WO2019148717A1

WO2019148717A1 - Device and method for verifying request validity, and computer readable storage medium

Info

Publication number: WO2019148717A1
Application number: PCT/CN2018/089183
Authority: WO
Inventors: 张迪
Original assignee: 平安科技（深圳）有限公司
Priority date: 2018-02-05
Filing date: 2018-05-31
Publication date: 2019-08-08
Also published as: CN108449315B; CN108449315A

Abstract

The present application discloses a device for verifying request validity, comprising a memory and a processor, wherein the memory stores a validity verification program executable on the processor, and when the program is executed by the processor, the following steps are implemented: when an interface call request sent by a server in a server group is received, obtaining, from the interface call request, host information of the server, requested interface information and registration credential information; decrypting the registration credential information, and obtaining registered host information and registered interface information comprised in the registration credential information; if the host information of the server is consistent with the registered host information and the requested interface information is consistent with the registered interface information, determining that the interface call request is valid. The present application further provides a method for verifying request validity and a computer readable storage medium. The present application simplifies the process of verifying request validity, improving the response to the interface call.

Description

Checking device, method and computer readable storage medium for requesting legality

The present application is based on the priority of the Chinese Patent Application entitled "Registration Device, Method and Computer-Readable Storage Media for Requesting Legality", which is filed on February 5, 2018, with the application number of 2011018109486.0, which is filed on February 5, 2018. The entire content of the application is incorporated herein by reference.

Technical field

The present application relates to the field of data communication technologies, and in particular, to a verification apparatus, method, and computer readable storage medium for requesting legality.

Background technique

In the server group of the business system, different servers provide different services for the operation of the business system, and the servers in the group provide services by opening some interfaces, and other servers can implement corresponding functions by calling these interfaces.

However, not every server has the right to call these interfaces. In the prior art, an authentication server is generally set to control the permissions of each server, and the calls of the interfaces of the servers to other servers are pre-configured. Permission, and store permission data, each time the server receives an interface call request sent by another server, the server needs to send the request to the authentication server, and the authentication server verifies the permission of the request according to the stored permission data, and The verification result is returned to the server, and the server responds to the interface call request according to the verification result. The verification process in this manner is cumbersome, and each request sent by the server is verified at the third-party authentication server, which not only causes The authentication server needs to maintain a large amount of rights management data, and the response to the interface call request is slow and the processing efficiency is low due to the frequent call of the interface between the servers.

Summary of the invention

The present application provides a verification apparatus, method and computer readable storage medium for requesting legality, the main purpose of which is to simplify the verification process of request validity and improve the response speed of the interface call.

To achieve the above object, the present application provides a verification apparatus for requesting legality, the apparatus comprising a memory and a processor, wherein the memory stores a legality verification program executable on the processor, the legal The verification procedure is implemented by the processor to implement the following steps:

Receiving, by the interface call request, the host information of the server, the requested interface information, and the registration credential information, where the registration voucher information is obtained by the school, when receiving an interface call request sent by a server in the server group The inspection device is issued;

Decrypting the registration credential information, and acquiring registration host information and registration interface information included in the registration credential information;

If the host information of the server is consistent with the registered host information and the requested interface information is consistent with the registration interface information, it is determined that the interface call request is legal.

In addition, to achieve the above object, the present application further provides a verification method for request legality, and the method includes:

Receiving, by the interface call request, the host information of the server, the requested interface information, and the registration credential information, where the registration credential information is requested by the interface, when receiving an interface call request sent by a server in the server group The server where it is delivered;

In addition, in order to achieve the above object, the present application further provides a computer readable storage medium having a legality verification program stored thereon, the legality verification program being configurable by one or more processors The steps of the verification method performed to implement the legality of the request as described above.

