CN104038490B

CN104038490B - A kind of communication security method of calibration and its device

Info

Publication number: CN104038490B
Application number: CN201410253562.7A
Authority: CN
Inventors: 胡月鹏; 王春雷; 刘强
Original assignee: Conew Network Technology Beijing Co Ltd
Current assignee: Conew Network Technology Beijing Co Ltd
Priority date: 2014-06-09
Filing date: 2014-06-09
Publication date: 2018-01-12
Anticipated expiration: 2034-06-09
Also published as: CN104038490A

Abstract

The embodiment of the invention discloses a kind of communication security method of calibration, including：Client generates client token Token, and the client Token is sent into the server；The client receives the checking message that the server returns；Wherein, the client Token is carried in the checking message, and the server Token, the server Token of server generation are used for the message that server described in unique mark is sent；The client is verified to the client Token carried in the checking message, and after verification passes through, the first confirmation message for carrying the server Token is returned to the server；When the client receives the second confirmation message that the server returns, the communication security between the server is confirmed.The embodiment of the invention also discloses a kind of client and server.Using the present invention, communications security can be improved.

Description

A kind of communication security method of calibration and its device

Technical field

The present invention relates to communication technical field, more particularly to a kind of communication security method of calibration and its device.

Background technology

Mobile epoch, high in the clouds control the application scenarios of single App (application) very universal.In the application scenarios, message Push be substantially exactly with the continuous request server of polling mode, but for mobile device, if each application have it is respective Poll framework, then can very power consumption, for the problem, Google companies have developed unified message push platform GCM (Google Cloud Messaging, Google's cloud message push) platform, can provide unified message push for all applications Service.

In the existing message push technology based on GCM platforms, client is to GCM platform application RegID (Registration IDentity, sign-on ID) after, report the RegID to server.Server directly controls client according to the RegID, at this During, server and client side will not do safety check processing, and security is relatively low.

The content of the invention

Technical problem to be solved of the embodiment of the present invention is, there is provided a kind of communication security method of calibration and its device, Improve communications security.

In order to solve the above-mentioned technical problem, the embodiments of the invention provide a kind of communication security method of calibration, applied to bag Google's cloud message push GCM platforms, client are included, and the system of server, this method include：

Client generates client token Token, and the client Token is sent into server；Wherein, the visitor Family end Token is used for the message that client described in unique mark is sent；

The client receives the checking message that the server returns；Wherein, carried in the checking message described Client Token, and the server Token, the server Token of server generation are used for clothes described in unique mark The message that business device is sent；

The client verifies to the client Token carried in the checking message, and after verification passes through, to The server returns to the first confirmation message for carrying the server Token；

When the client receives the second confirmation message that the server returns, confirm between the server Communication security；Wherein, second confirmation message be the server when receiving first confirmation message, to described What server Token verifications were sent after passing through.

Wherein, before the client Token is sent to server by the client, in addition to：

The client sends the message that RegID is identified for applying for the registration of to the GCM platforms, and receives the GCM The RegID that platform returns.

Wherein, the client Token is sent to the server by the client, is specifically included：

Client Token carryings are sent to described by the client in the message for reporting RegID to server Server.

Wherein, this method also includes：

When the client to the client Token verifications in the checking message not by or, in preset time not When receiving the second confirmation message that the server returns, confirm that communication is dangerous.

Wherein, after the client generation client Token, the client Token is stored；

The client verifies to the client Token carried in the checking message, specifically includes：

The client obtains the client Token carried in the checking message, and the client stored with itself Token is compared, if the two is identical, confirms that verification passes through；Otherwise, confirm that verification does not pass through.

Wherein, the client generation client Token, is specifically included：

The client generates client Token according to preset rules and parameter；

When the client receives the checking message that the server returns, the client is according to the default rule Then generate client Token again with parameter, and client Token is verified into the client carried in message with described Token is compared, if the two is identical, confirms that verification passes through；Otherwise, confirm that verification does not pass through.

Wherein, the parameter preset includes one below or multiple：

International mobile equipment identification number IMEI, MAC address, the system version number of the client.

Wherein, after the client passes through to the client Token verifications carried in the checking message, in addition to：

The client carries service requesting information in first confirmation message, so that the server is to described first After the server Token verifications carried in confirmation message pass through, corresponding business processing is carried out according to the service requesting information.

Wherein, after the client confirms the communication security between the server, in addition to：

The client sends service requesting information to the server, so that the server is according to the service request Information carries out corresponding business.

Wherein, the service requesting information includes：

Registration information, data access request messages, data upload requests information or data download request information.

The embodiment of the present invention additionally provides a kind of communication security method of calibration, applied to including Google cloud message push GCM Platform, client, and the system of server, this method include：

Server receives the client token Token that client is sent；Wherein, the client Token is used to uniquely mark Know the message that the client is sent；

The server generates server Token, and is sent to the client and carry the client Token and clothes Business device Token checking message；Wherein, the server Token is used for the message that server described in unique mark is sent；

When the server receives the first confirmation message that the client returns, the server is to described first The server Token carried in confirmation message is verified, and after verification passes through, confirms the communication between the client Safety, and return to the second confirmation message to the client；Wherein, first confirmation message is that the client is receiving During the checking message, sent after passing through to client Token verifications.

Wherein, the server receives the client token Token that client is sent, and specifically includes：

The server receives the message for reporting sign-on ID RegID that the client is sent, and is carried in the message The client Token.

Wherein, after the server generation server Token, the server Token is stored；

The server verifies to the server Token carried in first confirmation message, specifically includes：

The server obtains the server Token carried in first confirmation message, and the service stored with itself Device Token is compared, then confirms that verification passes through；Otherwise, confirm that verification does not pass through.

Wherein, the server generation server Token, is specifically included：

The server generates server Token according to preset rules and parameter；

When the server receives the first confirmation message that the client returns, according to the preset rules and ginseng Number generates server Token, and the server Token that will be carried in server Token and first confirmation message again It is compared, if the two is identical, confirms that verification passes through；Otherwise, confirm that verification does not pass through.

