CN106027600A

CN106027600A - Connection establishing method and device

Info

Publication number: CN106027600A
Application number: CN201610282473.4A
Authority: CN
Inventors: 金帅; 李伟; 马鑫
Original assignee: Beijing Xiaomi Mobile Software Co Ltd
Current assignee: Beijing Xiaomi Mobile Software Co Ltd
Priority date: 2016-04-29
Filing date: 2016-04-29
Publication date: 2016-10-12

Abstract

The invention relates to a connection establishing method and device. The method is applied to a server, and comprises the steps of: establishing first HTTPS (Hyper Text Transfer Protocol over Secure Socket Layer) connection according to received first request information sent by a client for establishing the first HTTPS connection; storing a session parameter of a first session for the first HTTPS connection; and establishing second HTTPS connection according to the session parameter of the first session when second request information sent by the client for establishing the second HTTPS connection is received. Through adoption of the technical scheme of the invention, time spent in establishing the second HTTPS connection is shortened, and time for a user to wait for the establishment of the second HTTPS connection is shortened; and in addition, for the user, a process of establishing the first HTTPS connection in advance is completed in a background, and the user dose not perceive the process of establishing the first HTTPS connection, so that the user experience is improved.

Description

Set up the method and device connected

Technical field

It relates to information security field, particularly relate to a kind of method and device setting up connection.

Background technology

Along with the arrival of information age, browsing webpage becomes the common requirements of people.People can use intelligence The electronic equipments such as energy mobile phone, panel computer, intelligent watch, notebook computer browse webpage.Normal conditions Under, between these electronic equipment and servers be used interchangeably HTTP (Chinese: HTML (Hypertext Markup Language)； English: HyperText Transfer Protocol).HTTP is not have any encryption to arrange in default situations Executing, all of information is all transmitted with plaintext version, therefore, is easily subject to attacking of malicious attacker Hit, cause the information person of being hacked of transmission to steal.

To this end, HTTPS is (English: Hyper Text Transfer Protocol over Secure Socket Layer) arise at the historic moment.HTTPS can be considered as the extension of HTTP, and it uses SSL (Chinese: peace Full socket；English: Secure Socket Layer) as the sublayer of HTTP.SSL is positioned at HTTP Between layer and TCP layer, can be encrypted by the information of this layer of SSL, and then reach the effect of secrecy.

In the case of need for confidentiality, HTTPS is generally used to connect, and compared to using HTTP, Use HTTPS can extend the time of webpage response, reduce Consumer's Experience.Therefore, how foundation is reduced The problem that HTTPS connects the time spent referred to as needs solution.

Summary of the invention

For overcoming problem present in correlation technique, the disclosure provides a kind of method setting up connection and dress Put, set up, for reducing, the time that HTTPS connection is spent.

First aspect according to disclosure embodiment, it is provided that a kind of method setting up connection, is applied to service Device, described method includes:

The first request connected for setting up a HTTPS sent by client according to receiving is believed Breath, sets up a described HTTPS and connects；

Preserve the session parameter of the first session that a described HTTPS connects；

Receiving the second solicited message for setting up the 2nd HTTPS connection that described client sends Time, according to the session parameter of described first session, set up described 2nd HTTPS and connect.

Alternatively, described set up described 2nd HTTPS connect, including:

The session identification of described first session is obtained from described second solicited message；

According to the session identification of described first session, obtain from the session parameter of each session stored The session parameter of described first session；

According to the session parameter of described first session, set up described 2nd HTTPS and connect.

Alternatively, described set up described oneth HTTPS connect before, described method also includes:

When detecting that the default application program being arranged in described client is in starting state, or really Fixed described client in time redirecting webpage and include security information, send pushed information to described client, Described pushed information is used for pointing out described client to send described first solicited message to described server；

Receive described first request that described client sends to described server based on described pushed information Information.

Alternatively, after the HTTPS between described foundation and client is connected, described method Also include:

Every preset duration, detect whether to receive the repetitive requests information that described client sends, described Repetitive requests information connects for rebuilding a described HTTPS and carries the session mark of described first session Know.

Second aspect according to disclosure embodiment, it is provided that a kind of method setting up connection, is applied to client End, described method includes:

Send for setting up the first solicited message that a HTTPS connects to server；

Set up a described HTTPS to be connected with described server；

Send for setting up the second solicited message that the 2nd HTTPS connects to described server, so that The session parameter of the first session that described server connects according to a described HTTPS, sets up described the Two HTTPS connect.

Alternatively, send for setting up the first request letter that a HTTPS connects to server described Before breath, described method the most also include following any one:

Determine that the default application program being arranged in described client is in starting state；

Determine that the webpage to be redirected of described client includes security information；

Receive the pushed information that described server sends, described pushed information be used for pointing out described client to Described server sends described first solicited message.

Alternatively, set up after a described HTTPS is connected at described and described server, described side Method also includes:

Every preset duration, sending repetitive requests information to described server, described repetitive requests information is used Connect in rebuilding a described HTTPS and carry the session identification of described first session.

The third aspect according to disclosure embodiment, it is provided that a kind of device setting up connection, described device is joined Being placed in server, described device includes:

First sets up module, be configured to according to receive by client send for setting up first The first solicited message that HTTPS connects, sets up a described HTTPS and connects；

Preserve module, be configured to preserve the session parameter of the first session that a described HTTPS connects；

Second sets up module, be configured to receive described client send for setting up second During the second solicited message that HTTPS connects, according to the session parameter of described first session, set up described 2nd HTTPS connects.

