of data of network game encryption and decryption method and equipment.
In the first aspect of embodiment of the present invention, a kind of method is provided, comprising:
In script engine, use the first encryption method to encrypt for the first time data of network game;
Data of network game after encrypting in script engine is sent in game engine, in described game engine, use the second encryption method to encrypt for the second time described data of network game after encrypting in script engine, obtain the data of network game after double-encryption;
The data of network game carrying out after double-encryption is sent to server end by network, so that after the data of network game of described server end after receiving described double-encryption, use respectively second decryption method corresponding with described the second encryption method and the data of network game after to described double-encryption is decrypted with first decryption method corresponding to described the first encryption method.
Preferably, described method also comprises:
Receive the first encryption seed and the first encryption rule that described server end sends, described the first encryption seed and described the first encryption rule are described server end real-time update;
Wherein, described first encryption method of using in script engine is encrypted and is comprised for the first time data of network game:
The first encryption seed and the first encryption rule that use described server end to send are encrypted for the first time to described data of network game.
Preferably, described second encryption method of using in described game engine is encrypted for the second time to described data of network game after encrypting in script engine, and the data of network game obtaining after double-encryption comprises:
Utilize the second encryption seed to generate black list;
Described black list is carried out to random offset and upset processing to generate random offset upset black list;
The described random offset utilize generating upsets black list described data of network game after encrypting in script engine is encrypted for the second time, obtains the data of network game after double-encryption.
In the second aspect of embodiment of the present invention, a kind of method is provided, comprising:
Receive the data of network game after double-encryption that client sends; Wherein, the data of network game after described double-encryption be by described client in script engine, use the first encryption method to encrypt for the first time data of network game and in game engine, use the second encryption method to encrypt for the second time the data of network game after encrypting in script engine after obtain;
Use respectively second decryption method corresponding with described the second encryption method and the data of network game after to described double-encryption is decrypted with first decryption method corresponding to described the first encryption method.
Preferably, describedly use respectively second decryption method corresponding with described the second encryption method and the data of network game after to described double-encryption is decrypted and comprises with first decryption method corresponding to described the first encryption method:
Data of network game after using the second decryption method corresponding with the second encryption method to double-encryption in game engine is deciphered for the first time;
Data of network game after using the first decryption method corresponding with the first encryption method to deciphering for the first time in game engine is deciphered for the second time.
Preferably, describedly use respectively second decryption method corresponding with described the second encryption method and the data of network game after to described double-encryption is decrypted and comprises with first decryption method corresponding to described the first encryption method:
Data of network game after using the second decryption method corresponding with the second encryption method to double-encryption in game engine is deciphered for the first time;
Data of network game after using the first decryption method corresponding with the first encryption method to deciphering for the first time in script engine is deciphered for the second time.
Preferably, described method also comprises:
The data of network game receiving is carried out to data integrity verifying.
Preferably, describedly the data of network game receiving carried out to data integrity verifying comprise:
In game engine He in script engine, data of network game is carried out to data length verification and data validation respectively.
In the third aspect of embodiment of the present invention, a kind of method is provided, comprising:
Use the first encryption method to encrypt for the first time data of network game;
Use the second encryption method to encrypt for the second time the data of network game after encrypting for the first time;
The data of network game carrying out after double-encryption is sent to client by network, so that after the data of network game of described client after receiving described double-encryption, data of network game after using the second decryption method corresponding with described the second encryption method to described double-encryption in game engine is deciphered for the first time, and, in script engine, use the first decryption method corresponding with the first encryption method to decipher for the second time the data of network game after deciphering for the first time.
Preferably, described use the first encryption method is encrypted and is comprised for the first time data of network game:
In game engine, use the first encryption method to encrypt for the first time data of network game;
Described use the second encryption method is encrypted and is comprised for the second time the data of network game after encrypting for the first time:
In game engine, use the second encryption method to encrypt for the second time the data of network game after encrypting for the first time.
Preferably, described use the first encryption method is encrypted and is comprised for the first time data of network game:
In script engine, use the first encryption method to encrypt for the first time data of network game;
Described use the second encryption method is encrypted and is comprised for the second time the data of network game after encrypting for the first time:
In game engine, use the second encryption method to encrypt for the second time the data of network game after encrypting in script engine.
Preferably, described use the second encryption method is encrypted and is comprised for the second time the data of network game after encrypting for the first time:
Utilize the second encryption seed to generate black list;
Described black list is carried out to random offset and upset processing to generate random offset upset black list;
Utilize the described random offset generating to upset black list the data of network game after encrypting is for the first time encrypted for the second time, obtain the data of network game after double-encryption.
In the fourth aspect of embodiment of the present invention, a kind of method is provided, comprising:
Data of network game after the double-encryption that reception server end sends; Wherein, the data of network game after described double-encryption is used the first encryption method to encrypt for the first time data of network game and used the second encryption method to encrypt for the second time rear acquisition to the data of network game after encrypting for the first time by described server end;
Data of network game after using the second decryption method corresponding with described the second encryption method to described double-encryption in game engine is deciphered for the first time;
Data of network game after using the first decryption method corresponding with the first encryption method to deciphering for the first time in script engine is deciphered for the second time.
Preferably, described method also comprises:
Receive the first deciphering seed and the first deciphering rule that described server end sends, it is described server end real-time update that described the first deciphering seed and described first is deciphered rule;
Wherein, describedly in script engine, use the first decryption method corresponding with the first encryption method that the data of network game after deciphering is for the first time deciphered and comprised for the second time:
The first deciphering seed and the first deciphering rule of using described server end to send, decipher for the second time to described data of network game.
Preferably, described method also comprises:
The data of network game receiving is carried out to data integrity verifying.
Preferably, describedly the data of network game receiving carried out to data integrity verifying comprise:
In game engine He in script engine, data of network game is carried out to data length verification and data validation respectively.
Embodiment of the present invention the 5th aspect in, a kind of client device is provided, comprising:
The first encrypting module, is configured for and in script engine, uses the first encryption method data of network game to be encrypted for the first time and the data of network game after encrypting in script engine is sent in game engine;
The second encrypting module, is configured for and in game engine, uses the second encryption method to encrypt for the second time described data of network game after encrypting in script engine, obtains the data of network game after double-encryption;
The first sending module, be configured for the data of network game carrying out after double-encryption is sent to server end by network, so that after the data of network game of described server end after receiving described double-encryption, can use respectively second decryption method corresponding with described the second encryption method and the data of network game after to described double-encryption is decrypted with first decryption method corresponding to described the first encryption method.
Preferably, described client device also comprises:
The 3rd receiver module, is configured for and receives the first encryption seed and the first encryption rule that described server end sends, and described the first encryption seed and described the first encryption rule are described server end real-time update;
