WO2019019593A1

WO2019019593A1 - Stateless communication security signature method, terminal and server end

Info

Publication number: WO2019019593A1
Application number: PCT/CN2018/074757
Authority: WO
Inventors: 彭冠宇; 兰海宇; 宋起涛; 李屹
Original assignee: 深圳市光峰光电技术有限公司
Priority date: 2017-07-28
Filing date: 2018-01-31
Publication date: 2019-01-31
Also published as: CN109309655A; CN109309655B

Abstract

Provided is a stateless communication security signature method. The method comprises the following steps: a terminal storing a pre-determined key unified with a server end; the terminal obtaining an encrypted first character string after performing encryption at least twice; the server end carrying out encryption according to the encryption mode of the terminal to obtain a second character string; and the server end comparing whether the first character string and the second character string are the same, so as to determine whether or not to accept a request from the terminal. Further provided are a terminal and a server end. Compared with the related art, the stateless communication security signature method, the terminal and the server end in the present invention have higher security and better reliability.

Description

Stateless communication security signature method, terminal and server

Technical field

The invention belongs to the technical field of communications, and in particular relates to a stateless communication security signature method, a terminal and a server end.

Background technique

With the prevalence of the Internet age, communication devices are becoming more and more part of people's lives. At the same time, communication security is also a concern of people, which directly affects the use of communication devices.

In the related art, a front-end (terminal) and a back-end (server-side) stateless communication mechanism of a communication system are commonly used to overcome communication security problems. In the front-end and back-end stateless communication mechanism in the related art, when the front end is in a user login request, the back end returns a token token to the front end, and the subsequent request carries a token token on the parameter. The backend verifies the token token to confirm the user status.

technical problem

However, the above-mentioned communication mechanism in the related art cannot guarantee the terminal in the case of a series of problems such as interface security, Ddoc attack (or frequent request, etc.), security of the data background, and possible malicious attacks by competitors. Certification.

Therefore, it is necessary to provide a new stateless communication security signature method to solve the above problems.

Technical solution

In view of the above deficiencies of the prior art, the present invention provides a stateless communication security signature method, terminal and server end with high security and reliability.

The invention provides a stateless communication security signature method, the method comprising the following steps:

The terminal stores a predetermined key that is unified with the server side;

Sending, by the terminal, a communication request to the server: the terminal encrypts the predetermined key, the current timestamp, and the function parameter by at least two times to obtain the encrypted first character string, and the first character string and the current time Stamping into the header of the data packet, and sending the data packet to the server side to implement a communication request;

The terminal receives data corresponding to a communication request sent by the server.

Preferably, in the step of sending the communication request to the server by the terminal, the two encryption methods adopt the HmacShal encryption algorithm and the md5 digest encryption algorithm in sequence.

Preferably, the first character string is a 32-bit sequence.

The invention also provides a stateless communication security signature method, the method comprising the following steps:

The server side defines a predetermined key that is unified with the terminal;

Receiving, by the server, a data packet of a communication request sent by the terminal, where the data packet includes a first character string obtained by the terminal after being encrypted, wherein the first character string is determined by a predetermined key of the terminal The current timestamp and function parameters are obtained by encrypting at least twice;

The server generates a second character string: the server side encrypts the predetermined key, the current timestamp, and the function parameter according to an encryption manner of the terminal to obtain a second character string;

The server compares whether the first character string and the second character string are the same. If not, the communication request fails. If the same, the server end uses the IP address of the terminal and the first character. The string is a keyword to search the database of the server and determine whether the first string has been requested, and if so, the data request fails; if not, proceed to the next step;

The server compares whether the current timestamp in the received data packet is newer than a timestamp corresponding to the IP of the terminal stored in the database of the server, and if not, the data request fails, and the The timestamp corresponding to the IP of the terminal in the database of the server is updated to the current timestamp in the data packet; if yes, the process proceeds to the next step;

The server updates the first character string corresponding to the IP of the terminal stored in the database and the corresponding timestamp as the first character string and the current timestamp in the data packet, and The data requested by the terminal is sent to the terminal.