Alternatively, described second set up module and include:

First obtains submodule, is configured to obtain described first session from described second solicited message Session identification；

Second obtains submodule, is configured to the session identification according to described first session, from stored The session parameter of each session obtains the session parameter of described first session；

Set up submodule, be configured to the session parameter according to described first session, set up described second HTTPS connects.

Alternatively, described device also includes:

First sending module, is configured to set up module described first and sets up a described HTTPS even Before connecing, when detecting that the default application program being arranged in described client is in starting state, or Determine described client in time redirecting webpage and include security information, to described client send push letter Breath, described pushed information is used for pointing out described client to send described first request letter to described server Breath；

Receiver module, is configured to receive described client and sends out to described server based on described pushed information Described first solicited message sent.

Alternatively, described device also includes:

Second sending module, is configured to set up module described first and sets up first between client After HTTPS connects, every preset duration, detect whether to receive the repetition that described client sends Solicited message, described repetitive requests information is used for rebuilding a described HTTPS and connects and carry described the The session identification of one session.

Fourth aspect according to disclosure embodiment, it is provided that a kind of device setting up connection, described device is joined Being placed in client, described device includes:

First sending module, be configured to server send for set up that a HTTPS connects the One solicited message；

Set up module, be configured to set up a described HTTPS with described server and be connected；

Second sending module, is configured to send for setting up the 2nd HTTPS connection to described server The second solicited message so that described server according to described oneth HTTPS connect the first session Session parameter, set up described 2nd HTTPS connect.

Alternatively, described device the most also include following any one:

First determines module, is configured to send for setting up first to server at described sending module Before the first solicited message that HTTPS connects, determine the default application journey being arranged in described client Sequence is in starting state；

Second determines module, is configured to send for setting up first to server at described sending module Before the first solicited message that HTTPS connects, determine that the webpage to be redirected of described client includes secrecy Information；

Receiver module, is configured to send for setting up a HTTPS to server at described sending module Before the first solicited message connected, receive the pushed information that described server sends, described pushed information For pointing out described client to send described first solicited message to described server.

Alternatively, described device also includes:

3rd sending module, is configured to set up described first in described module of setting up with described server After HTTPS connects, every preset duration, send repetitive requests information to described server, described Repetitive requests information connects for rebuilding a described HTTPS and carries the session mark of described first session Know.

The 5th aspect according to disclosure embodiment, it is provided that a kind of device setting up connection, described device is joined Being placed in server, described device includes:

Processor；

For storing the memorizer of processor executable；

Wherein, described processor is configured to:

The 6th aspect according to disclosure embodiment, it is provided that a kind of device setting up connection, described device is joined Being placed in client, described device includes:

Processor；

For storing the memorizer of processor executable；

Wherein, described processor is configured to:

Set up a described HTTPS to be connected with described server；

The 7th aspect according to disclosure embodiment, it is provided that a kind of non-transitory computer-readable storage medium Matter, when the instruction in described storage medium is performed by the processor of server so that server can be held A kind of method setting up connection of row, described method includes:

Eighth aspect according to disclosure embodiment, it is provided that a kind of non-transitory computer-readable storage medium Matter, when the instruction in described storage medium is performed by the processor of client so that client can be held A kind of method setting up connection of row, described method includes:

Set up a described HTTPS to be connected with described server；

Embodiment of the disclosure that the technical scheme of offer can include following beneficial effect:

The technical scheme using the disclosure to provide, sets up second between a client and a server at needs Before HTTPS connects, pre-build that a HTTPS connects, in order to utilize a HTTPS even The session parameter of the first session connect, simplifies and sets up the process that the 2nd HTTPS connects, thus decrease Set up the 2nd HTTPS and connect the time spent, decrease user and wait the 2nd HTTPS connection establishment The successfully time, additionally, for user, pre-build that the process that a HTTPS connects is rear Platform completes, and the process that a HTTPS connects is set up in user's not perception, improves Consumer's Experience.

It should be appreciated that it is only exemplary and explanatory that above general description and details hereinafter describe , the disclosure can not be limited.

Accompanying drawing explanation

Accompanying drawing herein is merged in description and constitutes the part of this specification, it is shown that meet these public affairs The embodiment opened, and for explaining the principle of the disclosure together with description.

Fig. 1 is the schematic diagram according to a kind of communication system shown in an exemplary embodiment.

Fig. 2 is according to a kind of method setting up connection performed by server shown in an exemplary embodiment Flow chart.

Fig. 3 is according to a kind of method setting up connection performed by server shown in an exemplary embodiment The flow chart of middle step S13.

Fig. 4 is another flow chart according to a kind of method setting up connection shown in an exemplary embodiment.

Fig. 5 be according to shown in an exemplary embodiment by a kind of method setting up connection of client executing Flow chart.

Fig. 6 be according to shown in an exemplary embodiment by a kind of method setting up connection of client executing Another flow chart.

Fig. 7 is according to a kind of dress setting up connection being configured in server shown in an exemplary embodiment The block diagram put.

Fig. 8 is according to a kind of dress setting up connection being configured in server shown in an exemplary embodiment In putting, second sets up the block diagram of module.

Fig. 9 is according to a kind of dress setting up connection being configured in server shown in an exemplary embodiment Another block diagram put.

Figure 10 is to set up connection according to a kind of of being configured in server shown in an exemplary embodiment The another block diagram of device.