Wherein, the parameter preset includes one below or multiple：

The registration mark that the MAC address of the server, current time stamp information, the client report Know RegID.

Wherein, when including timestamp information in the server Token；

When the server determines to receive time of first confirmation message, when corresponding with the timestamp information Between between difference not less than threshold value when, the server Token carried in first confirmation message is verified；Otherwise, Confirm that verification does not pass through.

Wherein, this method also includes：

When the server does not receive the first confirmation message that the client returns in preset time, or, to institute It is obstructed out-of-date to state the server Token verifications carried in the first confirmation message, confirms that communication is dangerous.

Wherein, when also carrying service requesting information in first confirmation message, the server is to described first After the server Token verifications carried in confirmation message pass through, in addition to：

The server carries out corresponding business processing according to the service requesting information.

Wherein, after the server returns to the second confirmation message to the client, in addition to：

The server receives the service requesting information that the client is sent, and is carried out according to the service requesting information Corresponding business processing.

Wherein, the service requesting information includes：

Correspondingly, the embodiment of the present invention additionally provides a kind of client, applied to including Google's cloud message push GCM platforms And the system of server, the client include：

Generation module, for generating client token Token；Wherein, the client Token is used for described in unique mark The message that client is sent；

Sending module, for the client Token to be sent into the server；

Receiving module, the checking message returned for receiving the server；Wherein, carried in the checking message Client Token, and server Token, the server Token that the server generates are stated for described in unique mark The message that server is sent；

Correction verification module, for being verified to the client Token carried in the checking message, and when verification passes through Afterwards, the first confirmation message for carrying the server Token is returned to the server by the sending module；

Confirm module, for when the client receives the second confirmation message that the server returns, confirm with Communication security between the server；Wherein, second confirmation message is the server to receive described first true When recognizing message, sent after passing through to server Token verifications.

Wherein, in addition to：

Acquisition module, RegID message is marked for applying for the registration of for being sent to the GCM platforms, and described in reception The RegID that GCM platforms return.

Wherein, the sending module is specifically used for, and the client Token is carried and reports RegID's to server The server is sent in message.

Wherein, the confirmation module is additionally operable to, when the correction verification module is to the client Token schools in the checking message Test not by or, when the client does not receive the second confirmation message that the server returns in preset time, confirming Communicate dangerous.

Wherein, the client also includes：

Memory module, for storing the client Token of the generation module generation；

The correction verification module is specifically used for, and obtains the client Token that carries in the checking message, and with the storage The client Token of module storage is compared, if the two is identical, confirms that verification passes through；Otherwise, confirm that verification does not pass through.

Wherein, the generation module is specifically used for, and client Token is generated according to preset rules and parameter；

The generation module is additionally operable to, when the receiving module receives the checking message that the server returns, root Client Token is generated again according to the preset rules and parameter；

The correction verification module is specifically used for, and client Token and the checking that the generation module generates again are disappeared The client Token carried in breath is compared, if the two is identical, confirms that verification passes through；Otherwise, confirm that verification does not pass through.

Wherein, the parameter preset includes one below or multiple：

Wherein, the sending module is additionally operable to, and service requesting information is carried in first confirmation message, so that described After server passes through to the server Token verifications carried in first confirmation message, entered according to the service requesting information The corresponding business processing of row.

Wherein, the sending module is additionally operable to, and service requesting information is sent to the server, so that the server root Corresponding business is carried out according to the service requesting information.

Wherein, the service requesting information includes：

Correspondingly, the embodiment of the present invention additionally provides a kind of server, is put down applied to including Google cloud message push GCM The system of platform and client, the server include：

Receiving module, for receiving the client token Token of client transmission；Wherein, the client Token is used for The message that client described in unique mark is sent；

Generation module, for generating server Token；Wherein, the server Token is used for service described in unique mark The message that device is sent；

Sending module, the checking of the client Token and server Token is carried for being sent to the client Message；

Correction verification module, for when the server receives the first confirmation message that the client returns, to described The server Token carried in first confirmation message is verified, and after verification passes through, by the sending module to described Client returns to the second confirmation message；Wherein, first confirmation message is that the client is receiving the checking message When, sent after passing through to client Token verifications；

Module is confirmed, for after correction verification module verification passes through, confirming the communication security between the client.

Wherein, the receiving module is specifically used for, and receive the client transmission reports disappearing for sign-on ID RegID Cease, the client Token is carried in the message.

Wherein, the server also includes：

Memory module, for storing the server Token；

The correction verification module is specifically used for, and obtains the server Token carried in first confirmation message, and with it is described The server Token of memory module storage is compared, then confirms that verification passes through；Otherwise, confirm that verification does not pass through.

Wherein, the generation module is specifically used for, and server Token is generated according to preset rules and parameter；

The generation module is additionally operable to, when the receiving module receives the first confirmation message of the client return When, server Token is generated again according to the preset rules and parameter；

The correction verification module is specifically used for, and the server Token and described first that the generation module is generated again are true Recognize the server Token carried in message to be compared, if the two is identical, confirm that verification passes through；Otherwise, confirm that verification is obstructed Cross.

Wherein, the parameter preset includes one below or multiple：

Wherein, when including timestamp information in the server Token；

The correction verification module is specifically used for, when it is determined that the time of first confirmation message is received, with the timestamp When difference between time corresponding to information is not less than threshold value, the server Token carried in first confirmation message is entered Row verification；Otherwise, confirm that verification does not pass through.

Wherein, the confirmation module is additionally operable to, and is returned when the server does not receive the client in preset time The first confirmation message returned, or, the inspection module are obstructed to the server Token verifications carried in first confirmation message It is out-of-date, confirm that communication is dangerous.

Wherein, in addition to：

First processing module, for when also carrying service requesting information in first confirmation message, according to described Service requesting information carries out corresponding business processing.