Preferably, in the data packet that the server end receives the communication request sent by the terminal, the two encryption methods adopt the HmacShal encryption algorithm and the md5 digest encryption algorithm in sequence.

Preferably, the first character string is a 32-bit sequence.

Preferably, in the step of generating the second character string by the server, the current timestamp is extracted from a header of the data packet received by the server, and the function parameter is from the server end The interface that establishes communication for the terminal is obtained.

Preferably, the method further includes:

The server updates its database: the server saves or updates the first character string and time stamp requested by the terminal in the server-side database in units of the terminal's IP address, so that the request is made. The first string that has passed cannot repeat the request, and the timestamp is required to be larger than the current timestamp saved by the database of the server.

Preferably, the method further includes:

The server updates its database: the server saves or updates the first character string and time stamp requested by the terminal in the server-side database in units of the terminal's IP address, so that the request is made. The first string cannot be repeated, and the timestamp is required to be larger than the current timestamp saved by the server-side database; when the verification is correct by the predetermined key signature, but the server-side database The saved current timestamp is not less than the timestamp of the request, intercepting the request, and modifying the current timestamp in the database of the server side and recording the timestamp of the request.

Preferably, the method further includes:

The server side updates its database: the server side saves or updates the first character string requested by the terminal in the database of the server end in the unit of the IP address of the terminal, so that the requested The first string cannot be repeated.

Preferably, the method further includes:

The server updates its database: the timestamp of the terminal is a request network timestamp or a return timestamp returned by a server dedicated to the acquisition system time of the server cluster of the server, and the server requests the terminal The first character string and the timestamp are saved or updated in a database of the server side in units of IP addresses, so that the requested first character string cannot be repeatedly requested, and the timestamp ratio is required The current timestamp saved by the database on the server side is large.

Preferably, the method further includes:

The server side updates its database: the server side saves or updates the first character string and timestamp requested by the terminal in the database of the server side in the unit of the IP address, and clears the data at a preset time. Each time the first string list saved by the IP address is compared, if the first string is not in the first string list, the request is passed.

The invention also provides a terminal comprising: a processor, a transceiver, a memory, a user interface and a bus interface, wherein:

The processor is configured to read a program in the memory and perform the steps in the stateless communication security signature method provided above.

The invention also provides a server end, comprising: a processor, a transceiver, a memory, a user interface and a bus interface, wherein:

The present invention also provides a computer readable storage medium storing a computer program that, when executed by a processor, implements the steps in the stateless communication security signature method provided above.

Beneficial effect

Compared with the related art, in the stateless communication security signature method, the terminal, and the server end of the present invention, the terminal sorts the function parameters in the data packet of the current request by specifying, and then combines the predetermined density before the request. The key and the current timestamp are sequentially obtained by using a Hmacsha1 encryption algorithm and an md5 digest encryption algorithm to obtain a 32-bit sequence and placed in the header of the requested data packet as the first character string; the server side will make the reservation The key, the current timestamp, and the function parameter are encrypted according to the encryption mode of the terminal to obtain a second character string, and the verification of the terminal request is implemented by comparing the first character string and the second character string. The same is verified. The security of the above method in the common Internet application, especially when the devices of the application systems of various smart device manufacturers need to communicate statelessly with the server end of the Internet, the security is better and the reliability is strong.

DRAWINGS

The invention will be described in detail below with reference to the accompanying drawings. The above and other aspects of the present invention will become more apparent from the detailed description of the appended claims. In the figure:

1 is a flow chart of a stateless communication security signature method provided by the present invention;

2 is a flow chart of Embodiment 1 of another stateless communication security signature method provided by the present invention;

3 is a block diagram showing a part of steps of a second embodiment of a stateless communication security signature method according to the present invention;

4 is a block diagram showing a part of steps of a third embodiment of a stateless communication security signature method according to the present invention;

FIG. 5 is a block diagram of a partial step of a fourth embodiment of a stateless communication security signature method according to the present invention; FIG.