Figure 11 is to set up connection according to a kind of of being configured in client shown in an exemplary embodiment The block diagram of device.

Figure 12 is to set up connection according to a kind of of being configured in client shown in an exemplary embodiment Another block diagram of device.

Figure 13 is to set up connection according to a kind of of being configured in client shown in an exemplary embodiment The another block diagram of device.

Figure 14 is the block diagram according to a kind of device shown in an exemplary embodiment.

Figure 15 is the block diagram according to a kind of device shown in an exemplary embodiment.

Detailed description of the invention

Here will illustrate exemplary embodiment in detail, its example represents in the accompanying drawings.Following When description relates to accompanying drawing, unless otherwise indicated, the same numbers in different accompanying drawings represents same or analogous Key element.Embodiment described in following exemplary embodiment does not represent the institute consistent with the disclosure There is embodiment.On the contrary, they only with as appended claims describes in detail, the one of the disclosure The example of the apparatus and method that a little aspects are consistent.

Before introducing the method setting up connection that the disclosure provides, first to being applicable to what the disclosure provided A kind of possible communication system setting up the method connected is introduced.This communication system may include that visitor Family end, agency (proxy) server, web server.Wherein, client and proxy server it Between communication connection be HTTPS connect, the communication connection between proxy server and web server It is that HTTP connects.One proxy server can connect multiple web server.

Fig. 1 is a kind of possible schematic diagram of this communication system.Fig. 1 is one with the quantity of client, The quantity of proxy server is one, the quantity of web server be N number of as a example by, wherein, N is big In the integer equal to 1.

It follows that introduce the method setting up connection that the disclosure provides.Fig. 2 is according to an exemplary enforcement The flow chart of a kind of method setting up connection exemplified, as in figure 2 it is shown, the method that this foundation connects is used In server, this server can be the proxy server in above-mentioned communication system.This foundation connects Method comprise the following steps.

In step s 11, according to receive by client send for setting up a HTTPS even The first solicited message connect, sets up a described HTTPS and connects.

In step s 12, the session parameter of the first session that a described HTTPS connects is preserved.

In step s 13, receive described client send for set up the 2nd HTTPS connect The second solicited message time, according to the session parameter of described first session, set up described 2nd HTTPS Connect.

In the disclosure, in order to not only reach the effect of secrecy but also can improve to set up the efficiency that HTTPS connects, Can set up between server with client in advance HTTPS be connected (for convenience of describe, referred to as first HTTPS connects), so, after completing a HTTPS establishment of connection, if needed visitor Again set up HTTPS between family end and server to be connected (for convenience of description, the referred to as the 2nd HTTPS company Connect), then the session parameter of the first session that can connect with multiplexing the oneth HTTPS, it is not necessary to both sides enter again The negotiation of row session parameter, thus decrease and set up the time that the 2nd HTTPS connection is spent.

In step s 11, the process bag that a HTTPS connects is set up between a client and a server The key step included is as follows:

1) user end to server sends for setting up the first solicited message that a HTTPS connects；

2), after server receives the first solicited message, the session identification of the first session is created for client (session id), is used for identifying client, and the session identification of the first session is sent to client, And consult the session parameter of the first session with client, wherein, the session parameter of a session includes: should The encrypting and decrypting scheme that in session, server and client side each uses；

3) server and client utilize the session parameter of the first session negotiated, and complete first HTTPS establishment of connection.

In step s 12, the session parameter of the first session negotiated is saved in server originally by server Ground session cache in, due to server may and substantial amounts of client between all there is session, so The session cache (session cache) of server local may have the session parameter of multiple session.

It is connected if client needs to set up the 2nd HTTPS with server, then can send to server and use In setting up the second solicited message that the 2nd HTTPS connects, and then step S13 is performed.At server When receiving the second solicited message that client sends, session reusing technology multiplexing first can be passed through The session parameter of session, so, between a client and a server without the negotiation of the parameter that conversates, Session parameter according to the first session is set up the 2nd HTTPS and is connected, thus decreases and set up second HTTPS connects the time spent.

Use technique scheme, set up the 2nd HTTPS between a client and a server even at needs Before connecing, pre-build that a HTTPS connects, in order to utilize the first meeting that a HTTPS connects The session parameter of words, simplifies and sets up the process that the 2nd HTTPS connects, thus decrease and set up second HTTPS connects the time spent, and decreases user and waits when the 2nd HTTPS connection establishment is successful Between, additionally, for user, pre-build that the process that a HTTPS connects completes on backstage, The process that a HTTPS connects is set up in user's not perception, improves Consumer's Experience.

Alternatively, as it is shown on figure 3, described 2nd HTTPS that sets up in step S13 connects, including:

Step S131: obtain the session identification of described first session from described second solicited message；

Step S132: according to the session identification of described first session, from the meeting of each session stored Words parameter obtains the session parameter of described first session；

Step S133: according to the session parameter of described first session, sets up described 2nd HTTPS and connects.

Due to above-mentioned set up the oneth HTTPS connect during, server be client create the first meeting The session identification of words, and the session identification of the first session is sent to client, so receiving in client After the session identification of the first session, it is used for setting up certain HTTPS even if again sent to server The solicited message connect, then can carry the session identification of the first session in this solicited message, so that clothes Business device knows which client is the client sending this solicited message be.