Wherein, the receiving module is additionally operable to, and receives the service requesting information that client is sent；

The server also includes：

Second processing module, for carrying out corresponding business processing according to the service requesting information.

Wherein, the service requesting information includes：

Implement the embodiment of the present invention, have the advantages that：

Client and server carries the visitor by generating client Token and server Token in interaction message Family end Token and server Token, verifies mutually according to client Token and server Token, realizes communicating pair Safety check, improve communications security.

Brief description of the drawings

In order to illustrate more clearly about the embodiment of the present invention or technical scheme of the prior art, below will be to embodiment or existing There is the required accompanying drawing used in technology description to be briefly described, it should be apparent that, drawings in the following description are only this Some embodiments of invention, for those of ordinary skill in the art, on the premise of not paying creative work, can be with Other accompanying drawings are obtained according to these accompanying drawings.

Fig. 1 is a kind of schematic flow sheet of communication security method of calibration provided in an embodiment of the present invention；

Fig. 2 is the schematic flow sheet of another communication security method of calibration provided in an embodiment of the present invention；

Fig. 3 is the schematic flow sheet of another communication security method of calibration provided in an embodiment of the present invention；

Fig. 4 is a kind of structural representation of client provided in an embodiment of the present invention；

Fig. 5 is the structural representation of another client provided in an embodiment of the present invention；

Fig. 6 is the structural representation of another client provided in an embodiment of the present invention；

Fig. 7 is the structural representation of another client provided in an embodiment of the present invention；

Fig. 8 is a kind of structural representation of server provided in an embodiment of the present invention；

Fig. 9 is the structural representation of another server provided in an embodiment of the present invention；

Figure 10 is the structural representation of another server provided in an embodiment of the present invention；

Figure 11 is the structural representation of another server provided in an embodiment of the present invention；

Figure 12 is the structural representation of another server provided in an embodiment of the present invention.

Embodiment

Below in conjunction with the accompanying drawing in the embodiment of the present invention, the technical scheme in the embodiment of the present invention is carried out clear, complete Site preparation describes, it is clear that described embodiment is only part of the embodiment of the present invention, rather than whole embodiments.It is based on Embodiment in the present invention, those of ordinary skill in the art are obtained every other under the premise of creative work is not made Embodiment, belong to the scope of protection of the invention.

As shown in figure 1, be a kind of schematic flow sheet of communication security method of calibration provided in an embodiment of the present invention, this method It can apply to include GCM platforms, client, and the system of server, this method may comprise steps of：

Step 101, client generation client Token, and client Token is sent to server.

Specifically, in the unified message supplying system based on GCM platforms, client can be sent to GCM platforms to be used for Apply for RegID message, and receive the RegID of GCM platforms return.Client application to after RegID, it is necessary to by the RegID Report server.

In embodiments of the present invention, can be by by the client after client generation client Token (token) Token is carried and is sent to server in the message for reporting RegID to server, can also be sent to clothes by single message Business device.Wherein, client Token is generated by client, the message for unique mark client transmission.

Wherein, client Token can be that the unique string that client generates according to preset rules and parameter identifies, should Parameter preset can include the model information of client, such as IMEI (International Mobile Equipment Identity, international mobile equipment identification number), the information such as system version, or MAC (the Media Access of client One or more of Control, media access control) information such as address；The preset rules can be hash algorithm or other AES, its specific generating process will not be repeated here.

It should be noted that client is to GCM platform application RegID, and between client generation client Token simultaneously In the absence of the sequential relationship of certainty, i.e. client can generate first to GCM platform application RegID, and after RegID is got Client Token, can also first generate client Token, and to GCM platform application RegID after client Token is generated, The execution sequence of the two has no effect on protection scope of the present invention.

The checking message that step 102, client the reception server return.

Specifically, in embodiments of the present invention, when server receives the client Token of client transmission, pass through GCM Platform returns to client carries client Token, and the server Token of server generation checking message.Wherein, Server Token is generated by server, the message for unique mark server transmission.

Wherein, server Token can be that the unique string that server generates according to default rule and parameter identifies, The parameter preset can be one or more of information such as the RegID of client, the MAC Address of server and timestamp, The preset rules can be hash algorithm or other AESs, and its specific generating process will not be repeated here.

Step 103, client verify to the client Token carried in the checking message, and after verification passes through, The first confirmation message for carrying server Token is returned to server.

Specifically, in embodiments of the present invention, the checking that server (by GCM platforms) return is received when client disappears During breath, the client Token carried in the checking message can be verified, its specific verification mode comprises at least but unlimited In in the following manner：

Mode one, client can store client Token, when client receives after client Token is generated During the checking message that server returns, client obtains the client Token carried in the checking message, and stored with itself Client Token is compared, if the two is identical, confirms that verification passes through, otherwise, it determines verification does not pass through.

Mode two, client receive the checking message of server return, and obtain the client carried in the checking message After holding Token, client Token can be generated again according to preset rules and parameter, and by the newly-generated client Token Compared with verifying the client Token carried in message, if the two is identical, confirm that verification passes through, otherwise, confirm verification Do not pass through.

When the client Token verifications carried during client is to checking message pass through, return and carry to server State server Token the first confirmation message；The client Token verifications carried in client is to checking message do not pass through When, then confirm that communication is dangerous, now, client can directly abandon the checking message, or, the checking message is not carried out Processing and response.

If in addition, user end to server send carry client Token report RegID message after, default The checking message of server return is not received in time, then client confirms that communication is dangerous.

Step 104, when client receive server return the second confirmation message when, confirm and the server between Communication security；Wherein, second confirmation message be server when receiving first confirmation message, to server Token What verification was sent after passing through.

Specifically, in embodiments of the present invention, after server receives the first confirmation message of client transmission, to this The server Token carried in one confirmation message is verified, if verification passes through, confirms that the communication between the client is pacified Entirely, and to client the second confirmation message is returned；If verification not by, confirm and the client between communication it is dangerous, The second confirmation message is not returned to client.