Wherein, described the first encrypting module is configured for:
The first encryption seed and the first encryption rule that use described server end to send are encrypted for the first time to described data of network game.
Preferably, described the second encrypting module comprises:
The first black list generation unit, is configured for and utilizes the second encryption seed to generate black list;
The first random offset upsets black list generation unit, is configured for described black list is carried out to random offset upset processing to generate random offset upset black list;
The first ciphering unit, is configured for the described random offset utilize generating and upsets black list described data of network game after encrypting in script engine is encrypted for the second time, obtains the data of network game after double-encryption.
Embodiment of the present invention the 6th aspect in, a kind of server apparatus is provided, comprising:
The first receiver module, is configured for and receives the data of network game after double-encryption that client device sends; Wherein, the data of network game after described double-encryption be by described client device in script engine, use the first encryption method to encrypt for the first time data of network game and in game engine, use the second encryption method to encrypt for the second time the data of network game after encrypting in script engine after obtain;
The first deciphering module, the data of network game being configured for after using the second decryption method corresponding with described the second encryption method to described double-encryption is decrypted;
The second deciphering module, is configured for and uses the first decryption method corresponding with described the first encryption method to decipher for the second time the data of network game after deciphering for the first time.
Preferably, described the first deciphering module is configured for:
Data of network game after using the second decryption method corresponding with the second encryption method to double-encryption in game engine is deciphered for the first time;
Described the second deciphering module is configured for:
Data of network game after using the first decryption method corresponding with the first encryption method to deciphering for the first time in game engine is deciphered for the second time.
Preferably, described the first deciphering module is configured for:
Data of network game after using the second decryption method corresponding with the second encryption method to double-encryption in game engine is deciphered for the first time;
Described the second deciphering module is configured for:
Data of network game after using the first decryption method corresponding with the first encryption method to deciphering for the first time in script engine is deciphered for the second time.
Preferably, described server apparatus also comprises:
The first correction verification module, the data of network game being configured for receiving carries out data integrity verifying.
Preferably, described the first correction verification module is configured for:
In game engine He in script engine, data of network game is carried out to data length verification and data validation respectively.
Embodiment of the present invention the 7th aspect in, a kind of server apparatus is provided, comprising:
The 3rd encrypting module, is configured for and uses the first encryption method to encrypt for the first time data of network game;
The 4th encrypting module, is configured for and uses the second encryption method to encrypt for the second time the data of network game after encrypting for the first time;
The second sending module, be configured for the data of network game carrying out after double-encryption is sent to client by network, so that after the data of network game of described client after receiving described double-encryption, data of network game after using the second decryption method corresponding with described the second encryption method to described double-encryption in game engine is deciphered for the first time, and, in script engine, use the first decryption method corresponding with the first encryption method to decipher for the second time the data of network game after deciphering for the first time.
Preferably, described the 3rd encrypting module is configured for:
In game engine, use the first encryption method to encrypt for the first time data of network game;
Described the 4th encrypting module is configured for:
In game engine, use the second encryption method to encrypt for the second time data of network game.
Preferably, described the 3rd encrypting module is configured for:
In script engine, use the first encryption method to encrypt for the first time data of network game;
Described the 4th encrypting module is configured for:
In game engine, use the second encryption method to encrypt for the second time the data of network game after encrypting in script engine.
Preferably, described the 4th encrypting module comprises:
The second black list generation unit, is configured for and utilizes the second encryption seed to generate black list;
The second random offset upsets black list generation unit, is configured for described black list is carried out to random offset upset processing to generate random offset upset black list;
The second ciphering unit, is configured for and utilizes the described random offset upset black list generating to encrypt for the second time the data of network game after encrypting for the first time, obtains the data of network game after double-encryption.
In the eight aspect of embodiment of the present invention, a kind of client device is provided, comprising:
The second receiver module, is configured for the data of network game after the double-encryption that reception server end sends; Wherein, the data of network game after described double-encryption is used the first encryption method to encrypt for the first time data of network game and used the second encryption method to encrypt for the second time rear acquisition to the data of network game after encrypting for the first time by described server end;
The 3rd deciphering module, is configured for the data of network game of in game engine use second decryption method corresponding with described the second encryption method after to described double-encryption and deciphers for the first time;
The 4th deciphering module, is configured for the use first decryption method corresponding with the first encryption method in script engine the data of network game after deciphering is for the first time deciphered for the second time
Preferably, described client device also comprises:
The 4th receiver module, be configured for and receive the first deciphering seed and the first deciphering rule that described server end sends, and it is described server end real-time update that described the first deciphering seed and described first is deciphered rule;
Wherein, described the 4th deciphering module is configured for:
The first deciphering seed and the first deciphering rule of using described server end to send, decipher for the second time to described data of network game.
Preferably, described client device also comprises:
The second correction verification module, the data of network game being configured for receiving carries out data integrity verifying.
Preferably, described the second correction verification module is configured for:
In game engine He in script engine, data of network game is carried out to data length verification and data validation respectively.
According to the data of network game encryption of embodiment of the present invention and decryption method and equipment, can realize data of network game is carried out to encryption/decryption process twice, wherein, for client, encrypt at least one times or decrypting process carries out in script engine, due to the data in script engine be difficult to monitored, crack, thereby reduced significantly the risk that data are cracked, improved the fail safe of data of network game transmission, for user has brought better experience.
summary of the invention
The inventor finds, in prior art, server end uses public-key data of network game is encrypted, in the process being decrypted in client, " expressly " data are exposed in the process of deciphering, means by decompiling can obtain data expressly, thereby have endangered data of network game safety, have damaged user's interests.The encryption method of prior art, the defect that existence is easily cracked, fail safe is low.
For there being the problem that enciphered data is easily cracked, fail safe is low in prior art, the invention provides a kind of data of network game encryption and decryption method and equipment, can realize data of network game is carried out to encryption/decryption process twice, wherein, in client, encryption or decrypting process carry out in script engine at least one times, due to the data in script engine be difficult to monitored, crack, thereby reduced significantly the risk that data are cracked, improved the fail safe of data of network game transmission.
After having introduced basic principle of the present invention, lower mask body is introduced various non-limiting execution mode of the present invention.
application scenarios overview
First with reference to figure 1, the adaptable scene of embodiment of the present invention can be for example scene as shown in Figure 1.Can Internet game data between client and server shown in Fig. 1, method and apparatus provided by the invention is intended to improve the fail safe of transmission network game data between client and server end.
Illustrative methods
Below in conjunction with the application scenarios of Fig. 1, be described with reference to Figure 2 the method for encrypting according to the data of network game of exemplary embodiment of the invention.It should be noted that above-mentioned application scenarios only illustrates for the ease of understanding spirit of the present invention and principle, embodiments of the present invention are unrestricted in this regard.On the contrary, any scene that embodiments of the present invention can be applied to be suitable for.
As shown in Figure 2, be the flow chart of data of network game encryption method according to an embodiment of the present invention, the method is applied to client-side, and concrete example is as comprised:
S201 is used the first encryption method to encrypt for the first time data of network game in script engine.