It is connected if client needs to set up the 2nd HTTPS with server, then can send to server and use In setting up the second solicited message that the 2nd HTTPS connects, the second solicited message is carried the first session Session identification.Therefore, server, can be from the second solicited message after receiving the second solicited message The session identification of middle acquisition the first session, determines the session of the first session by the session identification of the first session Parameter.Wherein, server determines the mistake of session parameter of the first session by the session identification of the first session Journey is as follows:

In the preceding article it is stated that due to server may and substantial amounts of client between all there is session, So may there be the session parameter of multiple session in the session cache of server local.Server according to The session identification of the first session, first finds and the first session from the session cache of server local The session parameter of session identification coupling, the session parameter found is the session parameter of the first session, so After the session parameter found is extracted from the session cache of server local.

After server extracts the session parameter of the first session from the session cache of server local, can With the session parameter of multiplexing the first session, compared to typically setting up the process that HTTPS connects, eliminate The process of consulting session parameter between a client and a server, can be according to the session parameter of the first session Set up the 2nd HTTPS to connect.

Alternatively, as shown in Figure 4, before performing step S11, server can also carry out following step Rapid:

Step S100: detecting that the default application program being arranged in described client is in startup shape During state, or determine described client in time redirecting webpage and include security information, send out to described client Pushed information, described pushed information is sent to be used for pointing out described client to send described first to described server Solicited message；

Step S101: receive the institute that described client sends to described server based on described pushed information State the first solicited message.

Setting up before a HTTPS is connected between server with client, server can detect and be No existence needs the scene of the session parameter of the first session that multiplexing the oneth HTTPS connects.Server can To be periodically detected the session parameter that whether there is the first session that can connect with multiplexing the oneth HTTPS Scene, it is also possible to persistently detect whether to exist the meeting of the first session that can connect with multiplexing the oneth HTTPS The scene of words parameter, in actual applications can be with flexible design, and the disclosure does not limits.

Wherein, server detects whether to exist the meeting of the first session needing multiplexing the oneth HTTPS to connect The scene of words parameter, has and is not limited to a following two embodiment:

The first embodiment is: whether the default application program that server detection is installed on the client is located In starting state.

Default application program can include the application program relating to individual subscriber privacy or property safety, example Such as: Taobao App, remove where App, Alipay App etc..Certainly, default application program also may be used To include the application program of user's sets itself.Individual privacy includes: the login name of user and the closeest Code, the telephone number of user, the information of effective identity certificate, certificate address information etc..Property safety includes: The bank card number of user, payment information etc..

If presetting application program to be in starting state, then existing needs to carry out the possibility of HTTPS connection, So that reaching the individual privacy of secure user or the effect of property safety.Therefore, first server can be Judging whether the application program installed on the client belongs to default application program, then detection belongs to default Whether the application program of application program is in starting state, and server installs on the client pre-determining If after application program is in starting state, can to client send pushed information, with point out client to Server sends the first solicited message, and so, client, can be in advance after receiving this pushed information Set up a HTTPS to be connected with server, in order to application program because of needs display login interface or Payment interface and needing sets up the 2nd HTTPS when connecting, the first session that multiplexing the oneth HTTPS connects Session parameter.Therefore, user end to server sends the first solicited message, and then step S11 is held OK.

Use technique scheme, install default application program on the client be in starting state it After, can pre-build that a HTTPS connects, so, log in boundary at application program because of needs display Face or payment interface and needing carries out the 2nd HTTPS when connecting, multiplexing the oneth HTTPS connect first The session parameter of session, sets up, to reduce, the time that the 2nd HTTPS connection is spent.

The second embodiment is: server judges whether the webpage to be redirected of client includes secrecy letter Breath.

Security information as described above, pacify by the individual privacy that can include user or the property relating to user Full information.In like manner, if the webpage to be redirected of client includes security information, then there are needs and carry out The possibility that HTTPS connects, in order to reach the individual privacy of secure user or relate to the property of user The effect of the information of safety.Therefore, first server can determine that client currently presents to the net of user Page, the webpage then currently presenting to user according to client determines the webpage to be redirected of client, finally Judge whether the webpage to be redirected of client includes security information, determining the webpage bag to be redirected of client After including security information, pushed information can be sent to client, to point out user end to server to send the One solicited message, so, client, after receiving this pushed information, can be set up with server in advance Oneth HTTPS connects, in order to because webpage to be redirected includes that security information needs to set up second When HTTPS connects, the session parameter of the first session that multiplexing the oneth HTTPS connects.Therefore, client End sends the first solicited message to server, and then step S11 is performed.

Use technique scheme, if currently present to the webpage of user according to client, estimate visitor The webpage to be redirected of family end includes security information, then can pre-build that a HTTPS connects, So, including that security information needs foundation to need to carry out the 2nd HTTPS and connects because of webpage to be redirected Time, the session parameter of the first session that multiplexing the oneth HTTPS connects, set up the 2nd HTTPS to reduce Connect the time spent.

Alternatively, server is after execution of step S11, it is also possible to execution following steps:

Every preset duration, detect whether to receive described first solicited message that described client sends.

Due to the mobility of client, received client successively transmission so existing by different servers With setting up the situation of request message that HTTPS connects.If different servers receives client The use successively sent sets up the request message that HTTPS connects, then can only coverlet due to session cache Machine stores, it is impossible to distributed storage, cause the HTTPS that pre-builds connect corresponding session parameter without Method is re-used.