The verification device, the method, and the computer-readable storage medium of the request for validity of the request, when the server sends an interface call request to the server where the requested interface is located, the request carries the registration certificate sent by the server where the requested interface is located. Information, when the server where the requested interface receives the interface call request sent by another server, obtains the host information of the server, the requested interface information, and the registration credential information from the interface call request, and decrypts the registration credential information to obtain the The registration host information and the registration interface information, if the host information and the interface information in the request are consistent with the registered host information and the registration interface information in the registration credential information, determine that the interface call request is legal, and the solution in the present application directly passes the interface. Invoking the information contained in the request itself for verification, and the registration voucher information is sent by the server where the requested interface is encrypted, and is decrypted by the same server during verification, thereby ensuring that the registration voucher information is not Tampered and not It needs to be verified by a third-party authentication server, and does not need to maintain a large amount of permission data, which simplifies the verification process of request validity, thereby improving the response speed of the interface call.

DRAWINGS

1 is a schematic diagram of a preferred embodiment of a verification device for requesting legality;

2 is a schematic diagram of a program module of a legality verification program in an embodiment of a verification device for requesting legality;

3 is a flow chart of a preferred embodiment of a verification method for requesting legality in the present application.

The implementation, functional features and advantages of the present application will be further described with reference to the accompanying drawings.

Detailed ways

It is understood that the specific embodiments described herein are merely illustrative of the application and are not intended to be limiting.

The application provides a verification device for requesting legality. Referring to FIG. 1, a schematic diagram of a preferred embodiment of a verification apparatus for requesting legality is provided.

In this embodiment, the verification device requesting the validity may be any one of the server groups. The verification device for the validity of the request includes at least a memory 11, a processor 12, a communication bus 13, and a network interface 14.

The memory 11 includes at least one type of readable storage medium including a flash memory, a hard disk, a multimedia card, a card type memory (for example, an SD or DX memory, etc.), a magnetic memory, a magnetic disk, an optical disk, and the like. The memory 11 may in some embodiments be an internal storage unit of a verification device requesting legitimacy, such as a hard disk of the verification device requesting legality. In other embodiments, the memory 11 may also be an external storage device that requests a verification device for legality, such as a plug-in hard disk equipped with a verification device for requesting legality, a smart memory card (SMC), Secure Digital (SD) card, Flash Card, etc. Further, the memory 11 may also include both an internal storage unit of the verification device requesting legality and an external storage device. The memory 11 can be used not only for storing application software installed in a verification device requesting legality and various types of data, such as codes of a legality verification program, but also for temporarily storing data that has been output or is to be output.

The processor 12, in some embodiments, may be a Central Processing Unit (CPU), controller, microcontroller, microprocessor or other data processing chip for running program code or processing stored in the memory 11. Data, such as performing a legality verification program.

Communication bus 13 is used to implement connection communication between these components.

The network interface 14 can optionally include a standard wired interface, a wireless interface (such as a WI-FI interface), and is typically used to establish a communication connection between the device and other electronic devices.

Figure 1 shows only the verification device with the legality verification procedure and the request legitimacy of components 11-14, but it should be understood that not all of the illustrated components are required to be implemented, alternative implementations may be more or more Less components.

Optionally, the device may further include a user interface, the user interface may include a display, an input unit such as a keyboard, and the optional user interface may further include a standard wired interface and a wireless interface. Optionally, in some embodiments, the display may be an LED display, a liquid crystal display, a touch-sensitive liquid crystal display, an OLED (Organic Light-Emitting Diode) touch sensor, or the like. The display may also be suitably referred to as a display screen or display unit for displaying information processed in a verification device requesting legality and a user interface for displaying visualization.

In the device embodiment shown in FIG. 1, a memory check program is stored in the memory 11; when the processor 12 executes the legality check program stored in the memory 11, the following steps are implemented:

Receiving, by the interface call request, the host information of the server, the requested interface information, and the registration credential information, where the registration voucher information is obtained by the school, when receiving an interface call request sent by a server in the server group The inspection device is issued.

In the following solution in this embodiment, a server configured with an interface for other server calls is called a verification device, and the verification device itself is a server in a server group, and may also be sent to other servers in the server group. The interface invokes the request, at which point the requested server acts as a check device.

The verification device pre-distributes the registration credential information to other servers that have permission to invoke the interface provided by the server. For example, the verification device has three interfaces API1, API2, and API3, and there are multiple servers in the server group, assuming a server group. The server A has the right to invoke the interface API1, and the registration of the right to invoke the interface API1 of the server A is completed in the verification device, and the corresponding registration voucher information is generated and sent to the server A. The registration credential information includes host information of the server A and interface information for identifying the interface API1. For example, the host information of the server A and the interface information for identifying the interface API1 are encrypted according to an encryption algorithm to generate registration credential information.