In embodiments of the present invention, method illustrated in Figure 2 is applied to client-side, and described client and server can communicate with Internet game data.Because client need to communicate by network and server, a large amount of sensitive datas is likely intercepted, and the fail safe that therefore improves client data is very important.
In order to improve the fail safe of client data, in first embodiment of the invention, data of network game is being sent to before server, and client device has been used respectively different encryption methods to carry out twice encryption to data of network game in script engine and game engine.This is because with respect to server end, the Information Security of client is lower, therefore need to carry out twice encryption.In addition, because game engine is easier to monitored, and follow the tracks of, the difficulty of monitoring script engine is larger, therefore, first the present invention uses the first encryption method to encrypt for the first time data of network game in script engine, then in game engine, use the second encryption method to encrypt for the second time the data of network game after encrypting for the first time, like this, the data that send in game engine have been the data after script engine encryption, even if having rogue program monitors game engine, also be difficult to crack and carried out the encrypt data after the first encryption.Thus, greatly improved the fail safe of client data.It will be appreciated by persons skilled in the art that the first encryption method of using can be very flexibly, does not limit at this in script engine.
During specific implementation, method provided by the invention can also comprise: receive the first encryption seed and the first encryption rule that described server end sends, described the first encryption seed and described the first encryption rule are described server end real-time update.When client is used the first encryption method to encrypt for the first time data of network game in script engine, can use from the first encryption seed and first encryption rule of server end Real-time Obtaining data of network game is encrypted for the first time.That is to say, method provided by the invention, server end can dynamically update encryption seed and encryption rule, and the encryption seed of renewal and encryption rule are sent to client, then by client utilization, from server end, obtained the black list of the first encryption seed and the first encryption rule generation script engine.When needs are encrypted data of network game, use the black list generating to encrypt being for the first time sent to the data of network game of server.Because server end is higher with respect to the Information Security of client, can dynamically update encryption seed and encryption rule by server end, thereby make enciphered data more be difficult to be cracked, and then improve the fail safe of client data.
S202, data of network game after encrypting in script engine is sent in game engine, in described game engine, use the second encryption method to encrypt for the second time described data of network game after encrypting in script engine, obtain the data of network game after double-encryption.
During specific implementation, after script engine is used the first encryption method to encrypt for the first time data of network game, in game engine, use the second encryption method to encrypt for the second time described data of network game after encrypting in script engine.The first encryption method and the second encryption method can be different.Particularly, described second encryption method of using in described game engine is encrypted for the second time to described data of network game after encrypting in script engine, and the data of network game obtaining after double-encryption comprises: utilize the second encryption seed to generate black list; Described black list is carried out to random offset and upset processing to generate random offset upset black list; The described random offset utilize generating upsets black list described data of network game after encrypting in script engine is encrypted for the second time, obtains the data of network game after double-encryption.When the second encryption method is improved RC4 method, above-mentioned implementation method for example can comprise: utilize the second encryption seed (integer) initialization black list, black list is carried out to computing, it is carried out to random offset and upset processing to generate random offset upset black list, then utilize the random offset obtaining to upset black list data of network game is encrypted, and preserve described random offset and upset black list.
S203, the data of network game carrying out after double-encryption is sent to server end by network, so that after the data of network game of described server end after receiving described double-encryption, use respectively second decryption method corresponding with described the second encryption method and the data of network game after to described double-encryption is decrypted with first decryption method corresponding to described the first encryption method.
Client sends to server end by the data of network game after double-encryption by network.Server end receives the data of network game after described double-encryption, then use respectively the second decryption method corresponding with described the second encryption method and the data of network game after to described double-encryption is decrypted with first decryption method corresponding to described the first encryption method, to obtain the data of network game after deciphering.
In first embodiment of the invention, before user end to server sends data of network game, client device has been used respectively different encryption methods to carry out twice encryption to data of network game in script engine and game engine.Due to the data in script engine be difficult to monitored, crack, the data that send in game engine have been the data after script engine encryption, even if having rogue program monitors game engine, also be difficult to crack and carried out the encrypt data after the first encryption, thus the fail safe that has improved client data.The data of network game being sent by user end to server is the data through double-encryption, has reduced significantly the risk that data are cracked, and has improved the fail safe of data of network game transmission.
As shown in Figure 3, schematically show the flow chart of data of network game decryption method according to another embodiment of the present invention, the method concrete example is as comprised:
S301, receives the data of network game after double-encryption that client sends; Wherein, the data of network game after described double-encryption be by described client in script engine, use the first encryption method to encrypt for the first time data of network game and in game engine, use the second encryption method to encrypt for the second time the data of network game after encrypting for the first time in script engine after obtain.
This embodiment of the present invention is corresponding with the embodiment shown in Fig. 2, and the method providing in this embodiment is applied to server end, and server can communicate with Internet game data with client.The data of network game after double-encryption that server sends for receiving client.Wherein, first client device is used the first encryption method to encrypt for the first time data of network game in script engine, then in game engine, use the second encryption method to carry out encryption for the second time to the data of network game after encrypting for the first time, to obtain the data of network game after double-encryption.
S302, is used respectively second decryption method corresponding with described the second encryption method and the data of network game after to described double-encryption is decrypted with first decryption method corresponding to described the first encryption method.
During specific implementation, server, after the data of network game receiving after double-encryption, is used respectively second decryption method corresponding with described the second encryption method and the data of network game after to described double-encryption is decrypted with first decryption method corresponding to described the first encryption method.
In a kind of possible implementation, describedly use respectively second decryption method corresponding with described the second encryption method and the data of network game after to described double-encryption is decrypted and comprises with first decryption method corresponding to described the first encryption method: the data of network game of the second decryption method corresponding to use and the second encryption method after to double-encryption deciphered for the first time in game engine; Data of network game after using the first decryption method corresponding with the first encryption method to deciphering for the first time in script engine is deciphered for the second time.In this implementation, twice decrypting process carried out respectively in game engine and script engine, due to script engine exist be difficult to monitored, crack the fail safe that therefore can improve decrypting process.Corresponding the first encryption method of first decryption method, corresponding the second encryption method of the second decryption method, concrete encrypting/decrypting method can be made an appointment by client and server end, at this, does not limit.Especially, server end can also dynamically update in script engine and be encrypted/the first encrypting/decrypting method of deciphering, and the first encrypt/decrypt seed of real-time update and the first encrypt/decrypt rule are sent to client, make it generate corresponding black list/decryption table.
In the implementation of another possibility, describedly use respectively second decryption method corresponding with described the second encryption method and the data of network game after to described double-encryption is decrypted and comprises with first decryption method corresponding to described the first encryption method: the data of network game of the second decryption method corresponding to use and the second encryption method after to double-encryption deciphered for the first time in game engine; Data of network game after using the first decryption method corresponding with the first encryption method to deciphering for the first time in game engine is deciphered for the second time.In this implementation, due to the running environment of server end, can think safely, the running status of rogue program real-time analysis server therefore in order to improve the efficiency of deciphering, can all not realize twice decryption processing in game engine.