Accordingly, it would be desirable to after setting up a HTTPS connection between a client and a server, client Every preset duration, sending repetitive requests information to server, repetitive requests information is used for reconstruction first HTTPS connects and carries the session identification of the first session, and so, server receives repetitive requests letter After breath, according to the session identification of the first session, can confirm that in the session cache of server local there be storage The session parameter mated with the session identification of the first session, to avoid when setting up the 2nd HTTPS and connecting Cannot multiplexing the first session session parameter situation occur.

Using technique scheme, server is in the session cache of scheduled duration detection server local Storage has the session parameter for multiplexing, it is to avoid causing because of moving of client cannot multiplexing session parameter Situation occur.

It follows that introduce the method setting up connection that the disclosure provides.Fig. 5 is according to an exemplary enforcement The flow chart of a kind of method setting up connection exemplified, as it is shown in figure 5, the method that this foundation connects is used In client or in the default application program that is installed in client, this client can be above-mentioned communication Client in system, this default application program can be application program described above.This foundation is even The method connect comprises the following steps.

In step s 51, send for setting up the first request letter that a HTTPS connects to server Breath.

In step S52, set up a described HTTPS with described server and be connected.

In step S53, sending, to described server, second connected for setting up the 2nd HTTPS please Seek information, so that described server is according to the session ginseng of the first session of a described HTTPS connection Number, sets up described 2nd HTTPS and connects.

Step S51 and step S52 are to set up the step during a HTTPS connects, above It is stated that just repeat no more at this.Set up a HTTPS between a client and a server to connect Afterwards, client can send to server be used for setting up when the 2nd HTTPS connection set up by needs The second solicited message that 2nd HTTPS connects, then the first session that can connect with multiplexing the oneth HTTPS Session parameter, it is not necessary to both sides conversate the negotiation of parameter again, thus decrease and set up second HTTPS connects the time spent.

Alternatively, as shown in Figure 6, client is before performing step S51, it is also possible to perform following appointing One step:

Step S50A: determine that the default application program being arranged in described client is in starting state；

Step S50B: determine that the webpage to be redirected of described client includes security information；

Step S50C: receiving the pushed information that described server sends, described pushed information is used for pointing out Described client sends described first solicited message to described server.

Explanation to default application program refer to above, just repeat no more at this.

In like manner, if presetting application program to be in starting state, then existing needs to carry out HTTPS connection Possibility, in order to reach the individual privacy of secure user or the effect of property safety.Therefore, client Can first determine whether to be arranged on whether client belongs to default application program, then from application program with it Detection belongs to whether the application program of default application program is in starting state, is arranged on client determining After default application program from it is in starting state, step S61 can be performed, i.e. send out to server Send the first solicited message, and then realization is set up a HTTPS in advance and is connected with server, in order to When application program needs to set up the 2nd HTTPS connection because of needs display login interface or payment interface, The session parameter of the first session that multiplexing the oneth HTTPS connects.

Explanation to security information refer to above, just repeat no more at this.In like manner, if client Webpage to be redirected includes security information, then existing needs to carry out the possibility of HTTPS connection, in order to reach To the individual privacy of secure user or relate to the effect of information of property safety of user.Therefore, client First end can determine that client self currently presents to the webpage of user, then works as according to client self Before present to the webpage of user and determine the webpage to be redirected of client self, finally judge client self Whether webpage to be redirected includes security information, includes secrecy letter at the webpage to be redirected determining client self After breath, step S51 can be performed, i.e. send the first solicited message to server, so realize in advance with Server is set up a HTTPS and is connected, in order to because webpage to be redirected includes that security information needs to build When vertical 2nd HTTPS connects, the session parameter of the first session that multiplexing the oneth HTTPS connects.

Use technique scheme, if currently present to the webpage of user according to client self, estimate Webpage to be redirected to client self includes security information, then can pre-build a HTTPS Connect, so, including that security information needs foundation to need to carry out the 2nd HTTPS because of webpage to be redirected During connection, the session parameter of the first session that multiplexing the oneth HTTPS connects, set up second to reduce HTTPS connects the time spent.

Server determine need HTTPS to connect time, can to client send pushed information, to carry Show that user end to server sends the first solicited message.Two kinds of possible scenes are: server is determining peace After dress default application program on the client is in starting state, send pushed information to client, or Person's server determine client after redirecting webpage and including security information, to client send push letter Breath.Client, after receiving this pushed information, can set up a HTTPS even in advance with server Connect, can perform step S51, i.e. send the first solicited message to server, so realize in advance with clothes Business device is set up a HTTPS and is connected, in order to because webpage to be redirected includes that security information needs to set up When 2nd HTTPS connects, the session parameter of the first session that multiplexing the oneth HTTPS connects.

Alternatively, client is after execution of step S52, it is also possible to execution following steps:

Accordingly, it would be desirable to after setting up a HTTPS connection between a client and a server, client Every preset duration, sending repetitive requests information to server, repetitive requests information is used for reconstruction first HTTPS connects and carries the session identification of the first session, in order to server receives repetitive requests letter After breath, according to the session identification of the first session, can confirm that in the session cache of server local there be storage The session parameter mated with the session identification of the first session, to avoid when setting up the 2nd HTTPS and connecting Cannot multiplexing the first session session parameter situation occur.

Using technique scheme, client sends repeat request message every scheduled duration to server, So that storage has the session parameter for multiplexing in the session cache of server detection server local, it is to avoid Cause because of moving of client the situation of multiplexing session parameter occurring.