6 is a block diagram showing a part of steps of a fifth embodiment of a stateless communication security signature method according to the present invention;

FIG. 7 is a block diagram showing a part of steps of a sixth embodiment of a stateless communication security signature method according to the present invention; FIG.

FIG. 8 is a schematic structural diagram of a terminal provided by the present invention; FIG.

9 is a schematic structural diagram of a server end according to the present invention;

FIG. 10 is a timing chart of the third embodiment corresponding to FIG. 4.

Embodiments of the invention

Specific embodiments of the present invention will be described in detail below with reference to the accompanying drawings.

The specific embodiments and examples described herein are specific embodiments of the present invention, and are intended to be illustrative of the embodiments of the present invention. limit. In addition to the implementations described herein, those skilled in the art will be able to devise other obvious technical solutions based on the disclosure of the present application and the specification, which includes any obvious use of the embodiments described herein. The alternative and modified technical solutions are all within the scope of the present invention.

Please refer to FIG. 1 , which is a flow chart of a stateless communication security signature method provided by the present invention. The invention provides a stateless communication security signature method, and the method comprises the following steps:

Step S11: The terminal stores a predetermined key secretKey unified with the server end, such as appotronics-2017.

Step S12: The terminal sends a communication request to the server: the terminal encrypts the predetermined key, the current timestamp, and the function parameter by at least two times to obtain the encrypted first string sign, and the first string sign And the current time stamp is loaded into a header header of the data packet, and the data packet is sent to the server end to implement a communication request.

In this step, the two encryption methods adopt the HmacShal encryption algorithm and the digest encryption algorithm such as md5 in sequence. Of course, the encryption method and the number of times are not limited thereto. More preferably, the first string is a 32-bit sequence.

Step S13: The terminal receives data corresponding to the communication request sent by the server.

The present invention also provides another stateless communication security signature method, which is described below in several embodiments:

Embodiment 1

FIG. 2 is a block diagram of a first embodiment of a stateless communication security signature method according to the present invention. The present invention provides another stateless communication security signature method, the method comprising the following steps:

Step S21: The server side stores a predetermined key secretKey unified with the terminal, such as appotronics-2017.

Step S22: The server end receives a data packet of a communication request sent by the terminal, where the data packet includes a first character string sign obtained by the terminal after being encrypted, where the first character string sign is The predetermined key secretKey, the current timestamp, and the function parameters of the terminal are obtained by encrypting at least twice.

In this step, the two encryption methods adopt the HmacShal encryption algorithm and the digest encryption algorithm such as md5 in sequence. Of course, the encryption method and the number of times are not limited thereto. In this embodiment, the specific:

The terminal extracts the function parameters of the requested data packet, sorts by a predetermined sorting method, such as sorting by SortMap, and traverses a pattern of generating a string: keyName=keyValue&keyName=keyValue.

For example, the server-side code implementation is as follows:

Map<String,String[]> reqMap = request.getParameterMap();

SortedMap<String,Object> sortMap = new TreeMap<String,Object>();

sortMap.putAll(reqMap);

StringBuffer stringBuffer = new StringBuffer();

For (Entry<String, String[]> entry : reqMap.entrySet()) {

stringBuffer.append(entry.getKey()).append("=")

.append(entry.getValue()).append("&");

};

And continuing to splicing the predetermined key and the current timestamp unified by the server end and the terminal: keyName=keyValue&keyName=keyValue&secrectKey=

Appotronics-2017&timeStamp=1490952002359, if the packet is empty, then only secrectKey=appotronics-2017&timeStamp=1490952002359;

Encrypting the above string using the HmacSha1 encryption algorithm to obtain the first encrypted string, wherein the secretKey is the predetermined key secretKey:appotronics-2017;

The first encrypted string is then encrypted into a 32-bit sequence using an md5 digest algorithm to obtain a first string sign. That is, the first character string sign is a 32-bit sequence.