For check data wraps in the situation that whether has loss in transmitting procedure, method provided by the invention also further comprises: the data of network game receiving is carried out to data integrity verifying.During specific implementation, the data of network game receiving is carried out to data integrity verifying and comprise: in game engine He in script engine, data of network game is carried out to data length verification and data validation respectively.It should be noted that, data integrity verifying all can be realized in game engine layer and script engine layer.
When game engine layer carries out data integrity verifying to data of network game, comprise data of network game is carried out to data length verification and data validation.Data length verification is to be foundation according to the described length in the packet header of network packet, and whether check data length is correct.In game engine, carry out the data of verification owing to processing through overcompression, so whether the packet that data length verification is mainly used in after verification compression is complete.While carrying out data validation in game engine, whether the data content that judgement decrypts is effective, if invalid, illustrates that data exist loss.
When script engine layer carries out data integrity verifying to data of network game, comprise data of network game is carried out to agreement length check and data validation.Wherein, with network communication protocol packet format, be defined as according to judging that whether the protocol package after decompress(ion) is complete during agreement length check.For example; data of network game wraps in while transmitting can arrange host-host protocol conventionally in transmission both sides; for example arranging certain byte is fixed value; when carrying out data length verification; can judge that whether the protocol package after decompress(ion) is complete by protocol package formal definition; it is to carry out data length verification in game engine slightly different, is that the content by data judges that whether data are complete.When script engine layer carries out data validation to data of network game, also can utilize decryption method inspection, if data are modified, the data that decrypt are invalid data.The object that data of network game is carried out to twice checking treatment is to prevent that the rogue program of monitoring client from revising data of network game, to improve the fail safe of data.
In second embodiment of the invention, server end receives client device and in script engine and game engine, has used respectively different encryption methods to carry out the data of network game after twice encryption, and data of network game is decrypted to processing.The data of network game sending due to user end to server is the data through double-encryption, has reduced significantly the risk that data are cracked, and has improved the fail safe of data of network game transmission.
As shown in Figure 4, for according to the flow chart of the data of network game encryption method of further embodiment of this invention, shown in method for example can comprise:
S401, is used the first encryption method to encrypt for the first time data of network game.
S402, is used the second encryption method to encrypt for the second time the data of network game after encrypting for the first time.
S403, the data of network game carrying out after double-encryption is sent to client by network, so that after the data of network game of described client after receiving described double-encryption, data of network game after using the second decryption method corresponding with described the second encryption method to described double-encryption in game engine is deciphered for the first time, and, in script engine, use the first decryption method corresponding with the first encryption method to decipher for the second time the data of network game after deciphering for the first time.
Method shown in Fig. 4 of the present invention is applied to server end, and described server can communicate with Internet game data with client.Before server sends data of network game to client, server is used respectively different encryption methods to carry out twice encryption to data of network game, to obtain the data of network game after double-encryption.
During specific implementation, in a kind of possible implementation, server can be used different encryption methods to be encrypted data of network game respectively in script engine He in game engine.Wherein, described use the first encryption method is encrypted and is comprised for the first time data of network game: in script engine, use the first encryption method to encrypt for the first time data of network game.Described use the second encryption method is encrypted and is comprised for the second time the data of network game after encrypting for the first time: in game engine, use the second encryption method to encrypt for the second time the data of network game after encrypting in script engine.Because game engine is easier to monitored, and follow the tracks of, the difficulty of monitoring script engine is larger, therefore, first the present invention uses the first encryption method to encrypt for the first time data of network game in script engine, then in game engine, use the second encryption method to encrypt for the second time the data of network game after encrypting for the first time, like this, the data that send in game engine have been the data after script engine encryption, even if having rogue program monitors game engine, also be difficult to crack and carried out the encrypt data after the first encryption.Thus, greatly improved the fail safe of data.During specific implementation, the first encryption method and the second encryption method can be set as required, at this, do not limit.Wherein, the script engine encryption method that server end is used i.e. the first encryption method can be dynamic real-time update.
In a kind of possible implementation, in order to improve the efficiency of encryption, server can carry out in game engine, using different encryption methods to carry out twice encryption to data of network game.Particularly, described use the first encryption method is encrypted and is comprised for the first time data of network game: in game engine, use the first encryption method to encrypt for the first time data of network game; Described use the second encryption method is encrypted and is comprised for the second time the data of network game after encrypting for the first time: in game engine, use the second encryption method to encrypt for the second time data of network game.Because the running environment of server end is comparatively safe, in order to take into account the efficiency of encryption, twice ciphering process all can be carried out in game engine, just use different encryption methods to carry out double-encryption.Certainly, it will be appreciated by persons skilled in the art that in order to improve the fail safe of data, also can carry out multi-enciphering processing.
When described use the first encryption method is encrypted for the first time and is specially while using the first encryption method to encrypt for the first time data of network game in script engine data of network game, can utilize the first encryption seed of server end real-time update and the black list of the first encryption rule generation script engine, use the black list generating to encrypt for the first time data of network game.
Similarly, when described use the first encryption method is encrypted for the first time and is specially while using the first encryption method to encrypt for the first time data of network game in game engine data of network game, can utilize the first encryption seed of server end real-time update and the black list that the first encryption rule generates game engine, use the black list generating to encrypt for the first time data of network game.
During specific implementation, in game engine, use the second encryption method that data of network game is encrypted and comprised for the second time: to utilize the second encryption seed to generate black list; Described black list is carried out to random offset and upset processing to generate random offset upset black list; Utilize the described random offset generating to upset black list the data of network game after encrypting is for the first time encrypted for the second time, obtain the data of network game after double-encryption.Wherein, the second encryption method can be improved RC4 method.
Then, server end sends to client by the data of network game after double-encryption is processed, after the data of network game of client after receiving described double-encryption, first the data of network game after using the second decryption method corresponding with described the second encryption method to described double-encryption in game engine is deciphered for the first time, then, data of network game after using the first decryption method corresponding with the first encryption method to deciphering for the first time in script engine carries out decryption processing for the second time, to obtain the data of network game after deciphering.
As shown in Figure 5, be the flow chart of data of network game decryption method according to yet another embodiment of the invention, shown in method for example can comprise:
S501, the data of network game after the double-encryption that reception server end sends; Wherein, the data of network game after described double-encryption is used the first encryption method to encrypt for the first time data of network game and used the second encryption method to encrypt for the second time rear acquisition to the data of network game after encrypting for the first time by described server end.
The method of this embodiment is corresponding with method embodiment illustrated in fig. 4.Data of network game after the double-encryption that client server end sends.Server end can be referring to the description of last embodiment to the encryption process of data of network game.