Wherein, regarding the registration of the authority to invoke the interface API1 to the server A in the verification device, there may be various implementation manners, for example, in the verification device, according to the information of each interface and the host information of the server that can call these interfaces, The registration credential information is generated in one-to-one correspondence and sent to each server for storage; or, in other embodiments, the server initiates a registration request to the verification device before the interface is first called, and the verification device responds to the registration request according to the registration request. The server's call permission is registered.

As an implementation manner, when receiving the registration request sent by the server, the registration host information and the registration interface information are obtained from the registration request; and the registration host information and the registration interface information are encrypted according to a preset encryption algorithm to obtain a ciphertext registration certificate. And performing a displacement process on the characters in the ciphertext registration voucher according to the preset first displacement rule, using the result of the displacement process as the registration voucher information; and transmitting the registration voucher information to the server for the server The registration credential information is added to the originating interface call request when the interface call request is initiated. The preset encryption algorithm can be implemented in various embodiments, such as AES (Advanced Encryption Standard) algorithm, BASE64 algorithm, and the like. In addition, before encrypting the registered host information and the registration interface information, the plurality of information included in the registered host information and the registration interface information are combined, and the information can be distinguished by using "|". The first displacement rule in this embodiment refers to changing the position of some characters in the encrypted character string to prevent other devices from cracking the encryption result and tampering with the registration voucher information. The first displacement rule can have various embodiments, for example, exchanging odd-numbered bits of a string with even-numbered bits that are one bit larger, or moving the position of a character at a specific position in the string, and the like. In other embodiments, it is also possible to encrypt using only the encryption algorithm, and the displacement processing is performed without using the displacement rule.

It can be understood that a plurality of registration credential information may be stored in one server, and the registration credential information is respectively corresponding to each of the callable interfaces. When the server needs to invoke an interface provided by another server to perform a corresponding operation, the server obtains registration credential information corresponding to the interface to be called and adds it to the interface call request. When receiving the interface call request sent by another server in the server group, the verification device acquires the host information of the sender server, the requested interface information, and the registration credential information from the request. The host information includes information such as a host name and a user name.

It should be noted that, in some embodiments, the interface provided by the server may be a restful interface based on a REST (Representational State Transfer) framework, and the REST is an HTTP-based (Hyper Text Transfer Protocol). Protocol) The REST software architecture, therefore, the interface call request sent by the server is an HTTP request.

Decrypting the registration credential information, and acquiring registration host information and registration interface information included in the registration credential information.

The verification device decrypts the obtained registration voucher information, obtains the registration host information and the registration interface information included in the registration voucher information, and determines whether the interface information in the interface call request is consistent with the registration interface information, and whether the host information is related to the registration host. The information is consistent. If the information is consistent, the interface call request is considered to be legal. Otherwise, the interface call request is invalid, and the response information that the request is invalid is sent to the server. Specifically, regarding the decryption operation of the registration credential information, the verification device is required to perform decryption according to a decryption algorithm corresponding to the encryption algorithm used in registration, and the used key is stored in the verification device, and each verification device has The unique key, the requesting server can not decrypt the received registration voucher information, and can not tamper with the registration voucher information, thus ensuring the security of the information, thereby ensuring the accuracy of the legality verification method. . Specifically, the step of decrypting the registration credential information, and acquiring the registration host information and the registration interface information included in the registration credential information includes: following a second displacement rule pair corresponding to the first displacement rule The character in the registration voucher information is subjected to a displacement process to obtain a ciphertext registration voucher; the ciphertext registration voucher is decrypted according to a preset decryption algorithm corresponding to the preset encryption algorithm, and the registration host information and registration are obtained. Interface information. At the time of decryption, the registration credential information is decrypted in accordance with the reverse process of the encryption operation to obtain the registered host information and the registration interface information.