When client receives the second confirmation message of server return, confirm that the communication between the server is pacified Entirely.

Further, in a kind of implementation of the embodiment of the present invention, client is to verifying the client carried in message After end Token verifications pass through, service requesting information can be carried in the first confirmation message sent to server, e.g., registration Solicited message, data access request messages, data upload requests information or data download request information, so that server is to this After the server Token verifications carried in first confirmation message pass through, corresponding business processing is carried out according to the service request.

In another implementation, client can be after the communication security before confirmation with server, to server Service requesting information is sent, e.g., registration information, data access request messages, data upload requests information or data are downloaded Solicited message, so that server carries out corresponding business according to the service requesting information.

As shown in Fig. 2 be the schematic flow sheet of another communication security method of calibration provided in an embodiment of the present invention, the party Method can apply to include GCM platforms, client, and the system of server, this method may comprise steps of：

Step 201, server receive the client Token that client is sent.

Step 202, server generation server Token, and sent to client and carry client Token and server Token checking message.

Specifically, in embodiments of the present invention, when server receives the client Token of client transmission, pass through GCM Platform returns to client and carries client Token, and the server Token of server generation checking message.

Wherein, server Token can be the unique string mark that server generates according to default rule and parameter Know, the parameter preset can be one or more in the information such as the RegID of client, the MAC Address of server and timestamp Individual, the preset rules can be hash algorithm or other AESs, and its specific generating process will not be repeated here.

It should be noted that server receives the client Token that client is sent, and server generation server Between Token and in the absence of inevitable sequential relationship, i.e., server can receive client transmission client Token it Before, server Token is generated, server Token can also be generated after the client Token of client transmission is received, The execution sequence of the two has no effect on protection scope of the present invention.

Step 203, when server receive client return the first confirmation message when, server to this first confirm disappear The server Token carried in breath is verified, and after verification passes through, confirms the communication security between the client, and The second confirmation message is returned to client.

Specifically, in embodiments of the present invention, the checking that server (by GCM platforms) return is received when client disappears During breath, the client Token carried in the checking message is verified, and after verification passes through, returns and carries to server There is server Token the first confirmation message.

When server receives the first confirmation message of client return, to the server carried in first confirmation message Token is verified, and its specific method of calibration can at least include but is not limited in the following manner：

Mode one, server can store server Token, when server receives after server Token is generated During the first confirmation message that client returns, server obtains the server Token carried in first confirmation message, and with from The server Token of body storage is compared, if the two is identical, confirms that verification passes through, otherwise, it determines verification does not pass through.

Mode two, server receive the first confirmation message of client return, and obtain and taken in first confirmation message After the server Token of band, server Token can be generated again according to preset rules and parameter, and by the newly-generated clothes Device Token be engaged in compared with the server Token carried in the first confirmation message, if the two is identical, confirms that verification passes through, Otherwise, confirm that verification does not pass through.

Further, in embodiments of the present invention, when server generation server Token in include timestamp information When, when server verifies to the server Token carried in the first confirmation message, it may be determined that receive first confirmation Whether the time of message, the difference between the time corresponding with timestamp information exceed threshold value (can preset)：If do not surpass Threshold value is crossed, then is verified that (its specific verification mode can as above institute to the server Token carried in first confirmation message Description)；If exceed threshold value, then it is assumed that server Token is out of date, confirms that verification does not pass through.

After server passes through to the server Token verifications in the first confirmation message, confirm logical between the client Letter safety, and return to the second confirmation message to client；When server verifies not to the server Token in the first confirmation message By when, confirm communication it is dangerous, not to client return the second confirmation message.

In addition, after if server sends checking message to client, client return is not received in preset time First confirmation message, then confirm that communication is dangerous.

After client receives the second confirmation message of server return, the communication security between the server is confirmed.

Further, in a kind of implementation of the embodiment of the present invention, the first of user end to server transmission confirms Service requesting information can also be carried in message, e.g., registration information, data access request messages, data upload requests Information or data download request information.Correspondingly, server receives first confirmation message, and to first confirmation message After the server Token verifications of middle carrying pass through, it can be carried out according to the service requesting information carried in first confirmation message Corresponding business processing.

In another implementation, after the communication security that client can be between confirmation and server, to server Service requesting information is sent, e.g., registration information, data access request messages, data upload requests information or data are downloaded Solicited message.Correspondingly, after server receives the service requesting information, can be carried out according to the service requesting information corresponding Business processing.

In order that those skilled in the art more fully understand technical scheme provided in an embodiment of the present invention, with reference to specific Application scenarios technical scheme provided in an embodiment of the present invention is described.

In this embodiment, it is described so that user end to server is registered as an example.

As shown in figure 3, be a kind of schematic flow sheet of communication security method of calibration provided in an embodiment of the present invention, this method It can apply to include GCM platforms, client, and the system of server, this method comprise the following steps：

Step 301, client generate client Token to GCM platform application RegID.

RegID and client Token are reported server by step 302, client.

Step 303, server generation server Token, and sent by GCM platforms to client and carry the client Token and server Token checking message.

Step 304, client verify to the client Token carried in checking message, and after verification passes through, to Server returns to the first confirmation message for carrying server Token and log-on message.

Step 305, server verify to the server Token carried in the first confirmation message, and when verification passes through Afterwards, location registration process is carried out according to the log-on message carried in first confirmation message.

Wherein, after server passes through to server Token verifications, location registration process and prior art are carried out according to log-on message The specifically processing that the log-on message that middle server reports according to client is carried out is identical, and its specific implementation repeats no more herein.

Step 306, server return to registering result to client.

By above description, in technical scheme provided in an embodiment of the present invention, client and server passes through life Into client Token and server Token, and client Token and server Token are carried in interaction message, according to Client Token and server Token are verified mutually, are realized the safety check of communicating pair, are improved communications security.

Based on the technical concept of above method embodiment system, the embodiment of the present invention additionally provides a kind of client, can be with It is applied in above method embodiment.