S502, the data of network game after using the second decryption method corresponding with described the second encryption method to described double-encryption in game engine is deciphered for the first time.
S503 is used the first decryption method corresponding with the first encryption method to decipher for the second time the data of network game after deciphering for the first time in script engine.
Because the fail safe of client is lower, so in this embodiment of the present invention, twice decrypting process carries out respectively in game engine and script engine.First, data of network game after game engine is used second decryption method corresponding with described the second encryption method to described double-encryption is deciphered for the first time, then, in script engine, use the first decryption method corresponding with the first encryption method to decipher for the second time the data of network game after deciphering for the first time.Because the data before script engine processes are all encrypt datas, can protect well the fail safe of game data.Meanwhile, because script engine deciphering does not have game engine deciphering efficiency high, therefore decrypting process carries out in game engine for the first time, can improve deciphering efficiency.
During specific implementation, client can also receive the first deciphering seed and the first deciphering rule that described server end sends, and it is described server end real-time update that described the first deciphering seed and described first is deciphered rule.When the data of network game after client is used the first decryption method corresponding with the first encryption method to deciphering for the first time in script engine is deciphered for the second time, the first deciphering seed and the first deciphering rule that can use described server end to send, decipher for the second time to described data of network game.That is to say, server end can dynamically update encryption (deciphering) seed and encryption (deciphering) rule, and encryption (deciphering) seed and encryption (deciphering) rule upgraded are sent to client, then by client utilization, from server end, obtain first and encrypt the black list (decryption table) that (deciphering) seed and first is encrypted (deciphering) regular generation script engine.When needs are decrypted data of network game, use the decryption table generating to be decrypted processing to the data of network game receiving.Because server end is higher with respect to the Information Security of client, can dynamically update encryption (deciphering) seed and encryption (deciphering) rule by server end, thereby make encryption method more be difficult to be cracked, and then improve the fail safe of client data.
For check data wraps in the situation that whether has loss in transmitting procedure, method provided by the invention also further comprises: the data of network game receiving is carried out to data integrity verifying.During specific implementation, the data of network game receiving is carried out to data integrity verifying and comprise: in game engine He in script engine, data of network game is carried out to data length verification and data validation respectively.
When game engine layer carries out data integrity verifying to data of network game, comprise data of network game is carried out to data length verification and data validation.Data length verification is to be foundation according to the described length in the packet header of network packet, and whether check data length is correct.In game engine, carry out the data of verification owing to processing through overcompression, so whether the packet that data length verification is mainly used in after verification compression is complete.While carrying out data validation in game engine, whether the data content that judgement decrypts is effective, if invalid, illustrates that data exist loss.
When script engine layer carries out data integrity verifying to data of network game, comprise data of network game is carried out to agreement length check and data validation.Wherein, with network communication protocol packet format, be defined as according to judging that whether the protocol package after decompress(ion) is complete during agreement length check.For example; data of network game wraps in while transmitting can arrange host-host protocol conventionally in transmission both sides; for example arranging certain byte is fixed value; when carrying out data length verification; can judge that whether the protocol package after decompress(ion) is complete by protocol package formal definition; it is to carry out data length verification in game engine slightly different, is that the content by data judges that whether data are complete.When script engine layer carries out data validation to data of network game, also can utilize decryption method inspection, if data are modified, the data that decrypt are invalid data.The object that data of network game is carried out to twice checking treatment is to prevent that the rogue program of monitoring client from revising data of network game, to improve the fail safe of data.
In fourth embodiment of the invention, the game data of client server after double-encryption is processed, and in game engine He in script engine, use corresponding decryption method to be decrypted processing respectively, because being difficult to data monitored and before script engine processes, script engine is encrypt data, therefore data are difficult to be cracked, and have significantly improved the fail safe of data of network game.
It should be noted that, above embodiment all with double-encryption in order to describe, it will be appreciated by persons skilled in the art that method provided by the invention can also comprise carries out multi-enciphering processing to data of network game, can carry out with reference to above-described embodiment, then this does not repeat.
exemplary apparatus
After having introduced according to the method for exemplary embodiment of the invention, next, with reference to 6 couples, figure according to an embodiment of the invention client device be introduced.Described client device 600 for example can comprise:
The first encrypting module 601, is configured for and in script engine, uses the first encryption method data of network game to be encrypted for the first time and the data of network game after encrypting in script engine is sent in game engine;
The second encrypting module 602, is configured for and in game engine, uses the second encryption method to encrypt for the second time described data of network game after encrypting in script engine, obtains the data of network game after double-encryption;
The first sending module 603, be configured for the data of network game carrying out after double-encryption is sent to server end by network, so that after the data of network game of described server end after receiving described double-encryption, can use respectively second decryption method corresponding with described the second encryption method and the data of network game after to described double-encryption is decrypted with first decryption method corresponding to described the first encryption method.
Preferably, described client device 600 also comprises:
The 3rd receiver module 604, is configured for and receives the first encryption seed and the first encryption rule that described server end sends, and described the first encryption seed and described the first encryption rule are described server end real-time update;
Wherein, described the first encrypting module 601 is configured for:
The first encryption seed and the first encryption rule that use described server end to send are encrypted for the first time to described data of network game.
Preferably, described the second encrypting module 602 comprises:
The first black list generation unit, is configured for and utilizes the second encryption seed to generate black list;
The first random offset upsets black list generation unit, is configured for described black list is carried out to random offset upset processing to generate random offset upset black list;
The first ciphering unit, is configured for the described random offset utilize generating and upsets black list described data of network game after encrypting in script engine is encrypted for the second time, obtains the data of network game after double-encryption.
As shown in Figure 7, be server apparatus block diagram according to another embodiment of the present invention, described server apparatus 700 for example can comprise:
The first receiver module 701, is configured for and receives the data of network game after double-encryption that client device sends; Wherein, the data of network game after described double-encryption be by described client device in script engine, use the first encryption method to encrypt for the first time data of network game and in game engine, use the second encryption method to encrypt for the second time the data of network game after encrypting in script engine after obtain;
The first deciphering module 702, the data of network game being configured for after using the second decryption method corresponding with described the second encryption method to described double-encryption is decrypted;
The second deciphering module 703, is configured for and uses the first decryption method corresponding with described the first encryption method to decipher for the second time the data of network game after deciphering for the first time.
Preferably, described the first deciphering module 702 is configured for:
Data of network game after using the second decryption method corresponding with the second encryption method to double-encryption in game engine is deciphered for the first time;
Described the second deciphering module 703 is configured for:
Data of network game after using the first decryption method corresponding with the first encryption method to deciphering for the first time in game engine is deciphered for the second time.
Preferably, described the first deciphering module 702 is configured for:
Data of network game after using the second decryption method corresponding with the second encryption method to double-encryption in game engine is deciphered for the first time;
Described the second deciphering module 703 is configured for:
Data of network game after using the first decryption method corresponding with the first encryption method to deciphering for the first time in script engine is deciphered for the second time.
Preferably, described server apparatus 700 also comprises:
The first correction verification module 704, the data of network game being configured for receiving carries out data integrity verifying.
Preferably, described the first correction verification module 704 is configured for:
In game engine He in script engine, data of network game is carried out to data length verification and data validation respectively.
As shown in Figure 8, for according to server apparatus 800 block diagrams of further embodiment of this invention, described server apparatus 800 for example can comprise:
The 3rd encrypting module 801, is configured for and uses the first encryption method to encrypt for the first time data of network game;
The 4th encrypting module 802, is configured for and uses the second encryption method to encrypt for the second time the data of network game after encrypting for the first time;
The second sending module 803, be configured for the data of network game carrying out after double-encryption is sent to client by network, so that after the data of network game of described client after receiving described double-encryption, data of network game after using the second decryption method corresponding with described the second encryption method to described double-encryption in game engine is deciphered for the first time, and, in script engine, use the first decryption method corresponding with the first encryption method to decipher for the second time the data of network game after deciphering for the first time.
Preferably, described the 3rd encrypting module 801 is configured for:
In game engine, use the first encryption method to encrypt for the first time data of network game;
Described the 4th encrypting module 802 is configured for:
In game engine, use the second encryption method to encrypt for the second time the data of network game after encrypting for the first time.
Preferably, described the 3rd encrypting module 801 is configured for:
In script engine, use the first encryption method to encrypt for the first time data of network game;
Described the 4th encrypting module 802 is configured for:
In game engine, use the second encryption method to encrypt for the second time the data of network game after encrypting in script engine.
Preferably, described the 4th encrypting module 802 comprises:
The second black list generation unit, is configured for and utilizes the second encryption seed to generate black list;
The second random offset upsets black list generation unit, is configured for described black list is carried out to random offset upset processing to generate random offset upset black list;
The second ciphering unit, is configured for and utilizes the described random offset upset black list generating to encrypt for the second time the data of network game after encrypting for the first time, obtains the data of network game after double-encryption.
As shown in Figure 9, be client device block diagram according to yet another embodiment of the invention, described client device 900 for example can comprise:
The second receiver module 901, is configured for the data of network game after the double-encryption that reception server end sends; Wherein, the data of network game after described double-encryption is used the first encryption method to encrypt for the first time data of network game and used the second encryption method to encrypt for the second time rear acquisition to the data of network game after encrypting for the first time by described server end;
The 3rd deciphering module 902, is configured for the data of network game of in game engine use second decryption method corresponding with described the second encryption method after to described double-encryption and deciphers for the first time;
The 4th deciphering module 903, is configured for the use first decryption method corresponding with the first encryption method in script engine the data of network game after deciphering is for the first time deciphered for the second time.
Preferably, described client device 900 also comprises:
The 4th receiver module 904, be configured for and receive the first deciphering seed and the first deciphering rule that described server end sends, and it is described server end real-time update that described the first deciphering seed and described first is deciphered rule;
Wherein, described the 4th deciphering module 903 is configured for:
The first deciphering seed and the first deciphering rule of using described server end to send, decipher for the second time to described data of network game.
Preferably, described client device 900 also comprises:
The second correction verification module 905, the data of network game being configured for receiving carries out data integrity verifying.
Preferably, described the second correction verification module 905 is configured for:
In game engine He in script engine, data of network game is carried out to data length verification and data validation respectively.
Although it should be noted that some devices or the sub-device of having mentioned equipment in above-detailed, this division is only exemplary not enforceable.In fact, according to other execution modes of the present invention, the feature of above-described two or more devices and function can be specialized in a device.Otherwise, the feature of an above-described device and function can Further Division for to be specialized by a plurality of devices.
In addition, although described in the accompanying drawings the operation of the inventive method with particular order,, this not requires or hint must be carried out these operations according to this particular order, or the operation shown in must carrying out all could realize the result of expectation.Additionally or alternatively, can omit some step, a plurality of steps be merged into a step and carry out, and/or a step is decomposed into a plurality of steps carries out.
Although described spirit of the present invention and principle with reference to some embodiments, but should be appreciated that, the present invention is not limited to disclosed embodiment, the division of each side is not meant that to the feature in these aspects can not combine to be benefited yet, and this division is only the convenience in order to explain.The present invention is intended to contain interior included various modifications and the equivalent arrangements of spirit and scope of claims.
Accompanying drawing explanation
By reference to accompanying drawing, read detailed description below, above-mentioned and other objects of exemplary embodiment of the invention, the feature and advantage easy to understand that will become.In the accompanying drawings, in exemplary and nonrestrictive mode, show some execution modes of the present invention, wherein:
Fig. 1 schematically shows the application scenarios that embodiment of the present invention can realize therein;
Fig. 2 schematically shows the flow chart of data of network game encryption method according to an embodiment of the invention;
Fig. 3 schematically shows the flow chart of data of network game decryption method according to another embodiment of the present invention;
Fig. 4 schematically shows according to the flow chart of the data of network game encryption method of further embodiment of this invention;
Fig. 5 schematically shows the flow chart of data of network game decryption method according to yet another embodiment of the invention;
Fig. 6 schematically shows client device block diagram according to an embodiment of the invention;
Fig. 7 schematically shows server apparatus block diagram according to another embodiment of the present invention;
Fig. 8 schematically shows the server apparatus block diagram according to further embodiment of this invention;
Fig. 9 schematically shows client device block diagram according to yet another embodiment of the invention.
In the accompanying drawings, identical or corresponding label represents identical or corresponding part.
Embodiment
Below with reference to some illustrative embodiments, principle of the present invention and spirit are described.Should be appreciated that providing these execution modes is only used to make those skilled in the art can understand better and then realize the present invention, and not limit the scope of the invention by any way.On the contrary, it is in order to make the disclosure more thorough and complete that these execution modes are provided, and the scope of the present disclosure intactly can be conveyed to those skilled in the art.
One skilled in the art will appreciate that embodiments of the present invention can be implemented as a kind of system, device, equipment, method or computer program.Therefore, the disclosure can specific implementation be following form, that is: hardware, software (comprising firmware, resident software, microcode etc.), or the form of hardware and software combination completely completely.
According to the embodiment of the present invention, the method and apparatus that a kind of data of network game is encrypted and deciphered has been proposed.In this article, it will be appreciated that, related term " game engine " can be for the games system edited that represents to have write or the core component of interactive realtime graphic application program, and its core content that is Games Software can provide the direct control interface of resource.Related term " script engine " is generally used for representing a kind of interpreter of computer programming language, for explaining the program documentaion of carrying out user, is translated into machine code that computer can carry out to complete corresponding function.In game application scenarios, " script engine " can be called " script virtual machine " again, is a kind of state machine of carrying out command sequence, and it is responsible for script being resolved to command sequence and carrying out according to instruction when carrying out script." script engine " for according to game play logical organization resource, " game engine " provides the direct control interface of resource.In addition, any number of elements in accompanying drawing is all unrestricted for example, and any name is all only for distinguishing, and does not have any limitation.
Below with reference to some representative embodiments of the present invention, explain in detail principle of the present invention and spirit.