Optionally, in some embodiments, the legality verification program may be further executed by the processor to obtain registration host information and the registration request from the registration request when receiving the registration request sent by the server After the step of registering the interface information, the following steps are also implemented:

Acquiring the user information from the registration request, and determining whether there is an association relationship between the user information and the registration interface information according to a mapping relationship between the preset user information and the interface information; if yes, performing encryption according to a preset Encrypting the registered host information to obtain a first ciphertext registration voucher, and performing a process of displacing the characters in the first ciphertext registration voucher according to a preset variogram; if not, proceeding to the The server returns a message indicating that the registration failed.

In an embodiment in which the registration request is initiated by the server, the mapping relationship between the user information and the interface information is pre-configured in the verification device, and when the user information included in the registration request has an association relationship with the requested interface, The registration step will continue, otherwise the login failure message will be returned to the server, prompting the server that the registration request is invalid.

Optionally, as an implementation manner, if the host information of the server is inconsistent with the registered host information, and/or the requested interface information is inconsistent with the registration interface information, determining that the interface call request is not legitimate. The verification device rejects the server's call to the interface and sends a prompt message to the server that the call failed.

Further, as an implementation manner, the legality verification program may be further executed by the processor to implement the following steps after determining that the interface call request is legal:

Invoking an interface corresponding to the interface information, performing a business operation corresponding to the interface call request, and returning the operation result to the server.

The interface call request sent by the server also carries a service operation that needs to be performed by the method provided by the interface. After determining that the interface call request is legal, the operation operation is performed by the operation method provided by the interface, and the operation result is obtained and sent to the server. .

In the verification device for requesting the validity of the request, when the server sends an interface call request to the server where the requested interface is located, the server carries the registration credential information sent by the server where the requested interface is located, where the requested interface is located. When the server (ie, the verification device) receives the interface call request sent by another server, the host information of the server, the requested interface information, and the registration credential information are obtained from the interface call request, and the registration credential information is decrypted to obtain the included Registering the host information and registering the interface information. If the host information and the interface information in the request are consistent with the registered host information and the registration interface information in the registration credential information, it is determined that the interface call request is legal. In the solution of the present application, the interface is directly invoked through the interface. The information contained in the request itself is verified, and the registration voucher information is sent by the server where the requested interface is encrypted, and is decrypted by the same server during verification, thereby ensuring that the registration voucher information is not Tampering, and does not need to pass the third Check the authentication server does not need to maintain a large number of permissions data, simplifying the process of verification of the legality of the request, and to improve the response speed of the interface calls.

Optionally, in other embodiments, the legality verification program may also be divided into one or more modules, and one or more modules are stored in the memory 11 and executed by one or more processors (this implementation) For example, the processor 12) is executed to complete the application. The module referred to in the present application refers to a series of computer program instruction segments capable of performing a specific function, and is used to describe the legality verification program in the verification device for requesting legality. The implementation process.

For example, as shown in FIG. 2, it is a schematic diagram of a program module of a legality verification program in an embodiment of a verification device for requesting validity of the present application. In this embodiment, the legality verification program may be divided into the acquisition module 10 Decryption module 20 and execution module 30, illustratively:

The obtaining module 10 is configured to: when receiving an interface call request sent by a server in the server group, obtain host information, requested interface information, and registration credential information of the server from the interface call request, where the registration The voucher information is sent by the verification device;

The decryption module 20 is configured to: perform decryption processing on the registration credential information, and obtain registration host information and registration interface information included in the registration credential information;

The execution module 30 is configured to: if the host information of the server is consistent with the registered host information, and the requested interface information is consistent with the registration interface information, determine that the interface call request is legal.

The functions or operation steps of the above-mentioned acquisition module 10, the decryption module 20, and the execution module 30 are substantially the same as those of the foregoing embodiment, and are not described herein again.

In addition, the present application also provides a verification method for requesting legality. Referring to FIG. 3, it is a flowchart of a preferred embodiment of the verification method for legality of the request of the present application. The method may be performed by a device, which may be implemented by software and/or hardware, and the method of the present embodiment will be described hereinafter with a request legality verification device as an execution body of the method.

In this embodiment, the verification method of the request validity includes:

Step S10, when receiving an interface call request sent by a server in the server group, obtaining host information, requested interface information, and registration credential information of the server from the interface call request, where the registration credential information is The server where the requested interface is delivered is delivered.