As shown in figure 4, for a kind of structural representation of client provided in an embodiment of the present invention, the client can be applied In the system for including GCM platforms and server, the client can include：

Generation module 41, for generating client token Token；Wherein, the client Token is used for unique mark institute State the message of client transmission；

Sending module 42, for the client Token to be sent into server；

Receiving module 43, the checking message returned for receiving the server；Wherein, carried in the checking message The client Token, and the server Token, the server Token of server generation are used for unique mark institute State the message of server transmission；

Correction verification module 44, for being verified to the client Token carried in the checking message, and when verification passes through Afterwards, the first confirmation message for carrying the server Token is returned to the server by the sending module 42；

Module 45 is confirmed, for when the client receives the second confirmation message that the server returns, confirming Communication security between server；Wherein, second confirmation message is that the server is receiving first confirmation During message, sent after passing through to server Token verifications.

Wherein, the confirmation module 45 is additionally operable to, when the correction verification module is to the client Token in the checking message Verification is not by or, when the client does not receive the second confirmation message that the server returns in preset time, really It is dangerous to recognize communication.

Wherein, the sending module 42 is additionally operable to, and service requesting information is carried in first confirmation message, so that institute State server to carried in first confirmation message server Token verification pass through after, according to the service requesting information Carry out corresponding business processing；Or

The sending module 42 is additionally operable to, to the server send service requesting information so that the server according to The service requesting information carries out corresponding business.

Wherein, the service requesting information includes：

As shown in figure 5, being the structural representation of another client provided in an embodiment of the present invention, the client can answer For including the system of GCM platforms and server, the client can include：

Acquisition module 51, RegID message is marked for being sent to the GCM platforms for applying for the registration of, and receives institute State the RegID of GCM platforms return；

Generation module 52, for generating client token Token；Wherein, the client Token is used for unique mark institute State the message of client transmission；

Sending module 53, for the client Token to be sent into the server；

The sending module 53 is specifically used for, and the client Token is carried RegID message is reported to server In be sent to the server；

Receiving module 54, the checking message returned for receiving the server；Wherein, carried in the checking message The client Token, and the server Token, the server Token of server generation are used for unique mark institute State the message of server transmission；

Correction verification module 55, for being verified to the client Token carried in the checking message, and when verification passes through Afterwards, the first confirmation message for carrying the server Token is returned to the server by the sending module 53；

Module 56 is confirmed, for when the client receives the second confirmation message that the server returns, confirming With the communication security between the server；Wherein, second confirmation message is that the server is receiving described first During confirmation message, sent after passing through to server Token verifications.

As shown in fig. 6, being the structural representation of another client provided in an embodiment of the present invention, the client can answer For including the system of GCM platforms and server, the client can include：

Generation module 61, for generating client token Token；Wherein, the client Token is used for unique mark institute State the message of client transmission；

Memory module 62, the client Token generated for storing the generation module 61；

Sending module 63, for the client Token to be sent into the server；Wherein, the RegID is described Client is to the GCM platforms application；

Receiving module 64, the checking message returned for receiving the server；Wherein, carried in the checking message The client Token, and the server Token, the server Token of server generation are used for unique mark institute State the message of server transmission；

Correction verification module 65, for being verified to the client Token carried in the checking message, and when verification passes through Afterwards, the first confirmation message for carrying the server Token is returned to the server by the sending module 63；

Module 66 is confirmed, for when the client receives the second confirmation message that the server returns, confirming Communication security；Wherein, second confirmation message be the server when receiving first confirmation message, to the clothes What the Token verifications of business device were sent after passing through.

Wherein, the correction verification module 65 is specifically used for, the client Token carried in the acquisition checking message, and with The client Token of the memory module storage is compared, if the two is identical, confirms that verification passes through；Otherwise, verification is confirmed Do not pass through.

As shown in fig. 7, being the structural representation of another client provided in an embodiment of the present invention, the client can answer For including the system of GCM platforms and server, the client can include：

Generation module 71, for generating client token Token；Wherein, the client Token is used for unique mark institute State the message of client transmission；

The generation module 71 is specifically used for, and client Token is generated according to preset rules and parameter；

Sending module 72, for the client Token to be sent into the server；

Receiving module 73, the checking message returned for receiving the server；Wherein, carried in the checking message The client Token, and the server Token, the server Token of server generation are used for unique mark institute State the message of server transmission；

Correction verification module 74, for being verified to the client Token carried in the checking message, and when verification passes through Afterwards, the first confirmation message for carrying the server Token is returned to the server by the sending module 72；

Module 75 is confirmed, for when the client receives the second confirmation message that the server returns, confirming With the communication security between the server；Wherein, second confirmation message is that the server is receiving described first During confirmation message, sent after passing through to server Token verifications.

Wherein, the generation module 71 is additionally operable to, and the checking that the server return is received when the receiving module disappears During breath, client Token is generated again according to the preset rules and parameter；

The correction verification module 74 is specifically used for, the client Token that the generation module is generated again and the checking The client Token carried in message is compared, if the two is identical, confirms that verification passes through；Otherwise, confirm that verification is obstructed Cross.

Wherein, the parameter preset includes one below or multiple：

Based on the technical concept of above method embodiment system, the embodiment of the present invention additionally provides a kind of server, can be with It is applied in above method embodiment.

As shown in figure 8, for a kind of structural representation of server provided in an embodiment of the present invention, the server can be applied In the system for including GCM platforms and client, the server can include：

Receiving module 81, for receiving the client token Token of client transmission；Wherein, the client Token is used In the message that client described in unique mark is sent；

Generation module 82, for generating server Token；Wherein, the server Token is used for clothes described in unique mark The message that business device is sent；

Sending module 83, testing for the client Token and server Token is carried for being sent to the client Demonstrate,prove message；

Correction verification module 84, for when the server receives the first confirmation message that the client returns, to institute State the server Token carried in the first confirmation message to be verified, and after verification passes through, by the sending module 83 to The client returns to the second confirmation message；Wherein, first confirmation message is that the client is receiving the checking During message, sent after passing through to client Token verifications；

Module 85 is confirmed, for after correction verification module verification passes through, confirming that the communication between the client is pacified Entirely.