For example, the server side implementation code is as follows:

String signValidString = MD5.encode32(CommonCodecUtils.HmacSha1(

stringBuffer.toString(), secretKey).toString());

Finally, in the header header of the requested packet of the terminal is added:

Sign: the first character string of the generated data packet;

Timestamp: the current timestamp generated by the above.

Step S23, the server generates a second string sign':

The server encrypts the predetermined key, the current timestamp, and the function parameter according to an encryption manner of the terminal to obtain a second string sign'.

In this step, the current timestamp is extracted from a header of the data packet received by the server, and the function parameter is obtained from an interface that the terminal establishes communication with the server, the predetermined key. Is known.

Step S24: The server side compares whether the first character string sign and the second character string sign' are the same:

If not the same, the data request fails;

If the same: the IP address of the terminal and the first string signal are used as keywords to search the database of the server and determine whether the first string sign has been requested, and if so, the data request fails; Then, the process proceeds to step S25.

Step S25: The server compares whether the current timestamp in the received data packet is newer than a timestamp corresponding to the IP of the terminal stored in the database of the server:

If not, the data request fails, and the timestamp corresponding to the IP of the terminal in the database of the server is updated to the current timestamp in the data packet;

If yes, the process proceeds to step S26.

Step S26, the server end updates the first character string sign corresponding to the IP of the terminal stored in the database, and the corresponding timestamp is the first character string and the current time in the data packet. Stamping and transmitting data requested by the terminal to the terminal.

Embodiment 2

Please refer to FIG. 3, which is a block diagram of a partial step of a second embodiment of a stateless communication security signature method according to the present invention.

The embodiment is basically the same as the first embodiment. The difference is that, in the embodiment, the stateless communication security signature method includes the embodiment except that the terminal time is valid and is not arbitrarily changed. In addition to steps S21-S26, the method further includes:

Step S27: The server side saves or updates the first character string and the timestamp requested by the terminal in the database of the server by the IP address of the terminal, and makes a request each time the comparison is performed. The first string cannot be repeated, and the timestamp is required to be larger than the current timestamp saved by the database of the server, so that the terminal external request cannot be repeated frequently.

Embodiment 3

Please refer to FIG. 4, which is a partial flow chart of a third embodiment of a stateless communication security signature method according to another embodiment of the present invention.

The embodiment is basically the same as the first embodiment, except that in the case that the terminal time is valid, but the system time may be occasionally modified by the user, in the embodiment, the stateless communication security signature method includes the first embodiment. In addition to steps S21-S26, it also includes:

Step S27: The server side saves or updates the first character string and the timestamp requested by the terminal in the database of the server by the IP address of the terminal, and makes a request each time the comparison is performed. The first string cannot be repeated, and the timestamp is required to be larger than the current timestamp saved by the server-side database; when the verification is correct by the predetermined key signature, but the server-side database The saved current timestamp is not less than the timestamp of the request, intercepting the request, and modifying the current timestamp in the database of the server side and recording the timestamp of the request. Therefore, the external request of the terminal cannot be repeated frequently.

Please refer to FIG. 10 for a timing diagram of the third embodiment corresponding to FIG. 4. In the timing diagram, the APP shows the terminal, the Server shows the server, and the DB shows the database. The other embodiments of the stateless communication security signature method of the present invention can also be represented by a timing chart. Here, the timing diagram of the third embodiment is further described as an example. The timing diagrams of other embodiments are the same, as follows:

The terminal acquires the data packet of the current communication request, sorts the data packet in an agreed manner, and connects with the & symbol in the form of key=value;

The terminal acquires a predetermined key secretKey and a current timestamp timestamp, and continues to form a character string by & splicing in the form of key=value;

The terminal first uses HmacShal to encrypt the string with the value of secretKey as the predetermined key to obtain the first encrypted string, and then encrypts the first string with the 32-bit md5 digest algorithm;