The interaction that disclosure offer is set up method below that connect illustrates.This interaction Including:

1) client determines that being arranged on client is in starting state from default application program with it, or Determine that the webpage to be redirected of client self includes security information；

2) user end to server sends for setting up the first solicited message that a HTTPS connects；

3) server receives the first solicited message, creates the session identification of the first session for client, and The session identification of the first session is sent to client；

4) server and client consult the session parameter of the first session, and preserve the first meeting negotiated The session parameter of words；

5) server and client utilize the session parameter of the first session negotiated, and complete first HTTPS establishment of connection；

6) client determines that being arranged on client enters login from default application program with it or pay page Face, or determine that client enters the webpage to be redirected including security information；

7) user end to server sends for setting up the second solicited message that the 2nd HTTPS connects；

8) server receives the second solicited message, obtains the session of the first session from the second solicited message Mark；

9) server is according to the session identification of the first session, from the session parameter of each session stored The session parameter of middle acquisition the first session；

10) session parameter of server multiplexing the first session, and then set up the 2nd HTTPS connection.

Alternatively, client is having performed above-mentioned steps 5) after, can service every preset duration Device sends repetitive requests information, and repetitive requests information connects for rebuilding a HTTPS and carries first The session identification of session, in order to server detects whether to receive repetitive requests information, and then avoids nothing The session parameter of method multiplexing the first session.

Based on same inventive concept, the disclosure also provides for a kind of device setting up connection, and this device is configured at In server, this server can be the proxy server in the communication system shown in Fig. 1.This device May be used for performing the arbitrary described method of Fig. 2-Fig. 4.

As it is shown in fig. 7, Fig. 7 is the device frame according to a kind of image procossing shown in an exemplary embodiment Figure.With reference to Fig. 7, this device 100 includes first setting up module 111, preserving module 112 and second and build Formwork erection block 113.

First sets up module 111, be configured to according to receive by client send for setting up the The first solicited message that one HTTPS connects, sets up a described HTTPS and connects；

Preserve module 112, be configured to preserve the session ginseng of the first session that a described HTTPS connects Number；

Second sets up module 113, be configured to receive described client send for setting up second During the second solicited message that HTTPS connects, according to the session parameter of described first session, set up described 2nd HTTPS connects.

Alternatively, as shown in Figure 8, described second set up module 113 and include:

First obtains submodule 1131, is configured to obtain described first meeting from described second solicited message The session identification of words；

Second obtains submodule 1132, is configured to the session identification according to described first session, from depositing The session parameter of each session of storage obtains the session parameter of described first session；

Set up submodule 1133, be configured to the session parameter according to described first session, set up described Two HTTPS connect.

Alternatively, as it is shown in figure 9, described device is except including that first sets up module 111, preservation module 112 Outside setting up module 113 with second, also include:

First sending module 114, is configured to set up module described first and sets up a described HTTPS Before connection, when detecting that the default application program being arranged in described client is in starting state, Or determine described client in time redirecting webpage and include security information, to described client send push Information, described pushed information is used for pointing out described client to send described first request letter to described server Breath；

Receiver module 115, is configured to receive described client based on described pushed information to described service Described first solicited message that device sends.

Alternatively, as shown in Figure 10, described device is except including that first sets up module 111, preservation module 112 and second set up outside module 113, also include:

Second sending module 116, is configured to set up module described first and sets up between client After oneth HTTPS connects, every preset duration, detect whether to receive what described client sent Repetitive requests information, described repetitive requests information is used for rebuilding a described HTTPS and connects and carry institute State the session identification of the first session.

About the device in above-described embodiment, the concrete mode that wherein modules performs to operate is having Close in the embodiment of the method and be described in detail, explanation will be not set forth in detail herein.

Based on same inventive concept, the disclosure also provides for a kind of device setting up connection, and this device is configured at In client, this client can be the client in the communication system shown in Fig. 1.This device can be used In performing the arbitrary described method of Fig. 5-Fig. 6.

As shown in figure 11, Figure 11 is the device according to a kind of image procossing shown in an exemplary embodiment Block diagram.With reference to Figure 11, this device 200 includes the first sending module 211, sets up module 212 and second Sending module 213.

First sending module 211, is configured to send for setting up what a HTTPS connected to server First solicited message；

Set up module 212, be configured to set up a described HTTPS with described server and be connected；

Second sending module 213, is configured to send for setting up the 2nd HTTPS to described server The second solicited message connected, so that described server is according to the first of a described HTTPS connection The session parameter of session, sets up described 2nd HTTPS and connects.

Figure 11 is a kind of possible block diagram of device 200.Alternatively, device 200 is alternatively possible Block diagram as shown in figure 12.Figure 12 with device 200 except including the first sending module 211, setting up module 212 and second outside sending module 213, also includes first determining module 214, second determining module 215 And as a example by receiver module 216.

Alternatively, device 200 is except including the first sending module 211, setting up module 212 and the second transmission Outside module 213, it is also possible to include first determine module 214, second determine module 215 and receive In module 216 any one or appoint both.

Wherein, first determines module 214, the second function determining module 215 and receiver module 216 As follows:

First determines module 214, is configured to send for setting up the to server at described sending module Before the first solicited message that one HTTPS connects, determine the default application being arranged in described client Program is in starting state；

Second determines module 215, is configured to send for setting up the to server at described sending module Before the first solicited message that one HTTPS connects, determine that the webpage to be redirected of described client includes protecting Confidential information；

Receiver module 216, is configured to send for setting up first to server at described sending module Before the first solicited message that HTTPS connects, receive the pushed information that described server sends, described Pushed information is used for pointing out described client to send described first solicited message to described server.