Wherein, the receiving module 81 is specifically used for, and receive the client transmission reports disappearing for sign-on ID RegID Cease, the client Token is carried in the message.

Wherein, the confirmation module 85 is additionally operable to, when the server does not receive the client in preset time The first confirmation message returned, or, the inspection module verify not to the server Token carried in first confirmation message By when, confirm communication it is dangerous.

Wherein, timestamp information is included in the server Token；

The correction verification module 84 is specifically used for, when it is determined that the time of first confirmation message is received, with the time When stabbing the difference between the time corresponding to information not less than threshold value, to the server Token carried in first confirmation message Verified；Otherwise, confirm that verification does not pass through.

As shown in figure 9, being the structural representation of another server provided in an embodiment of the present invention, the server can answer For including the system of GCM platforms and client, the server can include：

Receiving module 91, for receiving the client token Token of client transmission；Wherein, the client Token is used In the message that client described in unique mark is sent；

Generation module 92, for generating server Token；Wherein, the server Token is used for clothes described in unique mark The message that business device is sent；

Memory module 93, for storing the server Token；

Sending module 94, testing for the client Token and server Token is carried for being sent to the client Demonstrate,prove message；

Correction verification module 95, for when the server receives the first confirmation message that the client returns, to institute State the server Token carried in the first confirmation message to be verified, and after verification passes through, by the sending module 94 to The client returns to the second confirmation message；Wherein, first confirmation message is that the client is receiving the checking During message, sent after passing through to client Token verifications；

Module 96 is confirmed, for after correction verification module verification passes through, confirming communication security.

Wherein, the correction verification module 95 is specifically used for, and obtains the server Token carried in first confirmation message, And compared with the server Token of memory module storage, then confirm that verification passes through；Otherwise, confirm that verification does not pass through.

As shown in Figure 10, it is the structural representation of another server provided in an embodiment of the present invention, the server can be with Applied to the system for including GCM platforms and client, the server can include：

Receiving module 1001, for receiving the client token Token of client transmission；Wherein, the client Token The message sent for client described in unique mark；

Generation module 1002, for generating server Token；Wherein, the server Token is used for described in unique mark The message that server is sent；

The generation module 1002 is specifically used for, and server Token is generated according to preset rules and parameter；

Sending module 1003, carry the client Token's and server Token for being sent to the client Verify message；

Correction verification module 1004, it is right for when the server receives the first confirmation message that the client returns The server Token carried in first confirmation message is verified, and after verification passes through, by the sending module to The client returns to the second confirmation message；Wherein, first confirmation message is that the client is receiving the checking During message, sent after passing through to client Token verifications；

Module 1005 is confirmed, for after correction verification module verification passes through, confirming the communication between the client Safety.

Wherein, the generation module 1002 is additionally operable to, when the receiving module receives the first of the client return During confirmation message, server Token is generated again according to the preset rules and parameter；

The correction verification module 1004 is specifically used for, the server Token that the generation module is generated again and described the The server Token carried in one confirmation message is compared, if the two is identical, confirms that verification passes through；Otherwise, verification is confirmed Do not pass through.

Wherein, the parameter preset includes one below or multiple：

As shown in figure 11, it is the structural representation of another server provided in an embodiment of the present invention, the server can be with Applied to the system for including GCM platforms and client, the server can include：

Receiving module 1101, for receiving the client token Token of client transmission；Wherein, the client Token The message sent for client described in unique mark；

Generation module 1102, for generating server Token；Wherein, the server Token is used for described in unique mark The message that server is sent；

Sending module 1103, carry the client Token's and server Token for being sent to the client Verify message；

Correction verification module 1104, it is right for when the server receives the first confirmation message that the client returns The server Token carried in first confirmation message is verified, and after verification passes through, by the sending module to The client returns to the second confirmation message；Wherein, first confirmation message is that the client is receiving the checking During message, sent after passing through to client Token verifications；

Module 1105 is confirmed, for after correction verification module verification passes through, confirming the communication between the client Safety.

First processing module 1106, for when also carrying service requesting information in first confirmation message, according to The service requesting information carries out corresponding business processing.

Wherein, the service requesting information includes：

As shown in figure 12, it is the structural representation of another server provided in an embodiment of the present invention, the server can be with Applied to the system for including GCM platforms and client, the server can include：

Receiving module 1201, for receiving the client token Token of client transmission；Wherein, the client Token The message sent for client described in unique mark；

Generation module 1202, for generating server Token；Wherein, the server Token is used for described in unique mark The message that server is sent；

Sending module 1203, carry the client Token's and server Token for being sent to the client Verify message；

Correction verification module 1204, it is right for when the server receives the first confirmation message that the client returns The server Token carried in first confirmation message is verified, and after verification passes through, by the sending module to The client returns to the second confirmation message；Wherein, first confirmation message is that the client is receiving the checking During message, sent after passing through to client Token verifications；

Module 1205 is confirmed, for after correction verification module verification passes through, confirming the communication between the client Safety.

Wherein, the receiving module 1201 is additionally operable to, and receives the service requesting information that client is sent；

Correspondingly, the server can also include：

Second processing module 1206, for carrying out corresponding business processing according to the service requesting information.

Wherein, the service requesting information includes：

One of ordinary skill in the art will appreciate that realize all or part of flow in above-described embodiment method, being can be with The hardware of correlation is instructed to complete by computer program, described program can be stored in a computer read/write memory medium In, the program is upon execution, it may include such as the flow of the embodiment of above-mentioned each method.Wherein, described storage medium can be magnetic Dish, CD, read-only memory (Read-Only Memory, ROM) or random access memory (Random Access Memory, RAM) etc..