The terminal adds the sign and timestamp to the header of the data packet of the current communication request;

Sending, by the terminal, the data packet to the server to implement a data request;

The server generates a second string sign': the server encrypts the predetermined key, the current timestamp, and the function parameter according to an encryption manner of the terminal to obtain a second string sign'. And compare sign' with sign:

If the comparison result is different, the terminal data request fails. The server returns a json data to notify the terminal that the request fails;

The comparison result is the same, the server side requests to obtain the data record sign and timestamp corresponding to the IP of the terminal to the database;

The database returns the requested data record to the server end;

The server determines whether the sign recorded by the database has been requested: that is, whether the sign of the data inventory record is different from the sign of the current request, and whether the data inventory record timestamp is smaller than the timestamp of the current request:

If the condition is not met, the terminal data request fails. Returning, by the server, the json data to the terminal to notify the terminal that the request fails;

Or, the sign of the data inventory record is different from the sign of the current request, but the timestamp of the request is smaller than the timestamp stored in the database;

The server replaces the value of the timestamp in the database with the timestamp of the current request; and notifies the server that the replacement is successful;

The terminal data request failed. The server returns a json data to notify the terminal that the request fails;

Satisfying the condition: the server side replaces the timestamp and sign values in the database with the timestamp and sign of the request; the database notifies the server that the replacement is successful;

The server sends the data requested by the terminal to the terminal.

Embodiment 4

Please refer to FIG. 5, which is a block diagram of a partial step of another fourth embodiment of a stateless communication security signature method according to the present invention.

The embodiment is basically the same as the first embodiment. The difference is that when the terminal time is inaccurate and the system time is often modified, in the embodiment, the stateless communication security signature method includes the steps of the first embodiment. In addition to S21-S26, it also includes:

Step S27: The server side saves or updates the first character string requested by the terminal in the database of the server end in the unit of the IP address of the terminal, and makes the requested location each time the comparison is performed. The first string cannot be repeated, so that the external request of the terminal cannot be repeated frequently.

The solution of this embodiment can still achieve the one-time aging of the request, but if the hacker or the attacker finds the processing method of the interception, the hacker or the attacker can prepare two sets of the first string sign, and the polling method requests the attack. However, it is still impossible to change other security functions of the present invention.

Embodiment 5

Please refer to FIG. 6 , which is a block diagram of a partial step of a fifth embodiment of a stateless communication security signature method according to the present invention.

The embodiment is basically the same as the first embodiment, except that the system time is not changed, and the stateless communication security signature method in the embodiment does not include the embodiment. In addition to steps S21-S26, the method further includes:

Step S27: The timestamp of the terminal is a request network timestamp or a return timestamp returned by a server that requests a server time of the server cluster dedicated to acquiring the system time, and the server end requests the first request by the terminal. The string and the timestamp store or update the database on the server side in units of IP addresses, and each time the comparison is performed, the requested first string cannot be repeatedly requested, and the timestamp is required to be compared. The current timestamp saved by the database on the server side is large, so that the external request of the terminal cannot be repeated frequently.

It should be noted that the solution of the embodiment may also implement signature one-time aging, but the mobile application emphasizes the user experience, and the solution needs to sacrifice the response speed.

Embodiment 6

Please refer to FIG. 7 , which is a block diagram of a partial step of another sixth embodiment of a stateless communication security signature method according to the present invention.

Step S27: The server side saves or updates the first character string and the timestamp requested by the terminal in a database of the server side in an IP address unit, and clears the data at a preset time. If the first character string is stored in the first character string list, if the first character string is not in the first character string list, the external request of the terminal cannot be frequently repeated.

That is, in the clear stateless communication security signature method of the present invention, the fifth embodiment and the sixth embodiment are similar, and the signature can be achieved at one time, but all need to sacrifice the response speed.