Claims (20)

1. a method, comprising:
In script engine, use the first encryption method to encrypt for the first time data of network game;
Data of network game after encrypting in script engine is sent in game engine, in described game engine, use the second encryption method to encrypt for the second time described data of network game after encrypting in script engine, obtain the data of network game after double-encryption;
The data of network game carrying out after double-encryption is sent to server end by network, so that after the data of network game of described server end after receiving described double-encryption, use respectively second decryption method corresponding with described the second encryption method and the data of network game after to described double-encryption is decrypted with first decryption method corresponding to described the first encryption method.
2. method according to claim 1, also comprises:
Receive the first encryption seed and the first encryption rule that described server end sends, described the first encryption seed and described the first encryption rule are described server end real-time update;
Wherein, described first encryption method of using in script engine is encrypted and is comprised for the first time data of network game:
The first encryption seed and the first encryption rule that use described server end to send are encrypted for the first time to described data of network game.
3. method according to claim 1, wherein, described second encryption method of using in described game engine is encrypted for the second time to described data of network game after encrypting in script engine, and the data of network game obtaining after double-encryption comprises:
Utilize the second encryption seed to generate black list;
Described black list is carried out to random offset and upset processing to generate random offset upset black list;
The described random offset utilize generating upsets black list described data of network game after encrypting in script engine is encrypted for the second time, obtains the data of network game after double-encryption.
4. a method, comprising:
Receive the data of network game after double-encryption that client sends; Wherein, the data of network game after described double-encryption be by described client in script engine, use the first encryption method to encrypt for the first time data of network game and in game engine, use the second encryption method to encrypt for the second time the data of network game after encrypting in script engine after obtain;
Use respectively second decryption method corresponding with described the second encryption method and the data of network game after to described double-encryption is decrypted with first decryption method corresponding to described the first encryption method.
5. method according to claim 4, wherein, describedly use respectively second decryption method corresponding with described the second encryption method and the data of network game after to described double-encryption is decrypted and comprises with first decryption method corresponding to described the first encryption method:
Data of network game after using the second decryption method corresponding with the second encryption method to double-encryption in game engine is deciphered for the first time;
Data of network game after using the first decryption method corresponding with the first encryption method to deciphering for the first time in game engine is deciphered for the second time.
6. method according to claim 4, wherein, describedly use respectively second decryption method corresponding with described the second encryption method and the data of network game after to described double-encryption is decrypted and comprises with first decryption method corresponding to described the first encryption method:
Data of network game after using the second decryption method corresponding with the second encryption method to double-encryption in game engine is deciphered for the first time;
Data of network game after using the first decryption method corresponding with the first encryption method to deciphering for the first time in script engine is deciphered for the second time.
7. method according to claim 4, also comprises:
The data of network game receiving is carried out to data integrity verifying.
8. method according to claim 7, wherein, describedly the data of network game receiving is carried out to data integrity verifying comprise:
In game engine He in script engine, data of network game is carried out to data length verification and data validation respectively.
9. a method, comprising:
Use the first encryption method to encrypt for the first time data of network game;
Use the second encryption method to encrypt for the second time the data of network game after encrypting for the first time;
The data of network game carrying out after double-encryption is sent to client by network, so that after the data of network game of described client after receiving described double-encryption, data of network game after using the second decryption method corresponding with described the second encryption method to described double-encryption in game engine is deciphered for the first time, and, in script engine, use the first decryption method corresponding with the first encryption method to decipher for the second time the data of network game after deciphering for the first time.
10. method according to claim 9, wherein, described use the first encryption method is encrypted and is comprised for the first time data of network game:
In game engine, use the first encryption method to encrypt for the first time data of network game;
Described use the second encryption method is encrypted and is comprised for the second time the data of network game after encrypting for the first time:
In game engine, use the second encryption method to encrypt for the second time data of network game.
11. methods according to claim 9, wherein, described use the first encryption method is encrypted and is comprised for the first time data of network game:
In script engine, use the first encryption method to encrypt for the first time data of network game;
Described use the second encryption method is encrypted and is comprised for the second time the data of network game after encrypting for the first time:
In game engine, use the second encryption method to encrypt for the second time the data of network game after encrypting in script engine.
12. according to the method described in claim 9-11 any one, and wherein, described use the second encryption method is encrypted and comprised for the second time the data of network game after encrypting for the first time:
Utilize the second encryption seed to generate black list;
Described black list is carried out to random offset and upset processing to generate random offset upset black list;
Utilize the described random offset generating to upset black list the data of network game after encrypting is for the first time encrypted for the second time, obtain the data of network game after double-encryption.
13. 1 kinds of methods, comprising:
Data of network game after the double-encryption that reception server end sends; Wherein, the data of network game after described double-encryption is used the first encryption method to encrypt for the first time data of network game and used the second encryption method to encrypt for the second time rear acquisition to the data of network game after encrypting for the first time by described server end;
Data of network game after using the second decryption method corresponding with described the second encryption method to described double-encryption in game engine is deciphered for the first time;
Data of network game after using the first decryption method corresponding with the first encryption method to deciphering for the first time in script engine is deciphered for the second time.
14. methods according to claim 13, described method also comprises:
Receive the first deciphering seed and the first deciphering rule that described server end sends, it is described server end real-time update that described the first deciphering seed and described first is deciphered rule;
Wherein, describedly in script engine, use the first decryption method corresponding with the first encryption method that the data of network game after deciphering is for the first time deciphered and comprised for the second time:
The first deciphering seed and the first deciphering rule of using described server end to send, decipher for the second time to described data of network game.
15. methods according to claim 13, also comprise:
The data of network game receiving is carried out to data integrity verifying.
16. methods according to claim 15, wherein, the described data of network game to reception carries out data integrity verifying and comprises:
In game engine He in script engine, data of network game is carried out to data length verification and data validation respectively.
17. 1 kinds of client devices, comprising:
The first encrypting module, is configured for and in script engine, uses the first encryption method data of network game to be encrypted for the first time and the data of network game after encrypting in script engine is sent in game engine;
The second encrypting module, is configured for and in game engine, uses the second encryption method to encrypt for the second time described data of network game after encrypting in script engine, obtains the data of network game after double-encryption;
The first sending module, be configured for the data of network game carrying out after double-encryption is sent to server end by network, so that after the data of network game of described server end after receiving described double-encryption, can use respectively second decryption method corresponding with described the second encryption method and the data of network game after to described double-encryption is decrypted with first decryption method corresponding to described the first encryption method.
18. 1 kinds of server apparatus, comprising:
The first receiver module, is configured for and receives the data of network game after double-encryption that client device sends; Wherein, the data of network game after described double-encryption be by described client device in script engine, use the first encryption method to encrypt for the first time data of network game and in game engine, use the second encryption method to encrypt for the second time the data of network game after encrypting in script engine after obtain;
The first deciphering module, the data of network game being configured for after using the second decryption method corresponding with described the second encryption method to described double-encryption is decrypted;
The second deciphering module, is configured for and uses the first decryption method corresponding with described the first encryption method to decipher for the second time the data of network game after deciphering for the first time.
19. 1 kinds of server apparatus, comprising:
The 3rd encrypting module, is configured for and uses the first encryption method to encrypt for the first time data of network game;
The 4th encrypting module, is configured for and uses the second encryption method to encrypt for the second time the data of network game after encrypting for the first time;
The second sending module, be configured for the data of network game carrying out after double-encryption is sent to client by network, so that after the data of network game of described client after receiving described double-encryption, data of network game after using the second decryption method corresponding with described the second encryption method to described double-encryption in game engine is deciphered for the first time, and, in script engine, use the first decryption method corresponding with the first encryption method to decipher for the second time the data of network game after deciphering for the first time.
20. 1 kinds of client devices, comprising:
The second receiver module, is configured for the data of network game after the double-encryption that reception server end sends; Wherein, the data of network game after described double-encryption is used the first encryption method to encrypt for the first time data of network game and used the second encryption method to encrypt for the second time rear acquisition to the data of network game after encrypting for the first time by described server end;
The 3rd deciphering module, is configured for the data of network game of in game engine use second decryption method corresponding with described the second encryption method after to described double-encryption and deciphers for the first time;
The 4th deciphering module, is configured for the use first decryption method corresponding with the first encryption method in script engine the data of network game after deciphering is for the first time deciphered for the second time.
CN201310610956.9A 2013-11-26 2013-11-26 A kind of online game data encryption and decryption method and equipment Active CN103607402B (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN201310610956.9A CN103607402B (en) 2013-11-26 2013-11-26 A kind of online game data encryption and decryption method and equipment