Alternatively, as shown in figure 13, device 200 is except including the first sending module 211, setting up module 212 and second outside sending module 213, also include:

3rd sending module 217, is configured to set up described the at described module and the described server set up After one HTTPS connects, every preset duration, send repetitive requests information, institute to described server State repetitive requests information and connect for rebuilding a described HTTPS and carry the session of described first session Mark.

Figure 14 is the frame according to a kind of device 1400 for setting up connection shown in an exemplary embodiment Figure.Such as, device 1400 can be with client, e.g. mobile phone, computer, and digital broadcasting is eventually End, messaging devices, game console, tablet device, armarium, body-building equipment, individual number Word assistant etc..

With reference to Figure 14, device 1400 can include following one or more assembly: processes assembly 1402, Memorizer 1404, electric power assembly 1406, multimedia groupware 1408, audio-frequency assembly 1410, input/output (I/O) interface 1412, sensor cluster 1414, and communications component 1416.

Process assembly 1402 and generally control the integrated operation of device 1400, such as with display, call, The operation that data communication, camera operation and record operation are associated.Process assembly 1402 and can include one Individual or multiple processors 1420 perform instruction, to complete the whole or portion of the method that above-mentioned foundation connects Step by step.Additionally, process assembly 1402 can include one or more module, it is simple to process assembly 1402 And mutual between other assemblies.Such as, process assembly 1402 and can include multi-media module, with side Just multimedia groupware 1408 and process between assembly 1402 mutual.

Memorizer 1404 is configured to store various types of data to support the operation at device 1400. The example of these data includes any application program for operation on device 1400 or the instruction of method, Contact data, telephone book data, message, picture, video etc..Memorizer 1404 can be by any The volatibility of type or non-volatile memory device or combinations thereof realize, as static random-access is deposited Reservoir (SRAM), Electrically Erasable Read Only Memory (EEPROM), erasable programmable is only Reading memorizer (EPROM), programmable read only memory (PROM), read only memory (ROM), Magnetic memory, flash memory, disk or CD.

The various assemblies that electric power assembly 1406 is device 1400 provide electric power.Electric power assembly 1406 is permissible Including power-supply management system, one or more power supplys, and other with generate for device 1400, manage and The assembly that distribution electric power is associated.

One output interface of offer that multimedia groupware 1408 is included between described device 1400 and user Screen.In certain embodiments, screen can include liquid crystal display (LCD) and touch panel (TP). If screen includes that touch panel, screen may be implemented as touch screen, to receive the input from user Signal.Touch panel includes that one or more touch sensor touches with sensing, slides and on touch panel Gesture.Described touch sensor can not only sense touch or the border of sliding action, but also detects The persistent period relevant to described touch or slide and pressure.In certain embodiments, multimedia group Part 1408 includes a front-facing camera and/or post-positioned pick-up head.When device 1400 is in operator scheme, During such as screening-mode or video mode, front-facing camera and/or post-positioned pick-up head can receive many matchmakers of outside Volume data.Each front-facing camera and post-positioned pick-up head can be a fixing optical lens system or tool There are focal length and optical zoom ability.

Audio-frequency assembly 1410 is configured to output and/or input audio signal.Such as, audio-frequency assembly 1410 Including a mike (MIC), when device 1400 is in operator scheme, such as call model, record mould When formula and speech recognition mode, mike is configured to receive external audio signal.The audio frequency letter received Number can be further stored at memorizer 1404 or send via communications component 1416.Implement at some In example, audio-frequency assembly 1410 also includes a speaker, is used for exporting audio signal.

I/O interface 1412 is to process to provide interface between assembly 1402 and peripheral interface module, above-mentioned outside Enclosing interface module can be keyboard, puts striking wheel, button etc..These buttons may include but be not limited to: homepage Button, volume button, start button and locking press button.

Sensor cluster 1414 includes one or more sensor, for providing each side for device 1400 The state estimation in face.Such as, what sensor cluster 1414 can detect device 1400 beats opening/closing shape State, the relative localization of assembly, the most described assembly is display and the keypad of device 1400, sensing Device assembly 1414 can also detect device 1400 or the position change of 1,400 1 assemblies of device, user The presence or absence contacted with device 1400, device 1400 orientation or acceleration/deceleration and device 1400 Variations in temperature.Sensor cluster 1414 can include proximity transducer, is configured to do not appointing The existence of object near detection during what physical contact.Sensor cluster 1414 can also include that light senses Device, such as CMOS or ccd image sensor, is used for using in imaging applications.In some embodiments In, this sensor cluster 1414 can also include acceleration transducer, gyro sensor, and magnetic senses Device, pressure transducer or temperature sensor.

Communications component 1416 is configured to facilitate wired or wireless mode between device 1400 and other equipment Communication.Device 1400 can access wireless network based on communication standard, such as WiFi, 2G or 3G, Or combinations thereof.In one exemplary embodiment, communications component 1416 receives via broadcast channel Broadcast singal or broadcast related information from external broadcasting management system.An exemplary embodiment In, described communications component 1416 also includes near-field communication (NFC) module, to promote junction service. Such as, can be based on RF identification (RFID) technology in NFC module, Infrared Data Association (IrDA) Technology, ultra broadband (UWB) technology, bluetooth (BT) technology and other technologies realize.