Please refer to FIG. 8 for a schematic structural diagram of a terminal provided by the present invention. The present invention also provides a terminal 80 comprising a processor 81, a transceiver 82, a memory 83, a user interface 84 and a bus interface 85, wherein:

The processor 81 is configured to read a program in the memory 83, and perform the steps in the foregoing stateless communication security signature method, such as performing the steps shown in the flow block diagram of FIG. 1:

In addition, the present invention further provides a computer readable storage medium storing a computer program, when the computer program is executed by a processor, implementing the steps in the above stateless communication security signature method provided by the present invention, such as performing FIG. 1 Steps S11 to S13 shown in the flow chart.

Please refer to FIG. 9 , which is a schematic structural diagram of a server end provided by the present invention. The invention also provides a server end, comprising: a processor 91, a transceiver 92, a memory 93, a user interface 94 and a bus interface 95, wherein:

The processor 91 is configured to read a program in the memory 93 to perform the steps in the stateless communication security signature method. For example, the steps shown in the flow diagrams of any of the embodiments of FIG. 2-7 are performed, such as the steps of performing the stateless communication security signature method shown in FIG. 2:

For example, the server-side code implementation is as follows:

Map<String,String[]> reqMap = request.getParameterMap();

SortedMap<String,Object> sortMap = new TreeMap<String,Object>();

sortMap.putAll(reqMap);

StringBuffer stringBuffer = new StringBuffer();

For (Entry<String, String[]> entry : reqMap.entrySet()) {

stringBuffer.append(entry.getKey()).append("=")

.append(entry.getValue()).append("&");

};

For example, the server side implementation code is as follows:

String signValidString = MD5.encode32(CommonCodecUtils.HmacSha1(

stringBuffer.toString(), secretKey).toString());

Finally, in the header header of the requested packet of the terminal is added:

Sign: the data packet generated above;

Timestamp: the current timestamp generated by the above.

Step S23, the server generates a second string sign':

If not the same, the data request fails;

If yes, the process proceeds to step S26.

In addition, the present invention further provides a computer readable storage medium storing a computer program, when the computer program is executed by a processor, implementing the steps in the above stateless communication security signature method provided by the present invention, such as performing FIG. 2 The steps shown in the block diagram of ~7 are as shown in steps S21 to S26 in FIG. 2, and are not described herein again.

It should be noted that, in FIG. 8 and FIG. 9, the bus architecture may include any number of interconnected buses and bridges, specifically one or more processors represented by the processors 81/91, the memory 83/93, and the bus interface 85. /95 represents the various circuits of the memory linked together. The bus architecture can also link various other circuits such as peripherals, voltage regulators, and power management circuits, which are well known in the art and, therefore, will not be further described herein. The bus interface 85/95 provides an interface. The transceiver 82/92 can be a plurality of components, including a transmitter and a receiver, providing means for communicating with various other devices on a transmission medium. For different user equipments, the user interface 84/94 may also be an interface capable of externally connecting the required devices, including but not limited to a keypad, a display, a speaker, a microphone, a joystick, and the like.

The processor 81/91 is responsible for managing the bus architecture and the usual processing, and the memory 83/93 can store the data used by the processor 81/91 in performing the operations.

In the several embodiments provided in the present application, it should be understood that the disclosed method and apparatus may be implemented in other manners. For example, the device embodiments described above are merely illustrative. For example, the division of the unit is only a logical function division. In actual implementation, there may be another division manner, for example, multiple units or components may be combined or Can be integrated into another system, or some features can be ignored or not executed. In addition, the mutual coupling or direct coupling or communication connection shown or discussed may be an indirect coupling or communication connection through some interface, device or unit, and may be in an electrical, mechanical or other form.

In addition, each functional unit in each embodiment of the present invention may be integrated into one processing unit, or each unit may be physically included separately, or two or more units may be integrated into one unit. The above integrated unit can be implemented in the form of hardware or in the form of hardware plus software functional units.