The above disclosed power for being only a kind of preferred embodiment of the present invention, the present invention can not being limited with this certainly Sharp scope, one of ordinary skill in the art will appreciate that realizing all or part of flow of above-described embodiment, and weighed according to the present invention Profit requires made equivalent variations, still falls within and invents covered scope.

Claims

A kind of 1. communication security method of calibration, applied to including Google's cloud message push GCM platforms, client, and server System, it is characterised in that this method includes：

Client generates client token Token, and the client Token is sent into server；Wherein, the client Token is used for the message that client described in unique mark is sent；

The client receives the checking message that the server returns；Wherein, the client is carried in the checking message Token, and the server Token, the server Token of server generation is held to be used for server described in unique mark The message of transmission；

The client verifies to the client Token that carries in the checking message, and after verification passes through, to described Server returns to the first confirmation message for carrying the server Token；

When the client receives the second confirmation message that the server returns, confirm logical between the server Letter safety；Wherein, second confirmation message be the server when receiving first confirmation message, to the service What device Token verifications were sent after passing through；

The client generates client Token, specifically includes：

The client generates client Token according to preset rules and parameter；

The parameter preset includes one below or multiple：

International mobile equipment identification number IMEI, MAC address, the system version number of the client；

The preset rules are AES；

The client verifies to the client Token carried in the checking message, specifically includes：

When the client receives the checking message that the server returns, the client according to the preset rules and Parameter generates client Token again, and client Token is entered with the client Token carried in the checking message Row compares, if the two is identical, confirms that verification passes through；Otherwise, confirm that verification does not pass through.
2. the method as described in claim 1, it is characterised in that the client Token is sent to service by the client Before device, in addition to：

The client sends the message that RegID is identified for applying for the registration of to the GCM platforms, and receives the GCM platforms The RegID of return.
3. method as claimed in claim 2, it is characterised in that the client Token is sent to described by the client Server, specifically include：

The client Token is carried and the service is sent in the message for reporting RegID to server by the client Device.
4. the method as described in claim 1, it is characterised in that this method also includes：

When the client to the client Token verifications in the checking message not by or, not received in preset time To the server return the second confirmation message when, confirm communication it is dangerous.
5. the method as described in claim 1, it is characterised in that after the client generation client Token, store the visitor Family end Token；

The client verifies to the client Token carried in the checking message, specifically includes：

The client obtains the client Token carried in the checking message, and enters with the client Token of itself storage Row compares, if the two is identical, confirms that verification passes through；Otherwise, confirm that verification does not pass through.
6. the method as described in claim 1, it is characterised in that the client verifies the client carried in message to described After Token verifications pass through, in addition to：

The client carries service requesting information in first confirmation message, so that the server confirms to described first After the server Token verifications carried in message pass through, corresponding business processing is carried out according to the service requesting information.
7. the method as described in claim 1, it is characterised in that the client confirms that the communication between the server is pacified After complete, in addition to：

The client sends service requesting information to the server, so that the server is according to the service requesting information Carry out corresponding business.
8. method as claimed in claims 6 or 7, it is characterised in that the service requesting information includes：

Registration information, data access request messages, data upload requests information or data download request information.
A kind of 9. communication security method of calibration, applied to including Google's cloud message push GCM platforms, client, and server System, it is characterised in that this method includes：

Server receives the client token Token that client is sent；Wherein, the client Token is used for unique mark institute State the message of client transmission；

The server generates server Token, and is sent to the client and carry the client Token and server Token checking message；Wherein, the server Token is used for the message that server described in unique mark is sent；

When the server receives the first confirmation message that the client returns, the server confirms to described first The server Token carried in message is verified, and after verification passes through, confirms that the communication between the client is pacified Entirely, and to the client the second confirmation message is returned；Wherein, first confirmation message is the client receiving When stating checking message, sent after passing through to client Token verifications；

The server generates server Token, specifically includes：

The server generates server Token according to preset rules and parameter；

The parameter preset includes one below or multiple：

The sign-on ID that the MAC address of the server, current time stamp information, the client report RegID；

The preset rules are AES；

The server verifies to the server Token carried in first confirmation message, specifically includes：

When the server receives the first confirmation message that the client returns, according to the preset rules and parameter again Secondary generation server Token, and the server Token carried in server Token and first confirmation message is carried out Compare, if the two is identical, confirm that verification passes through；Otherwise, confirm that verification does not pass through.
10. method as claimed in claim 9, it is characterised in that the server receives the client token that client is sent Token, specifically include：

The server receives the message for reporting sign-on ID RegID that the client is sent, and is carried in the message described Client Token.
11. method as claimed in claim 9, it is characterised in that after the server generation server Token, described in storage Server Token；

The server verifies to the server Token carried in first confirmation message, specifically includes：

The server obtains the server Token carried in first confirmation message, and the server stored with itself Token is compared, if the two is identical, confirms that verification passes through；Otherwise, confirm that verification does not pass through.
12. method as claimed in claim 9, it is characterised in that when including timestamp information in the server Token When；

The server verifies to the server Token carried in first confirmation message, specifically includes：

When the server determines to receive time of first confirmation message, the time corresponding with the timestamp information it Between difference not less than threshold value when, the server Token carried in first confirmation message is verified；Otherwise, confirm Verification does not pass through.
13. method as claimed in claim 9, it is characterised in that this method also includes：

When the server does not receive the first confirmation message that the client returns in preset time, or, to described the The server Token verifications carried in one confirmation message are obstructed out-of-date, confirm that communication is dangerous.
14. method as claimed in claim 9, it is characterised in that when also carrying service request in first confirmation message During information, after the server passes through to the server Token verifications carried in first confirmation message, in addition to：

The server carries out corresponding business processing according to the service requesting information.
15. method as claimed in claim 9, it is characterised in that the server returns to second to the client and confirms to disappear After breath, in addition to：

The server receives the service requesting information that the client is sent, and is carried out accordingly according to the service requesting information Business processing.
16. method as claimed in claim 15, it is characterised in that the service requesting information includes：