In the following solution in this embodiment, a server configured with an interface for other server calls is called a verification device, and the verification device itself is a server in a server group, and may also be sent to other servers in the server group. The interface invokes the request, at which point the requested server acts as a check device. The verification device pre-distributes the registration credential information to other servers that have permission to invoke the interface provided by the server. For example, the verification device has three interfaces API1, API2, and API3, and there are multiple servers in the server group, assuming a server group. The server A has the right to invoke the interface API1, and the registration of the right to invoke the interface API1 of the server A is completed in the verification device, and the corresponding registration voucher information is generated and sent to the server A. The registration credential information includes host information of the server A and interface information for identifying the interface API1. For example, the host information of the server A and the interface information for identifying the interface API1 are encrypted according to an encryption algorithm to generate registration credential information. Wherein, regarding the registration of the authority to invoke the interface API1 to the server A in the verification device, there may be various implementation manners, for example, in the verification device, according to the information of each interface and the host information of the server that can call these interfaces, The registration credential information is generated in one-to-one correspondence and sent to each server for storage; or, in other embodiments, the server initiates a registration request to the verification device before the interface is first called, and the verification device responds to the registration request according to the registration request. The server's call permission is registered.

As an implementation manner, when receiving the registration request sent by the server, the registration host information and the registration interface information are obtained from the registration request; and the registration host information and the registration interface information are encrypted according to a preset encryption algorithm to obtain a ciphertext registration certificate. And performing a displacement process on the characters in the ciphertext registration voucher according to the preset first displacement rule, using the result of the displacement process as the registration voucher information; and transmitting the registration voucher information to the server for the server The registration credential information is added to the originating interface call request when the interface call request is initiated. The preset encryption algorithm can have multiple implementations, AES (Advanced Encryption Standard) algorithm, BASE64 algorithm, and the like. In addition, before encrypting the registered host information and the registration interface information, the plurality of information included in the registered host information and the registration interface information are combined, and the information can be distinguished by using "|". The first displacement rule in this embodiment refers to changing the position of some characters in the encrypted character string to prevent other devices from cracking the encryption result and tampering with the registration voucher information. The first displacement rule can have various embodiments, for example, exchanging odd-numbered bits of a string with even-numbered bits that are one bit larger, or moving the position of a character at a specific position in the string, and the like. In other embodiments, it is also possible to encrypt using only the encryption algorithm, and the displacement processing is performed without using the displacement rule.

Step S20: Perform decryption processing on the registration credential information, and obtain registration host information and registration interface information included in the registration credential information.

Step S30: If the host information of the server is consistent with the registered host information and the requested interface information is consistent with the registration interface information, it is determined that the interface call request is legal.

Optionally, in some embodiments, after the step of obtaining the registration host information and the registration interface information from the registration request when receiving the registration request sent by the server, the method further includes the following steps:

Further, as an implementation manner, after determining that the interface call request is legal, the method further includes the following steps:

In the verification method of the request validity of the present embodiment, when the server sends an interface call request to the server where the requested interface is located, the server carries the registration credential information sent by the server where the requested interface is located, where the requested interface is located. When the server (ie, the verification device) receives the interface call request sent by another server, the host information of the server, the requested interface information, and the registration credential information are obtained from the interface call request, and the registration credential information is decrypted to obtain the included Registering the host information and registering the interface information. If the host information and the interface information in the request are consistent with the registered host information and the registration interface information in the registration credential information, it is determined that the interface call request is legal. In the solution of the present application, the interface is directly invoked through the interface. The information contained in the request itself is verified, and the registration voucher information is sent by the server where the requested interface is encrypted, and is decrypted by the same server during verification, thereby ensuring that the registration voucher information is not Tampering, and does not need to pass the third Check the authentication server does not need to maintain a large number of permissions data, simplifying the process of verification of the legality of the request, and to improve the response speed of the interface calls.

In addition, the embodiment of the present application further provides a computer readable storage medium, where the legality verification program is stored, and the legality verification program can be executed by one or more processors, Implement the following operations:

The specific embodiment of the computer readable storage medium of the present application is substantially the same as the foregoing embodiment of the verification apparatus and method for requesting legality, and will not be described herein.