The above-described integrated unit implemented in the form of a software functional unit can be stored in a computer readable storage medium. The above software functional unit is stored in a storage medium and includes a plurality of instructions for causing a computer device (which may be a personal computer, a server, or a network device, etc.) to perform part of the steps of the transceiving method of the various embodiments of the present invention. The foregoing storage medium includes: a U disk, a mobile hard disk, a Read-Only Memory (ROM), a Random Access Memory (RAM), a disk or an optical disk, and the like, which can store program codes. Medium.

It should be noted that the various embodiments described above with reference to the accompanying drawings are only to illustrate the invention and not to limit the scope of the invention, and those of ordinary skill in the art should understand that without departing from the spirit and scope of the invention Modifications or equivalents to the invention are intended to be included within the scope of the invention. In addition, unless the context indicates otherwise, words in the singular include plural and vice versa. In addition, all or a portion of any embodiment can be used in combination with all or a portion of any other embodiment, unless otherwise stated.

Compared with the related art, in the stateless communication security signature method of the present invention, the terminal sorts the function parameters in the data packet of the current request by specifying, before combining the predetermined key and the current a timestamp, which in turn adopts a Hmacsha1 encryption algorithm and an md5 digest encryption algorithm to obtain a 32-bit sequence, which is placed in the header of the requested data packet as the first character string; the server end uses the predetermined key, the current The timestamp and the function parameter are encrypted according to the encryption mode of the terminal to obtain a second character string, and the verification of the terminal request is implemented by comparing the first character string and the second character string, and the same is passed. The security of the above method in the common Internet application, especially when the devices of the application systems of various smart device manufacturers need to communicate statelessly with the server end of the Internet, the security is better and the reliability is strong.

The above is only the embodiment of the present invention, and is not intended to limit the scope of the invention, and the equivalent structure or equivalent process transformation of the present invention and the contents of the drawings may be directly or indirectly applied to other related technologies. The fields are all included in the scope of patent protection of the present invention.

Claims

A method for securely signing a stateless communication, characterized in that the method comprises the following steps:

The terminal stores a predetermined key that is unified with the server side;

The terminal receives data corresponding to the communication request sent by the server.

The stateless communication security signature method according to claim 1, wherein in the step of the terminal transmitting a communication request to the server, the two encryption methods sequentially adopt an HmacShal encryption algorithm and an md5 digest encryption algorithm.

3. The stateless communication security signature method according to claim 2, wherein the first character string is a 32-bit sequence.

4. A method for secure signature of a stateless communication, characterized in that the method comprises the following steps:

The server side defines a predetermined key that is unified with the terminal;

The stateless communication security signature method according to claim 4, wherein in the data packet in which the server end receives the communication request sent by the terminal, the two encryption methods adopt the HmacShal encryption algorithm and the md5 abstraction in sequence. Encryption Algorithm.

6. The stateless communication security signature method according to claim 5, wherein the first character string is a 32-bit sequence.

The stateless communication security signature method according to claim 6, wherein in the step of generating a second character string by the server, the current time stamp is received by the server from the server Extracted from the header, the function parameter is obtained from an interface that the server end establishes communication with the terminal.

The stateless communication security signature method according to claim 4, further comprising:

12. The stateless communication security signature method according to claim 4, further comprising:

13. A terminal, comprising: a processor, a transceiver, a memory, a user interface, and a bus interface, wherein:

The processor is configured to read a program in the memory, and perform the steps in the stateless communication security signature method according to any one of claims 1 to 3.

14. A server terminal, comprising: a processor, a transceiver, a memory, a user interface, and a bus interface, wherein:

The processor is configured to read a program in the memory, and perform the steps in the stateless communication security signature method according to any one of claims 4 to 12.

A computer readable storage medium storing a computer program, wherein the computer program is executed by a processor to implement the stateless communication security signature method according to any one of claims 1 to 3. A step of.

A computer readable storage medium storing a computer program, wherein the computer program is executed by a processor to implement the stateless communication security signature method according to any one of claims 4 to 12. A step of.