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN201310610956.9A CN103607402B (en) 2013-11-26 2013-11-26 A kind of online game data encryption and decryption method and equipment

Publications (2)

Publication Number Publication Date
CN103607402A true CN103607402A (en) 2014-02-26
CN103607402B CN103607402B (en) 2016-11-23

Family

ID=50125602

Family Applications (1)

Application Number Title Priority Date Filing Date
CN201310610956.9A Active CN103607402B (en) 2013-11-26 2013-11-26 A kind of online game data encryption and decryption method and equipment

Country Status (1)

Country Link
CN (1) CN103607402B (en)

Cited By (12)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN105847304A (en) * 2016-06-21 2016-08-10 北京中电普华信息技术有限公司 File decryption method and device
CN106209359A (en) * 2016-07-14 2016-12-07 北京白鹭时代信息技术有限公司 A kind of decoding and the method and device decompressing encrypted lottery bag
CN106293703A (en) * 2016-07-27 2017-01-04 河南金色童年文化有限公司 The method automatically generated based on developmental game software under particular model
CN106411880A (en) * 2016-09-27 2017-02-15 北京奇虎科技有限公司 Security encryption and decryption methods and devices for game data
CN106549939A (en) * 2016-10-11 2017-03-29 深圳市永佳天成科技发展有限公司 Intelligent access control system data processing method and device
CN107040918A (en) * 2016-02-03 2017-08-11 上海方付通商务服务有限公司 It is a kind of to apply safe Enhancement Method, system and the client with the system
CN107590026A (en) * 2017-08-23 2018-01-16 深圳市优品壹电子有限公司 A kind of data back up method and device
CN108074151A (en) * 2016-11-14 2018-05-25 北京京东尚科信息技术有限公司 The anti-brush list method and system of e-commerce
CN108306868A (en) * 2018-01-19 2018-07-20 中国科学院半导体研究所 Data security communication device and method
CN108923916A (en) * 2018-06-22 2018-11-30 武汉彤科电力科技有限公司 A kind of terminal symmetric key update exchange method
CN109478221A (en) * 2016-05-27 2019-03-15 查特通信营运有限责任公司 The safe transmission of sensitive data
CN111191266A (en) * 2019-12-31 2020-05-22 中国广核电力股份有限公司 File encryption method and system and decryption method and system

Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20030229779A1 (en) * 2002-06-10 2003-12-11 Morais Dinarte R. Security gateway for online console-based gaming
CN1627682A (en) * 2003-12-12 2005-06-15 华为技术有限公司 Method for creating dynamic cipher at time of building connection in network transmission
CN1929367A (en) * 2005-09-10 2007-03-14 腾讯科技(深圳)有限公司 Game data-transmission method and system

Patent Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20030229779A1 (en) * 2002-06-10 2003-12-11 Morais Dinarte R. Security gateway for online console-based gaming
CN1627682A (en) * 2003-12-12 2005-06-15 华为技术有限公司 Method for creating dynamic cipher at time of building connection in network transmission
CN1929367A (en) * 2005-09-10 2007-03-14 腾讯科技(深圳)有限公司 Game data-transmission method and system

Cited By (15)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN107040918B (en) * 2016-02-03 2021-03-09 上海方付通商务服务有限公司 Application security enhancement method and system and client with system
CN107040918A (en) * 2016-02-03 2017-08-11 上海方付通商务服务有限公司 It is a kind of to apply safe Enhancement Method, system and the client with the system
CN109478221B (en) * 2016-05-27 2022-03-15 查特通信营运有限责任公司 Secure transmission of sensitive data
CN109478221A (en) * 2016-05-27 2019-03-15 查特通信营运有限责任公司 The safe transmission of sensitive data
CN105847304A (en) * 2016-06-21 2016-08-10 北京中电普华信息技术有限公司 File decryption method and device
CN106209359A (en) * 2016-07-14 2016-12-07 北京白鹭时代信息技术有限公司 A kind of decoding and the method and device decompressing encrypted lottery bag
CN106293703A (en) * 2016-07-27 2017-01-04 河南金色童年文化有限公司 The method automatically generated based on developmental game software under particular model
CN106411880A (en) * 2016-09-27 2017-02-15 北京奇虎科技有限公司 Security encryption and decryption methods and devices for game data
CN106549939A (en) * 2016-10-11 2017-03-29 深圳市永佳天成科技发展有限公司 Intelligent access control system data processing method and device
CN108074151A (en) * 2016-11-14 2018-05-25 北京京东尚科信息技术有限公司 The anti-brush list method and system of e-commerce
CN108074151B (en) * 2016-11-14 2021-09-03 北京京东尚科信息技术有限公司 Method and system for preventing bill from being refreshed in electronic commerce
CN107590026A (en) * 2017-08-23 2018-01-16 深圳市优品壹电子有限公司 A kind of data back up method and device
CN108306868A (en) * 2018-01-19 2018-07-20 中国科学院半导体研究所 Data security communication device and method
CN108923916A (en) * 2018-06-22 2018-11-30 武汉彤科电力科技有限公司 A kind of terminal symmetric key update exchange method
CN111191266A (en) * 2019-12-31 2020-05-22 中国广核电力股份有限公司 File encryption method and system and decryption method and system

Also Published As

Publication number Publication date
CN103607402B (en) 2016-11-23

Similar Documents

Publication Publication Date Title
CN103607402A (en) Online game data encryption and decryption method and equipment
US10140612B1 (en) POS system with white box encryption key sharing
CN103716330B (en) A kind of digital content encryption and decryption method and equipment
CN108196867A (en) Device for upgrading firmware, equipment and its firmware upgrade method of equipment
CN113014444B (en) Internet of things equipment production test system and safety protection method
CN101682628A (en) Secure communications
CN109428867A (en) A kind of message encipher-decipher method, network equipment and system
CN101163044A (en) Remote updating method and system for information safety equipment
CN105491073B (en) Data downloading method, device and system
CN108566368B (en) Data processing method, server and diagnosis connector
CN105099676A (en) User login method, user terminal and server
CN110025955B (en) Information processing method, terminal, computer-readable storage medium, and computer device
CN104378379A (en) Encryption transmission method, equipment and system for digital content
CN109039657A (en) Cryptographic key negotiation method, equipment, terminal, storage medium and system
CN101304310A (en) Method for reinforcing network SSL service
JP5827724B2 (en) Method and apparatus for entering data
US20230229775A1 (en) Firmware data verification device and method, and firmware updating device, method and system
CN105791258A (en) Data transmission method, terminal and open platform
CN104767766A (en) Web Service interface verification method, Web Service server and client side
CN105191332B (en) For the method and apparatus of the embedded watermark in unpressed video data
CN109922022A (en) Internet of Things communication means, platform, terminal and system
CN117240625B (en) Tamper-resistant data processing method and device and electronic equipment
CN113395406A (en) Encryption authentication method and system based on power equipment fingerprints
CN113630412A (en) Resource downloading method, resource downloading device, electronic equipment and storage medium
CN112749182B (en) Method for accessing Oracle database by proxy, audit terminal, device and computer readable storage medium

Legal Events

Date Code Title Description
C06 Publication
PB01 Publication
SE01 Entry into force of request for substantive examination
SE01 Entry into force of request for substantive examination
C14 Grant of patent or utility model
GR01 Patent grant