It should be noted that the foregoing serial numbers of the embodiments of the present application are merely for the description, and do not represent the advantages and disadvantages of the embodiments. And the terms "including", "comprising", or any other variations thereof are intended to encompass a non-exclusive inclusion, such that a process, apparatus, article, or method that comprises a plurality of elements includes not only those elements but also Other elements listed, or elements that are inherent to such a process, device, item, or method. An element that is defined by the phrase "comprising a ..." does not exclude the presence of additional equivalent elements in the process, the device, the item, or the method that comprises the element.

Through the description of the above embodiments, those skilled in the art can clearly understand that the foregoing embodiment method can be implemented by means of software plus a necessary general hardware platform, and of course, can also be through hardware, but in many cases, the former is better. Implementation. Based on such understanding, the technical solution of the present application, which is essential or contributes to the prior art, may be embodied in the form of a software product stored in a storage medium (such as ROM/RAM as described above). , a disk, an optical disk, including a number of instructions for causing a terminal device (which may be a mobile phone, a computer, a server, or a network device, etc.) to perform the methods described in the various embodiments of the present application.

The above is only a preferred embodiment of the present application, and is not intended to limit the scope of the patent application, and the equivalent structure or equivalent process transformations made by the specification and the drawings of the present application, or directly or indirectly applied to other related technical fields. The same is included in the scope of patent protection of this application.

Claims

A verification device for requesting legality, characterized in that the device comprises a memory and a processor, and the memory stores a legality verification program executable on the processor, the legality check The program implements the following steps when executed by the processor:

Receiving, by the interface call request, the host information of the server, the requested interface information, and the registration credential information, where the registration voucher information is obtained by the school, when receiving an interface call request sent by a server in the server group The inspection device is issued;

Decrypting the registration credential information, and acquiring registration host information and registration interface information included in the registration credential information;

If the host information of the server is consistent with the registered host information and the requested interface information is consistent with the registration interface information, it is determined that the interface call request is legal.
The apparatus for verifying the validity of a request according to claim 1, wherein the legality verification program is further executable by the processor to perform decryption processing on the registration credential information to obtain After the step of registering the host information and registering the interface information included in the registration credential information, the following steps are also implemented:

If the host information of the server is inconsistent with the registered host information, and/or the requested interface information is inconsistent with the registered interface information, it is determined that the interface call request is invalid.
The apparatus for verifying the validity of a request according to claim 1, wherein said legality verification program is further executable by said processor to be transmitted by said server in said group of receiving servers When the interface invokes the request, before the step of obtaining the host information of the server, the requested interface information, and the registration credential information from the interface call request, the following steps are also implemented:

Obtaining registration host information and registration interface information from the registration request when receiving the registration request sent by the server;

Encrypting the registered host information and the registration interface information according to a preset encryption algorithm to obtain a ciphertext registration certificate, and performing a displacement processing on the characters in the ciphertext registration voucher according to a preset first displacement rule, and displacing the characters The result of the processing is used as registration voucher information;

Sending the registration credential information to the server, for the server to add the registration credential information to the originating interface call request when initiating an interface call request.
The apparatus for verifying the validity of a request according to claim 2, wherein said legality verification program is further executable by said processor to be transmitted by said server in said group of receiving servers When the interface invokes the request, before the step of obtaining the host information of the server, the requested interface information, and the registration credential information from the interface call request, the following steps are also implemented:

Obtaining registration host information and registration interface information from the registration request when receiving the registration request sent by the server;

Encrypting the registered host information and the registration interface information according to a preset encryption algorithm to obtain a ciphertext registration certificate, and performing a displacement processing on the characters in the ciphertext registration voucher according to a preset first displacement rule, and displacing the characters The result of the processing is used as registration voucher information;

Sending the registration credential information to the server, for the server to add the registration credential information to the originating interface call request when initiating an interface call request.
The apparatus for verifying the validity of a request according to claim 3, wherein said legality verification program is further executable by said processor to perform said registration request sent by said server After obtaining the registration host information and the registration interface information from the registration request, the following steps are also implemented:

Obtaining the user information from the registration request, and determining whether there is an association relationship between the user information and the registration interface information according to a mapping relationship between the preset user information and the interface information;