Registration information, data access request messages, data upload requests information or data download request information.
A kind of 17. client, applied to the system for including Google's cloud message push GCM platforms and server, it is characterised in that The client includes：

Generation module, for generating client token Token；Wherein, the client Token is used for client described in unique mark Hold the message sent；

Sending module, for the client Token to be sent into the server；

Receiving module, the checking message returned for receiving the server；Wherein, the visitor is carried in the checking message Family end Token, and the server Token, the server Token of server generation are used for service described in unique mark The message that device is sent；

Correction verification module, for being verified to the client Token carried in the checking message, and after verification passes through, lead to Cross the sending module and the first confirmation message for carrying the server Token is returned to the server；

Confirm module, for when the client receives the second confirmation message that the server returns, confirm with it is described Communication security between server；Wherein, to be the server confirm to disappear receiving described first second confirmation message During breath, sent after passing through to server Token verifications；

The generation module is specifically used for, and client Token is generated according to preset rules and parameter；

The parameter preset includes one below or multiple：

International mobile equipment identification number IMEI, MAC address, the system version number of the client；

The preset rules are encryption function；

The generation module is additionally operable to, when the receiving module receives the checking message that the server returns, according to institute State preset rules and parameter and generate client Token again；

The correction verification module is specifically used for, and the client Token that the generation module is generated again is verified in message with described The client Token of carrying is compared, if the two is identical, confirms that verification passes through；Otherwise, confirm that verification does not pass through.
18. client as claimed in claim 17, it is characterised in that also include：

Acquisition module, RegID message is marked for being sent to the GCM platforms for applying for the registration of, and is received the GCM and put down The RegID that platform returns.
19. client as claimed in claim 18, it is characterised in that

The sending module is specifically used for, and the client Token is carried and sent in the message for reporting RegID to server To the server.
20. client as claimed in claim 17, it is characterised in that

It is described confirmation module be additionally operable to, when the correction verification module to it is described checking message in client Token verification not by, Or, the client confirms that communication is uneasy when not receiving the second confirmation message that the server returns in preset time Entirely.
21. client as claimed in claim 17, it is characterised in that the client also includes：

Memory module, for storing the client Token of the generation module generation；

The correction verification module is specifically used for, and obtains the client Token that carries in the checking message, and with the memory module The client Token of storage is compared, if the two is identical, confirms that verification passes through；Otherwise, confirm that verification does not pass through.
22. client as claimed in claim 17, it is characterised in that

The sending module is additionally operable to, and service requesting information is carried in first confirmation message, so that the server pair After the server Token verifications carried in first confirmation message pass through, carried out according to the service requesting information corresponding Business processing.
23. client as claimed in claim 17, it is characterised in that

The sending module is additionally operable to, and service requesting information is sent to the server, so that the server is according to the industry Solicited message of being engaged in carries out corresponding business.
24. the client as described in claim 22 or 23, it is characterised in that the service requesting information includes：

Registration information, data access request messages, data upload requests information or data download request information.
25. a kind of server, applied to the system for including Google's cloud message push GCM platforms and client, its feature exists In the server includes：

Receiving module, for receiving the client token Token of client transmission；Wherein, the client Token is used for unique Identify the message that the client is sent；

Generation module, for generating server Token；Wherein, the server Token is used for server hair described in unique mark The message sent；

Sending module, the checking that the client Token and server Token is carried for being sent to the client disappear Breath；

Correction verification module, for when the server receives the first confirmation message that the client returns, to described first The server Token carried in confirmation message is verified, and after verification passes through, by the sending module to the client End returns to the second confirmation message；Wherein, first confirmation message is the client when receiving the checking message, right What the client Token verifications were sent after passing through；

Module is confirmed, for after correction verification module verification passes through, confirming the communication security between the client；

The generation module is specifically used for, and server Token is generated according to preset rules and parameter；

The parameter preset includes one below or multiple：

The sign-on ID that the MAC address of the server, current time stamp information, the client report RegID；

The parameter preset is encryption function；

The generation module is additionally operable to, when the receiving module receives the first confirmation message that the client returns, root Server Token is generated again according to the preset rules and parameter；

The correction verification module is specifically used for, and the server Token that the generation module generates again is confirmed to disappear with described first The server Token carried in breath is compared, if the two is identical, confirms that verification passes through；Otherwise, confirm that verification does not pass through.
26. server as claimed in claim 25, it is characterised in that

The receiving module is specifically used for, and receives the message for reporting sign-on ID RegID that the client is sent, in the message Carry the client Token.
27. server as claimed in claim 25, it is characterised in that the server also includes：

Memory module, for storing the server Token；

The correction verification module is specifically used for, and obtains the server Token carried in first confirmation message, and with the storage The server Token of module storage is compared, if the two is identical, confirms that verification passes through；Otherwise, confirm that verification does not pass through.
28. server as claimed in claim 25, it is characterised in that believe when including timestamp in the server Token During breath；

The correction verification module is specifically used for, when it is determined that the time of first confirmation message is received, with the timestamp information When difference between the corresponding time is not less than threshold value, school is carried out to the server Token carried in first confirmation message Test；Otherwise, confirm that verification does not pass through.
29. server as claimed in claim 25, it is characterised in that

The confirmation module is additionally operable to, when the server do not receive that the client returns in preset time it is first true Recognize message, or, the correction verification module verifies obstructed out-of-date, confirmation to the server Token carried in first confirmation message Communicate dangerous.
30. server as claimed in claim 25, it is characterised in that also include：

First processing module, for when also carrying service requesting information in first confirmation message, according to the business Solicited message carries out corresponding business processing.
31. server as claimed in claim 25, it is characterised in that

The receiving module is additionally operable to, and receives the service requesting information that client is sent；

The server also includes：

Second processing module, for carrying out corresponding business processing according to the service requesting information.
32. the server as described in claim 30 or 31, it is characterised in that the service requesting information includes：

Registration information, data access request messages, data upload requests information or data download request information.