In the exemplary embodiment, device 1400 can be by one or more application specific integrated circuits (ASIC), digital signal processor (DSP), digital signal processing appts (DSPD), able to programme patrol Collect device (PLD), field programmable gate array (FPGA), controller, microcontroller, micro-process Device or other electronic components realize, for performing the method that above-mentioned foundation connects.

In the exemplary embodiment, a kind of non-transitory computer-readable storage including instruction is additionally provided Medium, such as, include the memorizer 1404 of instruction, and above-mentioned instruction can be by the processor 1420 of device 1400 Perform to complete the method that above-mentioned foundation connects.Such as, described non-transitory computer-readable recording medium Can be ROM, random access memory (RAM), CD-ROM, tape, floppy disk and light data Storage device etc..

Figure 15 is the frame according to a kind of device 1500 for setting up connection shown in an exemplary embodiment Figure.Such as, device 1500 may be provided in a server.With reference to Figure 15, device 1500 includes place Managing assembly 1522, it farther includes one or more processor, and by representated by memorizer 1532 Memory resource, can be by processing the instruction of execution of assembly 1522 for storage, such as application program. In memorizer 1532 application program of storage can include one or more each corresponding to one The module of group instruction.It is configured to perform instruction, to perform above-mentioned foundation additionally, process assembly 1522 The method connected.

Device 1500 can also include that a power supply module 1526 is configured to perform the electricity of device 1500 Source control, a wired or wireless network interface 1550 is configured to device 1500 is connected to network, With input and output (I/O) interface 1558.Device 1500 can operate based on being stored in memorizer The operating system of 1532, such as Windows ServerTM, Mac OS XTM, UnixTM, LinuxTM, FreeBSDTM or similar.

Those skilled in the art, after considering description and putting into practice the disclosure, will readily occur to its of the disclosure Its embodiment.The application is intended to any modification, purposes or the adaptations of the disclosure, this A little modification, purposes or adaptations are followed the general principle of the disclosure and include that the disclosure is not disclosed Common knowledge in the art or conventional techniques means.Description and embodiments is considered only as example Property, the true scope of the disclosure and spirit are pointed out by claim below.

It should be appreciated that the disclosure be not limited to described above and illustrated in the accompanying drawings accurately Structure, and various modifications and changes can carried out without departing from the scope.The scope of the present disclosure is only by institute Attached claim limits.

Claims

1. the method setting up connection, it is characterised in that be applied to server, described method includes:

Method the most according to claim 1, it is characterised in that described set up described 2nd HTTPS Connect, including:

Method the most according to claim 1, it is characterised in that set up described first described Before HTTPS connects, described method also includes:

Method the most according to claim 1, it is characterised in that between described foundation and client The oneth HTTPS connect after, described method also includes:

5. the method setting up connection, it is characterised in that be applied to client, described method includes:

Set up a described HTTPS to be connected with described server；

Method the most according to claim 5, it is characterised in that be used for server transmission described Before setting up the first solicited message that a HTTPS connects, described method the most also includes following arbitrary Person:

Method the most according to claim 5, it is characterised in that set up with described server described After a described HTTPS connects, described method also includes:

8. the device setting up connection, it is characterised in that described device is configured in server, described Device includes:

Second sets up module, be configured to receive described client send for setting up second During the second solicited message that HTTPS connects, according to the session parameter of described first session, set up described the Two HTTPS connect.

Device the most according to claim 8, it is characterised in that described second sets up module includes:

Device the most according to claim 8, it is characterised in that described device also includes:

First sending module, is configured to set up module described first and sets up a described HTTPS even Before connecing, when detecting that the default application program being arranged in described client is in starting state, or Determine described client in time redirecting webpage and include security information, to described client send push letter Breath, described pushed information is used for pointing out described client to send described first solicited message to described server；

11. devices according to claim 8, it is characterised in that described device also includes:

Second sending module, is configured to set up module described first and sets up first between client After HTTPS connects, every preset duration, detect whether to receive that described client sends that repeat please Ask information, described repetitive requests information to be used for rebuilding a described HTTPS connect and carry described first The session identification of session.

12. 1 kinds of devices setting up connection, it is characterised in that described device is configured in client, institute State device to include:

13. devices according to claim 12, it is characterised in that described device the most also include with Descend any one:

First determines module, is configured to send for setting up first to server at described sending module Before the first solicited message that HTTPS connects, determine the default application program being arranged in described client It is in starting state；

Second determines module, is configured to send for setting up first to server at described sending module Before the first solicited message that HTTPS connects, determine that the webpage to be redirected of described client includes secrecy letter Breath；

14. devices according to claim 12, it is characterised in that described device also includes:

3rd sending module, is configured to set up described first in described module of setting up with described server After HTTPS connects, every preset duration, send repetitive requests information to described server, described heavy Multiple solicited message connects for rebuilding a described HTTPS and carries the session identification of described first session.

15. 1 kinds of devices setting up connection, it is characterised in that described device is configured in server, institute State device to include:

Processor；

For storing the memorizer of processor executable；

Wherein, described processor is configured to:

16. 1 kinds of devices setting up connection, it is characterised in that described device is configured in client, institute State device to include:

Processor；

For storing the memorizer of processor executable；

Wherein, described processor is configured to:

Set up a described HTTPS to be connected with described server；