If yes, performing the step of performing encryption process on the registration host information according to the preset encryption algorithm to obtain the first ciphertext registration certificate, and performing the displacement processing on the characters in the first ciphertext registration voucher according to the preset displacement rule ;

If not, the prompt information of the registration failure is returned to the server.
The apparatus for verifying the validity of the request according to claim 3, wherein the step of decrypting the registration credential information, and acquiring the registered host information and the registration interface information included in the registration credential information includes: :

Performing a displacement process on the characters in the registration voucher information according to the second displacement rule corresponding to the first displacement rule to obtain a ciphertext registration voucher;

Decrypting the ciphertext registration voucher according to a preset decryption algorithm corresponding to the preset encryption algorithm, and acquiring registration host information and registration interface information.
The apparatus for verifying the validity of the request according to claim 5, wherein the step of decrypting the registration credential information, and acquiring the registered host information and the registration interface information included in the registration credential information includes: :

Performing a displacement process on the characters in the registration voucher information according to the second displacement rule corresponding to the first displacement rule to obtain a ciphertext registration voucher;

Decrypting the ciphertext registration voucher according to a preset decryption algorithm corresponding to the preset encryption algorithm, and acquiring registration host information and registration interface information.
A verification method for requesting legality, characterized in that the method comprises:

Receiving, by the interface call request, the host information of the server, the requested interface information, and the registration credential information, where the registration credential information is requested by the interface, when receiving an interface call request sent by a server in the server group The server where it is delivered;

Decrypting the registration credential information, and acquiring registration host information and registration interface information included in the registration credential information;

If the host information of the server is consistent with the registered host information and the requested interface information is consistent with the registration interface information, it is determined that the interface call request is legal.
The method for verifying the validity of a request according to claim 8, wherein the step of decrypting the registration voucher information and acquiring the registration host information and the registration interface information included in the registration voucher information The method further includes:

If the host information of the server is inconsistent with the registered host information, and/or the requested interface information is inconsistent with the registered interface information, it is determined that the interface call request is invalid.
The method for verifying the validity of a request according to claim 8, wherein when the interface call request sent by the server in the server group is received, the host information of the server is obtained from the interface call request. Before the step of requesting interface information and registering credential information, the method further includes the following steps:

Obtaining registration host information and registration interface information from the registration request when receiving the registration request sent by the server;

Encrypting the registered host information and the registration interface information according to a preset encryption algorithm to obtain a ciphertext registration certificate, and performing a displacement processing on the characters in the ciphertext registration voucher according to a preset first displacement rule, and displacing the characters The result of the processing is used as registration voucher information;

Sending the registration credential information to the server, for the server to add the registration credential information to the originating interface call request when initiating an interface call request.
The method for verifying the validity of a request according to claim 9, wherein when the interface call request sent by the server in the server group is received, the host information of the server is obtained from the interface call request. Before the step of requesting interface information and registering credential information, the method further includes the following steps:

Obtaining registration host information and registration interface information from the registration request when receiving the registration request sent by the server;

Encrypting the registered host information and the registration interface information according to a preset encryption algorithm to obtain a ciphertext registration certificate, and performing a displacement processing on the characters in the ciphertext registration voucher according to a preset first displacement rule, and displacing the characters The result of the processing is used as registration voucher information;

Sending the registration credential information to the server, for the server to add the registration credential information to the originating interface call request when initiating an interface call request.
The method for verifying the validity of a request according to claim 8, wherein the step of acquiring the registration host information and the registration interface information from the registration request after receiving the registration request sent by the server The method further includes the following steps:

Obtaining the user information from the registration request, and determining whether there is an association relationship between the user information and the registration interface information according to a mapping relationship between the preset user information and the interface information;

If yes, performing the step of performing encryption process on the registration host information according to the preset encryption algorithm to obtain the first ciphertext registration certificate, and performing the displacement processing on the characters in the first ciphertext registration voucher according to the preset displacement rule ;

If not, the prompt information of the registration failure is returned to the server.
The method for verifying the validity of a request according to claim 10, wherein the step of decrypting the registration voucher information, and acquiring the registration host information and the registration interface information included in the registration voucher information includes: :

Performing a displacement process on the characters in the registration voucher information according to the second displacement rule corresponding to the first displacement rule to obtain a ciphertext registration voucher;

Decrypting the ciphertext registration voucher according to a preset decryption algorithm corresponding to the preset encryption algorithm, and acquiring registration host information and registration interface information.
The method for verifying the validity of a request according to claim 12, wherein the step of decrypting the registration voucher information, and acquiring the registration host information and the registration interface information included in the registration voucher information includes: :

And locating characters in the registration credential information according to a second variability rule corresponding to the first variability rule to obtain a ciphertext registration voucher;

Decrypting the ciphertext registration voucher according to a preset decryption algorithm corresponding to the preset encryption algorithm, and acquiring registration host information and registration interface information.
A computer readable storage medium, wherein the computer readable storage medium stores a legality verification program, and the legality verification program can be executed by one or more processors to implement the following steps:

Receiving, by the interface call request, the host information of the server, the requested interface information, and the registration credential information, where the registration voucher information is obtained by the school, when receiving an interface call request sent by a server in the server group The inspection device is issued;

Decrypting the registration credential information, and acquiring registration host information and registration interface information included in the registration credential information;

If the host information of the server is consistent with the registered host information and the requested interface information is consistent with the registration interface information, it is determined that the interface call request is legal.
A computer readable storage medium according to claim 15, wherein said legality verification program is further executable by said processor to perform said decryption processing on said registration voucher information to obtain said After the steps of registering the host information and registering the interface information included in the registration credential information, the following steps are also implemented:

If the host information of the server is inconsistent with the registered host information, and/or the requested interface information is inconsistent with the registered interface information, it is determined that the interface call request is invalid.
A computer readable storage medium as recited in claim 15, wherein said legality verification program is further executable by said processor to invoke an interface sent by said server in said receiving server group At the request, before the step of obtaining the host information of the server, the requested interface information, and the registration credential information from the interface call request, the following steps are also implemented:

Obtaining registration host information and registration interface information from the registration request when receiving the registration request sent by the server;

Encrypting the registered host information and the registration interface information according to a preset encryption algorithm to obtain a ciphertext registration certificate, and performing a displacement processing on the characters in the ciphertext registration voucher according to a preset first displacement rule, and displacing the characters The result of the processing is used as registration voucher information;

Sending the registration credential information to the server, for the server to add the registration credential information to the originating interface call request when initiating an interface call request.
The computer readable storage medium of claim 16 wherein said legality verification program is further executable by said processor to invoke an interface sent by said server in said receiving server group At the request, before the step of obtaining the host information of the server, the requested interface information, and the registration credential information from the interface call request, the following steps are also implemented:

Obtaining registration host information and registration interface information from the registration request when receiving the registration request sent by the server;

Encrypting the registered host information and the registration interface information according to a preset encryption algorithm to obtain a ciphertext registration certificate, and performing a displacement processing on the characters in the ciphertext registration voucher according to a preset first displacement rule, and displacing the characters The result of the processing is used as registration voucher information;

Sending the registration credential information to the server, for the server to add the registration credential information to the originating interface call request when initiating an interface call request.
The computer readable storage medium of claim 17, wherein the legality verification program is further executable by the processor to, upon receiving the registration request sent by the server, After the step of obtaining the registration host information and the registration interface information in the registration request, the following steps are also implemented:

Obtaining the user information from the registration request, and determining whether there is an association relationship between the user information and the registration interface information according to a mapping relationship between the preset user information and the interface information;

If yes, performing the step of performing encryption process on the registration host information according to the preset encryption algorithm to obtain the first ciphertext registration certificate, and performing the displacement processing on the characters in the first ciphertext registration voucher according to the preset displacement rule ;

If not, the prompt information of the registration failure is returned to the server.
The computer readable storage medium according to claim 17, wherein the step of decrypting the registration voucher information and acquiring the registration host information and the registration interface information included in the registration voucher information comprises:

Performing a displacement process on the characters in the registration voucher information according to the second displacement rule corresponding to the first displacement rule to obtain a ciphertext registration voucher;

Decrypting the ciphertext registration voucher according to a preset decryption algorithm corresponding to the preset encryption algorithm, and acquiring registration host information and registration interface information.